- mice-discuss - lists.micemn.net

Re: MICE incident @11:47 CST

by Justin Krejci

My favorite quote from their config guide: 4.2.6. Non-unicast IPv4: IGMP, DHCP, TFTP On the ISP peering LAN, the only non-unicast traffic that is allowed is the ARP query. Sometimes we see equipment trying to get a configuration through broadcast TFTP, or configure themselves through DHCP. We will leave it to the reader to consider why this is a bad idea. On Tue, 2011-11-22 at 14:14 -0600, Andrew Hoyos wrote: > Can we revisit the whole spanning tree on the IX thing again? > > My two cents last time was for 1 mac address per participant facing port, proper storm control limts, bpdufilter, etc. > > Also, I'd encourage all participants to review their config's, *especially* if they have layer2 devices in the mix somewhere. > AMS-IX has put together very nice and self-explainatory guides about how to keep your layer2 devices acting nice and not have a negative effect on the entire MICE IX. > > That configuration guide is located here: http://www.ams-ix.net/config-guide > > -- > Andrew Hoyos > hoyosa(a)gmail.com > > On Nov 22, 2011, at 2:06 PM, Eric Crist wrote: > > > Judging by the graphs, it was something between Cooperative Net and HE… > > > > --- > > Eric F Crist > > System Administrator > > ClaimLynx, Inc > > (952) 593-5969 x2301 > > > > > > > > On Nov 22, 2011, at 13:54:12, James Stahr wrote: > > > >> Anyone else have an issue? stats.micemn.net show spikes which would likely indicate a spanning tree loop or a broadcast storm. Whatever the traffic was, it caused a CPU spike and upset all of our other BGP sessions on our ASR as well. > >> > >> -James > >> Berbee/CDW > >> > >> ######################################################################## > >> > >> To unsubscribe from the MICE-DISCUSS list, click the following link: > >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > > > ######################################################################## > > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 22, 2011

Re: MICE incident @11:47 CST

by Andrew Hoyos

Can we revisit the whole spanning tree on the IX thing again? My two cents last time was for 1 mac address per participant facing port, proper storm control limts, bpdufilter, etc. Also, I'd encourage all participants to review their config's, *especially* if they have layer2 devices in the mix somewhere. AMS-IX has put together very nice and self-explainatory guides about how to keep your layer2 devices acting nice and not have a negative effect on the entire MICE IX. That configuration guide is located here: http://www.ams-ix.net/config-guide -- Andrew Hoyos hoyosa(a)gmail.com On Nov 22, 2011, at 2:06 PM, Eric Crist wrote: > Judging by the graphs, it was something between Cooperative Net and HE… > > --- > Eric F Crist > System Administrator > ClaimLynx, Inc > (952) 593-5969 x2301 > > > > On Nov 22, 2011, at 13:54:12, James Stahr wrote: > >> Anyone else have an issue? stats.micemn.net show spikes which would likely indicate a spanning tree loop or a broadcast storm. Whatever the traffic was, it caused a CPU spike and upset all of our other BGP sessions on our ASR as well. >> >> -James >> Berbee/CDW >> >> ######################################################################## >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 22, 2011

Re: MICE incident @11:47 CST

by Jay Hanke

On Tue, Nov 22, 2011 at 1:54 PM, James Stahr <stahr(a)mailbag.com> wrote: > Anyone else have an issue? stats.micemn.net show spikes which would likely > indicate a spanning tree loop or a broadcast storm. Whatever the traffic > was, it caused a CPU spike and upset all of our other BGP sessions on our > ASR as well. I apologize, that was my mess up. I was working on a customer transport link and didn't realize I had a bridge-domain built on the port. It created a loop when the port came up within the customer network and it looks like it spewed garbage on to the MICE vlan. Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 22, 2011

Re: MICE incident @11:47 CST

by Eric Crist

Judging by the graphs, it was something between Cooperative Net and HE… --- Eric F Crist System Administrator ClaimLynx, Inc (952) 593-5969 x2301 On Nov 22, 2011, at 13:54:12, James Stahr wrote: > Anyone else have an issue? stats.micemn.net show spikes which would likely indicate a spanning tree loop or a broadcast storm. Whatever the traffic was, it caused a CPU spike and upset all of our other BGP sessions on our ASR as well. > > -James > Berbee/CDW > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 22, 2011

Re: MICE incident @11:47 CST

by Ryan Goldberg

Saw same, bgp poof, and mac-flap ick... Ryan ----- Reply message ----- From: "James Stahr" <stahr(a)MAILBAG.COM> To: "MICE-DISCUSS(a)LISTS.IPHOUSE.NET" <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> Subject: [MICE-DISCUSS] MICE incident @11:47 CST Date: Tue, Nov 22, 2011 1:54 pm Anyone else have an issue? stats.micemn.net show spikes which would likely indicate a spanning tree loop or a broadcast storm. Whatever the traffic was, it caused a CPU spike and upset all of our other BGP sessions on our ASR as well. -James Berbee/CDW ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 22, 2011

MICE incident @11:47 CST

by James Stahr

Anyone else have an issue? stats.micemn.net show spikes which would likely indicate a spanning tree loop or a broadcast storm. Whatever the traffic was, it caused a CPU spike and upset all of our other BGP sessions on our ASR as well. -James Berbee/CDW ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 22, 2011

New Arvig Port Assignment

by Jay Hanke

Arvig Port Main switch 7 (copper) 69.147.218.7/24 2607:fe10:ffff::7/64 We need your contact info and ASN. Also please update your peeringDB information. Thanks and welcome aboard! -- Jay Hanke CTO, CCIE #19093 Mankato Networks LLC 619 S Front St Mankato, MN 56001-3838 Google 530-618-2398 jayhanke(a)mankatonetworks.net http://www.mankatonetworks.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 21, 2011

Re: route-server IPv6 BGP

by Doug McIntyre

On Sun, Nov 13, 2011 at 06:11:29PM -0600, Bradley Urberg-Carlson wrote: > Thanks, Doug. Found the issue. You should see local ping6 times to VISI now. Yep, all looking good there ASN_8015 BGP master up 17:56 Established Description: 8015 - VISI Routes: 1 imported, 23 exported, 1 preferred Receiving one prefix, exporting the 23 IPv6 prefixes now in the exchange. -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 14, 2011

Re: route-server IPv6 BGP

by Bradley Urberg-Carlson

Thanks, Doug. Found the issue. You should see local ping6 times to VISI now. -Bradley ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 14, 2011

Re: route-server IPv6 BGP

by Doug McIntyre

On Sun, Nov 13, 2011 at 04:52:29PM -0600, Bradley Urberg-Carlson wrote: > Thanks, Doug. All helpful. Neighbor ::1 and ::2 are shut-down for now to stop babbling errors. > The BGP connection was via native IPv6, but was being closed by ::1 and ::2: > > > Nov 13 15:10:56 CST: %BGP-5-ADJCHANGE: neighbor 2607:FE10:FFFF::1 Up > > Nov 13 15:10:57 CST: %BGP-3-NOTIFICATION: received from neighbor 2607:FE10:FFFF::1 6/1 (cease) 0 bytes Case notification subcode 1 is Maximum Number of Prefixes Reached. Check your route-map to make sure you are filtering on the proper criteria, and doing so in the proper address-family. -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Nov. 13, 2011