April 2012 - Test - lists.nanog.org

International Transit Provider - Delivered locally to Melbourne Australia
by James Braunegg 13 Apr '12

13 Apr '12

Dear All Just wondering if I can get some recommendations for international transit providers who can provide international transit delivered in Melbourne Australia at 55 Crockford Street or 55 King street ie transit without any local domestic Australian routes. Looking forward to hearing from you / suggestions Kindest Regards James Braunegg W: 1300 769 972 | M: 0488 997 207 | D: (03) 9751 7616 E: james.braunegg(a)micron21.com<mailto:james.braunegg@micron21.com> | ABN: 12 109 977 666 [Description: Description: Description: Description: Description: M21.jpg] This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.

2 2

Comcast DNS contact
by Josh Smith 13 Apr '12

13 Apr '12

Can some from Comcast DNS contact me off list. A colleague made a mistake in one of our DNS zones and the incorrect data is cached on your end and causing our users fits. Thanks, Josh -- Josh Smith KD8HRX email/jabber: juicewvu(a)gmail.com phone: 304.237.9369(c)

2 1

Re: Network Storage
by Joel M Snyder 12 Apr '12

12 Apr '12

>Can you please comment on what is best solution for storing network >traffic. Well, "best" is kind of a hard word to use here. There are lots of different solutions depending on exactly why and where you want to capture this. As far as I know, there are really two credible companies who are thrashing it out in this space right now, NetWitness (now part of RSA) and Solera. I think that Niksun is still out there, but they haven't done much recently or maybe they just concentrate on particular sectors and so I never see them. Of course, you can also just tcpdump it yourself, but the commercial products do a lot of the metadata analysis and creation for you, so it's a lot easier to understand what is happening in your traffic than just having piles of tcpdumps. I bought a NetWitness box and was profoundly unimpressed. So I guess my advice would be to start with Solera and then look at NetWitness if you don't like Solera. This assumes you have budget. If this is a back-of-the-envelope "hey, let's grab some packets and do something with them" kind of exercise, then filter your tcpdumps a lot better. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

Re: Level3 IPv6 peering with HE only in London?
by Dave Sotnick 12 Apr '12

12 Apr '12

Yep, looks much better now. This is what Level3 had to say: "David, You should see this repaired at this time, looks like the peering between L3 and HE crashed in stateside when the ipv6 max prefix limits exceeded the router configurations. Please let us know if any further questions. Regards, Level 3 Communications" Thanks all, -Dave On Wed, Apr 11, 2012 at 11:37 PM, Mike Leber <mleber(a)he.net> wrote: > Was fixed a short while ago, please retest. > > Mike. > > > On 4/11/12 9:08 PM, Dave Sotnick wrote: >> >> Hello Nanog, >> >> Looks like Level3's only IPv6 route to HE is via London right now: >> >> Show Level 3 (Las Vegas, NV) Traceroute to www.he.net >> 1 vl-5.bar1.LasVegas1.Level3.net (2001:1900:2F::1) 0 msec 0 msec 0 msec >> 2 vl-11.bar2.LasVegas1.Level3.net (2001:1900:4:1::3C6) 0 msec 0 msec 0 >> msec >> 3 vl-4045.car1.Denver1.Level3.net (2001:1900:4:1::276) 84 msec 228 >> msec 224 msec >> 4 vl-4081.car2.Denver1.Level3.net (2001:1900:4:1::32) 20 msec 20 msec 20 >> msec >> 5 vl-4042.edge1.Chicago2.Level3.net (2001:1900:4:1::36) 44 msec 44 msec >> 44 msec >> 6 vl-4067.car1.Chicago1.Level3.net (2001:1900:4:1::1D) 48 msec 212 >> msec 224 msec >> 7 vl-4061.car2.NewYork2.Level3.net (2001:1900:4:1::22) 184 msec 216 >> msec 232 msec >> 8 vl-4080.car1.NewYork2.Level3.net (2001:1900:4:1::F1) 80 msec 80 msec 80 >> msec >> 9 vl-4041.car1.NewYork1.Level3.net (2001:1900:4:1::101) 80 msec 80 msec >> 80 msec >> 10 vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11) 176 msec 144 >> msec 164 msec >> 11 vl-4081.edge3.London1.Level3.net (2001:1900:5:1::102) 136 msec 132 >> msec >> vl-4081.edge4.London1.Level3.net (2001:1900:5:1::106) 148 msec >> 12 2001:1900:5:3::11E 160 msec 156 msec 160 msec >> 13 10gigabitethernet7-4.core1.nyc4.he.net (2001:470:0:128::1) 344 >> msec 208 msec 200 msec >> 14 10gigabitethernet5-3.core1.lax1.he.net (2001:470:0:10E::1) 276 >> msec 260 msec 268 msec >> 15 10gigabitethernet7-4.core1.fmt2.he.net (2001:470:0:18D::1) 272 >> msec 272 msec 324 msec >> 16 10gigabitethernet2-1.core1.fmt1.he.net (2001:470:0:2D::1) 288 msec >> 272 msec 276 msec >> 17 * * * >> 18 * * * >> >> Confirmed by L3's looking glasses ( >> >> http://lg.level3.net/traceroute/traceroute.cgi?site=lvg1&target=www.he.net&… >> ) and my own corporate IPv6 connection from Level 3. >> >> I opened a ticket with Level 3. Anyone else seen this? >> >> -Dave >> >

4 4

Cheap Juniper Gear for Lab
by Steven King 12 Apr '12

12 Apr '12

Hello All, I am tasked with replacing an old linux router setup with Juniper gear in the near future. Though I am a Cisco guy myself. Does anyone know of any older cheap Juniper gear I might find on Ebay so that I may build a home lab without going broke? Thanks! -- Steve King Network/Linux Engineer - AdSafe Media Cisco Certified Network Professional CompTIA Linux+ Certified Professional CompTIA A+ Certified Professional

24 30

att wireless
by Josh Smith 12 Apr '12

12 Apr '12

Can a clueful DNS person fro AT&T wireless please contact me off list if possible. Thanks, Josh Smith KD8HRX email/jabber: juicewvu(a)gmail.com phone: 304.237.9369(c)

1 0

Level3 IPv6 peering with HE only in London?
by Dave Sotnick 12 Apr '12

12 Apr '12

Hello Nanog, Looks like Level3's only IPv6 route to HE is via London right now: Show Level 3 (Las Vegas, NV) Traceroute to www.he.net 1 vl-5.bar1.LasVegas1.Level3.net (2001:1900:2F::1) 0 msec 0 msec 0 msec 2 vl-11.bar2.LasVegas1.Level3.net (2001:1900:4:1::3C6) 0 msec 0 msec 0 msec 3 vl-4045.car1.Denver1.Level3.net (2001:1900:4:1::276) 84 msec 228 msec 224 msec 4 vl-4081.car2.Denver1.Level3.net (2001:1900:4:1::32) 20 msec 20 msec 20 msec 5 vl-4042.edge1.Chicago2.Level3.net (2001:1900:4:1::36) 44 msec 44 msec 44 msec 6 vl-4067.car1.Chicago1.Level3.net (2001:1900:4:1::1D) 48 msec 212 msec 224 msec 7 vl-4061.car2.NewYork2.Level3.net (2001:1900:4:1::22) 184 msec 216 msec 232 msec 8 vl-4080.car1.NewYork2.Level3.net (2001:1900:4:1::F1) 80 msec 80 msec 80 msec 9 vl-4041.car1.NewYork1.Level3.net (2001:1900:4:1::101) 80 msec 80 msec 80 msec 10 vl-4086.edge3.London1.Level3.net (2001:1900:6:1::11) 176 msec 144 msec 164 msec 11 vl-4081.edge3.London1.Level3.net (2001:1900:5:1::102) 136 msec 132 msec vl-4081.edge4.London1.Level3.net (2001:1900:5:1::106) 148 msec 12 2001:1900:5:3::11E 160 msec 156 msec 160 msec 13 10gigabitethernet7-4.core1.nyc4.he.net (2001:470:0:128::1) 344 msec 208 msec 200 msec 14 10gigabitethernet5-3.core1.lax1.he.net (2001:470:0:10E::1) 276 msec 260 msec 268 msec 15 10gigabitethernet7-4.core1.fmt2.he.net (2001:470:0:18D::1) 272 msec 272 msec 324 msec 16 10gigabitethernet2-1.core1.fmt1.he.net (2001:470:0:2D::1) 288 msec 272 msec 276 msec 17 * * * 18 * * * Confirmed by L3's looking glasses ( http://lg.level3.net/traceroute/traceroute.cgi?site=lvg1&target=www.he.net&… ) and my own corporate IPv6 connection from Level 3. I opened a ticket with Level 3. Anyone else seen this? -Dave

3 3

IPv6 support via Charter | Ideas on BGP Tunnel via HE
by Anurag Bhatia 11 Apr '12

11 Apr '12

Hello, Does anyone here has clues on IPv6 support via Charter? We recently got BGP up on the connection and they denied for IPv6 support for now. Support engineer gave expected time of something like end of year which seems very late as per our plans. Is situation same for everyone who sits in downstream of Charter? Also, does it makes sense to go for BGP Tunnel for now? I just setup IPv6 Tunnel via Hurricane Electric. Latency seems pretty much OK ~ 10-15ms of overhead. Yet to test other parameters. I heard Tunnels are usually bad. Can someone tell how to test this tunnel setup to confirm if there is a performance issue or not? I am thinking of writing a quick bash script and run via cron to test latency, packet loss and bandwidth throughput for couple of days. If anyone has better idea, please let me know. Thanks. -- Anurag Bhatia anuragbhatia.com or simply - http://[2001:470:26:78f::5] if you are on IPv6 connected network! Twitter: @anurag_bhatia <https://twitter.com/#!/anurag_bhatia> Linkedin: http://linkedin.anuragbhatia.com

9 11

RPKI field experiences
by Alex Band 11 Apr '12

11 Apr '12

We just released a new version of our RPKI relying party software, RIPE NCC RPKI Validator 2.0.4: http://www.ripe.net/lir-services/resource-management/certification/tools-an… There are now more than 7,200 RPKI valid BGP route announcements entered in the global system, so there is a solid data set to gain operational experience with. We would really like you to try it out and report back on the usability and reliability. ARINs Pilot information is here in case you want to create some of your own ROAs: https://www.arin.net/resources/rpki.html As always, the RIPE NCC RPKI Validator requires no configuration and has no dependencies other than Java 1.6 and rsync available on your system. Simply unzip the package, run ./bin/rpki-validator from the base directory and browse to http://localhost:8080 Cheers, Alex

1 0

Re: Cheap Juniper Gear for Lab
by Scott Weeks 11 Apr '12

11 Apr '12

--- mysidia(a)gmail.com wrote: From: Jimmy Hess <mysidia(a)gmail.com> The Juniper ERX edge routers are what isn't "real" JunOS. It's as if they were trying to make a clone of the IOS CLI: http://www.juniper.net/techpubs/en_US/junose10.2/information-products/topic… ------------------------------------------ That's because Juniper bought the ERX series from Unisphere. It's not a "real" JunOS. My suggestion: if you make a lot of changes stay away from the ERXs, but if you don't do much to them they will mostly purr along just fine. I was running them fairly hard, with 30K plus ATM/DSL subs per router... scott

1 0