Re: IPv6 enabled carriers?

2010-03-11 Thread Jeroen Massar
Pekka Savola wrote: On Wed, 10 Mar 2010, Chris Grundemann wrote: SixXS maintains a list here: http://www.sixxs.net/faq/connectivity/?faq=ipv6transit. I think that list should also include TeliaSonera. TSIC does offer v6 transit, although their product sheet only mentions IPv4. Updates

Re: [Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]

2010-03-11 Thread Randy Bush
I'm sorry, but some people are spending too much time denying history. IPv6 has been largely ready for YEARS. Less than five years ago a lot of engineers were declaring IPv6 dead and telling people that double and triple NAT was the way of the future. It's only been over the past two years

Re: [Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]

2010-03-11 Thread Eric Brunner-Williams
What NANOG contributors, if any, are invited by a government, to join their national delegation to the initial meeting of the ITU's IPv6 Group in Geneva next week?

Re: [Fwd: [members-discuss] [ncc-announce] RIPE NCC Position On The ITU IPv6 Group]

2010-03-11 Thread Tom Vest
On Mar 11, 2010, at 5:08 AM, Randy Bush wrote: I'm sorry, but some people are spending too much time denying history. IPv6 has been largely ready for YEARS. Less than five years ago a lot of engineers were declaring IPv6 dead and telling people that double and triple NAT was the way of the

Re: ethernet to serial converters with ACLs

2010-03-11 Thread Henry Yen
On Wed, Mar 10, 2010 at 15:17:53PM -0500, Michael Holstein wrote: Can anyone recommend a cheap Ethernet to Serial (RS232/422/485) converter with functionality like the Lantronix boxes .. except one that supports access lists (nothing complicated .. maybe a list of 5 approved hosts). I need a

RE: Best VPN Appliance

2010-03-11 Thread Mike Callahan
+1 for the ShrewSoft Client for Windows 7. Works like a champ. Mike -Original Message- From: Jon Auer [mailto:j...@tapodi.net] Sent: Monday, March 08, 2010 2:54 PM To: Blomberg, Orin P (DOH) Cc: nanog@nanog.org Subject: Re: Best VPN Appliance If you can use 3rd party VPN clients the

Re: 10GBase-t switch

2010-03-11 Thread Raoul Bhatia [IPAX]
On 03/11/2010 07:04 AM, Kevin Oberman wrote: Date: Thu, 11 Mar 2010 12:26:16 +0900 From: Randy Bush ra...@psg.com arista 7120t-4s... hot box. but you are giving away the secret sauce! Hot box for the datacenter, but small buffers make it unsuited for long distances. In the right place,

Re: 10GBase-t switch

2010-03-11 Thread Rubens Kuhl
Arista EOS - what good/bad things do you have to say about their management capabilities? which known brand can it be compared to? I couldn't help myself thinking that the name of an operanting system shouldn't resemble End of Sales that much. Rubens

RE: 10GBase-t switch

2010-03-11 Thread Dylan Ebner
Do the Arista switches support netflow? From a management perspective netflow can be vital. This is something we have been unhappy with on our 3560 and 3750 cisco's. Dylan -Original Message- From: Raoul Bhatia [IPAX] [mailto:r.bha...@ipax.at] Sent: Thursday, March 11, 2010 8:50 AM

Need advise for a linux firewall

2010-03-11 Thread Abdul Nazeer
Looking for advise on setting up a linux based dedicated firewall. Apparently, there are plenty: http://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions I'm looking to have the firewall sit in front of a public network of windows boxes. Also, would want to be able to load-balance

Re: Need advise for a linux firewall

2010-03-11 Thread Aaron Urbain
fwbuilder

Re: Need advise for a linux firewall

2010-03-11 Thread Mirko Maffioli
try http://www.zeroshell.net/eng/ 2010/3/11 Abdul Nazeer voipu...@optonline.net: Looking for advise on setting up a linux based dedicated firewall. Apparently, there are plenty: http://en.wikipedia.org/wiki/List_of_router_or_firewall_distributions I'm looking to have the firewall sit in

Re: Need advise for a linux firewall

2010-03-11 Thread gordon b slater
On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based, comes under your other category) It uses the OpenBSD-based pf firewall, with a web-based GUI for almost everything (except maybe console

Re: Wireless Ethernet bridge

2010-03-11 Thread Stefano Gridelli
The motorola PTP 600 seems thus far the most valid solution. We want to remain on ISM bands, because we don't want to take the burden of renewing the license with FCC every x years ... we need something that once installed requires the least maintenance effort possible. We already have antennas

Re: Need advise for a linux firewall

2010-03-11 Thread Marty Anstey
PFsense, (being freeBSD-based, comes under your other category) It uses the OpenBSD-based pf firewall, with a web-based GUI for almost everything (except maybe console resets). works for me in several locations, some `heavy and high`. +1 for pfsense. I've been running it for over 18

Re: IPv6 enabled carriers?

2010-03-11 Thread Chris Woodfield
To pile on in the spirit of if people don't complain, nothing will change - is VZB still insisting on filtering /32 at their peers? While ARIN is allocating /40s and /48s directly? -C On Mar 10, 2010, at 2:18 PM, Seth Mattinen wrote: On 3/10/10 11:00 AM, Charles Mills wrote: Does anyone

RE: Wireless Ethernet bridge

2010-03-11 Thread Paul Stewart
We love the PTP600 platform and it works very well for our needs - as good as any path profile has shown us. Depending on the height of the tower, you can handoff via copper or via multimode fiber (someone said it doesn't do multimode, we do it all the time with their fiber kits from Motorola).

Re: Need advise for a linux firewall

2010-03-11 Thread gordon b slater
On Thu, 2010-03-11 at 09:01 -0800, Marty Anstey wrote: +1 for pfsense. I've been running it for over 18 months with no problems whatsoever. It does everything I needed it to do, and quite a bit more. actually, reading back on the nanog list for a few plays (playing catch-up here) pfsense

Re: IPv6 enabled carriers?

2010-03-11 Thread Seth Mattinen
On 3/11/10 9:01 AM, Chris Woodfield wrote: To pile on in the spirit of if people don't complain, nothing will change - is VZB still insisting on filtering /32 at their peers? While ARIN is allocating /40s and /48s directly? As far as I know, yes. ~Seth

Re: Wireless Ethernet bridge

2010-03-11 Thread Roy
Airaya will do 1600 bytes packets. http://www.airaya.com/ On 3/11/2010 8:50 AM, Stefano Gridelli wrote: The motorola PTP 600 seems thus far the most valid solution. We want to remain on ISM bands, because we don't want to take the burden of renewing the license with FCC every x years ... we

Re: IPv6 enabled carriers?

2010-03-11 Thread TJ
On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield rek...@semihuman.comwrote: To pile on in the spirit of if people don't complain, nothing will change - is VZB still insisting on filtering /32 at their peers? While ARIN is allocating /40s and /48s directly? I believe so ... will be even more

Re: Need advise for a linux firewall

2010-03-11 Thread Ronald Cotoni
On Thu, Mar 11, 2010 at 12:06 PM, gordon b slater gordsla...@ieee.org wrote: On Thu, 2010-03-11 at 09:01 -0800, Marty Anstey wrote: +1 for pfsense. I've been running it for over 18 months with no problems whatsoever. It does everything I needed it to do, and quite a bit more. actually,

Re: ethernet to serial converters with ACLs

2010-03-11 Thread Bill Fehring
On Wed, Mar 10, 2010 at 19:06, R. Benjamin Kessler r...@mnsginc.com wrote: On a similar topic, any good solutions for out-of-band serial console/Ethernet solutions that use EV-DO/GSM wireless Internet? Check these out: http://www.opengear.com/product-acm5000.html

Re: Wireless Ethernet bridge

2010-03-11 Thread Joel Mulkey
We have used the 2.4GHz version of the Exalt radio - the EX-2.4i. We were fairly happy with it. The latency and jitter was great for a TDD radio, better than any I have seen. It was very reliable from a data-forwarding perspective. The management interface was nice when it worked, but the HTTP

Re: IP4 Space

2010-03-11 Thread Bill Bogstad
On Wed, Mar 10, 2010 at 10:00 PM, Daniel Senie d...@senie.com wrote: Well, it's like this... there's still no native IPv6 connectivity in most data centers, residences, businesses or wireless, most vendors of networking equipment have not had a lot of mileage on their IPv6 code if they even

Re: 10GBase-t switch

2010-03-11 Thread Malte von dem Hagen
Hi, Am 11.03.10 16:29 schrieb Dylan Ebner: Do the Arista switches support netflow? nothing about it in the datasheets, and regarding documentation: A registered account and a valid support contract is required to access the Software Download and Documentation section of the website. Service

Re: 10GBase-t switch

2010-03-11 Thread Malte von dem Hagen
Hi, Am 11.03.10 15:50 schrieb Raoul Bhatia [IPAX]: which known brand can it be compared to? the CLI looks IOSish. Pity. .m -- Malte von dem Hagen Teamleitung Network Engineering Operation Abteilung Technik --- Host Europe

Filtered 6to4, what else to use (Re: IPv6 enabled carriers?)

2010-03-11 Thread Jeroen Massar
TJ wrote: On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield rek...@semihuman.comwrote: To pile on in the spirit of if people don't complain, nothing will change - is VZB still insisting on filtering /32 at their peers? While ARIN is allocating /40s and /48s directly? I believe so ...

RE: 10GBase-t switch

2010-03-11 Thread David Hubbard
From: Malte von dem Hagen [mailto:m...@hosteurope.de] Hi, Am 11.03.10 16:29 schrieb Dylan Ebner: Do the Arista switches support netflow? nothing about it in the datasheets, and regarding documentation: A registered account and a valid support contract is required to access the

RE: IPv6 enabled carriers?

2010-03-11 Thread George, Wes E [NTK]
-Original Message- From: Seth Mattinen [mailto:se...@rollernet.us] Sent: Wednesday, March 10, 2010 2:19 PM To: nanog@nanog.org Subject: Re: IPv6 enabled carriers? On 3/10/10 11:00 AM, Charles Mills wrote: Does anyone have a list of carriers who are IPv6 capable today? snip Sprint wasn't

RE: 10GBase-t switch

2010-03-11 Thread Greg Whynott
I will likely never buy or recommend Foundry equipment again. In a previous gig, a HPC enviorment, they caused us many problems, support was horrible, and thier 10Gbit kit was the pits when it was first released (no idea how it is now or what they offer, its been 5 years since. burnt

Re: Need advise for a linux firewall

2010-03-11 Thread Abdul Nazeer
On 03/11/2010 11:22 AM, gordon b slater wrote: On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based, comes under your other category) It uses the OpenBSD-based pf firewall, with a

Re: Need advise for a linux firewall

2010-03-11 Thread Jim Miller
On Thu, Mar 11, 2010 at 11:56 PM, Abdul Nazeer voipu...@optonline.netwrote: On 03/11/2010 11:22 AM, gordon b slater wrote: On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based,

Re: IP4 Space

2010-03-11 Thread Owen DeLong
On Mar 11, 2010, at 10:16 AM, Bill Bogstad wrote: On Wed, Mar 10, 2010 at 10:00 PM, Daniel Senie d...@senie.com wrote: Well, it's like this... there's still no native IPv6 connectivity in most data centers, residences, businesses or wireless, most vendors of networking equipment have not

Re: 10GBase-t switch

2010-03-11 Thread Dave Temkin
Kevin Oberman wrote: Date: Thu, 11 Mar 2010 12:26:16 +0900 From: Randy Bush ra...@psg.com arista 7120t-4s... hot box. but you are giving away the secret sauce! Hot box for the datacenter, but small buffers make it unsuited for long distances. In the right place, this box

Re: Filtered 6to4, what else to use (Re: IPv6 enabled carriers?)

2010-03-11 Thread TJ
On Thu, Mar 11, 2010 at 1:30 PM, Jeroen Massar jer...@unfix.org wrote: TJ wrote: On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield rek...@semihuman.com wrote: To pile on in the spirit of if people don't complain, nothing will change - is VZB still insisting on filtering /32 at their

Re: 10GBase-t switch

2010-03-11 Thread Arnold Nipper
On 11.03.2010 16:29 Dylan Ebner wrote Do the Arista switches support netflow? From a management perspective netflow can be vital. This is something we have been unhappy with on our 3560 and 3750 cisco's. They don't (yet). Given you buy enoughboxes, Arista may be willing to implement this

Re: 10GBase-t switch

2010-03-11 Thread Paolo Lucente
On Thu, Mar 11, 2010 at 10:20:41PM +0100, Arnold Nipper wrote: On 11.03.2010 16:29 Dylan Ebner wrote Do the Arista switches support netflow? From a management perspective netflow can be vital. This is something we have been unhappy with on our 3560 and 3750 cisco's. They don't

Re: IPv6 enabled carriers?

2010-03-11 Thread Christopher Morrow
On Thu, Mar 11, 2010 at 12:54 PM, TJ trej...@gmail.com wrote: On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield rek...@semihuman.comwrote: To pile on in the spirit of if people don't complain, nothing will change - is VZB still insisting on filtering /32 at their peers? While ARIN is

Re: Re: IPv6 enabled carriers?

2010-03-11 Thread cb . list6
On Mar 11, 2010 2:05pm, Christopher Morrow morrowc.li...@gmail.com wrote: On Thu, Mar 11, 2010 at 12:54 PM, TJ trej...@gmail.com wrote: On Thu, Mar 11, 2010 at 12:01 PM, Chris Woodfield rek...@semihuman.comwrote: To pile on in the spirit of if people don't complain, nothing will

Re: 10GBase-t switch

2010-03-11 Thread Kevin Oberman
Date: Thu, 11 Mar 2010 12:51:00 -0800 From: Dave Temkin dav...@gmail.com Kevin Oberman wrote: Date: Thu, 11 Mar 2010 12:26:16 +0900 From: Randy Bush ra...@psg.com arista 7120t-4s... hot box. but you are giving away the secret sauce! Hot box for the

Re: Need advise for a linux firewall

2010-03-11 Thread Will Clayton
Microtik makes a pretty robust Linux based firewall appliance-on-a-usb-stick. It does a lot out of the box like BGP, VPN, MPLS,QoS and all kinds of other crazy things you wouldn't expect to fit on one gig of flash. It takes my HP about 10 seconds to load a full table. My vote is for PFSense

RE: 10GBase-t switch

2010-03-11 Thread Michael Balasko
+1 for the Arista boxes. We are a pure Cisco shop and looked at them to start replacing some gear where it made sense. We didn't buy them because they didn't do Rapid-PVST+ at the time. Yeah I know that's a Cisco-centric thing, but they were tentative on implementing it but the timeline just

RE: IPv6 enabled carriers?

2010-03-11 Thread TJ
Hmm, apologies - I was not explicit in calling out VZW; meant to, my bad and thanks for pointing it out! Posting from phone, while distracted . less than ideal. /TJ From: TJ [mailto:trej...@gmail.com] Sent: Thursday, March 11, 2010 17:52 To: Christopher Morrow Subject: Re: IPv6

Re: Need advise for a linux firewall

2010-03-11 Thread Bryan Irvine
On Thu, Mar 11, 2010 at 11:26 AM, Abdul Nazeer voipu...@optonline.net wrote: On 03/11/2010 11:22 AM, gordon b slater wrote: On Thu, 2010-03-11 at 11:00 -0500, Abdul Nazeer wrote: iptables, but if anyone has any other suggestion, I'd love to hear it. PFsense, (being freeBSD-based, comes  

Re: Need advise for a linux firewall

2010-03-11 Thread Daniel Staal
--As of March 11, 2010 4:22:38 PM +, gordon b slater is alleged to have said: One caveat for the current PFsense: traffic shaping in 1.2.3 release is somewhat borked (1.2.2 works much better) and it doesn't work with more than 2 interfaces, so 1 wan - 1 lan is OK. --As for the rest, it

Re: IP4 Space

2010-03-11 Thread Mark Andrews
In message 2d6a9f6f1003111016t16ddc73frc4a430e220891...@mail.gmail.com, Bill Bogstad writes: I fall into this category, but I'm trying to get better. This may be OT for this forum, but as someone whose network admin hat has mostly been at the LAN/MAN level, I'm less concerned about IPv6

RE: Need advise for a linux firewall

2010-03-11 Thread Mark Scholten
-Original Message- From: Daniel Staal [mailto:dst...@usa.net] Sent: Friday, March 12, 2010 1:37 AM To: nanog@nanog.org Subject: Re: Need advise for a linux firewall --As of March 11, 2010 4:22:38 PM +, gordon b slater is alleged to have said: One caveat for the current

Re: ethernet to serial converters with ACLs

2010-03-11 Thread Brandon Galbraith
How do these compare to the Avocent/Cyclades serial console products? SNMP seems poorly implemented in the Cyclades, and if folks have good things to say about using the OpenGear stuff, it's a direction I'd want to move in. Private replies preferred to keep s/n down. On Thu, Mar 11, 2010 at 12:10

Re: IPv6 enabled carriers?

2010-03-11 Thread Christopher Morrow
On Thu, Mar 11, 2010 at 7:25 PM, TJ trej...@gmail.com wrote: Hmm, apologies - I was not explicit in calling out VZW; meant to, my bad and thanks for pointing it out! yup, the core point I was trying to make was that LTE is really just a vzw network change, and has basically nothing to do with

Re: IPv6 enabled carriers?

2010-03-11 Thread Cameron Byrne
On Thu, Mar 11, 2010 at 6:40 PM, Christopher Morrow morrowc.li...@gmail.com wrote: On Thu, Mar 11, 2010 at 7:25 PM, TJ trej...@gmail.com wrote: Hmm, apologies - I was not explicit in calling out VZW; meant to, my bad and thanks for pointing it out! yup, the core point I was trying to make was

OT: Anyone seeing these sorts of probes? Port 46993 udp?

2010-03-11 Thread Joe
Not to distract from the IPV4/IPV6 thread, but just wondering if anyone has seen this beavior or perhaps can enlighten me to its orgin/virus/meaning? Internet Protocol, Src: 183.0.215.179 (183.0.215.179), Dst: 192.168.1.52 (192.168.1.52) User Datagram Protocol, Src Port: 64514 (64514), Dst Port:

Re: OT: Anyone seeing these sorts of probes? Port 46993 udp?

2010-03-11 Thread James Hess
Well, those UDP captures appear to be BitTorrent Peer-to-Peer file sharing traffic, or something disguised as such. Note the 64 31 3a 61 64 32 3a 69 64 32 30 3a and also the textual reference to info_hash On Fri, Mar 12, 2010 at 12:18 AM, Joe jbfixu...@gmail.com wrote: Not to distract from

YouTube AS36561 began announcing 1.0.0.0/8

2010-03-11 Thread Nathan
Hello, I'm hoping to alleviate the what's going on!? type messages here this time. :) Here's an except from the APNIC provided LOA I provided to a couple networks, to carry a new announcement... To whom it may concern, APNIC and YouTube are cooperating in a project to investigate the