August 2014 - Test - lists.nanog.org

ASR9K xml agent vs netconf
by Jeremy 14 Aug '14

14 Aug '14

Hi There! I'm currently working on writing some automation around the ASR9K platform and I've been looking at both the netconf and xml interfaces. Anyone have experience with either? It looks like the XML interface is much more feature rich, supporting both config and operational state objects where netconf is limited to config only. Currently I'm leaning towards the xml interface, but netconf would come with the appeal of using a standard and any libraries I write for it may be usable with other platforms. Thoughts? experiences? mistakes? wins? Thanks! Jeremy

6 5

[HFC] pooling modems in layer2
by Toney Mareo 14 Aug '14

14 Aug '14

Hello I think it's kind of an isp secret but I would be curious how do people distribute modems to pools before they would even reach the actual IP network so on layer2: http://dl.packetstormsecurity.net/papers/evaluation/docsis/Service_Distribu… For this I would like to get some clarification because I do not work in the telco industry. As I can figure out of the docsis, cablelabs documents. The CMTS device is connected to the coax segments through fiber. Therefore one could say that the "modem facing" side is a fiber optic interface but it's not 1000 Base-FX, not a regular Ethernet over fiber. It sends signals through a broad range of frequencies. So what I would like to accomplish to provide a different pool of dhcp servers, which provides different config file, tod server, router, dns etc. infos to the modems but to do all this in Layer2. I don't have hands on experience with CMTS-es but I would think that they are able to pool clients by MACs and able to send eg 500 clients to DHCP server1 and the other 1500 to DHCP server2 before they would even get an IP, so I talking of pure layer2 here! Let's say if the CMTS device does not support this, what are the other options for routing layer2 traffic coming out of the CMTS? If I would know more about the device I would say that put a linuxbox after it (on the ISP facing nic) and mark the packets going out with arptables/ebtables then send them out of different nics to different dhcp servers. Any suggestions are welcome.

4 6

fire ants
by Eduardo A. Suárez 14 Aug '14

14 Aug '14

Hi, it's not a joke. Here we have a fire ants nest in the fiber patch panel. Are there any DIY ways to manage that? Thanks, Eduardo.- -- Eduardo A. Suarez Facultad de Ciencias Astronómicas y Geofísicas - UNLP FCAG: (0221)-4236593 int. 172/Cel: (0221)-15-4557542/Casa: (0221)-4526589 ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

13 12

Re: So Philip Smith / Geoff Huston's CIDR report becomes worth a good hard look today
by Hank Nussbacher 14 Aug '14

14 Aug '14

At 18:10 12/08/2014 -0400, William Herrin wrote: We went with 768 - enough time to replace the routers with ASR9010s. It is merely a stop-gap measure to give everyone time to replace their routers in an orderly fashion. -Hank >On Tue, Aug 12, 2014 at 2:42 PM, Hank Nussbacher <hank(a)efes.iucc.ac.il> wrote: > > > http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-swi… > >I note that the recommended command in that article, "mls cef >maximum-routes ip 1000", will throw most of your IPv6 routes out of >the TCAM instead. Which if you have any IPv6 traffic of substance just >kills you in the other direction. Might want to try something more >like "mls cef maximum-routes ip 900". > >Regards, >Bill Herrin > >-- >William Herrin ................ herrin(a)dirtside.com bill(a)herrin.us >Owner, Dirtside Systems ......... Web: <http://www.dirtside.com/> >Can I solve your unusual networking challenges?

8 9

RTT of ICMP "TTL exceeded" messages in Level3 network remains the same throughout the network
by Martin T 13 Aug '14

13 Aug '14

Hi, if I make a traceroute to a host in San Jose in Level3 network from DigitalOcean server in Amsterdam, then in Level3 network(hop 6 in example below) the RTT remains the same: # traceroute -q 1 -I ZYNGA-INC.edge1.SanJose3.Level3.net traceroute to ZYNGA-INC.edge1.SanJose3.Level3.net (4.53.208.114), 30 hops max, 60 byte packets 1 5.101.103.253 (5.101.103.253) 0.265 ms 2 95.85.0.229 (95.85.0.229) 0.236 ms 3 ix-4-2-0-0.tcore1.AV2-Amsterdam.as6453.net (195.219.194.25) 0.275 ms 4 if-7-2.tcore1.AD1-Amsterdam.as6453.net (195.219.194.46) 0.630 ms 5 4.68.63.41 (4.68.63.41) 0.635 ms 6 vl-3603-ve-227.csw2.Amsterdam1.Level3.net (4.69.162.153) 155.309 ms 7 ae-56-221.ebr2.Amsterdam1.Level3.net (4.69.153.201) 155.627 ms 8 ae-46-46.ebr2.London1.Level3.net (4.69.143.74) 153.470 ms 9 * 10 ae-61-61.csw1.NewYork1.Level3.net (4.69.134.66) 148.972 ms 11 * 12 ae-2-2.ebr1.SanJose1.Level3.net (4.69.135.185) 147.881 ms 13 ae-91-91.csw4.SanJose1.Level3.net (4.69.153.14) 149.632 ms 14 ae-4-90.edge1.SanJose3.Level3.net (4.69.152.208) 151.107 ms 15 ZYNGA-INC.edge1.SanJose3.Level3.net (4.53.208.114) 154.431 ms # In other words, one sees the RTT of the end-host as a RTT for all the hops in Level3 netwotk. If I make the traceroute to penultimate hop ae-4-90.edge1.SanJose3.Level3.net, then RTT is as expected: root@vserver:~# traceroute -q 1 -I ae-4-90.edge1.SanJose3.Level3.net traceroute to ae-4-90.edge1.SanJose3.Level3.net (4.69.152.208), 30 hops max, 60 byte packets 1 5.101.103.254 (5.101.103.254) 0.228 ms 2 95.85.0.237 (95.85.0.237) 0.217 ms 3 ix-4-2-0-0.tcore1.AV2-Amsterdam.as6453.net (195.219.194.25) 0.276 ms 4 if-7-2.tcore1.AD1-Amsterdam.as6453.net (195.219.194.46) 0.656 ms 5 4.68.63.41 (4.68.63.41) 0.607 ms 6 vl-3604-ve-228.csw2.Amsterdam1.Level3.net (4.69.162.157) 0.696 ms 7 ae-56-221.ebr2.Amsterdam1.Level3.net (4.69.153.201) 0.677 ms 8 ae-45-45.ebr2.London1.Level3.net (4.69.143.70) 7.059 ms 9 ae-44-44.ebr1.NewYork1.Level3.net (4.69.137.78) 76.311 ms 10 ae-81-81.csw3.NewYork1.Level3.net (4.69.134.74) 76.265 ms 11 ae-82-82.ebr2.NewYork1.Level3.net (4.69.148.41) 76.820 ms 12 ae-2-2.ebr1.SanJose1.Level3.net (4.69.135.185) 149.101 ms 13 ae-91-91.csw4.SanJose1.Level3.net (4.69.153.14) 150.557 ms 14 ae-4-90.edge1.SanJose3.Level3.net (4.69.152.208) 162.022 ms root@vserver:~# All the ICMP "TTL exceeded" messages except the first and the penultimate one in Level3 network have MPLS extensions header(s24.postimg.org/4z9at9z45/ICMP_echo_reply_MPLS_extensions.png) which is always the same except the tag value changes. How does this technically work? What are the advantages of such setup? thanks, Martin

3 2

intergenia ↔ mxlogic connection issues
by kai 13 Aug '14

13 Aug '14

Hello list, most /24 subnets from 85.25.0.0/16 network (PlusServer AG/intergenia AG) seem to be blocked on mxlogic.net inbound email servers (208.65.144.2 208.65.144.3 208.65.145.2 208.65.145.3). Could someone from both parties please check it? I tried to contact MX Logic by whois contacts (dnsadmin(a)mxlogic.com and hostmaster(a)mcafee.com) but got no answer. Sorry for the noise, Kai

1 0

Mikrotik RouterBoard and Ubiquiti Networks Routing and Switching Solutions
by Colton Conor 12 Aug '14

12 Aug '14

I am interested to hear opinions on Mikrotik and Ubiquiti Networks routing and switching products. I know both hardware providers are widely deployed in WISP networks, but I am less interested in their wireless solutions and more in their wired products. I know most of their switches and routers are software based, but that might not necessarily be a bad thing since everyone is going to SDN anyways. Their products are 1/10th or less of the cost of the equivalent Cisco/Juniper products. How stable and feature rich are both of their platforms? How do both of their command line interfaces compare to Cisco or Juniper? Is it easy to train a Cisco tech how to use a Mikrotik or Ubiquiti Networks product? *Ubiquiti Networks software is based on a version of Vyatta I believe. As many of you know Vyatta was bought by Brocade. I have heard that Vyatta is very Juniper OS like. *Ubiquiti just release a line of switches that have an amazing price and seem to support wire speed switching. Their EdgeRouter is supposedly faster than Mikrotiks solutions. They are also traded on the stock market, and seem to be doing well as a company. http://www.ubnt.com/products/ Mikrotik also seems to make routers and switches. I am not sure what their software is based on, but it does support advanced features such as MPLS. Not sure about their switches, but they seem to be dirt cheap! What is their command line interface like? I couldn't find any financial information on this company, but they seem to be located in Latvia? http://routerboard.com/ Does anyone have any meaningful insight to both companies? Why haven't they made a dent in the switching and router market with their amazing price points? Am I missing something here?

11 12

Level3 (AS3549) BGP contact off-list
by Laurent CARON 12 Aug '14

12 Aug '14

Hi, Currently experiencing trouble with BGP session between 49463 and 3549. Relevant router: cdg2.gblx.net Can you please contact me off-list for resolution ? Thanks

1 0

AM dust filters
by Jason Lixfeld 12 Aug '14

12 Aug '14

Hi, I'm interested in knowing what sorts of material folks use to make after-market dust filters for their various devices which wouldn't normally have any. This seems to almost be a necessity when these kinds of devices are deployed in environments that are overly dusty and dirty (it should also be implied that these environments are all in-doors and would have less than ideal airflow and climate control). A material that is too dense will hider airflow and cause an immediate increase in inlet temperature, which would exacerbate a potentially threatening temperature situation in environments where the ambient temperature is already in the mid to high twenties and above (that's 77 - 86F+ for my American friends ;)). A material that is not dense enough won't do a very good job at filtering. Do folks just hack up HEPA filters or something?

4 5

Dealing with abuse complaints to non-existent contacts
by Gabriel Marais 11 Aug '14

11 Aug '14

Hi Nanog I'm curious. I have been receiving some major ssh brute-force attacks coming from random hosts in the 116.8.0.0 - 116.11.255.255 network. I have sent a complaint to the e-mail addresses obtained from a whois query on one of the IP Addresses. My e-mail bounced back from both recipients. Once being rejected by filter and the other because the e-mail address doesn't exist. I would have thought that contact details are rather important to be up to date, or not? Besides just blocking the IP range on my firewall, I was wondering what others would do in this case? Regards, Gabriel

19 22