Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Justin Shore

Hank Nussbacher wrote:
http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion 


It's an interesting theory, that temperature affects overall throughput. 
 Their assumptions on other conditions that affect bandwidth 
consumption are off IMHO.  Our own data directly refutes what Wired 
reported in this article.  Summertime is our most heavily utilized 
months on our network on average.  For SPs heavily laden with 
residential subs I think this is probably the norm.  Then school starts 
and you have a pronounced drop in traffic (that includes a major dip 
when college begins and again when primary school begins).  The rates 
slowly increase back to their summer time highs until the holiday season 
begins where they either remain steady or taper off slightly.  The 
theory here is that the high-bandwidth users are too busy with holiday 
affairs to play games, download music/porn, etc.  That is until after 
X-mas when consumption suddenly spikes in a very pronounced way (new 
computers for X-mas).  This also corresponds to our biggest month for 
new service turnups and speed increases in our bundles.  Late winter 
varies from fairly constant to slight growth.  Our single biggest days 
are the ones proceeding a major winter storm, or if the storm doesn't 
cut power to large swaths of our service area then the days in the 
middle of the winter storms come out on top.  Spring growth depends on 
the weather.  Good weather means less consumption for us.  Bad weather 
means more consumption.  Our least busy month is May when the kids are 
the most busy.  June and July again show a major turn around.


Bandwidth consumption is directly tied to your user demographics.  If 
your SP is primarily business circuit then your traffic patterns will 
vary wildly from that of a SP with primarily residential circuits. 
Every SP is a little bit different.  That's why some SPs set personal 
records for bandwidth consumption when Michael Jackson's memorial 
service was broadcast (including SPs less than an hour away from me) and 
other SPs (mine for example) didn't have a single user stream the 
broadcast and otherwise had a normal bandwidth day.  Other than Wired 
making an assumption that all SPs have nearly identical traffic 
patterns, the article is otherwise ok.


Justin




Re: Dutch ISPs to collaborate and take responsibility

2009-10-07 Thread Alexander Harrowell
On Wednesday 07 October 2009 00:27:55 Joe Greco wrote:

 Assuming that the existence of an infected PC in the mix translates to
 some sort of inability to make a 911 call correctly is, however, simply
 irresponsible, and at some point, is probably asking for trouble.

 ... JG

Also, someone mentioned that the FCC doesn't in fact mandate that PSTN 
terminals should be able to make emergency calls even if formally disconnected 
and asked about cellular.

The opposite is true about GSM and its descendants; whether or not you're a 
valid roamer for the network you're talking to, have a prepaid balance, have 
paid your bill, you must be able to make emergency calls. Similarly, even if 
no SIM card is present, the device should register with the network as 
limited service - i.e. emergency only.



signature.asc
Description: This is a digitally signed message part.


Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Marco Hogewoning


On Oct 7, 2009, at 6:44 AM, Hank Nussbacher wrote:


http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion


I'm not sure the effects are so big compared to the actual speed that  
they are noticable for the average user. We also don't have any proper  
data available but we do (operating in NL) notice from time to time  
that periods with loads of rain can have influence on the stabillity  
and speed of DSL lines especially in older areas of towns where they  
still have paper/lead covered cabling instead of more modern PVC  
isolation. This as more visible when everybody still used 56k  
dialup.This may as well be a very local effect, the western part of  
our country is largely at or even below sealevel and very wet already.


However as these effects might get you a few kilobits extra from time  
to time that effect is not visible in overall usage statisctics, as  
soon as the sun comes out we see traffic levels drop to only rise  
again near september when everybody is back to school and the office.  
As far as traffic levels go, it's the rainy winter nights which make  
it into the recordbooks.


Grtx,

Marco



Re: Dutch ISPs to collaborate and take responsibility

2009-10-07 Thread Dave Temkin

Alexander Harrowell wrote:

On Wednesday 07 October 2009 00:27:55 Joe Greco wrote:

  

Assuming that the existence of an infected PC in the mix translates to
some sort of inability to make a 911 call correctly is, however, simply
irresponsible, and at some point, is probably asking for trouble.

... JG



Also, someone mentioned that the FCC doesn't in fact mandate that PSTN 
terminals should be able to make emergency calls even if formally disconnected 
and asked about cellular.


The opposite is true about GSM and its descendants; whether or not you're a 
valid roamer for the network you're talking to, have a prepaid balance, have 
paid your bill, you must be able to make emergency calls. Similarly, even if 
no SIM card is present, the device should register with the network as 
limited service - i.e. emergency only.


  
The FCC generally doesn't come into play when you're talking about ILEC 
telephone service except at a very high level.  In California, by PUC 
regulation telephone companies are required to allow access to 911 so 
long as there is copper in the facility and it was, at any time, active 
with any sort of phone service.


Ref: http://ucan.org/telenforcers/files/SBC%20complaint%20PUC%20version.pdf
Ref2: http://law.onecle.com/california/utilities/2883.html

I believe this is also the case in numerous other states.





Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Pierfrancesco Caci
:- Hank == Hank Nussbacher h...@efes.iucc.ac.il writes:

 
http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion
 -Hank

There are TXCOs and OXCOs inside equipment for a reason. And rubidium
lamps as well, sometimes.   

Seasonal variations in usage from the end customers are a fact of
life, instead. If your net is large enough you can even spot the
different habits about vacations, holidays and whatnot across the
different regions.

Pf




-- 


---
 Pierfrancesco Caci | Network  System Administrator - INOC-DBA: 6762*PFC
 p.c...@seabone.net | Telecom Italia Sparkle - http://etabeta.noc.seabone.net/



Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Patrick W. Gilmore

On Oct 7, 2009, at 9:26 AM, Pierfrancesco Caci wrote:


:- Hank == Hank Nussbacher h...@efes.iucc.ac.il writes:


http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion
-Hank


There are TXCOs and OXCOs inside equipment for a reason. And rubidium
lamps as well, sometimes.

Seasonal variations in usage from the end customers are a fact of
life, instead. If your net is large enough you can even spot the
different habits about vacations, holidays and whatnot across the
different regions.


I read the article and the follow up posts and I wonder if we are all  
using the same definition for speed here.  The article seems to  
imply you don't get 6 Mbps on your DSL line in summer because the  
copper is hotter and it's harder to push electrons down the link.   
That is clearly BS, the clock is ticking six million times per second,  
period.


Then it talks about traffic, which is very different than speed, at  
least in my book.  If the intertubes are congested, you might get less  
throughput, but your speed is the same.  And congestion cannot  
affect speed.  That laser is blinking at 10 billion times per second  
whether the queue behind the port is full or not.  (And don't tell me  
the laser is quiescent when the queue is empty, you know what I mean.)


So what are are talking here?  Speed, throughput, congestion, packet  
loss, latency ... ?


Oh, and while I am certain it is true different networks see different  
peaks  valleys for different seasons  times of day, the  
Internet (whatever the hell that is) definitely has less traffic in  
summer than fall.


--
TTFN,
patrick




Re: Up Next: Quarantine Phishing (Was: Dutch ISPs to collaborate and take responsibility for bottedclients)

2009-10-07 Thread Sean Donelan

On Tue, 6 Oct 2009, Jeroen Massar wrote:

The problem with all of that boils down to what people have to
believe... and how to properly inform them of that...


How many people remember this oldie, but goodie?

  3.3.2.1.1 Trusted Path
  The TCB shall support a trusted communication path
  between itself and users for use when a positive TCB-touser
  connection is required (e.g., login, change subject
  security level). Communications via this trusted path
  shall be activated exclusively by a user of the TCB and
  shall be logically isolated and unmistakably
  distinguishable from other paths.

Its simple to say, hard to do.




Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Tim Franklin
 I read the article and the follow up posts and I wonder if we are all 
 using the same definition for speed here.  The article seems to  
 imply you don't get 6 Mbps on your DSL line in summer because the  
 copper is hotter and it's harder to push electrons down the link.   
 That is clearly BS, the clock is ticking six million times per second,
 period.

Are you trying to say that the *actual* DSL speed, as synchronised between the 
modems at either end, is neither a) affected by the physical characteristics of 
the copper pair, nor b) variable?

I agree the article is woolly between line-speed, throughput, goodput, 
congestion, etc, but to say that DSL line speed is in any way fixed in the same 
way that Ethernet or PDH / SDH lines are is contrary to every DSL platform I've 
worked with.

(Also, 6Mb/s DSL doesn't equate to 6 million ticks per second in anything 
relating to pushing electrons onto the wire.  Remember, it's modem technology, 
just faster - your baud rate is still much lower than your bps.)

Regards,
Tim.



Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Joe Greco
 http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion

It used to be that we would notice this, except that it had everything to
do with temperature *and* dampness.  In the '90's, it was still quite
common for a lot of older outside plant to be really only voice grade
and it wasn't unusual for copper to run all the way back to the CO,
through a variety of taps and splice points.  Even though Ma Bell would
typically do a careful job handling their copper, the sheer number of
potential points of failure meant that it wasn't unusual for water to
infiltrate and penetrate.  If I recall correctly, the worst was usually
a long, hard cold rain (hey we're in Wisconsin) after which people who
had been getting solidly high speed modem connects would see a somewhat
slower speed.

... JG
-- 
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
We call it the 'one bite at the apple' rule. Give me one chance [and] then I
won't contact you again. - Direct Marketing Ass'n position on e-mail spam(CNN)
With 24 million small businesses in the US alone, that's way too many apples.



RE: Does Internet Speed Vary by Season?

2009-10-07 Thread Jonathan Brashear
Trying to pinpoint the failure point on one of those circuits is a PITA as 
well.  Getting a telco tech out to test on a circuit that only goes down when 
it rains is an exercise that Sisyphus would probably decline. 


Network Engineer, JNCIS-M
 214-981-1954 (office) 
 214-642-4075 (cell)
 jbrash...@hq.speakeasy.net 
http://www.speakeasy.net
-Original Message-
From: Joe Greco [mailto:jgr...@ns.sol.net] 
Sent: Wednesday, October 07, 2009 9:49 AM
To: Hank Nussbacher
Cc: nanog@nanog.org
Subject: Re: Does Internet Speed Vary by Season?

 http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion

It used to be that we would notice this, except that it had everything to
do with temperature *and* dampness.  In the '90's, it was still quite
common for a lot of older outside plant to be really only voice grade
and it wasn't unusual for copper to run all the way back to the CO,
through a variety of taps and splice points.  Even though Ma Bell would
typically do a careful job handling their copper, the sheer number of
potential points of failure meant that it wasn't unusual for water to
infiltrate and penetrate.  If I recall correctly, the worst was usually
a long, hard cold rain (hey we're in Wisconsin) after which people who
had been getting solidly high speed modem connects would see a somewhat
slower speed.

... JG
-- 
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
We call it the 'one bite at the apple' rule. Give me one chance [and] then I
won't contact you again. - Direct Marketing Ass'n position on e-mail spam(CNN)
With 24 million small businesses in the US alone, that's way too many apples.




Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Patrick W. Gilmore

On Oct 7, 2009, at 10:52 AM, Scott Howard wrote:
On Wed, Oct 7, 2009 at 7:16 AM, Patrick W. Gilmore  
patr...@ianai.net wrote:
I read the article and the follow up posts and I wonder if we are  
all using the same definition for speed here.  The article seems  
to imply you don't get 6 Mbps on your DSL line in summer because  
the copper is hotter and it's harder to push electrons down the  
link.  That is clearly BS, the clock is ticking six million times  
per second, period.


So you're saying that if I put in an 8Mbps ADSL1 connection, then  
I'm going to get a guaranteed 8Mbps point-to-point back to the  
exchange, regardless of the quality of my phone line, or the  
distance from the exchange?


Yes, everyone, I was imprecise.  Please tell me all about baud and  
variability and such.  Because that was the point I was trying to make.



That laser is blinking at 10 billion times per second whether the  
queue behind the port is full or not.  (And don't tell me the laser  
is quiescent when the queue is empty, you know what I mean.)


Laser?  Perhaps this is a different type of ADSL than most people  
here are used to?


(I'm not saying that the article is right, but...)


I admit I totally spaced on the fact DSL != ethernet when I was typing  
the first paragraph.  But when I wrote the above, I actually thought  
to myself: I better mention I'm talking about a 10G backbone link...  
nah, everyone on NANOG is smart enough to figure out what I meant.



End of day, the point stands that the article is worse than useless as  
it does not add data to the general knowledge pool, but actually makes  
everyone dumber for reading it.  Apparently it even made me forget how  
DSL works


--
TTFN,
patrick




Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Bryan Campbell

No, I did not read the article . . . But,  . . .

Yes, DSL speed varies by season . . . or rather, temperature.

But, this is really only the case for _aerial_copper_plant.  Buried 
plant is nearly the same temperature year round.


Copper pair resistance changes with temperature.  And, therefore, the 
link speed of DSL will change depending upon the time of the year 
(temperature) and geographic location.


If there is a difference of but a few degrees of temperature year round, 
then no there will be no difference.  But, if you live in the desert 
southwest or even the mid-west where the temperatures can be 70-120 
degrees different between seasons or even 40-70 degrees different 
between night and day . . . you are going to have pronounced differences 
in link speed.


Worst cast, your link speed might vary 10-20%.  The longer the cable 
length from the central office, the more the variance will be.  But, 
this is something that must be measured on a case by case basis.  And, 
since much of the aerial plant has been replaced with buried plant, this 
really isn't much of a problem anymore.


BBC

Joe Greco wrote:

http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion


It used to be that we would notice this, except that it had everything to
do with temperature *and* dampness.  In the '90's, it was still quite
common for a lot of older outside plant to be really only voice grade
and it wasn't unusual for copper to run all the way back to the CO,
through a variety of taps and splice points.  Even though Ma Bell would
typically do a careful job handling their copper, the sheer number of
potential points of failure meant that it wasn't unusual for water to
infiltrate and penetrate.  If I recall correctly, the worst was usually
a long, hard cold rain (hey we're in Wisconsin) after which people who
had been getting solidly high speed modem connects would see a somewhat
slower speed.

... JG




Re: Dutch ISPs to collaborate and take responsibility

2009-10-07 Thread Joe Greco
 On Oct 6, 2009, at 4:27 PM, Joe Greco wrote:
  Someone else pointed out that if the system in question has been
  botted/owned/pwn3d/whatever
  you want to call it, then, you can't guarantee it would make the 911
  call correctly anyway.
 
  I realize that many NANOG'ers don't actually use the technologies that
  we talk about, so I'm just going to correct this:
 
  You seem to be under the mistaken assumption that most people using  
  VoIP
  do so using their computer.  While it kind of started out that way  
  years
  ago, it simply isn't so anymore.  Most VoIP services can be  
  configured to
  work with an analog telephony adapter, providing a POTS jack.  Most  
  VoIP
  services even provide one as part of the subscription, sometimes for a
  fee.

 I do use VOIP, bot computer and non-computer based.  None the less, the
 fact remains that should any of my systems become compromised, my
 ability to make a VOIP phone call is in doubt regardless of what the
 provider does.

Well, /that's/ obviously not true.  Cable providers are already using
PacketCable NCS (read: MGCP lightly modified) to provide completely
reliable QoS for their own VoIP-to-the-cablemodem products; you are
going to find it tough to impact the service level of such a device.

For general VoIP, there's no particularly good reason that the VoIP
traffic cannot be QoS'd / filtered to allow VoIP to continue to work
while gardening the remaining traffic from the customer.  That is
completely under the provider's control.  Since many of the CPE
devices actually have a programmable hardware ethernet switch, it is
even possible to do a lot of the work in hardware.

 Additionally the problems of DDOS sourced from a collection of  
 compromised
 hosts could be interfering with someone else's ability to make a  
 successful
 VOIP call.

I think the above addresses that.  There are always risks, of course.
The guy pruning tree branches down the street can knock down the cable
line, for example.  Of course, he probably takes out the phone lines
as well...  :-)

 Abuse sources should be blocked from impacting the rest of the network.

Sure.

 This blocking should be as narrow as possible.

Yes, that's my point.  We should be able to narrowly block compromised
hosts so that we don't screw up legitimate VoIP uses.

... JG
-- 
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
We call it the 'one bite at the apple' rule. Give me one chance [and] then I
won't contact you again. - Direct Marketing Ass'n position on e-mail spam(CNN)
With 24 million small businesses in the US alone, that's way too many apples.



Re: Does Internet Speed Vary by Season?

2009-10-07 Thread joel jaeggli
Scott Howard wrote:

snip

 So you're saying that if I put in an 8Mbps ADSL1 connection, then I'm going
 to get a guaranteed 8Mbps point-to-point back to the exchange, regardless of
 the quality of my phone line, or the distance from the exchange?

snip

 
 (I'm not saying that the article is right, but...)

ADSL systems will retrain to a lower rate as line conditions (SNR)
change for the worse. The attentuation characteristics of a given pair
will change of time due to a number of factor, including but not
certainly limited to physical wear, moisture invasion, localized source
of interference, sunspot activity etc.

Are dsl plants subject to localized environmental conditions? Absolutely.

   Scott
 




Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Joe Greco
 No, I did not read the article . . . But,  . . .
 
 Yes, DSL speed varies by season . . . or rather, temperature.
 
 But, this is really only the case for _aerial_copper_plant.  Buried 
 plant is nearly the same temperature year round.

Yes, but it is more susceptible to long-term water infiltration, which
leads to longer-term speed drops.  This is actually more difficult to
work with and test for.

 Copper pair resistance changes with temperature.  And, therefore, the 
 link speed of DSL will change depending upon the time of the year 
 (temperature) and geographic location.
 
 If there is a difference of but a few degrees of temperature year round, 
 then no there will be no difference.  But, if you live in the desert 
 southwest or even the mid-west where the temperatures can be 70-120 
 degrees different between seasons or even 40-70 degrees different 
 between night and day . . . you are going to have pronounced differences 
 in link speed.

You might.  Or you might not.  Around here, it's not unusual to see a
difference of a hundred degrees between summer and winter.  Speaking
from a few decades of experience working with telecom up here, I'd be
tempted to say that either a circuit tends towards being problematic
or towards being reliable, and that where I've been able to ascertain
enough facts, there's a correlation with the age of the outdoor plant-
but that's only a loose correlation.

 Worst cast, your link speed might vary 10-20%.  The longer the cable 
 length from the central office, the more the variance will be.  But, 
 this is something that must be measured on a case by case basis.  And, 
 since much of the aerial plant has been replaced with buried plant, this 
 really isn't much of a problem anymore.

Buried plant mostly has more consistent (maybe less severe) problems, 
IMHO.

... JG
-- 
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
We call it the 'one bite at the apple' rule. Give me one chance [and] then I
won't contact you again. - Direct Marketing Ass'n position on e-mail spam(CNN)
With 24 million small businesses in the US alone, that's way too many apples.



Re: Practical numbers for IPv6 allocations

2009-10-07 Thread Kevin Loch

David Conrad wrote:

On Oct 6, 2009, at 6:13 PM, Nathan Ward wrote:
My understanding is that the RIRs are doing sparse allocation, as 
opposed to reserving a few bits. I could be wrong.


Last I heard, with the exception of APNIC and contrary to what they 
indicated they'd do prior to IANA allocating the /12s, you are indeed 
wrong.  I'd be happy to hear things have changed.


Only APNIC is doing bisection style assignments today:

20091001|apnic|AU|ipv6|2402:c00::|32|allocated
20091001|apnic|SG|ipv6|2402:400::|32|allocated
20091005|apnic|JP|ipv6|2402:1400::|32|allocated
20091006|apnic|NZ|ipv6|2402:1c00::|32|allocated

20090930|arin|US|ipv6|2607:fd70::|32|allocated
20090930|arin|CA|ipv6|2607:fd78::|32|allocated
20091001|arin|US|ipv6|2607:fd80::|32|allocated
20091006|arin|US|ipv6|2607:fd88::|32|allocated

20091005|ripencc|RU|ipv6|2a00:1440::|32|allocated
20091005|ripencc|SI|ipv6|2a00:1448::|32|allocated
20091005|ripencc|IE|ipv6|2a00:1450::|32|allocated
20091005|ripencc|BE|ipv6|2a00:1458::|32|allocated

20090709|lacnic|PY|ipv6|2800:3a0::|32|allocated
20090714|lacnic|CL|ipv6|2800:3b0::|32|allocated
20090807|lacnic|GY|ipv6|2800:3c0::|32|allocated
20090903|lacnic|AR|ipv6|2800:3d0::|32|allocated

20090708|afrinic|GH|ipv6|2001:43c0::|32|allocated
20090729|afrinic|EG|ipv6|2001:43c8::|32|allocated
20090813|afrinic|KE|ipv6|2001:43d0::|32|allocated
20090909|afrinic|ZA|ipv6|2001:43d8::|32|allocated

- Kevin



Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread Michael Ruiz
Group,

 

I am stuck like chuck.  We are unable to activate a VPN
in one of the virtual firewall context.  Under the crypto commands, none
of the IP-sec are available.  Any help on this would be appreciated.
Version we running is 8.0(4)

 

 

Michael Ruiz mr...@telwestservices.com
mailto::mr...@telwestservices.com 

 

 



Re: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread Mike Lyon
Call 1-800-553-2447, they should be able to help.

On Wed, Oct 7, 2009 at 9:56 AM, Michael Ruiz mr...@telwestservices.comwrote:

 Group,



I am stuck like chuck.  We are unable to activate a VPN
 in one of the virtual firewall context.  Under the crypto commands, none
 of the IP-sec are available.  Any help on this would be appreciated.
 Version we running is 8.0(4)





 Michael Ruiz mr...@telwestservices.com
 mailto::mr...@telwestservices.com








RE: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread Tillinger, Steve
IPsec isn't available when in multiple context mode.



-Original Message-
From: Michael Ruiz [mailto:mr...@telwestservices.com] 
Sent: Wednesday, October 07, 2009 12:56 PM
To: nanog@nanog.org
Subject: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

Group,

 

I am stuck like chuck.  We are unable to activate a VPN
in one of the virtual firewall context.  Under the crypto commands, none
of the IP-sec are available.  Any help on this would be appreciated.
Version we running is 8.0(4)

 

 

Michael Ruiz mr...@telwestservices.com
mailto::mr...@telwestservices.com 

 

 


This communication is intended solely for the addressee and is confidential 
and not for third party unauthorized distribution



Re: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread Jason Bertoch

Michael Ruiz wrote:

Group,

 


I am stuck like chuck.  We are unable to activate a VPN
in one of the virtual firewall context.  Under the crypto commands, none
of the IP-sec are available.  Any help on this would be appreciated.
Version we running is 8.0(4)

  

Isn't VPN only available in single-context mode?



RE: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread John Hodges
I was in ASA class just last week and asked about this exact issue.

I was told that at this time you cannot do the IPSec VPN in Multiple context 
mode (due to the ASA not being able to keep track of the SA).  This is a 
software issue that Cisco is working on and has in test at this time.  No 
timeframe for release though.

-John

-Original Message-
From: Jason Bertoch [mailto:ja...@i6ix.com] 
Sent: Wednesday, October 07, 2009 1:03 PM
To: nanog@nanog.org
Subject: Re: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

Michael Ruiz wrote:
 Group,

  

 I am stuck like chuck.  We are unable to activate a VPN
 in one of the virtual firewall context.  Under the crypto commands, none
 of the IP-sec are available.  Any help on this would be appreciated.
 Version we running is 8.0(4)

   
Isn't VPN only available in single-context mode?




Re: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread Dane Newman
yup you lose alot in mutli context mode such as vpn, and routing protocols.
It basically just becomes a true stateful firewall.

On Wed, Oct 7, 2009 at 1:26 PM, John Hodges jhod...@simplexity.com wrote:

 I was in ASA class just last week and asked about this exact issue.

 I was told that at this time you cannot do the IPSec VPN in Multiple
 context mode (due to the ASA not being able to keep track of the SA).  This
 is a software issue that Cisco is working on and has in test at this time.
  No timeframe for release though.

 -John

 -Original Message-
 From: Jason Bertoch [mailto:ja...@i6ix.com]
 Sent: Wednesday, October 07, 2009 1:03 PM
 To: nanog@nanog.org
  Subject: Re: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

 Michael Ruiz wrote:
  Group,
 
 
 
  I am stuck like chuck.  We are unable to activate a VPN
  in one of the virtual firewall context.  Under the crypto commands, none
  of the IP-sec are available.  Any help on this would be appreciated.
  Version we running is 8.0(4)
 
 
 Isn't VPN only available in single-context mode?





Re: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread Devangnp

Does Juniper firewall has same issue?

Devang Patel

On Oct 7, 2009, at 11:29 AM, Dane Newman dane.new...@gmail.com wrote:

yup you lose alot in mutli context mode such as vpn, and routing  
protocols.

It basically just becomes a true stateful firewall.

On Wed, Oct 7, 2009 at 1:26 PM, John Hodges jhod...@simplexity.com  
wrote:



I was in ASA class just last week and asked about this exact issue.

I was told that at this time you cannot do the IPSec VPN in Multiple
context mode (due to the ASA not being able to keep track of the  
SA).  This
is a software issue that Cisco is working on and has in test at  
this time.

No timeframe for release though.

-John

-Original Message-
From: Jason Bertoch [mailto:ja...@i6ix.com]
Sent: Wednesday, October 07, 2009 1:03 PM
To: nanog@nanog.org
Subject: Re: Help - Unable to builld a IP-SEC VPN on a Cisco ASA  
5520


Michael Ruiz wrote:

Group,



   I am stuck like chuck.  We are unable to activate a  
VPN
in one of the virtual firewall context.  Under the crypto  
commands, none

of the IP-sec are available.  Any help on this would be appreciated.
Version we running is 8.0(4)



Isn't VPN only available in single-context mode?







Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Steve Meuse
joel jaeggli expunged (joe...@bogus.com):

 ADSL systems will retrain to a lower rate as line conditions (SNR)
 change for the worse. The attentuation characteristics of a given pair
 will change of time due to a number of factor, including but not
 certainly limited to physical wear, moisture invasion, localized source
 of interference, sunspot activity etc.
 
 Are dsl plants subject to localized environmental conditions? Absolutely.

I could be convinced that extremem heat could change a cables velocity factor, 
but that should only result in slight changes in phase, which I guess would 
result in a higher BER. 

Oh, and you forogot about cosmic rays :)

-Steve




Re: Dutch ISPs to collaborate and take responsibility

2009-10-07 Thread Robert Bonomi
 From nanog-bounces+bonomi=mail.r-bonomi@nanog.org  Wed Oct  7 06:18:24 
 2009
 Date: Wed, 07 Oct 2009 18:17:57 +0700
 From: Dave Temkin dav...@gmail.com
 To: Alexander Harrowell a.harrow...@gmail.com
 Subject: Re: Dutch ISPs to collaborate and take responsibility
 Cc: nanog@nanog.org

 Alexander Harrowell wrote:
  On Wednesday 07 October 2009 00:27:55 Joe Greco wrote:
 

  Assuming that the existence of an infected PC in the mix translates to
  some sort of inability to make a 911 call correctly is, however, simply
  irresponsible, and at some point, is probably asking for trouble.
 
  ... JG
  
 
  Also, someone mentioned that the FCC doesn't in fact mandate that PSTN 
  terminals should be able to make emergency calls even if formally 
  disconnected 
  and asked about cellular.
 
  The opposite is true about GSM and its descendants; whether or not you're a 
  valid roamer for the network you're talking to, have a prepaid balance, 
  have 
  paid your bill, you must be able to make emergency calls. Similarly, even 
  if 
  no SIM card is present, the device should register with the network as 
  limited service - i.e. emergency only.
 

 The FCC generally doesn't come into play when you're talking about ILEC 
 telephone service except at a very high level.  In California, by PUC 
 regulation telephone companies are required to allow access to 911 so 
 long as there is copper in the facility and it was, at any time, active 
 with any sort of phone service.

Not exactly.  They are required to do it only 'to the extent permitted by
existing facilities'.  To wit, if they need that wire pair to provide service
(say, an additional line) to a paying customer, they _can_ physically disconnct 
the 'inactive account' premises, and hook up the new paying account to that
pair.

On occasion, telcos are known to re-use the pair, by just hooking the new
customer onto it, _without_ pulling the bridge clips at the 'multiple' where
the old custmer was connected.   This leads to all sorts of messes.  the 'non-
customer' discovers dial-tone on the pair and starts using it.  Calls are being
made which the _real_ customer didn't make, which leads to real arguments with
the billing department.  Then, the customer picks up their phone, and instead
of getting dial tone, discovers a conversation _in_progress_ on the line -- when
_nobody_else_ at their place is on the phone.  Strangely, the parties to that
conversation refuse to identify themselves, and one of them is _really_ anxious
to terminate that call, so you can use your line.

I, personally, have been through this more than once, in older, high-density
housing neighborhoods.





Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Scott Morris
I may be having my wires a little crossed (I'm not an electrical
engineer) but I was always under the impression that manipulation of the
physical characteristics like that from heat/dampness didn't reduce the
speed but the quality (like line noise/errors/etc) of the line.

Whether old telco lines or newer data lines it's all about electrical
signal and bit error rates.  More errors = more retransmissions = slower
perceived throughput.

Just my thinking.

Scott


Joe Greco wrote:
 http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion
 

 It used to be that we would notice this, except that it had everything to
 do with temperature *and* dampness.  In the '90's, it was still quite
 common for a lot of older outside plant to be really only voice grade
 and it wasn't unusual for copper to run all the way back to the CO,
 through a variety of taps and splice points.  Even though Ma Bell would
 typically do a careful job handling their copper, the sheer number of
 potential points of failure meant that it wasn't unusual for water to
 infiltrate and penetrate.  If I recall correctly, the worst was usually
 a long, hard cold rain (hey we're in Wisconsin) after which people who
 had been getting solidly high speed modem connects would see a somewhat
 slower speed.

 ... JG
   



RE: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

2009-10-07 Thread Michael Ruiz
Thank you for your help for this question.  Have a good day. 

-Original Message-
From: Tillinger, Steve [mailto:steve.tillin...@sourcemedia.com] 
Sent: Wednesday, October 07, 2009 12:00 PM
To: Michael Ruiz; nanog@nanog.org
Subject: RE: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

IPsec isn't available when in multiple context mode.



-Original Message-
From: Michael Ruiz [mailto:mr...@telwestservices.com] 
Sent: Wednesday, October 07, 2009 12:56 PM
To: nanog@nanog.org
Subject: Help - Unable to builld a IP-SEC VPN on a Cisco ASA 5520

Group,

 

I am stuck like chuck.  We are unable to activate a VPN
in one of the virtual firewall context.  Under the crypto commands, none
of the IP-sec are available.  Any help on this would be appreciated.
Version we running is 8.0(4)

 

 

Michael Ruiz mr...@telwestservices.com
mailto::mr...@telwestservices.com 

 

 


This communication is intended solely for the addressee and is
confidential and not for third party unauthorized distribution



Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Matthew Black

On Wed, 7 Oct 2009 23:12:44 +0800
 Adrian Chadd adr...@creative.net.au wrote:

Please don't forget moisture content. DSL speeds may drop during
wet winters because cable pits fill with water. :)

Those with real statistics, please stand up. I know ISPs who run
large DSL infrastructures have these stats. I've even seen them
at conferences. :)


Adrian



Me! During the rainy season of recent past years, the cable vault in front 
of my home would flood, thereby degrading or completely hosing DSL service. 
Haven't had heavy rains for a couple years so no trouble.


I had to replace my DSL modem about 6 months ago because the previous 
Westell Wirespeed modem had died very slowly. My speed went from 1.5M to 
less than 200k and was flaky. The new modem gives me a clean 3M/768k 
connection. Not bad for DSL ($35/month). But that wasn't weather related. 
Verizon.


matthew black
california state university, long beach



Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Sander Smeenk
Quoting Joe Greco (jgr...@ns.sol.net):

  http://www.wired.com/gadgets/miscellaneous/magazine/17-10/ts_burningquestion
 If I recall correctly, the worst was usually a long, hard cold rain
 (hey we're in Wisconsin) after which people who had been getting
 solidly high speed modem connects would see a somewhat slower speed.

Matches my story exactly.

I once had an ADSL connection which, on dry periods, synced at the
maximum of 8Mbps and when it had rained for a day this would drop to
about 6Mbps. It always worked though, the SNR just went up. I regularly
rebooted the modem to make it retrain.

An engineer from the telephone company came to check the wiring but
couldn't find anything that would constitute replacing the line or
something less drastic...

Regards,
-Sndr. (NL)
-- 
| /dev/hda1 has been checked 20 times without being mounted, mount forced
| 4096R/6D40 - 1A20 B9AA 87D4 84C7  FBD6 F3A9 9442 20CC 6CD2



Telus BGP/ACL contact

2009-10-07 Thread Jason Lixfeld
I'm looking for a Telus individual who might be able to adjust a  
prefix list for me.  Our sales rep no longer works for Telus and it's  
after 5pm here, so no account managers are available to help me  
expedite this request.  The NOC insists that there's nothing they can  
do unless I have something from my account person and unfortunately  
this is relatively time sensitive.


Thanks in advance.





Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Jerry Pasker
Ignoring the little distractions, and taking a 30,000 ft view on this 
topic, my thoughts were always that backbone capacity gets behind, 
and backbone takes time to provision.  Then it catches up, or leap 
frogs demand just in time for a wane in traffic.  Try as we may, you 
can only predict traffic to a certain extent, and sometimes backbone 
upgrades planned and it works out, and sometimes those upgrades are 
reactionary.  Usually a mix, as I will now demonstrate with the 
following example:



(Late Spring)
oh, it looks like I'll need more capacity in a few months...better 
start the upgrade...

(Summer)
We're still doing well because bandwidth growth has waned, but that 
upgrade will be welcome..good thing it's in progress

(Fall)
We're peaking at 80-90%... really hurting and still waiting on the 
upgrade!  delays from (telco, fiber company, government giving rights 
of way, fiber provider not having enough capacity, etc)

(Late fall)
This new upgraded set of tubes is great!
(Winter)
oh, it looks like I'll need more capacity in a few months...better 
start the upgrade process

(Spring)
We're feeling the crunch and out of bandwidth...can't get bandwidth 
fast enough

(Summer)
This new upgrade came just in time for the bandwidth constraints to ease...


We've all been through this cycle.  Multiply it by the whole internet 
going through this cycle all the time and of course things will feel 
faster/slower at certain times of the year.  If we al had 
OC-Ubber-bit pipes on demand, there wouldn't be slow times.  But the 
fact of the matter is that upgrades take time.  Usually longer than 
quoted.  Add seasonal variations in use to a 30-90-180 day lag time 
(depending on the size of the tube that's being upgraded) and you get 
people noticing the perceived speed changes.


-Jerry



Data Centers in England

2009-10-07 Thread Philip Lavine
Anyone know a good DC on England that caters to financial industry clients?



  



RE: Data Centers in England

2009-10-07 Thread Scott Spencer
http://www.datacentermap.com/united-kingdom/london/

As a good resource as well - 


Best regards,
 
Scott Spencer
Data Center Asset Recovery/Remarketing Manager
Duane Whitlow  Co. Inc.
Nationwide Toll Free: 800.977.7473.  Direct: 972.865.1395  Fax: 972.931.3340
sc...@dwc-computer.com   www.dwc-it.com 
Sales of new and used Cisco/Juniper/F5/Foundry/Brocade/Sun/IBM/Dell/Liebert
and more ~   

-Original Message-
From: Philip Lavine [mailto:source_ro...@yahoo.com] 
Sent: Wednesday, October 07, 2009 3:34 PM
To: nanog
Subject: Data Centers in England

Anyone know a good DC on England that caters to financial industry clients?



  






Re: Does Internet Speed Vary by Season?

2009-10-07 Thread Joe Greco
 I may be having my wires a little crossed (I'm not an electrical
 engineer) but I was always under the impression that manipulation of the
 physical characteristics like that from heat/dampness didn't reduce the
 speed but the quality (like line noise/errors/etc) of the line.
 
 Whether old telco lines or newer data lines it's all about electrical
 signal and bit error rates.  More errors = more retransmissions = slower
 perceived throughput.
 
 Just my thinking.

Reduced quality results in reduced speed.  In the best case, you have a
technology like DSL that detects the reduced quality, and dynamically
adjusts transmission characteristics to adapt.  In other cases, you have
a technology like Ethernet where misdetection of bits results in the
loss of a packet, and ultimately requires retransmission.

... JG
-- 
Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net
We call it the 'one bite at the apple' rule. Give me one chance [and] then I
won't contact you again. - Direct Marketing Ass'n position on e-mail spam(CNN)
With 24 million small businesses in the US alone, that's way too many apples.



Re: Data Centers in England

2009-10-07 Thread Simon Lockhart
On Wed Oct 07, 2009 at 02:33:33PM -0700, Philip Lavine wrote:
 Anyone know a good DC on England that caters to financial industry clients?

Telehouse London started as a Banking DR centre, so would probably meet your
needs. Otherwise, there's Interxion, which claims to have all sorts of security
certifications. The other usual suspects are also available in London - Level3,
Equinix, CW, etc...

Simon



Re: Data Centers in England

2009-10-07 Thread Shane Ronan
As the CTO of a financial company with multiple data centers in  
London, I would recommend Equinix Slough (or London 4) site. They have  
a website setup just for Financial firms. http://financial.equinix.com/


I've got space in both Telehouse and Equinix and would recommend  
Equinix for someone looking for full service collocation and Telehouse  
to someone who is looking for network interconnection.


Shane


On Oct 7, 2009, at 5:59 PM, Simon Lockhart wrote:


On Wed Oct 07, 2009 at 02:33:33PM -0700, Philip Lavine wrote:
Anyone know a good DC on England that caters to financial industry  
clients?


Telehouse London started as a Banking DR centre, so would probably  
meet your
needs. Otherwise, there's Interxion, which claims to have all sorts  
of security
certifications. The other usual suspects are also available in  
London - Level3,

Equinix, CW, etc...

Simon






Turkish Networks related questions..

2009-10-07 Thread Mehmet Akcin
I have got few questions regarding Turkish ISPs, networks, could
someone from Turkey possibly contact me offlist please?

thank you.

-- 
Mehmet Akcin
Blog: http://www.mehmetakcin.com
E-mail: meh...@akcin.net