AS7381 clue listening?

2014-11-13 Thread Christopher J. Pilkington
We have the appropriate tickets and formalities in flight, but wondering if someone of clueful status from AS7381 is listening. We are seeing indications your interface to AS3356 in CHI may be reaching congestion. We are getting the we'll have an engineer call you back treatment most of the day.

Verizon (NY, LEC) issues around 1200 EDT?

2014-08-26 Thread Christopher J. Pilkington
We saw multiple service outages from Verizon local in NYC, specifically our offices served out of Broad Street (NYCMNYBS). Lost multiple OC as well as local voice PRI. I haven't dug exact times out of the logs yet, but was around noon EDT. Anyone else see similar or know what went on? -cjp

Re: Verizon (NY, LEC) issues around 1200 EDT?

2014-08-26 Thread Christopher J. Pilkington
Well, I need to wind my watch... we saw path AIS on our OCs out of that CO at 12:23:39 EDT. Cleared ten seconds later. Voice PRIs took a bit longer to recover. On Tue, Aug 26, 2014 at 12:46 PM, Christopher J. Pilkington c...@0x1.net wrote: We saw multiple service outages from Verizon local

Verizon NY (LEC) prior notification

2013-05-30 Thread Christopher J. Pilkington
Is anyone aware of a method to mark or flag certain services with Verizon NY (the LEC) as critical, such that changes aren't made to the services without prior notification? I know it's a lot to ask of Verizon. We experienced an outage on a number of PRI that were rehomed to another switch

Re: Multicast Ethernet frames not bridging between wired and wireless, Netgear CPE

2013-02-11 Thread Christopher J. Pilkington
On Feb 10, 2013 8:35 AM, Dan Luedtke m...@danrl.de wrote: Are you using the Netgear device for wireless, or is there a wireless adapter/card/whatever in your linux box? Netgear was the wireless/wired/ADSL from the provider. Workaround was to make that an ADSL-Ethernet bridge and run PPPoE on

Multicast Ethernet frames not bridging between wired and wireless, Netgear CPE

2013-02-09 Thread Christopher J. Pilkington
I've a Netgear 7550 B90 provided by Frontier. (Yes, it's my only choice other than VSAT. Rural US. Yes, I am already looking into getting my own CPE, but humor me.) Since Frontier doesn't support IPv6, I've linux box on the LAN building an AYIYA tunnel, and doing the usual router thing on the

Is Level(3) AS3356 absorbing GBLX AS3549

2013-01-24 Thread Christopher J. Pilkington
Overnight BGPmon reports that 3356 was adjacent to our AS, but it is not. Only plausible situation I can think of is Level(3) absorbing the 3549 GlobalCrossing AS. Is this going on? Or am I suffering from insufficient caffeination? -cjp

NOVEC contact?

2012-12-20 Thread Christopher J. Pilkington
Looking for a contact at NOVEC clueful about their DWDM infrastructure, specifically about delivering TDM circuits from another MPLS provider. Other providers' sales teams need not apply. -cjp

Simple/best tool to verify PMTUD?

2012-12-18 Thread Christopher J. Pilkington
I'm looking for a simple tool to verify PMTUD is usable along a particular path. Ideally this tool would be cross-platform, or run on Linux or Windows. I've done some testing of my own by hand, but hoping a tool would help the admin on the other side be able to test for themselves.

Re: H3C Technical List

2012-11-22 Thread Christopher J. Pilkington
Also would be interested, we've a few H3C routers. On Nov 22, 2012, at 0:09, Skeeve Stevens ske...@eintellego.net wrote: Hey all, Anyone know of a Mailing list like Cisco-NSP/Juniper-NSP for HP/H3C equipment? I have some questions regarding some H3C Switch spanning-tree behaviour, but I

Looking for a outside plant contact Zayo/AboveNet Manhattan

2012-11-08 Thread Christopher J. Pilkington
We're looking at some emergency office space in Manhattan and we identified an AboveNet/Zayo fiber panel in the space. Would like to see if someone could confirm if it is viable. Anyone from Abovenet lurking? Thanks, -cjp

Native IPv6 providers/datacenters list?

2012-10-09 Thread Christopher J. Pilkington
I want to make an informed response to a comment made by our CenturyLink rep regarding IPv6, in the context of SAVVIS not being able to provide IPv6 at their DC3 facility: There is only a handful of carriers that can provide that service today and CenturyLink (Legacy Qwest) happen to be one of

SAVVIS IPv6 Status

2012-09-11 Thread Christopher J. Pilkington
We're in SAVVIS DC3 and wondering what the status of IPv6 is there. We submitted a request for IPv6, and we were told SAVVIS does not assign address space. Later emails we were told they will route IPv6 however. I haven't yet contacted sales... I think we lost our rep in the CenturyLink merger.

Verizon 1xRTT/EVDO for OOB

2012-05-04 Thread Christopher J. Pilkington
Is anyone using Verizon 1xRTT/EVDO (3G) for OOB work? I'm trying to sort out how exactly to order a compatible service from them. Unfortunately I don't manage our Verizon Wireless relationship, so I need to be specific. Is there a service code or name they refer to this service as? Looking for

Vendor IPv6 RA Guard Support

2012-04-28 Thread Christopher J. Pilkington
Does there exist a multi-vendor list showing whether a particular switch hardware/software supports or does not support RA Guard? -cjp

Re: HP A6600 experiences

2012-02-24 Thread Christopher J. Pilkington
On Feb 24, 2012, at 17:43, Leigh Porter leigh.por...@ukbroadband.com wrote: I thought the A6604 was EOL? http://h17007.www1.hp.com/docs/products/eos/Select_HP_A6600_Routers_and_Modules_ES_Announcement.pdf Yes, and the recommended replacement is... the A6604. (Read whole EOL announcement.)

Re: Hi speed trading - hi speed monitoring

2012-02-16 Thread Christopher J. Pilkington
On Thu, Feb 16, 2012 at 03:03:55PM +0200, Hank Nussbacher wrote: Anyone who has managed a network knows that when you look at your MRTG/Cacti graphs at 5min, 10min ,15min intervals - all looks well. Start looking at 1sec intervals and you will see spikes that hit 100% of capacity - even on

Re: [c-nsp] ASR opinions..

2012-01-30 Thread Christopher J. Pilkington
On Fri, Sep 2, 2011 at 5:56 AM, Mark Tinka mti...@globaltransit.net wrote: Like the ASR1002-F, the ASR1001 is based on an ESP5 forwarding processor. That comes with 512,000 FIB entries maximum. As a side note, unlike the ASR1002-F, the ASR1001 can be upgraded (software license) form the

Re: Console Server Recommendation

2012-01-30 Thread Christopher J. Pilkington
On Jan 30, 2012, at 16:52, Robert Hajime Lanning lann...@lanning.cc wrote: Avocent Cyclades ACS uses Cat5 straight through cables to Cisco consoles. We have Cyclades ACS boxen also, but ours require rollover cables, not straight, when talking to a Cisco console. YMMV.

Non-vendor neutral hosting/colocation

2012-01-05 Thread Christopher J. Pilkington
We are experiencing an issue in NYCMNY where the hosting facility's owner, a large IXC and CLEC, is being less than cooperative in allowing the ILEC delivering a private circuit to the hosting facility. They will allow ILEC to deliver the circuit elsewhere in the building, but will not provide us

BGPmon regex

2011-12-21 Thread Christopher J. Pilkington
I'm trying to edit my prefixes' AS path regex in BGPmon, and when I add a '\s' in the Regular expression field, upon save, the '\' is stripped. Is this expected behavior? The workaround is to insert a '\\s' instead, but one needs to remember to do this on every edit, and I tend to forget which

Re: IP addresses are now assets

2011-12-02 Thread Christopher J. Pilkington
On Dec 1, 2011, at 23:04, Michael R. Wayne wa...@staff.msen.com wrote: After negotiating with multiple prospective buyers, Cerner Corp. agreed to buy the Internet addresses for $12 each. Other bids were as low as $1.50 each, according to a bankruptcy court filing. Clearly the addresses

Random five character string added to URLs?

2011-11-01 Thread Christopher J. Pilkington
This might be off-topic, my apologies if so. I seeing requests against a server with initial GET requests in the form: GET /[a-zA-Z]{5}/pagename.html pagename.html being optional. The 5 character string seems to be random. This GET always results in a 404, as our servers don't have these

Re: Colocation providers and ACL requests

2011-10-26 Thread Christopher J. Pilkington
On Tue, Oct 25, 2011 at 9:21 PM, Keegan Holley keegan.hol...@sungard.com wrote: I'm assuming colo means hosting, and the OP misspoke.  Most colo providers don't provide active network for colo (as in power and rack only) customers. Yes, hosting. I did indeed misspeak.

Re: Why are we still using the CA model? (Re: Microsoft deems all DigiNotar certificates untrustworthy, releases updates)

2011-09-12 Thread Christopher J. Pilkington
On Sep 11, 2011, at 11:06 PM, Hughes, Scott GRE-MG wrote: Companies that wrap their services with generic domain names (paymybills.com and the like) have no one to blame but themselves when they are targeted by scammers and phishing schemes. Even EV certificates don't help when consumers

Re: NANOG List Update - Moving Forward

2011-07-12 Thread Christopher J. Pilkington
On Tue, Jul 12, 2011 at 1:19 AM, Michael K. Smith - Adhost mksm...@adhost.com wrote: Thankfully, the current test has been a success.  We are going to stay in Hooray for testing in production. -cjp

Re: medicare.gov / cms.gov DNSSEC Validation Failures

2010-12-29 Thread Christopher J. Pilkington
On Tue, Dec 28, 2010 at 06:39:21PM -0600, Richard Laager wrote: I'm looking for a DNS contact for medicare.gov (and cms.gov). They are failing DNSSEC validation. Seeing it still broken, I contacted someone over at Lockheed who works over at CMS. They're escalating to the appropriate support

Cage nuts/rack hw near SAVVIS DC3 (Sterling VA)

2010-11-30 Thread Christopher J. Pilkington
Anyone know where I can buy cage nuts and rack screws locally near SAVVIS DC3 in Sterling, VA? They don't seem to have a local supply here, and somehow the racks we bought came with a 2:1 screw:nuts ratio. -cjp

Re: Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2

2010-11-19 Thread Christopher J. Pilkington
On Thu, Nov 18, 2010 at 03:18:04PM -0800, Sam Chesluk wrote: 2) While the IPSec portion is hardware accelerated, the GRE encapsulation is not, unless this is a Cat6500/CISCO7600 router, or 7200VXR with C7200-VSA card. Because of this, the GRE process itself will consume a fairly large amount

Re: Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2

2010-11-19 Thread Christopher J. Pilkington
On Thu, Nov 18, 2010 at 02:47:35PM -0800, Seth Mattinen wrote: The ISR series do have onboard hardware crypto, but I don't know offhand if it can handle a full DS3 worth. My first guess is fragment reassembly would probably kill it fast. We're not seeing fragmentation. The MTU of the

Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2

2010-11-18 Thread Christopher J. Pilkington
We're running GRE/IPSec transport over a point-to-point DS3. We're also doing some QoS. The traffic mix is voice; our average packet size can be as low as 250 bytes at times. We are seeing incredibly high CPU when the traffic levels approach 30Mb/s and around 11kpps in each direction, at times

Re: Outage between GBLX and HE?

2010-11-17 Thread Christopher J. Pilkington
On Wed, Nov 17, 2010 at 09:55:10AM +, Paul Kelly :: Blacknight wrote: I may have spoken too soon... issues are on going. We were seeing routing irregularities with GBLX as well. It seems they sending out our prefix to their peers, but blackholing the traffic coming back. We've shutdown our

Re: Rate Limiting on Cisco Router

2010-07-08 Thread Christopher J. Pilkington
On Thu, Jul 08, 2010 at 01:43:17PM -1000, Antonio Querubin wrote: Traffic-shaping 80Mb/s of traffic is probably not a good idea for your router cpu :) I concur, we shape a 100Mb/s ethernet down to 50Mb/s on a 3845, so that QoS is doable. The router gets brought to its knees around 40Mb/s.

Re: Router for Metro Ethernet

2010-04-12 Thread Christopher J. Pilkington
On Mon, Apr 12, 2010 at 05:55:29PM +, Dylan Ebner wrote: also terminiating. For our 100mb metro e connections we use 3845s. The 100 mb service terminates into NM-GEs, which have a FWIW, we made the mistake of going for 3825s on a 50Mb/s policed GigE. Running GRE/IPSec (AIM-VPN'd) and QoS,

BGP or MPLS issue ATT in New York?

2009-10-02 Thread Christopher J. Pilkington
Anyone notice anything bizarre with ATT in New York? We had our cage at 811 10th Avenue (advertised by AS7018) unreachable from several other providers for about 20 minutes, it just recently came back. At the same time, we lost MPLS service (not link, forwarding across the cloud) at another site