- mice-discuss - lists.micemn.net

NANOG San Diego

by Jay Hanke

Is anyone else going to NANOG in San Diego? Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 23, 2012

New Omaha Exchange

by Jay Hanke

All, I'm working on building a new exchange in the Omaha area. If you are interested or know those who may be interested please send them my way! Thanks, Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 23, 2012

Re: would MICE be willing to designate me as it's representative to ICANN?

by John Unger

You have our vote!!! Minneapolis | Alexandria | St. Cloud John Unger President d: 612.238.1601 c: 612.325.2909 john(a)vaultas.com www.vaultas.com This message is intended only for the named recipient(s) and may contain confidential, proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any misdirected transmission. If you received this message in error, please notify us immediately by telephone at 612.325.2909 and immediately delete this message from your system. If you are not the intended recipient, you must not use, disclose, distribute or copy any part of this message. -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Dan Boehlke Sent: Sunday, January 22, 2012 9:08 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] would MICE be willing to designate me as it's representative to ICANN? Greetings, Having known Mike for a long time, I know his work at ICANN would benefit the entire MICE community. I support Mike's proposal and would recommend that we allow mice to go forward with our designation and support. It is in our interests to have individuals from our community in Internet governance. Thank you. -- Dan Boehlke 651-341-6880 On Jan 22, 2012, at 6:52 AM, "Mike O'Connor" <mike(a)HAVEN2.COM> wrote: > hi all, > > i'm hunting for a different home-base in the ICANN scheme of things (long story, happy to share, but probably boring for y'all). right now i'm in the "Business constituency" which you can read about at http://www.bizconst.org/. i'm trying to swing over to the ISP constituency (http://www.ispcp.info/) mostly because it's a better fit for my interests, but also because the Business constituency is making me sick to my stomach and i don't want to be a part of that gang any more (another really long story). > > so i was wondering if MICE (or any of you individual members) would be willing to designate me your ICANN representative so's i could switch. this will be a pretty light burden for y'all -- i'll pay all the expenses, give you reports on interesting stuff having to do with DNS and IP-address policy issues, collect your views, carry them off to ICANN, etc. > > i just need a new place to stand inside of ICANN and you're the gang i'd like to stand with. > > questions? comments? ideas? > > mikey > > > - - - - - - - - - > phone 651-647-6109 > fax 866-280-2356 > web http://www.haven2.com > handle OConnorStP (ID for public places like Twitter, Facebook, Google, etc.) > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 23, 2012

Re: would MICE be willing to designate me as it's representative to ICANN?

by Jeremy Lumby

You have my vote -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Mike O'Connor Sent: Sunday, January 22, 2012 10:49 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] would MICE be willing to designate me as it's representative to ICANN? thanks Dan! hm… Dan's note made me realize that it's not the Old Days any more and that many of you don't know me at all. so my terse little request comes out of the blue. let me remedy that. i'm extra thankful that Dan fired off that note. i've been a fan and observer of MICE since the beginning, but except for lurking on the list and showing up at some of the meetings i haven't done a lick of work on this project. i'd be happy to pull a little harder on the oars in exchange for your allowing me to pay for your membership in ICANN and being one of your representatives. here's a link to my bio -- http://www.haven2.com/index.php/bio here's a link to my page on ICANN-wiki (where you can find out about all kinda ICANN stuff) -- http://icannwiki.com/index.php/Mike_O%27Connor you'll see on the ICANN page that i do a bunch of work on working groups -- mostly focused on the security and stability kinda stuff. my problem with the Business Constituency has always been that it is quite tilted towards the interests of intellectual property owners and large corporations fending off cybersquatters. it's not that i disagree with them, but i've always felt that the view of the business community should be broader than that. and besides, there's a whole 'nother constituency that's supposed to be looking out for the interests of intellectual property. so i've been toiling away for years trying to carry that broader agenda inside the constituency. but this past few months have seen the constituency backslide a bit. first with the way we were playing both sides of the fence in the US Congress on the introduction of new gTLDs and then with the SOPA/PIPA legislation. so i'm getting tired of the ambiguity. the nice thing about the ISP constituency is that their agenda is much less political and a lot better aligned with my interests. so there's a bit more of the story, and a better job of introducing myself to those of you who don't know me. sorry about that, mikey On Jan 22, 2012, at 9:08 AM, Dan Boehlke wrote: > Greetings, > > Having known Mike for a long time, I know his work at ICANN would benefit the entire MICE community. I support Mike's proposal and would recommend that we allow mice to go forward with our designation and support. It is in our interests to have individuals from our community in Internet governance. > > Thank you. > > -- > Dan Boehlke > 651-341-6880 > > > On Jan 22, 2012, at 6:52 AM, "Mike O'Connor" <mike(a)HAVEN2.COM> wrote: > >> hi all, >> >> i'm hunting for a different home-base in the ICANN scheme of things (long story, happy to share, but probably boring for y'all). right now i'm in the "Business constituency" which you can read about at http://www.bizconst.org/. i'm trying to swing over to the ISP constituency (http://www.ispcp.info/) mostly because it's a better fit for my interests, but also because the Business constituency is making me sick to my stomach and i don't want to be a part of that gang any more (another really long story). >> >> so i was wondering if MICE (or any of you individual members) would be willing to designate me your ICANN representative so's i could switch. this will be a pretty light burden for y'all -- i'll pay all the expenses, give you reports on interesting stuff having to do with DNS and IP-address policy issues, collect your views, carry them off to ICANN, etc. >> >> i just need a new place to stand inside of ICANN and you're the gang i'd like to stand with. >> >> questions? comments? ideas? >> >> mikey >> >> >> - - - - - - - - - >> phone 651-647-6109 >> fax 866-280-2356 >> web http://www.haven2.com >> handle OConnorStP (ID for public places like Twitter, Facebook, Google, etc.) >> >> ##################################################################### >> ### >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ###################################################################### > ## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 - - - - - - - - - phone 651-647-6109 fax 866-280-2356 web http://www.haven2.com handle OConnorStP (ID for public places like Twitter, Facebook, Google, etc.) ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 22, 2012

Re: would MICE be willing to designate me as it's representative to ICANN?

by Mike O'Connor

thanks Dan! hm… Dan's note made me realize that it's not the Old Days any more and that many of you don't know me at all. so my terse little request comes out of the blue. let me remedy that. i'm extra thankful that Dan fired off that note. i've been a fan and observer of MICE since the beginning, but except for lurking on the list and showing up at some of the meetings i haven't done a lick of work on this project. i'd be happy to pull a little harder on the oars in exchange for your allowing me to pay for your membership in ICANN and being one of your representatives. here's a link to my bio -- http://www.haven2.com/index.php/bio here's a link to my page on ICANN-wiki (where you can find out about all kinda ICANN stuff) -- http://icannwiki.com/index.php/Mike_O%27Connor you'll see on the ICANN page that i do a bunch of work on working groups -- mostly focused on the security and stability kinda stuff. my problem with the Business Constituency has always been that it is quite tilted towards the interests of intellectual property owners and large corporations fending off cybersquatters. it's not that i disagree with them, but i've always felt that the view of the business community should be broader than that. and besides, there's a whole 'nother constituency that's supposed to be looking out for the interests of intellectual property. so i've been toiling away for years trying to carry that broader agenda inside the constituency. but this past few months have seen the constituency backslide a bit. first with the way we were playing both sides of the fence in the US Congress on the introduction of new gTLDs and then with the SOPA/PIPA legislation. so i'm getting tired of the ambiguity. the nice thing about the ISP constituency is that their agenda is much less political and a lot better aligned with my interests. so there's a bit more of the story, and a better job of introducing myself to those of you who don't know me. sorry about that, mikey On Jan 22, 2012, at 9:08 AM, Dan Boehlke wrote: > Greetings, > > Having known Mike for a long time, I know his work at ICANN would benefit the entire MICE community. I support Mike's proposal and would recommend that we allow mice to go forward with our designation and support. It is in our interests to have individuals from our community in Internet governance. > > Thank you. > > -- > Dan Boehlke > 651-341-6880 > > > On Jan 22, 2012, at 6:52 AM, "Mike O'Connor" <mike(a)HAVEN2.COM> wrote: > >> hi all, >> >> i'm hunting for a different home-base in the ICANN scheme of things (long story, happy to share, but probably boring for y'all). right now i'm in the "Business constituency" which you can read about at http://www.bizconst.org/. i'm trying to swing over to the ISP constituency (http://www.ispcp.info/) mostly because it's a better fit for my interests, but also because the Business constituency is making me sick to my stomach and i don't want to be a part of that gang any more (another really long story). >> >> so i was wondering if MICE (or any of you individual members) would be willing to designate me your ICANN representative so's i could switch. this will be a pretty light burden for y'all -- i'll pay all the expenses, give you reports on interesting stuff having to do with DNS and IP-address policy issues, collect your views, carry them off to ICANN, etc. >> >> i just need a new place to stand inside of ICANN and you're the gang i'd like to stand with. >> >> questions? comments? ideas? >> >> mikey >> >> >> - - - - - - - - - >> phone 651-647-6109 >> fax 866-280-2356 >> web http://www.haven2.com >> handle OConnorStP (ID for public places like Twitter, Facebook, Google, etc.) >> >> ######################################################################## >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 - - - - - - - - - phone 651-647-6109 fax 866-280-2356 web http://www.haven2.com handle OConnorStP (ID for public places like Twitter, Facebook, Google, etc.) ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 22, 2012

Re: would MICE be willing to designate me as it's representative to ICANN?

by Mike Horwath

On Jan 22, 2012, at 6:52 AM, Mike O'Connor wrote: > hi all, [snip] If a vote: I say A-OK! I can't find anything negative off of the top of my head. -- Mike Horwath drechsau(a)iphouse.net The universe is an island, surrounded by whatever it is that surrounds universes. - Berkely Fortune ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 22, 2012

Re: would MICE be willing to designate me as it's representative to ICANN?

by Dan Boehlke

Greetings, Having known Mike for a long time, I know his work at ICANN would benefit the entire MICE community. I support Mike's proposal and would recommend that we allow mice to go forward with our designation and support. It is in our interests to have individuals from our community in Internet governance. Thank you. -- Dan Boehlke 651-341-6880 On Jan 22, 2012, at 6:52 AM, "Mike O'Connor" <mike(a)HAVEN2.COM> wrote: > hi all, > > i'm hunting for a different home-base in the ICANN scheme of things (long story, happy to share, but probably boring for y'all). right now i'm in the "Business constituency" which you can read about at http://www.bizconst.org/. i'm trying to swing over to the ISP constituency (http://www.ispcp.info/) mostly because it's a better fit for my interests, but also because the Business constituency is making me sick to my stomach and i don't want to be a part of that gang any more (another really long story). > > so i was wondering if MICE (or any of you individual members) would be willing to designate me your ICANN representative so's i could switch. this will be a pretty light burden for y'all -- i'll pay all the expenses, give you reports on interesting stuff having to do with DNS and IP-address policy issues, collect your views, carry them off to ICANN, etc. > > i just need a new place to stand inside of ICANN and you're the gang i'd like to stand with. > > questions? comments? ideas? > > mikey > > > - - - - - - - - - > phone 651-647-6109 > fax 866-280-2356 > web http://www.haven2.com > handle OConnorStP (ID for public places like Twitter, Facebook, Google, etc.) > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 22, 2012

would MICE be willing to designate me as it's representative to ICANN?

by Mike O'Connor

hi all, i'm hunting for a different home-base in the ICANN scheme of things (long story, happy to share, but probably boring for y'all). right now i'm in the "Business constituency" which you can read about at http://www.bizconst.org/. i'm trying to swing over to the ISP constituency (http://www.ispcp.info/) mostly because it's a better fit for my interests, but also because the Business constituency is making me sick to my stomach and i don't want to be a part of that gang any more (another really long story). so i was wondering if MICE (or any of you individual members) would be willing to designate me your ICANN representative so's i could switch. this will be a pretty light burden for y'all -- i'll pay all the expenses, give you reports on interesting stuff having to do with DNS and IP-address policy issues, collect your views, carry them off to ICANN, etc. i just need a new place to stand inside of ICANN and you're the gang i'd like to stand with. questions? comments? ideas? mikey - - - - - - - - - phone 651-647-6109 fax 866-280-2356 web http://www.haven2.com handle OConnorStP (ID for public places like Twitter, Facebook, Google, etc.) ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 22, 2012

Re: LAG use

by Reid Fishler

We do LAG all the time with our customers. Reid On Fri, Jan 20, 2012 at 5:44 PM, Frank Bulk <fbulk(a)mypremieronline.com>wrote: > I've been working with our state's telco coop to enhance our Ethernet > circuit redundancy. (This is not for Internet circuits, but Ethernet > circuits like wireless backhaul). The coop doesn't do a lot of LAG today, > except for large customers that have purchased many circuits. Since our > transport gear has that capability and we have the ports we'd like to do > it, too. To help bolster our case, we're looking for examples where tier > 1/2 carriers do LAG with their customers. > > Can anyone on this list share (on or off list) some examples)? > > Frank > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > -- Reid Fishler Director Hurricane Electric +1-510-580-4178 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 20, 2012

LAG use

by Frank Bulk

I've been working with our state's telco coop to enhance our Ethernet circuit redundancy. (This is not for Internet circuits, but Ethernet circuits like wireless backhaul). The coop doesn't do a lot of LAG today, except for large customers that have purchased many circuits. Since our transport gear has that capability and we have the ports we'd like to do it, too. To help bolster our case, we're looking for examples where tier 1/2 carriers do LAG with their customers. Can anyone on this list share (on or off list) some examples)? Frank ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 20, 2012

Re: Stats Collection for CNS Switch

by Doug McIntyre

On Tue, Jan 10, 2012 at 03:21:17PM -0600, Andrew Hoyos wrote: > Just a suggestion: would it make more sense for each of the folks providing space/power for the switches to provide a /29 or /31 for OOB management, rather than inband management within the MICE subnet? FWIW: The juniper switch stack is already that way, we push down a small routable block that 216.250.183.11 is in. -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: MKE IX Status

by Justin Krejci

I will drop a note to Red Anvil, they may be interested if they're not already involved. On Tue, 2012-01-10 at 15:37 -0600, Andrew Hoyos wrote: > On Jan 10, 2012, at 3:23 PM, Jay Hanke wrote: > > > I was going to hijack the other thread but cooler heads prevailed. > > > > Andrew, How is the MKE exchange coming? > > > We're live with a few participants in the 324 E Wisconsin building in Milwaukee! > > For those curious, > > - MKEIX all non profit / free exchange in Milwaukee, WI > - Brocade donated two CES2k 24 port SFP's to get the exchange running > - We've live in suite 433 of the building (Netwurx) > - The 2nd switch is placed in suite 825 (TSR Solutions), and we're finishing up with cross connects between the two over the next few weeks. > - TSR Solutions is a bit more carrier heavy as far as tenants, so we're adding another 5+ participants when that goes live. > > If there is anyone lurking on the list with a presence in WI (specifically Madison or Milwaukee) interested in the IX, let me know! > > There is a mailing list and website, which can be found here: www.mkeix.net > > Thanks, > Andrew > > -- > Andrew Hoyos > hoyosa(a)gmail.com > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Jay Hanke

> SUSPENSE IS KILLING ME! Looks like the agg graph just about doubled... Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: MKE IX Status

by Andrew Hoyos

On Jan 10, 2012, at 3:23 PM, Jay Hanke wrote: > I was going to hijack the other thread but cooler heads prevailed. > > Andrew, How is the MKE exchange coming? We're live with a few participants in the 324 E Wisconsin building in Milwaukee! For those curious, - MKEIX all non profit / free exchange in Milwaukee, WI - Brocade donated two CES2k 24 port SFP's to get the exchange running - We've live in suite 433 of the building (Netwurx) - The 2nd switch is placed in suite 825 (TSR Solutions), and we're finishing up with cross connects between the two over the next few weeks. - TSR Solutions is a bit more carrier heavy as far as tenants, so we're adding another 5+ participants when that goes live. If there is anyone lurking on the list with a presence in WI (specifically Madison or Milwaukee) interested in the IX, let me know! There is a mailing list and website, which can be found here: www.mkeix.net Thanks, Andrew -- Andrew Hoyos hoyosa(a)gmail.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Mike Horwath

On Tue, Jan 10, 2012 at 03:21:17PM -0600, Andrew Hoyos wrote: > Just a suggestion: would it make more sense for each of the folks > providing space/power for the switches to provide a /29 or /31 for > OOB management, rather than inband management within the MICE > subnet? > > That way, it's kinda separated, and nobody has to worry about static > routing stuff different places, or distributing the IX subnet > itself. > > IX subnet = IX participant routers only then SUSPENSE IS KILLING ME! :) I'd be happy to provide the switch subnetting requirements for OOB (for switches that have OOB that is). but anyone else can take the helm on that as well. -- Mike Horwath ipHouse - Welcome home! drechsau(a)iphouse.net The universe is an island, surrounded by whatever it is that surrounds universes. - Berkeley Fortune ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

MKE IX Status

by Jay Hanke

I was going to hijack the other thread but cooler heads prevailed. Andrew, How is the MKE exchange coming? Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Andrew Hoyos

Just a suggestion: would it make more sense for each of the folks providing space/power for the switches to provide a /29 or /31 for OOB management, rather than inband management within the MICE subnet? That way, it's kinda separated, and nobody has to worry about static routing stuff different places, or distributing the IX subnet itself. IX subnet = IX participant routers only then On Jan 10, 2012, at 3:12 PM, Justin Krejci wrote: > Yeah, looks like the MICE subnet got whacked out of the routing table. Temporarily I've added a static route on the router the micelg server is using for its gateway and it appears it has fully restore connectivity now as I can ping the cns switch from the server. > > > On Tue, 2012-01-10 at 11:48 -0600, Jay Hanke wrote: >> >> There hasn't been any change at ipHouse that would account for any >> >> routing change. I can still ping the switch at 69.147.218.253 from >> >> ipHouse. >> >> Two ideas: >> >> 1) Wasn't one of the akamai routing changes done in a about the same time? >> 2) From the USI perspective, what path are you following towards the >> MICE subnet? >> >> Jay >> >> ######################################################################## >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > -- Andrew Hoyos hoyosa(a)gmail.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Justin Krejci

Yeah, looks like the MICE subnet got whacked out of the routing table. Temporarily I've added a static route on the router the micelg server is using for its gateway and it appears it has fully restore connectivity now as I can ping the cns switch from the server. On Tue, 2012-01-10 at 11:48 -0600, Jay Hanke wrote: > >> There hasn't been any change at ipHouse that would account for any > >> routing change. I can still ping the switch at 69.147.218.253 from > >> ipHouse. > > Two ideas: > > 1) Wasn't one of the akamai routing changes done in a about the same time? > 2) From the USI perspective, what path are you following towards the > MICE subnet? > > Jay > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Traffic Levels

by David Farmer

FYI, Akamai traffic is back to normal as of a little past 1:00 pm, both for MICE and the GigaPOP. On 1/10/12 12:21 CST, Doug McIntyre wrote: > On Tue, Jan 10, 2012 at 11:57:04AM -0600, David Farmer wrote: >> It is Akamai, we took a similar hit on our Akamai node about the same time. > > > Akamai drifted off MICE at the same exact time. > > http://stats.micemn.net/cacti/graph.php?action=view&local_graph_id=153&rra_… > > (about 45 minutes before I did the port shutdown on US Cable). > > FWIW: ipHouse Akamai cluster wasn't affected, but does a lot less traffic. > -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Traffic Levels

by Doug McIntyre

On Tue, Jan 10, 2012 at 11:57:04AM -0600, David Farmer wrote: > It is Akamai, we took a similar hit on our Akamai node about the same time. Akamai drifted off MICE at the same exact time. http://stats.micemn.net/cacti/graph.php?action=view&local_graph_id=153&rra_… (about 45 minutes before I did the port shutdown on US Cable). FWIW: ipHouse Akamai cluster wasn't affected, but does a lot less traffic. -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Traffic Levels

by Anthony Anderberg

Both MICE route servers show good connections with 20940, and the traffic changed on MICE and the Gigapop at the same time (see attachments). Looks like Doug logged into the route servers at 10:25, about 30 minutes after traffic started dropping so that's a red herring. Anthony Anderberg Sr. Systems Analyst 320-234-5239 anthonyanderberg(a)nu-telecom.net -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of David Farmer Sent: Tuesday, January 10, 2012 11:57 AM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] Traffic Levels It is Akamai, we took a similar hit on our Akamai node about the same time. http://perfsonar.northernlights.gigapop.net/gui/cacti/graph.php?action=view… On 1/10/12 11:52 CST, Jay Hanke wrote: > We lost a LOT of traffic about 10 AM. It doesn't appear to be recovering. > > Is everything ok? > > Jay > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Traffic Levels

by Koch, Andrew

TDS is seeing a slight dip in traffic from CDW, all else is looking normal from our network. Andy Koch TDS Telecom - IP Network Operations andrew.koch(a)tdstelecom.com Desk: 608-664-4694 Cell: 608-616-0072 > -----Original Message----- > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of > Jay Hanke > Sent: Tuesday, January 10, 2012 11:52 > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: [MICE-DISCUSS] Traffic Levels > > We lost a LOT of traffic about 10 AM. It doesn't appear to be recovering. > > Is everything ok? > > Jay > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Traffic Levels

by Eric Crist

10am is when Doug downed the US Cable interface… --- Eric F Crist System Administrator ClaimLynx, Inc (952) 593-5969 x2301 On Jan 10, 2012, at 11:52:06, Jay Hanke wrote: > We lost a LOT of traffic about 10 AM. It doesn't appear to be recovering. > > Is everything ok? > > Jay > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Traffic Levels

by David Farmer

It is Akamai, we took a similar hit on our Akamai node about the same time. http://perfsonar.northernlights.gigapop.net/gui/cacti/graph.php?action=view… On 1/10/12 11:52 CST, Jay Hanke wrote: > We lost a LOT of traffic about 10 AM. It doesn't appear to be recovering. > > Is everything ok? > > Jay > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Traffic Levels

by Jay Hanke

We lost a LOT of traffic about 10 AM. It doesn't appear to be recovering. Is everything ok? Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Implex Peering

by Jay Hanke

Implex are you there? :) Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Jay Hanke

>> There hasn't been any change at ipHouse that would account for any >> routing change. I can still ping the switch at 69.147.218.253 from >> ipHouse. Two ideas: 1) Wasn't one of the akamai routing changes done in a about the same time? 2) From the USI perspective, what path are you following towards the MICE subnet? Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Steve Howard

Doug, On 01/10/2012 10:25 AM, Doug McIntyre wrote: > On Tue, Jan 10, 2012 at 10:02:00AM -0600, Steve Howard wrote: >> FYI: The CNS switch has a default route of 69.147.218.3 (iphouse). >> Perhaps we need to change that? > Did something change during the move from "AC to DC" power on 12/20 > for the CNS switch? There were no software changes made. Just physically moved the switch and pulled out the AC power supplies and put in DC. However, prior to power supply change I got an e-mail from Anthony on 12/16 indicating that he could no longer ping the CNS switch. Something must have changed. > There hasn't been any change at ipHouse that would account for any > routing change. I can still ping the switch at 69.147.218.253 from ipHouse. > > It would be interesting to see what the routing table in the CNS switch > looked like. Here is the routing table (after I changed it today): Gateway of last resort is not set 216.250.190.0/32 is subnetted, 1 subnets S 216.250.190.133 [1/0] via 69.147.218.3 S 216.240.190.0/24 [1/0] via 69.147.218.3 69.0.0.0/24 is subnetted, 1 subnets C 69.147.218.0 is directly connected, Vlan847 172.31.0.0/32 is subnetted, 1 subnets S 172.31.10.131 [1/0] via 10.248.1.1 S 209.191.199.0/24 [1/0] via 69.147.218.120 S 216.17.46.0/24 [1/0] via 69.147.218.19 10.0.0.0/30 is subnetted, 1 subnets C 10.248.1.0 is directly connected, FastEthernet0 > Since this is a L3 switch, you could edit the routing table with just netblocks > instead of a default route. > It only has the base feature package. So, the options are limited. But, it looks like it can handle static routes just fine... So I added them. > (ie. really we just need a route for 216.250.190.0/24 out to 69.147.218.3 > for your switch to reach the stats.micemn.net machine). > Likewise, having a route for the new stats VM at USInternet could be done > the same way reachable via their gateway. > What is the IP address for the USInternet stats VM? I tried 216.17.46.18, but I couldn't ping it from the CNS switch. The CNS switch logs don't indicate any snmp queries except for the ones from 216.250.190.133. ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: US Cable/Midco Disconnect

by Doug McIntyre

On Tue, Jan 10, 2012 at 08:55:13AM -0600, Jay Hanke wrote: > US Cable (Midco) is disconnecting from MICE. They can be removed from > the route servers and their port can be shut down. Sure, I have them unconfigured from the Route servers, and have shutdown port ge-0/0/42. -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Doug McIntyre

On Tue, Jan 10, 2012 at 10:02:00AM -0600, Steve Howard wrote: > FYI: The CNS switch has a default route of 69.147.218.3 (iphouse). > Perhaps we need to change that? Did something change during the move from "AC to DC" power on 12/20 for the CNS switch? There hasn't been any change at ipHouse that would account for any routing change. I can still ping the switch at 69.147.218.253 from ipHouse. It would be interesting to see what the routing table in the CNS switch looked like. Since this is a L3 switch, you could edit the routing table with just netblocks instead of a default route. (ie. really we just need a route for 216.250.190.0/24 out to 69.147.218.3 for your switch to reach the stats.micemn.net machine). Likewise, having a route for the new stats VM at USInternet could be done the same way reachable via their gateway. -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Steve Howard

FYI: The CNS switch has a default route of 69.147.218.3 (iphouse). Perhaps we need to change that? On 01/09/2012 07:23 PM, Anthony Anderberg wrote: > I can ping it from the main MICE switch but not from the new stats server, > traceroutes from there don't complete - Justin can you take a look? > Looks like 12/15/2011 at 22:53 was the last successful poll if that helps any. > > I'd thought it was just a couple larger players that have been inactive lately, good catch. > > > Anthony Anderberg > Sr. Systems Analyst > 320-234-5239 > anthonyanderberg(a)nu-telecom.net > www.nutelecom.net > > > > -----Original Message----- > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of David Farmer > Sent: Monday, January 09, 2012 6:56 PM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: [MICE-DISCUSS] Stats Collection for CNS Switch > > The stats collection for the CNS Switch seems to be missing since mid December on; > > http://micelg.usinternet.com/cacti > > I think it is effecting the Aggregate MICE Traffic graph on the main web page. > > Compare these two detail graphs for the same port on the two different Cacti set ups. > > http://stats.micemn.net/cacti/graph.php?action=view&local_graph_id=94&rra_i… > > http://micelg.usinternet.com/cacti/graph.php?action=view&local_graph_id=148… > > Thanks > > -- > =============================================== > David Farmer Email:farmer@umn.edu > Networking& Telecommunication Services > Office of Information Technology > University of Minnesota > 2218 University Ave SE Phone: 612-626-0815 > Minneapolis, MN 55414-3029 Cell: 612-812-9952 > =============================================== > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

US Cable/Midco Disconnect

by Jay Hanke

US Cable (Midco) is disconnecting from MICE. They can be removed from the route servers and their port can be shut down. Thanks, Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by David Farmer

Our Traffic has defiantly down a bit because of break. However, that means we were pulling a daily peak of 200-300Mb instead of 500-600Mb from MICE, and a our peak is a bit narrower than normal. It's starting to ramp back up this week, we made about 400Mb today, and will be fully back to normal after MLK next Tuesday. On 1/9/12 19:23 CST, Anthony Anderberg wrote: > I can ping it from the main MICE switch but not from the new stats server, > traceroutes from there don't complete - Justin can you take a look? > Looks like 12/15/2011 at 22:53 was the last successful poll if that helps any. > > I'd thought it was just a couple larger players that have been inactive lately, good catch. > > > Anthony Anderberg > Sr. Systems Analyst > 320-234-5239 > anthonyanderberg(a)nu-telecom.net > www.nutelecom.net > > > > -----Original Message----- > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of David Farmer > Sent: Monday, January 09, 2012 6:56 PM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: [MICE-DISCUSS] Stats Collection for CNS Switch > > The stats collection for the CNS Switch seems to be missing since mid December on; > > http://micelg.usinternet.com/cacti > > I think it is effecting the Aggregate MICE Traffic graph on the main web page. > > Compare these two detail graphs for the same port on the two different Cacti set ups. > > http://stats.micemn.net/cacti/graph.php?action=view&local_graph_id=94&rra_i… > > http://micelg.usinternet.com/cacti/graph.php?action=view&local_graph_id=148… > > Thanks > > -- > =============================================== > David Farmer Email:farmer@umn.edu > Networking& Telecommunication Services > Office of Information Technology > University of Minnesota > 2218 University Ave SE Phone: 612-626-0815 > Minneapolis, MN 55414-3029 Cell: 612-812-9952 > =============================================== > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Anthony Anderberg

I can ping it from the main MICE switch but not from the new stats server, traceroutes from there don't complete - Justin can you take a look? Looks like 12/15/2011 at 22:53 was the last successful poll if that helps any. I'd thought it was just a couple larger players that have been inactive lately, good catch. Anthony Anderberg Sr. Systems Analyst 320-234-5239 anthonyanderberg(a)nu-telecom.net www.nutelecom.net -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of David Farmer Sent: Monday, January 09, 2012 6:56 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: [MICE-DISCUSS] Stats Collection for CNS Switch The stats collection for the CNS Switch seems to be missing since mid December on; http://micelg.usinternet.com/cacti I think it is effecting the Aggregate MICE Traffic graph on the main web page. Compare these two detail graphs for the same port on the two different Cacti set ups. http://stats.micemn.net/cacti/graph.php?action=view&local_graph_id=94&rra_i… http://micelg.usinternet.com/cacti/graph.php?action=view&local_graph_id=148… Thanks -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: Stats Collection for CNS Switch

by Mike Horwath

On Mon, Jan 09, 2012 at 06:56:29PM -0600, David Farmer wrote: > The stats collection for the CNS Switch seems to be missing since > mid December on; > > http://micelg.usinternet.com/cacti > > I think it is effecting the Aggregate MICE Traffic graph on the main > web page. > > Compare these two detail graphs for the same port on the two > different Cacti set ups. > > http://stats.micemn.net/cacti/graph.php?action=view&local_graph_id=94&rra_i… > > http://micelg.usinternet.com/cacti/graph.php?action=view&local_graph_id=148… > Ineresting - thans Dave! That would affect things from what I can tell yeah. -- Mike Horwath ipHouse - Welcome home! drechsau(a)iphouse.net The universe is an island, surrounded by whatever it is that surrounds universes. - Berkeley Fortune ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Stats Collection for CNS Switch

by David Farmer

The stats collection for the CNS Switch seems to be missing since mid December on; http://micelg.usinternet.com/cacti I think it is effecting the Aggregate MICE Traffic graph on the main web page. Compare these two detail graphs for the same port on the two different Cacti set ups. http://stats.micemn.net/cacti/graph.php?action=view&local_graph_id=94&rra_i… http://micelg.usinternet.com/cacti/graph.php?action=view&local_graph_id=148… Thanks -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Jan. 10, 2012

Re: New Switch Proposal

by Koch, Andrew

On Dec 22, 2011, at 9:17 PM, Andrew Hoyos wrote: > > That's why you get those 'administrative packets' to not happen in the > first place. > No offense, but I don't want to see your cdp/lldp, ospf, stp, keepalives, > etc. coming across the IX. While, at the time I found it annoying, I am glad that another IX put my router into a quarantine vlan before allowing access for the first time. I discovered that on a new router with new IOS that I was running (Advanced Enterprise), DEC MOP was enabled by default on the port. Just like the protocols listed above, it was not something that should be seen on an IX. MOP is something I thought died many years ago, but obviously not. I am glad that the protections that IX enforced helped me to eliminate my unwanted frames. This was from a professionally run IX. I don't expect for our community run IX to have the resources to troubleshoot and quarantine new participants. I wanted to express the point that we may not all realize the extraneous stuff our routers may be doing. New participants may, however, find it useful to grab a capture of the traffic they are emitting and evaluate if it is proper or necessary before connecting to the IX port. > On an IX, realistically, we should only be seeing one router/mac address > per port, and only IP traffic from said router. > > AMSIX has a good guide on how to make your devices be quiet for most > platforms, here: > > http://www.ams-ix.net/config-guide/ > > Now, I could see making exceptions for devices which don't seem to have a > way to be quiet, but in 99% of the cases here, a few lines of config can > avoid this problem. I second the recommendation to use this config guide and for each port to have a single router/MAC attached. There should be no reason for a second MAC to be seen on any port except those that are connecting sanctioned remote switches. Whatever the consensus is on allowed traffic, MAC usage, etc. - the policy should be available to participants and posted to the webpage. Andy Koch TDS Telecom - IP Network Operations andrew.koch(a)tdstelecom.com Desk: 608-664-4694 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 31, 2011

Re: New Switch Proposal

by Justin Krejci

True but dynamic mac addresses will still age out either way, it would just be a matter of how quickly if you can't bounce the IX port or get some administrative assistance to manually the flush the MAC entries on your IX port. On Mon, 2011-12-26 at 20:12 -0600, Frank Bulk wrote: > Depending on the transport, the interface at the IX switch may not go down when the MICE participant swaps out their equipment. > > Frank > > -----Original Message----- > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Justin Krejci > Sent: Thursday, December 22, 2011 8:36 PM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: Re: [MICE-DISCUSS] New Switch Proposal > > I don't see how anyone needs to update anything. Once the dynamically learned old mac address ages out the new one could be learned or perhaps as soon as the interface goes down the dynamically learned mac address is flushed depending on how it works on Junos. > > > > -----Original Message----- > From: Owen DeLong <owend(a)HE.NET> > Sender: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> > Date: Fri, 23 Dec 2011 09:24:03 > To: <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> > Reply-To: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> > Subject: Re: [MICE-DISCUSS] New Switch Proposal > > What is the perceived benefit of doing this? The down-side is that whenever anyone has to replace a line card or do an equipment swap, they need to coordinate with someone who can update the port security on the switch. Worse, they need to remember that's an issue at the time or figure it out through a (not terribly convenient) troubleshooting process. > > Owen > > > Sent from my iPad > > On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> wrote: > > > I have purchased a new EX 2200 switch for the Mankato Networks rack. > > The new switch will be dedicated and will enable traffic stats for > > those connected to my switch. > > > > As a trial, I plan to enable port security on the downstream access > > ports limiting the port to one learned mac-address. The port security > > mechanism is the same on the EX 2200 as the EX 4200 so if successful, > > a similar strategy could be applied to the main switch. > > > > The uplink to the main switch will remain the same. > > > > Pending feedback, I'm planning to perform the move sometime in early January. > > > > Thanks, > > > > Jay > > > > ######################################################################## > > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 27, 2011

Re: New Switch Proposal

by Owen DeLong

Yes, but, if that's necessary, it's the administrative intervention required that I was saying wasn't necessarily a good thing. However, it sounds like what Jay is talking about is different from what I was thinking and his choice may be feasible. I'm still not necessarily convinced it gains us much vs. running a fast STP on the IX, but, since there's apparently desire not to run any fast STP on the IX, this seems like a reasonable alternative. Owen On Dec 26, 2011, at 6:13 PM, Frank Bulk wrote: > Couldn't that port be configured to allow all MACs in advance of the cut, and then tightened down again afterwards? > > Frank > > -----Original Message----- > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Owen DeLong > Sent: Thursday, December 22, 2011 8:24 PM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: Re: [MICE-DISCUSS] New Switch Proposal > > What is the perceived benefit of doing this? The down-side is that whenever anyone has to replace a line card or do an equipment swap, they need to coordinate with someone who can update the port security on the switch. Worse, they need to remember that's an issue at the time or figure it out through a (not terribly convenient) troubleshooting process. > > Owen > > > Sent from my iPad > > On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> wrote: > >> I have purchased a new EX 2200 switch for the Mankato Networks rack. >> The new switch will be dedicated and will enable traffic stats for >> those connected to my switch. >> >> As a trial, I plan to enable port security on the downstream access >> ports limiting the port to one learned mac-address. The port security >> mechanism is the same on the EX 2200 as the EX 4200 so if successful, >> a similar strategy could be applied to the main switch. >> >> The uplink to the main switch will remain the same. >> >> Pending feedback, I'm planning to perform the move sometime in early January. >> >> Thanks, >> >> Jay >> >> ######################################################################## >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 27, 2011

Re: New Switch Proposal

by Owen DeLong

Yes. On Dec 22, 2011, at 7:12 PM, Andrew Hoyos wrote: > Owen - were you thinking 'sticky-mac' style config, where you must have someone manually config a mac address allowed list for the port? That's not what Jay is suggesting here. > > On Dec 22, 2011, at 8:41 PM, Jay Hanke wrote: > >> The benefit is it will block traffic from other mac addresses in the event of a loop or other misconfiguration. The learned mac address will clear automatically when the port goes down so it should not require admin assistance. >> >> On Dec 22, 2011 8:28 PM, "Owen DeLong" <owend(a)he.net> wrote: >> What is the perceived benefit of doing this? The down-side is that whenever anyone has to replace a line card or do an equipment swap, they need to coordinate with someone who can update the port security on the switch. Worse, they need to remember that's an issue at the time or figure it out through a (not terribly convenient) troubleshooting process. >> >> Owen >> >> >> Sent from my iPad >> >> On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> wrote: >> >>> I have purchased a new EX 2200 switch for the Mankato Networks rack. >>> The new switch will be dedicated and will enable traffic stats for >>> those connected to my switch. >>> >>> As a trial, I plan to enable port security on the downstream access >>> ports limiting the port to one learned mac-address. The port security >>> mechanism is the same on the EX 2200 as the EX 4200 so if successful, >>> a similar strategy could be applied to the main switch. >>> >>> The uplink to the main switch will remain the same. >>> >>> Pending feedback, I'm planning to perform the move sometime in early January. >>> >>> Thanks, >>> >>> Jay >>> >>> ######################################################################## >>> >>> To unsubscribe from the MICE-DISCUSS list, click the following link: >>> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >> >> ######################################################################## >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >> >> To unsubscribe from the MICE-DISCUSS list, click the following link: >> http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 >> > > -- > Andrew Hoyos > hoyosa(a)gmail.com > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 27, 2011

Re: New Switch Proposal

by Frank Bulk

Couldn't that port be configured to allow all MACs in advance of the cut, and then tightened down again afterwards? Frank -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Owen DeLong Sent: Thursday, December 22, 2011 8:24 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] New Switch Proposal What is the perceived benefit of doing this? The down-side is that whenever anyone has to replace a line card or do an equipment swap, they need to coordinate with someone who can update the port security on the switch. Worse, they need to remember that's an issue at the time or figure it out through a (not terribly convenient) troubleshooting process. Owen Sent from my iPad On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> wrote: > I have purchased a new EX 2200 switch for the Mankato Networks rack. > The new switch will be dedicated and will enable traffic stats for > those connected to my switch. > > As a trial, I plan to enable port security on the downstream access > ports limiting the port to one learned mac-address. The port security > mechanism is the same on the EX 2200 as the EX 4200 so if successful, > a similar strategy could be applied to the main switch. > > The uplink to the main switch will remain the same. > > Pending feedback, I'm planning to perform the move sometime in early January. > > Thanks, > > Jay > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 27, 2011

Re: New Switch Proposal

by Frank Bulk

Depending on the transport, the interface at the IX switch may not go down when the MICE participant swaps out their equipment. Frank -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Justin Krejci Sent: Thursday, December 22, 2011 8:36 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] New Switch Proposal I don't see how anyone needs to update anything. Once the dynamically learned old mac address ages out the new one could be learned or perhaps as soon as the interface goes down the dynamically learned mac address is flushed depending on how it works on Junos. -----Original Message----- From: Owen DeLong <owend(a)HE.NET> Sender: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> Date: Fri, 23 Dec 2011 09:24:03 To: <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> Reply-To: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> Subject: Re: [MICE-DISCUSS] New Switch Proposal What is the perceived benefit of doing this? The down-side is that whenever anyone has to replace a line card or do an equipment swap, they need to coordinate with someone who can update the port security on the switch. Worse, they need to remember that's an issue at the time or figure it out through a (not terribly convenient) troubleshooting process. Owen Sent from my iPad On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> wrote: > I have purchased a new EX 2200 switch for the Mankato Networks rack. > The new switch will be dedicated and will enable traffic stats for > those connected to my switch. > > As a trial, I plan to enable port security on the downstream access > ports limiting the port to one learned mac-address. The port security > mechanism is the same on the EX 2200 as the EX 4200 so if successful, > a similar strategy could be applied to the main switch. > > The uplink to the main switch will remain the same. > > Pending feedback, I'm planning to perform the move sometime in early January. > > Thanks, > > Jay > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 27, 2011

Re: New Switch Proposal

by Jay Hanke

On Fri, Dec 23, 2011 at 10:11 AM, Mike Horwath <drechsau(a)iphouse.net> wrote: > If this is done can we get DNS turned on again? U talking about reverse? It's working but some of the newer participants need to be added. Jay ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011

Re: New Switch Proposal

by Mike Horwath

If this is done can we get DNS turned on again? Traceroute by name >> by IP for humans and their word memories, and each DNS server can issue different results, ya know? And I like a good argument... -- Mike Horwath via iPad 2, electric boogaloo! ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011

Re: New Switch Proposal

by Andrew Hoyos

On Dec 22, 2011, at 10:26 PM, Doug McIntyre wrote: > On Thu, Dec 22, 2011 at 09:17:08PM -0600, Andrew Hoyos wrote: >> On Dec 22, 2011, at 9:01 PM, Doug McIntyre wrote: >> >>> mac address limiting to tiny numbers, especially qty 1 won't work. >>> There are a lot of administrative packets that go across a link coming >>> from specific well-known MAC addresses, if that administrative packet >>> gets in before any real traffic, that administrative MAC address will >>> be learned and real traffic locked out. >>> >>> (this is mentioned in the JunOS documentation). >>> >> >> That's why you get those 'administrative packets' to not happen in the first place. >> No offense, but I don't want to see your cdp/lldp, ospf, stp, keepalives, etc. coming across the IX. > > There are other protocols that do take more than one MAC address that > some people might find required. For example, a JunOS RVI has two MAC > adddresses, the port address, and the RVI MAC address. I assume > a Cisco SVI would be the same, although I haven't dug into it. Yes, but if the switchport is properly configured, no frames should be emitted with the switchport mac address. We should only see the RVI/SVI mac addr. > Cisco UDLD also does broadcasts using a well-known MAC address. UDLD is proprietary, and most (if not all now?) of the exchange appears to be running on Juniper equipment, so it's not of much use to run anyway. 'udld disable' fixes that up. > I don't think it would be allowed anyway at the IX, but LACP and PAgP > are also ones to talk on different MAC addresses to setup the LAG before > talking real traffic. I'm sure there is some working config we could come up with in that case, if a participant did want LACP. I'd be curious if vendor implementations actually factor in the LACP packets to mac addr limits, since it's port to port, and they really don't transit outside of that. The only reason I'm pushing this too, is as the exchange grows, and more unfiltered layer2 traffic (and broken downstream L2 devices) enter the exchange, it *can* and *will* have a negative effect, as we've already seen once before. The model works well for IX's like Equinix, TIE, SIX, AMSIX, etc. I don't see a reason why it can't work here too, and prevent future issues. -- Andrew Hoyos hoyosa(a)gmail.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011

Re: New Switch Proposal

by Doug McIntyre

On Thu, Dec 22, 2011 at 09:17:08PM -0600, Andrew Hoyos wrote: > On Dec 22, 2011, at 9:01 PM, Doug McIntyre wrote: > > > mac address limiting to tiny numbers, especially qty 1 won't work. > > There are a lot of administrative packets that go across a link coming > > from specific well-known MAC addresses, if that administrative packet > > gets in before any real traffic, that administrative MAC address will > > be learned and real traffic locked out. > > > > (this is mentioned in the JunOS documentation). > > > > That's why you get those 'administrative packets' to not happen in the first place. > No offense, but I don't want to see your cdp/lldp, ospf, stp, keepalives, etc. coming across the IX. There are other protocols that do take more than one MAC address that some people might find required. For example, a JunOS RVI has two MAC adddresses, the port address, and the RVI MAC address. I assume a Cisco SVI would be the same, although I haven't dug into it. Cisco UDLD also does broadcasts using a well-known MAC address. I don't think it would be allowed anyway at the IX, but LACP and PAgP are also ones to talk on different MAC addresses to setup the LAG before talking real traffic. -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011

Re: New Switch Proposal

by Andrew Hoyos

On Dec 22, 2011, at 9:01 PM, Doug McIntyre wrote: > mac address limiting to tiny numbers, especially qty 1 won't work. > There are a lot of administrative packets that go across a link coming > from specific well-known MAC addresses, if that administrative packet > gets in before any real traffic, that administrative MAC address will > be learned and real traffic locked out. > > (this is mentioned in the JunOS documentation). > That's why you get those 'administrative packets' to not happen in the first place. No offense, but I don't want to see your cdp/lldp, ospf, stp, keepalives, etc. coming across the IX. On an IX, realistically, we should only be seeing one router/mac address per port, and only IP traffic from said router. AMSIX has a good guide on how to make your devices be quiet for most platforms, here: http://www.ams-ix.net/config-guide/ Now, I could see making exceptions for devices which don't seem to have a way to be quiet, but in 99% of the cases here, a few lines of config can avoid this problem. -- Andrew Hoyos hoyosa(a)gmail.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011

Re: New Switch Proposal

by Andrew Hoyos

Owen - were you thinking 'sticky-mac' style config, where you must have someone manually config a mac address allowed list for the port? That's not what Jay is suggesting here. On Dec 22, 2011, at 8:41 PM, Jay Hanke wrote: > The benefit is it will block traffic from other mac addresses in the event of a loop or other misconfiguration. The learned mac address will clear automatically when the port goes down so it should not require admin assistance. > > On Dec 22, 2011 8:28 PM, "Owen DeLong" <owend(a)he.net> wrote: > What is the perceived benefit of doing this? The down-side is that whenever anyone has to replace a line card or do an equipment swap, they need to coordinate with someone who can update the port security on the switch. Worse, they need to remember that's an issue at the time or figure it out through a (not terribly convenient) troubleshooting process. > > Owen > > > Sent from my iPad > > On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> wrote: > > > I have purchased a new EX 2200 switch for the Mankato Networks rack. > > The new switch will be dedicated and will enable traffic stats for > > those connected to my switch. > > > > As a trial, I plan to enable port security on the downstream access > > ports limiting the port to one learned mac-address. The port security > > mechanism is the same on the EX 2200 as the EX 4200 so if successful, > > a similar strategy could be applied to the main switch. > > > > The uplink to the main switch will remain the same. > > > > Pending feedback, I'm planning to perform the move sometime in early January. > > > > Thanks, > > > > Jay > > > > ######################################################################## > > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > -- Andrew Hoyos hoyosa(a)gmail.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011

Re: New Switch Proposal

by Doug McIntyre

mac address limiting to tiny numbers, especially qty 1 won't work. There are a lot of administrative packets that go across a link coming from specific well-known MAC addresses, if that administrative packet gets in before any real traffic, that administrative MAC address will be learned and real traffic locked out. (this is mentioned in the JunOS documentation). mac-address limiting is mainly used for untrusted environments such that you are protecting the switch from having its CAM table blasted out turning the switch into broadcast all packets down all ports mode since its CAM table is full. Then the attacker can sniff for traffic they are looking for, hopefully grabbing the traffic they are trying to intercept before the hardware CPU pegged at 100% signals the NOC that something is amiss and they start looking for what is going on. In practice, in such an untrusted environment( untrusted site, untrusted ports, with max of one device per user. ), I found that at a minimum 3 MAC address limit was the practical smallest size I could go, with typically a range of 5 to 10. Otherwise, administrative and other weird packets would shut down the ports due to flase security alerts all the time, and it wasn't practical to have such low limits. On Thu, Dec 22, 2011 at 08:41:47PM -0600, Jay Hanke wrote: > The benefit is it will block traffic from other mac addresses in the event > of a loop or other misconfiguration. The learned mac address will clear > automatically when the port goes down so it should not require admin > assistance. > On Dec 22, 2011 8:28 PM, "Owen DeLong" <owend(a)he.net> wrote: > > > What is the perceived benefit of doing this? The down-side is that > > whenever anyone has to replace a line card or do an equipment swap, they > > need to coordinate with someone who can update the port security on the > > switch. Worse, they need to remember that's an issue at the time or figure > > it out through a (not terribly convenient) troubleshooting process. > > > > Owen > > > > > > Sent from my iPad > > > > On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> > > wrote: > > > > > I have purchased a new EX 2200 switch for the Mankato Networks rack. > > > The new switch will be dedicated and will enable traffic stats for > > > those connected to my switch. > > > > > > As a trial, I plan to enable port security on the downstream access > > > ports limiting the port to one learned mac-address. The port security > > > mechanism is the same on the EX 2200 as the EX 4200 so if successful, > > > a similar strategy could be applied to the main switch. > > > > > > The uplink to the main switch will remain the same. > > > > > > Pending feedback, I'm planning to perform the move sometime in early > > January. > > > > > > Thanks, > > > > > > Jay > > > > > > ######################################################################## > > > > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > > > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > > > ######################################################################## > > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 -- Doug McIntyre <merlyn(a)iphouse.net> -- ipHouse/Goldengate/Bitstream/ProNS -- Network Engineer/Provisioning/Jack of all Trades ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011

Re: New Switch Proposal

by Jay Hanke

The benefit is it will block traffic from other mac addresses in the event of a loop or other misconfiguration. The learned mac address will clear automatically when the port goes down so it should not require admin assistance. On Dec 22, 2011 8:28 PM, "Owen DeLong" <owend(a)he.net> wrote: > What is the perceived benefit of doing this? The down-side is that > whenever anyone has to replace a line card or do an equipment swap, they > need to coordinate with someone who can update the port security on the > switch. Worse, they need to remember that's an issue at the time or figure > it out through a (not terribly convenient) troubleshooting process. > > Owen > > > Sent from my iPad > > On Dec 23, 2011, at 4:23 AM, Jay Hanke <jayhanke(a)MANKATONETWORKS.NET> > wrote: > > > I have purchased a new EX 2200 switch for the Mankato Networks rack. > > The new switch will be dedicated and will enable traffic stats for > > those connected to my switch. > > > > As a trial, I plan to enable port security on the downstream access > > ports limiting the port to one learned mac-address. The port security > > mechanism is the same on the EX 2200 as the EX 4200 so if successful, > > a similar strategy could be applied to the main switch. > > > > The uplink to the main switch will remain the same. > > > > Pending feedback, I'm planning to perform the move sometime in early > January. > > > > Thanks, > > > > Jay > > > > ######################################################################## > > > > To unsubscribe from the MICE-DISCUSS list, click the following link: > > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > > ######################################################################## > > To unsubscribe from the MICE-DISCUSS list, click the following link: > http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 > ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

Dec. 23, 2011