Re: OOB core router connectivity wish list

2013-01-31 Thread Steven Bellovin
On Jan 9, 2013, at 1:18 PM, Leo Bicknell wrote: > In a message written on Wed, Jan 09, 2013 at 06:39:28PM +0100, Mikael > Abrahamsson wrote: >> IPMI is exactly what we're going for. > > For Vendors that use a "PC" motherboard, IPMI would probably not be > difficult at all! :) > > I think IPMI

RE: OOB core router connectivity wish list

2013-01-14 Thread Jamie Bowden
> From: Mikael Abrahamsson [mailto:swm...@swm.pp.se] > On Sat, 12 Jan 2013, Matthew Petach wrote: > > > Thank goodness ethernet never has problems with negotiation going > awry, > > and coming up with mismatched duplexes, and vendors never had to > > implement "no negotiation-auto" in their config

Re: OOB core router connectivity wish list

2013-01-13 Thread joel jaeggli
On 1/13/13 12:12 AM, Mikael Abrahamsson wrote: On Sat, 12 Jan 2013, Matthew Petach wrote: Thank goodness ethernet never has problems with negotiation going awry, and coming up with mismatched duplexes, and vendors never had to implement "no negotiation-auto" in their configs because you could

Re: OOB core router connectivity wish list

2013-01-13 Thread Nick Hilliard
On 13/01/2013 07:42, Matthew Petach wrote: > PS--while we're at it, can I have a pony? The day that we see good quality trouble-free OOB on all networking kit that everyone is happy about will be the day that vendors shower us with ponies for all. I'm quite sure of it. Nick

Re: OOB core router connectivity wish list

2013-01-13 Thread Mikael Abrahamsson
On Sat, 12 Jan 2013, Matthew Petach wrote: Thank goodness ethernet never has problems with negotiation going awry, and coming up with mismatched duplexes, and vendors never had to implement "no negotiation-auto" in their configs because you couldn't count on everyone's implementations working

Re: OOB core router connectivity wish list

2013-01-12 Thread Matthew Petach
On Sat, Jan 12, 2013 at 6:26 PM, Christopher Morrow wrote: > On Sat, Jan 12, 2013 at 3:26 PM, Nick Hilliard wrote: >> I want OOB with ethernet, MDIX, 100base-TX or 1000base-TX, with DHCP client >> support. With a cherry. > > and auto configuration that works? :) reliably? with your > switch/rout

Re: OOB core router connectivity wish list

2013-01-12 Thread Jared Mauch
On Jan 12, 2013, at 2:10 AM, Nikolay Shopik wrote: >> I had reverse tunnel from one of our DC's over a 3/4g usb dongle that >> had a measured availability of less than 50% which oddly I didn't >> consider acceptable. > > How is that possible? Nothing stops you from having the device auto-VPN b

Re: OOB core router connectivity wish list

2013-01-12 Thread Christopher Morrow
On Sat, Jan 12, 2013 at 3:26 PM, Nick Hilliard wrote: > I want OOB with ethernet, MDIX, 100base-TX or 1000base-TX, with DHCP client > support. With a cherry. and auto configuration that works? :) reliably? with your switch/router upstream? :)

Re: OOB core router connectivity wish list

2013-01-12 Thread Nick Hilliard
On 12/01/2013 18:54, Jimmy Hess wrote: > The year on the calendar has little to do with the usefulness of > rs232, there has been no thorough replacement for every situation. Tell that to Juniper who appear to think that running an RE console at 9600 baud is actually OK in a emergency situation in

Re: OOB core router connectivity wish list

2013-01-12 Thread Jimmy Hess
On 1/10/13, Nick Hilliard wrote: > On 10/01/2013 13:51, Jared Mauch wrote: > - rs232: please no. it's 2013. I don't want or need a protocol which > was designed for access speeds appropriate to the 1980s. [snip] Maybe stop with rs232 versus Ethernet, and implement _both_ as separate OOB,

Re: OOB core router connectivity wish list

2013-01-12 Thread Dobbins, Roland
On Jan 10, 2013, at 9:35 AM, Christopher Morrow wrote: > I don't think roland was really saying that normal netflow from a device in > production pushing a few hundred gbps of traffic would be > appropriate to ship out the OOB network... or I hope that wasn't his point. I > don't think oob netw

Re: OOB core router connectivity wish list

2013-01-11 Thread Nikolay Shopik
On 12.01.2013 3:44, Joel jaeggli wrote: > On 1/11/13 02:44 , Nikolay Shopik wrote: >> Also getting POTS line in your pop sometimes get tricky. 2G/3G modems >> with cheap plans cost like 10$/month (dunno about US though), thats >> almost same as POTS line. > > They don't generally have public IPs (

Re: OOB core router connectivity wish list

2013-01-11 Thread William Herrin
On Fri, Jan 11, 2013 at 7:09 PM, Jay Ashworth wrote: > The issue wasn't diversity, it was "is my POTS on Central Battery"; sorry > for the comparative red herring. The issue was: is my POTS going to survive an extended regional power outage that my cellular/DSL/cable modem doesn't, making it a su

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
on, and I doubt >they would tell you details of their power systems. > > > > >- Original Message - > >From: "Jay Ashworth" >To: "Walter Keen" , "William Herrin" > >Cc: "NANOG" >Sent: Friday, January 11, 2013 4:09:25

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
A POTS circuit necessarily terminates on a piece of gear with a specific CLLI, generally discernable at order time. What that gear will be, and if it's in a CO with a "real" battery plant is also known in advance. And, to tie it back on topic, the odds of a core router being in a place where i

Re: OOB core router connectivity wish list

2013-01-11 Thread Walter Keen
t; Sent: Friday, January 11, 2013 4:09:25 PM Subject: Re: OOB core router connectivity wish list The issue wasn't diversity, it was "is my POTS on Central Battery"; sorry for the comparative red herring. - jra Walter Keen wrote: I work for a rural Telecom in northwest

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
estimates the distance of that copper pair. Then you can >guess where you might be connected to. > > > > >----- Original Message - > >From: "William Herrin" >To: "Jay Ashworth" >Cc: "NANOG" >Sent: Friday, January 11, 2013

Re: OOB core router connectivity wish list

2013-01-11 Thread Walter Keen
line that measures and estimates the distance of that copper pair. Then you can guess where you might be connected to. - Original Message - From: "William Herrin" To: "Jay Ashworth" Cc: "NANOG" Sent: Friday, January 11, 2013 2:30:48 PM Subject: Re

Re: OOB core router connectivity wish list

2013-01-11 Thread Joel jaeggli
On 1/11/13 02:44 , Nikolay Shopik wrote: > Also getting POTS line in your pop sometimes get tricky. 2G/3G modems > with cheap plans cost like 10$/month (dunno about US though), thats > almost same as POTS line. They don't generally have public IPs (that can be arranged). verizon 4G cards have ipv6

Re: OOB core router connectivity wish list

2013-01-11 Thread William Herrin
On Fri, Jan 11, 2013 at 4:43 PM, Jay Ashworth wrote: > You are suggesting that it is *at all* difficult for a technically competent > end-user to determine whether a given new POTS line will go to a CO or to an > RSU? Well, let me treat this as an opportunity to learn. How does one arrange for a

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
- Original Message - > From: "William Herrin" > On Fri, Jan 11, 2013 at 1:26 PM, Jay Ashworth wrote: > > Oh, I dunno, Bill. Sure there are lots more RSUs than there used to be, > > but at least it's not all *that* hard to tell if you're connected to one. > > > > Much easier than, say, fi

Re: OOB core router connectivity wish list

2013-01-11 Thread William Herrin
On Fri, Jan 11, 2013 at 1:26 PM, Jay Ashworth wrote: > Oh, I dunno, Bill. Sure there are lots more RSUs than there used to be, > but at least it's not all *that* hard to tell if you're connected to one. > > Much easier than, say, finding out if both sides of your loop have been > groomed into the

Re: OOB core router connectivity wish list

2013-01-11 Thread Jay Ashworth
- Original Message - > From: "William Herrin" > On Thu, Jan 10, 2013 at 11:41 AM, Randy Whitney > wrote: > > Nothing beats POTS in a broad power outage scenario. Numerous power > > outages > > have taken down mobile service completely while the POTS lines > > stayed up as > > it carries

Re: OOB core router connectivity wish list

2013-01-11 Thread Nikolay Shopik
Also getting POTS line in your pop sometimes get tricky. 2G/3G modems with cheap plans cost like 10$/month (dunno about US though), thats almost same as POTS line. On 10/01/13 20:18, William Herrin wrote: > Dial up with PPP and then cross the ethernet? Drop off a cellular > modem with IP service i

Re: OOB core router connectivity wish list

2013-01-10 Thread Steve Meuse
On Thu, Jan 10, 2013 at 12:08 PM, Jared Mauch wrote: > > > > Not sure about you, but I've used the ability for a POTS line to either > ring or give me a modem tone to determine the power status at the site. > > - Jared > When I worked in the BBN NOC, we used the customers fax line to determine i

Re: OOB core router connectivity wish list

2013-01-10 Thread Saku Ytti
On (2013-01-10 11:52 -0600), Charles N Wyble wrote: > I have every device hooked to this. Pdus, routers, switches, vm, storage > servers. That allows me to get console and power cycle every device. > > What more would I want? Dialup means I need to be in a place I can hook up a > modem. Not t

Re: OOB core router connectivity wish list

2013-01-10 Thread Charles N Wyble
I have a Cyclades acs-48 console server. Direct power and Ethernet drop from the ceiling with a public ip. In my subnet, but not through my routers/switches or pdus. Completely out of band, except for relying on colo power/net, which if that's not up then oob is worthless to me anyway. I have e

Re: OOB core router connectivity wish list

2013-01-10 Thread Saku Ytti
On (2013-01-10 12:08 -0500), Jared Mauch wrote: > Not sure about you, but I've used the ability for a POTS line to either ring > or give me a modem tone to determine the power status at the site. So the modem is not PSTN powered, so if it responds, pop must be powered? Wouldn't any old CPE on an

Re: OOB core router connectivity wish list

2013-01-10 Thread Warren Bailey
age From: Christopher Morrow Date: 01/10/2013 9:24 AM (GMT-08:00) To: Warren Bailey Cc: b...@herrin.us,rcar...@network1.net,nanog@nanog.org Subject: Re: OOB core router connectivity wish list On Thu, Jan 10, 2013 at 12:16 PM, Warren Bailey wrote: > Why is Satellite not a good OOB option? >

Re: OOB core router connectivity wish list

2013-01-10 Thread William Herrin
On Thu, Jan 10, 2013 at 12:16 PM, Warren Bailey wrote: > Why is Satellite not a good OOB option? Sometimes it is, and a larger colo could probably make another few nickles selling connections to an OOB access network which included, as one of the ways in, a satellite link. Regards, Bill Herrin

Re: OOB core router connectivity wish list

2013-01-10 Thread Nick Hilliard
On 10/01/2013 16:52, Saku Ytti wrote: > If POP is powerless, where will be POTS powered RS232 Modem connect to? To the same power feed as the router you're trying to rescue. If that feed has no power, it's time to take out the gerbil wheel. Nick

Re: OOB core router connectivity wish list

2013-01-10 Thread Christopher Morrow
On Thu, Jan 10, 2013 at 12:16 PM, Warren Bailey wrote: > Why is Satellite not a good OOB option? > inside iron boxes satellite signal is 'hard'. getting a roof mounted antenna is extra cost/complexity. or so some thinking goes.

Re: OOB core router connectivity wish list

2013-01-10 Thread Warren Bailey
Why is Satellite not a good OOB option? >From my Galaxy Note II, please excuse any mistakes. Original message From: William Herrin Date: 01/10/2013 8:20 AM (GMT-08:00) To: Randy Carpenter Cc: nanog@nanog.org Subject: Re: OOB core router connectivity wish list On Thu,

Re: OOB core router connectivity wish list

2013-01-10 Thread Steve Meuse
On Thu, Jan 10, 2013 at 11:41 AM, Randy Whitney wrote > > > Nothing beats POTS in a broad power outage scenario. Numerous power > outages have taken down mobile service completely while the POTS lines > stayed up as it carries its own power by design. > -- > Randy > It's been a while since I've tr

Re: OOB core router connectivity wish list

2013-01-10 Thread Jared Mauch
On Jan 10, 2013, at 11:52 AM, Saku Ytti wrote: > On (2013-01-10 11:41 -0500), Randy Whitney wrote: > >> Nothing beats POTS in a broad power outage scenario. Numerous power >> outages have taken down mobile service completely while the POTS >> lines stayed up as it carries its own power by desig

Re: OOB core router connectivity wish list

2013-01-10 Thread William Herrin
On Thu, Jan 10, 2013 at 11:41 AM, Randy Whitney wrote: > Nothing beats POTS in a broad power outage scenario. Numerous power outages > have taken down mobile service completely while the POTS lines stayed up as > it carries its own power by design. Carries it from somewhere that has to remain pow

Re: OOB core router connectivity wish list

2013-01-10 Thread Saku Ytti
On (2013-01-10 11:41 -0500), Randy Whitney wrote: > Nothing beats POTS in a broad power outage scenario. Numerous power > outages have taken down mobile service completely while the POTS > lines stayed up as it carries its own power by design. Is your RS232 Modem POTS powered? If POP is powerle

Re: OOB core router connectivity wish list

2013-01-10 Thread Randy Whitney
On 1/10/2013 11:18 AM, William Herrin wrote: On Thu, Jan 10, 2013 at 1:24 AM, Randy Carpenter wrote: On Wed, 9 Jan 2013, Randy Carpenter wrote: My main requirements would be: 1. Something that is *not* network (ethernet or otherwise) (isn't that the point of OOB?) I don't understand this at

Re: OOB core router connectivity wish list

2013-01-10 Thread William Herrin
On Thu, Jan 10, 2013 at 1:24 AM, Randy Carpenter wrote: >> On Wed, 9 Jan 2013, Randy Carpenter wrote: >> > My main requirements would be: >> > >> > 1. Something that is *not* network (ethernet or otherwise) (isn't >> > that the point of OOB?) >> >> I don't understand this at all. Why can't an OOB

Re: OOB core router connectivity wish list

2013-01-10 Thread Michael Thomas
On 01/10/2013 07:02 AM, Jared Mauch wrote: On Jan 10, 2013, at 9:51 AM, Mikael Abrahamsson wrote: I certainly want to use something more modern, having run Xmodem to load images into devices or net-booted systems with very large images in the past… I've seen all sorts of creative ways to do t

Re: OOB core router connectivity wish list

2013-01-10 Thread Saku Ytti
On (2013-01-10 09:54 -0500), Jared Mauch wrote: > > I don't think you can get ethernet and transport out-of-the-area in > > some places at a reasonable cost, so having serial-console I think is > > still a requirement. > > Some of the POTS carriers are trying to jettison their equipment before th

Re: OOB core router connectivity wish list

2013-01-10 Thread Christopher Morrow
On Thu, Jan 10, 2013 at 9:51 AM, Mikael Abrahamsson wrote: > On Thu, 10 Jan 2013, Christopher Morrow wrote: > >>> - rs232: please no. it's 2013. I don't want or need a protocol >>> which >>> was designed for access speeds appropriate to the 1980s. >> >> >> I don't think you can get ether

Re: OOB core router connectivity wish list

2013-01-10 Thread Christopher Morrow
On Thu, Jan 10, 2013 at 9:44 AM, wrote: >> I don't think you can get ethernet and transport out-of-the-area in >> some places at a reasonable cost, so having serial-console I think is >> still a requirement. > > TDM is disappearing quickly in at least some parts of the world. We > may not be quit

Re: OOB core router connectivity wish list

2013-01-10 Thread Jared Mauch
On Jan 10, 2013, at 9:51 AM, Mikael Abrahamsson wrote: > On Thu, 10 Jan 2013, Christopher Morrow wrote: > >>>- rs232: please no. it's 2013. I don't want or need a protocol >>> which >>> was designed for access speeds appropriate to the 1980s. >> >> I don't think you can get ethernet

Re: OOB core router connectivity wish list

2013-01-10 Thread Saku Ytti
On (2013-01-10 09:35 -0500), Christopher Morrow wrote: > I don't think you can get ethernet and transport out-of-the-area in > some places at a reasonable cost, so having serial-console I think is > still a requirement. I don't understand this point. Where does your RS232 port go? It goes to Cons

Re: OOB core router connectivity wish list

2013-01-10 Thread Jared Mauch
On Jan 10, 2013, at 9:35 AM, Christopher Morrow wrote: >> >>- rs232: please no. it's 2013. I don't want or need a protocol which >> was designed for access speeds appropriate to the 1980s. > > I don't think you can get ethernet and transport out-of-the-area in > some places at a reas

Re: OOB core router connectivity wish list

2013-01-10 Thread Mikael Abrahamsson
On Thu, 10 Jan 2013, Christopher Morrow wrote: - rs232: please no. it's 2013. I don't want or need a protocol which was designed for access speeds appropriate to the 1980s. I don't think you can get ethernet and transport out-of-the-area in some places at a reasonable cost, so having

Re: OOB core router connectivity wish list

2013-01-10 Thread sthaug
> I don't think you can get ethernet and transport out-of-the-area in > some places at a reasonable cost, so having serial-console I think is > still a requirement. TDM is disappearing quickly in at least some parts of the world. We may not be quite there yet, but I think it's entirely reasonable

Re: OOB core router connectivity wish list

2013-01-10 Thread Christopher Morrow
On Thu, Jan 10, 2013 at 9:10 AM, Nick Hilliard wrote: > - netflow: seriously, this is not an appropriate sort of port of > exporting > netflow. this is a "your RP is toast" recovery mechanism, at which point > netflow is probably long gone. it's possible that roland was saying that the

Re: OOB core router connectivity wish list

2013-01-10 Thread Nick Hilliard
On 10/01/2013 13:51, Jared Mauch wrote: > We have encountered cases where a vendor TFTP implementation + latency > from the ROMMON can take a few hours to load images. I'm for ditching > TFTP and replacing it with HTTP. This forces them to put in a TCP > stack, and hopefully something that can wi

Re: OOB core router connectivity wish list

2013-01-10 Thread Blake Dunlap
I absolutely agree that USB is a bad way to go with this, as well as web management. I have no interest in trying to use some terrible web app to bring a network back up when simple 300 baud would suffice. I've got no problem with telnet/ssh, although I hate the idea of needing to know an ip addre

Re: OOB core router connectivity wish list

2013-01-10 Thread Saku Ytti
On (2013-01-10 08:57 -0500), Jared Mauch wrote: > I am very much against USB consoles. there can be a whole plethora of issues > involved from OS-level to the device-level. When I'm on the console, things > have already gone bad. I don't need to find out if the vendor has the right > 'entitl

Re: OOB core router connectivity wish list

2013-01-10 Thread Jared Mauch
On Jan 9, 2013, at 12:34 PM, Saku Ytti wrote: > Having RS232 or USB console on forwarding-plane is not OOB. And even OOB > version of these is of limited value, you can't send images over them, you > can't multiplex over them and RS232 OOB 'server' costs more than switch. So > you get less and y

Re: OOB core router connectivity wish list

2013-01-10 Thread Jared Mauch
On Jan 9, 2013, at 11:18 AM, William Herrin wrote: >> [P1]: It should be possible to transfer data using tftp, ftp and scp (ftp >> client on the OOB device, scp being used to transfer data *to* the device >> (OOB being scp server). > > For security and performance reasons, FTP has no place in a

Re: OOB core router connectivity wish list

2013-01-10 Thread Saku Ytti
On (2013-01-10 10:48 +), Dobbins, Roland wrote: > No it isn't, any more than SNMP is a task for those interfaces. Sending flowrecords to your slow ppc CPU just to allow export in non-HW interface is silly, when HW can export it directly, without ever hitting your control-plane. Polling SNMP i

Re: OOB core router connectivity wish list

2013-01-10 Thread Mikael Abrahamsson
On Thu, 10 Jan 2013, Dobbins, Roland wrote: Of course you do - else you're deaf, dumb, and blind at precisely the time you most need complete network visibility, i.e., during a disruptive event of some sort. You and me seem to talk about different types of disasters. In my type of disaster,

Re: OOB core router connectivity wish list

2013-01-10 Thread Dobbins, Roland
On Jan 10, 2013, at 6:15 AM, Mikael Abrahamsson wrote: > I definitely do not want SNMP and netflow on my disaster recovery OOB network. Of course you do - else you're deaf, dumb, and blind at precisely the time you most need complete network visibility, i.e., during a disruptive event of some

Re: OOB core router connectivity wish list

2013-01-10 Thread Mikael Abrahamsson
On Thu, 10 Jan 2013, Dobbins, Roland wrote: No it isn't, any more than SNMP is a task for those interfaces. Well, then what you're looking for is not what we're looking for (?). You seem to want the type of classic mgmt ethernet currently residing on high end router platforms (on the RP) and

Re: OOB core router connectivity wish list

2013-01-10 Thread Dobbins, Roland
On Jan 10, 2013, at 2:15 AM, Saku Ytti wrote: > That is task for on-band interfaces, which attach to your forwarding-logic. No it isn't, any more than SNMP is a task for those interfaces. > To export flow, you need port to be connected to your forwarding hardware, > not control-plane and certa

RE: OOB core router connectivity wish list

2013-01-10 Thread Adam Vitkovsky
>"CMP" this is what we need. +1000

Re: OOB core router connectivity wish list

2013-01-09 Thread Mikael Abrahamsson
On Thu, 10 Jan 2013, Randy Carpenter wrote: How do I connect to it from many miles away when the network is down? I have connected to a misbehaving border device at a remote network via dial-up before, and was able to get it back up and running. I would not have been able to do that if the onl

Re: OOB core router connectivity wish list

2013-01-09 Thread Saku Ytti
> I completely disagree. The ability for serial to go over POTS makes it > ridiculously cheap compared to building a reliable ethernet connection over > hundreds or thousands of miles. This is identical to ethernet. You need external device then, dial-up modem or CPE, no difference. > The sep

Re: OOB core router connectivity wish list

2013-01-09 Thread Saku Ytti
On (2013-01-09 22:05 -0500), Randy Carpenter wrote: > 1. Something that is *not* network (ethernet or otherwise) (isn't that the > point of OOB?) No. This is not what OOB means. Out-of-band means not fate-sharing your production network. OOB networks are networks, running ethernet, frame-relay,

Re: OOB core router connectivity wish list

2013-01-09 Thread Saku Ytti
On (2013-01-09 23:17 +), Dobbins, Roland wrote: > Flow telemetry export - many of these so-called 'management' ports can't be > used to export flow, oddly enough. That is task for on-band interfaces, which attach to your forwarding-logic. OOB is separate component, really only relying on sam

Re: OOB core router connectivity wish list

2013-01-09 Thread Randy Carpenter
- Original Message - > On Wed, 9 Jan 2013, Randy Carpenter wrote: > > My main requirements would be: > > > > 1. Something that is *not* network (ethernet or otherwise) (isn't > > that the point of OOB?) > > I don't understand this at all. Why can't an OOB network be ethernet > based towa

Re: OOB core router connectivity wish list

2013-01-09 Thread Mikael Abrahamsson
On Wed, 9 Jan 2013, Randy Carpenter wrote: My main requirements would be: 1. Something that is *not* network (ethernet or otherwise) (isn't that the point of OOB?) I don't understand this at all. Why can't an OOB network be ethernet based towards the equipment needing management? 2. Some

Re: OOB core router connectivity wish list

2013-01-09 Thread Randy Carpenter
- Original Message - > Once upon a time, Randy Carpenter said: > > Likewise OS vendors are increasingly dropping support for > > installing OSes via serial port (RHEL, VMWare, etc.) > > > > At leaset with RHEL, you can make your own boot image that gets rid > > of the asinine splash scr

Re: OOB core router connectivity wish list

2013-01-09 Thread Warren Bailey
Uplogix has a pretty rad solution.. >From my Galaxy Note II, please excuse any mistakes. Original message From: Randy Carpenter Date: 01/09/2013 7:07 PM (GMT-08:00) To: Mikael Abrahamsson Cc: nanog@nanog.org Subject: Re: OOB core router connectivity wish list My m

Re: OOB core router connectivity wish list

2013-01-09 Thread Chris Adams
Once upon a time, Randy Carpenter said: > Likewise OS vendors are increasingly dropping support for installing OSes via > serial port (RHEL, VMWare, etc.) > > At leaset with RHEL, you can make your own boot image that gets rid of the > asinine splash screen (which is the only thing that causes

Re: OOB core router connectivity wish list

2013-01-09 Thread Randy Carpenter
My main requirements would be: 1. Something that is *not* network (ethernet or otherwise) (isn't that the point of OOB?) 2. Something that is standard across everything, and can be aggregated easily onto a "console server" or the like I don't really see what is wrong with with keeping the seri

Re: OOB core router connectivity wish list

2013-01-09 Thread Dobbins, Roland
On Jan 9, 2013, at 9:37 AM, Mikael Abrahamsson wrote: > http://swm.pp.se/oob.txt Flow telemetry export - many of these so-called 'management' ports can't be used to export flow, oddly enough. --- Roland Dobbins //

Re: OOB core router connectivity wish list

2013-01-09 Thread Hal Murray
It might help clarify things if you added two (hopefully) short sections: One discussing how to get off the ground. How do I get my ssh key on a factory-reset box? Another discussing security. There may be conflicting requirements for different usage scenarios. -- These are my opinio

Re: OOB core router connectivity wish list

2013-01-09 Thread Saku Ytti
On (2013-01-09 10:18 -0800), Leo Bicknell wrote: > I also still think there's a lot of potential here to take gigantic > steps backwards. Replacing a serial console with a Java applet in > a browser (a la most IPMI devices) would be a huge step backwards. > Today it's trival to script console acc

Re: OOB core router connectivity wish list

2013-01-09 Thread Leo Bicknell
In a message written on Wed, Jan 09, 2013 at 06:39:28PM +0100, Mikael Abrahamsson wrote: > IPMI is exactly what we're going for. For Vendors that use a "PC" motherboard, IPMI would probably not be difficult at all! :) I think IPMI is a pretty terrible solution though, so if that's your target I

Re: OOB core router connectivity wish list

2013-01-09 Thread tglassey
On 1/9/2013 9:12 AM, Leo Bicknell wrote: I think this list goes too far, and has a decent chance of introducing other fun failure modes as a result. The goal of OOB is generally to gain control of a "misbehaving" device. Now, misbehaving can take many forms, from the device actually being ok an

Re: OOB core router connectivity wish list

2013-01-09 Thread Mikael Abrahamsson
On Wed, 9 Jan 2013, Leo Bicknell wrote: of the device, not unlike an IPMI device on a server. Using IPMI IPMI is exactly what we're going for. In this ideal world, the deployment model is simple. A small OOB device would be deployed (think like a Cisco 1900, or Juniper SRX 220), connected

Re: OOB core router connectivity wish list

2013-01-09 Thread Saku Ytti
On (2013-01-09 09:12 -0800), Leo Bicknell wrote: > So while I agree with the list of features in large part, I'm not sure I > agree with the concept of having some sort of ethernet interface that > allows all of this out of band. I think it will add cost, complexity, > and a lot of new failure mo

Re: OOB core router connectivity wish list

2013-01-09 Thread Leo Bicknell
I think this list goes too far, and has a decent chance of introducing other fun failure modes as a result. The goal of OOB is generally to gain control of a "misbehaving" device. Now, misbehaving can take many forms, from the device actually being ok and all of it's circuits going down (fiber c

Re: OOB core router connectivity wish list

2013-01-09 Thread Mikael Abrahamsson
On Wed, 9 Jan 2013, Saku Ytti wrote: Agreed. IPv4 would be priority for most. Today yes. In 2-4 years when this might be a reality, I don't want IPv4 only device. I rather go for IPv6 only immediately. -- Mikael Abrahamssonemail: swm...@swm.pp.se

Re: OOB core router connectivity wish list

2013-01-09 Thread Saku Ytti
On (2013-01-09 11:18 -0500), William Herrin wrote: > (a) This is a P2 not a P1. Asking the OOB to be critically dependent > on an external network element is dubious to begin with but even if > desired it's usable without. Agreed that P2 suffices. Usage scenario is installing fresh router. You or

Re: OOB core router connectivity wish list

2013-01-09 Thread Mikael Abrahamsson
On Wed, 9 Jan 2013, Christopher Morrow wrote: On Wed, Jan 9, 2013 at 11:18 AM, William Herrin wrote: About the only time you'd strictly *need* dynamic configuration in an OOB is when directly connecting it to a commodity Internet link. If you're willing to give your poorly secured and rarely u

Re: OOB core router connectivity wish list

2013-01-09 Thread William Herrin
On Wed, Jan 9, 2013 at 11:21 AM, Christopher Morrow wrote: > On Wed, Jan 9, 2013 at 11:18 AM, William Herrin wrote: >> About the only time you'd strictly *need* dynamic configuration in an >> OOB is when directly connecting it to a commodity Internet link. If >> you're willing to give your poorly

Re: OOB core router connectivity wish list

2013-01-09 Thread Christopher Morrow
On Wed, Jan 9, 2013 at 11:18 AM, William Herrin wrote: > About the only time you'd strictly *need* dynamic configuration in an > OOB is when directly connecting it to a commodity Internet link. If > you're willing to give your poorly secured and rarely updated OOB a > public IP address, you're a b

Re: OOB core router connectivity wish list

2013-01-09 Thread Justin M. Streiner
On Wed, 9 Jan 2013, Mikael Abrahamsson wrote: I would like to post it here to solicit feedback on it. Feel free to use it to tell your vendor account teams you want this if you feel it useful. I've already sent it to one vendor. Ethernet/Serial/USB management is useful, but I would not be in

Re: OOB core router connectivity wish list

2013-01-09 Thread William Herrin
On Wed, Jan 9, 2013 at 9:37 AM, Mikael Abrahamsson wrote: > I have together with some other people, collected a wish list for OOB > support, mainly aimed for core routers. Hi Mikael, I generally agree but have several quibbles: > [P1]: The IP address of the OOB port should be set via DHCP/DHCP

Re: OOB core router connectivity wish list

2013-01-09 Thread Saku Ytti
On (2013-01-09 15:37 +0100), Mikael Abrahamsson wrote: > equipment already have an mgmt ethernet port, but usually this can't > do "everything", meaning today one has to have OOB ethernet *and* > OOB serial which just brings more pain than before. The key difference is, that those are not OOB at