- Test - lists.nanog.org

CERT DNS Off air?
by Mark Vevers 14 Oct '03

14 Oct '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 dig @192.88.209.21 cert.org SOA ; <<>> DiG 9.2.1 <<>> @192.88.209.21 cert.org SOA ;; global options: printcmd ;; connection timed out; no servers could be reached Same for .5 their other DNS server .... traceroutes die at: cert-i1.psc.net (192.88.115.90) 99.533 ms 100.103 ms 99.858 ms Although from some other traceroute sites we can get one hop further if the enter cert's network via cert-i2: 192.88.209.195 (192.88.209.195) 80.127 ms 79.990 ms 80.038 ms Also, using other DNS search tools on the net reveals no answer .... Mark - -- Mark Vevers. mark(a)ifl.net / mark(a)vevers.net Principal Internet Engineer, Internet for Learning, Research Machines Plc. (AS5503) - -- GPG Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xB08F3CA3 Fingerprint: 85BA 30C4 9EC8 1792 4C8C C31E 58B5 3D1C B08F 3CA3 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQE/i9BOWLU9HLCPPKMRAsZXAJ9l3P9cfJzyYqfmb4fxLo8s0+osTwCeLg4c 8+VORXGcoDHtoXjhVF1eFtQ= =K+Xm -----END PGP SIGNATURE-----

1 0

Re: Extreme BlackDiamond
by Michael.Dillon＠radianz.com 14 Oct '03

14 Oct '03

>> and I would be happy to see the list owner come >> down hard on the perp. Banishment? >You should make sure you know who the perp is before making such >pronouncements (or maybe it doesn't matter). Not really. It's the list owner who should know who the perp is before taking action. In any case, it's quite easy to figure out who dragged the dispute onto the list by checking the incoming messages. In this case one person sent a private email and the perp sent a profane reply copied to the list. Clearcut case.

1 0

Re: ... WWIU / Orientation
by Johnny Eriksson 14 Oct '03

14 Oct '03

> > | "From now on, we should make this a primary distinction between switch > > | and a router: If a device has vertical line cards, it is a router, if > > | horizontal, it is a switch, unless there are two or more vertical slots > > | within any horizontal slot plane, then it is, in fact, a router." > > | > > | How does that sound? > > > > Like the start of some new RFC :-) > > > > which way is up? perhaps you had better state the > problem in terms of X,Y,Z coordinates at a minium. > Adding the fourth vector, time, may be useful as well; > e.g. "... it was a router last night..." maybe polar coordinates are better situated for distance vector protocols? > --bill --Johnny

1 0

Juniper M7i, M10i and the US DREN's IPV6 project
by Eric Kuhnke 13 Oct '03

13 Oct '03

Here are some interesting tidbits found recently... The US DoD will be using a Juniper "M7i" for their ipv6 testbed: https://spot.hpcmo.hpc.mil/hpc/docs/Htdocs/DOC-MIL/DREN/CONFERENCE/2003/200… Mention of the M7i and M10i in this document: http://216.239.41.104/search?q=cache:CHexJWF9Db0J:www.ietf.org/IESG/Impleme… From the PDF, regarding DREN implemention of ipv6: No great incentive for DREN sites to implement IPv6 no near term win additional effort and complexity, generally not funded Can't deploy in a safe and secure manner Existing DREN intrusion detection (IDS) architecture incompatible with maturity of products in use Juniper port mirror lacks IPv6 support Anybody know what a the new M7i and M10i routers are? Specs, price estimates, release dates, etc?

3 2

RE: Extreme BlackDiamond
by Michel Py 13 Oct '03

13 Oct '03

> Richard A Steenbergen wrote: > So a 7500 with a fast cache is a L3 switch? :) Of course. It does wire-speed switching with one and Possibly more CX-EIP6 if you enable dCEF :-) Michel.

1 0

RE: Extreme BlackDiamond
by Michel Py 13 Oct '03

13 Oct '03

> Robert Boyle wrote: > "From now on, we should make this a primary distinction between > switch and a router: If a device has vertical line cards, it is > a router, if horizontal, it is a switch, unless there are two > or more vertical slots within any horizontal slot plane, then > it is, in fact, a router." > How does that sound? That would make a great April 1 RFC! Michel.

1 0

RE: Extreme BlackDiamond
by sthaug＠nethelp.no 13 Oct '03

13 Oct '03

> > On the other hand, 6500s can do both L2 and L3 rather well, including > > BGP. > > Aren't most of the 6500 blades the same as the 7600 ones anyway? Between > these two IMHO we are looking at a blurry distinction between a router > with very good switching capabilities and a L3 switch with very good > routing capabilities. Until the Sup720, it was simple: 6500 with Sup2/MSFC2/PFC2 and at least one OSM equals 7600. The difference is mostly a marketing one. I don't understand how you can differentiate between a router and an L3 switch. In my view "L3 switch" is a marketing term. All high end boxes do hardware based IP forwarding, whether their ancestry is from the L2 or the L3 side. Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no

5 4

Re: Extreme BlackDiamond
by Robert Boyle 13 Oct '03

13 Oct '03

At 04:43 PM 10/13/2003, alex(a)pilosoft.com wrote: > > 7600 is also vertical boards whereas the 6500 is horizontal. > >Yep, I think from now on, we should make this a primary distinction >between switch and a router: If a device has vertical line cards, it is a >router, if horizontal, it is a switch. > >Works well for 7500/12000/5x00/6500. ;) A small problem... all of my 7200s have horizontal line cards as do the Juniper M5/7/10/20. The smaller 7100, 3700, 3600, 2600 also have horizontal line cards too. So... here is a correction. "From now on, we should make this a primary distinction between switch and a router: If a device has vertical line cards, it is a router, if horizontal, it is a switch, unless there are two or more vertical slots within any horizontal slot plane, then it is, in fact, a router." How does that sound? -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

4 5

Reserved ASN 64702, 6to4, 2 ghosts, other oddities and still no working contacts...
by Jeroen Massar 13 Oct '03

13 Oct '03

-----BEGIN PGP SIGNED MESSAGE----- Checking http://www.sixxs.net/tools/grh/lg/?show=bogons&find=::/0 People might want to filter on private ASN's also when that ASN is being used as "transit"... 2001:a40::/32 AS64702 is reserved (path: 15516 3257 2497 4697 2914 10109 4538 4787 64702 20646 8763 5539 1930 9186) Ghost Route (14/12) 3ffe:3500::/24 3ffe:4005:fefe:: 25396 1752 10109 4538 4787 64702 20646 8319 We still have these 6to4 specifics btw: 2002:c2b1:d06e::/48 More specific 6to4 prefix (194.177.208.110/32) from AS5408 2002:c8a2::/33 More specific 6to4 prefix (200.162.0.0/17) from AS15180 2002:c8c6:4000::/34 More specific 6to4 prefix (200.198.64.0/18) from AS15180 2002:c8ca:7000::/36 More specific 6to4 prefix (200.202.112.0/20) from AS15180 And nopes, no contact has been made yet, apparently having your email address listed in the registry frees you of any obligations... Another funny one: 3ffe:3::/32 Subnet of 3ffe::/24 Mismatching origin ASN, should be 4555 (now: 29216) While there also is an announcement for: 2001:7fe::/32 I-rootserver-net-20030916 The ghosts of this month: 3ffe:1f00::/24 3ffe:2400::/24 Both with "10318 5623" common in their paths, obvious isn't it ? Oh and yes, still no contact from anybody at nortel, apparently that company doesn't know what IPv6 is. AS10318 (check above also) is still announcing *their* block and still haven't made any comment or reply back whatsoever. AS10318 have their own pTLA but apparently are not contactable for that pTLA either. If anybody knows someone alive for 3ffe:1300::/24 or AS762 or AS10318 please notify them. Maybe posting to nanog raises some people from sleep. Mailing the whois contacts directly doesn't help apparently. Greets, Jeroen -----BEGIN PGP SIGNATURE----- Version: Unfix PGP for Outlook Alpha 13 Int. Comment: Jeroen Massar / jeroen(a)unfix.org / http://unfix.org/~jeroen/ iQA/AwUBP4dLximqKFIzPnwjEQKluACglQJ+2QtJZ6O2fJZShwxLe0Z6Fz8AnRym p0Clq/HyC9EoC/RsaYudqZey =XBo4 -----END PGP SIGNATURE-----

4 7

Re: i'd like to know your opinions on the com/net wildcard issue
by Stewart, William C (Bill), RTSLS 13 Oct '03

13 Oct '03

I don't know if Paul's system lets you log in twice, so I can't check the survey questions, but they asked approximately whether you were - a registrar - an ISP (or something like that) - a WEB end-user. The problem is that most Internet users aren't WEB end-users, they're Internet end-users, including email, web, IM, time, and maybe other protocols, and one of the big problems with Verisign's web-grabbing wildcard games is that they're only helpful for web users, but harmful or at best mostly harmless for users of other protocols, particularly email. Microsoft IE browser has a Sitefinder-like feature which really only affects the web, so it's theoretically capable of being helpful to web users without being harmful to other internet users, though in practice I never found it all that helpful either. Bill Stewart, bill.stewart(a)pobox.com

1 0