- Test - lists.nanog.org

Switch and router
by Ann Kwok 07 Feb '12

07 Feb '12

Hello There is big congestion between router and switch I read some documents about flowcontral Do I disable or adjust flowcontral at the same? Can flowcontral solve the congestion issue? How can I adjust flowcontral in cisco router and HP switch? Thank you so much

6 6

2012.02.06 NANOG54 day1 afternoon session notes
by Matthew Petach 07 Feb '12

07 Feb '12

My notes from the second half of today's NANOG 54 talks are now up at http://kestrel3.netflight.com/2012.02.06-nanog54-afternoon-session.txt for those catching up remotely before the videos get posted up. Off to the Beer and Gear now. ^_^ Thanks! Matt

2 2

Re: DOS ATTACK ON BGP , LPTS ??
by Peter Ehiwe 07 Feb '12

07 Feb '12

Thanks Roland, Does anyone have a recommended value for tuning LPTS based on experience ? Rgds Peter On Tue, Feb 7, 2012 at 7:45 AM, Dobbins, Roland <rdobbins(a)arbor.net> wrote: > > On Feb 7, 2012, at 1:43 PM, Peter Ehiwe wrote: > > > What is the attacker spoofs the correct peering address , > > In that case, work with your peer(s) to get them to deploy anti-spoofing > filters at their edges. > > > then iACL may not suffice , from experience is the default policer > values for LPTS enough for XR routers > > Hard to say - look at CoPP/LPTS tuning. > > ----------------------------------------------------------------------- > Roland Dobbins <rdobbins(a)arbor.net> // <http://www.arbornetworks.com> > > The basis of optimism is sheer terror. > > -- Oscar Wilde > > -- Warm Regards Peter(CCIE 23782).

1 0

DOS ATTACK ON BGP , LPTS ??
by Peter Ehiwe 07 Feb '12

07 Feb '12

Hi , What is the best way to mitigate DOS attack against the bgp process of a router , is LPTS on IOS-XR enough ? Rgds Peter

2 1

Optimal IPv6 router
by Glen Kent 07 Feb '12

07 Feb '12

Hi, Most routers today are basically IPv4 routers, with IPv6 thrown in. They are however designed keeping IPv4 in mind. With IPv6 growing, if we were to design a native IPv6 router, with IPv4 functionality thrown in, then is it possible to design a more optimal IPv6 router, than what exists today? Glen

9 11

Any Covad / MegaPath folks around?
by Robert Glover 07 Feb '12

07 Feb '12

Hi, Looks like the Connect portal has been down for hours. Can someone from Covad / MegaPath ping me off-list? Thanks! Sincerely, Bobby Glover Director of Information Services South Valley Internet

1 0

2012.02.06 NANOG54 monday morning session notes are up
by Matthew Petach 06 Feb '12

06 Feb '12

I posted my notes from this morning's session at http://kestrel3.netflight.com/2012.02.06-nanog54-morning-session.txt in case people find them to be useful. Thanks! Matt

2 1

Re: Hijacked Network Ranges
by Scott Weeks 06 Feb '12

06 Feb '12

--- mtinka(a)globaltransit.net wrote: From: Mark Tinka <mtinka(a)globaltransit.net> A big fail to our community, for up to this day, not implementing basic routing and forwarding filters that would do away with all this cruft in the first place. Clearly the Youtube/Pakistan/PCCW incident has long been forgotten. ----------------------------------- I know of folks in charge of BGP enabled networks (with downstream BGP customers as well) that have never heard of the Youtube/Pakistan/PCCW incident and don't care if they put extra routes in the table and I doubt that is an isolated situation. Further, I doubt it will change unless they're forced to care by technology somehow. An unfortunate situation for sure... scott

1 0

Hijacked Network Ranges
by Kelvin Williams 06 Feb '12

06 Feb '12

Greetings all. We've been in a 12+ hour ordeal requesting that AS19181 (Cavecreek Internet Exchange) immediately filter out network blocks that are being advertised by ASAS33611 (SBJ Media, LLC) who provided to them a forged LOA. The routes for networks: 208.110.48.0/20, 63.246.112.0/20, and 68.66.112.0/20 are registered in various IRRs all as having an origin AS 11325 (ours), and are directly allocated to us. The malicious hijacking is being announced as /24s therefore making route selection pick them. Our customers and services have been impaired. Does anyone have any contacts for anyone at Cavecreek that would actually take a look at ARINs WHOIS, and IRRs so the networks can be restored and our services back in operation? Additionally, does anyone have any suggestion for mitigating in the interim? Since we can't announce as /25s and IRRs are apparently a pipe dream. -- Kelvin Williams Sr. Service Delivery Engineer Broadband & Carrier Services Altus Communications Group, Inc. "If you only have a hammer, you tend to see every problem as a nail." -- Abraham Maslow

21 34

ISP access in Hebron, KY
by Eric Gauthier 06 Feb '12

06 Feb '12

Hello, We're looking for DIA in the 20 - 50mbps range for a warehouse we have in Hebron, KY. CinBell has been a bit "slow" to respond to our DS3 requets, so I'm wondering who else in town has their own facilities (also wondering who might be a good for a backup circuit)? Thanks! Eric :)

2 1