- Test - lists.nanog.org

Are specific "route" objects in RIR databases needed?
by Martin T 31 Jan '14

31 Jan '14

Hi, for example there is a small company with /22 IPv4 allocation from RIPE in European region. This company is dual-homed and would like to announce 4x /24 prefixes to both ISPs. Both ISP's update their prefix-lists automatically based on records in RIPE database. For example Level3 uses this practice at least in Europe. If this small company creates a "route" object for it's /22 allocation, then is it enough? Theoretically this would cover all four /24 networks. Or in which situation it is useful/needed to have "route" object for each /24 prefix? regards, Martin

7 11

Fiber Bypass Switch
by Keyser, Philip 31 Jan '14

31 Jan '14

Does anyone have any recommendations for a fiber bypass switch? I am looking for something capable of 10G that when there is a power hit will fail over to route traffic out the network ports and away from that site's with the customer handoff. Thanks, Phil Keyser

4 4

Fw: ipv6 newbie question
by Philip Lavine 30 Jan '14

30 Jan '14

Is it best practice to have the internet facing BGP router's peering ip (or for that matter any key gateway or security appliance) use a statically configured address or use EUI-64 auto config? I have seen comments on both sides and am leaning to EUI-64 (except for the VIP's like the ASA's failover ip ) -Philip

9 10

Terremark Miami
by Warren Bailey 30 Jan '14

30 Jan '14

Anyone out there listening have experience getting traffic originating at NAP of Americas in Miami to AWS in a non-suck (internet) manner? I know AWS has direct connect, but they are mum about options in MIA. Thanks in advance! //warren

4 5

BGP multihoming with two address spaces
by Joseph Jenkins 29 Jan '14

29 Jan '14

I am seeking some feedback/help with my BGP configuration. I am peering with two providers level3 and tw. Unfortunately all of my address spaces are preferring the route over tw rather than level3. I have tried Prepending my AS and the carriers AS to the path on the tw side and I see those update being accepted by internet routers, but everyone is still preferring to install the tw routes rather than level3. I was trying to advertise each provider's address space out their connections and then use the other for backup. Now however everything is coming in through tw and no one seems to like level3. Thanks in advance for any guidance or assistance. Joe

8 8

Tata communications issues
by Ryan Delgrosso 29 Jan '14

29 Jan '14

I am looking for a clueful networking contact at Tata communications as the IP noc is not being terribly helpful. When i turn up advertisements to you I suddenly become unreachable to large swaths of the Internet. Please contact me off-list Thanks in advance -Ryan

1 0

Re: BGP multihoming with two address spaces
by Jakob Heitz 29 Jan '14

29 Jan '14

It is likely that level3 is aggregating your route, but tw can't. Longest match wins. -- Jakob Heitz. > Date: Wed, 29 Jan 2014 03:32:17 -0800 > From: Joseph Jenkins <joe(a)breathe-underwater.com> > > I am seeking some feedback/help with my BGP configuration. I am peering with two providers level3 and tw. Unfortunately all of my address spaces are preferring the route over tw rather than level3. I have tried Prepending my AS and the carriers AS to the path on the tw side and I see those update being accepted by internet routers, but everyone is still preferring to install the tw routes rather than level3. I was trying to advertise each provider's address space out their connections and then use the other for backup. Now however everything is coming in through tw and no one seems to like level3. > > > Thanks in advance for any guidance or assistance. > > Joe

1 0

Opensource tools for inventory and troubleticketing
by Octavio Alfageme 29 Jan '14

29 Jan '14

Hello everyone, I work for a small service provider starting to offer MPLS services between Europe and several african countries. At present time we own a small Cisco network, but we are starting to need a better inventory of services and network resources and better troubleticketing procedures. We can not afford acquiring complicated and expensive tools at present time.I would be grateful if you could recommend me opensource tools to cover these needs. Thanks in advance Kind regards Octavio

12 12

Re: BCP38.info
by Nick Olsen 29 Jan '14

29 Jan '14

While I see what you're saying. It's still not "Spoofed". The device in question receives the request. And then generates a response with the src address of the egress interface of the device dst to the IP and port that requested it... In this case. The GRE tunnel. Unless I'm missing something here about replying to a request only on the interface which it ingressed the device. And the fact that it's UDP. not TCP. So it's fire-and-forget. Thus, Nothing was ever spoofed. It just simply was returned from a different interface of the same device. From our point of view. We saw the packet of DNS-SRC>OurCustomer. And the other ISP, Which transported the reply. only saw Customer-SRC>DNS-DST. Obviously, This only works because it's UDP. And TCP would be broken. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Jared Mauch" <jared(a)puck.nether.net> Sent: Tuesday, January 28, 2014 3:04 PM To: nick(a)flhsi.com Cc: "David Miller" <dmiller(a)tiggee.com>, Valdis.Kletnieks(a)vt.edu, "NANOG" <nanog(a)nanog.org> Subject: Re: BCP38.info On Jan 28, 2014, at 2:57 PM, Nick Olsen <nick(a)flhsi.com> wrote: > Agreed. > > Our's listed for AS36295 are two customers, Which I know for a fact have their default route set out of a GRE tunnel interface. So while we hand them the request to their interface IP we've assigned them. The response is actually sent, And transported via the customers GRE Tunnel, And HQ's Dedicated internet access where their tunneling to. Making it appear that the reply has been spoofed. When in reality. it was just silent transported to another area before being sent to the src. Sure, but this means that network is allowing the spoofing :) What I did last night was automated comparing the source ASN to the dest ASN mapped to and reported both the IP + ASN on a single line for those that were interested. I'm seeing a lot of other email related to BCP-38 right now on another list, but I wanted to share some data (again) in public regarding the state of network spoofing out there. I'd rather share some data and how others can observe this to determine how we can approach a fix. Someone spoofing your IP address out some other carrier is something you may be interested to know about, even if you have a non-spoofing network. - jared

5 4

Fwd: [afnog] Introducing Southern Africa Network Operators Group - SAFNOG
by Mark Tinka 29 Jan '14

29 Jan '14

FYI. Cheers, Mark.

1 0