RE: Google wants to be your Internet

2007-01-30 Thread Mark D. Kaye

Hi,

PIX/ASA Supports IPv6 Apparently, see below.

Don't know anyone who has tested it yet though ;-)

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_
chapter09186a0080636f44.html

Mark 



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Joe Abley
Sent: 30 January 2007 01:34
To: Brandon Galbraith
Cc: nanog@merit.edu
Subject: Re: Google wants to be your Internet



On 29-Jan-2007, at 20:12, Brandon Galbraith wrote:

 On 1/29/07, Henning Brauer [EMAIL PROTECTED] wrote:

 * Joseph S D Yao [EMAIL PROTECTED] [2007-01-30 01:59]:
 
  IPv6 firewalls?  Where?  Good ones?

 OpenBSD's pf has support for v6 for years now.

 Do a fair amount of appliance firewalls support it?

To be fair, I think the question was about good firewalls, not  
appliances.


Joe



RE: Q on what IGP routing protocol to use for supplying only gateway address

2006-09-14 Thread Mark D. Kaye
Hi,

In Answer to you question re Windows 2000/2k3 you would just need to install
routing and remote access service (RRAS) - part of windows, you can then add
OSPF as a routing protocol and tell it which adapter to listen on.

I have used this successfully when setting ISA Server up with a default
gateway off one nic (pointing towards the net - protected by a decent
firewall) and another pointing at the local network, one can then learn the
LAN routes using OSPF or RIP etc. and have a default route out the other
NIC.

Mark Kaye


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
william(at)elan.net
Sent: 14 September 2006 18:55
To: Roland Dobbins
Cc: [EMAIL PROTECTED]
Subject: Re: Q on what IGP routing protocol to use for supplying only
gateway address



On Thu, 14 Sep 2006, Roland Dobbins wrote:

 On Sep 14, 2006, at 10:35 AM, william(at)elan.net wrote:

 Any suggestion as to what IGP protocol is best for this scenario?

 This is more of a cisco-nsp question, but probably OSPF, as it's supported
 by the routing daemons on most *NIXes out of the box.  I don't know about 
 Windows.

If this was 5+ years ago, I'd have said RIP as it works great for 
supplying only gateway address, but I want RIP to go RIP and will
not use it again. So yes OSPF seems like best choice, but I was
hoping something simple for gateway-only is available. I've no idea
yet how to deal with Windows (all win2000 and win2003), anybody?

 Are you doing anycasting or something?

Yes, anycasting will be involved but only for very small number of
servers (all linux) - that is kind-of separate issue. The equipment
itself however will only see local gateway addresses (obviously), so
it should not care or know about it.

 If simple redundancy in the default gateway is the goal, another (and 
 probably simpler) method is to implement HSRP or GLBP between your routers

 which are serving the hosts in question.

Can't use HSRP in this case (or IVRP or whatever else its called with 
non-cisco options) - too long to explain why.

-- 
William Leibzon
Elan Networks
[EMAIL PROTECTED]


smime.p7s
Description: S/MIME cryptographic signature


RE: european colo/bandwidth facilites?

2006-08-16 Thread Mark D. Kaye

Hi,

I can only comment from a UK perspective but...

Personally I would check the Colo facility contracts very carefully before 
agreeing.

LINX have just reviewed contracts within some of the major facilities in London 
TelecityRedbus (Now Merged in to one company) and Telehouse Europe

The Review made very interesting reading, the contract terms of these to 
companies are very different, particularily with attention to price rises and 
notice periods required.

We have fecilities within Telehouse (Docklands) and I can certainly commend 
them for good service, we had facilities with Redbus before the merger but as a 
result of the merge Redbus's prices went vertical.  We no longer have 
facilities with TCRB as a result.  It would also appear a few other companies 
have recently taken this view as well.  

One thing which I have found to be useful within Telehouse is free (within 
reason) use of there remote hands for simple problems i.e. reboots etc. 

Currently there also seems to be good words being said for InterXion, I believe 
LINX are evaluating InterXion as a LINX node within London.

Also within London a very useful company has come to light www.datahop.it they 
are providing very cheap interconnects between various different facilities and 
in particular I know they are able to get LINX and LONAP connections to 
facilities which don't currently house either of those XP's

Mark Kaye
Eaton Kaye Ltd.



 -Ursprüngliche Nachricht-
 Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im 
 Auftrag von matthew zeier
 Gesendet: Mittwoch, 16. August 2006 08:19
 An: nanog@merit.edu
 Betreff: european colo/bandwidth facilites?
 
 
 
 My employer (Mozilla Corp) is looking to build out a site in 
 Europe (and maybe, eventually Japan).  Unfortunately I have 
 little/no experience outside of NA and don't know which 
 players (both for colo space and for bandwidth) would be best 
 to talk to.
 
 Looking for pointers, and sales folk are welcome to email as well.
 
 - mz
 
 



RE: Zebra/linux device production networking?

2006-06-06 Thread Mark D. Kaye

Hi,

I am also newbie poster so likewise plz be kind.

I tend to agree with the comments made so far, however depending upon
the business, budgets are not always available that might match the
requirements and hence I can to some degree understand the use of such
boxes for small organisations.  
I would be interested to know how many software (for want of a better
description) routers are in live production in this kind of environment
i.e. the 99.% Uptime variety, from speaking to people albeit
randomly in data centres it would seem to be more common than one might
expect.
Also does anyone have any peering policies which would exclude peers
with software routers specifically, most have a requirement for the
ability to support stable BGP peering but I have not seen any specific
exclusions for such devices? 

Mark


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Tiffany Snyder
Sent: 06 June 2006 23:29
To: Nick Burke
Cc: nanog@merit.edu
Subject: Re: Zebra/linux device production networking?

IMHO, it's a bad idea. A less intrusive alternative might be a FreeBSD
based platform running Xorp/Quagga.

Tiffany.
On 6/6/06, Nick Burke [EMAIL PROTECTED] wrote:

Greetings fellow nanogers,

Long time lurker, first time poster (please, be gentle!).

After looking at the archives, I didn't see this particular discussion,
so here we go.

First, a little background.. 
My CTO made my stomach curdle today when he announced that he wanted to
do away with all our cisco [routers] and instead use Linux/zebra boxen.
We are a small company, so naturally penny pinching is the primary
motivation. That, and the sheer joy of watching me squirm. He has
informed me that he has found many people who do this for their core
devices. I'm not so certain about this whole situation, so I humbly
ask: 

How many of you have actually use(d) Zebra/Linux as a routing device
(core and/or regional, I'd be interested in both) in a production (read:
99.999% required, hsrp, bgp, dot1q, other goodies) environment?

And, if you care to spend this much time, what pitfalls/benefits did you
find out about after implementation?

Has there been any discussion (or musings) of moving towards such a
solution? I've seen a lot of articles talking about it, but I've not 
actually seen many network operators chiming in.

Here's the article that started it all (this was featured on /., so
likely you've read it already).

http://www.businessweek.com/technology/content/nov2004/tc20041129_5206_t
c024.htm
and another:
http://www.networkworld.com/community/?q=node/5693

Feel free to respond off list. If anyone else is interested, I will of
course summarize to list or to individuals.

(ps, particulars are deliberately not included.. I'm not looking for
advice, just if anyone has any solid experience with this..)