- NZNOG - lists.nznog.org

NZNOG Power Leads and Multiboards
by Mark Foster 28 Oct '14

28 Oct '14

Hi Folks I'm trying to track down the NZNOG pool of power leads and multiboards; i'm hoping to borrow these if possible. Queries to the NZNOG conference team don't seem to be going anywhere and i'm not sure who the organisers for this year are, to ping them personally. Does anyone know the wherabouts of these? Offlist responses perhaps most appropriate. Thanks Mark.

1 1

openvz vm's
by Tony Wicks 24 Oct '14

24 Oct '14

I've noticed openvz VM's on several different international hosing providers have all dropped out at once (currently down), anyone else seeing this ? cheers

3 3

Vodafone VSI / Spark SecureME
by Tom Henderson 22 Oct '14

22 Oct '14

Hi All I'm interested in some feedback (off list) from anyone using either Vodafone VSI or Spark's SecureME offerings. We're currently looking into both of these for a group of hospitality outlets. Cheers Tom Henderson IT Manager | Pack & Company | 027 461 4403 | 09 929 2750 | tom(a)pack.co.nz -- ---------------------------------------------------------------------------If you are not the intended recipient of this email, you must not disclose, copy, or distribute any information contained in or attached to it, or take any action/inaction based on it. Please contact us immediately, and delete this email from your system. Any views or opinions presented in this email are solely those of the author and not of Pack & Company (NZ) Limited (the "Company"), however any intellectual property contained in or attached to this email is the property of the Company. Thank you.

1 0

Unwanted Traffic Removal Service (UTRS)
by Dean Pemberton 15 Oct '14

15 Oct '14

The latest useful community service from Team Cymru ---------- Forwarded message ---------- From: John Kristoff <jtk(a)cymru.com> [ Apologies if you have seen this elsewhere already - jtk ] Friends and colleagues, Last week I briefly discussed a new project we've recently launched and for which invited participation from the NANOG 62 attendees. This is a not so subtle wider request for consideration. UTRS is essentially a community RTBH that people have suggested to us would be a good service to provide, so we're giving it a go. The lightning talk page has the slide deck I presented: <https://www.nanog.org/meetings/abstract?id=2436> I've also put some additional technical detail here: <http://www.cymru.com/jtk/misc/utrs.html> There was a brief discussion, mostly criticism and that is fine, that took place on the NANOG list you may wish to review. If you have an assigned ASN and this sounds like something you or your network would like to take advantage of, drop me a line, I'd sure like to hear about it. If you think this is a terrible idea and want to express all that is wrong with it, tell me that too, I can take it. Even if you're unsure if you would ultimately deploy it in production, but are interested in testing it, do contact me. We won't expend energy on this project and will drop it if we there isn't sufficient interest from the community, but enough trial users would be encouraging. Kindly, John

1 0

Facebook NOC
by Stan Rivett 14 Oct '14

14 Oct '14

Hi guys Has anyone had any luck communicating with Facebook network operations in the past? They appear to be filtering our shiny new /22 and it is making clients somewhat grumpy. Cheers Stan Rivett ------------------ Netspeed Data Ltd PO Box 5691 Dunedin P: +64 3 481 7245 C: +64 21 323 841 ------------------

1 0

Is there anyone on the list using mikrotik hardware to receive UFB Handovers from Chorus?
by Alexander Neilson 10 Oct '14

10 Oct '14

Hey Everyone We have just stood up our first Chorus UFB Handovers in Auckland and Wellington and while the Mikrotik’s are showing the interfaces as running Chorus are telling me their end is “operationally down”. I have tried changing all the settings I have on my end and they are still reporting the same result. I have tried alternative optics, checked light levels with a meter, and even had a Chorus tech out to take a look. Chorus originally pointed to the SFP+ being the issue, now they are saying the config is wrong on my device and that they aren’t “seeing layer two”. I have asked them for any errors on the port or similar and they haven’t reported any to me. I am a little stumped here and would appreciate the advice of anyone doing either 1G or 10G HO Links for UFB with Chorus who could provide any input or any idea of issues they have seen with the configs that would help me diagnose this issue and resolve it. Thank you for your time. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

5 7

Re: [nznog] UFB Upload Issues
by Peter Ensor 09 Oct '14

09 Oct '14

The change in the CFI to DEI occurred between the 802.1q 2005 and the 2011 versions. In 802.1q 2005 section 9.6 Octet 1 bit 5 was defined for use as CFI (Canonical Format Indicator) whereas in the 2011 version of the standard (also shown in section 9.6), this bit has been redefined as the DEI (Discard Eligible Indicator) bit. The diagram is for a single .Q tag but I assume it also applies to additional tags. Cheers, Peter. > From: Nathan Ward [mailto:nznog(a)daork.net] > Sent: Thursday, 9 October 2014 1:26 p.m. > To: Brent Marquis; Dave Mill; Don Stokes > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: [nznog] UFB Upload Issues > > > On 9 October 2014 at 1:09:42 pm, Brent Marquis > (brent.marquis(a)chorus.co.nz(mailto:brent.marquis(a)chorus.co > .nz))<mailto:brent.marquis(a)chorus.co.nz(mailto:brent.marqu > is(a)chorus.co.nz))> wrote: > > > Sorry for the quick reply to myself! > > > > It actually seems like Don might not be 100% correct. > > > > I don?t have IEEE access to get the .1q standard? But > Wikipedia suggests it has been updated in 2005 for CFI to > be DEI: > > > http://en.wikipedia.org/wiki/IEEE_802.1ad > > > > Drop eligible indicator (DEI): a 1-bit field. (formerly > CFI[note > 1](http://en.wikipedia.org/wiki/IEEE_802.1Q#cite_note-2)[2 > ](http://en.wikipedia.org/wiki/IEEE_802.1Q#cite_note-3)) > May be used separately or in conjunction with PCP to > indicate frames eligible to be dropped in the presence of > congestion.[3](http://en.wikipedia.org/wiki/IEEE_802.1Q#ci > te_note-4) > > > With the note suggesting ? ?IEEE 802.1Q-2005 clause 9.6? > > > > If it?s on Wikipedia, it must be true?. Right? J > > The quote above is from the 802.1q page. If you read the > page you link to, the 802.1ad page, you get: > > In IEEE 802.1ad the CFI is replaced by a Drop Eligibility > Indicator (DEI), increasing the functionality of the PCP > field. > > Key bit is ?802.1ad?, not 802.1q. Using 0x88a8 vs > 0x8100/0x9100 is signalling that you?re using 802.1ad vs. > stacked 802.1q, so should set this bit appropriate to the > tag type. I?m with Don on this one - the frame type bits > signal how to interpret the following bits, you can?t just > swap them around. > > People should really just use 0x88a8 - those who aren?t, > can I ask why not? Is it because you?re trying to tunnel > it over a switch that doesn?t support 802.1ad or > something? I?m not saying it?s wrong, I?m interested in > understanding the situations in which you might do this. > > -- > Nathan Ward > This communication, including any attachments, is > confidential and may be legally privileged. If you are not > the intended recipient, you should not read it - please > contact me immediately, destroy it, and do not copy or use > any part of this communication or disclose anything about > it. Thank you. No confidentiality or privilege is waived > or lost by any mis-transmission or error. Please note that > this communication does not designate an information > system for the purposes of the Electronic Transactions Act > 2002. > >

3 2

Taking down `rpki-validator.lab.hotplate.co.nz' for a bit
by Michael Fincham 08 Oct '14

08 Oct '14

Hi all, I've noticed a few NZNOGish looking addresses hitting this service periodically, even though an automated upgrade to the rpki-ca package broke the database updates some months ago :) Thanks for checking it out, folks who did, and I hope you found it useful! Just a quick note to let everyone know I'm taking the validator app down for a bit until I have time to fix it and find it a new home (I'm currently paying for a whole VM for it to live on which seems a little unnecessary given it's partially broken). In the mean time, BGPmon has a (much more comprehensive) service you can query via WHOIS: <http://www.bgpmon.net/securing-bgp-routing-with-rpki-and-roas/> -- Michael

2 1

Re: [nznog] UFB Upload Issues (Ewen McNeill)
by Peter Ensor 08 Oct '14

08 Oct '14

Just for clarification, a 802.1ad (TPID = 88a8) does not need to have both a SVLAN and CVLAN. It is allowed to only be a single VLAN tag. This will occur when a an untagged packet ingresses a BS3/3a/4 type service at the UNI (Upstream frame). This frame will be wrapped with a SVLAN but because it did not contain any original CVLAN tag, there will not be any CVLAN tag in the packet that egresses the UFB Handover connection. My reading is that on a 802.1ad interface. the TPID = 88a8 indicates that it is a SVLAN whereas a TPID = 8100 would indicate that it is CVLAN or QinQ. Since both TPID's now use the DEI bit (since the 2011 standard) I'm not sure how else the two frames would be different. Cheers, Peter. Hi Brent, On 9/10/14 16:03, Brent Marquis wrote: > It just gets slightly more confusing. [...] > Which would mean your interpretation is that CFI on 802.1q only applies > if there is also an 88a8 802.1ad tag preceding it. Based on looking at the 802.1Q-2005 specification and 802.1ad-2005 specification that Nathan linked to, it seems to me that the intent of both 802.1Q-2005 and 802.1ad-2005 was that ethertype=0x8100 would mean "interpret the header as a 802.1Q VLAN Tag/802.1ad CVLAN Tag", both of which have the same bit pattern, and semantics -- including a CFI bit rather than a DEI bit. This is section 9.6 in both specifications (which makes sense since 802.1ad was based on 802.1Q). By contrast, in 802.1ad there is a SVLAN tag, with a separate ethertype (0x88a8), which is the same except that it has a DEI bit in the same bit position that 802.1Q/802.1ad has the CFI bit. This is section 9.7 in the 802.1ad specification. It seems to me that the intent was: if ethertype=0x8100 then bit is interpreted as CFI, else if ethertype=0x88a8 then bit is interpreted as DEI. Which gives an unambiguous interpretation, without needing any context (much easier for an ASCI implementation). So I'm pleased IEEE seem to have thought of this problem in advance and tried to avoid ambiguity. However, setting DEI on an 802.1ad frame with ethertype 0x88a8, then changing the ethertype of the outer tag to 0x8100 ("for compatibility" :-) ) seems to either (a) require force-clearing that bit to avoid confusion, or (b) lead to a potential for misinterpretation that causes traffic to be discarded. > IMO, our interface is .1ad and we dont believe being nice and tweaking > the ethertype at RSP request changes that :) but let me see what I can > find out from our Vendor. FWIW, it appears to me that sending two 0x8100 tags stacked is not 802.1ad, but some "pre-standard" double tagging. Even if the frames started out 802.1ad compliant. 802.1ad seems to require a SVLAN tag (0x88a8) around a CVLAN tag (0x8100). Although it appears the difference mostly only matters for the interpretation of this one bit (DEI or CFI). If Chorus is going to offer 0x8100-double-tagging (ie, two 0x8100 tags stacked, pre-802.1ad Q-in-Q) it seems like it'd maximise compatibility if you were able to clear bit 5 (CFI on 0x8100/DEI on 0x88a8) of the tag in that specific case (ie, two stacked 0x8100 tags). Ewen PS: For reference, Nathan's links: http://www.stephan-robert.ch/attachments/File/TIN08/802-1Q-2005.pdf https://github.com/yhaz/homeenv/blob/master/specs/802.1ad-2005.pdf beware the 802.1ad one is a revision 4 draft (they went to revision 6 before the release AFAICT: http://www.ieee802.org/1/pages/802.1ad.html) if you want to argue with vendors it might pay to get the official standard from IEEE directly.

2 1

APRICOT 2015 Programme Committee - call for volunteers
by Dean Pemberton 08 Oct '14

08 Oct '14

Hi everyone, The APRICOT 2015 Programme Committee is responsible for the solicitation and selection of suitable presentation and tutorial content for the APRICOT 2015 conference (http://2015.apricot.net/) The APIA Board selects a new Programme Committee each year and is now seeking nominations from the community. As part of APIA's partnership with APNIC, the PC will be responsible for building the technical & operational content for both APRICOT in Fukuoka, Japan in February/March 2015 and the APNIC 40 Conference in September 2015. Eligible PC candidates are those who have attended APRICOT & APNIC conferences in the recent past, have broad technical knowledge of Internet operations, and have reasonable familiarity with the format of APRICOT & APNIC conferences. Having constructive opinions and ideas about how the programme content might be improved is of high value too. PC members are expected to work actively to solicit content for the two events and review submissions for technical merit. The PC meets by conference call, weekly in frequency during the three months prior to each event. If you are interested in joining the PC and meet the above eligibility criteria, please send a brief note to "apia-sec at apia.org". The note should include affiliation (if any) and contact details (including e-mail address), and a brief description of why you would make a good addition to the PC. PC members receive complimentary registration for the event they helped assemble the programme for. The APIA Board will accept nominations received by the end of Friday 24 October, 2014, and will announce the new PC shortly thereafter. Many thanks! Mark Tinka, Raphael Ho & Dean Pemberton (APRICOT 2015 PC Chairs)

1 0

Re: [nznog] UFB Upload Issues
by Brent Marquis 08 Oct '14

08 Oct '14

Hi Craig, Yes, I spotted that this morning, hence we need some document updates - my understanding (it's not my document) is that specific wording hung around from an old version of the document and it was intended to point out that we will not utilise DEI/colour marking from RSPs into our network. Thanks, Brent BrentMarquis Layer 2 Network Specialist T +6448964169 M +64272290923 E Brent.Marquis(a)chorus.co.nz -----Original Message----- From: Craig Whitmore [mailto:lennon(a)orcon.net.nz] Sent: Thursday, 9 October 2014 10:44 a.m. To: Brent Marquis; nznog(a)list.waikato.ac.nz Subject: RE: [nznog] UFB Upload Issues Maybe I'm a little confused but reading the TUG it says DEI is not used /aware? Page 48 of the Chorus NGA TUG it states... Canonical Format Indicator (CFI) or Discard Eligible Indicator (DEI) is set to 0. DEI applies to the 802.1ad outer tag and is not used, i.e. NGA is not colour-aware. ???? -----Original Message----- From: nznog-bounces(a)list.waikato.ac.nz [mailto:nznog-bounces(a)list.waikato.ac.nz] On Behalf Of Brent Marquis Sent: Thursday, 9 October 2014 9:44 a.m. To: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] UFB Upload Issues Thanks for pushing all that info back into the list. I know of 1 RSP which has Juniper equipment that seems to be discarding CFI/DEI=1. I guess some switches need a bit of config to recognise CFI as DEI or to re-write it entirely (luckily there haven't been any hardware issues yet) This communication, including any attachments, is confidential and may be legally privileged. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you. No confidentiality or privilege is waived or lost by any mis-transmission or error. Please note that this communication does not designate an information system for the purposes of the Electronic Transactions Act 2002.

1 0

Call for Papers NZNOG 2015
by Richard Nelson 05 Oct '14

05 Oct '14

It turns out that June is much too early to issue the CFP for NZNOG next January. So here it is again. We are negotiating with some interesting international speakers but we rely on submissions from the local community to make the programme interesting. Remember there is a prize of a trip to Japan. Richard. -------- The NZNOG organising committee invites papers for its 13th annual conference, to be hosted at the Distinction Hotel, Rotorua, New Zealand from 26 - 30th January 2015. There will the three day Workshops 26 – 28 January, a day of tutorials on 28 January with the main conference on 29 – 30 January. The best local conference paper as judged by the trustees in association with the programme committee will win a trip to APRICOT 2015, to be held jointly with APAN 39 in Fukuoka, Japan, from February 24th to March 6th 2015. Umm that’s right, an all[1] expenses paid trip to JAPAN!!!! It's a real thing. Two people have won this in previous years and to be honest they seemed pretty happy with the prize. Conference objective: The NZNOG conference, workshops and tutorials are a once-a-year opportunity for individuals and organisations involved in Internet operations to meet and share the latest in Internet operations, technologies practices and receive high quality training. The event is unique in New Zealand and attracts technical, skilled individuals with a genuine interest in Internet operations and Internetworking technologies. Submit a paper: Presenters are invited to submit abstracts of their paper for consideration by Monday 20th October. Abstracts should be no more than one page long and provide a summary of your networking-related subject matter. Please note that full slide decks will be required by late November. To submit your paper please e-mail: talks(a)nznog.org When considering a presentation, remember that the NZNOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in SIGs and to address issues relevant to the day-to-day operations of ISPs and network operators in the conference sessions. Note: The inclusion of a title, bio, topic, abstract, and slides with proposals is not compulsory but will help us determine the quality of your proposal and increase the likelihood it will be accepted. The organising committee will evaluate proposals based on fit with the conference’s objective and its ability to stimulate lively discussions around the current state of New Zealand networking. The best local paper will be judged by a selection of the trustees and the programme committee. It will be expected the best paper is submitted by the winner for presentation at APRICOT. More details on paper submission can be found at http://www.nznog.org/call-for-papers For more information about the conference visit www.nznog.org or contact: talks(a)nznog.org [1] where 'all' means Return Flights, Accommodation and Conference Fees. You still need to pay for things like food and entertainment. Most of what you need to eat/drink is covered in the conference though. We're also open to cases of special needs should you win. --------

1 0

Shell Shock - Bash vulnerability - CVE-2014-6271
by Dean Pemberton 28 Sep '14

28 Sep '14

Hi all, This isn't normally a security vuln release list but this one looks pretty bad A newly discovered vulnerability (CVE-2014-6271) in the Bash command-line interpreter poses a critical security risk to Unix and Linux systems. It allows remote code execution. NZITF is responding to this remote execution exploit, with a News page that we will be keeping up to date - http://www.nzitf.org.nz/news.html . We are also reaching out to technical and security community points of contact to raise awareness to the issue and ensure necessary action is taken (hence this email to you). Please note, no patch is yet available for Mac OSX. However, many other patches are available. So Patch, Patch, Patch. Regards, Dea

21 35

2degrees
by Matthew Harrison - PrimoWireless Ltd 24 Sep '14

24 Sep '14

Can someone from 2degrees please contact me off list. Regards, Matthew Harrison The Top Dog Please excuse the shortness of my email as it was sent from my phone.

2 1

Whole of Domain Web Harvest 2014 - Robots.txt
by Jay Gattuso 23 Sep '14

23 Sep '14

Hi Noggers, We are looking at undertaking another Whole of Domain (WOD) web harvest during this financial year. (I will be in touch with you with the specifics once we have some of the timings formalised with the crawl contractor, the Internet Archive. I wanted to ask for your views on adherence to robots.txt. We have three options that are hypothetically available to us, each with various merits. 1) Strictly adhere - will miss some artefacts required to replay a site correctly 2) Adhere but follow embeds - (allows us to get linked images, css, some json etc) 3) Ignore - most fulsome crawl. On the last WOD (in 2013) we used option (2), and I wanted to test if this was still the right option to choose. We aim to capture the most complete snapshot of the NZ web possible so it is available to future generations. This Robots issues directly affects the completeness of the crawl we can undertake. If we choose the wrong option, there is a risk of a, reduced crawl coverage, and frustrated web content operators. I'm really keen to make sure we are able to capture the most complete WOD we can, and seek your opinions on the above, on or off list. Many thanks, Jay Jay Gattuso | Digital Preservation Analyst | Preservation, Research and Consultancy National Library of New Zealand | Te Puna Mātauranga o Aotearoa PO Box 1467 Wellington 6140 New Zealand | +64 (0)4 474 3064 jay.gattuso(a)dia.govt.nz<mailto:jay.gattuso(a)natlib.govt.nz>

6 5

Did DNS replies for outlook.office365.com increase in size on Friday?
by Michael Fincham 23 Sep '14

23 Sep '14

Hi all, Out of curiosity - did anyone else see the DNS replies for outlook.office365.com scoot over 512 bytes on Friday? An ANY query from here currently returns a 740 byte answer. Trying to determine if Microsoft changed something on their end or my customer's router unexpectedly lost the ability to deal with large DNS replies 8^) -- Michael

3 4

2U swap for DR
by Rob McDonald 22 Sep '14

22 Sep '14

Hello all, I'm canvassing (soliciting??) for people interested to swap a few U and a few Mbps for a DR / monitoring server. People who just want to sell me rack space and data in a one way arrangement need not apply, I can research that myself. We are based in Auckland, but realise that all the sites we have available to put our monitoring and DR server are also in Auckland, with very similar network paths. To keep it on topic, to the winning referral goes the beer! Cheers Rob *Rob McDonald | *Director Level 2 Systems Ltd *M:* +64 21 902 929 *eFax:* +64 9 974 4734 *W:* http://www.L2.co.nz <http://www.l2.co.nz/>

1 0

Spark Lightbox question
by Tony Wicks 20 Sep '14

20 Sep '14

Hi guys, does anyone know the traffic path (or source IP's) for the Spark Lightbox service ? Interested to know if they are handing the traffic over APE or not. I really hope someone has not done something very stupid and put the streaming servers in Sydney and expect all the ISP's to pay to haul the traffic in internationally. [root(a)dalek ~]# traceroute lightbox.co.nz traceroute to lightbox.co.nz (54.252.86.48), 30 hops max, 60 byte packets 1 103-9-40-81.flip.co.nz (103.9.40.81) 1.355 ms 1.415 ms 1.408 ms 2 v503-ae1.icore1-e.flip.co.nz (103.9.41.35) 0.278 ms 0.280 ms 0.277 ms 3 v503-ae1.icore1-w.flip.co.nz (103.9.41.34) 0.290 ms 0.290 ms 0.284 ms 4 ten-1-0-0-250.bdr01.akl05.akl.VOCUS.net.nz (175.45.102.9) 0.254 ms 0.250 ms 0.245 ms 5 ten-0-2-0-3.cor01.alb01.akl.VOCUS.net.nz (114.31.202.88) 24.333 ms 24.328 ms 24.316 ms 6 ten-0-0-0-2.cor03.syd03.nsw.VOCUS.net.au (114.31.199.116) 23.842 ms 23.783 ms ten-0-3-0-2.cor03.syd03.nsw.VOCUS.net.au (114.31.202.85) 24.037 ms 7 ten-1-1-0.bdr03.syd03.nsw.VOCUS.net.au (175.45.72.116) 23.760 ms ten-2-1-0.bdr03.syd03.nsw.VOCUS.net.au (114.31.192.43) 23.733 ms 23.730 ms 8 16509.syd.equinix.com (202.167.228.131) 23.716 ms 23.986 ms 23.991 ms 9 54.240.192.77 (54.240.192.77) 24.736 ms 25.515 ms 24.739 ms 10 54.240.192.107 (54.240.192.107) 24.727 ms 24.841 ms 24.755 ms 11 ec2-54-252-0-1.ap-southeast-2.compute.amazonaws.com (54.252.0.1) 25.549 ms ec2-54-252-0-5.ap-southeast-2.compute.amazonaws.com (54.252.0.5) 25.781 ms ec2-54-252-0-1.ap-southeast-2.compute.amazonaws.com (54.252.0.1) 26.035 ms 12 * * * 13 * * * cheers

4 3

Call for NZ Provider
by Daniel Watson 20 Sep '14

20 Sep '14

Gday Noggers, I am currently seeking any NZ providers whom would meet the following requirements, Being able to rent dedicated servers at reasonable market pricing, Being able to provide us a BGP session on IPv4 & IPv6 to advertise our own IP's Being able to set up a VyOS VM to act as our router via a direct BGP session to said provider If you can meet these requirements, I am eger to meet you :D Please respond off-list if you can meet this requirement Regards, Daniel Watson Network Administrator / Network Operations Manager E Daniel(a)GloVine.com.au<mailto:Daniel(a)GloVine.com.au> W www.GloVine.com.au<http://www.GloVine.com.au> "No trees were harmed in the making of this email, however a large number of electrons were terribly inconvenienced."

1 0

[OT] APC Suppliers / Reps
by Alexander Neilson 18 Sep '14

18 Sep '14

Hey Noggers. Beer for the OT Taking a look at the APC Website and their Distributors I can only see acquire listed for NZ. I have no experience with them as a supplier, can others provide me with experiences offline? Also is there anyone else in NZ who supplies APC gear / is an APC Rep / Expert who would be able to help with planning some purchases? I have a couple of small DC’s to fit out (starting small but planning to improve management features on it as well). Any contact details would be much appreciated. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

2 1

Kiwicon 8 CFP https://kiwicon.org/cfp2014.txt
by Mike Forbes 18 Sep '14

18 Sep '14

HI NOG Like you, we in the Kiwicon crue care about security. Also like you, we grew up in the 80s. Remember the 80s? they were good. Relatedly, we present our CFP (and training) https://kiwicon.org/cfp2014.txt We look forward to a few submissions from the New Zealand Network Operators' Group as you're all very intelligent and awesome. Beers, -- // Mike

1 0

Cisco ASR/LNS+VRF+Local Pool issue
by Skeeve Stevens 16 Sep '14

16 Sep '14

Hi all, I am having trouble with getting a PPPoE session to use a local ip pool via an AVPair. I am sending the following avpairs to the session from Radius (we're using Smile): lcp:allow-subinterface=yes ip:vrf-id=TESTVRF ip:addr-pool=TESTPOOL ip:ip-unnumbered=Loopback212 On the router: ip local pool TESTPOOL 100.64.8.1 100.64.15.254 The attributes are being received in the debug, and the session is ending up in the correct VRF, but there is no IP address being assigned on the local LNS. Router#show users ... Interface User Mode Idle Peer Address Vi2.1 testuser(a)test.com PPPoE - Router#show vrf ... Name Default RD Protocols Interfaces TESTVRF 65000:305 ipv4 Lo305 Vi2.1 ... Any help to figure out what is going on would be very much appreciated. Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.4(1)S, RELEASE SOFTWARE (fc2) ...Skeeve *Skeeve Stevens - *eintellego Networks Pty Ltd skeeve(a)eintellegonetworks.co.nz ; www.eintellegonetworks.co.nz Phone: +612 8014 7398; Cell +61 (0)414 753 383 ; skype://skeeve facebook.com/eintellegonetworks ; <http://twitter.com/networkceoau> linkedin.com/in/skeeve twitter.com/theispguy ; blog: www.theispguy.com The Experts Who The Experts Call Juniper - Cisco - Cloud - Consulting - IPv4 Brokering

2 2

A good read: The network nightmare that ate my week.
by Dean Pemberton 09 Sep '14

09 Sep '14

http://blog.bimajority.org/2014/09/05/the-network-nightmare-that-ate-my-wee…

3 2

GLIF2014 and SDNcon (REANNZ is hosting a few meetings)
by T. Charles Yun 07 Sep '14

07 Sep '14

All, full disclosure: I signed up for the mailing list to send this. A bit spammy, but on topic. Upside: if you go to the meetings, there will be beer. For you. GLIF 2014 29 Sep - 1 Oct 2014 Queenstown, NZ REANNZ <http://www.reannz.co.nz/>, the host of GLIF 2014 < http://glif-2014-conference.lilregie.com/>, invite you to come to lovely Queenstown, New Zealand to participate in a great set of talks < http://www.glif.is/meetings/2014/>, demonstrations and a wonderful dinner at the top of the mountain looking down on Lake Wakatipu. The meeting draws attendees from around the world who will be discussing SDN (software defined networking), lightpath exchanges, performance and virtualisation. A set of demanding demonstrations will also be using the temporary, high-speed network connection that is being brought to the hotel just for the meeting. You will see lightpath exchange technology, software defined networking, high-resolution (4k/8k) telemedicine and some new hardware. And if you can adjust to the altitude, an adventurous bunch will be taking an early morning run along the lake on Tuesday morning. We look forward to seeing you at GLIF, register now: < http://glif-2014-conference.lilregie.com/> If you happen to be in Wellington the following week, you might also be interested in participating in SDNcon <http://www.sdncon.net/>. This is a technical meeting designed for engineers. It will be hands-on-keyboard with an expected level of expertise in networking. Take a look at the website to see if it is for you. - Charles (because everyone else here was too scared to post this on their own) -- T. Charles Yun REANNZ email tcyun(a)reannz.co.nz mobi +64 21 526 758 post Level 1, 22 The Terrace, Wellington 6011, NZ

1 0

Help with Ripe Atlas Measurments
by Alexander Neilson 07 Sep '14

07 Sep '14

Hey Team Beer for the off topics. Can someone with experience with doing Measurements on Ripe Atlas please contact me off list? I am trying to do some research with their information however while the tests I am doing get results when I do them from my linux machines around the place I am getting empty result sets when testing through the Atlas. I have some requests into Ripe Atlas team as well as having read the documentation about the firmware and the structure of the response however I have still been able to get no valid responses. Regards Alexander Alexander Neilson Neilson Productions Limited alexander(a)neilson.net.nz 021 329 681 022 456 2326

1 0