Re: The state of TACACS+

2015-01-01 Thread Tony Varriale
On 12/28/2014 5:02 PM, Robert Drake wrote: 3. authentication and authorization caching and/or something else Is this related to the TACACS server being down and the long time out to hit local authen/author? Sorry, a little late to this party :) tv

Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Tony Varriale
On 12/31/2014 6:08 AM, Marcin Kurek wrote: Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a high-end processor with maximum memory

Re: What routers do folks use these days?

2013-11-29 Thread Tony Varriale
On 11/28/2013 11:37 PM, Jawaid Desktop wrote: We're a service provider, and we have a network full of Cat6509's. We are finding that we are outgrowing them from the standpoint of their ability to handle lots of large routing tables. Obviously their switching capability is still superb but one o

Re: next-best-transport! down with ethernet!

2011-12-30 Thread Tony Varriale
On 12/29/2011 9:06 AM, Christopher Morrow wrote: (you forgot to change subj:) On Thu, Dec 29, 2011 at 7:59 AM, Cameron Byrne wrote: Next topic, ethernet is too chaotic and inefficient to deploy and support mission critical applications in LAN or WAN or data center. yes, let's get something wi

Re: vyatta for bgp

2011-09-12 Thread Tony Varriale
On 9/12/2011 3:12 PM, Dobbins, Roland wrote: On Sep 13, 2011, at 2:45 AM, Owen DeLong wrote: In your typical enterprise environment, a 1G DoS will zorch the link long before it zorches the router at the enterprise side. This contradicts my experience - I've repeatedly witnessed only a few mb/

Re: [c-nsp] Is Performance Routing, PfR a dead duck?

2011-07-24 Thread Tony Varriale
On 7/24/2011 7:32 PM, Eric Hileman wrote: > Thanks! You saw it in use in the context in which I was speaking, correct? > Isn't PfR the latest iteration of OER? > > Yeah that's the only place I've seen it used. You are probably right...Pfr moving forward? tv _ NANOG mailing list NANOG@nanog

Re: Microsoft's participation in World IPv6 day

2011-06-03 Thread Tony Varriale
On 6/2/2011 7:08 PM, andrew.wallace wrote: World day is a sure-shot bet win at an anti-climax, and an industry failure and waste of investment and publicity campaign. Andrew I've had more customers ask and now willing to participate than ever before. Any better suggestions? Or, maybe take

Re: Is Cisco equpiment de facto for you?

2011-01-13 Thread Tony Varriale
- Original Message - From: "Brandon Kim" To: ; "nanog group" Sent: Thursday, January 13, 2011 8:46 AM Subject: RE: Is Cisco equpiment de facto for you? For ISL, I know they are trying to phase that out. For the exams, they are based on dot1q. Even if I had all cisco equipm

Re: Is Cisco equpiment de facto for you?

2011-01-13 Thread Tony Varriale
- Original Message - From: "Chuck Anderson" To: Sent: Thursday, January 13, 2011 7:18 AM Subject: Re: Is Cisco equpiment de facto for you? On Wed, Jan 12, 2011 at 11:10:16PM -0800, Scott Weeks wrote: To be fair to Cisco and maybe I'm way off here. But it seems they do come out wit

Re: BGP support on ASA5585-X

2010-11-06 Thread Tony Varriale
- Original Message - From: "gordon b slater" To: "Tony Varriale" Cc: Sent: Saturday, November 06, 2010 4:38 AM Subject: Re: BGP support on ASA5585-X On Fri, 2010-11-05 at 21:50 -0500, Tony Varriale wrote: said: >They could make it out of the box but thi

Re: BGP support on ASA5585-X

2010-11-05 Thread Tony Varriale
- Original Message - From: To: "Greg Whynott" Cc: Sent: Friday, November 05, 2010 6:47 PM Subject: Re: BGP support on ASA5585-X They could make it out of the box but this is why Dylan made his statement. His statement is far fetched at best. Unless of course he's speaking of 100

Re: BGP support on ASA5585-X

2010-11-05 Thread Tony Varriale
- Original Message - From: "Dylan Ebner" To: "srg" ; Sent: Tuesday, November 02, 2010 12:42 PM Subject: RE: BGP support on ASA5585-X IMHO, I don't think this is a marketing issue for cisco. It's a design issue. PIX/ASA is good at some things, and bad at others. They have >never been

Re: Did Internet Founders Actually Anticipate Paid,

2010-09-18 Thread Tony Varriale
Of course the high level of oversub is an issue We'll disagree then. Oversub makes access affordable. ..with the scary boogeyman of evil illegal P2P filesharing That just tips the money in the wrong direction. And it's a real threat (amongst others)...not just that deadly clown hiding

Re: Did Internet Founders Actually Anticipate Paid,

2010-09-18 Thread Tony Varriale
- Original Message - From: "Joe Greco" To: "Chris Boyd" Cc: "NANOG" Sent: Thursday, September 16, 2010 8:59 AM Subject: Re: Did Internet Founders Actually Anticipate Paid, On one hand, we all recognize oversubscription as an issue. The high-level of oversub isn't the issue, it's pa

Re: Vyatta as a BRAS

2010-07-14 Thread Tony Varriale
- Original Message - From: "Joe Greco" To: "Dobbins, Roland" Cc: "NANOG list" Sent: Wednesday, July 14, 2010 7:03 PM Subject: Re: Vyatta as a BRAS On Jul 14, 2010, at 10:17 PM, Joe Greco wrote: > The truth is that you can keep throwing CPU at a problem as well. I > can = size

Re: Router for Metro Ethernet

2010-04-16 Thread Tony Varriale
Original Message - From: "Bill Stewart" To: "Tony Varriale" Cc: Sent: Wednesday, April 14, 2010 10:22 AM Subject: Re: Router for Metro Ethernet That's the spec sheet, and that's for straight forwarding. If you want to do much of anything else at

Re: Router for Metro Ethernet

2010-04-13 Thread Tony Varriale
Cisco rates it at 256mbps which places it above a NPE-400. The 3825 says 179mbps on their spec sheet. Not sure where you are getting your numbers but they are way off. All of those numbers are straight forwarding with nothing turned on and 64 byte packets. That way you get a nice idea of wh

Re: Best VPN Appliance

2010-03-08 Thread Tony Varriale
Why would you migrate them away instead of buying a $150/$250 one-time license? tv - Original Message - From: "Blomberg, Orin P (DOH)" To: Sent: Monday, March 08, 2010 1:50 PM Subject: RE: Best VPN Appliance Thanks for the information. I am just going on what we have been formally

Re: Comcast IPv6 Trials Update

2010-03-01 Thread Tony Varriale
- Original Message - From: "Curtis Maurand" To: Sent: Monday, March 01, 2010 8:21 AM Subject: Re: Comcast IPv6 Trials Update Can anyone recommend a decent book on IPV6? Most of what I find on the net don't explain things very well. thanks, Curtis Deploying IPv6 Networks is pr

Re: Google to offer fiber to end users

2010-02-10 Thread Tony Varriale
Residential computers with enough bandwidth to DoS hosting providers; that should be fun. Maybe it will encourage the incumbant ISP's to start offering users meaningful bgp communities since they won't be able to keep up with the abuse reports. David That's already here today. tv

Re: google contact? why is google hosting/supporting/encouraging spammers?

2010-02-04 Thread Tony Varriale
- Original Message - From: "Jim Mercer" To: Sent: Thursday, February 04, 2010 12:07 AM Subject: google contact? why is google hosting/supporting/encouraging spammers? we have recently started getting alot of spam, out of dubai, from "ecampaigners@gmail.com" all of the spa

Re: lawful intercept/IOS at BlackHat DC, bypassing and recommendations

2010-02-04 Thread Tony Varriale
Would you mind passing along a source/link on the 15kpps? I haven't seen that number yet. tv - Original Message - From: "Christopher Morrow" To: "Gadi Evron" Cc: "NANOG" Sent: Thursday, February 04, 2010 2:27 PM Subject: Re: lawful intercept/IOS at BlackHat DC, bypassing and recom

Re: DDoS mitigation recommendations

2010-01-28 Thread Tony Varriale
- Original Message - From: "Tom Sands" Cc: Sent: Thursday, January 28, 2010 6:01 AM Subject: Re: DDoS mitigation recommendations -Original Message- From: David Freedman [mailto:david.freed...@uk.clara.net] Sent: Tuesday, January 26, 2010 8:17 AM To: nanog@nanog.org Subj

Re: Comcast IPv6 Trials

2010-01-27 Thread Tony Varriale
- Original Message - From: "John Jason Brzozowski" To: "Steven Bellovin" Cc: Sent: Wednesday, January 27, 2010 5:12 PM Subject: Re: Comcast IPv6 Trials Thanks. Initially it would be ideal (even preferred) to target trial subscribers with greater IPv6 awareness. The technical team

Re: Using /31 for router links

2010-01-23 Thread Tony Varriale
That's a vendor specific issue. Maybe you could take it up with them and ask what year they think this is? tv - Original Message - From: "Florian Weimer" To: "Seth Mattinen" Cc: "nanOG list" Sent: Saturday, January 23, 2010 4:06 AM Subject: Re: Using /31 for router links * Seth

Re: Using /31 for router links

2010-01-22 Thread Tony Varriale
Shouldn't be any issues...it's 2010 :) And, your IP allocation utilization will love you. tv - Original Message - From: "Seth Mattinen" To: "nanOG list" Sent: Friday, January 22, 2010 6:08 PM Subject: Using /31 for router links In the past I've always used /30's for PTP connection

Re: just...wow.

2009-12-30 Thread Tony Varriale
LOL! That was purty good and mostly true. Well, I was thinking from the standpoint of 1) They are going somewhere, maybe not you 2) breaking law(s) 3) someone has to intervene, eventually. You could apply the above to any crime really. And they essentially told you they are going to commit

Re: just...wow.

2009-12-30 Thread Tony Varriale
Would it be possible to string along and coordinate with the appropriate law enforcement entity? tv - Original Message - From: "Jerry Pasker" To: Sent: Wednesday, December 30, 2009 12:04 PM Subject: just...wow. I got this email inquiring about data center space, from the most hones

Re: Juniper M120 Alternatives

2009-11-18 Thread Tony Varriale
As a side note that many may be aware of, there are other Cisco products/code bases that have these nice features. tv - Original Message - From: "Paul Cosgrove" To: "Richard A Steenbergen" Cc: Sent: Wednesday, November 18, 2009 8:04 AM Subject: Re: Juniper M120 Alternatives The des

Re: Upstream BGP community support

2009-11-01 Thread Tony Varriale
If you read the original post, the poster implied he would benefit from communities. If you would like to discuss who,what, when,why and the theoretical, please start your own thread. tv - Original Message - From: "Karl Auer" To: Sent: Sunday, November 01, 2009 4:11 AM Subject: Re

Re: Upstream BGP community support

2009-10-31 Thread Tony Varriale
The answer is fairly simple. Does your business benefit by having the ability to modify routing strategy as you see fit? Yes or no? IMO, the answer is yes. If your business partners aren't on the same page or align correctly with your requirements, seek new ones. tv - Original Message

Re: Cisco 7600 (7609) as a core BGP router.

2009-07-20 Thread Tony Varriale
Core typically references functionality, not the number of network devices at that layer. tv - Original Message - From: "Richard A Steenbergen" To: "Bailey Stephen" Cc: Sent: Monday, July 20, 2009 8:46 AM Subject: Re: Cisco 7600 (7609) as a core BGP router. On Mon, Jul 20, 2009 a

Re: Looking for AT&T / Verizon / Sprint WWAN service impressions - on oroff-list replies welcome

2009-04-14 Thread Tony Varriale
I've seen it with "static" public IP pppoe assignment. No NAT. Reliability? Best effort at best. Coverage area is ok. Speed and reliability is completely dependant on your location. Test first. Always. And then do not set a decent expectation. IPSec tunnels dropping? Could be. Again, d

Re: switch speed question

2009-02-24 Thread Tony Varriale
That isn't always true. Some switches are already speced as full. It's best to read the product docs or speak with a rep to be sure. tv - Original Message - From: "Eric Gearhart" To: "NANOG list" Sent: Tuesday, February 24, 2009 9:51 AM Subject: Re: switch speed question On Tue,

Re: Peering for beginners

2008-10-11 Thread Tony Varriale
E has a significant presence in Chicago so don't leave us out. :) tv - Original Message - From: "Simon Lockhart" <[EMAIL PROTECTED]> To: "Konstantin Bezruchenko" <[EMAIL PROTECTED]> Cc: "North American Network Operators Group" <[EMAIL PROTECTED]> Sent: Saturday, October 11, 2008 7:47 AM

Re: remembering Jon Postel: Looking Beyond the Decade

2008-10-02 Thread Tony Varriale
Any chance this will be captured (maybe professionally via HD:)? Unfortunately I cannot be there but would really appreciate being in the audience. tv - Original Message - From: "Rodney Joffe" <[EMAIL PROTECTED]> To: "Scott Francis" <[EMAIL PROTECTED]> Cc: "NANOG list" Sent: Thursday

Re: [NANOG] Multihoming for small frys?

2008-05-21 Thread Tony Varriale
Yup. You can horde. You can easily justify a /23 these days and not be multihomed still get a /22. tv - Original Message - From: "Pete Templin" <[EMAIL PROTECTED]> To: "Tony Varriale" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, May 21, 2008 3:32 PM

Re: [NANOG] Multihoming for small frys?

2008-05-21 Thread Tony Varriale
RIN's general IPv4 allocation policy. Of course, this could be smoke and mirrors. Not sure. tv - Original Message - From: "Andy Dills" <[EMAIL PROTECTED]> To: "Tony Varriale" <[EMAIL PROTECTED]> Cc: Sent: Wednesday, May 21, 2008 1:53 AM Subje

Re: [NANOG] Multihoming for small frys?

2008-05-20 Thread Tony Varriale
AFAIK, ARIN doesn't give out /22s anymore. Last time I went to the well...it's was a /20 or better. tv - Original Message - From: "Andy Dills" <[EMAIL PROTECTED]> To: "William Herrin" <[EMAIL PROTECTED]> Cc: Sent: Tuesday, May 20, 2008 11:05 PM Subject: Re: [NANOG] Multihoming for small

Re: [NANOG] IOS rootkits

2008-05-16 Thread Tony Varriale
IIRC, the toolkit(s) can only be installed once having priv 15 on the device. If this is the case, the practicality of this is...well...not that significant. I do think the significance is that we are getting closer and closer to treating infrastructure devices as end stations with respect to