ISC DHCPD

2010-07-16 Thread Butch Evans
I have a cisco cmts that forwards dhcp requests to an ISC dhcp server. I have a working configuration for this. I am trying to set up ISC DHCPD so that it can handle multiple shared-networks. I cannot seem to get this working correctly. If there is an expert in the house who can offer me a few

Re: [c-nsp] L2VPN with IP address

2010-07-16 Thread Engine Networks | Luca Simonetti
Just pay attention to MTU with GRE tunnel and packet fragmentation. -- Luca Simonetti Engine Networks http://www.enginenetworks.net Datacenter GENEVA 1: Rue de la Confédération, 6 1204 Geneve - CH Datacenter ZURICH 1: Josefstrasse, 225 - 8005 Zürich - CH Datacenter MILAN 1: Caldera,

Re: On another security note... (of sorts)

2010-07-16 Thread Sean Donelan
On Thu, 15 Jul 2010, valdis.kletni...@vt.edu wrote: On Thu, 15 Jul 2010 13:46:24 EDT, J. Oquendo said: RFP anyone.. Botnet Mitigation for Networks surely collectively it would and CAN work. A nice idea, but consider if a more automated tool/system was created to behead a botnet (50,000 null0

Re: Vyatta as a BRAS

2010-07-16 Thread Valdis . Kletnieks
On Thu, 15 Jul 2010 20:57:15 PDT, Henry Linneweh said: Your definitions seem to be rather ATM-specific, which may be a bit of a problem in a world dominated by Ethernet... Can we get a consensus definition on these definition's and what hardware vender's make edge routers and what hardware

Re: On another security note... (of sorts)

2010-07-16 Thread J. Oquendo
Sean Donelan wrote: Damned if they do, Damned if they don't. It seems like every 4-6 weeks people alternate between ISPs are bad because they don't try to prevent X, Y or Z; and then 4-6 weeks later ISPs are bad because they tried to prevent A, B or C. It doesn't matter what A, B, C or X,

Re: Vyatta as a BRAS

2010-07-16 Thread Joe Greco
I got a router, it's got 5-6 10GE interfaces talking to other routers on my network backbone, and a bunch of 10GE links to end-user-facing aggregation switches. Since it's only forwarding inside my network, it's a core router by your definition. I now turn up an identical hardware 10GE link

Re: Vyatta as a BRAS

2010-07-16 Thread Lamar Owen
On Thursday, July 15, 2010 02:24:06 pm Łukasz Bromirski wrote: (and I'm all for FreeBSD boxes, don't get me wrong, the whole point of this discussion is that either you're doing hardware forwarding and you're pretty safe [unfortunately often with a lot of caveats, but still], or you're

Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Joe Abley
Root Zone DNSSEC Deployment Technical Status Update 2010-07-16 This is the twelfth of a series of technical status updates intended to inform a technical audience on progress in signing the root zone of the DNS. RESOURCES Details of the project, including documentation published to date, can

Re: On another security note... (of sorts)

2010-07-16 Thread Lamar Owen
On Thursday, July 15, 2010 02:40:50 pm Michael Holstein wrote: Why is it that network operators can't work together on instances like this and have a botnet killswitch Trust (or lack thereof). That's certainly one of the biggest non-technical reasons. Others go by the acronyms NIH and

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Leo Bicknell
In a message written on Fri, Jul 16, 2010 at 02:35:39PM +, Joe Abley wrote: The transition from Deliberately-Unvalidatable Root Zone (DURZ) to production signed root zone took place on 2010-07-15 at 2050 UTC. The first full production signed root zone had SOA serial 2010071501. There have

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Steven Bellovin
Wonderful news!

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Mike
Leo Bicknell wrote: Perhaps you could explain why the keys are being made available in formats that, as far as I can tell, no nameserver software on the planet uses? Pretty much 100% of the users will need a conversion from one of the 6 formats you provided, when you could have provided 6

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Chris Adams
Once upon a time, Leo Bicknell bickn...@ufp.org said: Perhaps you could explain why the keys are being made available in formats that, as far as I can tell, no nameserver software on the planet uses? Pretty much 100% of the users will need a conversion from one of the 6 formats you provided,

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Edward Lewis
At 7:53 -0700 7/16/10, Leo Bicknell wrote: Perhaps you could explain why the keys are being made available in formats that, as far as I can tell, no nameserver software on the planet uses? (My guess:) There's no standard input format for name servers, especially regarding configuration

Re: Vyatta as a BRAS

2010-07-16 Thread Tony Li
On Jul 16, 2010, at 6:02 AM, valdis.kletni...@vt.edu wrote: 1/4 plastic tubing - http://www.waterfiltermart.com/images/products/preview/plastic_tubing_and_nut.jpg garden hose - http://upload.wikimedia.org/wikipedia/commons/thumb/c/cd/Garden_hose.jpg/800px-Garden_hose.jpg fire hose -

Re: Vyatta as a BRAS

2010-07-16 Thread Joel Jaeggli
On 7/16/10 6:02 AM, valdis.kletni...@vt.edu wrote: On Thu, 15 Jul 2010 20:57:15 PDT, Henry Linneweh said: Can we get a consensus definition on these definition's and what hardware vender's make edge routers and what hardware vender's make core routers. I got a router, it's got 5-6 10GE

virtual switches

2010-07-16 Thread Greg Whynott
Cisco has VSS (on 6500 class) and H3C has IRF; allowing you to virtualize 2 or more physical switches/routers in an active/active configuration where you can use all links and terminate LACP aggregates between the two devices. Is anyone using this or similar technology from another vendor?

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Tony Finch
On Fri, 16 Jul 2010, Chris Adams wrote: A simple XSLT will transform it into any needed format. XSLT can't turn root-anchors.xml into the DNSKEY RR that BIND requires. Tony. -- f.anthony.n.finch d...@dotat.at http://dotat.at/ TYNE DOGGER FISHER: SOUTHERLY VEERING WESTERLY 5 TO 7, DECREASING

Weekly Routing Table Report

2010-07-16 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-st...@lists.apnic.net For historical

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Joel Jaeggli
On 7/16/10 11:07 AM, Tony Finch wrote: On Fri, 16 Jul 2010, Chris Adams wrote: A simple XSLT will transform it into any needed format. XSLT can't turn root-anchors.xml into the DNSKEY RR that BIND requires. Tony. anchors2keys will.

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Chris Adams
Once upon a time, Tony Finch d...@dotat.at said: On Fri, 16 Jul 2010, Chris Adams wrote: A simple XSLT will transform it into any needed format. XSLT can't turn root-anchors.xml into the DNSKEY RR that BIND requires. That sounds like a problem with BIND then. :-) -- Chris Adams

Re: NOC Best Practices

2010-07-16 Thread Kasper Adel
Thanks for all the people that replied off list, asking me to send them responses i will get. I got nothing other than : http://www.nanog.org/meetings/nanog24/abstracts.php?pt=OTM1Jm5hbm9nMjQ=nm=nanog24 and Network Management- Accounting and Performance Strategies - Just the first three

Re: ISC DHCPD

2010-07-16 Thread Butch Evans
On Fri, 2010-07-16 at 02:10 -0500, Butch Evans wrote: I have a cisco cmts that forwards dhcp requests to an ISC dhcp server. I have a working configuration for this. I am trying to set up ISC DHCPD so that it can handle multiple shared-networks. I cannot seem to get this working correctly.

Re: NOC Best Practices

2010-07-16 Thread JoeSox
I believe, myself included, are hesitant to answer because it really depends upon a lot of variables. Type of business your NOC is running, the operating budget, number of racks, etc. The details matter when narrowing things down. But yes, I have seen this ITIL http://www.frontrange.com/ click

BGP Update Report

2010-07-16 Thread cidr-report
BGP Update Report Interval: 08-Jul-10 -to- 15-Jul-10 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS30890 249855 14.3% 577.0 -- EVOLVA Evolva Telecom s.r.l. 2 - AS24400 45751

The Cidr Report

2010-07-16 Thread cidr-report
This report has been generated at Fri Jul 16 21:11:34 2010 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Jeffrey Ollie
On Fri, Jul 16, 2010 at 1:12 PM, Joel Jaeggli joe...@bogus.com wrote: On 7/16/10 11:07 AM, Tony Finch wrote: On Fri, 16 Jul 2010, Chris Adams wrote: A simple XSLT will transform it into any needed format. XSLT can't turn root-anchors.xml into the DNSKEY RR that BIND requires. anchors2keys

Re: Root Zone DNSSEC Deployment Technical Status Update

2010-07-16 Thread Joel Jaeggli
Yeah oops. Just noticed that Joel's iPad On Jul 16, 2010, at 5:34 PM, Jeffrey Ollie j...@ocjtech.us wrote: On Fri, Jul 16, 2010 at 1:12 PM, Joel Jaeggli joe...@bogus.com wrote: On 7/16/10 11:07 AM, Tony Finch wrote: On Fri, 16 Jul 2010, Chris Adams wrote: A simple XSLT will transform

Re: On another security note... (of sorts)

2010-07-16 Thread Dobbins, Roland
On Jul 16, 2010, at 9:42 PM, Lamar Owen wrote: I'm sure the collective wisdom here is capable of pulling the task off at least in theory; The thorniest issues aren't technology-related, per se; they're legal exposure (both real and imagined), regulatory concerns (both real and imagined),