Re: Carrier Grade NAT

2014-07-29 Thread excelsio

Not exactly what you probably want. But it´s actually working for me:

http://ipv6netro.blogspot.de/2013/10/asamap-application-capability-in-wide.html
http://enog.jp/~masakazu/vyatta/map/


Am 29.07.2014 16:45, schrieb Colton Conor:

We are looking for recommendations for a carrier grade nat solution. Who is
the leaders in this space? How do carrier grade NAT platforms integrate
with DHCP and DNS solutions? How do you keep track of copyright violations
in a CGNAT solution if multiple customers are sharing the same public IP
address?




Re: 10gbps peering subscriber switch recommendation

2014-01-08 Thread excelsio
That´s actually a topic, I was thinking ago some time ago. Why not take
a current TOR switch with 1. BGP support and 2. high buffer. Like
mentioned above we have Trident 2 bases switches. HP (no recommendation)
has its HP 5930 series but tells Routing table size 16000 entries
(IPv4), 8000 entries (IPv6), but this one has 4GB RAM, so plenty of
space for full tables. I haven´t tried it out myself, perhaps someone
tried on any other device: What will happen, if I give the switch a full
table? Is there a software limit by the vendor, which will simply cut
everything above? Or would it simply work?

Michael



Re: 10G standalone switch to access in data center, cheap

2013-08-22 Thread excelsio
Well, cheap (and new), i.e.

- take 1-2 Netgear XSM7224 with 24x 10GBaseT and 4x SFP+ (shared) each
- take 1-2 Netgear XSM7224S with 24x SFP+ and 4x 10GBaseT (shared) each
or
- take 3-6 Netgear XS708E with 8x 10GBaseT and 1x SFP+ (shared) each
- take 2-4 Netgear XS712T with 12x 10GBaseT and 2x SFP+ (shared) each

I´m still looking myself for something cheaper, like switches directly
bought/imported from original design manufacturers in low quantity.

Michael



Re: [Paper] B4: Experience with a Globally-Deployed Software Defined WAN

2013-08-18 Thread excelsio
So, where can I buy those google switches:
http://www.networking-forum.com/viewtopic.php?f=46t=29803




Re: IPAM

2013-08-10 Thread excelsio
I don´t know Northstar, but if you can export their tables into a *.csv,
you can easily import it into http://www.gestioip.net/

Michael

Am 07.08.2013 18:41, schrieb Natambu Obleton:
 I have customer that we deployed Northstar for their internal ip management 
 over 8 yrs ago. They are still using it, but it is slowly breaking on them. 
 Can someone recommend an IPAM solution that has a Northstar import option? 
 They have hundreds of entries detailing customer who was assigned the ip 
 address and I would like to avoid any data massaging. TIA




Re: OSPF Vulnerability - Owning the Routing Table

2013-08-03 Thread excelsio
So, only Cisco and Juniper are hit by this one? What about the rest?
Michael


Am 02.08.2013 21:34, schrieb John Stuppi (jstuppi):
 Yes, these advisories (from both Cisco and Juniper), covering CVE-2013-0149, 
 are both related to the announcement yesterday (1-Aug) at BlackHat regarding 
 the OSPF LSA Manipulation vulnerability. 

 Thanks,
 John

 “Optimism is the faith that leads to achievement. Nothing can be done without 
 hope and confidence”.


  


 John Stuppi, CISSP
 Technical Leader
 Strategic Security Research
 jstu...@cisco.com
 Phone: +1 732 516 5994
 Mobile: 732 319 3886

 CCIE, Security - 11154
 Cisco Systems
 Mail Stop INJ01/2/ 
 111 Wood Avenue South 
 Iselin, New Jersey 08830
 United States
 Cisco.com





Re: IPv6 support by wifi systems

2013-02-13 Thread excelsio
Rather old document from 2010: Cisco + IPv6 over CAPWAP protocol: 
http://d2zmdbbm9feqrf.cloudfront.net/2012/usa/pdf/BRKEWN-2010.pdf





Re: switch 10G standalone TOR, core to DC

2013-02-07 Thread excelsio
Well, talking about HP´s A5920/A5900 series. Last time I was looking, 
their virtual routing instances haven´t supported IPv4 multicast, nor 
IPv6 multicast/unicast, nor any policy based routing.


Michael



Re: HP IPv6 RA Guard

2011-12-04 Thread excelsio
Hi,

 sorry to disappoint you, but there´s a reason why HP bought H3C/3Com. And of 
course, those switches have some advanced features, as well:

 - IPV6 DHCP snooping
 - IPV6 ND detection
 - IPV6 ND snooping
 - SAVI (Source Address Validation), http://tools.ietf.org/wg/savi/

 Christian

 I wonder if this is evidence that they plan to continue to develop the 
 Procurve line and eventually abandon the 3Com line. Uncertainty of which 
 line would win out has kept me (and others I'm sure) from wanting to invest 
 in anything HP.