Re: Estonian IPv6 deployment report

2014-12-28 Thread Anders Löwinger
On 2014-12-27 17:27, Tarko Tikan wrote: Split-horizon (switchport protected in Cisco world). Customers can't send packets directly to each other, all communication has to go via BNG router. Obviously we protect L2 as well like limiting number of MACs per customers, make sure BNG MAC cannot be

Re: Estonian IPv6 deployment report

2014-12-28 Thread Anders Löwinger
On 2014-12-27 17:37, Enno Rey wrote: true, but some (most) of them only apply in networks where multicasting/ND is fully supported which is not necessarily the case in the above type of networks. Yes. I'm aware of the various types of solutions for security in IPv6 with shared VLANs. I was

Re: Estonian IPv6 deployment report

2014-12-28 Thread Tarko Tikan
hey, I assume you have a star-network below the BNG? Ie no rings or similar in the access network? Most of our network below BNG is MPLS, so no, it's not a star per say. But as PWs are point-to-point, you are technically correct. Below MPLS there is some ethernet too and this is all

Re: merry xmas

2014-12-28 Thread Matthew Petach
On Wed, Dec 24, 2014 at 6:22 PM, Sadiq Saif li...@sadiqs.com wrote: On 12/24/2014 20:52, Sadiq Saif wrote: Here is the IPv6 version: mtr xmas.asininetech.org Thanks to all the people who helped with the bit of python debugging. :) For those using traceroute6, try with the -I

Re: merry xmas

2014-12-28 Thread Sadiq Saif
On 12/28/2014 15:20, Matthew Petach wrote: What is this supposed -l flag? Linux traceroute6 doesn't seem to have a -l flag: It seems your version of traceroute6 is too old for the -I option. It is present in the version in Debian Wheezy. traceroute6 -V Modern traceroute for Linux,

Re: The state of TACACS+

2014-12-28 Thread Robert Drake
Picking back up where this left off last year, because I apparently only work on TACACS during the holidays :) On 12/30/2013 7:28 PM, Jimmy Hess wrote: Even 5 seconds extra for each command may hinder operators, to the extent it would be intolerable; shell commands should run almost

Re: The state of TACACS+

2014-12-28 Thread Christopher Morrow
On Sun, Dec 28, 2014 at 6:02 PM, Robert Drake rdr...@direcpath.com wrote: Picking back up where this left off last year, because I apparently only work on TACACS during the holidays :) avoiding relatives? :) On 12/30/2013 7:28 PM, Jimmy Hess wrote: Even 5 seconds extra for each command