Windstream BGP admin

2015-01-05 Thread Dennis Burgess
Got a change in windtream routing, massively down since the 23rd out of
denver, any Windstream admin want to shoot me a e-mail and talk J 

 

Thanks,

 

 

www.linktechs.net - 314-735-0270 - dmburg...@linktechs.net 

 



Re: Charter ARP Leak

2015-01-05 Thread John Kristoff
On Mon, 29 Dec 2014 14:23:56 -0500 (EST)
Jay Ashworth  wrote:

> From an intermediate routing standpoint, though, it would be easier
> to add an *adjacent* block, not one halfway across the address space,
> no?

One never knows how the address space is carved up.  Changing what
were once deemed reasonable addressing ideas, ultimately becoming
grossly suboptimal, often loses out to competing interests.

A long time ago, I arrived at a network where there were two major
sites with many LANs at each site. Generally speaking each LAN was a
department, but a department spanned both sites.  Each department/LAN
at a site started off with less than a /25 worth of nodes.

This was apparently all done at a time when RIPv1 was the norm and
multiple subnet sizes were not widely deployed if even available in the
gear deployed.

The arrangement I inherited was such that a department was assiged
a /24, with the lower half (a /25) network at one site, and the upper
half at the other.  As long as the organization's assigned /16 always
used /25's per network and departments split between sites fit into
the /25 things might have been fine for awhile. By the time I arrived
the address space was impossibly fragmented with some router
interfaces having many secondaries as departments arose, grew, split,
ceased to exist and new sites came online.  This had the now
predictable effect of turning a seemingly nice day one addressing plan
into a fragmented and secondary mess. That was over 15 years
ago and there are still remnants of the originally addressing plan in
place.

I wouldn't be too surprised or even too concerned about these sorts of
configurations that appear poorly designed in hindsight. They are
natural for most any complex system as it evolves.  It is all part of
the fun.

John


Re: How our young colleagues are being educated....

2015-01-05 Thread John Kristoff
On Thu, 25 Dec 2014 19:21:34 -0500
Miles Fidelman  wrote:

> Cisco as the basis of networking material? Does nobody use Comer, 
> Stallings, or Tannenbaum as basic texts anymore?

I currently use a Comer book.  I've also used a Tannenbaum book in the
past, but not recently.  My favorite book, when I've used it was Radia
Perlman's.

Increasingly I'm seeing a trend away from actually relying on books if
even requiring them to be read anymore.  This is both a trend with
faculty and students.  I frequently get asked if the book is required,
even when the course page clearly says it is.  Students and often
faculty often I find rely too heavily on Wikipedia pages, which I've
found myself going to update since they lead to wrong assumptions and
answers in questions I've assigned.

I like to augment, as many faculty do, classic or timely research papers
into assignments so that students are at least forced to look at
something other than vendor white papers and blog posts found in search
engines.

John


Re: The state of TACACS+

2015-01-05 Thread Matthew Newton
On Mon, Dec 29, 2014 at 04:25:56PM +0900, Randy Bush wrote:
> > Rfc6613: TLS or IPsec  transport is shown as mandatory for RADIUS over TCP.
> 
> sweet.  can you ref conforming implementations?

FreeRADIUS and Radiator can do RADSEC, as well as radsecproxy, so
it can be used to protect e.g. site-to-site proxying. I don't know
whether any switches/NASes can do it at present, though.

Matthew


-- 
Matthew Newton, Ph.D. 

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253,