January 2013 - Test - lists.nanog.org

IP Address Management IPAM software for small ISP
by Eric A Louie 24 Jan '13

24 Jan '13

I'm looking for IPAM solutions for a small regional wireless ISP. There are 4 Tier 2 personnel and 2 NOC technicians who would be using the tool, and a small staff of engineers. They have regionalized IP addresses so blocks are local, but there are subnets that are global. don't care if it's a linux or windows solution. Need to be able to migrate from FreeIPdb (yes, I know, it's a dinosaur) We're not dealing with a lot now, but the potential for growth is pretty high. What are you using and how is it working for you? Much appreciated, Eric

30 48

CGN fixed/hashed nat question
by Eric Oosting 23 Jan '13

23 Jan '13

Let me start out by saying I'm allergic to CGN, but I got to ask the question: Some of the CGN providers are coming out with "fixed" nat solutions for their IPv6 transition/IPv4 preservation technologies to reduce logging. This appears to provide for a static mapping of outside ports/IPs to a particular customer such that the service provider doesn't need to log literally every session through the box. At the last nanog, I seem to remember someone stepping up and discussing the problems associated with just taking ports 1025 through 1025+X and giving it to some customer and had brought up the idea of using a hash or salt to map what would appear to be random ports to a customer in such a way that you could reverse the port back to the customer later if need be. For the life of me, I can't find anything on the internets about this concept. I had it in my head it was a lightning talk or something, but reviewing the agenda doesn't ring any bells. Anyone know what I'm talking about and what it's called? -e

10 17

Re: Security reporting response handling [was: Suggestions for the future on your web site]
by Scott Weeks 23 Jan '13

23 Jan '13

--- oscar.vives(a)gmail.com wrote: From: " ." <oscar.vives(a)gmail.com> weak. A more realistic reason is moral panic // he is making us look bad. Making stupid people look stupid should not be a crime. ------------------------------------------------- It's his wake up call ... oops, I mean his 'welcome' to the wonderful world of corporate/government/university politics. Welcome kid. This is what it's going to be like until you're too old to care... >;-) scott

1 0

Re: IP Address Management IPAM software for small ISP
by Chris Conn 23 Jan '13

23 Jan '13

> looking for IPAM solutions for a small regional wireless ISP. > There are 4 Tier 2 personnel and 2 NOC technicians who would be using > the tool, and a small staff of engineers. > Nobody uses HaCI?

2 2

Re: Suggestions for the future on your web site: (was cookies, and before that Re: Dreamhost hijacking my prefix...)
by Scott Weeks 23 Jan '13

23 Jan '13

--- jfmezei_nanog(a)vaxination.ca wrote: From: Jean-Francois Mezei <jfmezei_nanog(a)vaxination.ca> Either way, you still need to have either a cookie or a hidden form [...] ------------------------------------------------ But ONLY when needing to do a transaction. As I originally mentioned why force a cookie just to look around: no cookie, no lookie. :-( scott

8 7

Tw telecom noc/routing contact needed
by Eric J Esslinger 22 Jan '13

22 Jan '13

I've been fighting with an issue with a Time Warner Telecom customer whose site is unreachable from our ip blocks, as well as a number of other ip blocks within my upstream's network according to the call I made to them. All I'm getting through listed arin contacts are apparantly unmonitored maildrops and customer contact numbers that won't put me through to a live person without a valid TW phone or circuit number. Based on the behavior I suspect a reverse routing issue back to our ip blocks but have been unable to get much help from the other end of the problem. I need to speak to someone, and if someone reading this list can has info but doesn't want to share it, if they can pass my contact info on I can be contacted via this email or the phone number in my signature. Thank you. __________________________ Eric Esslinger Information Services Manager - Fayetteville Public Utilities http://www.fpu-tn.com/ (931)433-1522 ext 165 This message may contain confidential and/or proprietary information and is intended for the person/entity to whom it was originally addressed. Any use by others is strictly prohibited.

1 1

DNS resolver addresses for Sprint PCS/3G/4G
by Jay Ashworth 22 Jan '13

22 Jan '13

I've noticed, for quite some time, that there seems to be a specific category of slow that I see in using apps on my HTC Supersonic/Sprint EVO, on both their 3G and 4G networks, and I wonder if it isn't because the defined resolvers are 8.8.4.4 and 8.8.8.8, which aren't *on* Sprint's networks. Does anyone have, in their magic bag of tricks, IP addresses for resolvers that *are* native to that network, that they wouldn't mind whispering in my ear? I don't suppose Android's smart enough to swap that file around when the IP core notices the uplink has changed? (Yes, I know, that's properly a question for XDA-Devel...) Offlist is fine. Yes, I owe the list summaries on a couple earlier questions; I still have the details to write from. :-} Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

3 3

L2 redundant VPN
by Tomas Podermanski 22 Jan '13

22 Jan '13

Hi networking guys, I need some help :-). We try to find for our department reliable solution for L2 VPN. The task is to connect two remote data centers, each of them connected two 1Gbps lines (with link aggregation). Only IP connectivity between data centers is available (so there is no possibility to create circuit based on MPLS or something like that). The basic problem is that high reliability is required, so the solution have to be fully redundant. The initial idea was about two OpenVPN servers in each data center + two switches (HP E5800) joined into one logical switch via VRF. The link failure is based on LACP packets between both data centers. The solution works, however performance of OpenVPN is really creepy. The maximum we were able to get from this configuration was about 100Mbps. We expect at least 500Mbps (or more in the future). In our thoughts then we were thinking about l2tp on some cisco/HP(H3C) device, however there is little information about performance of that solution and I am not sure how the failure detection would work in redundant configuration. Have anybody some experience with similar solution or at least any idea ? Thanks a lot for thoughts Tomas

5 4

Multicast over GRE between Linux server and Cisco Router
by Brian Christopher Raaen 22 Jan '13

22 Jan '13

I am trying to set up multicast between a Linux server and Router using GRE. The GRE tunnel is up fine and I can see traffic go across it, but the router is not indicating it is receiving the IGMP joins that the server is sending. I have identical setting with another server attached to fastethernet0/1 and it is joined to the group fine, but I am not able to get the server to link to the router via GRE interface. Note that I have another server behind another router where the two routers do GRE and PIM and that on is working fine. Is there some reason that IGMP joins would not work across the GRE link, but another router using PIM would? -- Brian Christopher Raaen Network Architect Zcorum

4 4

Re: Equipment Shuffing Cart Recommendations (Mike Hale)
by Travis Foschini 21 Jan '13

21 Jan '13

I recently purchased a couple of these collapsible carts @ for the same purpose and they work very well... http://www.frys.com/product/6390451?site=sr:SEARCH:MAIN_RSLT_PG They're a tad difficult to close after use but I expect they'll relax and ease after additional use. Regards, Travis Foschini > On Jan 21, 2013, at 11:28, Michael Vallaly <nanog(a)nolatency.com> wrote: > > > > > Anyone have any good recommendations for an equipment cart to shuffle > IT/Telco equipment around between an office/colo ? > > > > Id like something able to carry ~6 1U Dell servers at once, and maybe make > it over an elevator gap without a running start. Collapsible would also be > nice, if I can throw it in the back of a car once in a while is a big plus. > > > > Thanks > > > > -Mike > > > > -- > > Michael Vallaly <mvallaly(a)nolatency.com>

1 0