- mice-discuss - lists.micemn.net

Additional Google Port
by Jason Hanke Dec. 12, 2014

Dec. 12, 2014

Please allocate xe-0/0/31 on the main switch for Google. The port will need to be added to the Google LAG group (ae4). Thanks! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

2 1

Please welcome Longlines to MICE!
by Jason Hanke Dec. 12, 2014

Dec. 12, 2014

Main Switch port xe-0/0/10 Longlines ASN 32867 IPv4:206.108.255.38/24 IPv6: 2607:fe10:ffff::382001:504:27:0:0:8063::1 Peering Contact: Dan.Winkel(a)longlines.biz Route server configuration please. Also note, xe-0/0/10 was previously allocated to Arcustech, LLC. They are not ready to connect yet and will request a port assignment when ready. Arcustech will retain their previously assigned IP information. Welcome aboard! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

2 1

Please welcome WiscNet to MICE!
by Jason Hanke Dec. 2, 2014

Dec. 2, 2014

Name: WiscNet ASN: 2381 Port: via GigaPop IPv4: 206.108.255.125/24 IPv6: 2001:504:27:0:0:094D::1/64 Contact: peering(a)wiscnet.net Route Server configuration please -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

4 3

FYI: CNS MICE Switch upgrade to 20Mbps
by Steve Howard Nov. 21, 2014

Nov. 21, 2014

Hello, We are planning to upgrade the CNS Switch connection to a 2x10Gbps LAG tomorrow morning around 5:30-6:00AM. I suspect that this will cause a brief outage for the members that are connected to the MICE switch. If this is a problem for anybody, please let me know and we will reschedule to next week. Thanks, Steve

4 4

Gigapop Link Saturated
by Nathan Beard Nov. 10, 2014

Nov. 10, 2014

All, It appears that the Gigapop link is saturated, and I've had multiple reports of packet loss on traces to IP's that traverse the exchange link. I'm sure people are already aware of the issue, but does anybody have an ETA on when another link will be added or what is currently being done? Thanks. --

5 5

CNS Remote Switch LAG Port
by Jason Hanke Nov. 7, 2014

Nov. 7, 2014

Please allocate xe-0/0/29 for a second 10G link to the CNS Remote Switch. The port will LAG with the existing 10G connection xe-0/0/38 when complete. Doug/Anthony, can you coordinate with Steve? -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

1 0

MICE Traffic
by Anthony Anderberg Nov. 7, 2014

Nov. 7, 2014

Summary: Yesterday afternoon we had a ~20M spike in egress traffic on MICE that seems to have been caused by the main switch not populating a MAC address or two in its L2 table. Since it appears we've seen this before and none of the recent storm control features got triggered it seems like a bug that will need a little research. I don't believe traffic exchange across the network was affected. Gory Details: In late afternoon I noticed that normally quiet ports all had identical graphs showing ~20M of egress traffic. Seeing that it started at about the same time as several changes on the CNS remote switch I called Steve Howard and together we worked through the issue. Counters indicated that it was unicast traffic and Steve wasn't seeing the same patterns on his switch so we zero'ed in on the idea that it was unknown unicast packets (unicasts who's destination MAC wasn't in the L2 forwarding database.) Since that doesn't make any sense in our environment and logs didn't show continuous storm control activity we cleared the L2 forwarding table on the main switch at about 18:41 and traffic immediately returned to normal and has remained normal since. Interestingly there was one burst of logs for a couple seconds like this at the beginning: Nov 5 13:41:04 MICE-SW1 backup MRVL-L2:mrvl_fdb_mac_entry_uc_set(),966:FDb SP HW-overwrite failed(3) for VLANIdx=3:5c:5e:ab:d5:9e:f0/48:IFL=137 I did a search on the error and one of the few hits was some yahoos in Minnesota trying to setup an Internet exchange... but that'll never work. :-) https://www.google.com/search?q=juniper+%22mrvl_fdb_mac_entry_uc_set%28%29%… Other links suggest there is a Juniper bug ID and associated software upgrade so we'll need to do a little research to see what makes sense on that front. Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net>

2 2

Please welcome New Core Wireless to MICE
by Jason Hanke Nov. 5, 2014

Nov. 5, 2014

New Core Wireless ASN: 27204 IPv4: 206.108.255.128/24 IPv6: 2001:504:27:0:0:6a44::1/64 Contact: network(a)7sigma.com They will be connecting via the CNS switch. Steve, do you have a port assignment? Route server config please. :) Welcome Aboard! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

5 4

111 G+
by Jason Hanke Nov. 3, 2014

Nov. 3, 2014

We topped out over 111G last night on MICE! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

6 5

Google IPv6
by Richard Laager Nov. 3, 2014

Nov. 3, 2014

Steve Howard posted this handy URL: http://redirector.c.youtube.com/report_mapping When I visit that URL with IPv4, I'm now seeing "mice-msp1". Yay! But with IPv6, I get lvlt-bna1 (2607:f850::/32) [u]. Are others seeing Google at MICE via IPv6? -- Richard

3 2

MICE Offload rates
by Jason Hanke Oct. 31, 2014

Oct. 31, 2014

I'm looking for some stats on the percentage of traffic that MICE is handling vs transit links. I will use the average of the numbers to assist in bringing in additional members. You can unicast me if you don't want the info public. Thanks! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

1 0

Additional Google Ports TenG ports
by Jason Hanke Oct. 31, 2014

Oct. 31, 2014

Please allocate xe-0/0/27 and xe-0/0/28 to the Google AE group on the main switch. Thanks! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

2 1

Level3 Issue?
by Anthony Anderberg Oct. 31, 2014

Oct. 31, 2014

Did anyone else see Level3 issues this morning from ~midnight to a little after 1am?

2 1

Google on MICE - YAY!
by Justin Krejci Oct. 30, 2014

Oct. 30, 2014

Well it looks like yesterday they started an introductory level of traffic on MICE then today ramped up a couple of times and are now sitting in the 9+ gbps range. It does not look like any of my eyeballs have even begun to use it much at all based on my MICE traffic and searching my DNS server query logs for 208.65.155.0/24 queries so all this traffic appears to be going to Gigapop and maybe a few others. Hopefully this means Google will add one or more 10-gig links soon.

2 1

MICE Compudyne 1G-10G upgrade
by Jason Hanke Oct. 23, 2014

Oct. 23, 2014

Please allocate xe-0/0/35 on the main switch to Compudyne. Thanks! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

1 0

MICE Savage Communications 10G Upgrade
by Jason Hanke Oct. 23, 2014

Oct. 23, 2014

Savage Communications has been allocated xe-0/0/33 on the main switch to upgrade their existing service to 10G. All IP address information will remain the same. Thanks! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

1 0

MICE UG 14 Minutes
by Shaun Carlson Oct. 22, 2014

Oct. 22, 2014

Please see attached. s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

1 0

Upcoming Elections
by Shaun Carlson Oct. 22, 2014

Oct. 22, 2014

All, As we approach UG 9, Reid Fischler's term is coming to an end. The SC has been discussing his term and feel that MICE needs someone with a larger reach (read Global, not just local or regional) to fill that position, especially with the push for growth on the exchange that we currently have. With that need comes a limited number of candidates who can fit that role on MICE. We have discussed several options and, at this time, the SC would like to recommend that we extend Reid's term for a period of time while we discuss a long-term plan. Thoughts/Discussion? s *Shaun Carlson *Network Engineering Manager | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

9 16

Private VLAN Service
by Hannigan, Martin Oct. 22, 2014

Oct. 22, 2014

SInce we're on the subject of services, can we also add a PVLAN service?

2 1

Webex Reminder for Meeting - Starting Now
by Shaun Carlson Oct. 22, 2014

Oct. 22, 2014

*Remote Dial-in Info:* www.webex.com Meeting Number: 193 507 116 Meeting Password: MICEUG14 * Please try to have a web-cam hooked up to facilitate the best possible interaction. *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

1 0

Meeting Agenda
by Shaun Carlson Oct. 22, 2014

Oct. 22, 2014

See attached for meeting agenda. See you at 4! s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

1 0

Discussion Topic Response : Community Lists
by Levi Pederson Oct. 22, 2014

Oct. 22, 2014

I will not be able to attend the UG meeting today but I would still like to respond to the discussion that is to take place during the meeting. This topic at hand is the decision to implement Community Strings in the Exchange. There have been a couple responses on this and the primary reasons stated is based on security from my understanding. I am opposed to this implementation. I believe the very idea of segregation in an Internet Exchange undermines the primary purpose of the exchange. We are here to make the internet better not honeycombed. The idea of segregation based on security is a bit odd to me. An allegorical situation would be the following : Invite multiple people over for a pot-luck dinner (BYO-Dish). Have someones kid break one said dish. Then have someone take ALL the food, secure in their house and grant access/monitor to specific pot-luck goers based entirely on their specific point of view. This process I feel will create too much segregation and deviate rather far from the ideological goal of the exchange. My thoughts on responses: 1. How can we continue to provide benefits and capabilities to new members or bgp sessions gone awry? a. We are currently implementing great layer 2 defenses and that is a great start. b. Create a list of best practices and configuration examples for connecting to the exchange as a community. Forgive the long post. Just my 2 cents on table tonight. Thank you,

2 2

Discussion - Another BGP Community Viewpoint
by Steve Howard Oct. 22, 2014

Oct. 22, 2014

I will not be able to attend the MICE UG meeting tonight. However, I would like to add my thoughts regarding route advertisement control using BGP communities. I am strongly in favor of this capability being added to the route servers. Specifically, I'd like to see the ability to block advertisement to particular ASes or to prepend just to particular AS(es). Perhaps something like Level3, Sprint, and others use: 65000:XXX - do not announce to AS XXX 65001:XXX - prepend one AS to AS XXX 65002:XXX - prepend two ASes to AS XXX 65003:XXX - prepend three ASes to AS XXX 65004:XXX - prepend four ASex to AS XXX I just had to block one customer's netblock at MICE because Netflix traffic shifted in an undesirable manner yesterday. In this case, they really just needed to prepend Netflix at MICE, but since that wasn't an option they requested that we just block their netblock completely from the MICE route servers. BGP Communities give individual MICE members the ability to control their route advertisements to best suit their needs and routing policies without having to block the MICE route servers completely.

2 1

MICE in the News
by Anthony Anderberg Oct. 22, 2014

Oct. 22, 2014

I stumbled on this article that mentioned MICE, apparently we could be part of some massive government conspiracy... also MICE takes up the whole building now so I assume Mike and Al will be looking for office space elsewhere. :-) http://www.citylab.com/tech/2013/10/how-government-might-tap-physical-infra… Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net>

3 2

Netflix Ramping Up
by Jeremy Lumby Oct. 22, 2014

Oct. 22, 2014

I see Netflix is ramping up, and the link to the CNS switch is getting close to saturating. The University may need to move to the main switch soon to alleviate the link. Jeremy Lumby Minnesota VoIP 9217 17th Ave S Suite 216 Bloomington, MN 55425 Main: 612-355-7740 x211 Direct: 612-392-6814 EFax: 952-873-7425 jlumby(a)mnvoip.com

9 11

Agenda - MICE UG 14 - 22 Oct 2014
by Shaun Carlson Oct. 21, 2014

Oct. 21, 2014

All, Please see the attached agenda, if you have any additions, please let me know. Please see the attached minutes from our previous meeting. If you have any additions or corrections, please let me know. One agenda note, we'll be discussing the potential change of MICE to a 501.(c)6 non-profit organization. I've attached some discussion points and would encourage you to *send your questions and comments to the list.* Jeff Clancy from Stinson Leonard Street LLP will be present at the meeting to answer questions and facilitate our next steps should we choose to move forward with the conversion. Last, we are still in need of a sponsor for refreshments at Wednesday's meeting, any volunteers? *Remote Dial-in Info:* www.webex.com Meeting Number: 193 507 116 Meeting Password: MICEUG14 * Please try to have a web-cam hooked up to facilitate the best possible interaction. ** I will start this web conference 15 minutes prior to the meeting to allow you to dial-in and work past any technical difficulties. One request, does anyone have a projector they could bring to the meeting for this web conference? I would need it approx. 30 minutes prior to the meeting. Thanks! s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

3 7

Route Server Announcement Control?
by Charles Monson Oct. 19, 2014

Oct. 19, 2014

Do the MICE route servers offer any way to control BGP announcement to specific peers? I didn't see anything on the micemn.net website about ways to do that. With some of the larger content providers connecting to the exchange, the folks who have mostly inbound traffic might want a way to stop the route servers announcements to those potentially high traffic peers without entirely withdrawing advertisements to the route servers. Some of the other exchanges we connect at let you send a community indicating the ASN you don't want your prefixes advertisements to reach (e.g. you send a community of "0:11796" to stop the route servers from advertising your prefixes to Airstream). It would be nice to have something similar at MICE. Is this something already supported that I missed? Or something that may be considered as a future feature? Charles Monson Associate Network Administrator Airstream Communications, LLC Wisconsin Independent Network, LLC

4 4

FW: MICE L2 Security Project
by Anthony Anderberg Oct. 16, 2014

Oct. 16, 2014

As a reminder, we're planning on making the last of the changes below that will include all of our ports. As before we don't expect there to be any issues or downtime, I can be reached at 320-234-5539 if anyone has issues. Cheers, anthony Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Wednesday, October 01, 2014 11:58 PM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET<mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET>); 'MICE-ANNOUNCE(a)LISTS.IPHOUSE.NET' Subject: MICE L2 Security Project We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

1 0

Please welcome Google to MICE!
by Jason Hanke Oct. 15, 2014

Oct. 15, 2014

Network Name: Google IPv4: 206.108.255.37/24 IPv6: 2001:504:27:0:0:8cc8::1/64 ASN: 36040 Port: Main Switch xe-0/0/25 Peering Contact: peering(a)google.com Please configure route servers and switches! Welcome aboard! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

2 1

Connect Minnesota event
by Mike Hemphill Oct. 14, 2014

Oct. 14, 2014

All, Cologix is hosting an event “Connect Minnesota” on October 22nd. See below. Breakfast or lunch. This is the same day as the 4PM MICE UG meeting in the 511 Building Cafeteria. You are welcome to attend. Please register from the flyer below. Thanks, I look forward to seeing as many of you as possible on the 22nd. Best regards, Mike Mike Hemphill General Manager | *Cologix, Inc.* <http://www.cologix.com/> 511 11th Ave S, Suite 450 | Minneapolis, MN 55415 P: 1+612.333.1922 | M: 1+612.812.5242 mike.hemphill(a)cologix.com [image: cid:image001.jpg@01CFE70E.D63D3E50] <http://events.r20.constantcontact.com/register/event?oeidk=a07e9xlel5t157da…>

1 0

Meeting Reminder
by Shaun Carlson Oct. 9, 2014

Oct. 9, 2014

Good afternoon all! I wanted to send out a quick reminder of our upcoming user group meeting (UG 14!!) on October 22nd at 4 pm in the 511 building. We're working on getting a web meeting set up, however, we've had some technical difficulties, so it would be better to be there in person (hint, hint). Ok, last item, a call for Agenda items. I'm planning to send out the initial agenda on Monday, so please send me any items you'd like added to the agenda and I'll get them on there. We've got a lot to talk about this quarter, so see you all on the 22nd! Thanks! s *Shaun Carlson*Senior Manager of Information Technology | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com

2 2

FW: MICE L2 Security Project
by Anthony Anderberg Oct. 9, 2014

Oct. 9, 2014

This first phase is complete, if anyone has trouble peering with the beta testers let us know. Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Thursday, October 09, 2014 9:08 AM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET) Subject: FW: MICE L2 Security Project As a reminder, at 10am this morning we'm planning on making the first set of changes below for our beta testers: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. I can be reached at 320-234-5539 if anyone has issues. Cheers, anthony Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Wednesday, October 01, 2014 11:58 PM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET<mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET>); 'MICE-ANNOUNCE(a)LISTS.IPHOUSE.NET' Subject: MICE L2 Security Project We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

1 0

FW: MICE L2 Security Project
by Anthony Anderberg Oct. 9, 2014

Oct. 9, 2014

As a reminder, at 10am this morning we'm planning on making the first set of changes below for our beta testers: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. I can be reached at 320-234-5539 if anyone has issues. Cheers, anthony Anthony Anderberg Sr. Systems Analyst [NUtel_email_logo_1] 320-234-5239 anthonyanderberg(a)nu-telecom.net<mailto:anthonyanderberg@nu-telecom.net> www.nutelecom.net<http://www.nutelecom.net> From: Anthony Anderberg Sent: Wednesday, October 01, 2014 11:58 PM To: MICE Discuss (MICE-DISCUSS(a)LISTS.IPHOUSE.NET) 'MICE-ANNOUNCE(a)LISTS.IPHOUSE.NET' Subject: MICE L2 Security Project We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

1 0

Re: Website Update
by Jeremy Lumby Oct. 7, 2014

Oct. 7, 2014

I agree, I am running 1024x768 and seeing the same thing -----Original Message----- From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of Chris Wopat Sent: Sunday, April 06, 2014 5:40 PM To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: Re: [MICE-DISCUSS] Website Update On 04/04/2014 01:55 PM, Richard Laager wrote: > I've cut in the new website design (thanks MDU Ethernet!). > > If you see any problems, please let me know. The website has some rendering issues if you view it a browser that's not at least 1200px wide and 800px tall. This is especially apparent on mobile devices. On my desktop, I tend to not run any windows full screen - my desktop browser window is generally 1024x768ish or so. I suspect I'm not the only one. The issues that appear are: * When not wide enough (1200px) the top menu items display below the overlay at the top / over the main content. * When not tall enough (800px), you cannot scroll all of the way down to view all content on each page. This is especially evident on mobile browsers. Quick fix here may be to just adjust theme to auto add a certain amount of spacing after all content, which already appears to be done at the top of each page. * When narrow (mobile browser/ < 768px wide) it is also impossible to reach some of the content on the bottom menu, such as the donate button. Here's a few screenshots, first on a desktop OS, the next two on mobile (android) * http://falz.net/static/micemn-chrome.png * http://falz.net/static/micemn-mobile1.png * http://falz.net/static/micemn-mobile2.png Cheers, -- Chris Wopat SupraNet Communications, Inc. chrisw(a)supranet.net (608) 836-0282 x302 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

3 3

Please welcome Netflix to MICE!
by Jason Hanke Oct. 3, 2014

Oct. 3, 2014

Netflix will connect to the main switch with two LAG groups LAG Group 1 IPv4 Address: 206.108.255.35/24 IPv6 address: 2001:504:27:0:0:0b5a::1/64 Member ports: xe-0/0/21, xe-0/0/22 LAG Group 2 IPv4 Address: 206.108.255.36/24 IPv6 address: 2001:504:27:0:0:0b5a::2/64 Member ports: xe-0/0/23, xe-0/0/24 ASN: 2906 Contact: peering(a)netflix.com Please configure the route servers and switches. Netflix has assigned ticket number NCO-2543 on their side if the NOC needs to be contacted. Thanks and welcome aboard! -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

2 1

MICE L2 Security Project
by Anthony Anderberg Oct. 2, 2014

Oct. 2, 2014

We're at a point where the L2 security team feels ready to make the config changes we've talked about in the past. Although these changes can't protect us from every scenario they should protect the exchange from the many common issues. As discussed at the last meeting member ports will be limited to 5 MAC addresses, storm control will be enabled at 20%, and spanning tree BPDU packets will be filtered. Additionally the exchange will support jumbo frames should members want to exchange them with each other. Obviously if any member needs alternate configuration we'll strive to be as accommodating as possible within the larger project goals. We do not anticipate any downtime, but will send out a group reminder before starting the configuration work. Our schedule: Thursday 10/9/2014 at 10AM = Make global config changes and port changes for beta testers Thursday 10/16/2014 at 10AM = Make port config changes for all other members The beta testers are: US Internet, Paul Bunyan Communications, CNS, IP House, and Wikstrom Telephone. Below is the configuration we'll be using and will publish on our web site for members to review and enjoy. As always questions and comments are welcome, anthony ----------------------------- **Cisco Switch Config ** Global Config: system mtu 1998 # Already set system mtu jumbo 9198 # Already set mac address-table aging-time 14400 errdisable detect cause link-flap errdisable recovery cause link-flap errdisable recovery cause storm-control vtp mode transparent Cisco Port Config: switchport block multicast switchport block unicast # Unknown unicasts that is. switchport port-security maximum 5 switchport port-security switchport port-security violation restrict storm-control broadcast level 20.00 spanning-tree bpdufilter enable no cdp enable ----------------------------- ** Juniper Switch Config ** Juniper Core Switch Global: set protocols rstp bridge-priority 1 # On the main switch stack set ethernet-switching-options storm-control interface all Juniper Port Config: set interface XXX mtu 9216 set protocols rstp interface XXX edge set ethernet-switching-options bpdu-block interface XXX set ethernet-switching-options bpdu-block disable-timeout 60 set ethernet-switching-options secure-access-port interface XXX mac-limit 5 set storm-control interface XXX level 20 -----------------------------

1 0

Any update on working with Google or Netflix??
by Dan Olsen Sept. 26, 2014

Sept. 26, 2014

Greetings: Any update on working with Google or Netflix??? Dan Olsen- General Manager Windomnet 443 10th Street, PO box 38 Windom MN 56101 Southwest MN Broadband Services 110 South Hwy 86, PO Box 1006, Lakefield MN 56150 Fibernet Monticello Monticello MN Voice 507-832-8007

2 1

Bash Vulnerability - MICE cacti server is patched
by Justin Krejci Sept. 24, 2014

Sept. 24, 2014

In light of the recently announced bash vulnerability (use google if you this is news to you) I have included patching the MICE cacti server while patching other US Internet systems. FYI this is a good/quick test to see if you're vulnerable BAD: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable this is a test GOOD: $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" bash: warning: x: ignoring function definition attempt bash: error importing function definition for `x' this is a test

2 1

MICE Traffic Level
by Jason Hanke Sept. 18, 2014

Sept. 18, 2014

Was the total traffic last night a record? It looked to be about 33 Gbps on a 5 minute average. -- Jay Hanke CTO Neutral Path Communications 3 Civic Center Plaza, Suite 204 Mankato, MN 56001 (507) 327-2398 mobile jayhanke(a)neutralpath.net www.neutralpath.net

11 11

MICE Router Server 1
by Levi Pederson Sept. 16, 2014

Sept. 16, 2014

We just noticed Router Server 1 went down on our BGP Sessions. Did this happen to anyone else? Thank you,

4 4

Odd traffic and flapping
by Eric Crist Sept. 5, 2014

Sept. 5, 2014

There were strange bursts of traffic yesterday on our MICE port, and we saw the port flap three times over night. I didn't see any messages about maintenance or an outage on announce or here. Did I miss something, or are we having problems? --- Eric F Crist System Administrator ClaimLynx, Inc (952) 593-5969 x2301 -- This e-mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the individual responsible for delivering the e-mail to the intended recipient, please be advised that you have received this e-mail in error and that any use, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender or call ClaimLynx at (952) 593-5969.

2 1

Monticello FiberNet
by Levi Pederson Aug. 28, 2014

Aug. 28, 2014

Monticello FiberNet has pulled up their BGP connection and is getting an "EOF" Error. Can someone please check the config on the Route Servers? Thank you,

2 6

Airstream Port Upgrade
by Jay Hanke Aug. 20, 2014

Aug. 20, 2014

Airstream is upgrading their MICE connection to 10G. Their new port is xe-0/0/20 on the main switch, all IP addressing and route server configuration will remain the same. The old port ge-1/0/10 will be decommissioned following the migration. Thanks! -- Jay Hanke CEO, CCIE #19093 Mankato Networks LLC PO Box 54 619 S Front St Mankato, MN 56001-3838 Google 530-618-2398 jayhanke(a)mankatonetworks.net http://www.mankatonetworks.com http://www.neutralpath.net

1 0

Fwd: [#ZMH-397-87500]: Legacy IP Space from Airstream
by Jay Hanke Aug. 19, 2014

Aug. 19, 2014

---------- Forwarded message ---------- From: Charles Monson <support(a)wins.net> Date: Mon, Aug 18, 2014 at 3:39 PM Subject: [#ZMH-397-87500]: Legacy IP Space from Airstream To: peering(a)micemn.net Good Afternoon, We noticed there are still a few address with the legacy 69.147.218.0/24 IP space from Airstream Communications (WIN) still configured on the MICE exchange. I would expect everyone has moved to the new address space by now and probably just didn't remove the secondary IP addresses. We would like use this space for other purposes now that everyone should be migrated, but don't want to have routing issues for anyone with it still configured. Listed below are the IP addresses and corresponding MAC addresses still showing up when I check the ARP table (our side has 69.147.218.10 configured). Can you contact whoever is still using this space or is that something you'd prefer us to do? #show arp gig1/11 | i 69.147.218 Internet 69.147.218.101 22 5c5e.abd5.9ef0 ARPA GigabitEthernet1/11 Internet 69.147.218.103 48 000c.2923.4e35 ARPA GigabitEthernet1/11 Internet 69.147.218.44 0 b0c6.9ade.0640 ARPA GigabitEthernet1/11 Internet 69.147.218.50 150 0023.33c6.a0c0 ARPA GigabitEthernet1/11 Internet 69.147.218.53 164 10f3.1134.e6de ARPA GigabitEthernet1/11 Internet 69.147.218.104 16 5c5e.abd0.da78 ARPA GigabitEthernet1/11 Internet 69.147.218.250 175 0004.9ba4.3000 ARPA GigabitEthernet1/11 Thank you, Charles Monson Associate Network Administrator Wisconsin Independent Network Airstream Communications Phone: 866-206-2027 Ticket Details ________________________________ Ticket ID: ZMH-397-87500 Department: Network Admins Type: Request Status: In Progress Priority: Normal Support Center: https://support.wins.net/index.php? -- Jay Hanke CEO, CCIE #19093 Mankato Networks LLC PO Box 54 619 S Front St Mankato, MN 56001-3838 Google 530-618-2398 jayhanke(a)mankatonetworks.net http://www.mankatonetworks.com http://www.neutralpath.net

7 9

Stormy exchange?
by Thomas Johnson Aug. 8, 2014

Aug. 8, 2014

Our switch port just bounced due to storm control. Is someone breaking things on a Friday? -- Thomas Johnson ClaimLynx, Inc. 952-593-5969 x2302 -- This e-mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the individual responsible for delivering the e-mail to the intended recipient, please be advised that you have received this e-mail in error and that any use, dissemination, forwarding, printing, or copying of this e-mail is strictly prohibited. If you have received this communication in error, please return it to the sender immediately and delete the original message and any copy of it from your computer system. If you have any questions concerning this message, please contact the sender or call ClaimLynx at (952) 593-5969.

3 3

MICE MTU
by Koch, Andrew July 26, 2014

July 26, 2014

The UG 13 minutes make note that the exchange MTU is 9000 bytes. Are other members configuring their routers for an MTU of 9000? I ask as TDS has not - we have stuck with the Ethernet standard 1500 bytes. If anyone on the exchange has set an MTU of 9000 and tries to send jumbo traffic to us, it will not be accepted and no indication will be sent back to the originator. (10d in the linked document below) If no one (or few) has setup their routers for an MTU of 9000, but we as a community wish to enable this, I would recommend that we schedule a flag day so that we can minimize blackholing of traffic across the exchange. While only a draft, see http://tools.ietf.org/html/draft-mlevy-ixp-jumboframes-00 for further information on IXP Jumbo Frame operation and conversion. For those that like presentations more than IETF drafts, Martin Levy (of Hurricane Electric at the time) presented this at RIPE 64 - https://ripe64.ripe.net/presentations/139-Hurricane_Electric_-_Martin_Levy_… Best Regards, Andy Koch TDS Telecom - IP Network Operations andrew.koch(a)tdstelecom.com Desk: 608-664-4694 Cell: 608-616-0072 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: ?SUBED1=MICE-DISCUSS&A=1

6 8

UG 13 Minutes
by Shaun Carlson July 25, 2014

July 25, 2014

Please see attached, send me any corrections or updates. As an important note: *The next meeting will be on Wednesday, October 22nd from 4pm to 7pm at the 511 Building; please mark your calendars now and plan on being there!* Thanks and see you all in October! s *Shaun Carlson*Network Engineering Manager | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: ?SUBED1=MICE-DISCUSS&A=1

5 9

Re: MICE Meeting Google Hangout
by David Farmer July 24, 2014

July 24, 2014

Please send me your email so I can invite you to the google hangout. -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== > On Jul 24, 2014, at 14:24, Russell Berg <berg(a)wins.net> wrote: > > Tried joining but it says the party is over. 8-( > > From: MICE Discuss [mailto:MICE-DISCUSS@LISTS.IPHOUSE.NET] On Behalf Of David Farmer > Sent: Thursday, July 24, 2014 2:12 PM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: [MICE-DISCUSS] MICE Meeting Google Hangout > > we will get started shortly > > https://plus.google.com/hangouts/_/gvdyimpkvxef2lb3ua75qf4dnea > > -- > =============================================== > David Farmer Email:farmer@umn.edu > Networking & Telecommunication Services > Office of Information Technology > University of Minnesota > 2218 University Ave SE Phone: 612-626-0815 > Minneapolis, MN 55414-3029 Cell: 612-812-9952 > =============================================== > > To unsubscribe from the MICE-DISCUSS list, click the following link: > ?SUBED1=MICE-DISCUSS&A=1 ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: ?SUBED1=MICE-DISCUSS&A=1

5 4

MICE Meeting Google Hangout
by David Farmer July 24, 2014

July 24, 2014

we will get started shortly https://plus.google.com/hangouts/_/gvdyimpkvxef2lb3ua75qf4dnea -- =============================================== David Farmer Email:farmer@umn.edu Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 =============================================== ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: ?SUBED1=MICE-DISCUSS&A=1

1 0

Meeting Reminder and Agenda
by Shaun Carlson July 23, 2014

July 23, 2014

All, Just a quick, last reminder of our meeting tomorrow *Date*: Thursday, July 24th *Time*: 2:00 pm (1400 Hours) David Farmer has the facility reserved until 5PM *Location*: University of Minnesota, Duluth campus, Griggs Center, located in the Kirby Student Center (KSC) http://www.d.umn.edu/maps/KSC/ We have discussed a web attendance option. I don't have that information handy right now and I'll send it as soon as I get confirmation. Attached is the current agenda, if you have any other items you would like added to the agenda, please drop me a note prior to the meeting and I'll get them on there! Thanks and see you tomorrow! s *Shaun Carlson*Network Engineering Manager | Arvig ph: (218) 346-8673 | em: shaun.carlson(a)arvig.com ######################################################################## To unsubscribe from the MICE-DISCUSS list, click the following link: ?SUBED1=MICE-DISCUSS&A=1

1 0