Comments for Stan Barber http://www.stanbarber.com Implementing Internet Ideals Pragmatically Thu, 28 Apr 2011 20:19:43 +0000 hourly 1 http://wordpress.org/?v= Comment on IPv6 in the Real World: Practical Multihoming by netsaint http://www.stanbarber.com/rpsl/ipv6-in-the-real-world-practical-multihoming/comment-page-1#comment-104 netsaint Thu, 28 Apr 2011 20:19:43 +0000 http://www.stanbarber.com/?p=562#comment-104 Luckily you started with NTT on your IPv6 service. They are connected well in the IPv6 world. If you would have started with Level3 first you would have notice that Level3 is not yet peering with everybody in the IPv6 world. When I started with Level3 there was no IPv6 connectivity to HE or Google. That also means no access to test-ipv6.com as this is hosted by HE. They are getting there, when I started with Level3, I had 3500 IPv6 routes vs ~5000 from NTT. Today I have 4121 IPv6 routes from Level3 and 5411 from NTT. The problem with NTT right now in the US is that their IPv6 peering for example with Google is done in Japan. So, my latency to ipv6.google.com is 400ms. A regional peering for IPv6 with Google is needed. Netsaint Luckily you started with NTT on your IPv6 service. They are connected well in the IPv6 world. If you would have started with Level3 first you would have notice that Level3 is not yet peering with everybody in the IPv6 world. When I started with Level3 there was no IPv6 connectivity to HE or Google. That also means no access to test-ipv6.com as this is hosted by HE. They are getting there, when I started with Level3, I had 3500 IPv6 routes vs ~5000 from NTT. Today I have 4121 IPv6 routes from Level3 and 5411 from NTT.

The problem with NTT right now in the US is that their IPv6 peering for example with Google is done in Japan. So, my latency to ipv6.google.com is 400ms. A regional peering for IPv6 with Google is needed.

Netsaint

]]> Comment on IPv6 in the Real World: Practical Multihoming by Ryan http://www.stanbarber.com/rpsl/ipv6-in-the-real-world-practical-multihoming/comment-page-1#comment-103 Ryan Wed, 20 Apr 2011 20:25:10 +0000 http://www.stanbarber.com/?p=562#comment-103 Very helpful in regards to the experience of implementing IPv6 multi-homing. Nice to know NTT and Level3 will both route PI IPv6 address blocks. Very helpful in regards to the experience of implementing IPv6 multi-homing. Nice to know NTT and Level3 will both route PI IPv6 address blocks.

]]> Comment on Monitoring Apple Time Capsule with Nagios by Stan Barber http://www.stanbarber.com/network-management/monitoring-apple-time-capsule-with-nagios/comment-page-1#comment-94 Stan Barber Mon, 10 Jan 2011 00:38:23 +0000 http://www.stanbarber.com/?p=452#comment-94 A short update: When Apple released version 7.5.2 of the software for the Time Machine, this added IPv6 capabilities to the device (hurrah!). It also made it necessary to make some changes in the nagios monitoring for these devices since there was now a new tunnel interface (to allow Time Machines to do IPv6 tunnels to various IPv6 tunnel brokers). Unfortunately, Apple didn't implement the tunnel interface such that it would be marked administratively down when it was not configured to be used, so the nagios plugin reports the interface (correctly) as operationally down. To keep nagios from reporting this (at least until Apple addresses this problem), service object from the original post must be changed to this: <blockquote><code> define service { service_description Network Interface Status check_command check_ifstatus!public!-x 215 use network-service host_name red-tc,green-tc,blue-tc } </code></blockquote> The <code>-x 215</code> instructs the plug-in to exclude 6to4 tunnel interfaces from being checked, which is fine in my network where I am doing no tunnels at all. Note that Apple has a bug report (filed by me) with the ID 8839827 on this issue. A short update: When Apple released version 7.5.2 of the software for the Time Machine, this added IPv6 capabilities to the device (hurrah!). It also made it necessary to make some changes in the nagios monitoring for these devices since there was now a new tunnel interface (to allow Time Machines to do IPv6 tunnels to various IPv6 tunnel brokers). Unfortunately, Apple didn’t implement the tunnel interface such that it would be marked administratively down when it was not configured to be used, so the nagios plugin reports the interface (correctly) as operationally down. To keep nagios from reporting this (at least until Apple addresses this problem), service object from the original post must be changed to this:


define service {
service_description Network Interface Status
check_command check_ifstatus!public!-x 215
use network-service
host_name red-tc,green-tc,blue-tc
}

The -x 215 instructs the plug-in to exclude 6to4 tunnel interfaces from being checked, which is fine in my network where I am doing no tunnels at all.

Note that Apple has a bug report (filed by me) with the ID 8839827 on this issue.

]]> Comment on Creating Self-signed SSL Certificates on FreeBSD with OpenSSL by Stan Barber http://www.stanbarber.com/freebsd/creating-self-signed-ssl-certificates-on-freebsd-with-openssl/comment-page-1#comment-10 Stan Barber Mon, 02 Aug 2010 08:08:54 +0000 http://www.stanbarber.com/?p=221#comment-10 Thanks for catching that typo. I have corrected it. Thanks for catching that typo. I have corrected it.

]]> Comment on Creating Self-signed SSL Certificates on FreeBSD with OpenSSL by Jette http://www.stanbarber.com/freebsd/creating-self-signed-ssl-certificates-on-freebsd-with-openssl/comment-page-1#comment-9 Jette Sat, 31 Jul 2010 21:14:05 +0000 http://www.stanbarber.com/?p=221#comment-9 You say: "type cd /etc/mail; make CA; cd CA, chmod 700" Don't you mean `mkdir CA`instead of `make CA`? ... and thanks for putting this information online :-) You say: “type cd /etc/mail; make CA; cd CA, chmod 700″

Don’t you mean `mkdir CA`instead of `make CA`?

… and thanks for putting this information online :-)

]]> Comment on Using the Experimental Feature if-filter in MRTG 2.16 cfgmaker by Stan Barber http://www.stanbarber.com/network-management/using-the-experimental-feature-if-filter-in-mrtg-2-16-cfgmaker/comment-page-1#comment-6 Stan Barber Fri, 14 May 2010 00:57:04 +0000 http://www.stanbarber.com/?p=289#comment-6 Steve, glad for you to promote your book. I only list books in my post I have personally read and used and I have not had a chance to read yours (so far). Steve, glad for you to promote your book. I only list books in my post I have personally read and used and I have not had a chance to read yours (so far).

]]> Comment on MRTG 2.16 and High Speed Interfaces by Steve Shipway http://www.stanbarber.com/network-management/mrtg-2-16-and-high-speed-interfaces/comment-page-1#comment-5 Steve Shipway Thu, 13 May 2010 22:12:54 +0000 http://www.stanbarber.com/?p=440#comment-5 The counter rollover problem (which occurs at about 140Mbps when using the standard 5min polling cycle) is possibly the most frequently asked of MRTG problems. If your device doesn't support SNMPv2, then an alternative solution is to increase polling frequency to every minute, although that can be awkward and requires you to re-create your RRD or log file. You should also note that, if you're using a MRTG Target which is the sum of multiple counters, the rollover will hit much sooner and can cause really odd problems if you're using SNMPv1 counters. The counter rollover problem (which occurs at about 140Mbps when using the standard 5min polling cycle) is possibly the most frequently asked of MRTG problems. If your device doesn’t support SNMPv2, then an alternative solution is to increase polling frequency to every minute, although that can be awkward and requires you to re-create your RRD or log file.
You should also note that, if you’re using a MRTG Target which is the sum of multiple counters, the rollover will hit much sooner and can cause really odd problems if you’re using SNMPv1 counters.

]]> Comment on Using the Experimental Feature if-filter in MRTG 2.16 cfgmaker by Steve Shipway http://www.stanbarber.com/network-management/using-the-experimental-feature-if-filter-in-mrtg-2-16-cfgmaker/comment-page-1#comment-4 Steve Shipway Thu, 13 May 2010 22:07:47 +0000 http://www.stanbarber.com/?p=289#comment-4 You mention a couple of books which have a section on MRTG. I'll use the opportunity to plug my own book, "Using MRTG with RRDTool and Routers2" which can be bought online from <a href="http://www.steveshipway.org/book/" rel="nofollow">http://www.steveshipway.org/book/</a>. This covers a huge range of features and tips and techniques, including SNMPv3, the counter rollover problem, if-filter and much more. You mention a couple of books which have a section on MRTG. I’ll use the opportunity to plug my own book, “Using MRTG with RRDTool and Routers2″ which can be bought online from http://www.steveshipway.org/book/. This covers a huge range of features and tips and techniques, including SNMPv3, the counter rollover problem, if-filter and much more.

]]> Comment on Using the Experimental Feature if-filter in MRTG 2.16 cfgmaker by Stan Barber http://www.stanbarber.com/network-management/using-the-experimental-feature-if-filter-in-mrtg-2-16-cfgmaker/comment-page-1#comment-3 Stan Barber Sat, 24 Apr 2010 01:37:07 +0000 http://www.stanbarber.com/?p=289#comment-3 Yes, it appears that MRTG does uspport SNMPv3 authentication. I have a <a href="http://www.stanbarber.com/network-management/mrtg-2-16-and-high-speed-interfaces" rel="nofollow">posting about using SNMPv3</a> that shows the basics of how to get started using MRTG and Cisco IOS. Yes, it appears that MRTG does uspport SNMPv3 authentication. I have a posting about using SNMPv3 that shows the basics of how to get started using MRTG and Cisco IOS.

]]> Comment on Using the Experimental Feature if-filter in MRTG 2.16 cfgmaker by jeff chandler http://www.stanbarber.com/network-management/using-the-experimental-feature-if-filter-in-mrtg-2-16-cfgmaker/comment-page-1#comment-2 jeff chandler Sat, 24 Apr 2010 01:24:32 +0000 http://www.stanbarber.com/?p=289#comment-2 I have used mrtg as well for several years. Currently I use it to pull data from our brocade switches to track read and write trends from our Hitachi SAN. I still use a fairly old version as was wondering if MRTG supports SNMP V3 authentication. I have used mrtg as well for several years. Currently I use it to pull data from our brocade switches to track read and write trends from our Hitachi SAN.
I still use a fairly old version as was wondering if MRTG supports SNMP V3 authentication.

]]>