- NZNOG - lists.nznog.org

Anyone got a 100Base-FX SFP?
by Nick Larsen 04 Jun '16

04 Jun '16

Hi all, Just wondering if anyone has a Cisco GLC-GE-100FX SFP they want to sell or give away. If so, please contact me off list. Regards, Nick Larsen

1 0

IANA AS Numbers registry update
by Selina Harrington 02 Jun '16

02 Jun '16

Hi, The IANA AS Numbers registry was updated on 25 May 2016 to reflect the allocation of the following blocks to APNIC: 64297-64395 135581-136505 136506-137529 You can find the IANA AS Numbers registry at: http://www.iana.org/assignments/as-numbers/as-numbers.xml The allocation was made in accordance with the Policy for Allocation of ASN Blocks to Regional Internet Registries: https://www.icann.org/resources/pages/global-policy-asn-blocks-2010-09-21-en Regards, Selina Harrington IANA Senior Specialist ICANN

1 0

Consulting: IPSec VPNs to multiple customer networks
by Christoph Berthoud 01 Jun '16

01 Jun '16

Hi All, We are looking for any network consultant/company who can assist with the following. Replies off-list please :) We have several customers who we have established site-to-site IPSec VPN tunnels with to provide them with remote support (I hate this concept but I have to go with it). Some of these connections are just single sites with a single network, others are to a customer's head office with multiple sites/networks behind. As we onboard more customers, terminating all of these VPNs onto our office firewall/router is becoming a headache. We regularly make changes to our firewall/routing and frequently run into issues affecting the VPN tunnels. We also have complex NATing for customers that have overlapping subnets. I want to remove our office firewall/router as the terminating endpoint of these VPN tunnels. My thought is to build a 'hub and spoke' topology, using a centralised hub router to terminate all of the customer VPN tunnels, and our office then also becoming a spoke. Now changes to my office network have no impact on the VPN setup, and vice-versa. If this is something you, your company or someone you can refer has experience in, I would very much like to hear from you. If you have had this problem in the past and have any other clever solutions, I would also love to hear from you! Happy long weekend! -- Thanks Christoph Berthoud

2 1

IPv6 residential deployment survey
by Elly Tawhai 24 May '16

24 May '16

[On behalf of Consulintel] Hi NZNOG Community, Jordi Palet of Consulintel, who is actively promoting IPv6 globally and has participated at various APNIC events, is running a short survey on IPv6 home/residential access. If you work for an ISP that provides residential IPv6 access, or a customer of such an ISP, please feel free to participate in this survey at http://survey.consulintel.es/index.php/175122 Thanks, Elly

1 0

NZNOG 2017 Information
by Daniel Millar 24 May '16

24 May '16

Hi, Just wondering what the timeline is for information being released in regards to location etc? Best Regards, Daniel Millar - Sales & Technical Engineer Phone: +64 3 741 1339 | Fax: +64 3 327 3193 | Email: daniel.millar(a)gowifi.co.nz<mailto:daniel.millar(a)gowifi.co.nz> | www.gowifi.co.nz<http://www.gowifi.co.nz/> [cid:image001.png(a)01D1B6A2.6C3BF180]

3 2

APNIC 42/bdNOG6 Conference - Call for Papers
by Elly Tawhai 22 May '16

22 May '16

_______________________________________________________________________ APNIC 42/bdNOG6 Conference - Call for Papers _______________________________________________________________________ Hi NZNOG Community, The APNIC 42/bdNOG6 Program Committee is now seeking presentations for the APNIC 42/bdNOG6 Conference in Dhaka, Bangladesh. We are looking for content that would suit technical conference sessions, lightning talks and Birds of Feather (BoF) sessions. Key Dates --------- The timeline for submissions is: Call for Papers Opens 19 May 2016 First Round Paper Acceptance 11 July 2016 Final Deadline for Submissions 14 September 2016 Final Round Paper Acceptance 21 September 2016 Final Slides Received 01 October 2016 Submitting Proposals -------------------- https://conference.apnic.net/42/program#call-for-papers Program Material ---------------- The technical sessions at APNIC 42/bdNOG6 will include presentations relevant to Internet operations and technologies. The following topics are examples of possible areas of interest. - IP core network routing, switching and operations - IPv6 deployment and transition technologies - Access and transport network including 3G/LTE, WiMax, FTTx/GPON, STM, MPLS etc - Wi-Fi and SP Wi-Fi technologies - Content & service delivery (Multicast, Voice, Video, Telepresence, Gaming) and cloud computing - DNS / DNSSEC, Mail, WWW etc - Network security issues (NSP-SEC, DDoS, Anti-Spam, Anti-Malware) - Firewall and network security BCPs - Internet policy (Security, Regulation, Content Management, Addressing, etc) - IXPs and Peering - Research on Internet operations and deployment - Academic research on Internet technologies - IP telephony and voice - Internet operation and application in the Asia Pacific region perspective - ISP and Telco backbone network operation - Software defined networking and network function virtualization - Internet of Things architectures, standards, services, security, addressability, and manageability If you have any other ideas or proposals for panel or BoF sessions, please feel free to submit your ideas via the submission system. If you have any questions, please email the Program Committee: conference(a)apnic.net For more information about APNIC 42/bdNOG6, please visit: https://conference.apnic.net/42 On behalf of: APNIC 42/bdNOG6 Program Committee

1 0

Encouragement for the tech community to submit on the .nz WHOIS review
by Dean Pemberton 22 May '16

22 May '16

Hi All, Wearing my INZ hat here. The Domain Name Commission is currently running a consultation process around the .nz WHOIS policies and InternetNZ would like to encourage people to make submissions on that process. This is especially true of people in the technical and security fields. While I don't want to offer an opinion about the current policies, any of the submissions, or proposals, what I do want to do is to encourage you to read the proposal and submissions and consider if you might like to make a submission of your own on the process. You can see more information at the link below with an outline of a proposed process. https://dnc.org.nz/consultation-whois-review-process If you think that there might be a better process than the one outlined then please put in a submission with your input and if possible details of an alternative process. If you think that the process outlined is appropriate then please consider putting in a submission detailing why you support it. It's important to ensure that both sides are well represented in the submissions being considered. Comments can be sent by email to policies(a)dnc.org.nz, or by post to PO Box 11881 Wellington 6142. Submissions should be received by 7 June 2016. Regards, Dean -- Dean Pemberton Technical Policy Advisor InternetNZ +64 21 920 363 (mob) dean(a)internetnz.net.nz A better world through a better Internet

1 0

Mikrotik BGP VRF Advise
by Liam Farr 18 May '16

18 May '16

Hi, Im looking for someone to give some architectural advise on setting up VRFs on a Mikrotik for separating out BGP routing table functionally. E.g. Local BGP Peers / Local IX's > Local VRF National Transit BGP Peers > National VRF International Transit BGP Peers > International VRF Then leaking those routes into other VRFs, for example a customer transit VRF containing routes from all three. Is there anyone other there who has done this on a Mikrotik (preferably in production) that might be interested in providing some architectural advise / initial configuration help? Payment in cash / beer / hard liquor / your preferred currency. -- Kind Regards Liam Farr Maxum Data +64-9-950-5302

1 0

Exploit on Ubiquiti AirOS
by Dean Pemberton 16 May '16

16 May '16

Hi All I'm told that the local WISP operator community is dealing with a new worm[1] that exploits Ubiquiti AirOS devices running older firmwares. This could potentially be a lot of devices. http://community.ubnt.com/t5/airMAX-General-Discussion/Virus-attack-URGENT-… has ISPs from Spain, Brasil, and the US reporting infections in thelast 24 hours. Versions prior to these are vulnerable: 5.5.11 XM/TI. 5.5.10u2 XW 5.6.2 XW/XM/TI There looks to be some more information here which might or might not be related. https://hackerone.com/reports/73491 If you know anyone who makes use of UBNT AirOS products, now might be a time to give them a nudge. [1] quote from the forums "It's a self-distributing virus, so, once it can "see" neighbour antenas within the same subnet, it attacks the others."

2 1

AS17746 Gone burger
by Simon Allard 05 May '16

05 May '16

Good Morning NZNog. Just a FYI AS17746 is no longer aggregating any of the ex-Orcon IPv4 or Ipv6 subnets. These have been moved to AS9790. Its made our IPV6 uptake stats look a little sad, but that's just how it is. 17746 is still in the AS path for some routes, but the goal is for that to change overtime. Any issues encountered, please sing out Cheers, Si Simon Allard | Senior Network Architect D: 09 550 2790E: Simon.Allard(a)m2group.co.nz M: 020 100 0790W: vocus.co.nz A: PO Box 108-109, Symonds St, Auckland 1150

1 0