February 2012 - Test - lists.nanog.org

IPv6 explicit BGP group configs
by keith tokash 08 Feb '12

08 Feb '12

Hi, I'm prepping an environment for v6 and I'm wondering what, if any, benefit there is to splitting v4 and v6 into separate groups. We're running Junipers and things are fairly neat and ordered; we have multiple links to a few providers in many sites, so we group them and apply the policies at the group level. We could stick the new v6 neighbors into the same group and apply the policies at the neighbor level, or create new groups (i.e. Level3 and Level3v6). This might sound a little nit-picky, but I'm concerned that there's a nuance I'm not thinking of right now and I don't want to be "that guy" who puts something in place and is cursed for a decade. Thanks, Keith Tokash

4 4

2012.02.07 NANOG54 day 2 notes, afternoon session
by Matthew Petach 08 Feb '12

08 Feb '12

I'm so sorry; I thought I would have time to send these out after the peering track, but I got pulled into some conversations which ended up lasting until 2330 hours, and ran right on through the social event. So, the afternoon session notes ended up having to wait until I got back to my room. Apologies for the delay, they're now up at http://kestrel3.netflight.com/2012.02.07-nanog54-afternoon-session.txt and apache has been restarted on the box for those who tried to get the notes earlier and got nothing but a timeout. Thanks! Matt

1 0

Anyone from Kraus Electronic/CableTV lurking?
by graham 08 Feb '12

08 Feb '12

I tried to reach Kraus Electronic / Cable TV through various means. Anyone know how to reach their NOC? They¹re announcing 12.198.32.0/20 (they only been swiped a /22), which is getting into my 12.198.40.0/22 assignment. On hold with AT&T, of course. -graham

2 2

2011 Worldwide Infrastructure Report available for download.
by Dobbins, Roland 08 Feb '12

08 Feb '12

[Apologies if you've already seen this announcement in other forums.] We've just posted the 2011 Worldwide Infrastructure Security Report for download at this URL: <http://www.arbornetworks.com/report> This year's WWISR contains responses and data from 114 network operators in all major geographical regions. The WWISR is based upon input from the global operational community, and, as such, is unique in its focus on the operational security aspects of public-facing networks. Many of you contributed to the survey which forms the foundation of the report; as always, we're grateful for your insight and participation, and welcome your feedback and comments. Thanks much! ----------------------------------------------------------------------- Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> The basis of optimism is sheer terror. -- Oscar Wilde

1 0

2012.02.07 NANOG54 day 2 morning session notes
by Matthew Petach 07 Feb '12

07 Feb '12

I've posted my notes from the morning session at http://kestrel3.netflight.com/2012.02.07-nanog54-morning-session.txt for those who find them useful. Off to grab lunch now! BTW--wouldn't deploying the telex proxy require ISPs to do away with BCP 38 in their networks? Just curious. Thanks! Matt

1 0

issues with Level3 in NYC
by Philip Lavine 07 Feb '12

07 Feb '12

Anybody having issues with peering with Level3 in NYC

2 1

Switch and router
by Ann Kwok 07 Feb '12

07 Feb '12

Hello There is big congestion between router and switch I read some documents about flowcontral Do I disable or adjust flowcontral at the same? Can flowcontral solve the congestion issue? How can I adjust flowcontral in cisco router and HP switch? Thank you so much

6 6

2012.02.06 NANOG54 day1 afternoon session notes
by Matthew Petach 07 Feb '12

07 Feb '12

My notes from the second half of today's NANOG 54 talks are now up at http://kestrel3.netflight.com/2012.02.06-nanog54-afternoon-session.txt for those catching up remotely before the videos get posted up. Off to the Beer and Gear now. ^_^ Thanks! Matt

2 2

Re: DOS ATTACK ON BGP , LPTS ??
by Peter Ehiwe 07 Feb '12

07 Feb '12

Thanks Roland, Does anyone have a recommended value for tuning LPTS based on experience ? Rgds Peter On Tue, Feb 7, 2012 at 7:45 AM, Dobbins, Roland <rdobbins(a)arbor.net> wrote: > > On Feb 7, 2012, at 1:43 PM, Peter Ehiwe wrote: > > > What is the attacker spoofs the correct peering address , > > In that case, work with your peer(s) to get them to deploy anti-spoofing > filters at their edges. > > > then iACL may not suffice , from experience is the default policer > values for LPTS enough for XR routers > > Hard to say - look at CoPP/LPTS tuning. > > ----------------------------------------------------------------------- > Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> > > The basis of optimism is sheer terror. > > -- Oscar Wilde > > -- Warm Regards Peter(CCIE 23782).

1 0

DOS ATTACK ON BGP , LPTS ??
by Peter Ehiwe 07 Feb '12

07 Feb '12

Hi , What is the best way to mitigate DOS attack against the bgp process of a router , is LPTS on IOS-XR enough ? Rgds Peter

2 1