- NZNOG - lists.nznog.org

Telecom has it as well
by Russell Sharpe 19 Jun '05

19 Jun '05

http://www.telecom-media.co.nz/releases_detail.asp?id=3190 <http://www.telecom-media.co.nz/releases_detail.asp?id=3190&page=index> &page=index

1 0

Fwd: SIGNIFICANT OUTAGE ON TELECOM NETWORK
by Ian McDonald 19 Jun '05

19 Jun '05

Official statement from Telecom.... ---------- Forwarded message ---------- From: media(a)telecom-media.co.nz <media(a)telecom-media.co.nz> Date: 20-Jun-2005 12:35 Subject: SIGNIFICANT OUTAGE ON TELECOM NETWORK To: imcdnzl(a)gmail.com SIGNIFICANT OUTAGE ON TELECOM NETWORK An outage on the Telecom network has been affecting a large number of customers since late this morning. Telecom is working to repair the outage as soon as possible. Telecom regrets the inconvenience to customers and will provide more information as soon as possible. The outage, which occurred at 10.48am today, has been caused by two separate incidents affecting different parts of the network. Internet, mobile and landline calls are affected. Technicians are currently working on repairing one of the fibre breaks which is in the Rimutaka area. Once it has been repaired the majority of services will be restored. Technicians are investigating the other fault and will repair it as soon as possible. The outage is affecting calls to Telecom's own call centres, causing overloading. Telecom is asking customers to be patient. We will provide more information as soon as possible. For more information, please contact: Sarah Berry Media Relations Executive 04 498 9481 027 470 7900 Phil Love Senior Media Relations Executive 04 498 9155 027 277 8496 Melanie Marshall 04 498 9272 027 452 6231 John Goulter Public Affairs & Government Relations Manager 04 498 9369 027 232 4303 This message was sent to you because your email address is on the Telecom media releases mailing list. To be removed from this mailing list please visit http://www.telecom-media.co.nz/lists/?id=869&e=im IMPORTANT: Security is limited with current Internet email technology. If you have doubts about the contents or source of this message, please verify that this release comes from Telecom New Zealand by checking the Telecom website at: http://www.telecom-media.co.nz/releases.asp

1 0

RE: [nznog] I think a rubber band just fell off.
by Peter Thompson 19 Jun '05

19 Jun '05

According to a tech that someone in our NMC spoke to, the problem is with a RAN at Mayoral drive in Auckland CBD. Pete -----Original Message----- From: Simon Blake [mailto:simon(a)citylink.co.nz] Sent: Monday, 20 June 2005 11:24 a.m. To: jamie.baddeley(a)vpc.co.nz Cc: nznog(a)list.waikato.ac.nz Subject: Re: [nznog] I think a rubber band just fell off. They appear to have fallen off Citylink in Wgtn as well. Anybody from Telecom got an ETA? Cheers Si On Mon, Jun 20, 2005 at 11:15:05AM +1200, jamie.baddeley(a)vpc.co.nz said: > any one else seeing a *large* number of Telecom NZ outages? > > FR/PON/DSL/Dial etc etc > > > > jamie > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

Help requested - Netscreen IP Sec VPN over DSL
by Felix Tsang 19 Jun '05

19 Jun '05

Can anyone please give me a pointer as to why I am having big problems with using a Safenet VPN client (conecting to) -> Netscreen VPN/FW appliance via Jetstart / UBS / Jetstream ? This is happening on multiple disassociated / unrelated networks. I am using mostly Dynalink RTA300 DSL Modems, and Netscreen 5XT / GT boxes. I believe it is something to do with the NZ DSL network as this type of VPN setup has worked well for over 1/2 years until it start to become more and more unreliable. Can anyone help or suggest a solution? Thanks for your time. Cheers Felix Tsang ULTRATECH Ltd Cell Phone: (64) 29 241 0185 Phone: (64 9) 309 8393 Fax: (64 9) 309 8393 Email: felix(a)ultratech.co.nz

2 2

RE: [nznog] I think a rubber band just fell off.
by Gavin Legge 19 Jun '05

19 Jun '05

Yeah - IRL just lost auckland FR. Wgtn/chch is still fine. -----Original Message----- From: jamie.baddeley(a)vpc.co.nz [mailto:jamie.baddeley(a)vpc.co.nz] Sent: Monday, 20 June 2005 11:15 a.m. To: nznog(a)list.waikato.ac.nz Subject: [nznog] I think a rubber band just fell off. any one else seeing a *large* number of Telecom NZ outages? FR/PON/DSL/Dial etc etc jamie _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. MailScanner thanks transtec Computers for their support. MailScanner Supplied by ITS-HelpDesk. ext 4001 or email helpdesk(a)irl.cri.nz--

2 1

RE: [nznog] Help requested - Netscreen IP Sec VPN over DSL
by Felix Tsang 19 Jun '05

19 Jun '05

Thanks Tracy, Yes the MTU size could very well be the issue. Just as of Friday, the VPN's came up again through no apprent reason. I have confirmed thru trial that the max MTU size I can put thru the DSL link is 1418 bytes. I'll just have to wait till the VPN's drop again to do the MTU test. Hopefully it'll point to something. Cheers -----Original Message----- From: Tracy Briscoe [mailto:tbriscoe(a)clear.net.nz] Sent: Friday, 17 June 2005 10:05 p.m. To: 'Felix Tsang' Subject: RE: [nznog] Help requested - Netscreen IP Sec VPN over DSL Hi Felix Have you looked at using the 'set flow tcp-mss' on the Netscreen? (http://www.qorbit.net/nn/Dec-2002/0254.html gives some details). We had the problem where a client could access their LAN ok via a dialup connection, but as soon as they started using mobile jetstream, things just broke. If I remember correctly set flow tcp-mss or set flow tcp-mss 1300 was the fix. The client has a Netscreen 5 with a Speed Touch Pro ADSL router, then is using Netscreen remote as the VPN client (Rebadged Safenet VPN client). -Tracy B

1 0

RE: [nznog] I think a rubber band just fell off.
by Simon Allard 19 Jun '05

19 Jun '05

Yea, we are. Lost a huge amount of UBS users and a lot of our SI pops. > -----Original Message----- > From: jamie.baddeley(a)vpc.co.nz [mailto:jamie.baddeley(a)vpc.co.nz] > Sent: Monday, 20 June 2005 11:15 a.m. > To: nznog(a)list.waikato.ac.nz > Subject: [nznog] I think a rubber band just fell off. > > any one else seeing a *large* number of Telecom NZ outages? > > FR/PON/DSL/Dial etc etc > > > > jamie > > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0

RE: [nznog] Help requested - Netscreen IP Sec VPN over DSL
by Philip D'Ath 19 Jun '05

19 Jun '05

I wear the other hat (use hardware VPN). We run large numbers of VPNs over DSL (Telecom and TelstraClear) and don't experience any issues. It wont be the hardware used in the Exchanges (baring a hardware issue, such as a bad port). Assuming your ISP is not running out of bandwidth, it wont be your ISP. Your first guess, the DSL router at the CPE end is the most likely culprit. If your using UDP encapsulation you may find it is deleting the NAT translations. If you have an option to turn on ISAKMP keep alives, try that. -----Original Message----- > Can anyone please give me a pointer as to why I am having big problems > with using a Safenet VPN client (conecting to) -> Netscreen VPN/FW appliance via > Jetstart / UBS / Jetstream ? This is happening on multiple disassociated / > unrelated networks. ... Its just barely possible that this also applies to the hardware used in the exchanges and ISPs.

1 0

Re: [nznog] Help requested - Netscreen IP Sec VPN over DSL
by neil gardner 19 Jun '05

19 Jun '05

I used to be Netscreen support for Renaissance NZ and while I saw a few strange issues I never saw a problem with IPSEC VPNs specifically over ADSL. Without knowing where the device in question was sourced from, I can't be totally specific, but assuming it was purchased through a NZ retailer / SI / Supplier, You should get in touch with them - and if you have no luck, phone Lan1 or Renaissance. Remember that the suppliers generally only provide support to resellers, but they both have some talented people that might help you out - I know both have operated some form of professional services department at some point. I'd echo Steve's general thoughts that it's more likely to be a router issue than an ADSL issue (unless you're trying to do something over PON or whatever Telecom call that now). Best of luck. N. Neil Gardner Product Manager - Product Line Management Allied Telesyn Research Ltd New Zealand +64 3 339-9509 (ph) +64 3 339-3001 (fax) >>> Steve Wray <stevew-lists(a)catalyst.net.nz> 20/06/2005 8:00 a.m. >>> Felix Tsang wrote: > Can anyone please give me a pointer as to why I am having big problems with > using a Safenet VPN client (conecting to) -> Netscreen VPN/FW appliance via > Jetstart / UBS / Jetstream ? This is happening on multiple disassociated / > unrelated networks. > > I am using mostly Dynalink RTA300 DSL Modems, and Netscreen 5XT / GT boxes. > I believe it is something to do with the NZ DSL network as this type of VPN > setup has worked well for over 1/2 years until it start to become more and > more unreliable. Can anyone help or suggest a solution? I've recently been doing some research trying to isolate a problem with a clients multiple Linux-based IPSec VPNs running through consumer-grade ADSL routers. (I would guess that your Safenet/Netscreen devices are using some form of IPSec VPN). My findings were unusual; the more recent the model of ADSL router used, the more unreliable the VPNs became when under load. For me, this was only the case when running multiple VPNs. Older model ADSL routers performed admirably (the Nokia M1122 was fantastic) while later model ADSL routers ranged from some models reliably crashing after 30 seconds of load to other models seeming ok on the bench but performing very badly in the field. Some brands actually got worse with more recent firmware upgrades or chipsets. Some googling revealed that there may be problems routing ESP traffic for multiple IPSec VPNs through cheaper, less well engineered ADSL routers. I am guessing that modern consumer grade ADSL routers fall into the "less well engineered than they used to be" category. Its just barely possible that this also applies to the hardware used in the exchanges and ISPs. Just a guess. For what its worth, we are moving away from IPSec to openvpn. Unfortunately, once you've bought into a hardware VPN solution, it becomes somewhat harder to make that sort of change... _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog NOTICE: This message contains privileged and confidential information intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby notified that you must not disseminate, copy or take any action in reliance on it. If you have received this message in error please notify Allied Telesyn Research Ltd immediately. Any views expressed in this message are those of the individual sender, except where the sender has the authority to issue and specifically states them to be the views of Allied Telesyn Research.

2 1

OT datacenter racks
by Barry Murphy 16 Jun '05

16 Jun '05

Hey guys, I know this is a bit off topic, but did I mention it's Friday and time to drink BEER! Can someone reply to me off list if they provide rack space (full racks) with swipe card access and layer 2 to APE in Auckland. I know maxnet does this and they the only ones I know about that have swipe cards, but their pricing is a bit up there so am looking for alternatives. Thanks Barry

1 0