- Test - lists.nanog.org

Telefonica network contacts to resolve reachability issues.
by David Ulevitch 22 Aug '07

22 Aug '07

Is anyone from Telefonica around that can help debug some technical issues regarding reachability to a number of prefixes across a few ASs? The contact info on puck.nether.net bounces and info(a)us.telefonica.com is a bitbucket from all outward appearances. This has been going on for at least a month with no fix or reply to emails. Here are some example IPs that aren't reachable: (host, asn, ip) ns1.everydns.net | 15135 | 208.76.56.56 ns2.everydns.net | 3557 | 204.152.184.150 ns3.everydns.net | 26228 | 208.96.6.134 ns4.everydns.net | 3356 | 64.158.219.3 Thanks. David Ulevitch EveryDNS 415 287 7721

1 0

Re: For want of a single ethernet card, an airport was lost ...
by leeyao＠trashymail.com 22 Aug '07

22 Aug '07

The government is completely incompetent. Public schools are in horrible condition, government networks constantly get failing or D grades, and on top of all this President Bush insists the Iraq war is necessary. What bull...I\'m surprised a member of the press hasn\'t killed Bush..

2 1

RE: Does anyone multihome anymore?
by David Hubbard 22 Aug '07

22 Aug '07

From: Mike Tancsa > > Hi, > In my case, I have 6453 and 174 for transit. I want to get to 577 > which is directly connected to 6453 and 174. 577 has a higher local > pref on paths via 174. Short of shutting my 174 session (or some > deaggregation), I dont have a way to influence how 577 gets back to > me. I can easily exit out 6453, but it does nothing for the return > packets. I have enough capacity on 6453 to handle all my traffic, > but its a Draconian step to take and some traffic via 174 is fine and > would be worse if I fully shut the session. (ie. peers of 174 > in Toronto) That's because Cogent has chosen to not give us the BGP communities needed to influence traffic destined to you from their other peers. They're one of the providers I use and I just turn them off when they are having issues. With Level 3, for example, I can path prepend to just certain remote AS's, etc., it's nice to have that control. Dave

1 0

Re: Does anyone multihome anymore? (was: Re: Cogent latency / congestion)
by Mike Tancsa 22 Aug '07

22 Aug '07

At 03:49 AM 8/22/2007, Security Admin (NetSec) wrote: >Pardon my forwardness, but don't people just multi-home these days? If your Multihoming is great for when there is a total outage. In the case of Cogent on Monday, it wasnt "down"... In this case, there is only so much you can do to influence how packets come back at you as BGP doesnt know anything about a "lossy" or slow connections. ---Mike

1 0

Transatlantic Ethernet suggestions (London - Toronto)
by Simon Lockhart 22 Aug '07

22 Aug '07

Hi, I'm in the process of building a new network, and have a requirement for an ethernet link between London (Telehouse, Redbus Sovereign, or Interxion), and Telehouse Canada (151 Front St, Toronto). I'm looking for either a 10M link, or (if the price is good) fractional 100M (e.g. 30M). I've already got pricing from Hibernia (EoTDM), and Cogent (EoMPLS), but does anyone have any recommendations for who else should be able to provide this? Does anyone have any experiences (good or bad) of Cogent's transatlantic ethernet services that they could share with me off-list? Many thanks, Simon

1 0

L2VPN Interworking IP Mode
by ALEJANDRO ESQUIVEL RODRIGUEZ 22 Aug '07

22 Aug '07

Hi,,, group Someone have experience with L2vpn interworking IP Mode feature with others manufacturers (Non-Cisco). I don't know,,, maybe Juniper, Alcatel-Lucent. I need a solution for interworking: C1 -- Ethernet -- ATM --- FrameRelay -- C2 C1 = Customer Site 1 C2 = Customer Site 2 Any Solution or live experience ??? Regards !!!! Alejandro Esquivel Rodriguez NOC - RACSA (506) 287-0404

1 0

L2VPN Interworking IP Mode
by ALEJANDRO ESQUIVEL RODRIGUEZ 21 Aug '07

21 Aug '07

1 0

inter-domain link recovery
by Chengchen Hu 21 Aug '07

21 Aug '07

Hi, folks I find that the link recovery is sometimes very slow when failure occures between different ASes. The outage may last hours. In such cases, it seems that the automatic recovery of BGP-like protocol fails and the repair is took over manually. We should still remember the taiwan earthquake in Dec. 2006 which damaged almost all the submarine cables. The network condition was quit terrible in the following a few days. One may need minutes to load a web page in US from Asia. However, two main cables luckly escaped damage. Furthermore, we actually have more routing paths, e.g., from Asia and Europe over the trans-Russia networks of Rostelecom and TransTeleCom. With these redundent path, the condition should not be that horrible. And here is what I'd like to disscuss with you, especially the network operators, 1. Why BGP-like protocol failed to recover the path sometimes? Is it mainly because the policy setting by the ISP and network operators? 2. What is the actions a network operator will take when such failures occures? Is it the case like that, 1)to find (a) alternative path(s); 2)negotiate with other ISP if need; 3)modify the policy and reroute the traffic. Which actions may be time consuming? 3. There may be more than one alternative paths and what is the criterion for the network operator to finally select one or some of them? 4. what infomation is required for a network operator to find the new route? Thank you. C. Hu

20 54

question on algorithm for radius based accouting
by Joe Shen 21 Aug '07

21 Aug '07

hi, I 'google' algorithm for radius based accounting. but can't find anything. My question is: what's the best algorithm for constrcting broadband access record from radius accouting packets? To my knowledge, some system takes: Record Accouting-on packet arriving time -> record Accouting-Off packet's Acct-Session-Time and Acct-Delay-Time -> The Log-off time is calculated as: Accouting-on time + ( Acct-Session-Time - Acct_delay-Time) But, some other takes : Record Accouting-off arriving time --> record Accouting-Off packet's Acct-Session-Time and Acct-Delay-Time --> Log-on time is calculated as: Accouting-off arriving time - ( Acct-Session-Time - Acct_delay-Time) Are the two methods have the same effect on calculating result? If radius packets were sent to two accouting systems simulataneusly, while the two system takes the different algorithm, will there be any difference between the result of accouting ? regards Joe __________________________________ Yahoo! Movies - Search movie info and celeb profiles and photos. http://sg.movies.yahoo.com/

4 6

Re: For want of a single ethernet card, an airport was lost ...
by Paul Ferguson 21 Aug '07

21 Aug '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Stephen Sprunk" <stephen(a)sprunk.org> wrote: >Such secondary procedures are okay in the banking world, where you can >back out transactions that an audit reveals are fraudulent after the fact. The same does not apply to letting persons across a border where you can't retroactively deny them entry after they've killed a bunch of people (and, most likely, martyred themselves). It's the same problem with voting systems, actually: the anonymity requirements mean all security hinges on making sure only authorized people vote, and only once at that; you can't back out fraudulent votes after they're cast, which is why all of the attacks are on the authorization system and being undetected in an audit doesn't matter. > It does matter. Unfortunately, find ourselves in a position where easy business decisions allow people to make very bad technical decisions, and put the integrity of their network security directly in the path of "test". "Test" is not a good business decision, because if there is a possibility where things can be compromised, generally they will be. We (collectively) have done a very fine job of delivering functionality first, and security secondly. That puts most of us in the position of the 'Little Dutch Boy', with our finger in the security dike. So, having said all that, it's pretty difficult to figure out where the problems and solutions actually meet. We're actually at a very difficult cross-roads right now. Cheers, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFGymB3q1pz9mNUZTMRAssqAJ4+J5jhtDoFWO81cjSvZ9JXArTMqgCguyzL R3oyka3IzcgVPtiFaYNOUUo= =2oUE -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0