From bduvivie at cisco.com Thu Feb 16 10:04:14 2012 From: bduvivie at cisco.com (Bertrand Duvivier (bduvivie)) Date: Thu, 16 Feb 2012 10:04:14 +0100 Subject: [eix-wg] RIPE63 follow-up proxy-arp Message-ID: <5C99EC8C99D9BB45AC51D20DC2AD2DC506DEC93B@XMB-AMS-102.cisco.com> IX's partners, During last RIPE63 meeting I toke 2 actions: A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported. ? This has been fixed and integrated in recent release. B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS. We check with our different partners (including service-provider, enterprise and consumer customers). We can't change the default, lots of enterprise applications and consumer application need it by default. What we are looking at now: adding a CLI knob "auto-security [service-provider|enterprise|data-center]". This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp. You should expect to see this features within coming releases. I'll keep you posted. BTW: Any question/issue (even if you don't own Cisco equipment) could be address at: ask-cisco-ix at cisco.com. BRGDS Bertrand Bertrand Duvivier L3VPN, BGP, ISIS, CLNS & RIB/FIB PRODUCT MANAGER Corporate Development bduvivie at cisco.com Mobile: +32 478 68 13 36 Cisco Systems Belgium BVBA/SPRL Belgium Cisco.com Think before you print. This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message. Cisco Systems Belgium BVBA/SPRL De Kleetlaan 6A - Pegasus Park B-1831 Diegem BTW BE 047.138.227 RPR/RPM Brussel/Bruxelles For corporate legal information go to: http://www.cisco.com/web/about/doing_business/legal/cri/index.html _______________________________________________ Euro-ix-tech-l mailing list Euro-ix-tech-l at euro-ix.net http://mailman.euro-ix.net/mailman/listinfo/euro-ix-tech-l Please note Euro-IX has a Mailing List Policy at: https://www.euro-ix.net/documents/886-mailinglistpolicy-txt?download=yes -------------- next part -------------- An HTML attachment was scrubbed... URL: From eimann at etherkiller.de Thu Feb 16 10:31:47 2012 From: eimann at etherkiller.de (Dominik Bay) Date: Thu, 16 Feb 2012 10:31:47 +0100 Subject: [eix-wg] RIPE63 follow-up proxy-arp In-Reply-To: <5C99EC8C99D9BB45AC51D20DC2AD2DC506DEC93B@XMB-AMS-102.cisco.com> References: <5C99EC8C99D9BB45AC51D20DC2AD2DC506DEC93B@XMB-AMS-102.cisco.com> Message-ID: Hi Bertrand, On Thu, Feb 16, 2012 at 10:04, Bertrand Duvivier (bduvivie) wrote: > A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported. > ??This has been fixed and integrated in recent release. > > B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS. > > We check with our different partners (including service-provider, enterprise and consumer customers). We can?t change the default, lots of enterprise applications and consumer application need it by default. > > What we are looking at now: adding a CLI knob ??auto-security [service-provider|enterprise|data-center]?. > > ?This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp. thanks for the update. Much appreciated :-) The "auto-security" template is a good idea. If there's a way to do "show auto-security" to see the current settings like in show sdm, this would be helpful. Kind regards, Dominik From florian.hibler at euro-transit.net Thu Feb 16 11:01:54 2012 From: florian.hibler at euro-transit.net (Florian Hibler - EuroTransit GmbH) Date: Thu, 16 Feb 2012 11:01:54 +0100 Subject: [eix-wg] RIPE63 follow-up proxy-arp In-Reply-To: References: <5C99EC8C99D9BB45AC51D20DC2AD2DC506DEC93B@XMB-AMS-102.cisco.com> Message-ID: <15BAC3FB-CCD6-431A-A270-8FAC3E9530C5@euro-transit.net> Hi Bertrand, hi Dominik, I support the auto-security idea as well. Could help to get a couple of "default values" set right on the beginning of configuration. Best regards, Florian EuroTransit GmbH global IP transit and carrier services Chief Technical Officer Alsterufer 30, D-20354 Hamburg fon: +49 40 41354058 fax: +49 40 41354893 E-Mail: florian.hibler at euro-transit.net Internet: http://www.euro-transit.net EuroTransit GmbH CEO: Andy Fischer Commercial Registry: Amtsgericht Hamburg HRB 107158 VAT Number: DE219346766 Registered Office: Hamburg, Germany Notice: This transmittal and/or attachments may be privileged or confidential. If you are not the intended recipient, you are hereby notified that you have received this transmittal in error; any review, dissemination, or copying is strictly prohibited. If you received this transmittal in error, please notify us immediately by reply and immediately delete this message and all its attachments. Thank you. On Feb 16, 2012, at 10:31 AM, Dominik Bay wrote: > Hi Bertrand, > > On Thu, Feb 16, 2012 at 10:04, Bertrand Duvivier (bduvivie) > wrote: >> A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported. >> ? This has been fixed and integrated in recent release. >> >> B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS. >> >> We check with our different partners (including service-provider, enterprise and consumer customers). We can?t change the default, lots of enterprise applications and consumer application need it by default. >> >> What we are looking at now: adding a CLI knob ?auto-security [service-provider|enterprise|data-center]?. >> >> This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp. > > thanks for the update. Much appreciated :-) > The "auto-security" template is a good idea. If there's a way to do > "show auto-security" to see the current settings like in show sdm, > this would be helpful. > > Kind regards, > Dominik > From arnold.nipper at de-cix.net Thu Feb 16 12:26:42 2012 From: arnold.nipper at de-cix.net (Arnold Nipper) Date: Thu, 16 Feb 2012 12:26:42 +0100 Subject: [eix-wg] RIPE63 follow-up proxy-arp In-Reply-To: <15BAC3FB-CCD6-431A-A270-8FAC3E9530C5@euro-transit.net> References: <5C99EC8C99D9BB45AC51D20DC2AD2DC506DEC93B@XMB-AMS-102.cisco.com> <15BAC3FB-CCD6-431A-A270-8FAC3E9530C5@euro-transit.net> Message-ID: <4F3CE7F2.2060308@de-cix.net> on 16.02.2012 11:01 Florian Hibler - EuroTransit GmbH wrote: > I support the auto-security idea as well. Could help to get a couple > of "default values" set right on the beginning of configuration. > +1 Arnold -- Arnold Nipper CTO/COO e-mail: arnold.nipper at de-cix.net DE-CIX Management GmbH mobile: +49 152 5371 7690 Lichtstr. 43i, 50825 Koeln phone: +49 69 1730 902 22 Geschaeftsfuehrer Harald A. Summa fax: +49 69 4056 2716 Registergericht AG Koeln HRB 51135 http://www.de-cix.net -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 260 bytes Desc: OpenPGP digital signature URL: From mt at primats.org.ua Thu Feb 16 15:59:33 2012 From: mt at primats.org.ua (Maxim Tuliuk) Date: Thu, 16 Feb 2012 15:59:33 +0100 Subject: [eix-wg] RIPE63 follow-up proxy-arp In-Reply-To: <4F3CE7F2.2060308@de-cix.net> References: <5C99EC8C99D9BB45AC51D20DC2AD2DC506DEC93B@XMB-AMS-102.cisco.com> <15BAC3FB-CCD6-431A-A270-8FAC3E9530C5@euro-transit.net> <4F3CE7F2.2060308@de-cix.net> Message-ID: Hi, I agree with colleagues: a global option for Proxy ARP would be nice like: conf mode#arp proxy off Best wishes, Maxim On 16 Feb 2012, at 12:26, Arnold Nipper wrote: > on 16.02.2012 11:01 Florian Hibler - EuroTransit GmbH wrote: > >> I support the auto-security idea as well. Could help to get a couple >> of "default values" set right on the beginning of configuration. >> > > +1 > > Arnold > -- > Arnold Nipper CTO/COO e-mail: arnold.nipper at de-cix.net > DE-CIX Management GmbH mobile: +49 152 5371 7690 > Lichtstr. 43i, 50825 Koeln phone: +49 69 1730 902 22 > Geschaeftsfuehrer Harald A. Summa fax: +49 69 4056 2716 > Registergericht AG Koeln HRB 51135 http://www.de-cix.net >