- mice-discuss - lists.micemn.net

Proposal: MICE Static MAC address Only
by Jay Hanke Nov. 3, 2022

Nov. 3, 2022

I propose we change the MICE required port security settings to be hard filtered for a single static mac address per port. Over the years, we've had several incidents where floods have occurred prior to port being error-disabled during a looping event. -- Jay Hanke, President South Front Networks jayhanke(a)southfront.io Phone 612-204-0000

10 30

MICE - IXP Manager - Change Control Access
by Justin Krejci Oct. 31, 2022

Oct. 31, 2022

Spinning off a new thread from the static/mac-limit/port-security conversation. The IXP Manager can generate an instruction command and makes it available to the Arista(s). The switch(es) could pull the config using a script that further sanitizes/validates the config its pulling before applying. This would prevent IXP Manager from having its own direct access to the switch. This could also be the case for pulling data from the switch(es) as well. Patterned after a TR-069 or similar concept, the switch could phone home to the IXP manager (once a minute cronjob for example) and see if there is anything the IXP manager wants done. A simple text based file (json, etc) is generated by the IXP manager and the Arista would then just query this file and parse out instructions and perform actions as instructed or ignore them if malformed or otherwise not allowed. Obviously this is would be only for Arista switch(es) managed by MICE. I don't have any IXP Manager experience beyond simple user but I know Arista can do this fairly easily. It could also just be a RESTful API even. Maybe something like this already exists I have no idea but I would highlight the two things this concept does 1: Allows IXP manager to affect change without direct access to the switch(es) 2: Allows the Arista switch(es) to ultimately decide to accept or ignore instructions to make config changes, send info, perform other actions like bounce my member port, apply TCP/179 filtering to my port, show me some log data, etc. This concept could also apply to the route servers too since they also run a *nix OS like Arista. This would not be a simple/quick idea but I feel would check various boxes for people: air gap, allows automation/self-service, and if automation fails it results in a fallback to manual only changes like we are doing today anyways, etc. Since I know MICE does have money, it could be dev work hired out to someone or a team to produce and then MICE retains rights to the resultant code. We have enough people across our membership that I am sure we could validate the code is sound and also perform bugfixes as needed going forward, perhaps even make it public, GPL style. Maybe IXP Manager already has some of this functionality? Last second additional thought, simple instructions (eg add a second MAC address, show me log data for my port) get automatically approved. Bigger changes (remove/change my MAC address, some other action) need to get some sort of manual approval by the tech team so it can be scrutinized first. None of this needs to be done in IXP Manager either but some other custom, purpose built web portal. Maybe I'm way overthinking this. Food for thought at any rate. -Justin

1 0

Re: Proposal: MICE Static MAC address Only
by Jeremy Lumby Oct. 31, 2022

Oct. 31, 2022

I second that proposal Jeremy Lumby Minnesota VoIP 9217 17th Ave S Suite 216 Bloomington MN 55425 Main 612-355-7740 Direct 612-392-6814 EFax 952-873-7425 jlumby(a)mnvoip.com -------- Original message -------- From: Jay Hanke <jayhanke(a)SOUTHFRONT.IO> Date: 10/31/22 8:27 AM (GMT-06:00) To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET Subject: [MICE-DISCUSS] Proposal: MICE Static MAC address Only _____ >From : Jay Hanke [jayhanke(a)SOUTHFRONT.IO] To : MICE-DISCUSS(a)LISTS.IPHOUSE.NET [MICE-DISCUSS(a)LISTS.IPHOUSE.NET] Date : Monday, October 31 2022 08:27:14 I propose we change the MICE required port security settings to be hard filtered for a single static mac address per port. Over the years, we've had several incidents where floods have occurred prior to port being error-disabled during a looping event. -- Jay Hanke, President South Front Networks jayhanke(a)southfront.io Phone 612-204-0000

1 0

MICE RR #2 having issues..
by Doug McIntyre Oct. 28, 2022

Oct. 28, 2022

Around 11:30PM CDT tonight, 10/28/2022, the 2nd route-reflector at 206.108.255.2/2001:504:27:0:0:d1af::2 starting having huge packet loss (ie. 85%). The DRAC on this system stopped working a while ago, so I can't get in remotely to see what is up with it. If anybody is around Cologix this weekend that can power cycle the machine, it probably will set it right again. I'm guessing other people are seeing this as well, so putting out a note that this is known.

2 1

[OT] Calix GigaCenter Vulnerability
by Richard Laager Oct. 27, 2022

Oct. 27, 2022

If you run Calix GigaCenters, they are being actively exploited. Some details here: https://community.calix.com/s/feed/0D54u00009074nuCAA -- Richard

3 2

Please welcome Code42 Software to MICE!
by Jeremy Lumby Oct. 21, 2022

Oct. 21, 2022

Name: Code42 Software Switch: MICE Core Port: E4/19 ASN: 396410 IPv4: This is an ASN change, all other info remains the same IPv6: Peering Contact: iops(a)code42.com Route Servers: Yes BFD: No Welcome Aboard Again! Jeremy Lumby Minnesota VoIP 9217 17th Ave S #216 Bloomington, MN 55425 Main: 612-355-7740 Direct: 612-392-6814 Fax: 952-873-7425 jlumby(a)mnvoip.com

1 0

New MSP IX announced in EdgeConnex
by Jay Hanke Oct. 20, 2022

Oct. 20, 2022

https://newswire.telecomramblings.com/2022/10/edgeconnex-expands-its-intern… -- Jay Hanke, President South Front Networks jayhanke(a)southfront.io Phone 612-204-0000

7 7

Re: New MSP IX announced in EdgeConnex
by Andrew Hoyos Oct. 20, 2022

Oct. 20, 2022

Competition and diversity are always a good thing. It means MSP is on the map enough to attract two IX’s, and offers an alternative outside of Cologix ecosystem for interconnection. Sent from my iPhone > On Oct 20, 2022, at 11:45 PM, Dean Bahls <dean.bahls(a)fiberminnesota.com> wrote: > I might be ignorant, but this seems like MICE competition to me....so not good for us. What am I missing? > > Dean > > > -----Original Message----- > From: MICE Discuss <MICE-DISCUSS(a)LISTS.IPHOUSE.NET> On Behalf Of Jay Hanke > Sent: Thursday, October 20, 2022 8:41 AM > To: MICE-DISCUSS(a)LISTS.IPHOUSE.NET > Subject: [MICE-DISCUSS] New MSP IX announced in EdgeConnex > > https://newswire.telecomramblings.com/2022/10/edgeconnex-expands-its-intern… > > -- > Jay Hanke, President > South Front Networks > jayhanke(a)southfront.io > Phone 612-204-0000

1 0

Please welcome TDS Telecommunications to MICE!
by Jeremy Lumby Oct. 3, 2022

Oct. 3, 2022

Name: TDS Telecommunications Switch: MICE Core Port: E6/27/1 ASN: 4181 IPv4: This is a port upgrade, all IP info remains the same. The new connection will be 100G IPv6: Peering Contact: peering(a)tdstelecom.com Route Servers: No BFD: No Welcome Aboard Again! Jeremy Lumby Minnesota VoIP 9217 17th Ave S #216 Bloomington, MN 55425 Main: 612-355-7740 Direct: 612-392-6814 Fax: 952-873-7425 jlumby(a)mnvoip.com

1 0

Amazon changes
by Justin Huffman Sept. 30, 2022

Sept. 30, 2022

Does anyone know of any BGP changes that were done last night around 9 or 9:30 that would have affected AWS or Amazon? We have 1 customer that we advertise their entire block via BGP and they cannot access several AWS sites. Does anyone have a good Amazon contact? Thanks, Justin Huffman Long Lines Broadband 712-271-5902 (W) jhuffman(a)longlines.biz<mailto:jhuffman@longlines.biz> [LL new] [cid:image002.png@01D8D4B4.02AA59F0]

2 1