RE: cpu needed to NAT 45mbs

2007-11-09 Thread Church, Charles

The important thing to remember is that when you exceed 20 to 30
wireless users in a small area, your now dealing with an 'Enterprise'
deployment.  Lots of whitepapers exist on this subject.  Design your
layer 2 stuff correctly, and use L3 gear that is up to the task.  If
you're trying to use Linksys wireless routers to handle 400 users, you
may as well try to invade a foreign country with lawn darts and a squirt
gun. 

Chuck

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Suresh Ramasubramanian
Sent: Saturday, November 10, 2007 1:03 AM
To: Lamar Owen
Cc: nanog@merit.edu
Subject: Re: cpu needed to NAT 45mbs



On Nov 10, 2007 2:43 AM, Lamar Owen <[EMAIL PROTECTED]> wrote:
> I'm able to get 45Mb/s through a P3-800 with a four-port NIC running
NAT and
> simple content filtering with SmoothWall Advanced Firewall 2 easily.
Have a
> box doing that right now.

Speaking of all that, does someone have a "conference wireless'  bcp
handy?  The sort that starts off with "dont deploy $50 unbranded
taiwanese / linksys etc routers that fall over and die at more than 5
associations, place them so you dont get RF interference all over the
place etc" before going on to more faqs like what to do so worms dont
run riot?

Comes in handy for that, as well as for public wifi access points.

srs


Re: cpu needed to NAT 45mbs

2007-11-09 Thread Adrian Chadd

On Sat, Nov 10, 2007, Suresh Ramasubramanian wrote:

> Speaking of all that, does someone have a "conference wireless'  bcp
> handy?  The sort that starts off with "dont deploy $50 unbranded
> taiwanese / linksys etc routers that fall over and die at more than 5
> associations, place them so you dont get RF interference all over the
> place etc" before going on to more faqs like what to do so worms dont
> run riot?
> 
> Comes in handy for that, as well as for public wifi access points.

Everyone I speak to says something along the lines of

"Why would I put that sort of stuff up? I want people to pay me for
that kind of clue."

There are slides covering basic stuff and observations out there.

(I'm going through a wireless deployment at an ISP conference next week;
I'll draft up some notes on the nanog cluepon site.)




Adrian



Re: cpu needed to NAT 45mbs

2007-11-09 Thread Suresh Ramasubramanian

On Nov 10, 2007 2:43 AM, Lamar Owen <[EMAIL PROTECTED]> wrote:
> I'm able to get 45Mb/s through a P3-800 with a four-port NIC running NAT and
> simple content filtering with SmoothWall Advanced Firewall 2 easily.  Have a
> box doing that right now.

Speaking of all that, does someone have a "conference wireless'  bcp
handy?  The sort that starts off with "dont deploy $50 unbranded
taiwanese / linksys etc routers that fall over and die at more than 5
associations, place them so you dont get RF interference all over the
place etc" before going on to more faqs like what to do so worms dont
run riot?

Comes in handy for that, as well as for public wifi access points.

srs


Re: cpu needed to NAT 45mbs

2007-11-09 Thread Lamar Owen

On Thursday 08 November 2007, Carl Karsten wrote:
> I do the networking in my house, and hang out with guys that do networking
> in small offices that have a few T1s.   Now I am talking to people about a
> DS3 connection for 500 laptops*, and I am bing told "a p4 linux box with 2
> nics doing NAT will not be able to handle the load."   I am not really
> qualified to say one way or the other.  I bet someone here is.

I'm able to get 45Mb/s through a P3-800 with a four-port NIC running NAT and 
simple content filtering with SmoothWall Advanced Firewall 2 easily.  Have a 
box doing that right now.
-- 
Lamar Owen
Chief Information Officer
Pisgah Astronomical Research Institute
1 PARI Drive
Rosman, NC  28772
(828)862-5554
www.pari.edu


Re: [admin] Errors to NANOG list subscribers take II

2007-11-09 Thread Martin Hannigan

> So where's the ticket then?

It's perfectly reasonable to expect some sort of detail since our
attendance fees help fund the operation of the list. There's an issue
with the complexity of the delivery system that has developed over
time and some new anti-spam appliances that have been implemented.
It's causing some difficulties in resolving the issue and it's being
worked on.

We tend not to get bogged down in the technical minutia with the Merit
admin team since we have day jobs, they get paid to do this work, and
too many cooks in the kitchen are usually not helpful and the Merit
folks are as competent (or more in some cases) as any of us.

We'll keep you posted and do a post mortem.

Best Regards,

Martin Hannigan
NANOG MLC Member


Re: [admin] Errors to NANOG list subscribers take II

2007-11-09 Thread Leigh Porter

Bill Nash wrote:
> On Fri, 9 Nov 2007, Jay R. Ashworth wrote:
>
>   
>> On Fri, Nov 09, 2007 at 11:11:28AM -0500, Martin Hannigan wrote:
>> 
>>> On Nov 9, 2007 11:00 AM, Bill Nash <[EMAIL PROTECTED]> wrote:
>>>   
 Given the serious impact this is having on operations, does this have a
 master ticket number or escalation id of some type? Has the vendor been
 involved yet? When can we expect to see a post mortem/RFO?
 
>>> Try not to get overly ridiculous here. The updates are to keep people
>>> informed that everyone on the back end cares.
>>>   
>> Now, see, Bill, I could've *told* you that humor would be too dry for
>> Martin.  :-)
>>
>> Cheers,
>> -- jra
>>
>> 
>
> For those scoring on technique or style, I call that one 'Shooting the 
> Moon'. =)
>
> - billn
>   
So where's the ticket then?

-- 
Leigh


Re: [admin] Errors to NANOG list subscribers take II

2007-11-09 Thread Bill Nash


On Fri, 9 Nov 2007, Jay R. Ashworth wrote:

> On Fri, Nov 09, 2007 at 11:11:28AM -0500, Martin Hannigan wrote:
> > On Nov 9, 2007 11:00 AM, Bill Nash <[EMAIL PROTECTED]> wrote:
> > > Given the serious impact this is having on operations, does this have a
> > > master ticket number or escalation id of some type? Has the vendor been
> > > involved yet? When can we expect to see a post mortem/RFO?
> > 
> > Try not to get overly ridiculous here. The updates are to keep people
> > informed that everyone on the back end cares.
> 
> Now, see, Bill, I could've *told* you that humor would be too dry for
> Martin.  :-)
> 
> Cheers,
> -- jra
> 

For those scoring on technique or style, I call that one 'Shooting the 
Moon'. =)

- billn


Re: [admin] Errors to NANOG list subscribers take II

2007-11-09 Thread Martin Hannigan

On Nov 9, 2007 11:00 AM, Bill Nash <[EMAIL PROTECTED]> wrote:
>
> Given the serious impact this is having on operations, does this have a
> master ticket number or escalation id of some type? Has the vendor been
> involved yet? When can we expect to see a post mortem/RFO?
>
> - billn


Try not to get overly ridiculous here. The updates are to keep people
informed that everyone on the back end cares.

-M<


Re: [admin] Errors to NANOG list subscribers take II

2007-11-09 Thread Bill Nash


Given the serious impact this is having on operations, does this have a 
master ticket number or escalation id of some type? Has the vendor been 
involved yet? When can we expect to see a post mortem/RFO?

- billn

On Fri, 9 Nov 2007, Martin Hannigan wrote:

> 
> Dear Colleagues:
> 
> As you know, we are all seeing a single mailer message show up in our
> mailboxes at ~0330/est on a daily basis. We are aware that this is
> on-going.
> 
> The issue is being actively worked on by the admin team at Merit and a
> resolution is forthcoming. Since the message happens once a day, it's
> understandably difficult to make a best effort determination that a
> fix will take hold. There isn't a test or dev system to try out
> solutions.
> 
> This problem has been assigned a reasonable priority by the folks at
> Merit and we hope to see it fixed soon. Thanks to all who have let us
> know about this.
> 
> Best Regards,
> 
> Martin Hannigan
> NANOG MLC Member
> 


OT: Can a MSN/hotmail.com email admin contact me offlist?

2007-11-09 Thread Joseph W. Breu



We have been having difficulty sending email to hotmail.com email 
addresses.  This started several weeks ago and was tracked to a computer 
computer that was indeed sending out spam - but has since been resolved. 
Normal measures to contact MSN/Hotmail have gone nowhere.  We've received 
the run-around from their support drones..  They've even went so far as to 
silently drop all email (while reporting successful delivery).  We've 
submitted the forms at their postmaster.live.com site (and been rejected).


Oddly enough - the servers that they are blocking don't show up on their 
SNDS service.


Please contact me offlist so we can get this resolved.

--

Thanks,

-
Joseph W. Breu, CCNA  phone : +1.319.268.5228
Senior Network Administratorfax : +1.319.266.8158
Cedar Falls Utilities  cell : +1.319.493.1686
support: +1.319.268.5221 url : http://www.cfu.net


[admin] Errors to NANOG list subscribers take II

2007-11-09 Thread Martin Hannigan

Dear Colleagues:

As you know, we are all seeing a single mailer message show up in our
mailboxes at ~0330/est on a daily basis. We are aware that this is
on-going.

The issue is being actively worked on by the admin team at Merit and a
resolution is forthcoming. Since the message happens once a day, it's
understandably difficult to make a best effort determination that a
fix will take hold. There isn't a test or dev system to try out
solutions.

This problem has been assigned a reasonable priority by the folks at
Merit and we hope to see it fixed soon. Thanks to all who have let us
know about this.

Best Regards,

Martin Hannigan
NANOG MLC Member


The Cidr Report

2007-11-09 Thread cidr-report

This report has been generated at Fri Nov  9 21:13:59 2007 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.

Check http://www.cidr-report.org for a current version of this report.

Recent Table History
Date  PrefixesCIDR Agg
02-11-07242331  156158
03-11-07243189  156751
04-11-07243862  156739
05-11-07243297  157078
06-11-07243507  156962
07-11-07243511  154082
08-11-07243690  154816
09-11-07243678  155406


AS Summary
 26737  Number of ASes in routing system
 11279  Number of ASes announcing only one prefix
  1964  Largest number of prefixes announced by an AS
AS4538 : ERX-CERNET-BKB China Education and Research Network 
Center
  89032704  Largest address span announced by an AS (/32s)
AS721  : DISA-ASNBLK - DoD Network Information Center


Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as 
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').

 --- 09Nov07 ---
ASnumNetsNow NetsAggr  NetGain   % Gain   Description

Table 243897   1555088838936.2%   All ASes

AS4538  1964  718 124663.4%   ERX-CERNET-BKB China Education
   and Research Network Center
AS4755  1482  293 118980.2%   VSNL-AS Videsh Sanchar Nigam
   Ltd. Autonomous System
AS4134  1722  664 105861.4%   CHINANET-BACKBONE
   No.31,Jin-rong Street
AS4323  1356  377  97972.2%   TWTC - Time Warner Telecom,
   Inc.
AS9498  1046   69  97793.4%   BBIL-AP BHARTI BT INTERNET
   LTD.
AS18566 1030   89  94191.4%   COVAD - Covad Communications
   Co.
AS8151  1161  408  75364.9%   Uninet S.A. de C.V.
AS11492 1164  420  74463.9%   CABLEONE - CABLE ONE
AS22773  806   74  73290.8%   CCINET-2 - Cox Communications
   Inc.
AS6478  1121  396  72564.7%   ATT-INTERNET3 - AT&T WorldNet
   Services
AS19262  800  184  61677.0%   VZGNI-TRANSIT - Verizon
   Internet Services Inc.
AS17488  879  265  61469.9%   HATHWAY-NET-AP Hathway IP Over
   Cable Internet
AS15270  598   41  55793.1%   AS-PAETEC-NET - PaeTec
   Communications, Inc.
AS18101  609   61  54890.0%   RIL-IDC Reliance Infocom Ltd
   Internet Data Centre,
AS7545   725  230  49568.3%   TPG-INTERNET-AP TPG Internet
   Pty Ltd
AS7018  1517 1025  49232.4%   ATT-INTERNET4 - AT&T WorldNet
   Services
AS2386  1263  786  47737.8%   INS-AS - AT&T Data
   Communications Services
AS6197  1030  570  46044.7%   BATI-ATL - BellSouth Network
   Solutions, Inc
AS17676  504   64  44087.3%   GIGAINFRA BB TECHNOLOGY Corp.
AS4766   816  378  43853.7%   KIXS-AS-KR Korea Telecom
AS4812   524   87  43783.4%   CHINANET-SH-AP China Telecom
   (Group)
AS5668   660  259  40160.8%   AS-5668 - CenturyTel Internet
   Holdings, Inc.
AS7011   981  589  39240.0%   FRONTIER-AND-CITIZENS -
   Frontier Communications of
   America, Inc.
AS3356   825  443  38246.3%   LEVEL3 Level 3 Communications
AS4808   499  124  37575.2%   CHINA169-BJ CNCGROUP IP
   network China169 Beijing
   Province Network
AS9443   450   76  37483.1%   INTERNETPRIMUS-AS-AP Primus
   Telecommunications
AS19916  569  206  36363.8%   ASTRUM-0001 - OLM LLC
AS4668   521  169  35267.6%   LGNET-AS-KR LG CNS
AS3602   412   76  33681.6%   AS3602-RTI - Rogers Telecom
   

BGP Update Report

2007-11-09 Thread cidr-report

BGP Update Report
Interval: 08-Oct-07 -to- 08-Nov-07 (32 days)
Observation Point: BGP Peering with AS2.0

TOP 20 Unstable Origin AS
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS9583   233754  2.8% 198.4 -- SIFY-AS-IN Sify Limited
 2 - AS16637  180622  2.1%2544.0 -- MTNNS-AS
 3 - AS8452   171181  2.0% 512.5 -- TEDATA TEDATA
 4 - AS8866   124431  1.5% 455.8 -- BTC-AS Bulgarian 
Telecommunication Company Plc.
 5 - AS288101893  1.2% 842.1 -- European Space Agency
 6 - AS558392117  1.1%1462.2 -- GIPNL Equant Benelux AS
 7 - AS949889079  1.1%  83.3 -- BBIL-AP BHARTI BT INTERNET LTD.
 8 - AS321568338  0.8% 104.8 -- AS3215 France Telecom - Orange
 9 - AS815162195  0.7%  46.8 -- Uninet S.A. de C.V.
10 - AS33783   54971  0.7% 432.8 -- EEPAD
11 - AS14390   52417  0.6% 936.0 -- CORENET - Coretel America, Inc.
12 - AS462152273  0.6% 353.2 -- UNSPECIFIED UNINET-TH
13 - AS12975   48837  0.6% 610.5 -- PALTEL-AS PALTEL Autonomous 
System
14 - AS26829   48482  0.6%   48482.0 -- YKK-USA - YKK USA,INC
15 - AS983543081  0.5% 339.2 -- GITS-TH-AS-AP Government 
Information Technology Services
16 - AS475042847  0.5% 189.6 -- CSLOXINFO-ISP-AS-AP CSLOXINFO 
Public Company Limited.
17 - AS702 41717  0.5%  67.4 -- AS702 Verizon Business EMEA - 
Commercial IP service provider in Europe
18 - AS17540   41638  0.5%   41638.0 -- MTL-AP Modern Terminals Limited
19 - AS24731   41612  0.5% 866.9 -- ASN-NESMA National Engineering 
Services and Marketing Company Ltd. (NESMA)
20 - AS28885   39435  0.5%1460.6 -- OMANTEL-NAP-AS OmanTel NAP


TOP 20 Unstable Origin AS (Updates per announced prefix)
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS26829   48482  0.6%   48482.0 -- YKK-USA - YKK USA,INC
 2 - AS17540   41638  0.5%   41638.0 -- MTL-AP Modern Terminals Limited
 3 - AS10275   23439  0.3%   11719.5 -- AS-UNITEDNETWORK - ABS-CBN 
International
 4 - AS43830   19779  0.2%9889.5 -- ADECCO-ASN Adecco IT Services
 5 - AS220729470  0.1%9470.0 -- DEFINITYHEALTH - Definity Health
 6 - AS427048944  0.1%8944.0 -- ELITENETWORK-AS SC Elite 
Network Communications SRL
 7 - AS382406168  0.1%6168.0 -- CALYONFINANCIAL-AS-JP Calyon 
Financial, Inc.
 8 - AS343825731  0.1%5731.0 -- ASSYRUS-SRL-AS Assyrus Srl 
Maintainer
 9 - AS43403   10812  0.1%5406.0 -- SVIAZ-PLUS-AS LLC "Sviaz Plus"
10 - AS382425034  0.1%5034.0 -- FORTIS-AU-AS Fortis Clearing 
Sydney
11 - AS360118420  0.1%4210.0 -- AHSYS-ASN - Atlantic Health 
System
12 - AS193344083  0.1%4083.0 -- SPORTLINE-DBC - SPORTLINE
13 - AS30707   11603  0.1%3867.7 -- 
14 - AS288132829  0.0%2829.0 -- VECERNJI-AS Vecernji list d.d.
15 - AS316712753  0.0%2753.0 -- AKTINFOSYS AKT 
Informationssysteme AG
16 - AS16637  180622  2.1%2544.0 -- MTNNS-AS
17 - AS126116842  0.1%2280.7 -- RKOM R-KOM Regensburger 
Telekommunikations GmbH & Co. KG
18 - AS139564400  0.1%2200.0 -- 
19 - AS219983970  0.1%1985.0 -- SETA - SETA
20 - AS22203   11806  0.1%1967.7 -- NAVITAIRE - Navitaire, Inc.


TOP 20 Unstable Prefixes
Rank Prefix Upds % Origin AS -- AS Name
 1 - 192.96.14.0/2487686  1.0%   AS16637 -- MTNNS-AS
 2 - 192.96.13.0/2487678  1.0%   AS16637 -- MTNNS-AS
 3 - 83.228.103.0/24   66558  0.7%   AS8866  -- BTC-AS Bulgarian 
Telecommunication Company Plc.
 4 - 209.163.125.0/24  51102  0.6%   AS14390 -- CORENET - Coretel America, Inc.
 5 - 12.108.254.0/24   48482  0.5%   AS26829 -- YKK-USA - YKK USA,INC
 6 - 203.83.127.0/24   41638  0.5%   AS17540 -- MTL-AP Modern Terminals Limited
 7 - 125.23.208.0/20   39085  0.4%   AS9498  -- BBIL-AP BHARTI BT INTERNET LTD.
 8 - 221.135.22.0/24   36157  0.4%   AS9583  -- SIFY-AS-IN Sify Limited
 9 - 210.18.10.0/2435463  0.4%   AS9583  -- SIFY-AS-IN Sify Limited
10 - 221.135.113.0/24  35328  0.4%   AS9583  -- SIFY-AS-IN Sify Limited
11 - 203.101.87.0/24   21737  0.2%   AS9498  -- BBIL-AP BHARTI BT INTERNET LTD.
12 - 206.49.195.0/24   18204  0.2%   AS18747 -- IFX-NW - IFX Communication 
Ventures, Inc.
13 - 83.228.59.0/2417915  0.2%   AS8866  -- BTC-AS Bulgarian 
Telecommunication Company Plc.
14 - 83.228.61.0/2417844  0.2%   AS8866  -- BTC-AS Bulgarian 
Telecommunication Company Plc.
15 - 83.228.71.0/2417237  0.2%   AS8866  -- BTC-AS Bulgarian 
Telecommunication Company Plc.
16 - 194.209.8.0/2415212  0.2%   AS3303  -- SWISSCOM Swisscom Solutions Ltd
17 - 90.80.16.0/24 14232  0.2%   AS43830 -- ADECCO-ASN Adecco IT Services
18 - 196.219.236.0/24  14132  0.2%   AS8452  -- TEDATA TEDATA
19 -