Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Tony Varriale
On 12/31/2014 6:08 AM, Marcin Kurek wrote: Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a high-end processor with maximum memory

Re: The state of TACACS+

2015-01-01 Thread Tony Varriale
On 12/28/2014 5:02 PM, Robert Drake wrote: 3. authentication and authorization caching and/or something else Is this related to the TACACS server being down and the long time out to hit local authen/author? Sorry, a little late to this party :) tv

Re: What routers do folks use these days?

2013-11-29 Thread Tony Varriale
On 11/28/2013 11:37 PM, Jawaid Desktop wrote: We're a service provider, and we have a network full of Cat6509's. We are finding that we are outgrowing them from the standpoint of their ability to handle lots of large routing tables. Obviously their switching capability is still superb but one

Re: next-best-transport! down with ethernet!

2011-12-30 Thread Tony Varriale
On 12/29/2011 9:06 AM, Christopher Morrow wrote: (you forgot to change subj:) On Thu, Dec 29, 2011 at 7:59 AM, Cameron Byrnecb.li...@gmail.com wrote: Next topic, ethernet is too chaotic and inefficient to deploy and support mission critical applications in LAN or WAN or data center. yes,

Re: vyatta for bgp

2011-09-12 Thread Tony Varriale
On 9/12/2011 3:12 PM, Dobbins, Roland wrote: On Sep 13, 2011, at 2:45 AM, Owen DeLong wrote: In your typical enterprise environment, a 1G DoS will zorch the link long before it zorches the router at the enterprise side. This contradicts my experience - I've repeatedly witnessed only a few

Re: Microsoft's participation in World IPv6 day

2011-06-03 Thread Tony Varriale
On 6/2/2011 7:08 PM, andrew.wallace wrote: Worldanything day is a sure-shot bet win at an anti-climax, and an industry failure and waste of investment and publicity campaign. Andrew I've had more customers ask and now willing to participate than ever before. Any better suggestions? Or,

Re: Is Cisco equpiment de facto for you?

2011-01-13 Thread Tony Varriale
- Original Message - From: Chuck Anderson c...@wpi.edu To: nanog@nanog.org Sent: Thursday, January 13, 2011 7:18 AM Subject: Re: Is Cisco equpiment de facto for you? On Wed, Jan 12, 2011 at 11:10:16PM -0800, Scott Weeks wrote: To be fair to Cisco and maybe I'm way off here. But it

Re: Is Cisco equpiment de facto for you?

2011-01-13 Thread Tony Varriale
- Original Message - From: Brandon Kim brandon@brandontek.com To: c...@wpi.edu; nanog group nanog@nanog.org Sent: Thursday, January 13, 2011 8:46 AM Subject: RE: Is Cisco equpiment de facto for you? For ISL, I know they are trying to phase that out. For the exams, they are

Re: BGP support on ASA5585-X

2010-11-06 Thread Tony Varriale
- Original Message - From: gordon b slater gordsla...@ieee.org To: Tony Varriale tvarri...@comcast.net Cc: nanog@nanog.org Sent: Saturday, November 06, 2010 4:38 AM Subject: Re: BGP support on ASA5585-X On Fri, 2010-11-05 at 21:50 -0500, Tony Varriale wrote: somebody said

Re: BGP support on ASA5585-X

2010-11-05 Thread Tony Varriale
- Original Message - From: Dylan Ebner dylan.eb...@crlmed.com To: srg srgqwe...@gmail.com; nanog@nanog.org Sent: Tuesday, November 02, 2010 12:42 PM Subject: RE: BGP support on ASA5585-X IMHO, I don't think this is a marketing issue for cisco. It's a design issue. PIX/ASA is good at

Re: BGP support on ASA5585-X

2010-11-05 Thread Tony Varriale
- Original Message - From: khatfi...@socllc.net To: Greg Whynott greg.whyn...@oicr.on.ca Cc: nanog@nanog.org Sent: Friday, November 05, 2010 6:47 PM Subject: Re: BGP support on ASA5585-X They could make it out of the box but this is why Dylan made his statement. His statement is far

Re: Did Internet Founders Actually Anticipate Paid,

2010-09-18 Thread Tony Varriale
- Original Message - From: Joe Greco jgr...@ns.sol.net To: Chris Boyd cb...@gizmopartners.com Cc: NANOG nanog@nanog.org Sent: Thursday, September 16, 2010 8:59 AM Subject: Re: Did Internet Founders Actually Anticipate Paid, On one hand, we all recognize oversubscription as an issue.

Re: Did Internet Founders Actually Anticipate Paid,

2010-09-18 Thread Tony Varriale
Of course the high level of oversub is an issue We'll disagree then. Oversub makes access affordable. ..with the scary boogeyman of evil illegal P2P filesharing That just tips the money in the wrong direction. And it's a real threat (amongst others)...not just that deadly clown

Re: Vyatta as a BRAS

2010-07-14 Thread Tony Varriale
- Original Message - From: Joe Greco jgr...@ns.sol.net To: Dobbins, Roland rdobb...@arbor.net Cc: NANOG list nanog@nanog.org Sent: Wednesday, July 14, 2010 7:03 PM Subject: Re: Vyatta as a BRAS On Jul 14, 2010, at 10:17 PM, Joe Greco wrote: The truth is that you can keep throwing

Re: Router for Metro Ethernet

2010-04-16 Thread Tony Varriale
Original Message - From: Bill Stewart nonobvi...@gmail.com To: Tony Varriale tvarri...@comcast.net Cc: nanog@nanog.org Sent: Wednesday, April 14, 2010 10:22 AM Subject: Re: Router for Metro Ethernet That's the spec sheet, and that's for straight forwarding. If you want to do much

Re: Router for Metro Ethernet

2010-04-13 Thread Tony Varriale
Cisco rates it at 256mbps which places it above a NPE-400. The 3825 says 179mbps on their spec sheet. Not sure where you are getting your numbers but they are way off. All of those numbers are straight forwarding with nothing turned on and 64 byte packets. That way you get a nice idea of

Re: Best VPN Appliance

2010-03-08 Thread Tony Varriale
Why would you migrate them away instead of buying a $150/$250 one-time license? tv - Original Message - From: Blomberg, Orin P (DOH) orin.blomb...@doh.wa.gov To: nanog@nanog.org Sent: Monday, March 08, 2010 1:50 PM Subject: RE: Best VPN Appliance Thanks for the information. I am

Re: Comcast IPv6 Trials Update

2010-03-01 Thread Tony Varriale
- Original Message - From: Curtis Maurand cmaur...@xyonet.com To: nanog@nanog.org Sent: Monday, March 01, 2010 8:21 AM Subject: Re: Comcast IPv6 Trials Update Can anyone recommend a decent book on IPV6? Most of what I find on the net don't explain things very well. thanks, Curtis

Re: Google to offer fiber to end users

2010-02-10 Thread Tony Varriale
Residential computers with enough bandwidth to DoS hosting providers; that should be fun. Maybe it will encourage the incumbant ISP's to start offering users meaningful bgp communities since they won't be able to keep up with the abuse reports. David That's already here today. tv

Re: lawful intercept/IOS at BlackHat DC, bypassing and recommendations

2010-02-04 Thread Tony Varriale
Would you mind passing along a source/link on the 15kpps? I haven't seen that number yet. tv - Original Message - From: Christopher Morrow morrowc.li...@gmail.com To: Gadi Evron g...@linuxbox.org Cc: NANOG nanog@nanog.org Sent: Thursday, February 04, 2010 2:27 PM Subject: Re: lawful

Re: DDoS mitigation recommendations

2010-01-28 Thread Tony Varriale
- Original Message - From: Tom Sands tsa...@rackspace.com Cc: nanog@nanog.org Sent: Thursday, January 28, 2010 6:01 AM Subject: Re: DDoS mitigation recommendations -Original Message- From: David Freedman [mailto:david.freed...@uk.clara.net] Sent: Tuesday, January 26, 2010

Re: Comcast IPv6 Trials

2010-01-27 Thread Tony Varriale
- Original Message - From: John Jason Brzozowski john_brzozow...@cable.comcast.com To: Steven Bellovin s...@cs.columbia.edu Cc: nanog@nanog.org Sent: Wednesday, January 27, 2010 5:12 PM Subject: Re: Comcast IPv6 Trials Thanks. Initially it would be ideal (even preferred) to target

Re: Using /31 for router links

2010-01-23 Thread Tony Varriale
That's a vendor specific issue. Maybe you could take it up with them and ask what year they think this is? tv - Original Message - From: Florian Weimer f...@deneb.enyo.de To: Seth Mattinen se...@rollernet.us Cc: nanOG list nanog@nanog.org Sent: Saturday, January 23, 2010 4:06 AM

Re: Using /31 for router links

2010-01-22 Thread Tony Varriale
Shouldn't be any issues...it's 2010 :) And, your IP allocation utilization will love you. tv - Original Message - From: Seth Mattinen se...@rollernet.us To: nanOG list nanog@nanog.org Sent: Friday, January 22, 2010 6:08 PM Subject: Using /31 for router links In the past I've always

Re: just...wow.

2009-12-30 Thread Tony Varriale
Would it be possible to string along and coordinate with the appropriate law enforcement entity? tv - Original Message - From: Jerry Pasker i...@n-connect.net To: nanog@nanog.org Sent: Wednesday, December 30, 2009 12:04 PM Subject: just...wow. I got this email inquiring about data

Re: just...wow.

2009-12-30 Thread Tony Varriale
LOL! That was purty good and mostly true. Well, I was thinking from the standpoint of 1) They are going somewhere, maybe not you 2) breaking law(s) 3) someone has to intervene, eventually. You could apply the above to any crime really. And they essentially told you they are going to commit

Re: Juniper M120 Alternatives

2009-11-18 Thread Tony Varriale
As a side note that many may be aware of, there are other Cisco products/code bases that have these nice features. tv - Original Message - From: Paul Cosgrove paul.cosgrove.na...@gmail.com To: Richard A Steenbergen r...@e-gerbil.net Cc: nanog@nanog.org Sent: Wednesday, November 18,

Re: Upstream BGP community support

2009-10-31 Thread Tony Varriale
The answer is fairly simple. Does your business benefit by having the ability to modify routing strategy as you see fit? Yes or no? IMO, the answer is yes. If your business partners aren't on the same page or align correctly with your requirements, seek new ones. tv - Original Message

Re: Cisco 7600 (7609) as a core BGP router.

2009-07-20 Thread Tony Varriale
Core typically references functionality, not the number of network devices at that layer. tv - Original Message - From: Richard A Steenbergen r...@e-gerbil.net To: Bailey Stephen stephen.bai...@uk.fujitsu.com Cc: nanog@nanog.org Sent: Monday, July 20, 2009 8:46 AM Subject: Re: Cisco

Re: switch speed question

2009-02-24 Thread Tony Varriale
That isn't always true. Some switches are already speced as full. It's best to read the product docs or speak with a rep to be sure. tv - Original Message - From: Eric Gearhart e...@nixwizard.net To: NANOG list nanog@nanog.org Sent: Tuesday, February 24, 2009 9:51 AM Subject: Re:

Re: Peering for beginners

2008-10-11 Thread Tony Varriale
E has a significant presence in Chicago so don't leave us out. :) tv - Original Message - From: Simon Lockhart [EMAIL PROTECTED] To: Konstantin Bezruchenko [EMAIL PROTECTED] Cc: North American Network Operators Group [EMAIL PROTECTED] Sent: Saturday, October 11, 2008 7:47 AM Subject:

Re: remembering Jon Postel: Looking Beyond the Decade

2008-10-02 Thread Tony Varriale
Any chance this will be captured (maybe professionally via HD:)? Unfortunately I cannot be there but would really appreciate being in the audience. tv - Original Message - From: Rodney Joffe [EMAIL PROTECTED] To: Scott Francis [EMAIL PROTECTED] Cc: NANOG list nanog@nanog.org Sent:

Re: [NANOG] Multihoming for small frys?

2008-05-21 Thread Tony Varriale
Yup. You can horde. You can easily justify a /23 these days and not be multihomed still get a /22. tv - Original Message - From: Pete Templin [EMAIL PROTECTED] To: Tony Varriale [EMAIL PROTECTED] Cc: nanog@nanog.org Sent: Wednesday, May 21, 2008 3:32 PM Subject: Re: [NANOG

Re: [NANOG] Multihoming for small frys?

2008-05-20 Thread Tony Varriale
AFAIK, ARIN doesn't give out /22s anymore. Last time I went to the well...it's was a /20 or better. tv - Original Message - From: Andy Dills [EMAIL PROTECTED] To: William Herrin [EMAIL PROTECTED] Cc: nanog@nanog.org Sent: Tuesday, May 20, 2008 11:05 PM Subject: Re: [NANOG] Multihoming