RE: GSM modem test point with data and SMS support

2010-05-19 Thread Adam Kennedy
The SAMBA modems are USB powered and can respond to normal AT commands for 
things like signal strength and so forth. Using the sms-tools kit, you can also 
send/receive SMS messages. The SAMBA modem I have supports EDGE.

--
Adam Kennedy
Network Engineer
Omnicity, Inc.


-Original Message-
From: Frank Bulk [mailto:frnk...@iname.com]
Sent: Tuesday, May 18, 2010 11:00 PM
To: nanog@nanog.org
Subject: GSM modem test point with data and SMS support

We have some interest in testing the real-world connectivity of several
cellular towers using a GSM modem that has both a IP address on the WWAN and
has SMS support.  Is anyone aware of a self-contained box that supports both
technologies?  EDGE support is preferred, but GPRS would be acceptable.

Frank





RE: GSM modem test point with data and SMS support

2010-05-19 Thread Adam Kennedy
Some additional information on the SAMBA modems can be found at the 
manufacturer site:
http://www.falcomusa.com/

--
Adam Kennedy
Network Engineer
Omnicity, Inc.


-Original Message-
From: Adam Kennedy [mailto:adamkenn...@omnicity.net]
Sent: Wednesday, May 19, 2010 10:18 AM
To: frnk...@iname.com; nanog@nanog.org
Subject: RE: GSM modem test point with data and SMS support

The SAMBA modems are USB powered and can respond to normal AT commands for 
things like signal strength and so forth. Using the sms-tools kit, you can also 
send/receive SMS messages. The SAMBA modem I have supports EDGE.

--
Adam Kennedy
Network Engineer
Omnicity, Inc.


-Original Message-
From: Frank Bulk [mailto:frnk...@iname.com]
Sent: Tuesday, May 18, 2010 11:00 PM
To: nanog@nanog.org
Subject: GSM modem test point with data and SMS support

We have some interest in testing the real-world connectivity of several
cellular towers using a GSM modem that has both a IP address on the WWAN and
has SMS support.  Is anyone aware of a self-contained box that supports both
technologies?  EDGE support is preferred, but GPRS would be acceptable.

Frank






Re: delays to google

2009-05-14 Thread Adam Kennedy
Same here through ATT (AS7018) and Level3 (AS7911).


On 5/14/09 11:48 AM, Steve Williams willi...@csr.utexas.edu wrote:

 am seeing significant delays in getting to google.  anyone else seeing this?
 
 $ traceroute www.google.com
 traceroute: Warning: www.google.com has multiple addresses; using
 74.125.53.147
 traceroute to www.l.google.com (74.125.53.147), 30 hops max, 40 byte packets
  1  cisco-190 (129.116.190.250)  0.430 ms  0.350 ms  0.353 ms
  2  ser10-v758.gw.utexas.edu (128.83.10.29)  1.138 ms  1.099 ms  1.057 ms
  3  ser2-gi1-9.gw.utexas.edu (128.83.10.2)  10.475 ms  1.174 ms  1.584 ms
  4  aust-utnoc-core-ge-6-0-0-0.tx-bb.net (192.12.10.1)  1.215 ms  1.209
 ms  1.134 ms
  5  te2-1--570.tr01-lsanca01.transitrail.net (137.164.131.221)  40.649
 ms  40.699 ms  40.678 ms
  6  * * *
  7  * * *
  8  * * *
  9  * * *
 10  * * *
 11  72.14.232.10 (72.14.232.10)  261.262 ms * *
 12  * * pw-in-f147.google.com (74.125.53.147)  251.867 ms

-- 
Adam Kennedy
Senior Network Administrator
Cyberlink Technologies, Inc.
Phone: 888-293-3693 x4352
Fax: 574-855-5761




Re: ISP best practices

2009-05-21 Thread Adam Kennedy
Bind is fully capable of IPv6. When combined with Webmin (www.webmin.com),
I'm not sure how much easier Bind can get. Webmin will also keep DNSSEC keys
up to date with changes, so long as you make those changes from within
Webmin. If you make changes in CLI, you can tell Webmin to rehash the keys
manually. It's as simple as clicking a GUI button.


On 5/21/09 11:06 AM, Curtis Maurand cmaur...@xyonet.com wrote:

 
 Check out www.powerdns.com as an alternative to bind.  Its faster, more
 secure, does IPV6 and easier to maintain.
 
 Curtis
 
 Philip Lavine wrote:
 To all,
 
 I am sure this has been asked 10 to the 1 millionth power times, however may
 be the rules have changed. I am looking to set up a really small ISP with a
 few /24's. I want to host DNS as well. Is there any whitepapers/howtos/best
 practices on setting up multihomed BGP and DNS with BIND so I don't blow up
 the Internet.
 
 Thx
 
 Philip
 
 
 
   
 
   
 

-- 
Adam Kennedy
Senior Network Administrator
Cyberlink Technologies, Inc.
Phone: 888-293-3693 x4352
Fax: 574-855-5761




Re: Invalid prefix announcement from AS9035 for 129.77.0.0/16

2009-10-09 Thread Adam Kennedy
Agreed. Our prefixes at AS40060 were announced as well. I received a
notification around 7:00am EDT that our prefixes were detected announced
from AS9035 with the same upstream AS1267.


On 10/9/09 8:34 AM, Wouter Prins w...@null0.nl wrote:

 Hi Matthew,
 You are not the only one having this issue. They are announcing some other
 prefixes as well!
 
 2009/10/9 Matthew Huff mh...@ox.com
 
 About 4 hours ago BGPmon picked up a rogue announcement of 129.77.0.0 from
 AS9035 (ASN-WIND Wind Telecomunicazioni spa) with an upstream of AS1267
 (ASN-INFOSTRADA Infostrada S.p.A.). I don't see it now on any looking glass
 sites. Hopefully this was just a typo that was quickly corrected. I would
 appreciate if people have time and can double check let me know if any
 announcements are active except from our AS6128/AS6395 upstreams.
 
 If this were to persist, what would be the best course of action to resolve
 it, especially given that the AS was within RIPE.
 
 
 
 Matthew Huff   | One Manhattanville Rd
 OTA Management LLC | Purchase, NY 10577
 http://www.ox.com  | Phone: 914-460-4039
 aim: matthewbhuff  | Fax:   914-460-4139
 
 
 
 
 

-- 
Adam Kennedy
Senior Network Administrator
Cyberlink Technologies, Inc.
Phone: 888-293-3693 x4352
Fax: 574-855-5761




Re: ipv6 book recommendations?

2012-06-05 Thread Adam Kennedy
And you get a t-shirt at the end! That was enough motivation for me, anyway :)

--
Adam Kennedy
Network Engineer
Omnicity, Inc.

From: Owen DeLong o...@delong.commailto:o...@delong.com
To: isabel dias isabeldi...@yahoo.commailto:isabeldi...@yahoo.com
Cc: nanog@nanog.orgmailto:nanog@nanog.org 
nanog@nanog.orgmailto:nanog@nanog.org
Subject: Re: ipv6 book recommendations?

Shameless plug:

Certification wise, the IPv6 Sage certification at Hurricane Electric 
(http://www.tunnelbroker.net) uses a practical step-by-step approach where you 
actually have to deploy IPv6 and make it work to progress through the steps.

Owen


On Jun 5, 2012, at 10:07 AM, isabel dias wrote:

http://long.ccaba.upc.es/long/070Related_Activities/020Documents/IPv6_An_Internet_Revolution.pdf


worth going through certification



From: Seth Mos seth@dds.nlmailto:seth@dds.nl
To: nanog@nanog.orgmailto:nanog@nanog.org
Sent: Tuesday, June 5, 2012 3:45 PM
Subject: Re: ipv6 book recommendations?

Op 5-6-2012 16:29, David Hubbard schreef:
Does anyone have suggestions on good books to really get
a thorough understanding of v6, subnetting, security practices,
etc.  Or a few books.  Just turned up dual stack with our
peers and a test network but I'd like to be a lot more
comfortable with it before looking at our customer network.

I liked the O'reilly IPv6 essentials. I've read a few chapters when I needed it.

Cheers,

Seth





Re: rackmount managed PDUs

2008-09-30 Thread Adam Kennedy
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I have loved the Raritan 0U PDU's. Granted, we use APC Netshelter SX in
our DC, but these work well with both APC PDU's and Raritan PX-PDU's.

http://www.apc.com/resource/include/techspec_index.cfm?base_sku=AR7710

- --

Adam Kennedy
Senior Network Administrator
Cyberlink Technologies, Inc.
Phone: 888-293-3693
Fax: 574-855-5761
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkjiQ+sACgkQJXrxMJHscbJY+ACcC90F8iqMXkCYexoMdNGAcHV7
e+gAoNtOkJYwO8PF9FmXqdmK0E7OGkOe
=dr98
-END PGP SIGNATURE-



Re: ATT Email/SMS gateway outage

2011-07-25 Thread Adam Kennedy
This appears to have just been restored.

--
Adam Kennedy
Network Engineer
Omnicity, Inc.

From: Drew Linsalata drew.linsal...@gmail.commailto:drew.linsal...@gmail.com
Date: Mon, 25 Jul 2011 08:00:25 -0400
To: NANOG nanog@nanog.orgmailto:nanog@nanog.org
Subject: ATT Email/SMS gateway outage

Marginally operational, but I'm sure there are at least a few folks using
that service as part of monitoring, so it probably bears mentioning.

ATT appears to be having an email-to-SMS gateway issue.  Messages sent to
xxx...@txt.att.netmailto:xxx...@txt.att.net are not being delivered 
to handsets.  No bounce, but
no delivery either. As a workaround, messages sent to
xxx...@mms.att.netdomailto:xxx...@mms.att.netdo do get delivered.  
Confirmed in the NYC metro
area and in Chicago at the
moment.
_
NANOG mailing list
NANOG@nanog.orgmailto:NANOG@nanog.org
https://mailman.nanog.org/mailman/listinfo/nanog

_
NANOG mailing list
NANOG@nanog.org
https://mailman.nanog.org/mailman/listinfo/nanog


Re: SMS gateways

2016-01-12 Thread Adam Kennedy
I picked up two of the AT "Beam" USB devices that use the LTE network.
Netgear is the listed manufacturer and has firmware for the units that
makes them usable on Linux. I loaded the driver for those into a Debian box
and I'm able to use smstools open source software to send SMS from the unit
directly to cell network. The AT Beam's were $20 I think and cost us
about $15/mo as additional lines on our corporate plan.


Adam Kennedy | Network & Systems Engineer

Broadband Networks

A Watch Communications Company

PO Box 8 | Rushville, Indiana | 46173

Tel - 866-586-1518 | Fax - 866-567-3897

adamkenn...@broadbandnetworks.com

www.broadbandnetworks.com

On Tue, Jan 12, 2016 at 12:52 AM, Adam Kennedy <adamkenn...@watchcomm.net>
wrote:

> I picked up two of the AT "Beam" USB devices that use the LTE network.
> Netgear is the listed manufacturer and has firmware for the units that
> makes them usable on Linux. I loaded the driver for those into a Debian box
> and I'm able to use smstools open source software to send SMS from the unit
> directly to cell network. The AT Beam's were $20 I think and cost us
> about $15/mo as additional lines on our corporate plan.
>
>
> Adam Kennedy | Network & Systems Engineer
>
> Broadband Networks
>
> A Watch Communications Company
>
> PO Box 8 | Rushville, Indiana | 46173
>
> Tel - 866-586-1518 | Fax - 866-567-3897
>
> adamkenn...@broadbandnetworks.com
>
> www.broadbandnetworks.com
>
> On Mon, Jan 11, 2016 at 11:38 PM, <frnk...@iname.com> wrote:
>
>> I plan to continue living in a rural area with a GSM provider that will
>> support 2G. =)
>>
>> Frank
>>
>> -Original Message-
>> From: John Levine [mailto:jo...@iecc.com]
>> Sent: Saturday, January 09, 2016 5:24 PM
>> To: nanog@nanog.org
>> Cc: frnk...@iname.com
>> Subject: Re: SMS gateways
>>
>> In article <006501d14b31$7c478e40$74d6aac0$@iname.com> you write:
>> >Surprised no one has mentioned the Multimodem iSMS:
>> http://www.multitech.com/brands/multimodem-isms
>> >
>> >Been using it for 5+ years -- first three years the code wasn't stable,
>> needing a reboot every few months,
>> >but the latest code has been stable for 2+ years.
>>
>> It looked interesting until I got to the part where it says it uses a
>> 2G GSM modem.  AT has said quite firmly that they will turn off
>> their 2G network in 2017, and press reports say that T-Mobile is
>> already turning off 2G in favor of LTE.
>>
>> What do you plan to do instead next year?
>>
>>
>>
>>
>


Re: SMS gateways

2016-01-15 Thread Adam Kennedy
The device can definitely send texts. I had to purchase the device as a
data only device, then I contacted support and told them I was working with
Cisco on a project where the router uses these devices but needs text
capability. They did some magic on the number in their system and got it up
and running.


Adam Kennedy | Network & Systems Engineer

Broadband Networks

A Watch Communications Company

PO Box 8 | Rushville, Indiana | 46173

Tel - 866-586-1518 | Fax - 866-567-3897

adamkenn...@broadbandnetworks.com

www.broadbandnetworks.com

On Thu, Jan 14, 2016 at 9:53 AM, Ray Orsini <r...@orsiniit.com> wrote:

> I can confirm that the device can send texts. I use the same 320U and 340U
> with AT and T-Mobile sims. Text is actually how they reset your account
> password if you need it. I use the prepaid plans.
>
> Regards,
>
> Ray Orsini – CEO
> Orsini IT, LLC – Technology Consultants
> VOICE DATA  BANDWIDTH  SECURITY  SUPPORT
> P: 305.967.6756 x1009   E: r...@orsiniit.com   TF: 844.OIT.VOIP
> 7900 NW 155th Street, Suite 103, Miami Lakes, FL 33016
> http://www.orsiniit.com | View My Calendar | View/Pay Your Invoices | View
> Your Tickets
>
>
>
> -Original Message-
> From: Matthew Huff [mailto:mh...@ox.com]
> Sent: Thursday, January 14, 2016 9:46 AM
> To: Adam Kennedy <adamkenn...@watchcomm.net>; Ray Orsini <r...@orsiniit.com
> >
> Cc: John Levine <jo...@iecc.com>; nanog@nanog.org
> Subject: RE: SMS gateways
>
> According to AT sales, the Netgear Beam is a "data-only" device and
> cannot
> send SMS when I just tried to order one. I wouldn't care what they thought,
> but they won't let me set up a plan that includes text. Anyone have any
> suggestions?
>
>
> 
> Matthew Huff | 1 Manhattanville Rd Director of Operations   |
> Purchase, NY 10577 OTA Management LLC   | Phone: 914-460-4039
> aim: matthewbhuff| Fax:   914-694-5669
>
> > -Original Message-
> > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Adam Kennedy
> > Sent: Thursday, January 14, 2016 1:26 AM
> > To: Ray Orsini <r...@orsiniit.com>
> > Cc: John Levine <jo...@iecc.com>; nanog@nanog.org
> > Subject: Re: SMS gateways
> >
> > It was some special offer on our AT small business site. Maybe they
> > were
> > $40 each. I wasn't the one that ordered them but I know they were
> > pretty cheap and so far working fine!
> >
> >
> > Adam Kennedy | Network & Systems Engineer
> >
> > Broadband Networks
> >
> > A Watch Communications Company
> >
> > PO Box 8 | Rushville, Indiana | 46173
> >
> > Tel - 866-586-1518 | Fax - 866-567-3897
> >
> > adamkenn...@broadbandnetworks.com
> >
> > www.broadbandnetworks.com
> >
> > On Tue, Jan 12, 2016 at 8:08 AM, Ray Orsini <r...@orsiniit.com> wrote:
> >
> > > We use those a lot with mobile hotspots. Where did you find them for
> > $20?
> > > We
> > > usually pay about 2x that much for used untis.
> > >
> > > Regards,
> > > Ray Orsini – CEO
> > > Orsini IT, LLC – Technology Consultants VOICE DATA  BANDWIDTH 
> > > SECURITY  SUPPORT
> > > P: 305.967.6756 x1009   E: r...@orsiniit.com   TF: 844.OIT.VOIP
> > > 7900 NW 155th Street, Suite 103, Miami Lakes, FL 33016
> > > http://www.orsiniit.com | View My Calendar | View/Pay Your Invoices
> > > | View Your Tickets
> > >
> > >
> > >
> > > -Original Message-
> > > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Adam
> > > Kennedy
> > > Sent: Tuesday, January 12, 2016 12:56 AM
> > > To: frnk...@iname.com
> > > Cc: John Levine <jo...@iecc.com>; nanog@nanog.org
> > > Subject: Re: SMS gateways
> > >
> > > I picked up two of the AT "Beam" USB devices that use the LTE
> > network.
> > > Netgear is the listed manufacturer and has firmware for the units
> > > that makes them usable on Linux. I loaded the driver for those into
> > > a Debian box and I'm able to use smstools open source software to
> > > send SMS from the unit directly to cell network. The AT Beam's
> > > were $20 I think and cost us about $15/mo as additional lines on our
> > > corporate plan.
> > >
> > >
> > > Adam Kennedy | Network & Systems Engineer
> > >
> > > Broadband Networks
> > >
> > > A Watch Communications Company
> > >
> > > PO Box 8 | Rushville, Indiana | 46173
> > >
> > > Tel - 866-586-1518 | Fax - 866-5

Re: SMS gateways

2016-01-13 Thread Adam Kennedy
It was some special offer on our AT small business site. Maybe they were
$40 each. I wasn't the one that ordered them but I know they were pretty
cheap and so far working fine!


Adam Kennedy | Network & Systems Engineer

Broadband Networks

A Watch Communications Company

PO Box 8 | Rushville, Indiana | 46173

Tel - 866-586-1518 | Fax - 866-567-3897

adamkenn...@broadbandnetworks.com

www.broadbandnetworks.com

On Tue, Jan 12, 2016 at 8:08 AM, Ray Orsini <r...@orsiniit.com> wrote:

> We use those a lot with mobile hotspots. Where did you find them for $20?
> We
> usually pay about 2x that much for used untis.
>
> Regards,
> Ray Orsini – CEO
> Orsini IT, LLC – Technology Consultants
> VOICE DATA  BANDWIDTH  SECURITY  SUPPORT
> P: 305.967.6756 x1009   E: r...@orsiniit.com   TF: 844.OIT.VOIP
> 7900 NW 155th Street, Suite 103, Miami Lakes, FL 33016
> http://www.orsiniit.com | View My Calendar | View/Pay Your Invoices | View
> Your Tickets
>
>
>
> -Original Message-
> From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Adam Kennedy
> Sent: Tuesday, January 12, 2016 12:56 AM
> To: frnk...@iname.com
> Cc: John Levine <jo...@iecc.com>; nanog@nanog.org
> Subject: Re: SMS gateways
>
> I picked up two of the AT "Beam" USB devices that use the LTE network.
> Netgear is the listed manufacturer and has firmware for the units that
> makes
> them usable on Linux. I loaded the driver for those into a Debian box and
> I'm able to use smstools open source software to send SMS from the unit
> directly to cell network. The AT Beam's were $20 I think and cost us
> about
> $15/mo as additional lines on our corporate plan.
>
>
> Adam Kennedy | Network & Systems Engineer
>
> Broadband Networks
>
> A Watch Communications Company
>
> PO Box 8 | Rushville, Indiana | 46173
>
> Tel - 866-586-1518 | Fax - 866-567-3897
>
> adamkenn...@broadbandnetworks.com
>
> www.broadbandnetworks.com
>
> On Tue, Jan 12, 2016 at 12:52 AM, Adam Kennedy <adamkenn...@watchcomm.net>
> wrote:
>
> > I picked up two of the AT "Beam" USB devices that use the LTE network.
> > Netgear is the listed manufacturer and has firmware for the units that
> > makes them usable on Linux. I loaded the driver for those into a
> > Debian box and I'm able to use smstools open source software to send
> > SMS from the unit directly to cell network. The AT Beam's were $20 I
> > think and cost us about $15/mo as additional lines on our corporate plan.
> >
> >
> > Adam Kennedy | Network & Systems Engineer
> >
> > Broadband Networks
> >
> > A Watch Communications Company
> >
> > PO Box 8 | Rushville, Indiana | 46173
> >
> > Tel - 866-586-1518 | Fax - 866-567-3897
> >
> > adamkenn...@broadbandnetworks.com
> >
> > www.broadbandnetworks.com
> >
> > On Mon, Jan 11, 2016 at 11:38 PM, <frnk...@iname.com> wrote:
> >
> >> I plan to continue living in a rural area with a GSM provider that
> >> will support 2G. =)
> >>
> >> Frank
> >>
> >> -Original Message-
> >> From: John Levine [mailto:jo...@iecc.com]
> >> Sent: Saturday, January 09, 2016 5:24 PM
> >> To: nanog@nanog.org
> >> Cc: frnk...@iname.com
> >> Subject: Re: SMS gateways
> >>
> >> In article <006501d14b31$7c478e40$74d6aac0$@iname.com> you write:
> >> >Surprised no one has mentioned the Multimodem iSMS:
> >> http://www.multitech.com/brands/multimodem-isms
> >> >
> >> >Been using it for 5+ years -- first three years the code wasn't
> >> >stable,
> >> needing a reboot every few months,
> >> >but the latest code has been stable for 2+ years.
> >>
> >> It looked interesting until I got to the part where it says it uses a
> >> 2G GSM modem.  AT has said quite firmly that they will turn off
> >> their 2G network in 2017, and press reports say that T-Mobile is
> >> already turning off 2G in favor of LTE.
> >>
> >> What do you plan to do instead next year?
> >>
> >>
> >>
> >>
> >
>


Re: NG Firewalls & IPv6

2018-04-04 Thread Adam Kennedy via NANOG
We've deployed about a dozen Sophos SG and XG firewalls with IPv6 on WAN,
LAN and VPN with great success. The XG is the firmware with the more modern
appearance and a couple latest-gen features. But the SG is just as "next
gen" and still has good IPv6 capability.

--

Adam Kennedy, Network & Systems Engineer

adamkenn...@watchcomm.net

*Watch Communications*

(866) 586-1518





On Wed, Apr 4, 2018 at 1:44 AM, Jima <na...@jima.us> wrote:

> Hey Joe,
>
> I don't know how next-gen they'd be considered, but I've had reasonably
> good luck with Cisco ASA (v9+), and to a lesser degree Juniper ScreenOS
> (v6.3+). Modern-ish ASA does v6-only pretty well; ScreenOS has more
> v4-dependent nuances, that I've found.
>
> I do like the NAT64 support in ASA (although it sadly doesn't support the
> Well-Known Prefix) -- no love in ScreenOS, as far as I've ever found.
>
> - Jima
>
> > On Apr 2, 2018, at 16:58, Joe Klein <jskl...@gmail.com> wrote:
> >
> > All,
> >
> > At security and network tradeshows over the last 15 years, I have asked
> > companies if their products supported "IPv6". They all claimed they did,
> > but were unable to verify any successful installations. Later they told
> me
> > it was on their "Roadmap" but were unable to provide an estimated year,
> > because it was a trade secret.
> >
> > Starting this last year at BlackHat US, I again visited every product
> > booth, asking if their products supported dual-stack or IPv6 only
> > operations. Receiving only the same unsupported answers, I decided to
> focus
> > on one product category.
> >
> > To the gurus of the NANOG community, What are your experiences with
> > installing and managing Next Generations firewalls? Do they support IPv6
> > only environments? Details? Stories?
> >
> > If you prefer not to disparage those poor product companies, please
> contact
> > me off the list.
> >
> > Thanks,
> >
> > Joe Klein
> >
> > "inveniet viam, aut faciet" --- Seneca's Hercules Furens (Act II, Scene
> 1)
> > PGP Fingerprint: 295E 2691 F377 C87D 2841 00C1 4174 FEDF 8ECF 0CC8
>


Re: NG Firewalls & IPv6

2018-04-05 Thread Adam Kennedy via NANOG
We've been using DHCP-PD with Sophos SG/XG on a couple Comcast connections
and it works fine. It will even go through all your firewall objects and
automatically change the IPv6 prefix from the old to new if the prefix from
PD changes.

--

Adam Kennedy, Network & Systems Engineer

adamkenn...@watchcomm.net

*Watch Communications*

(866) 586-1518





On Wed, Apr 4, 2018 at 2:41 PM, Chuck Anderson <c...@wpi.edu> wrote:

> Also, IPv6 BGP support was only introduced in PanOS 8.  But everything
> works fine here too.
>
> On Wed, Apr 04, 2018 at 10:47:45AM +, Dan Kitchen wrote:
> > We run PaloAlto dual stack with no problems at all, that’s full dynamic
> routing with OSPF and BGP, web filtering, IPS, VPN access using
> GlobalProtect, etc.
> >
> > I must admit GlobalProtect IPv6 support was only introduced in PanOS 8
> which was a little late in my opinion – but it was delivered and works.
> >
> >
> >
> >
> > Dan Kitchen
> > Managing Director
> > razorblue | IT Solutions for Business
> >
> > ddi:0330 122 7143 |  t: 0333 344 6 344 | e: dkitc...@razorblue.com
> <mailto:dkitc...@razorblue.com> | w: razorblue.com
> >
> > Legal and address information for all Razorblue Group companies can be
> found
> > at www.razorblue.com/contact.
> >
> > From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Joe Klein
> > Sent: 02 April 2018 23:58
> > To: NANOG list <nanog@nanog.org>
> > Subject: NG Firewalls & IPv6
> >
> > WARNING: This e-mail originated from outside the Razorblue Group
> corporate network
> >
> > All,
> >
> > At security and network tradeshows over the last 15 years, I have asked
> > companies if their products supported "IPv6". They all claimed they did,
> > but were unable to verify any successful installations. Later they told
> me
> > it was on their "Roadmap" but were unable to provide an estimated year,
> > because it was a trade secret.
> >
> > Starting this last year at BlackHat US, I again visited every product
> > booth, asking if their products supported dual-stack or IPv6 only
> > operations. Receiving only the same unsupported answers, I decided to
> focus
> > on one product category.
> >
> > To the gurus of the NANOG community, What are your experiences with
> > installing and managing Next Generations firewalls? Do they support IPv6
> > only environments? Details? Stories?
> >
> > If you prefer not to disparage those poor product companies, please
> contact
> > me off the list.
> >
> > Thanks,
> >
> > Joe Klein
>


Re: Are network operators morons? [was: CloudFlare issues?]

2019-06-25 Thread Adam Kennedy via NANOG


Now with that out of the way...  The mentality of everyone working together
for a Better Internet (tm) is sort of a mantra of WISPA and WISPs in
general. It is a mantra that has puzzled me and perplexed my own feelings
as a network engineer. Do I want a better overall experience for my users
and customers? Absolutely. Do I strive to make our network the best...
pause... in the world? Definitely. Should I do the same to help a
neighboring ISP, a competitor? This is where I scratch my head. You would
absolutely think that we would all want a better overall Internet. One that
we can depend on in times of need. One that we can be proud of. But we are
driven, unfortunately, by our C-level execs to shun the competition and do
whatever we can to get a leg up on everyone else. While this is good for
the bottom line it is not exactly a healthy mentality to pit everyone
against each other. It causes animosity between providers and we end up
blaming each other for something simple and then claim they are stupid. A
mistake that may be easy to make, a mistake that we have probably made
ourselves a few times, perhaps a mistake we can learn to shrug off.

I believe there probably is a happy medium we can all meet, sort of our own
ISP DMZ, where we can help one another in the simple mistakes or cut each
other some slack in those difficult times. I like to think NANOG is that
place.

--

Adam Kennedy, Network & Systems Engineer

adamkenn...@watchcomm.net

*Watch Communications*

(866) 586-1518






On Tue, Jun 25, 2019 at 8:50 AM Matthew Walster  wrote:

>
>
> On Tue, 25 Jun 2019, 14:31 Patrick W. Gilmore,  wrote:
>
>> I must be old. All I can think is Kids These Days, and maybe Get Off My
>> BGP, er Lawn.
>>
>
> Maybe they ought to [puts on shades] mind their MANRS.
>
> M (scuttling away)
>
>>


Re: WIKI documentation Software?

2020-03-14 Thread Adam Kennedy via NANOG
We've been using BookStack. It's easy for staff to use and understand. We
gave each department their own "shelf" in there and can assign rights to
shelves so managers of the departments can add their own
books/chapters/pages. Once you dive in you'll see how it's organized but
it's a really solid platform. Supports LDAP auth as well. Great platform,
we've loved it.

https://www.bookstackapp.com/
Adam Kennedy
Systems Engineer
adamkenn...@watchcomm.net | 800-589-3837 x120 <800-589-3837;120>
Watch Communications | www.watchcomm.net
<https://www.watchcomm.net?utm_source=signature_medium=email_campaign=general_signature>
3225 W Elm St, Suite A
Lima, OH 45805
<https://twitter.com/watchcommnet>
<https://www.facebook.com/watchcommunications>
<http://www.linkedin.com/company/watch-communications>


On Sat, Mar 14, 2020 at 7:09 PM  wrote:

> I've been using MoinMoin wiki for years.  It hasn't been updated for
> quite a while, but it has worked really well for me, is trivial to
> install, uses text file backend so no need for a database, allows for
> hierarchical structure, is pretty fast, is very very light weight and
> extensible, built on python and free.
>
> I don't know if there is a docker container, but I'm thinking of
> building one.
>
> If you want something simple, stable, older, small and usable you might
> take a look at MoinMoin.
>
> If you want a docker container, ask and I'll probably build one.
>
> Geoff
>
>
> On 3/14/20 2:35 PM, Gavin Henry wrote:
> > I think DokuWiki does this and as an added bonus saves all as text files.
>
>


Re: DNS cache Validation

2020-05-18 Thread Adam Kennedy via NANOG
I wrote a script to expose stats from unbound to SNMP and built a Cacti
template for that. Recently started moving the DNS stats to feed into
Telegraf that pushes to an InfluxDB server, then built a dashboard in
Grafana. We track DNS RTT for a few queries, number of drops, number of
rejects, various record type requests per second, etc. We also have a
Nagios plugin that checks each of our DNS cache resolving servers scattered
across the network to ensure they can resolve a handful of popular domains.
Adam Kennedy
Systems Engineer
adamkenn...@watchcomm.net | 800-589-3837 x120 <800-589-3837;120>
Watch Communications | www.watchcomm.net
<https://www.watchcomm.net?utm_source=signature_medium=email_campaign=general_signature>
3225 W Elm St, Suite A
Lima, OH 45805
<https://twitter.com/watchcommnet>
<https://www.facebook.com/watchcommunications>
<http://www.linkedin.com/company/watch-communications>


On Mon, May 18, 2020 at 11:47 PM Justin Wilson (Lists) 
wrote:

> What are you folk doing to validate your DNS cache server configs
> and operation? In other words, what are you doing to make sure they are
> performing well, not just alive.
>
> Justin
> —
> https://blog.j2sw.com


Re: Famous operational issues

2021-02-23 Thread Adam Kennedy via NANOG
While we're talking about raid types...

A few acquisitions ago, between 2006-2010, I worked at a Wireless ISP in
Northern Indiana. Our CEO decided to sell Internet service to school
systems because the e-rate funding was too much to resist. He had the idea
to install towers on the schools and sell service off that while paying the
school for roof rights. About two years into the endeavor, I wake up one
morning and walk to my car. Two FBI agents get out of an unmarked towncar.
About an hour later, they let me go to the office where I found an entire
barrage of FBI agents. It was a full raid and not the kind you want to see.
Hard drives were involved and being made redundant, but the redundant
copies were labeled and placed into boxes that were carried out to SUVs
that were as dark as the morning coffee these guys drank. There were a lot
of drives, all of our servers were in our server room at the office. There
were roughly five or six racks of varying amounts of equipment in each.

After some questioning and assisting them in their cataloging adventure,
the agents left us with a ton of questions and just enough equipment to
keep the customers connected. CEO became extremely paranoid at this point.
He told us to prepare to move servers to a different building. He went into
a tailspin trying to figure out where he could hide the servers to keep
things going without the bank or FBI seizing the assets. He was extremely
worried the bank would close the office down. We started moving all network
routing around to avoid using the office as our primary DIA.

One morning I get into the office and we hear the words we've been
dreading: "We're moving the servers". The plan was to move them to a tower
site that had a decent-sized shack on site. Connectivity was decent, we had
a licensed 11GHz microwave backhaul capable of about 155mbps. The site was
part of the old MCI microwave long-distance network in the 80s and 90s. It
had redundant air conditioners, a large propane tank, and a generator
capable of keeping the site alive for about three days. We were told not to
notify any customers, which became problematic because two customers had
servers colocated in our building. We consolidated the servers into three
racks and managed to get things prepared with a decent UPS in each rack.
CEO decided to move the servers at nightfall to "avoid suspicion". Our
office was in an unsavory part of town, moving anything at night was
suspicious. So, under the cover of half-ass darkness, we loaded the racks
onto a flatbed truck and drove them 20 minutes to the tower. While we
unloaded the racks, an electrician we knew was wiring up the L5-20 outlets
for the UPS in each rack. We got the racks plugged in, servers powered up,
and then the two customers came that had colocated equipment. They got
their equipment powered up and all seemed ok.

Back at the office the next day we were told to gather our workstations and
start working from home. I've been working from home ever since and quite
enjoy it, but that's beside the point.

Summer starts and I tell the CEO we need to repair the AC units because
they are failing. He ignores it, claiming he doesn't want to lose money the
bank could take at any minute. About a month later, a nice hot summer day
rolls in and the AC units both die. I stumble upon an old portable AC unit
and put that at the site. Temperatures rise to 140F ambient. Server
overheat alarms start going off, things start failing. Our colocation
customers are extremely upset. They pull their servers and drop service.
The heat subsides, CEO finally pays to repair one of the AC units.

Eventually, the company declares bankruptcy and goes into liquidation.
Luckily another WISP catches wind of it, buys the customers and assets, and
hires me. My happiest day that year was moving all the servers into a
better-suited home, a real data center. I don't know what happened to the
CEO, but I know that I'll never trust anything he has his hands in ever
again.

Adam Kennedy
Systems Engineer
adamkenn...@watchcomm.net | 800-589-3837 x120 <800-589-3837;120>
Watch Communications | www.watchcomm.net
<https://www.watchcomm.net?utm_source=signature_medium=email_campaign=general_signature>
3225 W Elm St, Suite A
Lima, OH 45805
<https://twitter.com/watchcommnet>
<https://www.facebook.com/watchcommunications>
<http://www.linkedin.com/company/watch-communications>


On Tue, Feb 23, 2021 at 8:55 PM brutal8z via NANOG  wrote:

> My war story.
>
> At one of our major POPs in DC we had a row of 7513's, and one of them had
> intermittent problems. I had replaced every piece of removable card/part in
> it over time, and it kept failing. Even the vendor flew in a team to the
> site to try to figure out what was wrong. It was finally decided to replace
> the whole router (about 200lbs?). Being the local field tech, that was my
> Job. On the night of the maintenance at 3am, the wor