Re: Asian exchange points

2002-05-12 Thread Philip Smith
Richard, There are several exchange points, but their functions tend to be slightly different from what is understood in the US. IXes such as SOX (Singapore), HKIX (Hong Kong), JPIX NSP-IXP2 (Japan) and KIX KINX (Korea) tend to be the more oft quoted IXes in Asia and are familiar in design

New SubSeven outbreak?

2002-05-12 Thread Jeff Workman
All, I have seen 6 portscans looking for SubSeven on a /24 in the past 24 hours. It'd been a while since I had seen *any*, now I'm seeing all these. Is this a new outbreak/vulnerability, or have I just been lucky? Has anybody else seen an increase in scans on tcp port 27374? I scanned

Re: New SubSeven outbreak?

2002-05-12 Thread Johannes B. Ullrich
I have seen 6 portscans looking for SubSeven on a /24 in the past 24 hours. It'd been a while since I had seen *any*, now I'm seeing all these. Is this a new outbreak/vulnerability, or have I just been lucky? Has anybody else seen an increase in scans on tcp port 27374? There are a

Re: New SubSeven outbreak?

2002-05-12 Thread Jeff Workman
Stoned koala bears drooled eucalyptus spit in awe as Johannes B. Ullrich exclaimed: I have seen 6 portscans looking for SubSeven on a /24 in the past 24 hours. It'd been a while since I had seen *any*, now I'm seeing all these. Is this a new outbreak/vulnerability, or have I just

Re: BGP and aggregation

2002-05-12 Thread Scott Granados
Don't forget that if both sites use the same as even if the connection link drops they will not be able to see each other over the upstream provider as routers won't take the srutes from the same as. If this isn't a problem don't worry about it. If you wish to preserve connectivity

Re: BGP and aggregation

2002-05-12 Thread Scott Granados
- This is a great solution to a point. I did this, with the help of someone who reads this list frequently:) but you have to jump through some hoops should you wish both cities to reach each other. Assuming for example all your dns and mail servers are in one city you'd have to jump

Re: BGP and aggregation

2002-05-12 Thread Stephen J. Wilcox
Interesting point there Scott.. we were discussing just that at a recent IXP meeting I was at. Theres a number of different ways (well hacks) in which you can keep connectivity between two halves of an AS network in the event of a split. Is anyone out there actually doing something either

Re: Asian exchange points

2002-05-12 Thread Bill Woodcock
There are several exchange points, but their functions tend to be slightly different from what is understood in the US. IXes such as SOX (Singapore), HKIX (Hong Kong), JPIX NSP-IXP2 (Japan) and KIX KINX (Korea) tend to be the more oft quoted IXes in Asia and are familiar in

Re: BGP and aggregation

2002-05-12 Thread Stephen Griffin
In the referenced message, E.B. Dreger said: * BGP is an EGP, not an IGP BGP is one half of an IGP, it is the where to go half. You generally run another IGP along with it to provide the how to get there half. Most folks run isis or ospf to transport router loopbacks and other next-hop

Re: BGP and aggregation

2002-05-12 Thread Scott Granados
Actually I ran this way for a while as a primary. I had three sites attached via cogent entirely all announcing a /19 and the internally a /21 each and a couple /21's out of the primary location. In the main location was a 7507 and in the two other pops 6509's. We set ospf internally, set

Re: BGP and aggregation

2002-05-12 Thread E.B. Dreger
SJW Date: Sun, 12 May 2002 21:07:50 +0100 (BST) SJW From: Stephen J. Wilcox SJW Is anyone out there actually doing something either this or SJW similar to keep two halves connected in the event of a SJW split.. and have you actually run successfully on your SJW backup and maintained a

Re: BGP and aggregation

2002-05-12 Thread Andy Walden
On Sun, 12 May 2002, Stephen Griffin wrote: In the referenced message, Andy Walden said: Conditional Router Advertisement: http://www.american.com/warp/public/459/cond_adv.pdf As it sounds like he's using a single AS, the above may not be a fix, since a partitioned AS is still

Re: BGP and aggregation

2002-05-12 Thread Stephen Griffin
In the referenced message, Andy Walden said: On Sun, 12 May 2002, Stephen Griffin wrote: In the referenced message, Andy Walden said: Conditional Router Advertisement: http://www.american.com/warp/public/459/cond_adv.pdf As it sounds like he's using a single AS, the

Re: BGP and aggregation

2002-05-12 Thread Andy Walden
On Sun, 12 May 2002, Stephen Griffin wrote: BGP will discard any prefix with its own AS in the path, for loop prevention. Hence, one half of the AS would still be unable to reach the other half. This is why a partitioned AS is a failure condition. A tunnel is a means to keep the AS

Re: BGP and aggregation

2002-05-12 Thread Ralph Doncaster
isn't a problem don't worry about it. If you wish to preserve connectivity between cities you should have a back-up link or use different as's or gre tunnels:). Floating statics would be a less-hassle means to continue connectivity (with only 2 locations not much of a scaling issue).

Re: BGP and aggregation

2002-05-12 Thread Forrest W. Christian
On Sun, 12 May 2002, Stephen J. Wilcox wrote: Interesting point there Scott.. we were discussing just that at a recent IXP meeting I was at. Theres a number of different ways (well hacks) in which you can keep connectivity between two halves of an AS network in the event of a split. Is