Re: [Nanog-futures] Conference Network Experiment policy

2009-04-08 Thread Michael K. Smith
Hello:


On 4/7/09 6:47 PM, Joe Provo nanog-...@rsuc.gweep.net wrote:

 Heya,
 
 There have been periodic inquiries for network-based experiments
 on the NANOG conference network.  While there is a serious benefit
 to be gained by experimenters exposing their projects to the NANOG
 attendees, there is a need to balance that with meeting attendees
 having a functional network during the conference.
 
 We'd like to hear the community's opinion on this. The SC has
 drafted a Network Experiments policy based on prior experience
 and what we think our conference attendees need to have available
 while on-site.  Please see the attachment below and share your
 opinions and suggestions.
 
 Cheers!
 

I would prefer a segmented network that participants can choose to join as
part of the experiment and leave the business-use network in place.  A
different VLAN/SSID/Subnet would suffice.  Common infrastructure could still
be overloaded but I don't expect it would work to have completely separate
physical networks.

Regards,

Mike


___
Nanog-futures mailing list
Nanog-futures@nanog.org
http://mailman.nanog.org/mailman/listinfo/nanog-futures


Re: [Nanog-futures] MLC transparency issues

2009-04-08 Thread kris foster

On Apr 7, 2009, at 8:12 PM, Gadi Evron wrote:

 Is it possible to form a basic policy to preface thread moderation?
 Example would be:
 1. Email mailing list on the thread, asking for people to respond  
 only if there is an operational content they wish to share, or  
 refrain from doing so.

 2. Moderate thread (with a waiting period between step #1 and step  
 #2?) and email the list on the thread mentioning it was moderated.

 Then, if anyone has any issues with a specific case, they can  
 discuss it on nanog-futures.

Your example is similar to what the MLC has discussed internally. Once  
worked out we'll bounce it off nanog-futures.

Until there is a policy in place, we're open to hearing ideas on nanog- 
futures about moderation.

Kris
MLC Chair

___
Nanog-futures mailing list
Nanog-futures@nanog.org
http://mailman.nanog.org/mailman/listinfo/nanog-futures


Re: Verizon EVDO Issues

2009-04-08 Thread Alexander Harrowell
On Tuesday 07 April 2009 22:10:24 Charles Wyble wrote:
 Been troubleshooting a very strange problem for a couple of weeks now.

 I have a few hundred systems deployed throughout the United States
 utilizing EVDO connectivity with Verizon as a carrier. They are stationary.

 Over the past few weeks clusters of them in SF and Lewisville TX and a
 few other areas have been failing intermittently. They are offline for
 several days, then online for a few days then go offline again. They are
 running Linux and PPPD.


Do they maintain a continuous data link in normal operation (like, say, 
connectivity for a LAN, or backhaul for a camera or some such), or do they 
request the data link when they need to send [whatever] (like a discrete SCADA 
system)? My (user only) experience is that cellular data service doesn't 
handle long sessions well. 



signature.asc
Description: This is a digitally signed message part.


Re: Verizon EVDO Issues

2009-04-08 Thread Nathan Ward

On 8/04/2009, at 10:27 PM, Alexander Harrowell wrote:
Do they maintain a continuous data link in normal operation (like,  
say,
connectivity for a LAN, or backhaul for a camera or some such), or  
do they
request the data link when they need to send [whatever] (like a  
discrete SCADA
system)? My (user only) experience is that cellular data service  
doesn't

handle long sessions well.



I've had great success with it. We have done live audio streaming over  
IP through a cellular service before. 64kbps ogg encoding.


About 7 or so hours in one session.

We used to do a cheap live broadcast from an outdoor event for a radio  
station.


--
Nathan Ward




Equinix contact

2009-04-08 Thread Fouant, Stefan
Any good clueful network Engineers from Equinix on-list?  If so, please
contact me off-line as I noticed some oddball network behavior at some
of your peering points.

Regards,

Stefan Fouant: NeuStar, Inc.
Principal Network Engineer 
46000 Center Oak Plaza Sterling, VA 20166
[ T ] +1 571 434 5656 [ M ] +1 202 210 2075
[ E ] stefan.fou...@neustar.biz [ W ] www.neustar.biz



Re: Equinix contact

2009-04-08 Thread Niels Bakker

* stefan.fou...@neustar.biz (Fouant, Stefan) [Wed 08 Apr 2009, 17:04 CEST]:
Any good clueful network Engineers from Equinix on-list?  If so, please 
contact me off-line as I noticed some oddball network behavior at some 
of your peering points.


You do realise that the people who run an Internet exchange only manage 
the Ethernet switch and have no influence on participants' routing, right?


If you're seeing odd things on your router directly connected to the IX 
switch you should have a better way of contacting your vendor than 
through the nanog mailing list.



-- Niels.



RE: Equinix contact

2009-04-08 Thread Fouant, Stefan
Niels - this was an issue with the internet exchange netblock being
leaked out to upstream providers and causing peering adjacencies to be
established through indirect paths.  It wasn't an issue with the router
and it wasn't an issue with a peer.

Thanks for your concern though... I think we got it handled now :)

Stefan Fouant: NeuStar, Inc.
Principal Network Engineer 
46000 Center Oak Plaza Sterling, VA 20166
[ T ] +1 571 434 5656 [ M ] +1 202 210 2075
[ E ] stefan.fou...@neustar.biz [ W ] www.neustar.biz

 -Original Message-
 From: Niels Bakker [mailto:niels=na...@bakker.net]
 Sent: Wednesday, April 08, 2009 12:17 PM
 To: nanog@nanog.org
 Subject: Re: Equinix contact
 
 * stefan.fou...@neustar.biz (Fouant, Stefan) [Wed 08 Apr 2009, 17:04
 CEST]:
 Any good clueful network Engineers from Equinix on-list?  If so,
 please
 contact me off-line as I noticed some oddball network behavior at
some
 of your peering points.
 
 You do realise that the people who run an Internet exchange only
manage
 the Ethernet switch and have no influence on participants' routing,
 right?
 
 If you're seeing odd things on your router directly connected to the
IX
 switch you should have a better way of contacting your vendor than
 through the nanog mailing list.
 
 
   -- Niels.




Cisco Audit Tool?

2009-04-08 Thread Pat Durkin
www.iquate.com http://www.iquate.com/   audit large network
infrastructure; Cisco plus others; very flexible as you can drive your
own queries across thousands of devices;  


Any views expressed in this message are the sender's own, and do not represent 
the views of iQuate except where the sender specifically states them to be the 
views of iQuate. This e-mail should only be read by those persons to whom it is 
addressed. Accordingly, we disclaim all responsibility and accept no liability 
(including in negligence) for the consequences of any person other than the 
intended recipients acting, or refraining from acting, on such information. If 
you have received this e-mail in error, please accept our apologies and we 
simply request that you delete this document. Any form of reproduction, 
dissemination, copying, disclosure, modification, distribution and/or 
publication of this e-mail is strictly prohibited
iQuate is a trading name for eManageIT Ltd.
Registered in Ireland - Number:   350019
Citywest National Digital Park, Dublin





L2 - L3 Etherchannel

2009-04-08 Thread Amolak
Hi All,

Is it possible to create L2 Etherchannel at one end and L3 etherchannel at
another end?

For Example:

SW-1


interface GigabitEthernet1/1
 channel-group 1 mode desirable
 channel-protocol pagp
!
interface GigabitEthernet1/2
 channel-group 1 mode desirable
 channel-protocol pagp
!
interface Port-channel 1
 no ip address
 switchport
 switchport access vlan 10
 switchport mode access
!
int vlan10
 ip address 1.1.1.1 255.255.255.252
!


SW-2


interface Port-channel 2
 ip address 1.1.1.2 255.255.255.252
!
interface GigabitEthernet1/1
 no ip address
 channel-group 2 mode desirable
 channel-protocol pagp
!
interface GigabitEthernet1/2
 no ip address
 channel-group 2 mode desirable
 channel-protocol pagp
!

I don't have a lab to test it, can somebody confirm if the connectivity will
work between these devices as per this setup.

Thanks,
Amolak


Re: Verizon EVDO Issues

2009-04-08 Thread Seth Mattinen
Alexander Harrowell wrote:
 On Tuesday 07 April 2009 22:10:24 Charles Wyble wrote:
 Been troubleshooting a very strange problem for a couple of weeks now.

 I have a few hundred systems deployed throughout the United States
 utilizing EVDO connectivity with Verizon as a carrier. They are stationary.

 Over the past few weeks clusters of them in SF and Lewisville TX and a
 few other areas have been failing intermittently. They are offline for
 several days, then online for a few days then go offline again. They are
 running Linux and PPPD.

 
 Do they maintain a continuous data link in normal operation (like, say, 
 connectivity for a LAN, or backhaul for a camera or some such), or do they 
 request the data link when they need to send [whatever] (like a discrete 
 SCADA 
 system)? My (user only) experience is that cellular data service doesn't 
 handle long sessions well. 
 

I have a few Sprint EVDO cards. They go into standby when nothing is
actively going on and fire up within seconds when there is something to
do. I regularly use everything from SSH to streaming video without any
issues. I only notice the delay with SSH when I don't type anything for
a few minutes and it has to come active again, but I can leave it idle
for hours and it never drops.

As far as the OP goes, let them replace the cards if they think that's
the problem. You and I may suspect something else is up, but if that's
on their checklist, it is what it is.

~Seth



Re: L2 - L3 Etherchannel

2009-04-08 Thread Arie Vayner
Yes.

On Wed, Apr 8, 2009 at 9:03 PM, Amolak amolak.si...@gmail.com wrote:

 Hi All,

 Is it possible to create L2 Etherchannel at one end and L3 etherchannel at
 another end?

 For Example:

 SW-1
 

 interface GigabitEthernet1/1
  channel-group 1 mode desirable
  channel-protocol pagp
 !
 interface GigabitEthernet1/2
  channel-group 1 mode desirable
  channel-protocol pagp
 !
 interface Port-channel 1
  no ip address
  switchport
  switchport access vlan 10
  switchport mode access
 !
 int vlan10
  ip address 1.1.1.1 255.255.255.252
 !
 

 SW-2
 

 interface Port-channel 2
  ip address 1.1.1.2 255.255.255.252
 !
 interface GigabitEthernet1/1
  no ip address
  channel-group 2 mode desirable
  channel-protocol pagp
 !
 interface GigabitEthernet1/2
  no ip address
  channel-group 2 mode desirable
  channel-protocol pagp
 !

 I don't have a lab to test it, can somebody confirm if the connectivity
 will
 work between these devices as per this setup.

 Thanks,
 Amolak



Re: Verizon EVDO Issues

2009-04-08 Thread Charles Wyble






Do they maintain a continuous data link in normal operation (like, say, 
connectivity for a LAN, or backhaul for a camera or some such), or do they 
request the data link when they need to send [whatever] (like a discrete SCADA 
system)? My (user only) experience is that cellular data service doesn't 
handle long sessions well. 




Continuous operation. They have been working fine for some time. We have 
about 20 locations that aren't working, and over 200 that are working 
just fine.




Re: Verizon EVDO Issues

2009-04-08 Thread Charles Wyble

Update...


First, thank you to all who replied off list. The general summary of the 
offlist replies, is that a PRL update may be needed. This of course 
doesn't appear doable via Linux, and our vendor (IRG) swore up and down 
this wouldn't be required.


We had the tech remove the USB dongle (model 720) from the system and 
place it in his laptop. Came up and worked fine once vzaccess twiddled 
whatever bits it needed to.






Charles Wyble wrote:

Been troubleshooting a very strange problem for a couple of weeks now.

I have a few hundred systems deployed throughout the United States 
utilizing EVDO connectivity with Verizon as a carrier. They are stationary.


Over the past few weeks clusters of them in SF and Lewisville TX and a 
few other areas have been failing intermittently. They are offline for 
several days, then online for a few days then go offline again. They are 
running Linux and PPPD.


Has anyone else seen anything like this? I realize that there are very 
few other organizations with a network footprint like ours (few hundred 
static EVDO cards). Other large users like FedEx and Amtrak aren't 
reporting any issues. Verizon wants to replace the cards, but that 
doesn't seem like a viable solution, as it's localized to a few areas 
and is intermittent.


Replies on or off list appreciated.






RE: SLA packet loss base

2009-04-08 Thread Holmes,David A
Take a look at the BRIX active measurement instrumentation product which is now 
owned by EXFO. Many carriers use the BRIX probes to produce empirical data 
representing SLA values such as jitter, packet loss and round trip times for 
their network links. BRIX also has other more sophisticated application tests 
(VoIP codecs, etc.) which can be run from their distributed probes to any 
network end-point.  

-Original Message-
From: 정치영 [mailto:lion...@samsung.com] 
Sent: Wednesday, April 08, 2009 5:14 PM
To: nanog@nanog.org
Subject: Fwd: SLA packet loss base

Some people replied me about my questions. thanks for reply.
However, what I want to know ultimately is something like technical proof or 
standard or experimentation information
they can logically support SLA values in provider's IP network.  
For example, regarding packet loss, I found information it is based on voip 
service tolerance (al least below 1% packet loss).
but some provider announce they can guarantee 0.3% packet loss.  Where does 
0.3% come from ?
Can anyone give me an answer about this question ?  In fact I am going to make 
some guideline of network quality of my network.

Best regards,
Chiyoung

--- Original Message ---
Sender : 정치영lion...@samsung.com  과장/인프라기술1팀/삼성네트웍스
Date   : 2009-04-08 13:05 (GMT+09:00)
Title  : SLA packet loss base

Hi all,

I wonder where we can find the base of packet loss rate of Global famous 
provider.
For example, the packet loss value of Sprint and NTT-Verio is same 0.3 % at 
their SLA.

Best regards
Chiyoung

=
 Chi-Young Joung
 SAMSUNG NETWORKS Inc.
 Email: lion...@samsung.com
 Tel +82 70 7015 0623, Mobile +82 17 520 9193
 Fax +82 70 7016 0031
=




Fwd: SLA packet loss base

2009-04-08 Thread 정치영
Some people replied me about my questions. thanks for reply.
However, what I want to know ultimately is something like technical proof or 
standard or experimentation information
they can logically support SLA values in provider's IP network.  
For example, regarding packet loss, I found information it is based on voip 
service tolerance (al least below 1% packet loss).
but some provider announce they can guarantee 0.3% packet loss.  Where does 
0.3% come from ?
Can anyone give me an answer about this question ?  In fact I am going to make 
some guideline of network quality of my network.

Best regards,
Chiyoung

--- Original Message ---
Sender : 정치영lion...@samsung.com  과장/인프라기술1팀/삼성네트웍스
Date   : 2009-04-08 13:05 (GMT+09:00)
Title  : SLA packet loss base

Hi all,

I wonder where we can find the base of packet loss rate of Global famous 
provider.
For example, the packet loss value of Sprint and NTT-Verio is same 0.3 % at 
their SLA.

Best regards
Chiyoung

=
 Chi-Young Joung
 SAMSUNG NETWORKS Inc.
 Email: lion...@samsung.com
 Tel +82 70 7015 0623, Mobile +82 17 520 9193
 Fax +82 70 7016 0031
=



options for full routing table in 1 year?

2009-04-08 Thread Jo Rhett
I was chatting with someone the other day and we were trying to build  
a complete list of all units which can handle full routing tables 1  
year from now, assuming current 4k/month growth (nevermind de- 
aggregation)


Juniper M/T-series units could handle 600k before, now 1mil with I- 
chip upgrade?

Juniper MX-series units are always 1mil

Cisco 6500/7600 with SUP720-3BXL handles 1mil routes

Force10 E300/600/1200 with dual-cam line cards handle 512k routes
Force10 E600/1200 with Exascale (quad-cam) line cards handle 1mil routes

Is there anything I'm forgetting here?

And if you already have one of these units, the upgrades are:

Juniper M-series units can replace the FPIC card to get new I-chip?
...if I understand it, no other cards need replaced

Cisco 6500/7600 you replace SUP32 or SUP720 with SUP720-3BXL
...if I understand it, no other cards need replaced?
	(note that this disagrees with my understanding of how their FIB/CEF  
works so I'm curious about this)


Force10 you replace every single line card, since the entire chassis  
is limited to the smallest CAM size available.


--
Jo Rhett
Net Consonance : consonant endings by net philanthropy, open source  
and other randomness







Re: options for full routing table in 1 year?

2009-04-08 Thread Tim Durack
 Cisco 6500/7600 you replace SUP32 or SUP720 with SUP720-3BXL
        ...if I understand it, no other cards need replaced?
        (note that this disagrees with my understanding of how their FIB/CEF
 works so I'm curious about this)

If you have linecard DFCs they would need to be XLs also.

Tim:



Re: options for full routing table in 1 year?

2009-04-08 Thread Jon Lewis

On Wed, 8 Apr 2009, Jo Rhett wrote:


Cisco 6500/7600 with SUP720-3BXL handles 1mil routes


Keep in mind, on that platform, IPv4 and IPv6 routes share (rob from each 
other) space.  1mil IPv4 routes assumes you're not doing IPv6 at all. 
More realistic is some kind of split.  i.e.


L3 Forwarding Resources
 FIB TCAM usage: TotalUsed   %Used
  72 bits (IPv4, MPLS, EoM) 622592  281799 45%
 144 bits (IP mcast, IPv6)  212992 263  1%

You can tune the split...but it requires a reboot.

--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_



Re: options for full routing table in 1 year?

2009-04-08 Thread Kevin Loch

Jo Rhett wrote:


Cisco 6500/7600 with SUP720-3BXL handles 1mil routes


Sounds great on paper but a sup720 can barely handle full tables today.
Depending on how many full tables you take and what else you are doing
with it, cpu resources are unreasonably tight. Having many vlans with
vrrp and snmp polling also adds significant cpu load.

Also, beware the memory consequences of 'maximum-paths' in bgp
context.  8 full tables from a transit provider with maximum-paths=8
will exceed available ram on a sup720. With 6 you will have ~128m free.
Fortunately this is not  a common configuration.

The rsp720 is substantially better at both of these issues.  However the
rsp720 is only supported in 76xx chassis (officially) so chassis
selection is important for future upgrades.

- Kevin