Networking Links

• O'Reilly's bookshelf → http://docstore.mik.ua/orelly/

• IPv4_subnetting_reference
• http://networkingtips-tricks.blogspot.com/

• AMS-IX Connected Parties → http://www.ams-ix.net/connected/index.html
• RIPE-DB (Search AS) → http://www.ripe.net/perl/whois?searchtext=as28685

• http://www.candelatech.com/lanforge_v3/datasheet.html#fire
• http://www.ixiacom.com/products/ixchariot/
• http://robert.rsa3.com/traffic.html
• Real-Time Voice Traffic Generator → http://www.cs.ucr.edu/~msamidi/projects.htm
• http://sipp.sourceforge.net/
• http://callflow.sourceforge.net/
• http://www.iptel.org/~sipsc/
• http://www.gl.com/rtptoolbox.html
• Sizing up VoIP listening tools
  → http://www.networkworld.com/research/2002/1209voipfeat.html
• http://voip-info.org/wiki/
• Open Source VOIP Software
  → http://voip-info.org/wiki/view/Open+Source+VOIP+Software
• http://www.asterisk.org/
• http://www.voiptroubleshooter.com/problems/packetloss.html
• Juniper on Voip/SIP/NAT: [Inbound direction] How to configure Destination Network Address Translation (NAT-Dst); includes Port Mapping/Port Forwarding → http://kb.juniper.net/KB11910
• Juniper: Why are incoming SIP calls not working? → http://kb.juniper.net/KB9093

• Cisco Doc-ID-23675: Sample Configuration for BGP with Two Different Service Providers (Multihoming)
• Cisco IOS 12.2 - BGP Commands
• Cisco IOS 12.0 - Configuring BGP
• Cisco - BGP Introduction
• Sample Configuration for iBGP and eBGP With or Without a Loopback Address
• BGP: Frequently Asked Questions
• Understanding Route Aggregation in BGP
• BGP Case Studies
• How to Use HSRP to Provide Redundancy in a Multihomed BGP Network
• Achieve Optimal Routing and Reduce BGP Memory Consumption
• Load Sharing with BGP in Single and Multihomed Environments: Sample Configurations
  • Load Sharing When Dual-Homed to One ISP Through Multiple Local Routers
• BGP Best Path Selection Algorithm
• How BGP Routers Use the Multi-Exit Discriminator for Best Path Selection
• BGP Case Studies - Local Preference Attribute
• How the bgp deterministic-med Command Differs from the bgp always-compare-med Command
• OSPF Design Guide - Redistributing Routes into OSPF
• BGP: Frequently Asked Questions doc5816
• http://www.docstoc.com/docs/7167631/A-How-To-Guide-to-BGP-Multihoming
• Cisco IOS IP Configuration Guide, Release 12.2 - Configuring BGP
• http://blog.ioshints.info/2008/01/bgp-essentials-advertising-public-ip.html
• BGP-Essentials: AS-Path Prepending
• ku.edu → BGP4 Case Studies/Tutorial Section 1
• BGP troubleshooting → http://www.nanog.org/meetings/nanog26/presentations/philip.pdf
• GTSM = Generalized TTL Security Mechanism → RFC3682
• BTSH = BGP TTL Security Hack → draft-gill-btsh-02 = 'set bgp multihop ttl 255'
• nice doc on general BGP config = kanren_bgp_deployment.pdf

• http://www.occaid.org/tutorial-ipv6bgp.html

• ASN = Autonomous System Number
• Cisco Border Gateway Protocol (BGP) (incl 4-byte 32-bits ASN info)
• Cisco IOS BGP 4-Byte ASN Support
• http://www.fixedorbit.com/AS/48/AS48812.htm
• http://www.robtex.com/as/as48812.html#rr
• http://www.team-cymru.org/Services/ip-to-asn.html

Notations

• ASPLAIN
• ASDOT
• ASDOT+
• see: http://www.networkers-online.com/blog/2010/03/bgp-4-byte-asn/

16 bits ASN: 0 ... 65535
Private ASN: 64512 ... 65535
32-bits ASN:
0.0 - 0.65535 16-bit ASN block
2.0 - 2.1023  APNIC
3.0 - 3.1023  RIPE-NCC
4.0 - 4.1023  LACNIC
5.0 - 5.1023  AfriNIC
6.0 - 6.1023  ARIN

• http://routeserver.org/

telnet route-views.linx.routeviews.org
Trying 195.66.241.146...
route-views.linx.routeviews.org>
route-views.linx.routeviews.org> show ip bgp 89.106.160.0
BGP routing table entry for 89.106.160.0/21
Paths: (24 available, best #24, table Default-IP-Routing-Table)
  Not advertised to any peer
  6667 6461 17025
    195.66.226.114 from 195.66.226.114 (213.192.191.19)
      Origin IGP, metric 0, localpref 100, valid, external
      Community: 6667:3001 6667:4004 6667:5209
      Last update: Wed Jan 13 00:35:44 2010
route-views.linx.routeviews.org>

! This route-viewer supports 32-bit ASN and IPv6
telnet route-views.wide.routeviews.org
route-views.wide.routeviews.org> show ip bgp 89.106.160.0/21
BGP routing table entry for 89.106.160.0/21
Paths: (2 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  2497 3549 8455 50554
    202.249.2.169 from 202.249.2.169 (58.138.96.157)
      Origin IGP, localpref 100, valid, external, best
      Last update: Mon May 30 21:40:18 2011
  7500 2516 3257 8455 50554
    202.249.2.86 from 202.249.2.86 (202.249.2.86)
      Origin IGP, localpref 100, valid, external
      Last update: Mon May 30 21:40:04 2011
route-views.wide.routeviews.org>
route-views.wide.routeviews.org> show ipv6 bgp 2a00:1bc8::/32
BGP routing table entry for 2a00:1bc8::/32
Paths: (2 available, best #2, table Default-IP-Routing-Table)
  Not advertised to any peer
  2500 2497 3257 8455 50554
    2001:200:0:fe00::9c1:0 from 2001:200:0:fe00::9c4:11 (203.178.136.14)
    (fe80::21f:12ff:feb6:c3df)
      Origin IGP, localpref 100, valid, external
      Community: 2500:5971
      Last update: Tue May 31 08:55:05 2011
  2516 3257 8455 50554
    2001:200:0:fe00::9d4:0 from 2001:200:0:fe00::9d4:0 (203.181.99.231)
    (fe80::20f:f8ff:fea2:f380)
      Origin IGP, localpref 100, valid, external, best
      Last update: Tue May 31 08:55:36 2011
route-views.wide.routeviews.org>

• http://lg.above.net/lg.cgi
• http://lg.atom86.net/lg.cgi
• http://noc.eu.clara.net/lg.php
• nice → http://lg.he.net/
• http://bgp.he.net/AS50554

• http://www.asnumber.networx.ch/
• http://www.wipmania.com/plugins/

• Windows 2003 does not count correctly, if the received packet uses OSPF Link-Local Signaling.
• RFC4813 OSPF Link-Local Signaling
• Cisco OSPF Per-Interface Link-Local Signaling
• BGP OSPF Interaction: rfc1403

• http://en.wikipedia.org/wiki/Spanning_tree_protocol
• Cisco Introduction Spanning-Tree Protocol
• http://snmp-info.sourceforge.net/SNMP/Info/Bridge.html
• http://snmp-info.sourceforge.net/
• http://search.cpan.org/dist/SNMP-Info/
• http://search.cpan.org/~kasha/SNMP-Map-1.01/Map.pm
• Using the SNMP module from the Net-SNMP library
  → http://www.perlmonks.org/?node_id=396223

STP = 802.1d
PVST = Cisco proprietary Per-Vlan STP
Rapid-STP = RSTP = 802.1w
Rapid-PVST = Cisco per-vlan RSTP
Rapid Per-VLAN Spanning Tree (R-PVST)
IEEE 802.1D-2004 now incorporates RSTP and obsoletes STP
Cisco latest: Rapid-PVST+
Multiple Spanning Tree (MST) = 802.1s

STP state via SNMP:
RFC 1493 dot1dStpPortTable
used in inspect.pl:
my $dot1dStpPortState                   = '1.3.6.1.2.1.17.2.15.1.3' ;
my $dot1dStpPortPathCost                = '1.3.6.1.2.1.17.2.15.1.5';
my $dot1dStpPortDesignatedBridge        = '1.3.6.1.2.1.17.2.15.1.8';
my $dot1dStpDesignatedRoot              = '1.3.6.1.2.1.17.2.5';
.iso.org.dod.internet.mgmt.mib-2
# 1.3.6.1.2.1.17.2.5       mib-2.17.2.5 SNMPv2-SMI::mib-2.17.2.5
# 1.3.6.1.2.1.17.2.15.1.3  mib-2.17.2.15.1.3 SNMPv2-SMI::mib-2.17.2.15.1.3
# 1.3.6.1.2.1.17.2.15.1.5  mib-2.17.2.15.1.5 SNMPv2-SMI::mib-2.17.2.15.1.5
# 1.3.6.1.2.1.17.2.15.1.8  mib-2.17.2.15.1.8 SNMPv2-SMI::mib-2.17.2.15.1.8
in CISCO-VLAN-BRIDGE-MIB.my
cvbStpTable
"This table contains device STP status information for each VLAN"
1.3.6.1.4.1.9.9.56.1.1.1
iso.org.dod.internet.private.enterprises.cisco.ciscoMgmt.
 ciscoVlanBridgingMIB.ciscoVlanBridgingMIBObjects.cvbStp.cvbStpTable
stpxRSTPObjects
Oid: 1.3.6.1.4.1.9.9.82.1.12
Mib: CISCO-STP-EXTENSIONS-MIB
stpxVlanObjects
Oid: 1.3.6.1.4.1.9.9.82.1.2
Mib: CISCO-STP-EXTENSIONS-MIB

• Browse CISCO-VLAN-BRIDGING-MIB
  → http://ipmsupport.solarwinds.com/mibs/CISCO-VLAN-BRIDGING-MIB/tree.aspx
• Cisco – additional protection for loops
  STP Enhancements using Loop Guard and BPDU Skew Detection Features
• x

• Cisco Flex Link
• Cisco Resilient Ethernet Protocol (REP)
  case
• Ethernet Ring Protection Switching (ERPS) = ITU-T G.8032

• SNMP
• http://net-snmp.sourceforge.net/
• http://net-snmp.sourceforge.net/tutorial/tutorial-5/commands/snmpget.html
• Free MIB-Browser → http://www.ireasoning.com/mibbrowser.shtml
• Open-Source MIB parser/browser → http://www.mibble.org/index.html
• book: “Essential SNMP.”
  → http://docstore.mik.ua/orelly/networking_2ndEd/snmp/index.htm
• Cisco: Securing Simple Network Management Protocol
• atricle: Configuring SNMP in Cisco Routers
• GetIF (free windows SNMP browser) → http://www.wtcs.org/informant/free_snmp_tools.htm
• convert traps to syslog: SNMPTT → http://www.snmptt.org/about.shtml
• lookup OID online: →
  http://www.oid-info.com/cgi-bin/display?oid=1.3.6.1.4.1.6449&action=display

• ipv6

• What Is Administrative Distance?
• When Are ICMP Redirects Sent?
• Cisco Catalyst 2960-S FlexStack: Description, Usage, and Best Practices

• http://www.groupstudy.com/archives/cisco/200610/threads.html#00264
• http://www.cisco.com/en/US/products/hw/switches/ps628/products_tech_note09186a0080169696.shtml

http://www.cisco.com/en/US/products/hw/switches/ps5528/products_installation_and_configuration_guides_list.html

• http://www.juniper.net/us/en/products-services/switching/ex-series/
• http://www.juniper.net/techpubs/software/nog/index.html
• http://www.juniper.net/techpubs/en_US/junos9.6/information-products/pathway-pages/ex-series/mpls.html

• http://www.juniper.net/us/en/products-services/routing/mx-series/

• http://www.juniper.net/us/en/products-services/security/srx-series/
• http://www.juniper.net/techpubs/software/junos-srx/junos-srx10.4/index.html
• http://www.juniper.net/techpubs/software/junos-security/junos-security10.4/junos-srx-jseries-support-reference/

• http://www.alliedtelesis.co.uk/switches
• AT-FS750/24POE → 24 ports 100M POE web-mgt Switch
• AT-GS950/8POE → 8 ports 1G POE web-mgt Switch
• AT-8000GS/24POE → 24 ports 1G POE full-mgt Switch

• http://h17007.www1.hp.com/us/en/products/switches/index.aspx
• Switch Overview →
  http://h17007.www1.hp.com/us/en/products/switches/index.aspx
• V1905-10G-PoE (JD864A) → 10 port 1G POE web-mgt Switch
• 2520G-24-PoE (J9299A) → 24 ports 1G POE full-mgt Switch

• Fortinet
• www.fortinet.com
• tech docs → http://docs.fortinet.com/fgt.html

• ISDN over VoIP → http://www.callvoip.nl/callvoip_prive.php

CallVoip biedt een veel ruimere dienstverlening en garandeert
bovendien dat alle huidige ISDN-nummers overgenomen kunnen worden.
Ook is het met behulp van een zogeheten Fritz!Box 7270 mogelijk
bestaande ISDN-apparatuur aan te sluiten. De Fritz!Box is een
router, mini-telefooncentrale, DECT-basisstation en draadloos
toegangspunt (WiFi) in een.

Kies voor de FRITZ!Box 7170 of FRITZ!Box 7270 en u kunt uw
ISDN-apparatuur gewoon blijven gebruiken, zonder dat u nog de
ISDN-dienst afneemt. De FRITZ! praat ISDN met uw apparatuur,
en u belt voordelig via VoIP uit.

• http://www.isdn2voip.nl/callvoiptelefonie.htm

• http://en.avm.de/nc/service/fritzbox/fritzbox-7390/knowledge-base/publication/show/687_Cannot-establish-a-VPN-connection-between-two-FRITZ-Box-networks/

• http://www.sff.net/people/Jeff.Hecht/chron.html

• wikipedia → Fiber Media Converter
• Alied Telesis overview
• Alied Telesis AT-MC101XL
• Gigabit SFP: Allied Telesis AT-MC1008/SP
  → http://www.alliedtelesis.com/p-2215.html

AT-MC100 Series, Fast Ethernet Media Converters:
* AT-MC101XL, 100TX to 100FX Media Converter, ST connectors, MMF-2km
* AT-MC102XL, 100TX to 100FX Media Converter, SC connectors, MMF-2km
* AT-MC103XL, 100TX to 100FX Media Converter, SC connectors, SMF-15km

• IETF: VRRP = Virtual Router Redundancy Protocol
• Cisco: HSRP = Hot Standby Routing Protocol
• NSRP = NetScreen Redundancy Protocol, to support High Availability (HA)

• http://www.packetlife.net/blog/2009/apr/30/intro-vrf-lite/

• Comparison_of_firewalls

• Endian_Firewall
• Endian (an OpenVPN based VPN/Firewall)
• Commercial →http://www.endian.com/
• Community → http://www.endian.com/en/community/overview/

• Vyatta
• Commercial → http://www.vyatta.org/
• Community → http://www.vyatta.org/
• docs → http://www.vyatta.com/downloads/docdl.php
• gateway config example

• Vyatta on Xen
• better?: http://www.xen-support.com/?p=264
• http://www.vyatta.org/forum/viewtopic.php?t=4333

If you have a Vyatta build environment setup, you can configure the
build using "./configure --with-xensourcevm" and it will produce an
image file that is compatible with XenSource.
The actual steps that are taken can be viewed in the
livecd/mk.livecd.functions file. Take a look at the
vyatta-xensource-partition-image() function.

http://networkingtips-tricks.blogspot.com/2010/09/how-to-run-linux-router-vyatta-in-gns3.html

• http://lab.people.gnustile.net/vyatta/netkit-and-vyatta

• Untangle
• http://www.untangle.com/

• http://www.quagga.net/
• Quagga
• http://www.quagga.net/docs/docs-multi/index.html
• http://openmaniak.com/quagga_tutorial.php
• http://openmaniak.com/openvpn_routing.php

• nice intro: http://forum.intern0t.org/security-tutorials-guides/758-preventing-arp-dhcp-spoofing-cisco-switches.html
• DHCP Snooping
• Dynamic ARP inspection
• https://www.juniper.net/techpubs/en_US/junos9.4/topics/concept/port-security-overview.html

• The Network Simulator ns-2: Validation Tests
  → http://isi.edu/nsnam/ns/ns-tests.html

• hping → http://www.hping.org/
• http://robert.rsa3.com/traffic.html

• MAC address
• Find Vendor form MAC → http://coffer.com/mac_find/
• Linux: arp-scan → http://www.nta-monitor.com/tools/arp-scan/
• Windows: NetscanTools has an ARP-scan option
  → http://www.netscantools.com/nstpro_arp.html
• Windows: MAC Scanner Pro (demo)
  → http://www.colasoft.com/mac_scanner/mac_scanner_pro.php
• Windows: Mac Scanner (free)
  → http://www.colasoft.com/mac_scanner/mac_scanner.php
• Windows: A-MAC http://amac.paqtool.com/

• Synonyms: Bandwidth, Througput, Performance, Speed
• Good description on 94% efficiency of ethernet → Goodput
• test-downloads (1M to 1G files) → http://www.nl-ix.net/tech.php
• what is my IP → http://checkip.dyndns.org/
• http://www.mordax.nl/
• Speedtest → http://www.speedtest.nl/
• beter/mooier !! → http://speedtest.net/
• http://speedtest.bbned.nl/
• NCBV → http://download.networkconcepts.nl/download/
• Graphical real-time speedtest upload/download
  → http://www.aboutmyip.com/AboutMyXApp/SpeedTest.jsp
• mooi → http://www.upc.nl/internet/snel_internet/speedtest/
• source van speedtest.net = http://www.ookla.com/
• http://speedtest.onsneteindhoven.nl/

• local page → iperf

• ttcp (also available on Cisco)
• home of ttcp ? → http://linux.die.net/man/1/ttcp
• Measuring Latency on IOS Routers
• Cisco: Using Test TCP (TTCP) to Test Throughput
• Performance Measurements: Speed, Bandwidth, Throughput and Latency
• Network Performance Testing with TTCP → http://www.netcordia.com/tnm/tnm31/ttcp.htm
• nuttcp howto → http://www.wcisd.hpc.mil/nuttcp/Nuttcp-HOWTO.html

• Top Level Domain
• Reserved Top Level DNS Names RFC2606
• Pseudo top level domain
• Overzicht DNS-server van NL ISPs
  → http://www.network4all.nl/docs/viewdoc.php?aid=16
• List of DNS record types
• MS-AD (LDAP) requires SRV record
• Dynamic DNS
• mysqlBind
• http://www.opendns.com/

OpenDNS:
resolver1.opendns.com.  3580    IN      A       208.67.222.222
resolver2.opendns.com.  3588    IN      A       208.67.220.220
nameserver 208.67.222.222
nameserver 208.67.220.220

• SIDN check .nl domain name
  old → http://www.sidn.nl/ace.php/c,727,5886,2,0,,Nameserver_check.html
  new → https://www.sidn.nl/over-nl/domeinnaam-aanvragen/dns-check/

De voor opname in de .nl-zonefile opgegeven name servers dienen vanaf het
hele internet bereikbaar te zijn via UDP-poort 53, en ook via TCP-poort 53.
Wanneer de domeinnaam responses op queries genereert die groter zijn dan
512 octets dient bovendien het EDNS0-protocol (RFC 2671) ondersteund te worden.

• http://www.faqs.org/rfcs/rfc2671.html
• EDNS0 → Extension mechanisms for DNS
• Do lightweight DNS on Linux using: dnsmasq
• tip Jurjen/Edwin/LVNL: NSD → https://www.nlnetlabs.nl/projects/nsd/

• DNSSEC
• http://www.dnssec.net/
• Surfnet whitepaper over DNSSEC: DNSSSEC-web.pdf
• https://www.sidn.nl/nc/kennisbank/meer-weten/dns-dnssec/?sword_list[0]=dnssec
• http://www.senet.nl/nieuws/sidn-stelt-invoering-dnssec-uit
• SIDN start project invoering DNSSEC voor .nl-zone
• Kaminsky attack: An Illustrated Guide to the Kaminsky DNS Vulnerability
  → http://unixwiz.net/techtips/iguide-kaminsky-dns-vuln.html

Black Ops 2008: It s The End Of The Cache As We Know It
(or 64K should be enough for anyone)
→ http://www.doxpara.com/dMk_bo2k8.ppt

• Image from Axians:
  

• Official site → https://www.isc.org/software/bind
• BIND
• BIND 9.4 Administrator Reference Manual
  → https://www.isc.org/software/bind/documentation/arm94
• Configuratie van de Bind 9 DNS-server
  → http://www.hensema.net/docs/bind9/bind9.html
• http://dnsknowledge.com/tutorials/debian/bind9/linux-set-bind9-caching-dns-nameserver/

• RFC2544 - Benchmarking Methodology for Network Interconnect Devices
  → http://www.faqs.org/rfcs/rfc2544.html
• RFC1242 - Benchmarking Terminology for Network Interconnection Devices
  → http://www.faqs.org/rfcs/rfc1242.html
• buy/rent RFC2544-testers → http://tm.livingston.nl/a_rfc2544/

• Extract config via telnet
  Net::Telnet::Cisco → http://annocpan.org/~JOSHUA/Net-Telnet-Cisco-1.10/Cisco.pm
• Net::Telnet::Cisco::IOS (NTCI) → http://ntci.sourceforge.net/
• Build a Custom Cisco Configuration Repository
  → http://www.devx.com/enterprise/Article/21647/1763

• http://www.dslreports.com/forum/remark,12421459?r=332
• http://www.voip-info.org/wiki-QoS+Cisco
• Quality of Service → http://www.rhyshaden.com/qos.htm
• http://www.cisco.com/en/US/docs/ios/12_2t/12_2t2/feature/guide/ft_dscp.html
• http://blog.ioshints.info/

• ECMP = Equal-cost Multi-path Routing
• RFC2991 = Multipath Issues in Unicast and Multicast Next-Hop Selection
• Cisco ECR = Equal Cost Routing
• etutorials.org ECMP
• Cisco IP: How Does Load Balancing Work?
• Cisco Understanding EtherChannel Load Balancing and Redundancy on Catalyst Switches

• MC-Hammer multicast test tool van Nortel (tip Hans/Vosko/LVNL/d1803) → https://www.cocheno.com/tools/

The traffic engineering term quality of service (QoS) refers to resource reservation control mechanisms: the ability to provide different priority to different applications, users, or data flows, or to guarantee a certain level of performance to a data flow. In the absence of network congestion, QoS mechanisms are not required.

• Wikipedia on Quality of Service (QoS)
• artical on WAN-Router QoS → http://vonage.nmhoy.net/qos.html

• Wikipedia → Traffic_shaping
• http://www.processor.com/editorial/article.asp?article=articles%2Fp2816%2F07p16%2F07p16.asp
• goed artikel: [unisog] Traffic Shaper (local → unisog_traffic_shapers.pdf)
• Linux shaper (auto config script): Wondershaper
  → http://packages.debian.org/nl/lenny/wondershaper

• Wikipedia → Packeteer
• http://www.bluecoat.com/products/packetshaper/
• http://www.bluecoat.com/products/packetshaper/specifications
• PacketGuide

• http://www.allot.com/index.php?option=com_content&task=view&id=45&Itemid=44

• http://www.proceranetworks.com/packetlogic-hardware-platforms/pl5600.html
• DRDL Datastream Recognition Definition Language
• Articel PacketLogic says: “Pricing ranges from $7,000 (base bandwidth PL5600) …”
• Sysob(GE) sells Procera → http://www.sysob.com/index.php?n=2,163,1,194

• multi-site WAN optimalization

• WAN Acceleration

• WAN Acceleration

• https://www.f5.com/products/big-ip/

• http://www.bandwidtharbitrator.com/
• http://netequalizer.com/

• http://www.cymru.com/gillsr/documents/maximizing-firewall-availability.htm
• http://www.titania.co.uk/nipper.php

• http://justniffer.sourceforge.net/
• http://www.wireshark.org/

• Capturing with Wireshark on mac os 10.6.6?

• change IP op Win: NetSetman
  → http://www.netsetman.com/index.php?s=nsm

• Network_Load_Balancing_Services
• Network_Load_Balancing
• MS Technet - Network Load Balancing: FAQ for Windows 2000 and Windows Server 2003
  → http://technet.microsoft.com/en-us/library/cc758834.aspx
• Cisco - Catalyst Switches for Microsoft Network Load Balancing Configuration Example
  → http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_example09186a0080a07203.shtml
• Network Load Balancing Technical Overview
  → http://technet.microsoft.com/en-us/library/bb742455.aspx
• Network Load Balancing with Network Hardware Switches
  → http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsdc_cls_zacz.mspx?mfr=true
• Network Load Balancing Temporarily Fails in a Switched Environment
  → http://support.microsoft.com/kb/261957

• http://www.isaserver.org/articles/ISA2004_AccessRules.html
• ISA 2010 = MS Forefront TMG
  → http://www.microsoft.com/forefront/threat-management-gateway/en/us/default.aspx

• Squid → http://www.squid-cache.org/
• GH gebruikt → http://www.nyetwork.org/wiki/DansGuardian
• http://dansguardian.org/

• ccProxy (tip-Getru) → http://www.youngzsoft.net/ccproxy/

• SOCKS is a Circuit-level Gateway (layer-5)
  as opposed to HTTP-Proxy, which is an Application-level Gateway (layer-6/7)
• SOCKS also supports Reverse-Proxy
• RFC1928 SOCKS Protocol Version 5
• RFC1929 Username/Password Authentication for SOCKS V5
• RFC1961 GSS-API Authentication Method for SOCKS Version 5
  • GSS-API = Generic Security Services Application Program Interface
    – an IETF standardized API for Security Services like Kerberos
• RFC3089 A SOCKS-based IPv6/IPv4 Gateway Mechanism
• http://www.catonmat.net/blog/linux-socks5-proxy/
• http://www.youngzsoft.net/ccproxy/socks-proxy.htm
• https://samsclass.info/122/proj/how-socks5-works.html
• http://etherealmind.com/fast-introduction-to-socks-proxy/
• PDF → https://www.giac.org/paper/gsec/2326/understanding-implementing-socks-server-guide-set-socks-environment/104018
• Youtube → https://www.youtube.com/watch?v=XFJ6_BYno08

• IPsec → vpn_tunneling
• OpenVPN → vpn_tunneling

• Wikipedia over PPTP
• http://www.schneier.com/paper-pptpv2.html
• Bruce Schneier, Frequently Asked Questions – Microsoft's PPTP Implementation
  → http://www.schneier.com/pptp-faq.html

• GRE = Generic Routing Encapsulation

GRE tunnels are designed to be completely stateless.

The GRE Tunnel IP MTU is set to 24 bytes less than the
physical interface MTU by default.

• http://en.wikipedia.org/wiki/Generic_Routing_Encapsulation
• Cisco paper
  → Resolve IP Fragmentation, MTU, MSS, and PMTUD Issues with GRE and IPSEC
• GRE paper → http://www.networkingunlimited.com/white009.html
• Debian/Linux GRE tunnel howto
  → http://tier.cs.berkeley.edu/wiki/HOWTO:IPTunnelling

• Webbased Port-scanner:
  Shields-up! → https://www.grc.com/x/ne.dll?bh0bkyd2

• Dynamips is a Cisco router emulator

• Dynagen is one of the most popular front-end for Dynamips
• http://www.dynagen.org/
• http://dynagen.org/tutorial.htm

• GNS3 is a Dynamips simulator
• GNS3 → http://www.gns3.net/
• GNS3 - Installation - Installation on Mac OS X
• GNS3 VMware appliance → http://rednectar.net/gns3-workbench/

• Olive is a Juniper JunOS simulator
• http://juniper.cluepon.net/index.php/Olive
• http://joost.blogsite.org/wordpress/?p=15
• http://joost.blogsite.org/wordpress/?p=183
• http://tclteam.blogspot.com/2008/05/how-to-make-olive-alive.html
• http://brokenpipes.blogspot.com/2008/01/olive-is-alive.html
• http://inetpro.org/wiki/Using_QEMU_with_Olive_to_emulate_Juniper_Routers

• http://wiki.netkit.org/index.php/Main_Page

• WPAD → Web_Proxy Autodiscovery Protocol
• PAC file → Proxy auto-config

• http://www.networknotepad.com/
• DocBook Lite (used by O'Reilly and Endian Firewall)
  → readme-dblite.html

• Dual-Wan routers for ISP failover and loadbalancing
• http://www.peplink.com/
• Peplink inbound load balancing host servers
• http://www.vyatta.org/
• Redundant Internet Connections Using Linux
• http://www.draytek.nl/pages/producten/2950/main.htm
• info 'SSG5 Dual WAN failover functionality'
  → http://www.gossamer-threads.com/lists/nsp/juniper/17894?page=last

• Linux IP load balancing WIKI
• http://slack-tux.org/howto/setup-dual-wan/
• http://www.samag.com/documents/s=1824/sam0201h/0201h.htm
• http://www.smoothwall.org/

• Cisco OSPF Design Guide → http://www.cisco.com/warp/public/104/1.pdf
• Dynamic Multipoint VPN (DMVPN)
• http://www.cisco.com/go/dmvpn
• Cisco Optimized Edge Routing → http://www.cisco.com/go/oer
• Cisco Performance Routing → http://www.cisco.com/go/pfr
• Cisco Feature Navigator → http://www.cisco.com/go/fn
  (get hw-platform and IOS version options to provide certain features)
• Configuring Dynamic Multipoint VPN Using GRE Over IPsec With OSPF, NAT, and Cisco IOS Firewall
• Configuring a GRE Tunnel over IPSec with OSPF
• Cisco Integrated Services Routers 800, 1800, 2800, 3800
• Router Switching Performance in Packets Per Second (PPS)
• Layer 2 Tunneling Protocol version 3 Q & A
• Cisco Configuring Dynamic ARP Inspection
• Internetworking Technology Handbook: MPLS * BDF = [[wp>Bidirectional_Forwarding_Detection|Bidirectional Forwarding Detection
• Cisco BFD
• Cisco → Troubleshooting OSPF

• Cisco IOS Software Roadmap → http://www.cisco.com/warp/public/620/roadmap.shtml
• Cisco forums and downloads
• Cisco VLAN Tag rewritting → rewrite ingress tag
• cisco_catalyst_switch_guide.pdf
• Cisco IOS Security Config Guide 12.2 - Configuring Secure Shell (SSH) * [[http://www.cisco.com/en/US/docs/ios/12_2/security/configuration/guide/scfpass.html |Cisco IOS Security Config Guide 12.2 - Configuring Passwords and Privileges

Keywords: NX-OS, vSphere, VMware ESX hypervisor

• Cisco Nexus 5000 Series Switches
• Cisco Nexus 1000V Series Switches

• http://support.ntp.org/bin/view/Support/WebHome
• http://www.pool.ntp.org/
• ntpd → http://doc.ntp.org/4.1.0/ntpd.htm
• ntpdate → http://www.eecis.udel.edu/~ntp/ntp_spool/html/ntpdate.html
• NTP Debugging Techniques

NOTE:
- ntpdate will update the clock at once after consulting the time source
  BUT: it will not skew/slew and that can upset running programs
  SO: only run it at startup
- ntpd will update the clock in small steps and keep it synchronised
  BUT: it will panic exit when encountered with more the 1000s difference
  SO: when ntpd is not running, run ntpdate and restart: ntpd

• http://www.eecis.udel.edu/~ntp/ntpfaq/NTP-s-trouble.htm
• O'Reilly - Hardening Cisco Routers - ch10 NTP
  → http://oreilly.com/catalog/hardcisco/chapter/ch10.html

• http://gd.tuwien.ac.at/linuxcommand.org/man_pages/adjtimex8.html
• voyage 0.5.2 time sync issue
• adjtimex → http://packages.debian.org/nl/sid/adjtimex

• PTP = Precision Time Protocol
• fills gap between NTP and GPS (is it?)

• Packet/TCP-rewriting → http://tcpreplay.synfin.net/trac/wiki/tcprewrite

• Mollie → http://www.mollie.nl/
• Net-SMS-Mollie
• GIN → http://www.gin.nl/html/en/products-services/e-mail2sms.php
• http://www.gin.nl/html/en/support/e-mail2sms/e-mail-notification.php
• GIN heet tegenwoordig Motricity. Zie SMS gateway
• Voor Vodafone abbonees: SMS 'EMAIL ON' naar 125

• Internet Protocol Address Management = IPAM
• http://ipamworldwide.com/
• IP Management Portal → http://www.ipam.nl/
• Open Source: IPplan, IPtrack → http://iptrack.sourceforge.net/
• Open Source: MyIP → http://myip.samoht.ca/
• Open Source: GestioIP → http://www.gestioip.net/
• Commercial: BTDiamondIP → http://btdiamondip.com//
• Commercial: Infoblox IPAM
• http://iptrack.sourceforge.net/
• http://www.nixusoftware.com/products_nss.html
• http://www.ipam.nl/
• IPControl = IP Address Management (IPAM) Software

• see local page on MTU

• RFC1918 - Address Allocation for Private Internets
• RFC3330 - Special-Use IPv4 Addresses
  • This block is assigned as “TEST-NET” for use in documentation and example code:
    192.0.2.0/24
  • This block has been allocated for use in benchmark tests RFC2544:
    198.18.0.0/15
• Reserved IP addresses

• RFC3927 - Dynamic Configuration of IPv4 Link-Local Addresses

• Link Aggregation
• Also called: NIC-teaming, Link bundeling, Ethernet bonding
• LAG = Link Aggregation Group
• LACP standard = 802.3ad-2000, later moved to 802.1AX-2008
• Cisco has proprietary EtherChannel using PaGP (Port Aggregation Protocol)
• Cisco info on LACP
• LAG across multiple-switches need SMLT = Split multi-link trunking

• Availability of IP/MPLS networks → http://www.nanog.org/meetings/nanog26/presentations/sanjay.ppt

• Catalyst 4500 - IOS Software Configuration Guide 12.2(31)SGA - Configuring Private VLANs
• http://enotepad.wordpress.com/2008/10/03/private-vlans/

• Fibre Channel (ANSI standard)
• Fibre Channel Protocol (FCP) is a transport protocol (similar to TCP over IP) which transports SCSI commands over FC networks.
• SAN = Storage Area Network or Storage networking
• iSCSI = SCSI relay over IP
• iFCP = FC relay over IP (no tunneling like FCoIP which needs FC cabling)

• Fibre Channel over IP = Fibre Channel tunneling over IP, defined in RFC-3821
• Cisco FCIP
• About FCIP SAN Router → http://www.solkenix.com.tw/htdocs/eng/FCIP-e.htm
• BROCADE 7500 SAN ROuTER
• Emulex Model 735 FCIP Router → http://www.rocklandits.com/emulex_735.html

• FCoE = Fibre Channel over Ethernet = encapsulation of FC frames over Ethernet
• http://www.fcoe.com/
• IBM RedPaper “An Introduction to Fibre Channel over Ethernet, and Fibre Channel over Convergence Enhanced Ethernet”
  → http://www.redbooks.ibm.com/Fredpapers/pdfs/redp4493.pdf
• Fibre channel over ethernet: nu of nooit (of later)? * IEEE 802.1Qbb (priority-based flow control) is een enhancement van het zogenaamde IEEE802.3X Pause Packet * IEEE 802.1Qaz (enhanced transmission selection) zorgt voor een toekenning van bandbreedte voor gespecificeerde applicaties * IEEE802.1Qau wordt toegepast voor notificatie van congestie * IEEE 802.1 DCBX (data center bridging exchange protocol) is gebaseerd op het standaard link layer discovery protocol (LLDP) en zorgt voor het automatisch instellen van de verbinding op basis van uitwisseling van parameters tussen converged enhanced ethernet (CEE) hosts en switches. * Canary: Fibre Channel Media Converters -> http://www.canarycom.com/ ==== FC converters ==== * MRV MCC -> http://www.mrv.com/tap/physical-layer/ ==== FC Switches ==== * [[wp>Fibre_Channel_switch

• Cisco Storage Networking

• 4G-FC: PL-400 → http://www.packetlight.com/products/sub_10g_wdm
• 10G/8G-FC: PL-1000E → http://www.packetlight.com/?CategoryID=251&ArticleID=205
• http://www.rad-direct.com/Product-Comparison-PL-400.htm

• FiberDriver → http://www.mrv.com/optical-transport/fiber-driver/
• http://www.mrv.com/pluggables/
• Dual SFP 1/2/4G-FC (local/remote): http://www.mrv.com/product/MRV-FD-FC400B
• Dual XFP 10G-FC (local/remote): http://www.mrv.com/product/MRV-FD-2XFPB

• Dynamic Host Configuration Protocol → DHCP
• https://www.isc.org/software/dhcp/documentation
• Authoritative DHCP → http://oldwww.isc.org/sw/dhcp/authoritative.php

• PXE → Preboot Execution Environment
• PXE uses Proxy_DHCP
• PXE wiki → http://pxe.dev.aboveaverageurl.com/index.php/Main_Page

DHCP Option 60 = Client Identifier (set to "PXEClient")
DHCP Option 66 = TFTP Servername
DHCP Option 67 = Boot Filename (within TFTP)

> cat /etc/dhcp3/dhcpd.conf
ddns-update-style none;
default-lease-time 600;
max-lease-time 7200;
authoritative;
log-facility local7;
subnet 172.16.2.0 netmask 255.255.255.0 {
    range 172.16.2.100 172.16.2.199;
    option subnet-mask 255.255.255.0;
    option domain-name-servers 172.16.2.254;
    option domain-name "appolos.net";
    filename "pxelinux.0";
    next-server 172.16.2.52;
    option root-path "172.16.2.52:/pxeroot";
    option broadcast-address 172.16.2.255;

• SFP = Sender Policy Framework
• http://en.wikipedia.org/wiki/Backscatter_(e-mail)

• http://www.tightvnc.com/
• http://www.crossloop.com/

• http://www.nomachine.com/documents/getting-started.php

• Remote Desktop Protocol

• http://www.teamviewer.com/nl/index.aspx

• https://secure.logmein.com/home.asp?hp=2

• IEEE 802.1ab
  → Link Layer Discovery Protocol (LLDP)
  Alternative to Cisco CDP
• IEEE 802.1ad
  → 802.1ad (Provider Bridges)
  is an amendment to IEEE 802.1Q, aka QinQ or Stacked VLANs.
  See also Cisco 802.1Q-in-Q VLAN Tag Termination
• IEEE 802.1ah-2008
  → Provider Backbone Bridges (PBB)
• IEEE 802.3ad
  → Link Aggregation has moved to:
  IEEE 802.1AX-2008 Link Aggregation
• MACSec (IEEE802.1ae) → IEEE_802.1AE
• KeySec (IEEE802.1af)

• ethernet point-to-point /31 → http://www.ietf.org/rfc/rfc3021.txt

• Subnet calculator: Solarwinds subnet_calculator
  → http://www.solarwinds.com/products/freetools/free_subnet_calculator.aspx
• Online: http://www.subnet-calculator.com/
• http://89.106.162.12/pubtools/ipcalc.php?fSubnet=10.12.13.14/28

• PPPoE = Point-to-Point Protocol over Ethernet
• Cisco RFC1483 Bridging Baseline Architecture
• http://www.xs4all.nl/~possamai/adsl/sip_spoof/
• http://forums.juniper.net/t5/Firewalls/Connect-NS-5GT-to-ADSL-ISP-XS4all-Holland/m-p/5675

• https://en.wikipedia.org/wiki/Keepalive
• http://tldp.org/HOWTO/TCP-Keepalive-HOWTO/overview.html
• http://www.lovemytool.com/blog/2014/11/are-tcp-keep-alive-messages-bad-by-chris-greer.html
• https://blogs.technet.microsoft.com/nettracer/2010/06/03/things-that-you-may-want-to-know-about-tcp-keepalives/