July 2012 - Test - lists.nanog.org

MPLS L2VPN monitoring
by Peter Ehiwe 19 Jul '12

19 Jul '12

Hello , For those who provide l2vpn services to customers over MPLS , what kind of tools do you use for monitoring the circuits and what kind of values do you proactively monitor I have tools in place to monitor these circuits but i want to know based on group members experiences in order to improve my monitoring platform for this circuits. Thanks a lot!

4 3

Clued contact at Brighthouse
by Mark Wall 19 Jul '12

19 Jul '12

Anyone have a way to contact brighthouse network that doesn't end up in residential support? Thanks folks

1 0

Why use PeeringDB?
by Chris Grundemann 18 Jul '12

18 Jul '12

Peering Experts, I am currently working on a BCOP for IPv6 Peering and Transit and would very much appreciate some expert information on why using PeeringDB is a best practice (or why its not). All opinions are welcome, but be aware that I plan on using the responses to enhance the document, which will be made publicly available as one of several (and hopefully many more) BCOPs published at http://www.ipbcop.org/. Also, if there are those among you who would like to review the entire document and perhaps volunteer as a SME to help expand and polish it, please contact me off-list and I'll get you a current draft. Thanks in advance. Cheers, ~Chris -- @ChrisGrundemann http://chrisgrundemann.com

4 5

Adtran NetVanta deployment experience
by Brandon Ross 17 Jul '12

17 Jul '12

I'd like to speak to someone who's had deployment experience around the Adtran NetVanta product line that has used it's firewalling and/or VPN functionality. Feel free to reply off-list. I'm trying to get an idea of real-world performance expectations. -- Brandon Ross Yahoo & AIM: BrandonNRoss +1-404-635-6667 ICQ: 2269442 Schedule a meeting: https://tungle.me/bross Skype: brandonross

1 0

Managing free pairs to prevent DSL sync. loss
by Anurag Bhatia 17 Jul '12

17 Jul '12

Hello everyone. I am having some very bad time due to my ISP's poor last mile (in India). DSL is loosing sync. consistently and this time problem seems quite interesting so I though to ask how ISPs across world managing it. Problem is high attenuation & low SNR because of "lot of free pairs" in the cable. My connection is coming from something like 100 pair > 50 pair > 20 pair > 5 pair. Now 100 pair has less then 30 active lines but based on testing it seems like at 100 pair DP there's very low noise and everything is pretty good (usual BSNL pillars in India have 100 pair terminations). Next 20 pair has just 4 active lines (and 16 free lines causing issues for those 4 working lines) and at the end my line comes from 20 > 5 with only one (which is my) line active on one of 5 pairs. Now argument of my ISP (BSNL) is that due to excessive number of free pairs, they are causing huge noise and they likely need to reduce these DP's by putting 1-2 line wire from my home till 100 pair pillar termination (which is down in other street and so needs effort in digging and putting new wire). But I just never heard about this problem anywhere else. Do DSL providers really suffer due to free pairs? Assuming other pairs are all crossed/shorted, can they still produce significant noise in other working lines? Also, what exactly was "bonding" used by AT&T in US? I thought it was actually making use of free pairs, bonding them together and having more bandwidth for end user, isn't it? If someone can pass me some detailed whitepaper or document explaining about this noise, it will be very much helpful. Thanks. -- Anurag Bhatia Web: anuragbhatia.com Skype: anuragbhatia.com Linkedin <http://in.linkedin.com/in/anuragbhatia21> | Twitter<https://twitter.com/anurag_bhatia>| Google+ <https://plus.google.com/118280168625121532854>

5 8

NAT66 was Re: using "reserved" IPv6 space
by Lee 17 Jul '12

17 Jul '12

On 7/16/12, Owen DeLong <owen(a)delong.com> wrote: > > Why would you want NAT66? ICK!!! One of the best benefits of IPv6 is being > able to eliminate NAT. NAT was a necessary evil for IPv4 address > conservation. It has no good use in IPv6. NAT is good for getting the return traffic to the right firewall. How else do you deal with multiple firewalls & asymmetric routing? Yes, it's possible to get traffic back to the right place without NAT. But is it as easy as just NATing the outbound traffic at the firewall? Lee

7 11

St Louis Internet Exchange
by Jay Hanke 17 Jul '12

17 Jul '12

After a bit of googling, I found some references to an Internet Exchange in St. Louis, MO called the St. Louis Regional Exchange. Is this project still active? Thanks, Jay

3 2

IPv6 Toolkit v1.2: Latest snapshot, and git repo
by Fernando Gont 16 Jul '12

16 Jul '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, I've posted a snapshot (tarball) of my working copy of the IPv6 toolkit. The tarball is available at: <http://www.si6networks.com/research/ipv6-toolkit-v1.2.tar.gz> Additionally, I've created a git repository for the toolkit, such that collaboration is improved. The git repo is available at: <https://github.com/fgont/ipv6-toolkit.git> If you have access to a Mac OS box, please try to compile the tools, and let me know if you find any errors (or let me know if they compiled cleanly). If you can also run the tools according to some of the examples in the manuals (and report any problems), that would be great, too. P.S.: If you've sent patches and your patches have not yet been applied, most likely it just means that I'm catching-up with them (feel free to resend!). Thanks! Best regards,-- Fernando Gont e-mail: fernando(a)gont.com.ar || fgont(a)si6networks.com PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJQAtn3AAoJEJbuqe/Qdv/xYIgH+wTQXJ3iNEnGnA0cMazS32py 3HfTdcMaEphnfF2a15dq1h/uqF05g3t9KqU744A1XmMtDlChvQ2I77uj2amqaeKi dED6e/NTuVAxTAI0ZTPIEn7BkDgtqvhuaoth+E4SX73lJC9eJR7e3T3BAtbESZaQ Sp67lvtgYmqogDc0IQALGNucyhHmacfUBocVLVgmVPn8BwdFxHI80W+Vc6TnKfjm Yc9ijgUPLTu0hOGD4bpOeQ2V3Dzw9PW17PyJlPr3TzWLzb8g64/zZROtHjXl/V4s 0JNAZVrHNDvA7kfEujzsoLcnQLCfq3+jzecvXcGwgsYMDXRBL8Lv628OAhrVglY= =Z3+1 -----END PGP SIGNATURE-----

3 2

Netsol AAAA glue
by Brandon Applegate 16 Jul '12

16 Jul '12

So I sent an email over a week ago to ipv6req(a)networksolutions.com - and since I've only recieved the auto reply. A year or so ago I did this and got very quick turnaround, but now just dead air (sent another email yesterday). Wanted to see if others had the same results (recently) and any advice before I call into phone tree hell. Thanks. -- Brandon Applegate - CCIE 10273 PGP Key fingerprint: 8779 B023 7637 CEC8 C5C6 4052 664D 7E08 3CBB 1739 "SH1-0151. This is the serial number, of our orbital gun."

11 11

Re: using "reserved" IPv6 space
by Keith Medcalf 16 Jul '12

16 Jul '12

Ifconfig does not work on Windows. Are you saying that there are other operating systems brain-dead enough to just run any old arbitrary code from untrusted media? Sent from my Android phone using TouchDown (www.nitrodesk.com) -----Original Message----- From: [valdis.kletnieks(a)vt.edu] Received: Sunday, 15 Jul 2012, 9:45 To: Jimmy Hess [mysidia(a)gmail.com] CC: [nanog(a)nanog.org] Brandon Ross [bross(a)pobox.com] Subject: Re: using "reserved" IPv6 space On Sat, 14 Jul 2012 17:37:37 -0500, Jimmy Hess said: > The good news is one 'ifconfig' just tells them what network > address you're in. > Unless the attacker can gain access to your host's NDP table or ARP > table, they can't see what IPs are in use. All it takes is one USB stick left out in the parking lot for an employee.. By the time they get enough access to do an 'ifconfig', rest assured that they can see the NDP/ARP tables and all the traffic on that network segment as well. (OK.. maybe for some reason they can't - but if you're betting your security model on somebody getting a beachhead on one of your machines and *not* having full access to the network segment, I'll be more than happy to take the other side of the bet). Sent from my Android phone using TouchDown (www.nitrodesk.com)

4 3