- mice-discuss - lists.micemn.net

Netflix Ramping Up

by Jeremy Lumby

I see Netflix is ramping up, and the link to the CNS switch is getting close to saturating. The University may need to move to the main switch soon to alleviate the link. Jeremy Lumby Minnesota VoIP 9217 17th Ave S Suite 216 Bloomington, MN 55425 Main: 612-355-7740 x211 Direct: 612-392-6814 EFax: 952-873-7425 jlumby(a)mnvoip.com

Oct. 21, 2014

Re: Agenda - MICE UG 14 - 22 Oct 2014

by Shaun Carlson

Thanks for the reminder, I even forgot my own response. ;) Added. s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com On Mon, Oct 20, 2014 at 4:19 PM, Jeremy Lumby <jlumby(a)mnvoip.com> wrote: > Lets add the discussion of Community Strings to the agenda > > > > *From:* MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] *On Behalf > Of *Shaun Carlson > *Sent:* Monday, October 20, 2014 4:11 PM > *To:* MICE-DISCUSS(a)LISTS.IPHOUSE.NET > *Subject:* [MICE-DISCUSS] Agenda - MICE UG 14 - 22 Oct 2014 > > > > All, > > > > Please see the attached agenda, if you have any additions, please let me > know. > > > > Please see the attached minutes from our previous meeting. If you have > any additions or corrections, please let me know. > > > > One agenda note, we'll be discussing the potential change of MICE to a > 501.(c)6 non-profit organization. I've attached some discussion points and > would encourage you to *send your questions and comments to the list.* > Jeff Clancy from Stinson Leonard Street LLP will be present at the meeting > to answer questions and facilitate our next steps should we choose to move > forward with the conversion. > > > > Last, we are still in need of a sponsor for refreshments at Wednesday's > meeting, any volunteers? > > > > *Remote Dial-in Info:* > > www.webex.com > > Meeting Number: 193 507 116 > > Meeting Password: MICEUG14 > > * Please try to have a web-cam hooked up to facilitate the best possible > interaction. > > ** I will start this web conference 15 minutes prior to the meeting to > allow you to dial-in and work past any technical difficulties. > > > > One request, does anyone have a projector they could bring to the meeting > for this web conference? I would need it approx. 30 minutes prior to the > meeting. > > > > Thanks! > > > > s > > > > > *Shaun Carlson*Senior Manager of Information Technology | Arvig > > ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com > > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >

Oct. 20, 2014

Re: Agenda - MICE UG 14 - 22 Oct 2014

by Jeremy Lumby

Lets add the discussion of Community Strings to the agenda From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Shaun Carlson Sent: Monday, October 20, 2014 4:11 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: [MICE-DISCUSS] Agenda - MICE UG 14 - 22 Oct 2014 All, Please see the attached agenda, if you have any additions, please let me know. Please see the attached minutes from our previous meeting. If you have any additions or corrections, please let me know. One agenda note, we'll be discussing the potential change of MICE to a 501.(c)6 non-profit organization. I've attached some discussion points and would encourage you to send your questions and comments to the list. Jeff Clancy from Stinson Leonard Street LLP will be present at the meeting to answer questions and facilitate our next steps should we choose to move forward with the conversion. Last, we are still in need of a sponsor for refreshments at Wednesday's meeting, any volunteers? Remote Dial-in Info: www.webex.com Meeting Number: 193 507 116 Meeting Password: MICEUG14 * Please try to have a web-cam hooked up to facilitate the best possible interaction. ** I will start this web conference 15 minutes prior to the meeting to allow you to dial-in and work past any technical difficulties. One request, does anyone have a projector they could bring to the meeting for this web conference? I would need it approx. 30 minutes prior to the meeting. Thanks! s Shaun Carlson Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Oct. 20, 2014

Agenda - MICE UG 14 - 22 Oct 2014

by Shaun Carlson

All, Please see the attached agenda, if you have any additions, please let me know. Please see the attached minutes from our previous meeting. If you have any additions or corrections, please let me know. One agenda note, we'll be discussing the potential change of MICE to a 501.(c)6 non-profit organization. I've attached some discussion points and would encourage you to *send your questions and comments to the list.* Jeff Clancy from Stinson Leonard Street LLP will be present at the meeting to answer questions and facilitate our next steps should we choose to move forward with the conversion. Last, we are still in need of a sponsor for refreshments at Wednesday's meeting, any volunteers? *Remote Dial-in Info:* www.webex.com Meeting Number: 193 507 116 Meeting Password: MICEUG14 * Please try to have a web-cam hooked up to facilitate the best possible interaction. ** I will start this web conference 15 minutes prior to the meeting to allow you to dial-in and work past any technical difficulties. One request, does anyone have a projector they could bring to the meeting for this web conference? I would need it approx. 30 minutes prior to the meeting. Thanks! s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

Oct. 20, 2014

Re: Route Server Announcement Control?

by Shaun Carlson

This is a good discussion. I'll add it to our upcoming agenda to review in addition to our discussion here. I, too, am in favor of the community strings. s On Saturday, October 18, 2014, Jeremy Lumby <jlumby(a)mnvoip.com> wrote: > I would like to voice my opinion in support of community strings. I had 2 > incidents a while ago where a member connected to the route server had a > saturated link. It was impacting the quality of my customers > connectivity. I wish I had the ability to just not announce to the one > member, instead of the all or nothing option we currently have with the > route servers. > > -----Original Message----- > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET <javascript:;>] > On Behalf Of Doug McIntyre > Sent: Friday, October 17, 2014 5:52 PM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET <javascript:;> > Subject: Re: [MICE-DISCUSS] Route Server Announcement Control? > > On Fri, Oct 17, 2014 at 10:19:16PM +0000, Charles Monson wrote: > > Do the MICE route servers offer any way to control BGP announcement to > specific peers? I didn't see anything on the micemn.net website about > ways to do that. With some of the larger content providers connecting to > the exchange, the folks who have mostly inbound traffic might want a way to > stop the route servers announcements to those potentially high traffic > peers without entirely withdrawing advertisements to the route servers. > > > > Some of the other exchanges we connect at let you send a community > indicating the ASN you don't want your prefixes advertisements to reach > (e.g. you send a community of "0:11796" to stop the route servers from > advertising your prefixes to Airstream). It would be nice to have something > similar at MICE. Is this something already supported that I missed? Or > something that may be considered as a future feature? > > > We do not have any community filters setup currently. > > BIRD supports communities and filtering, but nobody has asked about it > prior to now. > > It looks like a huge example is at > > http://download.de-cix.net/bird.conf.gz > > Useful for others? > > -- > Doug McIntyre <merlyn(a)iphouse.net > <javascript:;>> > ~.~ ipHouse ~.~ > Network Engineer/Provisioning/Jack of all Trades > -- *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

Oct. 19, 2014

Re: Route Server Announcement Control?

by Shaun Carlson

This is a good discussion. I'll add it to our upcoming agenda to review in addition to our discussion here. I, too, am in favor of the community strings. s On Saturday, October 18, 2014, Jeremy Lumby <jlumby(a)mnvoip.com> wrote: > I would like to voice my opinion in support of community strings. I had 2 > incidents a while ago where a member connected to the route server had a > saturated link. It was impacting the quality of my customers > connectivity. I wish I had the ability to just not announce to the one > member, instead of the all or nothing option we currently have with the > route servers. > > -----Original Message----- > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET <javascript:;>] > On Behalf Of Doug McIntyre > Sent: Friday, October 17, 2014 5:52 PM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET <javascript:;> > Subject: Re: [MICE-DISCUSS] Route Server Announcement Control? > > On Fri, Oct 17, 2014 at 10:19:16PM +0000, Charles Monson wrote: > > Do the MICE route servers offer any way to control BGP announcement to > specific peers? I didn't see anything on the micemn.net website about > ways to do that. With some of the larger content providers connecting to > the exchange, the folks who have mostly inbound traffic might want a way to > stop the route servers announcements to those potentially high traffic > peers without entirely withdrawing advertisements to the route servers. > > > > Some of the other exchanges we connect at let you send a community > indicating the ASN you don't want your prefixes advertisements to reach > (e.g. you send a community of "0:11796" to stop the route servers from > advertising your prefixes to Airstream). It would be nice to have something > similar at MICE. Is this something already supported that I missed? Or > something that may be considered as a future feature? > > > We do not have any community filters setup currently. > > BIRD supports communities and filtering, but nobody has asked about it > prior to now. > > It looks like a huge example is at > > http://download.de-cix.net/bird.conf.gz > > Useful for others? > > -- > Doug McIntyre <merlyn(a)iphouse.net > <javascript:;>> > ~.~ ipHouse ~.~ > Network Engineer/Provisioning/Jack of all Trades > -- *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

Oct. 19, 2014

Re: Route Server Announcement Control?

by Jeremy Lumby

I would like to voice my opinion in support of community strings. I had 2 incidents a while ago where a member connected to the route server had a saturated link. It was impacting the quality of my customers connectivity. I wish I had the ability to just not announce to the one member, instead of the all or nothing option we currently have with the route servers. -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Doug McIntyre Sent: Friday, October 17, 2014 5:52 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] Route Server Announcement Control? On Fri, Oct 17, 2014 at 10:19:16PM +0000, Charles Monson wrote: > Do the MICE route servers offer any way to control BGP announcement to specific peers? I didn't see anything on the micemn.net website about ways to do that. With some of the larger content providers connecting to the exchange, the folks who have mostly inbound traffic might want a way to stop the route servers announcements to those potentially high traffic peers without entirely withdrawing advertisements to the route servers. > > Some of the other exchanges we connect at let you send a community indicating the ASN you don't want your prefixes advertisements to reach (e.g. you send a community of "0:11796" to stop the route servers from advertising your prefixes to Airstream). It would be nice to have something similar at MICE. Is this something already supported that I missed? Or something that may be considered as a future feature? We do not have any community filters setup currently. BIRD supports communities and filtering, but nobody has asked about it prior to now. It looks like a huge example is at http://download.de-cix.net/bird.conf.gz Useful for others? -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades

Oct. 18, 2014

Re: Route Server Announcement Control?

by Doug McIntyre

On Fri, Oct 17, 2014 at 10:19:16PM +0000, Charles Monson wrote: > Do the MICE route servers offer any way to control BGP announcement to specific peers? I didn't see anything on the micemn.net website about ways to do that. With some of the larger content providers connecting to the exchange, the folks who have mostly inbound traffic might want a way to stop the route servers announcements to those potentially high traffic peers without entirely withdrawing advertisements to the route servers. > > Some of the other exchanges we connect at let you send a community indicating the ASN you don't want your prefixes advertisements to reach (e.g. you send a community of "0:11796" to stop the route servers from advertising your prefixes to Airstream). It would be nice to have something similar at MICE. Is this something already supported that I missed? Or something that may be considered as a future feature? We do not have any community filters setup currently. BIRD supports communities and filtering, but nobody has asked about it prior to now. It looks like a huge example is at http://download.de-cix.net/bird.conf.gz Useful for others? -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades

Oct. 17, 2014

Route Server Announcement Control?

by Charles Monson

Do the MICE route servers offer any way to control BGP announcement to specific peers? I didn't see anything on the micemn.net website about ways to do that. With some of the larger content providers connecting to the exchange, the folks who have mostly inbound traffic might want a way to stop the route servers announcements to those potentially high traffic peers without entirely withdrawing advertisements to the route servers. Some of the other exchanges we connect at let you send a community indicating the ASN you don't want your prefixes advertisements to reach (e.g. you send a community of "0:11796" to stop the route servers from advertising your prefixes to Airstream). It would be nice to have something similar at MICE. Is this something already supported that I missed? Or something that may be considered as a future feature? Charles Monson Associate Network Administrator Airstream Communications, LLC Wisconsin Independent Network, LLC

Oct. 17, 2014

FW: MICE L2 Security Project

by Anthony Anderberg

As a reminder, we're planning on making the last of the changes below that will include all of our ports. As before we don't expect there to be any issues or downtime, I can be reached at 320-234-5539 if anyone has issues. Cheers, anthony Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Wednesday, October 01, 2014 11:58 PM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET<mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET>); 'MICE-ANNOUNCE(a)LISTS.IPHOUSE.NET' Subject: MICE L2 Security Project We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

Oct. 16, 2014

Re: Please welcome Google to MICE!

by Doug McIntyre

On Wed, Oct 15, 2014 at 09:42:02AM -0500, Jason Hanke wrote: > Network Name: Google > IPv4: 206.108.255.37/24 > IPv6: 2001:504:27:0:0:8cc8::1/64 > ASN: 36040 > Port: Main Switch xe-0/0/25 > Peering Contact: peering(a)google.com > > Please configure route servers and switches! Sure, all set, ready to go when they are. > Welcome aboard! The same! -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades

Oct. 15, 2014

Please welcome Google to MICE!

by Jason Hanke

Network Name: Google IPv4: 206.108.255.37/24 IPv6: 2001:504:27:0:0:8cc8::1/64 ASN: 36040 Port: Main Switch xe-0/0/25 Peering Contact: peering(a)google.com Please configure route servers and switches! Welcome aboard! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

Oct. 15, 2014

Connect Minnesota event

by Mike Hemphill

All, Cologix is hosting an event “Connect Minnesota” on October 22nd. See below. Breakfast or lunch. This is the same day as the 4PM MICE UG meeting in the 511 Building Cafeteria. You are welcome to attend. Please register from the flyer below. Thanks, I look forward to seeing as many of you as possible on the 22nd. Best regards, Mike Mike Hemphill General Manager | *Cologix, Inc.* <http://www.cologix.com/> 511 11th Ave S, Suite 450 | Minneapolis, MN 55415 P: 1+612.333.1922 | M: 1+612.812.5242 mike.hemphill(a)cologix.com [image: cid:image001.jpg@01CFE70E.D63D3E50] <http://events.r20.constantcontact.com/register/event?oeidk=a07e9xlel5t157da…>

Oct. 14, 2014

Re: Meeting Reminder

by Shaun Carlson

Thanks Eric, That's kind of what I had in mind. I was planning to bring the same and Mike Hemphill is arranging an Internet connection for the 511 Cafeteria. I think it will be better this time, however, I hate to overpromise and underdeliver. ;) s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com On Thu, Oct 9, 2014 at 2:50 PM, Eric Crist <ecrist(a)claimlynx.com> wrote: > Not sure what the technical difficulties are, but we can provide a > GoToMeeting session, web camera, and conference phone to help facilitate. > > --- > Eric F Crist > System Administrator > ClaimLynx, Inc > (952) 593-5969 x2301 > > > > On Oct 9, 2014, at 14:39:19, Shaun Carlson <shaun.carlson(a)ARVIG.COM> > wrote: > > > Good afternoon all! > > > > I wanted to send out a quick reminder of our upcoming user group meeting > (UG 14!!) on October 22nd at 4 pm in the 511 building. > > > > We're working on getting a web meeting set up, however, we've had some > technical difficulties, so it would be better to be there in person (hint, > hint). > > > > Ok, last item, a call for Agenda items. I'm planning to send out the > initial agenda on Monday, so please send me any items you'd like added to > the agenda and I'll get them on there. > > > > We've got a lot to talk about this quarter, so see you all on the 22nd! > > > > Thanks! > > > > s > > > > Shaun Carlson > > Senior Manager of Information Technology | Arvig > > ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com > > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > > > > -- > This e-mail and any files transmitted with it are confidential and are > intended solely for the use of the individual or entity to whom they are > addressed. If you are not the intended recipient or the individual > responsible for delivering the e-mail to the intended recipient, please be > advised that you have received this e-mail in error and that any use, > dissemination, forwarding, printing, or copying of this e-mail is strictly > prohibited. > > If you have received this communication in error, please return it to the > sender immediately and delete the original message and any copy of it from > your computer system. If you have any questions concerning this message, > please contact the sender or call ClaimLynx at (952) 593-5969. >

Oct. 9, 2014

Re: Meeting Reminder

by Eric Crist

Not sure what the technical difficulties are, but we can provide a GoToMeeting session, web camera, and conference phone to help facilitate. --- Eric F Crist System Administrator ClaimLynx, Inc (952) 593-5969 x2301 On Oct 9, 2014, at 14:39:19, Shaun Carlson <shaun.carlson(a)ARVIG.COM> wrote: > Good afternoon all! > > I wanted to send out a quick reminder of our upcoming user group meeting (UG 14!!) on October 22nd at 4 pm in the 511 building. > > We're working on getting a web meeting set up, however, we've had some technical difficulties, so it would be better to be there in person (hint, hint). > > Ok, last item, a call for Agenda items. I'm planning to send out the initial agenda on Monday, so please send me any items you'd like added to the agenda and I'll get them on there. > > We've got a lot to talk about this quarter, so see you all on the 22nd! > > Thanks! > > s > > Shaun Carlson > Senior Manager of Information Technology | Arvig > ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > -- This e-mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the individual responsible for delivering the e-mail to the intended recipient, please be advised that you have received this e-mail in error and that any use, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender or call ClaimLynx at (952) 593-5969.

Oct. 9, 2014

Meeting Reminder

by Shaun Carlson

Good afternoon all! I wanted to send out a quick reminder of our upcoming user group meeting (UG 14!!) on October 22nd at 4 pm in the 511 building. We're working on getting a web meeting set up, however, we've had some technical difficulties, so it would be better to be there in person (hint, hint). Ok, last item, a call for Agenda items. I'm planning to send out the initial agenda on Monday, so please send me any items you'd like added to the agenda and I'll get them on there. We've got a lot to talk about this quarter, so see you all on the 22nd! Thanks! s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

Oct. 9, 2014

FW: MICE L2 Security Project

by Anthony Anderberg

This first phase is complete, if anyone has trouble peering with the beta testers let us know. Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Thursday, October 09, 2014 9:08 AM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET) Subject: FW: MICE L2 Security Project As a reminder, at 10am this morning we'm planning on making the first set of changes below for our beta testers: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. I can be reached at 320-234-5539 if anyone has issues. Cheers, anthony Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Wednesday, October 01, 2014 11:58 PM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET<mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET>); 'MICE-ANNOUNCE(a)LISTS.IPHOUSE.NET' Subject: MICE L2 Security Project We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

Oct. 9, 2014

FW: MICE L2 Security Project

by Anthony Anderberg

As a reminder, at 10am this morning we'm planning on making the first set of changes below for our beta testers: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. I can be reached at 320-234-5539 if anyone has issues. Cheers, anthony Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Wednesday, October 01, 2014 11:58 PM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET) 'MICE-ANNOUNCE(a)LISTS.IPHOUSE.NET' Subject: MICE L2 Security Project We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

Oct. 9, 2014

Re: Outage Today

by Danny Meister

Us too. Some kind of flooding again. I saw traffic coming across our port that wasn¹t ours. Danny Atomic Data On 10/7/14, 12:27 PM, "Jeremy Lumby" <jlumby(a)MNVOIP.COM> wrote: >Does anyone know what happened today around 10:48AM today? I experienced >a large amount of packet loss across the exchange for about 3 minutes

Oct. 7, 2014

Outage Today

by Jeremy Lumby

Does anyone know what happened today around 10:48AM today? I experienced a large amount of packet loss across the exchange for about 3 minutes

Oct. 7, 2014

Re: Please welcome Netflix to MICE!

by Doug McIntyre

On Fri, Oct 03, 2014 at 08:45:26AM -0500, Jason Hanke wrote: > Netflix will connect to the main switch with two LAG groups > > LAG Group 1 > IPv4 Address: 206.108.255.35/24 > IPv6 address: 2001:504:27:0:0:0b5a::1/64 > Member ports: xe-0/0/21, xe-0/0/22 > > > LAG Group 2 > IPv4 Address: 206.108.255.36/24 > IPv6 address: 2001:504:27:0:0:0b5a::2/64 > Member ports: xe-0/0/23, xe-0/0/24 > > ASN: 2906 > Contact: peering(a)netflix.com > > Please configure the route servers and switches. Alright! Okay, switch LAG's and route reflectors are setup to take them when they are ready. -- Doug McIntyre <merlyn(a)iphouse.net> ~.~ ipHouse ~.~ Network Engineer/Provisioning/Jack of all Trades

Oct. 3, 2014

Please welcome Netflix to MICE!

by Jason Hanke

Netflix will connect to the main switch with two LAG groups LAG Group 1 IPv4 Address: 206.108.255.35/24 IPv6 address: 2001:504:27:0:0:0b5a::1/64 Member ports: xe-0/0/21, xe-0/0/22 LAG Group 2 IPv4 Address: 206.108.255.36/24 IPv6 address: 2001:504:27:0:0:0b5a::2/64 Member ports: xe-0/0/23, xe-0/0/24 ASN: 2906 Contact: peering(a)netflix.com Please configure the route servers and switches. Netflix has assigned ticket number NCO-2543 on their side if the NOC needs to be contacted. Thanks and welcome aboard! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

Oct. 3, 2014

MICE L2 Security Project

by Anthony Anderberg

We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

Oct. 2, 2014

Re: Any update on working with Google or Netflix??

by Reid Fishler

News to come. Good news. Reid On Sep 26, 2014 11:35 PM, "Dan Olsen" <Dano(a)windomnet.com> wrote: > Greetings: Any update on working with Google or Netflix??? > > > > *Dan Olsen-* > > > > *General Manager* > > *Windomnet* > > 443 10th Street, PO box 38 Windom MN 56101 > > *Southwest MN Broadband Services* > > 110 South Hwy 86, PO Box 1006, Lakefield MN 56150 > > *Fibernet Monticello* > > Monticello MN > > > > Voice 507-832-8007 > > > > ------------------------------ > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >

Sept. 26, 2014

Any update on working with Google or Netflix??

by Dan Olsen

Greetings: Any update on working with Google or Netflix??? Dan Olsen- General Manager Windomnet 443 10th Street, PO box 38 Windom MN 56101 Southwest MN Broadband Services 110 South Hwy 86, PO Box 1006, Lakefield MN 56150 Fibernet Monticello Monticello MN Voice 507-832-8007

Sept. 26, 2014