September 2011 - NZNOG - lists.nznog.org

N5K, N3K vulnerability
by Alex White-Robinson 08 Sep '11

08 Sep '11

Hello all, If you are running N3K (all releases) or N5K 5.0(2) and 5.0(3) prior to 5.0(3)N2(1) you'll want to check this one out. Any remarks in your ACLs cause all traffic to bypass subsequent deny statements (including implicit deny statements). http://www.cisco.com/warp/public/707/cisco-sa-20110907-nexus.shtml Regards, Alex White-Robinson.

1 0

U
by Hone Doe 07 Sep '11

07 Sep '11

Gerard Linstrom Manager Industry Consultation Telecom Wholesale gerard.linstrom(a)telecom.co.nz Office: +64 4 382 5178 Mobile: +64 27 490 9515

1 0

Tomohiro Fujisaki elected to NRO NC
by Elly Tawhai 06 Sep '11

06 Sep '11

________________________________________________________________________ Tomohiro Fujisaki elected to NRO NC ________________________________________________________________________ Hi NZNOG Community, APNIC is pleased to announce that Tomohiro Fujisaki has been elected as a representative to the Number Resource Organization (NRO) Number Council (NC) for the APNIC region. He will sit on the NRO NC for a two-year term from 1 January 2012 to 31 December 2013. For more information on the NRO NC election, see: http://meetings.apnic.net/32/elections ________________________________________________________________________ APNIC Secretariat secretariat(a)apnic.net Asia Pacific Network Information Centre (APNIC) Tel: +61 7 3858 3100 PO Box 3646 South Brisbane, QLD 4101 Australia Fax: +61 7 3858 3199 6 Cordelia Street, South Brisbane, QLD http://www.apnic.net ________________________________________________________________________ * Sent by email to save paper. Print only if necessary.

1 0

News: Telstra Launches IPv6 for Business, Government and Wholesale
by Skeeve Stevens 06 Sep '11

06 Sep '11

http://www.zdnet.com.au/telstra-launches-ipv6-for-businesses-govt-339321752… Not sure if this includes Telstra Clear in NZ… but useful info for NZ ISPs working in Australia ...Skeeve -- Skeeve Stevens, CEO - eintellego Pty Ltd skeeve(a)eintellego.net<mailto:skeeve(a)eintellego.net> ; www.eintellego.net Phone: 1300 753 383 ; Fax: (+612) 8572 9954 Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellego twitter.com/networkceoau ; www.linkedin.com/in/skeeve PO Box 7726, Baulkham Hills, NSW 1755 Australia -- eintellego - The Experts Who The Experts Call Juniper - HP Networking - Cisco - Brocade

6 7

NZRR Route Registry Update
by NZRR Database Notifications 06 Sep '11

06 Sep '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS24388:RS-ROUTES:AS38477 descr: advertised to AS24388 by Unleash - AS38477 members: 116.90.128.0/20^20-29, 113.130.120.0/22^22-29, 114.23.96.0/22^22-29, 182.50.160.0/22^22-29, 131.203.134.0/23^23-29, 202.6.116.0/23^23-29, 202.37.124.0/23^23-29, 131.203.133.0/24^24-29, 192.138.251.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)unleash.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110607 source: NZRR REPLACED BY: route-set: AS24388:RS-ROUTES:AS38477 descr: advertised to AS24388 by Unleash - AS38477 members: 116.90.128.0/20^20-29, 113.130.120.0/22^22-29, 114.23.96.0/22^22-29, 182.50.160.0/22^22-29, 202.44.60.0/22^22-29, 131.203.134.0/23^23-29, 202.6.116.0/23^23-29, 202.37.124.0/23^23-29, 131.203.133.0/24^24-29, 192.138.251.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)unleash.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110907 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 06 Sep '11

06 Sep '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9281:RS-ROUTES:AS38477 descr: advertised to AS9281 by Unleash - AS38477 members: 116.90.128.0/20^20-29, 113.130.120.0/22^22-29, 114.23.96.0/22^22-29, 182.50.160.0/22^22-29, 131.203.134.0/23^23-29, 202.6.116.0/23^23-29, 202.37.124.0/23^23-29, 131.203.133.0/24^24-29, 192.138.251.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)unleash.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110628 source: NZRR REPLACED BY: route-set: AS9281:RS-ROUTES:AS38477 descr: advertised to AS9281 by Unleash - AS38477 members: 116.90.128.0/20^20-29, 113.130.120.0/22^22-29, 114.23.96.0/22^22-29, 182.50.160.0/22^22-29, 202.44.60.0/22^22-29, 131.203.134.0/23^23-29, 202.6.116.0/23^23-29, 202.37.124.0/23^23-29, 131.203.133.0/24^24-29, 192.138.251.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)unleash.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110907 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 06 Sep '11

06 Sep '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES6:AS9503 descr: Route set advertised to AS9439 by FX Networks - AS9503 mp-members: 2001:4530:0:0:0:0:0:0/32^32-64, 2001:DCE:0:0:0:0:0:0/32^32-64, 2001:DD8:13:0:0:0:0:0/48^48-64, 2001:DF0:22D:0:0:0:0:0/48^48-64, 2001:DF0:4:0:0:0:0:0/48^48-64, 2001:DF0:4A:0:0:0:0:0/48^48-64, 2001:DF0:D1:0:0:0:0:0/48^48-64, 2001:DF0:DC:0:0:0:0:0/48^48-64, 2400:1200:0:0:0:0:0:0/32^32-64, 2400:6900:0:0:0:0:0:0/32^32-64, 2400:B400:0:0:0:0:0:0/32^32-64, 2400:BD00:0:0:0:0:0:0/32^32-64, 2400:C000:0:0:0:0:0:0/32^32-64, 2401:F000:0:0:0:0:0:0/32^32-64, 2402:6000:0:0:0:0:0:0/32^32-64, 2403:7000:0:0:0:0:0:0/32^32-64, 2403:C200:0:0:0:0:0:0/32^32-64, 2403:E00:0:0:0:0:0:0/32^32-64, 2404:130:0:0:0:0:0:0/32^32-64, 2404:138:0:0:0:0:0:0/31^31-64, 2404:1800:0:0:0:0:0:0/32^32-64, 2404:1E00:0:0:0:0:0:0/32^32-64, 2404:3800:0:0:0:0:0:0/32^32-64, 2404:6600:0:0:0:0:0:0/32^32-64, 2404:D000:0:0:0:0:0:0/32^32-64, 2405:2600:0:0:0:0:0:0/32^32-64, 2405:3A00:0:0:0:0:0:0/32^32-64, 2406:1E00:0:0:0:0:0:0/32^32-64, 2406:5A00:0:0:0:0:0:0/32^32-64, 2407:2400:0:0:0:0:0:0/32^32-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: ivan.walker(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110722 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES6:AS9503 descr: Route set advertised to AS9439 by FX Networks - AS9503 mp-members: 2402:6000:0:0:0:0:0:0/32^32-64, 2404:3800:0:0:0:0:0:0/32^32-64, 2001:DCE:0:0:0:0:0:0/32^32-64, 2001:DCE:E000:0:0:0:0:0/48^48-64, 2001:DF0:4A:0:0:0:0:0/48^48-64, 2404:1800:0:0:0:0:0:0/32^32-64, 2001:4530:0:0:0:0:0:0/32^32-64, 2400:B400:0:0:0:0:0:0/32^32-64, 2404:130:0:0:0:0:0:0/32^32-64, 2403:E00:0:0:0:0:0:0/32^32-64, 2400:1200:0:0:0:0:0:0/32^32-64, 2403:C200:0:0:0:0:0:0/32^32-64, 2404:1E00:0:0:0:0:0:0/32^32-64, 2401:F000:0:0:0:0:0:0/32^32-64, 2407:2400:0:0:0:0:0:0/32^32-64, 2403:7000:0:0:0:0:0:0/32^32-64, 2404:138:103:0:0:0:0:0/48^48-64, 2404:138:104:0:0:0:0:0/48^48-64, 2404:138:4000:0:0:0:0:0/48^48-64, 2404:D000:0:0:0:0:0:0/32^32-64, 2405:3A00:0:0:0:0:0:0/32^32-64, 2400:C000:0:0:0:0:0:0/32^32-64, 2001:DF0:D1:0:0:0:0:0/48^48-64, 2405:2600:0:0:0:0:0:0/32^32-64, 2001:DF0:DC:0:0:0:0:0/48^48-64, 2001:DD8:13:0:0:0:0:0/48^48-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2404:6600:0:0:0:0:0:0/32^32-64, 2406:5A00:0:0:0:0:0:0/32^32-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2400:6900:0:0:0:0:0:0/32^32-64, 2400:BD00:0:0:0:0:0:0/32^32-64, 2001:DF0:4:0:0:0:0:0/48^48-64, 2404:139:300:0:0:0:0:0/43^43-64, 2404:139:3FF:0:0:0:0:0/56^56-64, 2406:1A00:0:0:0:0:0:0/32^32-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc-minor(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110907 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 06 Sep '11

06 Sep '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9560:RS-ROUTES6:AS9503 descr: Route set advertised to AS9560 by FX Networks - AS9503 mp-members: 2001:4530:0:0:0:0:0:0/32^32-64, 2001:DCE:0:0:0:0:0:0/32^32-64, 2001:DD8:13:0:0:0:0:0/48^48-64, 2001:DF0:22D:0:0:0:0:0/48^48-64, 2001:DF0:4:0:0:0:0:0/48^48-64, 2001:DF0:4A:0:0:0:0:0/48^48-64, 2001:DF0:D1:0:0:0:0:0/48^48-64, 2001:DF0:DC:0:0:0:0:0/48^48-64, 2400:1200:0:0:0:0:0:0/32^32-64, 2400:6900:0:0:0:0:0:0/32^32-64, 2400:B400:0:0:0:0:0:0/32^32-64, 2400:BD00:0:0:0:0:0:0/32^32-64, 2400:C000:0:0:0:0:0:0/32^32-64, 2401:F000:0:0:0:0:0:0/32^32-64, 2402:6000:0:0:0:0:0:0/32^32-64, 2403:7000:0:0:0:0:0:0/32^32-64, 2403:C200:0:0:0:0:0:0/32^32-64, 2403:E00:0:0:0:0:0:0/32^32-64, 2404:130:0:0:0:0:0:0/32^32-64, 2404:138:0:0:0:0:0:0/31^31-64, 2404:1800:0:0:0:0:0:0/32^32-64, 2404:1E00:0:0:0:0:0:0/32^32-64, 2404:3800:0:0:0:0:0:0/32^32-64, 2404:6600:0:0:0:0:0:0/32^32-64, 2404:D000:0:0:0:0:0:0/32^32-64, 2405:2600:0:0:0:0:0:0/32^32-64, 2405:3A00:0:0:0:0:0:0/32^32-64, 2406:1E00:0:0:0:0:0:0/32^32-64, 2406:5A00:0:0:0:0:0:0/32^32-64, 2407:2400:0:0:0:0:0:0/32^32-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: ivan.walker(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110722 source: NZRR REPLACED BY: route-set: AS9560:RS-ROUTES6:AS9503 descr: Route set advertised to AS9560 by FX Networks - AS9503 mp-members: 2402:6000:0:0:0:0:0:0/32^32-64, 2404:3800:0:0:0:0:0:0/32^32-64, 2001:DCE:0:0:0:0:0:0/32^32-64, 2001:DCE:E000:0:0:0:0:0/48^48-64, 2001:DF0:4A:0:0:0:0:0/48^48-64, 2404:1800:0:0:0:0:0:0/32^32-64, 2001:4530:0:0:0:0:0:0/32^32-64, 2400:B400:0:0:0:0:0:0/32^32-64, 2404:130:0:0:0:0:0:0/32^32-64, 2403:E00:0:0:0:0:0:0/32^32-64, 2400:1200:0:0:0:0:0:0/32^32-64, 2403:C200:0:0:0:0:0:0/32^32-64, 2404:1E00:0:0:0:0:0:0/32^32-64, 2401:F000:0:0:0:0:0:0/32^32-64, 2407:2400:0:0:0:0:0:0/32^32-64, 2403:7000:0:0:0:0:0:0/32^32-64, 2404:138:103:0:0:0:0:0/48^48-64, 2404:138:104:0:0:0:0:0/48^48-64, 2404:138:4000:0:0:0:0:0/48^48-64, 2404:D000:0:0:0:0:0:0/32^32-64, 2405:3A00:0:0:0:0:0:0/32^32-64, 2400:C000:0:0:0:0:0:0/32^32-64, 2001:DF0:D1:0:0:0:0:0/48^48-64, 2405:2600:0:0:0:0:0:0/32^32-64, 2001:DF0:DC:0:0:0:0:0/48^48-64, 2001:DD8:13:0:0:0:0:0/48^48-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2404:6600:0:0:0:0:0:0/32^32-64, 2406:5A00:0:0:0:0:0:0/32^32-64, 2406:1E00:6000:0:0:0:0:0/35^35-64, 2400:6900:0:0:0:0:0:0/32^32-64, 2400:BD00:0:0:0:0:0:0/32^32-64, 2001:DF0:4:0:0:0:0:0/48^48-64, 2404:139:300:0:0:0:0:0/43^43-64, 2404:139:3FF:0:0:0:0:0/56^56-64, 2406:1A00:0:0:0:0:0:0/32^32-64 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc-minor(a)fx.net.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110907 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 06 Sep '11

06 Sep '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS23905 descr: advertised to AS9439 by Victoria University of Wellington - AS23905 members: 130.195.0.0/16^16-29, 202.36.141.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: simon.warren(a)vuw.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20101018 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS23905 descr: advertised to AS9439 by VUW - AS23905 members: 130.195.0.0/16^16-29, 103.10.233.0/24^24-29, 202.36.141.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: simon.warren(a)vuw.ac.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110907 source: NZRR ------------------------------------------------------------

1 0

NZRR Route Registry Update
by NZRR Database Notifications 06 Sep '11

06 Sep '11

Dear Colleague, This is to notify you that one or more objects in which you are designated for notification have been modified in the NZRR routing registry database. These objects are used to configure the various NZIX route servers (http://nzix.net/) so you can expect the relevant servers to be reloaded in the near future. The reloading of the servers is staggered over a period of time so that if you are peering with both servers at an exchange, you can maintain at least one BGP session at all times and consequently a full set of routes. Diagnostic output: ------------------------------------------------------------ --- PREVIOUS OBJECT: route-set: AS9439:RS-ROUTES:AS38477 descr: advertised to AS9439 by Unleash - AS38477 members: 116.90.128.0/20^20-29, 113.130.120.0/22^22-29, 114.23.96.0/22^22-29, 182.50.160.0/22^22-29, 131.203.134.0/23^23-29, 202.6.116.0/23^23-29, 202.37.124.0/23^23-29, 131.203.133.0/24^24-29, 192.138.251.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)unleash.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110607 source: NZRR REPLACED BY: route-set: AS9439:RS-ROUTES:AS38477 descr: advertised to AS9439 by Unleash - AS38477 members: 116.90.128.0/20^20-29, 113.130.120.0/22^22-29, 114.23.96.0/22^22-29, 182.50.160.0/22^22-29, 202.44.60.0/22^22-29, 131.203.134.0/23^23-29, 202.6.116.0/23^23-29, 202.37.124.0/23^23-29, 131.203.133.0/24^24-29, 192.138.251.0/24^24-29 admin-c: RPA1-NZRR tech-c: RPA1-NZRR notify: rpsl-admin(a)nzix.net notify: nznog(a)list.waikato.ac.nz notify: noc(a)unleash.co.nz mnt-by: MAINT-NZRR-NZ changed: rpsl-admin(a)nzix.net 20110907 source: NZRR ------------------------------------------------------------

1 0