- Test - lists.nanog.org

route flap dampening
by Jonathan Park 27 Apr '09

27 Apr '09

Hello all, I was wondering how many of you use route flap dampening in your network. If you have it enabled, what is the main reason? Thank you! Jonathan _________________________________________________________________ Windows Live™ Hotmail®:…more than just e-mail. http://windowslive.com/online/hotmail?ocid=TXT_TAGLM_WL_HM_more_042009

4 4

OOB customer communications (Re: Looking for Support Contact at Equifax)
by William McCall 27 Apr '09

27 Apr '09

On Sun, Apr 26, 2009 at 11:18 PM, JC Dill <jcdill.lists(a)gmail.com> wrote: > How else do you propose getting outage information to your customers? > I should have clarified. Third party physical control isn't necessarily the issue, but third party administration and delivery (in the context of twitter) is. Dedicated servers are cheap and you can maintain control of the content. Its not quite the same as using twitter or other third party SaaS that is similar (which can, invariably, control the content at its whim and is a nightmare to manage persons authorized to view such outage info, depending on the service) Or even a mailer that is outside of the scope of your service ops and permit only customers to subscribe. Again, its more about distribution in these environments. If I'm Company A, I really don't want to readily provide my competitor, Company B, with information on outages and a full history of it for them to use in some marketing device (which can't be compared because Company B does not publish their info, but instead provides some nice glossy-paper stats). Physical control certainly can't be the question.. or we'd have the same argument in circles, "If we have physical control, how can we ensure the outage doesn't affect this net too? Better question, why can't we fail over to the net that's working to send these notifications/updates for our down services if the net isn't affected?" That point is moot. My biggest complaint has been with networks that setup a channel like this > but then get "too busy" during an outage to make use of it. If you are > going to setup a channel like this, make sure you use it. Also, if you post > a partial update, make sure you follow up with more information when you > have it. Some of us read the archives to see if this information was posted > and followed-up on in a timely fashion, to evaluate the outage reporting > service record before signing up. > The way notifications should be distributed is in a proactive manner and followed up as a ticket or some other relevant mechanism. Implementing a process like this is trivial in many environments. Incident response should, in most cases, include a mechanism like this that has already been deployed today. Modifications (technically speaking) should not be a big issue. --WJM IV

2 2

Re: OOB customer communications (Re: Looking for Support Contact at Equifax)
by Charles＠thewybles.com 27 Apr '09

27 Apr '09

Twitter URL is an rss feed as well. ------Original Message------ From: JoeSox To: nanog(a)nanog.org Subject: Re: OOB customer communications (Re: Looking for Support Contact at Equifax) Sent: Apr 26, 2009 8:08 PM On Sun, Apr 26, 2009 at 7:40 PM, Mike Lewinski <mike(a)rockynet.com> wrote: > We're experimenting with Twitter as a means to communicate anytime there are > system-wide outages (in addition to regular maintenance notifications). > Adoption is slow but I foresee growth once we really get the word out. > Twitter over RSS? I'd choose RSS. All I need is a url; not even a user agreement! -- Later, Joe Sent via BlackBerry from T-Mobile

4 3

ping TWTelecom
by Jon Lewis 27 Apr '09

27 Apr '09

Anyone home with BGP/Routing access? I opened a ticket last Friday. As a gigabit ethernet customer with a rather simple problem on your end of the BGP config, it'd be nice to actually get some kind of response beyond "Your customer issue has been entered as Change Request #..." BTW...either my inoc-dba foo is weak (quite possible...I've used it so little), or Lars Rocha 4323 * 382 is invalid. ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

1 0

integrated KVMoIP and serial console terminal server
by Joe Abley 25 Apr '09

25 Apr '09

Hi all, What is everybody's favourite combination rack-mount VGA/USB KVM-over- IP and serial console concentrator in 2009? I'm looking for something that will accommodate 8 or so 9600bps serial devices and about 12 VGA/USB devices, all reachable over IP via sane means (ssh, https, etc). Being able to trunk everything through cat5E/ RJ45 plant is not necessary; in this application everything is in the same cabinet. Avocent seem to make a likely-looking box, but (a) it's a bit insanely expensive, and (b) the adapters that you connect using RJ45 to the avocent and via RS232 to the serial devices *each seem to require a power supply* which frankly makes me recoil in horror. Perhaps I mis- read the glossy web page. Advice would be appreciated; direct mail is fine; I can summarise back to the list if there is interest in me doing so. Joe

9 9

Re: Important New Requirement for IPv4 Requests
by Roger Marquis 25 Apr '09

25 Apr '09

Rich Kulawiec wrote: > If the effort that will go into administering this went instead > into reclaiming IPv4 space that's obviously hijacked and/or being > used by abusive operations, we'd all benefit. But they can't do that without impacting revenue. In order to continue charging fees that are wholly out of proportion to their cost ARIN must: A) ignore all the unneeded legacy /16 allocations, even those owned by organizations with fewer than 300 employees (like net.com) who could easily get by with a /24 B) do nothing while IPv6 languishes due to the absence of a standard for one-to-many NAT and NAPT for v6 and v4/v6 C) periodically raise fees and implement minimal measures like requiring someone to sign a statement of need, so they can at least appear to have been proactive when the impacts of this artificial shortage really begin to impact communications Bottom line: it's about the money. Money and short-term self-interest, same as is causing havoc in other sectors of the economy. Nothing new here. IMO, Roger Marquis

26 42

Config Backup / Inventory
by Joshua Eyres 25 Apr '09

25 Apr '09

Hi, I am looking for a bit of advice around configuration backup / inventory. We currently have a large multi-vendor network which is currently managed through two separate tools (rancid - http://www.shrubbery.net/rancid and ns4 - http://www.noodles.org.uk/ns4.html) Both tools do the job very well, but management have asked that we look for commercial alternatives that have a proper support organisation looking after them. IP Service Activator has been mentioned as something which can fit this role, but I haven't had any experience and I haven't heard a lot of good things about it. We are looking for a tool which is flexible that allows configuration backup to textual form for easy restoration as well as the ability to deploy scripted changes to the network quickly. Do people generally use free tools for network management or are there viable commercial alternatives? Thanks, Josh

9 8

Broadband Subscriber Management
by Sherwin Ang 25 Apr '09

25 Apr '09

Hello Nanog! i just would like to see how other operators are handling broadband/DSL subscribers in their BRAS. Currently, we are implementing PPPoE with AAA on our Redback SE's and Cisco boxes. As our subscriber base grows and grows, management of user logins, passwords, password resets, password changes are getting really huge. Some customers also complains about the method of logging in, asking for an easier way to do it or dump logins altogether. We're looking at DHCP/CLIPS for Redback but haven't really tested it since it requires a new license for it. For Cisco, we've been empty so far in looking for a solution wherein we still have accounting and rate-limiting on subscriber vc's. how are network operators in your areas do it? DHCP? if i do DHCP, will i still have the flexibility of sending a radius reply attribute so i could rate-limit the subscribers speed? or still offer speed on demand via radius/time-based upgrade of their rate-limits during off-peak hours? thank you for any insights that you may share. -Sherwin

13 18

RE: Important New Requirement for IPv4 Requests
by Skywing 25 Apr '09

25 Apr '09

Keep in mind that you also need to patch your clients for perf improvements bidirectionally. As well as patching locally means you must assume responsibility for custom builds for security fixes on all of your clients and servers. - S -----Original Message----- From: Kevin Oberman <oberman(a)es.net> Sent: Friday, April 24, 2009 13:39 To: Skywing <Skywing(a)valhallalegends.com> Cc: Jo Rhett <jrhett(a)netconsonance.com>; Joe Greco <jgreco(a)ns.sol.net>; bmanning(a)vacation.karoshi.com <bmanning(a)vacation.karoshi.com>; nanog(a)nanog.org <nanog(a)nanog.org> Subject: Re: Important New Requirement for IPv4 Requests > From: Skywing <Skywing(a)valhallalegends.com> > Date: Fri, 24 Apr 2009 10:55:07 -0500 > > Of course, sftp and other ssh-based protocols are *still* hamstrung to > a maximum of 32k data outstanding due to hardcoded SSH channel window > sizes by default for most people, unless you're patching up both your > clients and servers. > > Sadly, this blows ssh out of the water for anything with even modest > high-bitrate requirements over moderate-BDP links. The HPN patches for OpenSSH are readily available and, at least on FreeBSD, including them is just a single checkbox when you install. That said, I have been told that there is a corner case where a transfer using the HPN patches will lock up. I have never seen it, but that is purported to be the reason that OpenBSD has not accepted the patches for the base OpenSSH software. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman(a)es.net Phone: +1 510 486-8634 Key fingerprint:059B 2DDF 031C 9BA3 14A4 EADA 927D EBB3 987B 3751

1 0

IXP
by Sharlon R. Carty 24 Apr '09

24 Apr '09

Hello NANOG, I like would to know what are best practices for an internet exchange. I have some concerns about the following; Can the IXP members use RFC 1918 ip addresses for their peering? Can the IXP members use private autonomous numbers for their peering? Maybe the answer is obviuos, but I like to know from any IXP admins what their setup/experiences have been. -- --sharlon

40 86