- Test - lists.nanog.org

Re: recommendation for open source based
by Miquel van Smoorenburg 19 Jan '02

19 Jan '02

In article <cistron.3C48A376.F350C16C(a)unitedlayer.com>, Arman <arman(a)unitedlayer.com> wrote: >solution for customer data and trouble ticketing system. >I have already used Request Tracker. Version 2? It's much better. Mike.

1 0

RE: Outage in SF area
by Adam Herscher 19 Jan '02

19 Jan '02

Apparently there was an XO fiber cut around 3:30PM Pacific time. I know of at least a few InterNAP circuits in the Fremont/San Jose area that were affected.. Rgds, Adam -----Original Message----- From: Erich Kuehn [mailto:ekuehn@bbcominc.com] Sent: Friday, January 18, 2002 4:16 PM To: 'nanog(a)merit.edu' Subject: Outage in SF area Has anyone noticed an outage in the SF bay area? I was told by MCI Worldcom that there was a Major Fiber cut in the area that affected mulitple OC-192's and OC-48's can anyone confirm this? Thanks Erich

1 0

Configuring multi-home failover
by Mike Stubbers 18 Jan '02

18 Jan '02

I am wanting to configure a secondary ISP to be used as fail over only for our primary. At this point both ISP's come into the same 7500 router and I have an established BGP session with our primary provider. Can those of you doing this already tell me the optimum way to set this up? Is this best done on my end or by having my secondary discover our disappearance and begin announcing? New territory for me so BGP configuration examples are welcome. Regards, Mike Stubbers Network Analyst Supervisor, SCP Information Technology Services University of Idaho mikest(a)uidaho.edu

4 4

FW: router startup behavior
by Borchers, Mark 18 Jan '02

18 Jan '02

Forwarded to the list: -----Original Message----- Subject: RE: router startup behavior On Tue, 15 Jan 2002, Borchers, Mark wrote: Mark, I don't have nanog post so, if you could pass this along for me, I believe that it may be "obvious" advice and it seems that the obvious is what escapes us most often. > Yeah, (c) seems most likely to me. Ratul, a script like > this or some variant could cause what you are seeing: > > config-router# no neighbor <a> > config-router# no neighbor > config-router# no neighbor <c> > (script to rewrite filters executes) > config-router# neighbor <a> remote-as <x> > config-router# neighbor remote-as <y> > config-router# neighbor <c> remote-as <z> > (sessions start coming up) > config-router# neighbor <a> route-map <A> out > config-router# neighbor route-map out > config-router# neighbor <c> route-map <C> out > config-router# Ctrl-Z > # clear ip bgp external soft out > > Just guessing - you're seeing these events between midnight > and 5 am? > > Wouldn't it be wiser to do the following: config-router# no neighbor <a> config-router# no neighbor config-router# no neighbor (script to rewrite filters executes) config-router# neighbor <a> remote-as <x> config-router# neighbor <a> shutdown config-router# neighbor remote-as <y> config-router# neighbor shutdown config-router# neighbor <c> remote-as <z> config-router# neighbor <c> shutdown config-router# neighbor <a> route-map <A> out config-router# neighbor route-map out config-router# neighbor <c> route-map <C> out config-router# no neighbor <a> shutdown config-router# no neighbor shutdown config-router# no neighbor <c> shutdown config-router# Ctrl-Z # clear ip bgp external soft out This way, the neighbor has much less time to come up without filters since we're immediately putting it in admin idle after naming it. --- John Fraizer EnterZone, Inc

4 4

need routed configuration help
by Alex Melkomukov 18 Jan '02

18 Jan '02

Hello everyone. I'm not sure if this is the correct list, but I was informed that this list is where all of the routing experts can be found, so I am sending this plea for help to this list. Basically, I need to confirm some configuration information and make sure I've set up everything properly. I am seeing some very strange behavior and need to rule out local misconfiguration as the cause. I am not a routing expert, so I need confirmation. We had to configure a customer's server to function in a co-location facility (not of our choosing) that has a gateway IP address that is outside of the locally defined network block (Class C). The OS is FreeBSD 4.4. I did some digging and discovered that I needed to enable 'routed' and create some static routes to the gateway IP outside of the local network block to be able to reach the Internet. I uncommented the defaultrouter="5.6.7.1" entry (IP has been changed to protect parties involved) in the rc.conf file and added the router_enable="YES" entry. I then added the following entries to the rc.local file: route add default -interface 1.2.3.100 -netmask 255.255.255.252 route add -net 5.6.7.1 -interface 1.2.3.100 -netmask 255.255.255.252 route add default 5.6.7.1 I came up with these routes by trial and error, and am not convinced that these are the correct entries to use. I can reach the Internet and the nameserver (which is also outside of the local network block), and can ping and traceroute without any problems. But,... every once in a while certain programs start timing out and/or take a really long time to respond (to the point of failure due to time-out on the other end). Some of these programs are telnet, ssh, ftp, radius. Other programs/protocols (such as http traffic) do not display the same behavior. So, I am seeking advice on how to configure static routes correctly and/or if some other issues may be causing this strange, intermitten behavior. Please let me know if I implemented this incorrectly... am __________________________________________________________________ Alex Melkomukov amelkomukov(a)navi.net Navi.Net http://www.navi.net 618 NW Glisan St., Ste. 101 voice 503-517-8866 Portland, OR 97209 USA fax 503-517-8868 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 2

ICANN dead?
by Curtis Maurand 18 Jan '02

18 Jan '02

I can't raise the website at icann. Asleep at the switch? Curtis

4 3

provider in Freeport, Bahamas
by Eve C. Koenning 18 Jan '02

18 Jan '02

All, If anyone has a network out in Freeport, Bahamas and can provide a t1, I would appreciate it if you could email me. Regards, Eve Koenning

1 0

Growing DoS attacks
by Paul Froutan 18 Jan '02

18 Jan '02

Hello all, Can some of you with larger networks let me know about the volume of the DoS attacks you have experienced lately? Our experience has been that the volume (not just occurrence) is going up significantly and I'm curious on the size of attacks that people are experiencing. For reference, while a year or two ago we used to get 50-100 meg attacks, now we're getting 500+ megs. Thanks _________________________________________ Paul Froutan, VP Engineering and Operations Rackspace Managed Hosting Email: pfroutan(a)rackspace.com ---------------------------------------------------------------------- --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com) Version: 6.0.313 / Virus Database: 174 - Release Date: 1/2/2002

13 20

Re: Growing DoS attacks
by Vincent Gillet 18 Jan '02

18 Jan '02

nguilbaud(a)chello.com disait : > Vincent, > > The Cisco ISE aka Engine 3 cards for GSR allow you to combine those > features, you can even i/egress traffic police or even shape based on > access-list. You still have some constraints but nothing compared to the > E0/1/2. It looks getting better and better, but large GSR users have 95% LC E0/1/2 .... and i bet 100% customers are connected on E0/1/2 !! Even single POS oc48 LC are still E2 .... I am talking about problem we have today. E3 and above LC will be popular for access in 2003 i guess. Vincent.

2 1

uunet outage?
by Dan Hollis 17 Jan '02

17 Jan '02

Anyone seeing uunet outage in the last half hour or something? We are seeing huge routing problems. -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]

3 2