- Test - lists.nanog.org

MAE-West repair time line
by Sean Donelan 13 Jul '00

13 Jul '00

Looking at the public mae-west looking-glasses, it appears mae-west returned to normal at about 2am PDT this morning. Individual ISPs have been turning their peering sessions back on throughout the morning. Traffic appears to be returning to previous levels.

1 0

RE: DNS for interfaces & PPPoE Time Burst
by John Fraizer 13 Jul '00

13 Jul '00

On Thu, 13 Jul 2000, Bob Biver wrote: > > Addendum-- > To to overwhelming responce: > I was simply trying to get a perspective on shaping PPPoE traffic. I would > *NEVER* misinform or otherwise attempt to defraud anyone. The account would > simply be cheaper than one that was advertised as full bandwidth. This > account would be put out there so that *everyone* would know what they were > buying 320K down with a 16K CIR up but burstable to 128. Sorry for the > confusion- > > Bob- > > PS Why does everyone think poeple are trying to 'rip" off customers? you > will not stay in business or in your job long if you do that. > > ________________________________________________________________________ > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com > > Some of the oldest ISPs on the planet have been doing it for years. It's called oversubscribing. 288 ISDN ports at a POP being fed with 3 DS1's into the WAN. They're selling "business" accounts with a CIR of 128K. We've run into it twice on WAN connections into supposed Tier-1's. It's sad when you have more connectivity into them than they have to the world (at least at your peering point).. --- John Fraizer EnterZone, Inc

1 0

Re: [Fwd: 07/12/00 Internet Routing Problems]
by John Fraizer 13 Jul '00

13 Jul '00

It scared the hell out of me too. Now the pinko's have gotten to Merit and CIADA. Time to start swinging the "Bright Platinum Baseball Bat of Truth" again... --- John Fraizer EnterZone, Inc On Thu, 13 Jul 2000, Rick Irving wrote: > > And suddenly, I woke up. > > :) > > -------- Original Message -------- > Subject: 07/12/00 Internet Routing Problems > Date: Thu, 13 Jul 2000 10:22:11 -0400 (EDT) > From: stats(a)merit.edu > To: routing-problems(a)merit.edu > > See http://www.merit.edu/ipma for a more detailed report on > routing problems and recommendations on ways service providers can > limit the spread of invalid routing information. > Send comments and questions to ipma(a)merit.edu > > To unsubscribe from this list, send mail to > routing-problems-request(a)merit.edu. > A hypermail archive is available at > http://www.merit.net/mail.archives/html/routing-problems/ > > Also see http://www.caida.org for more information about Internet > statistics > collection research efforts. > > Reserved Network and Host Announcements > --------------------------------------- > No routing problems were detected >

1 0

DNS for interfaces & PPPoE Time Burst
by Bob Biver 13 Jul '00

13 Jul '00

Greetings- Two things - Is there a standard for the DNS hostnames of router interfaces (i.e. PtP.origin.destination.bandwidth.layer2.domain) and Is anyone doing traffic shaping on PPPoE circuits so that you can set a variable burst over time? The goal would be to make it commercially invalid to run a 'web' or other server on the end of a 'residential' grade xDSL circuit. Filtering is not an option seeing as everyone wants their personal web server and dialpad to work. But if after 30 seconds of burst to 320K up I shape that PPPoE circuit down to 16K, you wont want to host your Mp3 server. Ideas? Thanks Bob- ________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

2 1

MAE-West repair time line
by Sean Donelan 13 Jul '00

13 Jul '00

I hope Worldcom's official spokesperson will provide more details, I didn't find any official statements on any of the various Worldcom web sites checked. Here is what I know so far. July 10 2000 6am Folks started reporting problems with peering at MAE-West. July 10 2000 3pm MFS(Worldcom) notified customers it had found a problem with the gigaswitch. They scheduled an overnight maintenance window. July 11 2000 MFS(Worldcom) notified customers the maintenance did not correct the problem. They will replace a suspected bad SCP card overnight. July 12 2000 MFS(Worldcom) notified customers the maintenance did not take place as scheduled. They will try again tonight. Several ISPs report they have turned off their peering across the MAE-West Gigaswitch infrastructure until Worldcom repairs the problem. Most ISPs report the traffic is taking alternate routes with only slight affect on customers' traffic.

1 0

MD5 in BGP4
by HANSEN CHAN 13 Jul '00

13 Jul '00

Hi folks, I understand that MD5 is quite commonly used in IGP such as OSPF but not in BGP4. Am I correct? Can someone explain to me why? Shouldn't one be more concerned the session being hijacked when talking to another network? Thanks, Hansen

6 6

Re: MD5 in BGP4
by Danny McPherson 13 Jul '00

13 Jul '00

> It's is a kind of useless things. If you allow spoofing., > you are voluranable to the DoS attacks against BGP; if you > are not, no need to use MD5 for BGP. Actually, I can think of more than a few configurations where this isn't true. For example, shared-media exchange points where multiple networks reside on a single segment and eBGP peer using the address of the segment. The IP network number is associated only with the interface, there's no individual hardware/IP address relationship relative to anti-spoofing here. > And DoS attack is the reality, not BGP spoofings (may be > you know any such case? I do not know any). Agreed, it's purpose is more so to protect against DoS type stuff at the TCP layer. > For IS-IS and OSPF, just other matter. They are working > over the LAN, and customers and internal users are often > plugged into this network. So, authentication is necessary > to prevent both errors and intrusions (and the anty-error > measures are much more inmportant in such networks). However, I think we'd both agree that a configuration such as this (IGP being enabled on customer facing interfaces) is ill-advised. > Just again, I know a lot of cases when IGP was broken > by error (someone installed new server and turned OSPF > on), but I does not know any attacks of this kind (but > I believe there are such cases for IGP protocols). Throgh, > to defent against such attacks originated from IGP, you > need a lot of things be used (non Redirect, static ARYP, > etc etc). Agreed. -danny

1 0

Re: MAE West down?
by Sean Donelan 13 Jul '00

13 Jul '00

On Wed, 12 July 2000, Jon Mansey wrote: > "Due to a hardware misconfiguration, the entire MAE West peering point is > down to all users. This includes all ISPs and all networks who peer at that > NAP. Please be assured that MFS is doing their utmost to repair their > problem." MAE-West has been troubled for the last few days. MFS (Oh, I mean Worldcom) is replacing one of the core gigaswitch SCP cards tonight (est. midnight PDT). I did not hear about any misconfiguration or procedural errors.

1 0

MAE West down?
by Jon Mansey 13 Jul '00

13 Jul '00

Any truth in this? "Due to a hardware misconfiguration, the entire MAE West peering point is down to all users. This includes all ISPs and all networks who peer at that NAP. Please be assured that MFS is doing their utmost to repair their problem."

5 4

Running BGP4 on a Core Router
by HANSEN CHAN 12 Jul '00

12 Jul '00

Hi folks, I was hearing that typically BGP4 is run on all routers inside a POP, including access routers connecting to customers, border routers connecting other ISPs and core routers connecting to other POPs in the same network. I can understand why BGP4 is run on access and border routers. But running BGP4 on core routers is beyond my understanding. I thought you don't need to run BGP4 on core routers which are considered to be interior nodes. Can someone shed some light on what is the benefit of running BGP4 on the core routers? Thanks, Hansen

6 7