configuration sanity check

2015-10-29 Thread marcel.durega...@yahoo.fr
Hi Nanogers, Any recommendation about a software which check the live config of cisco/juniper devices against some templates ? The goal is to have a template about different function device, like: - CORE device must have this bloc and this clock - PE device must have at least that and that - C

BGP hold timer on IX LAN

2015-10-27 Thread marcel.durega...@yahoo.fr
Hello, As all of us know BGP was designed for scalability, thus slow convergence. But it was also when CPU was slow :-). What do you think about the standard eBGP hold timer of 180sec ? Conservative ? I'm asking because we see more and more peering partners which force the hold timer to a

Re: NX-OS as LSR router

2015-10-26 Thread marcel.durega...@yahoo.fr
related to the discussion about IGP choice, I had a quick look and found that NX-OS ISIS for IPv6 support is quiet recent. Was not supported on 5.x, but it supported on 7.x (2015). This might explain why not so many ISP use NX-OS. On 21.10.2015 08:25, marcel.durega...@yahoo.fr wrote: Dear

Re: IGP choice

2015-10-26 Thread marcel.durega...@yahoo.fr
Hi Matthew, Thank a lot for your answer. This help me to understand, and make more sense to me :-). Thanks, -Marcel On 23.10.2015 18:31, Matthew Petach wrote: On Fri, Oct 23, 2015 at 1:41 AM, marcel.durega...@yahoo.fr wrote: sorry for that, but the only one I've heard about switchin

Re: IGP choice

2015-10-23 Thread marcel.durega...@yahoo.fr
by having multiple areas, therefore ABR which deny routers and network LSA, you introduce summarization (ABR only send summary LSA, mean subnet info, not topology info) in your network. Thus you loose informations and do not have a complete topology of your network. I guess MPLS/TE prefer to sea

Re: IGP choice

2015-10-23 Thread marcel.durega...@yahoo.fr
same story between HSRP versus VRRP with better timers for VRRP). As your doc say (reason to choose ISIS): better convergence, better security, simplicity. -Marcel On 22.10.2015 19:25, Niels Bakker wrote: * marcel.durega...@yahoo.fr (marcel.durega...@yahoo.fr) [Thu 22 Oct 2015, 18:57 CEST]: Anyb

IGP choice

2015-10-22 Thread marcel.durega...@yahoo.fr
Hi everyone, Anybody from Yahoo to share experience on IGP choice ? IS-IS vs OSPF, why did you switch from one to the other, for what reason ? Same question could apply to other ISP, I'd like to heard some international ISP/carriers design choice, please. Thank in advance, Best regards, -Marce

NX-OS as LSR router

2015-10-20 Thread marcel.durega...@yahoo.fr
Dear Nanog'er, Anybody using NX-OS on MPLS LSR and/or Edge-LSR ? We are evaluating the replacement of 7600 LSR routers. Our natural carrier/ISP choice would go for XR everywhere, but we are also curious about NX-OS on the core. Why not NX-OS for LSR and XR for Edge-LSR ? Thank, -Marcel

Re: Experience on Wanguard for 'anti' DDOS solutions

2015-08-15 Thread marcel.durega...@yahoo.fr
Hello My 2 cents You can use Wanguard for the detection and A10 for the mitigation, you have just to play with the API. Regards Fabien Le 12 août 2015 à 16:28, Ramy Hashish a écrit : Date: Tue, 11 Aug 2015 08:14:54 +0200 From: "marcel.durega...@yahoo.fr" To: nanog@nan

Re: Experience on Wanguard for 'anti' DDOS solutions

2015-08-12 Thread marcel.durega...@yahoo.fr
your financial guys might think. Could help you if you want to convince them to buy Arbor :-). - Marcel On 12.08.2015 16:28, Ramy Hashish wrote: Date: Tue, 11 Aug 2015 08:14:54 +0200 From: "marcel.durega...@yahoo.fr" To: nanog@nanog.org Subject: Re: Experience on Wanguard for '

Re: Experience on Wanguard for 'anti' DDOS solutions

2015-08-11 Thread marcel.durega...@yahoo.fr
ot;NANOG on behalf of marcel.durega...@yahoo.fr" wrote: anybody from this impressive list ?: https://www.andrisoft.com/company/customers -- Marcel On 11.08.2015 03:28, Paul Ferguson wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 8/10/2015 6:07 PM, valdis.kletni...@vt.edu wro

Re: Experience on Wanguard for 'anti' DDOS solutions

2015-08-10 Thread marcel.durega...@yahoo.fr
anybody from this impressive list ?: https://www.andrisoft.com/company/customers -- Marcel On 11.08.2015 03:28, Paul Ferguson wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 8/10/2015 6:07 PM, valdis.kletni...@vt.edu wrote: On Tue, 11 Aug 2015 09:36:07 +1000, Nick Pratley said: