Re: Managing IOS Configuration Snippets

2014-02-27 Thread Andrew Latham
For a large install I set up a solution that might help. I utilized a Mediawiki install and its API to create, update and pull the configuration on many IOS devices. A wiki page for the host name was dynamically created and the configuration was placed there daily or hourly. This allowed support

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Harry Hoffman
Wow, this sounds fantastic! Have any code you can share? Cheers, Harry On Feb 27, 2014 6:52 AM, Andrew Latham lath...@gmail.com wrote: For a large install I set up a solution that might help. I utilized a Mediawiki install and its API to create, update and pull the configuration on many

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Paul S.
Rancid with the git plugin can be used to attain pretty much the exact same thing a lot more easily, if you're after an existing implementation of it. Cheers, Paul On 2/27/2014 午後 09:44, Harry Hoffman wrote: Wow, this sounds fantastic! Have any code you can share? Cheers, Harry On Feb 27,

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Saku Ytti
On (2014-02-26 17:37 -0500), Robert Drake wrote: Consider looking at Tail-F's NCS, which according to marketing presentations appears to do everything I want right now. I'd like to believe them but I don't have any money so I can't test it out. :) Tail-F is probably least bad option out

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Tim Durack
On Thu, Feb 27, 2014 at 8:58 AM, Saku Ytti s...@ytti.fi wrote: On (2014-02-26 17:37 -0500), Robert Drake wrote: Consider looking at Tail-F's NCS, which according to marketing presentations appears to do everything I want right now. I'd like to believe them but I don't have any money so I

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Tim Durack
On Thu, Feb 27, 2014 at 9:50 AM, Ryan Shea ryans...@google.com wrote: A couple more thoughts, regarding Network = DB I completely agree that trying to use the network config itself as the authority for what we intend to be on a device is not the right long-term approach. There is still a

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Saku Ytti
On (2014-02-27 09:50 -0500), Ryan Shea wrote: Regarding the MD5 approach, let's also think that configlets could have no commands in them. In the NTP example I had before, if we wanted to For DB = Template = Network it's to me very easy, but yes, each template you make must have anti-template

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Erik Muller
On 2/26/14, 16:22 , Ryan Shea wrote: Howdy network operator cognoscenti, I'd love to hear your creative and workable solutions for a way to track in-line the configuration revisions you have on your cisco-like devices. ... Assume that this version encoding perfectly captures what is on the

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Suresh Ramasubramanian
On Thu, Feb 27, 2014 at 10:34 PM, Erik Muller er...@buh.org wrote: At a previous job, our roll-your-own solution was a template based system(*) generating full configs; all the version history for template sections, per-router local tweaks, and generated results was kept in RCS, and the actual

RE: Managing IOS Configuration Snippets

2014-02-27 Thread Chuck Church
Along those same lines, we've been using alias exec for the same thing for a while: Alias exec NTP 6500_NTP_V1.0.1 Alias exec bgp 6500_peer_V2.0.0 Thanks, Chuck -Original Message- From: Tim Durack [mailto:tdur...@gmail.com] Sent: Thursday, February 27, 2014 11:50 AM To: Ryan Shea

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Erik Muller
On 2/27/14, 12:21 , Suresh Ramasubramanian wrote: This has been around for several years now - http://sourceforge.net/projects/cisco-conf-rep/ But that's just archiving, like rancid, right? Still doesn't have any correlation to the template-management side of things. While having the

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Simon Knight
A lot of template management discussion focusses on using the network configs as the canonical model of the network. Storing the network model in the DB (whatever form that takes) is much more sane. There is the brownfields issue of populating that database and then building device state from

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Simon Knight
On 27 February 2014 10:39, Ryan Shea ryans...@google.com wrote: Very cool, thanks Erik. I can think of many ways to encode version metadata. Probably best to be somewhere in between overly verbose (full version $Id / date / author for every config chunk) and being unreadable (base64 encoded

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Joe Abley
On 27 Feb 2014, at 12:46, Erik Muller er...@buh.org wrote: On 2/27/14, 12:21 , Suresh Ramasubramanian wrote: This has been around for several years now - http://sourceforge.net/projects/cisco-conf-rep/ But that's just archiving, like rancid, right? This is not any kind of sensible answer

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Erik Muller
On 2/27/14, 15:52 , Joe Abley wrote: This is not any kind of sensible answer to the original question, but the general approach “give ops people a shell on a box with a rancid repository, encourage them to write scripts that do stuff” has the potential to cause all kinds of good things to happen

Hat - bcp38.info - Storm Center Diary

2014-02-27 Thread Richard Porter
Hat, A reader suggested I reach out to you, he thought you might like a simple graphic I put together on the Storm Center Diary post. Talked about BCP38 today. Email me off list and I will send it. ~Richard signature.asc Description: Message signed with OpenPGP using GPGMail

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Simon Knight
Definitely. Depends what form the database takes - I don't think SQL is the right answer here. Sticking with flat files and perl scripts as much as possible is good guidance. I'm biased, but I'd go with Python: http://www.youtube.com/watch?v=EGK5jjyUBCQ --Simon On 27 February 2014 13:05, Erik

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Keegan Holley
Putting aside the fact that snippets aren’t a good way to conceptualize deployed router code, my gut still tells me to question the question here. The first is does this stuff change often enough to warrant a fancy versioning solution? I have yet to see NTP deployed in a different way than

Re: Filter NTP traffic by packet size?

2014-02-27 Thread Keegan Holley
On Feb 26, 2014, at 12:44 PM, Brandon Galbraith brandon.galbra...@gmail.com wrote: On Wed, Feb 26, 2014 at 6:56 AM, Keegan Holley no.s...@comcast.net wrote: More politely stated, it’s not the responsibility of the operator to decide what belongs on the network and what doesn’t. Users

Re: Managing ACL exceptions (was Re: Filter NTP traffic by packet size?)

2014-02-27 Thread Keegan Holley
It depends on how many customers you have and what sort of contract you have with them if any. A significant amount of attack traffic comes from residential networks where a “one-size-fits-all” policy is definitely best. On Feb 26, 2014, at 4:01 PM, Jay Ashworth j...@baylink.com wrote: -

Verizon FIOS IPv6?

2014-02-27 Thread Tristan Lear
My strategy, should I remember it tomorrow: We have a business-class FIOS connection where I work and a static IP as well. At least three people who work here have FIOS at home. I've read rumors about business class customers who really work their phone sex getting native ipv6, and I also

congestion between Cogent and CenturyLink

2014-02-27 Thread Aidan Scheller
Hello, We send periodic 10-15Mbps bursts of traffic to a business partner and it appears to transition from Cogent to Century Link in Atlanta. During the day performance is normal and latency appears acceptable on a trace route. 12 ms 13 ms 12 ms te0-6-1-7.rcr21.msp01.atlas.cogentco.com

RE: Verizon FIOS IPv6?

2014-02-27 Thread David Hubbard
Good luck. We've been bitching at our sales rep for years, as we've added circuits, and haven't gotten even empty promises; just the same endless Verizon BS about it's being tested in select markets although no one has ever been able to prove that to be the case. You definitely get static

Re: Verizon FIOS IPv6?

2014-02-27 Thread Stephen Frost
I echo the 'good luck' and ditto on the experience. There's a lot of people anxious to get IPv6 on FIOS, but there seems to be precious little movement over there. * David Hubbard (dhubb...@dino.hostasaurus.com) wrote: Good luck. We've been bitching at our sales rep for years, as we've added

Re: Verizon FIOS IPv6?

2014-02-27 Thread Bryan Seitz
On Thu, Feb 27, 2014 at 09:18:08PM -0500, Stephen Frost wrote: I echo the 'good luck' and ditto on the experience. There's a lot of people anxious to get IPv6 on FIOS, but there seems to be precious little movement over there. * David Hubbard (dhubb...@dino.hostasaurus.com) wrote: Good

Re: Verizon FIOS IPv6?

2014-02-27 Thread Christopher Morrow
On Thu, Feb 27, 2014 at 9:18 PM, Stephen Frost sfr...@snowman.net wrote: I echo the 'good luck' and ditto on the experience. There's a lot of people anxious to get IPv6 on FIOS, but there seems to be precious little movement over there. it really is just an embarrassment :( perhaps shame

Re: Verizon FIOS IPv6?

2014-02-27 Thread Stephen Frost
* Christopher Morrow (morrowc.li...@gmail.com) wrote: On Thu, Feb 27, 2014 at 9:18 PM, Stephen Frost sfr...@snowman.net wrote: There's a lot of people anxious to get IPv6 on FIOS, but there seems to be precious little movement over there. it really is just an embarrassment :( Oh, I agree,

Re: congestion between Cogent and CenturyLink

2014-02-27 Thread Suresh Ramasubramanian
With cogent? Now you will be asking us if the Pope is really Catholic :) On 28-Feb-2014 7:43 AM, Aidan Scheller ai...@aodhandigital.com wrote: Hello, We send periodic 10-15Mbps bursts of traffic to a business partner and it appears to transition from Cogent to Century Link in Atlanta.

Re: Verizon FIOS IPv6?

2014-02-27 Thread Christopher Morrow
On Thu, Feb 27, 2014 at 9:48 PM, Stephen Frost sfr...@snowman.net wrote: * Christopher Morrow (morrowc.li...@gmail.com) wrote: On Thu, Feb 27, 2014 at 9:18 PM, Stephen Frost sfr...@snowman.net wrote: There's a lot of people anxious to get IPv6 on FIOS, but there seems to be precious little

Re: Managing IOS Configuration Snippets

2014-02-27 Thread Christopher Morrow
On Thu, Feb 27, 2014 at 8:38 PM, Keegan Holley no.s...@comcast.net wrote: Putting aside the fact that snippets aren't a good way to conceptualize deployed router code, my gut still tells me to question the question here. The first is does this stuff change often enough to warrant a fancy

Re: congestion between Cogent and CenturyLink

2014-02-27 Thread Paul S.
+1, which semi-large eyeball does Cogent NOT have capacity problems to? On 2/28/2014 午前 11:55, Suresh Ramasubramanian wrote: With cogent? Now you will be asking us if the Pope is really Catholic :) On 28-Feb-2014 7:43 AM, Aidan Scheller ai...@aodhandigital.com wrote: Hello, We send

Re: congestion between Cogent and CenturyLink

2014-02-27 Thread Stephen Frost
* Paul S. (cont...@winterei.se) wrote: +1, which semi-large eyeball does Cogent NOT have capacity problems to? Soon, Comcast... Given what's going on w/ them and Netflix. Thanks, Stephen signature.asc Description: Digital signature

Re: congestion between Cogent and CenturyLink

2014-02-27 Thread Jason Canady
I'm already seeing a huge improvement to Comcast after Netflix moved a lot of traffic off of the ports. On Feb 27, 2014, at 22:21, Stephen Frost sfr...@snowman.net wrote: * Paul S. (cont...@winterei.se) wrote: +1, which semi-large eyeball does Cogent NOT have capacity problems to? Soon,

Re: congestion between Cogent and CenturyLink

2014-02-27 Thread Edward Roels
I saw the same effect after the Netflix peering started. http://imgur.com/a/aVFAS On Thu, Feb 27, 2014 at 10:22 PM, Jason Canady ja...@unlimitednet.uswrote: I'm already seeing a huge improvement to Comcast after Netflix moved a lot of traffic off of the ports. On Feb 27, 2014, at 22:21,

Re: Verizon FIOS IPv6?

2014-02-27 Thread Jay Ashworth
- Original Message - From: Christopher Morrow morrowc.li...@gmail.com On Thu, Feb 27, 2014 at 9:48 PM, Stephen Frost sfr...@snowman.net wrote: * Christopher Morrow (morrowc.li...@gmail.com) wrote: On Thu, Feb 27, 2014 at 9:18 PM, Stephen Frost sfr...@snowman.net wrote: There's

Re: Verizon FIOS IPv6?

2014-02-27 Thread Justin M. Streiner
On Thu, 27 Feb 2014, Bryan Seitz wrote: On Thu, Feb 27, 2014 at 09:18:08PM -0500, Stephen Frost wrote: I echo the 'good luck' and ditto on the experience. There's a lot of people anxious to get IPv6 on FIOS, but there seems to be precious little movement over there. I've been fighting this

Re: Verizon FIOS IPv6?

2014-02-27 Thread Justin M. Streiner
On Thu, 27 Feb 2014, Tristan Lear wrote: We have a business-class FIOS connection where I work and a static IP as well. At least three people who work here have FIOS at home. I've read rumors about business class customers who really work their phone sex getting native ipv6, and I also heard