- Test - lists.nanog.org

question on ptr rr
by garrett.allen＠comcast.net 08 Feb '04

08 Feb '04

this may be deemed off topic - if so apologies in advance. however i respect many of the opinions i see here so thought i would take a chance and ask. we are a stub network, injesting about 30k emails daily. about a year ago we implemented a spam filtering product. it works well. recently we turned on the knob to enable it to do reverse lookups. only the mild version, a reverse is made on the ptr rr for the ip address sending the email. if it fails the spam filter issues a 421 and closes the connection. unfortunately, we have 6 sites thus far that are legitimately trying to communicate with us but don't have ptr's associated with the ip address sending emails. since it obviously isn't a requirement to have one is it generally accepted to do so? any sense for how many end networks do and don't? thanks in advance.

6 6

NANOG30 - Bar connectivity?
by Timothy Brown 08 Feb '04

08 Feb '04

Hi, this may be premature; The wireless in the bar is a little spotty - can someone maybe add an AP or two? Tim

1 0

Fwd: SECURITY: Abuse & upnormal traffic in 207.218.250.181 [ev1.net]
by John Obi 08 Feb '04

08 Feb '04

Hello folks, I have found that ev1 just ignores the abuse emails, and doesn't want to handle the DDoS complaints. Can someone from their NSPs to contact me off the list since this abuse isn't being handled by them correctly? They are being the great hoster of the DDoS bots in the little secret IRC servers runs in ev1 network. EV1 isn't making the Internet secured place at all. Now the ddos bots connect to tw1st142.q8hell.org ports 7721 and 5912 Thanks, -J Note: forwarded message attached. __________________________________ Do you Yahoo!? Yahoo! Finance: Get your refund fast by filing online. http://taxes.yahoo.com/filing.html

1 0

The Cidr Report
by cidr-report＠potaroo.net 08 Feb '04

08 Feb '04

This report has been generated at Sun Feb 8 20:47:27 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 01-02-04 130080 91025 02-02-04 130010 91079 03-02-04 130093 91091 04-02-04 130207 91165 05-02-04 130288 91107 06-02-04 130549 91173 07-02-04 130555 91204 08-02-04 130702 91228 AS Summary 16514 Number of ASes in routing system 6644 Number of ASes announcing only one prefix 1378 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 AT&T WorldNet Services 73517312 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 08Feb04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 130756 91238 39518 30.2% All ASes AS4323 681 204 477 70.0% TW-COMM Time Warner Communications, Inc. AS6197 733 299 434 59.2% BATI-ATL BellSouth Network Solutions, Inc AS7018 1378 964 414 30.0% ATT-INTERNET4 AT&T WorldNet Services AS701 1347 955 392 29.1% ALTERNET-AS UUNET Technologies, Inc. AS7843 506 124 382 75.5% ADELPHIA-AS Adelphia Corp. AS27364 382 33 349 91.4% ACS-INTERNET Armstrong Cable Services AS6198 545 214 331 60.7% BATI-MIA BellSouth Network Solutions, Inc AS4134 653 329 324 49.6% CHINANET-BACKBONE No.31,Jin-rong Street AS22909 338 19 319 94.4% DNEO-OSP1 Comcast Cable Communications, Inc. AS22773 342 34 308 90.1% CCINET-2 Cox Communications Inc. Atlanta AS1239 950 665 285 30.0% SPRINTLINK Sprint AS4355 385 101 284 73.8% AS4355 AS1221 898 640 258 28.7% ASN-TELSTRA Telstra Pty Ltd AS17676 294 41 253 86.1% GIGAINFRA Softbank BB Corp. AS6347 330 83 247 74.8% DIAMOND SAVVIS Communications Corporation AS9583 342 104 238 69.6% SATYAMNET-AS Satyam Infoway Ltd., AS6140 358 126 232 64.8% IMPSAT-USA ImpSat AS25844 243 16 227 93.4% SKADDEN1 Skadden, Arps, Slate, Meagher & Flom LLP AS6478 259 40 219 84.6% ATT-INTERNET3 AT&T WorldNet Services AS209 726 513 213 29.3% ASN-QWEST Qwest AS14654 214 3 211 98.6% WAYPORT Wayport AS13083 216 8 208 96.3% AS13083 Mannesmann Datenverarbeitung Autonomes System AS11305 242 41 201 83.1% INTERLAND-NET1 Interland Incorporated AS2386 417 229 188 45.1% INS-AS AT&T Data Communications Services AS5668 345 159 186 53.9% AS-5668 CenturyTel Internet Holdings, Inc. AS20115 608 422 186 30.6% CHARTER-NET-HKY-NC Charter Communications AS4519 202 19 183 90.6% MAAS Maas Communications AS6327 206 28 178 86.4% SHAW Shaw Communications Inc. AS9929 200 30 170 85.0% CNCNET-CN China Netcom Corp. AS15270 210 40 170 81.0% AS-PAETEC-NET PaeTec.net -a division of PaeTecCommunications, Inc. Total 14550 6483 8067 55.4% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 ANDARA-HSI Andara High Speed Internet c/o Halifax Cable Ltd. 64.62.126.0/23 AS25700 SWIFTDESK SWIFTDESK VENTURE 66.114.0.0/19 AS16526 BIRCH-TELECOM Birch Telecom, Inc. 66.114.28.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.29.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.30.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 66.114.31.0/24 AS15083 INFOLINK-MIA-US Infolink Communication Services, Inc. 69.8.128.0/17 AS7260 NORLIGHT Norlight Telecommunications 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA 192.64.84.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.71.0/24 AS719 LANLINK Elisa Oyj 192.136.79.0/24 AS719 LANLINK Elisa Oyj 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.136.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS DoD Network Information Center 199.114.152.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.154.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.114.156.0/24 AS1913 DLA4 Defense Logistics Agency 199.114.160.0/24 AS1733 CENTAF-SWA AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.0.0/20 AS4658 NETFRONT-AS NETFRONT I.T. LIMITED (HONG KONG) 202.70.16.0/22 AS17888 SINGTEL-HK SingTel Hong Kong Limited 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.128.0/24 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.142.0/24 AS30362 HPT-ASN Hawaii-Pacific Teleport 202.86.171.0/24 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.172.0/23 AS4755 VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 202.86.190.0/24 AS4750 loxley-th Loxley Information Co., Ltd. 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.143.56.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.240.0/20 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.240.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.248.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 203.32.4.0/23 AS7617 AS7617 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.86.2.0/23 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.111.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.135.99.0/24 AS2687 ATGS-MMD-AS AT&T Global Network Services 204.69.144.0/22 AS5668 AS-5668 CenturyTel Internet Holdings, Inc. 204.154.125.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBIT Exobit Networks Inc. 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL Telesat International Ltd. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL Telesat International Ltd. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 210.213.0.0/19 AS6453 GIEUROPE Teleglobe America Inc. 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.36.46.0/24 AS7176 GENUITY-AS7176 Genuity 216.36.47.0/24 AS7176 GENUITY-AS7176 Genuity 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Lame Yahoo social engineering scam
by Scott Call 08 Feb '04

08 Feb '04

I just got the following in my throw-away yahoo account: Dear* YAHOO Users, Th!s _email _inform_ you that your_ _Yahoo_ ID (xxxxx(a)yahoo.com) will be b|ocked after 12 D@YS (@S @FTER autoomateed reegisttration) if you w1ll not sign up on YAHOO! WHITE LIST (T0 s!gnup - Click Here: http://xxxxx.yahoo.com/) This is done beecause we* update now` YAHO0! _not_ autoomateed reegistered user ids. cGTaXb0T1 --------- The URL is an encoded URL that of course points elsewhere. My question is who is stupid enough to actually respond to an email written in 'leet speak like this. My other (and more important) question is, does this indicate yahoo's mail reader suffers from the same URL obscufation bug that IE and Outlook have? (I say have because all they did was turn of auth in URLs, not fix the problem) Also, as a side note I think I've found an interesting spammer/MyDoom connection. Thursday overnight somebody sent a pile of spam with my return address. Luckily nobody bothers to complain to the sender address anymore but I still had to deal with 100+ bounce messages. Anyways, this morning I had a pile of MyDoom bounces in my mailbox. So I'm wondering if whatever master joe-job list the spammers use (since there seem to be just a couple of remotely accessed repositories in my investigations) is also used by MyDoom. -Scott -- Scott Call Router Geek, ATGi, home of $6.95 Prime Rib I make the world a better place, I boycott Wal-Mart VoIP incoming: +1 360-382-1814

3 2

Cisco: limit number of DHCP addresses per VC?
by Claydon, Tom 07 Feb '04

07 Feb '04

Question for the list: Cisco introduced a command in 12.3T to limit DHCP leases on ATM unnumbered interfaces (ip dhcp limit lease per interface). This feature works fine on our 7206VXR, but my problem is that this is a global command. The Redback we were using before had us spoiled by allowing us to specify max DHCP leases per ATM VC! We would like to put other ATM VC's on this router that have different DHCP lease requirements. Is there any way of limiting DHCP leases per VC? Cisco TAC said they didn't have a non-global version of the ip dhcp limit lease per interface command. Our DHCP server is running dhcpd 2.0p15, BTW. Thanks, = TC -- Tom Claydon, IT/ATM Network Engineer Dobson Telephone Company phone: (405) 391-8201 cell: (405) 834-0341

2 1

RE: Stopping open proxies and open relays
by Michel Py 07 Feb '04

07 Feb '04

> Vivien M. wrote: > Now, if hooking up an unsecured computer to a network was > punishable by a $1000 fine, and law enforcement somehow > had the staff to prosecute all offenders (or a > representative sample), I'm sure everybody would agree > that suddenly they'd be able to afford antiviruses. It's not that I don't like the idea, but it's been tried before. Making stupidity punishable by fines does not work; if it did we would not have a budget deficit issue. Michel.

7 9

Re: question on ptr rr
by Randy Bush 07 Feb '04

07 Feb '04

[ private email not quoted ] this is what i call shooting in the dark. what are OBJECTIVE METRICS? for example, can operators measure and publish alpha and beta error rates on a selection of sites of different flavors so we can decide when they are low enough for our flavor of site to enable rdns filters? randy

1 0

hotmail postmaster contact?
by Paul E 07 Feb '04

07 Feb '04

Sorry for the abuse of bandwidth but I've exhausted the standard options. I need a working mail alias that gets to a human postmaster at Hotmail. Have tried postmaster, hostmaster, security and abuse. The only response other than "this alias doesn't work" was from abuse, telling me that the spam didn't originate at hotmail... Sometime in the last 4 weeks or so, they upped the list of IP addr ranges they don't take mail from. In typical micro$quish standards non-compliance, they don't bounce it, they give "250 OK" and then silently trash it. So, I have no way of knowing what they don't like, how to fix it, etc.

1 0

RE: Cisco Router best for full BGP on a sub 5K bidget 7500 7200 or other vendor ?
by Alexander Hagen 07 Feb '04

07 Feb '04

Montara is between Pacifica and Half Moon Bay. Everyone has a different perspective - but all valid. However I would say if you are going to go Cisco - and you have no other BGP gear under Smartnet - you might look at the 3725 maxed out. It is new and you will get support and available for 5,000.00 online, equipped with two onboard Fast Ethernet ports. You are likely to buy only single FE modules at 350.00 rather than 2FE's which are hard to find for cheap, and upgrading memory to 256 Megs DRAM is only an addl 150.00. With that said.... I found a rather stupid article that gave the Riverstone high marks. http://www.nwfusion.com/reviews/2003/0714rev.html?page=1 http://research.mwjournal.com/data/jspdetail?id=1025118725_252&type=PROD &src=mwave&x=841473789 The RS 3000 has 20 gbps non blocking. I am likely to go with the Riverstone. I think I can get it for under 2K with 24 10/100 ports, 256 MB of memory, and 20 gbps non blocking switching fabric. Although I will likely place a Cisco box behind it (eventually) for IPSec and the like. Platform Features Feature-rich Wire-speed Services IP routing, unicast, and multicast Routing in hardware on each line card LSR and LER MPLS support in hardware RSVP-TE and LDP label distribution and signaling MPLS traffic engineering support Security (ACLs, L2 filters) Layer 4 application-flow switching and QoS Network Address Translation (NAT) Hardware-based Rate Limiting Jumbo Frame support VLANs based on port or protocol Server Load Balancing (LSNAT) Highly Fault Tolerant Redundant power supplies (RS 3000) Hot-swappable media modules Standards-based VRRP Layer 2 and 3 redundant protocol support Extensive Management Wire-speed full RMON/RMON2 SNMP manageable SSH RADIUS TACACS+ RS-232 (out-of-band management) Command Line Interface (CLI) Interfaces 10/100 Base-TX 100 Base-FX 1000 Base-SX 1000 Base-LX 1000 Base-TX 1000 Base-LH (70Km) T1/E1 T3/E3 ATM-OC-3c Up to 4,096 VLANs Up to 256,000 routes Up to 20,000 security/access control filters Up to 512,000 Layer 4 application flows Up to 256,000 Layer 2 MAC addresses RS 1000: 12 Gbps non-blocking switching fabric RS 1000: 4.6 million packets per second routing throughput RS 3000: 20 Gbps non-blocking switching fabric RS 3000: 9.5 million packets per second routing throughput MTBF (predicted) > 200,000 hours Physical Dimensions: 3.25" H x 17" W x 18.5" D (8.25 cm x 43.2 cm x 47 cm) Weight: 20 lbs. (9.1 kg) Environmental Specifications Operating Temp: +0º to +40ºC (32º to 104ºF) Non-operating Temp: -40º to +70ºC (-40º to 158ºF) Operating Relative 10% to 90% (non-condensing) Humidity: Non-operating 5% to 95% maximum Relative Humidity: (non-condensing) Altitude, Operating 10,000 ft (3,000 m) maximum and Non-operating: Shock and Vibration:GR63 Power Requirements AC Input current: 3.0 A - 1.5 A AC Input voltage: 100 to 240 VAC AC Frequency: 50 to 60 Hz DC Input current: 8.0 A DC Input voltage: -48 to -60 VAC Agency Standards and Specifications Safety: Certified UL1950, CSA C22.2 No. 950, EN60950, IEC950, and 72/73/EEC Electromagnetic Compliant with the requirements of compatibility: FCC Part 15, CSA C108.8, EN55022, VCCI, EN50082-1, and 89/336/EEC Standards Supported IETF Standards Support RFC No. Title RFC 768 UDP RFC 783 TFTPv2 RFC 791 IP RFC 792 ICMP RFC 793 TCP RFC 826 ARP RFC 854 Telnet RFC 951 BootP RFC 1058 RIP v1 RFC 1075 DVMRP RFC 1112 Host Extensions for IP Multicasting RFC 1157 SNMPv1 RFC 1195 Use of OSI IS-IS for Routing in TCP/IP and Dual Environments RFC 1245 OSPF Protocol Analysis RFC 1246 Experience with the OSPF Protocol RFC 1256 ICMP Router Discover Message RFC 1265 BGP Protocol Analysis RFC 1266 Experience with the BGP Protocol RFC 1267 BGP-3 RFC 1269 Definitions of Managed Objects for BGP-3 RFC 1332 PPP IPCP RFC 1349 Type of Service in the Internet Protocol Suite RFC 1397 Default Route Advertisement in BGP-2 and BGP-3 RFC 1403 BGP OSPF Interaction RFC 1519 CIDR: an Address Assignment and Aggregation Strategy RFC 1542 Clarifications and Extensions for the Bootstrap Protocol RFC 1552 PPP IPXCP RFC 1570 PPP LCP Extensions RFC 1586 Guidelines for Running OSPF Over Frame Relay Networks RFC 1587 OSPF NSSA Option RFC 1631 IP NAT RFC 1638 PPP BCP RFC 1657 Definitions of Managed Objects for BGP-4 using SMIv2 RFC 1661 PPP RFC 1662 PPP in HDLC-like Framing RFC 1745 BGP-4/IDRP for IP and OSPF Interaction RFC 1765 OSPF Database Overflow RFC 1771 BGP-4 RFC 1772 Application of BGP in the Internet RFC 1773 Experience with the BGP-4 Protocol RFC 1774 BGP-4 Protocol Analysis RFC 1793 Extending OSPF to Support Demand Circuits RFC 1812 Router Requirements RFC 1918 Address Allocation for Private Internet Space RFC 1923 RIPv1 Applicability Statement for Historic Status RFC 1930 Guidelines for creation, selection, and registration of an AS RFC 1966 BGP Route Reflection Alternative to full mesh IBGP RFC 1990 PPP MLP RFC 1997 BGP Communities Attribute RFC 1998 BGP Community Attribute in Multi-home Routing RFC 2082 RIP-2 MD5 Authentication RFC 2131 DHCP RFC 2225 Classical IP and ARP over ATM RFC 2236 Internet Group Management Protocol, Version 2 RFC 2270 Using a Dedicated AS for Sites Homed to a Single Provider RFC 2328 OSPFv2 RFC 2329 OSPF Standardization Report RFC 2236 IGMP-2 RFC 2338 VRRP RFC 2362 PIM-SM RFC 2370 OSPF Opaque LSA Option RFC 2385 Protection of BGP Sessions via the TCP MD5 Signature Option RFC 2390 Inverse Address Resolution Protocol RFC 2391 LSNAT Load Sharing using IP Network Address Translation RFC 2427 Multi-protocol Interconnect over Frame Relay RFC 2439 BGP Flap Damping RFC 2547 BGP/MPLS VPNs RFC 2453 RIPv2 RFC 2519 A Framework for Inter-Domain Route Aggregation RFC 2570 Introduction to Version 3 of the Internet-standard Network Management Framework RFC 2571 An Architecture for Describing SNMP Management Frameworks RFC 2572 Message Processing and Dispatching for the Simple Network Management Protocol (SNMP) RFC 2573 SNMP Applications RFC 2574 User-based Security Model (USM) for version 3 of the Simple Network Management Protocol (SNMPv3) RFC 2575 View-based Access Control Model (VACM) for the Simple Network Management Protocol (SNMP) RFC 2576 Coexistence between Version 1, Version 2, and Version 3 of the Internet-standard Network Management Framework RFC 2578 Structure of Management Information Version 2 (SMIv2) RFC 2579 Textual Conventions for SMIv2 RFC 2580 Conformance Statements for SMIv2 RFC 2615 PPP over SONET/SDH RFC 2684 Multi-protocol Encapsulation over ATM Adaptation Layer 5 RFC 2702 Requirements for Traffic Engineering over MPLS RFC 2763 Dynamic Hostname Exchange Mechanism for IS-IS RFC 2796 BGP Route Reflection Alternative to full mesh IBGP RFC 2842 Capabilities Advertisement with BGP-4 RFC 2858 Multi-protocol Extensions for BGP-4 RFC 2865 Remote Authentication Dial In User Service (RADIUS) RFC 2866 RADIUS Accounting RFC 2918 Route Refresh Capability for BGP-4 RFC 2925 Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations RFC 2963 Dynamic Hostname Exchange Mechanism for IS-IS RFC 2966 Domain-wide Prefix Distribution with Two-Level IS-IS RFC 2973 IS-IS Mesh Groups RFC 3031 Multi-protocol Label Switching Architecture RFC 3032 MPLS Label Stack Encoding RFC 3036 LDP Specification RFC 3065 Autonomous System Confederations for BGP RFC 3137 OSPF Stub Router Advertisement RFC 3209 RSVP-TE Extensions to RSVP for LSP Tunnels RFC 3210 Applicability Statement for Extensions to RSVP for LSP Tunnels IETF Standards MIB Support RFC No. Title RFC 1471 PPP-LCP-MIB RFC 1472 PPP-Sec-MIB RFC 1473 PPP-IP-NCP-MIB RFC 1474 PPP-Bridge-NCP-MIB RFC 1493 Bridge-MIB RFC 1657 BGP4 using SMIv2-MIB RFC 1595 SONET/SDH Interface Type-MIB RFC 1695 ATM-MIB RFC 1757 RMON-MIB RFC 1724 RIPv2-MIB RFC 1850 OSPFv2-MIB RFC 1907 SNMPv2-MIB RFC 2011 IP-MIB RFC 2012 UDP-MIB RFC 2013 TCP-MIB RFC 2021 RMON2 using SMIv2-MIB RFC 2096 IP-Forward-MIB RFC 2115 Frame-Relay-MIB RFC 2233 IF using SMIv2-MIB RFC 2358 EtherLike-MIB RFC 2495 DS1, E1, DS2, E2 Interface Types-MIB RFC 2496 DS3/E3-MIB RFC 2618 Radius-Auth-Client-MIB RFC 2668 IEEE 802.3 Medium Attachment Units (MAUs)-MIB RFC 2674 P-Bridge-MIB, Q-Bridge-MIB RFC 2787 VRRP-MIB Standards and Protocols IP routing: RIPv1/v2, OSPF, BGP-4, IS-IS Multicast support: IGMP, DVMRP, PIM-DM, PIM-SM QoS: Application level, RSVP IEEE 802.1D IEEE 802.1p IEEE 802.1Q IEEE 802.1x IEEE 802.3 IEEE 802.3ad IEEE 802.3u IEEE 802.3x IEEE 802.3z Alexander Hagen Etheric Networks Incorporated, A California Corporation 527 Sixth Street No 371261 Montara CA 94037 Main Line: (650)-728-3375 Direct Line: (650) 728-3086 Cell: (650) 740-0650 (Does not work at our office in Montara) Home: (Emgcy or weekends) 650-728-5820 fax: (650) 240-1750 http://www.etheric.net -----Original Message----- From: william(a)elan.net [mailto:william@elan.net] Sent: Saturday, February 07, 2004 5:19 AM To: Alexander Hagen Subject: Re: Cisco Router best for full BGP on a sub 5K bidget 7500 7200 or other vendor ? 7500 is your best option indeed, I'm using several of these and have close to 300Mb passing through at max, primarily ethernet, but also have serial and ATM interfaces; multiple BGP feeds with full table and quite complex access lists - and its all WORKING! One thing to remember is that while 7500 line was started long ago, there have been new router cards and VIP cards released. So if you have 7500 with RSP4 or RSP8 and use VIP2-50 with newear PA modules, you're really not in 1995 any more... For VOIP you'll need different routers but I don't think you were talking about using your core router to provide voip handoffs. Traffic accounting is working fine with 7500 and external unix system that actually does it though SNMP. P.S. Where is Montara located? I see familar 650 area code and I though I knew all the cities nearby, but definetly never been to Montara... On Sat, 7 Feb 2004, Alexander Hagen wrote: > > I have been looking for a sub 5K router on the used market to support > around 30-50 megs peak traffic. > > I have found the 7507/7513 but these things appear to have been > manufactured in 1995 ! > > Then there is the 7206 and the 7206 VXR - I guess the 7206 itself is > just as old as the 7507 and 7513 and the same price at the least - > perhaps because of its form factor. > > The 7206 VXR makes me feel a little better - as it was manufactured in > 1999? > > We are looking at a pure Ethernet environment - but with the desire to > support a lot of value added services - such as IPSEC, VoIP, traffic > accounting. Cisco's have traditionally been good at PRI and T-1 and T-3 > type interfaces - which we don't really need -which leads me to think > Foundry might be an option. > > Juniper appears to be at least 7,000.00 - and I am worried about support > - based on other articles I have seen. > > So the question is would a layer 3 switch be a good idea with a lot of > memory - for example the Cat 6509 ? > > Perhaps foundry BigIron with Jetware ? > > Please give me your thoughts - it is hard to believe that the 7507 and > 7513 are my best options.... > > Alexander Hagen > Etheric Networks Incorporated, A California Corporation > 527 Sixth Street No 371261 > Montara CA 94037 > Main Line: (650)-728-3375 > Direct Line: (650) 728-3086 > Cell: (650) 740-0650 (Does not work at our office in Montara) > Home: (Emgcy or weekends) 650-728-5820 > fax: (650) 240-1750 > http://www.etheric.net

1 0