Re: Blackhole Routes

2004-09-30 Thread Robert A. Hayden
We use Blackholing extensively to protect our campus network from "bad" machines. I did a writeup (replete my own personal brand of braindead typos) a while back that details out how we set it up using OSPF and uRPF. http://www.merit.edu/mail.archives/nanog/2003-11/msg00225.html There are mec

Re: 10GE access switch router

2004-09-29 Thread Robert A. Hayden
What we do is to use the "priority" setting in the 3750 to determine who is the master. switch(config)#switch 1 priority 15 This will define that switch in the stack as the highest priority, then set your next one to 14, etc etc through the stack. That way you will always have deter

Re: RIP in Operation

2004-09-16 Thread Robert A. Hayden
Oh certainly, RIPv2. I tend to just assume that "RIP" is generic and everyone means v2. - Robert On Thu, 16 Sep 2004 [EMAIL PROTECTED] wrote: > > We use RIP extensively on the edges of our network to build a Layer3 > > routed overlay between 3550/3750 switches and our 6500-based core. At

Re: RIP in Operation

2004-09-16 Thread Robert A. Hayden
We use RIP extensively on the edges of our network to build a Layer3 routed overlay between 3550/3750 switches and our 6500-based core. At $2k/list for the EMI license PER SWITCH ($4k for 3750s), it just wasn't feasible for us to use EMI just for OSPF when all we were really announcing was a

Followup: Inexpensive Telephone Conference Bridge System

2004-07-22 Thread Robert A. Hayden
Thank you all for the responses. I got about 35 reponses and 34 of them strongly suggested www.asterisk.org as an open-source linux-based solution that will work with either 4-port POTs PCI cards or 1- or 4-port T1 PCI cards. Also recommended were Turn-key solutions at www.conference-bridge.n

Inexpensive Telephone Conference Bridge System

2004-07-20 Thread Robert A. Hayden
While this isn't directly networking related, I thought any followups might be of interest so I'm posting here. I'm looking to find a fairly inexpensive piece of hardware that will allow me to set up a easy permanent telephone conference bridge. The purpose would be to allow engineers and man

Re: Publish or (gulp) Perish

2004-03-24 Thread Robert A. Hayden
It is my firm believe that if a Powerpoint presentation was to say "The Ocean is made of Yogurt", it would be believe by management. I believe next time I give a presenation I will put that line in. - Robert On 24 Mar 2004, Robert E. Seastrom wrote: > > > vijay gill <[EMAIL PROTECTED]> wri

RE: Cisco website www.cisco.com 403 forbidden?

2004-03-15 Thread Robert A. Hayden
Still 404s on me now when I try to log into CCO or follow any of my bookmarks to case query, pricelist, or TAC Case generation. Todays excuse of the day is: SUNSPOTS! On Mon, 15 Mar 2004, Todd Mitchell - lists wrote: > > | Behalf Of Jay Hennigan > | Sent: March 15, 2004 3:19 PM > | > |

Re: Upcoming change to SOA values in .com and .net zones

2004-01-07 Thread Robert A. Hayden
On Wed, 7 Jan 2004, Robert Blayzor wrote: > > On 1/7/04 6:31 PM, "Frank Louwers" <[EMAIL PROTECTED]> wrote: > > > Don't they use MMDDNN now? So today's version whould be 2004010801. > > AFAIK, 1076370400 is actually "less" then 2004010801... > > > > I know there are ways to "trick" nameser

Re: good cabling in real environments [Re: Request for submissions: messy cabling and other broken things]

2003-12-17 Thread Robert A. Hayden
On Wed, 17 Dec 2003, Pekka Savola wrote: > Now, we've seen a few pics of "good" cabling as well. > > However, I'm forced to ask which kind of "good cabling" is possible in > a dynamic environment when you plug in/out, change, etc. the cables. > This seems to invariably lead to total chaos :

Per VLAN Stats on MSFC2 - Complaints from the Field

2003-11-20 Thread Robert A. Hayden
Hey all, This one is a weird one. I apologize if this is a bit off topic. As everyone is probably aware, the Cisco 6500/7600 line is unable to provide per-vlan I/O statistics on routed interfaces (ie, a "show int vlan xxx" has meaningless numbers in the I/O and error fields at the end). MIB t

uRPF-based Blackhole Routing System Overview

2003-11-07 Thread Robert A. Hayden
I posted earlier mentioning that I was using uRPF to facilitate a blackhole routing system on our campus. I went off to lunch and came back to 38 private emails from people asking how I'm doing it. Rather than respond individually, I figured I'd post an informal synopsis here. First, I'm a n

Re: Nachi claims another college: Dartmouth November 7

2003-11-07 Thread Robert A. Hayden
We got so sick of dealing with Nachi that we stepped up deployment of a uRPF-based blackhole routing system campus wide. Now when the flows show something abnormal, we just blackhole the offending computer and auto-generate and email to the admins of that IP space and then send them auto nag-

Re: 24-port Gigabit + two 10Gb uplinks

2003-11-06 Thread Robert A. Hayden
On Thu, 6 Nov 2003, Eric Kuhnke wrote: > > Certainly not as cheap as a 2950 with two Gb ports, but this is the start > of an entirely new generation of edge switches. Does anyone want to hazard > a guess as how long it will be before 24+10Gb switches are selling for $1,500? > 3 years? Certai

RE: cooling systems

2003-11-05 Thread Robert A. Hayden
2003, Jeffrey Paul wrote: > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > Behalf Of Robert A. Hayden > > Sent: Wed, 2003-11-05 12:50 > > To: Joe Abley > > Cc: Neil J. McRae; Mike Tancsa; Robert E. Seastrom; [EM

Re: cooling systems

2003-11-05 Thread Robert A. Hayden
I've seen some designs that actually use water as the transport and many-finned radiators at each end. Radiator transfer heat into cold water inside which is pumped up a radiator in the sub-zero temps on the roof and exchanged and then looped back. Same basic principle as a traditional reside

Frustrating loss of connectivity...FOLLOWUP

2003-10-14 Thread Robert A. Hayden
I'd like to take a moment to quickly publicly thank Darryl, Kevin and Roy from Level 3 that jumped on this issue right away tearing through logs and historicals and then watching the suspect link and providing me the debugging information. In addition, I also was contacted by Todd from Covad and

Re: Extreme BlackDiamond

2003-10-13 Thread Robert A. Hayden
7600 is also vertical boards whereas the 6500 is horizontal. On Mon, 13 Oct 2003, Simon Lockhart wrote: > > On Mon Oct 13, 2003 at 01:19:21PM -0700, Tom (UnitedLayer) wrote: > > > > On Mon, 13 Oct 2003, Michel Py wrote: > > > Aren't most of the 6500 blades the same as the 7600 ones anyway? Bet

Frustrating loss of connectivity...

2003-10-13 Thread Robert A. Hayden
Hey all, I apologize for posting this here, especially for what is essentially an end-user broadband issue, but I'm looking at what appears to be a link a few hops upstream from me that has been flapping frequently and I can't get our provider to look into it. I am located in Madison, WI, and I

Re: News coverage, Verisign etc.

2003-10-08 Thread Robert A. Hayden
"Verisign Highjacks Internet" That should work :-) On Wed, 8 Oct 2003, Mike Tancsa wrote: > > At 03:06 PM 08/10/2003, [EMAIL PROTECTED] wrote: > > > >In these days of corporate malfeasance scandal coverage, you'd think that > >Verisign's tactics would have whetted the appetite of some brigh

Re: Root Server Operators (Re: What *are* they smoking?)

2003-09-16 Thread Robert A. Hayden
On Tue, 16 Sep 2003, Damian Gerow wrote: > How about, 'Internet Operators Across North America Struggle to Deal with > Impact of Business Decision: Internet Functionality Worldwide > Tampered With by Verisign'? There doesn't really appear to be a unified > decision to do one thing, there's a lot

Re: State Super-DMCA Too True

2003-03-30 Thread Robert A. Hayden
Can't NAT-like devices be just as viable as a security device as well? Is the ISP willing to take responsiblity for security breaches on my home network because they banned my firewall? From a political/public-perception standpoint, treat those ISPs that are complaining about NAT as being soft on

Re: Level3 routing issues?

2003-01-25 Thread Robert A. Hayden
What about doing some priority-based QoS? If a single IP exceeds X amount of traffic, prioritize traffic above that threshold as low. It would keep any one single host from saturating a link if the threshold is low. For example, you may say that each IP is limited to 10mb of prioirty traffic.

RE: fast ethernet limits

2003-01-10 Thread Robert A. Hayden
Works fine if you do it using x.25 :-) On Fri, 10 Jan 2003, Andy Dills wrote: > > On Fri, 10 Jan 2003, Al Rowland wrote: > > > > > And you are using shielded cable, correct? > > Nah, I'm guessing he strung bare copper seperated by cotton balls. > That's what I like to use in my 27-floor 100tx ru

Re: Spanning tree melt down ?

2002-11-28 Thread Robert A. Hayden
I'm still failing to see why this required a $3M forklift of new equipment to correct the problem. Was this just Cisco sales pouncing on someone's misfortune as a way to push new stuff? On Thu, 28 Nov 2002, Stephen J. Wilcox wrote: > > Heh, so they kept bolting stuff on and a failure somewhere

RE: AT&T NYC

2002-08-29 Thread Robert A. Hayden
Yup. I like using OSPF to set up the mesh to the loopbacks and then ibgp as the IGP. On Thu, 29 Aug 2002, Michael Hallgren wrote: > >Um. Set up more than one reflector > > yes... and align your setup with your physical topology(so making it > useful); > use other proto for mapping your in

Re: routing architectures ( was Re: AT&T NYCrouting )

2002-08-29 Thread Robert A. Hayden
way. Trying not to start a religious war. On Thu, 29 Aug 2002, Ralph Doncaster wrote: > On Thu, 29 Aug 2002, Robert A. Hayden wrote: > > > Um. Set up more than one reflector > > So how many is enough? I would think 3 is a minimum to come close to the > reliabili

Re: AT&T NYC

2002-08-29 Thread Robert A. Hayden
Um. Set up more than one reflector On Thu, 29 Aug 2002, Ralph Doncaster wrote: > > On Thu, 29 Aug 2002, Peter van Dijk wrote: > > > On Thu, Aug 29, 2002 at 01:09:54PM -0400, [EMAIL PROTECTED] wrote: > > > > Has anybody mentioned the benefits of ISIS as an IGP to them. > > > Link-state prot

RE: IETF SMTP Working Group Proposal at smtpng.org

2002-08-21 Thread Robert A. Hayden
1 at 15:25, Robert A. Hayden wrote: > > Yea. Good luck getting a DSL provider to swip an IP to you or to be > > willing to register an IP for you. > If you have a /29 or shorter they **HAVE** to swip it. Else they can't > get numbers from ARIN. > > So, that point is moot. > > > >

RE: IETF SMTP Working Group Proposal at smtpng.org

2002-08-21 Thread Robert A. Hayden
Yea. Good luck getting a DSL provider to swip an IP to you or to be willing to register an IP for you. On Wed, 21 Aug 2002, Robert Blayzor wrote: > > > What about individuals that run their own mail servers? (E.G. me).? > > Get your mail server registered just like everyone else I suppose. I

Re: CA Power

2002-07-11 Thread Robert A. Hayden
Increased power demands from all the paper shredders? ;-) On Thu, 11 Jul 2002, Gary E. Miller wrote: > > Yo Martin! > > If there is plenty of power in CA then howcum there was a "stage 2" alert > yesterday and a "market alert today"? Today's "projected demand" equaled > "available resources" t

Re: Kudos to Qwest

2002-07-09 Thread Robert A. Hayden
Of course, the other question is whether Qwest will be around in six months or if it will face the same Enron/Worldcom implosion we're seeing now... On Tue, 9 Jul 2002, Vincent J. Bono wrote: > > We always hear the worst but I just thought I would plug Qwest in that they > just installed an OC-

Re: Sprint peering policy

2002-07-01 Thread Robert A. Hayden
On Mon, 1 Jul 2002, Leo Bicknell wrote: > There is no way for a company to price transit below their peering > costs and make money. So the question becomes, is $50/meg too low. > I believe so. I think that the companies selling at $50 a meg are > in a desperate attempt to get revenue in the d

Re: ATTBI refuses to do reverse DNS?

2002-06-18 Thread Robert A. Hayden
GAH! Sorry, bad typo. On Tue, 18 Jun 2002, Robert A. Hayden wrote: > > Most providers provide some kind for forward/reverse mapping, including > ATTBI. Often, however, they do provide customized reverse mapping (ie, ^^ do not > myhost.mydomain.com

Re: ATTBI refuses to do reverse DNS?

2002-06-18 Thread Robert A. Hayden
Most providers provide some kind for forward/reverse mapping, including ATTBI. Often, however, they do provide customized reverse mapping (ie, myhost.mydomain.com). That may be where the disconnect. I believe that ATTBI has a script that auto-generates forward/reverse mappings on a regular bas

Re: UUNET instability?

2002-04-25 Thread Robert A. Hayden
Sometimes it feels like the support departments just scan cnn.com to find a catastrophe to blame an outtage on. "A butterfly in outter mongolia flapped its wings" will probably be cited before long... On Thu, 25 Apr 2002, Sean Donelan wrote: > > > That's unusual. A train derailment usually ef

Re: CEOlink

2002-03-13 Thread Robert A. Hayden
On Wed, 13 Mar 2002, Sean Donelan wrote: > Interesting idea. It would be nice if ISPs also had a way to > instantly talk with one another. I thought that was NANOG ;-)