23 Jun
2016
23 Jun
'16
6:34 a.m.
Hi,
Can I get my IP updated to 50.131.150.11 please? This should be static-enough. ;)
GRE is being forwarded right through to a cisco 2620 I picked up at weirdstuff along with
some weird stuff. ;)
23 Jun
23 Jun
5:58 a.m.
Hello!
Oh wow. Photos please?
----
Gregg C Levine gregg.drwho8 at gmail.com
"This signature fought the Time Wars, time and again."
On Thu, Jun 23, 2016 at 12:34 AM, Cory Smelosky <b4 at gewt.net> wrote:
Hi,
Can I get my IP updated to 50.131.150.11 please? This should be static-enough. ;)
GRE is being forwarded right through to a cisco 2620 I picked up at weirdstuff along with
some weird stuff. ;)
6 a.m.
On 23/06/2016 12:34 PM, Cory Smelosky wrote:
Hi,
Can I get my IP updated to 50.131.150.11 please? This should be static-enough. ;)
GRE is being forwarded right through to a cisco 2620 I picked up at weirdstuff along with
some weird stuff. ;)
Hi Cory,
I've updated my tunnel configuration, but I'm not getting any traffic
from your end. I can ping you though.
Regards, Tim.
6:09 a.m.
On Thu, 23 Jun 2016, Tim Sneddon wrote:
Hi Cory,
I've updated my tunnel configuration, but I'm not getting any traffic from
your end. I can ping you though.
Found part of the problem. ;)
mercedes-sj(config)#ip route 0.0.0.0 0.0.0.0 10.12.0.1
Forgot to add that, along with enabling IP routing and setting DECnet on
fa0/0.
rule 30 {
action accept
destination {
address 10.12.0.6
}
log disable
protocol gre
}
also pretty sure that's not the EdgeOS way to forward GRE...;)
Regards, Tim.
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
7:47 a.m.
Found the actual problem!
IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
I had to ask the vendor and community for help on this ;)
Dang vyos!
Sent from my iPhone
On Jun 22, 2016, at 21:09, Cory Smelosky <b4 at
gewt.net> wrote:
On Thu, 23 Jun 2016, Tim Sneddon wrote:
Hi Cory,
I've updated my tunnel configuration, but I'm not getting any traffic from your
end. I can ping you though.
Found part of the problem. ;)
mercedes-sj(config)#ip route 0.0.0.0 0.0.0.0 10.12.0.1
Forgot to add that, along with enabling IP routing and setting DECnet on fa0/0.
rule 30 {
action accept
destination {
address 10.12.0.6
}
log disable
protocol gre
}
also pretty sure that's not the EdgeOS way to forward GRE...;)
Regards, Tim.
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
7:56 a.m.
On 23/06/2016 1:47 PM, Cory Smelosky wrote:
Found the actual problem!
IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
So, does this mean that you're still off the air?
Regards, Tim.
8:19 a.m.
For the time being, yes (largely because I need to sleep now before looking at this
further!)
Sent from my iPhone
On Jun 22, 2016, at 22:56, Tim Sneddon <tim at
sneddon.id.au> wrote:
On 23/06/2016 1:47 PM, Cory Smelosky wrote:
Found the actual problem!
IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
So, does this mean that you're still off the air?
Regards, Tim.
9:26 a.m.
I have an Edgerouter Lite and I had once spent some time thinking about how to GRE tunnel.
But it hurt my head. If you figure out a way, please let me know.
John H. Reinhardt
On 6/23/2016 2:19 AM, Cory Smelosky wrote:
For the time being, yes (largely because I need to
sleep now before looking at this further!)
Sent from my iPhone
On Jun 22, 2016, at 22:56, Tim Sneddon <tim at
sneddon.id.au> wrote:
On 23/06/2016 1:47 PM, Cory Smelosky wrote:
Found the actual problem!
IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
So, does this mean that you're still off the air?
Regards, Tim.
2:20 p.m.
I have an edgerouter lite and after 20 minutes of trying to figure out how to get it to
forward GRE tunnels I gave up and put the cisco router directly on the edge. :)
-brian
On Jun 23, 2016, at 03:26, John H. Reinhardt
<johnhreinhardt at yahoo.com> wrote:
I have an Edgerouter Lite and I had once spent some time thinking about how to GRE
tunnel. But it hurt my head. If you figure out a way, please let me know.
John H. Reinhardt
On 6/23/2016 2:19 AM, Cory Smelosky wrote:
> For the time being, yes (largely because I need to sleep now before looking at this
further!)
>
> Sent from my iPhone
>
>> On Jun 22, 2016, at 22:56, Tim Sneddon <tim at sneddon.id.au> wrote:
>>
>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>> Found the actual problem!
>>>
>>> IPSec VTI VPNs means I can't do source-based NAT/firewall rules to
redirect GRE from the DECnet tunnel IPs to a separate box as is currently configured.
>>>
>>
>> So, does this mean that you're still off the air?
>>
>> Regards, Tim.
>>
>
>
5:37 p.m.
On Thu, Jun 23, 2016 at 8:20 AM, Brian Hechinger <wonko at 4amlunch.net> wrote:
I have an edgerouter lite and after 20 minutes of
trying to figure out how
to get it to forward GRE tunnels I gave up and put the cisco router
directly on the edge. :)
I have an EdgeRouter Lite, but I ditched the stock OS and installed
OpenBSD. The stock stuff was too esoteric for me, but some AMPRNet folks
are using ERL's with tunnels (granted, IPENCAP instead of GRE, but same
principle). Perhaps their documentation would be helpful:
http://wiki.ampr.org/wiki/Setting_up_a_gateway_on_Ubiquiti_EdgeRouter
- Dan C.
5:40 p.m.
Will OpenBSD use the hardware offload on that MIPS CPU? That?s what makes the ERL good.
-brian
On Jun 23, 2016, at 11:37, Dan Cross <crossd at
gmail.com> wrote:
On Thu, Jun 23, 2016 at 8:20 AM, Brian Hechinger <wonko at 4amlunch.net
<mailto:wonko at 4amlunch.net>> wrote:
I have an edgerouter lite and after 20 minutes of trying to figure out how to get it to
forward GRE tunnels I gave up and put the cisco router directly on the edge. :)
I have an EdgeRouter Lite, but I ditched the stock OS and installed OpenBSD. The stock
stuff was too esoteric for me, but some AMPRNet folks are using ERL's with tunnels
(granted, IPENCAP instead of GRE, but same principle). Perhaps their documentation would
be helpful: http://wiki.ampr.org/wiki/Setting_up_a_gateway_on_Ubiquiti_EdgeRouter
<http://wiki.ampr.org/wiki/Setting_up_a_gateway_on_Ubiquiti_EdgeRouter>
- Dan C.
6:20 p.m.
----- Original Message -----
Is there offload yet? My connection overwhelms software-only pf (I checked).
From: "Dan Cross" <crossd at
gmail.com>
To: hecnet at update.uu.se
Sent: Thursday, June 23, 2016 8:37:48 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
On Thu, Jun 23, 2016 at 8:20 AM, Brian Hechinger <
wonko at 4amlunch.net > wrote:
I have an
edgerouter lite and after 20 minutes of trying to figure out how to
get it to forward GRE tunnels I gave up and put the cisco router directly on
the edge. :)
I have an EdgeRouter Lite, but I ditched the stock OS and installed
OpenBSD. The
stock stuff was too esoteric for me, but some AMPRNet folks are using ERL's
with tunnels (granted, IPENCAP instead of GRE, but same principle). Perhaps
their documentation would be helpful:
http://wiki.ampr.org/wiki/Setting_up_a_gateway_on_Ubiquiti_EdgeRouter - Dan C.
5:52 p.m.
On Thu, Jun 23, 2016 at 12:20 PM, Cory Smelosky <b4 at gewt.net> wrote:
On Thu, Jun 23, 2016 at 8:20 AM, Brian Hechinger < wonko at 4amlunch.net >
wrote:
OpenBSD. The
It supports checksum offload but not the rest of the functionality as far
as I can tell (packet forwarding, NAT, etc). My connection is not as, er,
robust as yours, so for me the speed is fine (I have a 75/15 business-class
cable connection and can max it out); I'm not sure if the OpenBSD port will
ever catch up the stock OS in terms of offloading more of the processing.
> I have an edgerouter lite and after 20
minutes of trying to figure out
how to
> get it to forward GRE tunnels I gave up and
put the cisco router
directly on
the edge.
:)
I have an EdgeRouter Lite, but I ditched the stock OS and installed stock stuff was too esoteric for me, but some
AMPRNet folks are using
ERL's
with tunnels (granted, IPENCAP instead of GRE,
but same principle).
Perhaps
their documentation would be helpful:
http://wiki.ampr.org/wiki/Setting_up_a_gateway_on_Ubiquiti_EdgeRouter
Is there offload yet? My connection overwhelms software-only pf (I
checked).
1 Jul
1 Jul
4:39 a.m.
New subject: Cisco tunnels: update my IP (again)
Okay,
2851 at the edge now (I had it available - just needed it shipped).
The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
3:01 p.m.
New subject: Cisco tunnels: update my IP (again)
On 1/07/2016 10:39 AM, Cory Smelosky wrote:
Okay,
2851 at the edge now (I had it available - just needed it shipped).
The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
I've updated my end again (120.146.225.243) and still not DECnet traffic
flowing... Are you still area 9?
Regards, Tim.
4:34 p.m.
New subject: Cisco tunnels: update my IP (again)
Yup. Still area nine.
Sent from my iPhone
On Jul 1, 2016, at 06:01, Tim Sneddon <tim at
sneddon.id.au> wrote:
On 1/07/2016 10:39 AM, Cory Smelosky wrote:
Okay,
2851 at the edge now (I had it available - just needed it shipped).
The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
I've updated my end again (120.146.225.243) and still not DECnet traffic flowing...
Are you still area 9?
Regards, Tim.
4:40 p.m.
New subject: Cisco tunnels: update my IP (again)
On Fri, 1 Jul 2016, Cory Smelosky wrote:
Yup. Still area nine.
madison-sj(config)#decnet node-type area
madison-sj#ping 12.1023
Type escape sequence to abort.
Sending 5, 100-byte DECnet echos to atg 0 area.node 12.1023, timeout is 5
seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 228/231/232 ms
Oops...
Sent from my iPhone
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
On Jul 1, 2016, at 06:01, Tim Sneddon <tim at
sneddon.id.au> wrote:
On 1/07/2016 10:39 AM, Cory Smelosky wrote:
Okay,
2851 at the edge now (I had it available - just needed it shipped).
The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
I've updated my end again (120.146.225.243) and still not DECnet traffic flowing...
Are you still area 9?
Regards, Tim.
5:02 p.m.
New subject: Cisco tunnels: update my IP (again)
On 1/07/2016 10:40 PM, Cory Smelosky wrote:
On Fri, 1 Jul 2016, Cory Smelosky wrote:
Excellent. Took bloody ages to come up! Guess I'll just have to be more
patient :-)
Regards, Tim.
Yup. Still area nine.
madison-sj(config)#decnet node-type area
madison-sj#ping 12.1023
Type escape sequence to abort.
Sending 5, 100-byte DECnet echos to atg 0 area.node 12.1023, timeout is
5 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 228/231/232 ms
Oops... 
5:09 p.m.
New subject: Cisco tunnels: update my IP (again)
On Jul 1, 2016, at 11:02 AM, Tim Sneddon <tim at
sneddon.id.au> wrote:
On 1/07/2016 10:40 PM, Cory Smelosky wrote:
What protocol does that tunnel use? Multinet over IP? If so, that's the expected
behavior given the design errors of that protocol. For all others, the connection should
come up as soon as packets start to flow back and forth reliably.
I've found Wireshark a useful tool to look at problems, though unfortunately Wireshark
parses many DECnet frames incorrectly. (It makes a particularly embarassing mess out of
routing packets.)
paul
...
Success rate is 100 percent (5/5), round-trip min/avg/max = 228/231/232 ms
Oops...
Excellent. Took bloody ages to come up! Guess I'll just have to be more patient :-)
5:22 p.m.
New subject: Cisco tunnels: update my IP (again)
On 1/07/2016 11:09 PM, Paul_Koning at Dell.com wrote:
It is DECnet over GRE between Cisco routers. It typically does come up
straight away. However, I have observed on the very odd occasion that
it takes a long time to come up. No idea why that is, it has never been
a critical issue so I've never bothered to look further.
Regards, Tim.
On Jul 1, 2016, at 11:02 AM, Tim Sneddon <tim
at sneddon.id.au>
wrote:
On 1/07/2016 10:40 PM, Cory Smelosky wrote:
What protocol does that tunnel use? Multinet over IP? If so, that's
the expected behavior given the design errors of that protocol. For
all others, the connection should come up as soon as packets start to
flow back and forth reliably.
... Success rate is 100 percent (5/5), round-trip min/avg/max =
228/231/232 ms
Oops...
Excellent. Took bloody ages to come up! Guess I'll just have to be
more patient :-)
7:27 p.m.
New subject: Cisco tunnels: update my IP (again)
What's the interface so I can update the config tool.
-brian
On Jun 30, 2016, at 22:39, Cory Smelosky <b4 at
gewt.net> wrote:
Okay,
2851 at the edge now (I had it available - just needed it shipped).
The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
7:53 p.m.
New subject: Cisco tunnels: update my IP (again)
g0/1.
Sent from my iPhone
On Jul 1, 2016, at 10:27, wonko at 4amlunch.net
wrote:
What's the interface so I can update the config tool.
-brian
> On Jun 30, 2016, at 22:39, Cory Smelosky <b4 at gewt.net> wrote:
>
> Okay,
>
> 2851 at the edge now (I had it available - just needed it shipped).
>
> The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
2 Jul
2 Jul
4:58 a.m.
New subject: Cisco tunnels: update my IP (again)
Are you still dynamic?
-brian
On Jul 1, 2016, at 13:53, Cory Smelosky <b4 at
gewt.net> wrote:
g0/1.
Sent from my iPhone
> On Jul 1, 2016, at 10:27, wonko at 4amlunch.net wrote:
>
> What's the interface so I can update the config tool.
>
> -brian
>
>> On Jun 30, 2016, at 22:39, Cory Smelosky <b4 at gewt.net> wrote:
>>
>> Okay,
>>
>> 2851 at the edge now (I had it available - just needed it shipped).
>>
>> The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
5:42 a.m.
New subject: Cisco tunnels: update my IP (again)
On Fri, 1 Jul 2016, wonko at 4amlunch.net wrote:
Are you still dynamic?
Yes, but a lot lot less.
What DNS record had I given before?
-brian
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
On Jul 1, 2016, at 13:53, Cory Smelosky <b4 at
gewt.net> wrote:
g0/1.
Sent from my iPhone
> On Jul 1, 2016, at 10:27, wonko at 4amlunch.net wrote:
>
> What's the interface so I can update the config tool.
>
> -brian
>
>> On Jun 30, 2016, at 22:39, Cory Smelosky <b4 at gewt.net> wrote:
>>
>> Okay,
>>
>> 2851 at the edge now (I had it available - just needed it shipped).
>>
>> The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
3 Jul
3 Jul
8:54 p.m.
New subject: Cisco tunnels: update my IP (again)
dev.gimme-sympathy.org <http://dev.gimme-sympathy.org/>
Updated. configs pushing out.
-brian
On Jul 1, 2016, at 23:42, Cory Smelosky <b4 at
gewt.net> wrote:
On Fri, 1 Jul 2016, wonko at 4amlunch.net <mailto:wonko at 4amlunch.net> wrote:
Are you still dynamic?
Yes, but a lot lot less.
What DNS record had I given before?
-brian
--
Cory Smelosky
http://gewt.net <http://gewt.net/> Personal stuff
http://gimme-sympathy.org <http://gimme-sympathy.org/> Projects On Jul 1, 2016, at 13:53, Cory Smelosky <b4 at
gewt.net> wrote:
g0/1.
Sent from my iPhone
> On Jul 1, 2016, at 10:27, wonko at 4amlunch.net wrote:
>
> What's the interface so I can update the config tool.
>
> -brian
>
>> On Jun 30, 2016, at 22:39, Cory Smelosky <b4 at gewt.net> wrote:
>>
>> Okay,
>>
>> 2851 at the edge now (I had it available - just needed it shipped).
>>
>> The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
8:56 p.m.
New subject: Cisco tunnels: update my IP (again)
Would you please regenerate that with my tunnel source set to "Vlan2"?
-Dave
On 07/03/2016 02:54 PM, Brian Hechinger wrote:
dev.gimme-sympathy.org
<http://dev.gimme-sympathy.org>
Updated. configs pushing out.
-brian
--
Dave McGuire, AK4HZ
New Kensington, PA
On Jul 1, 2016, at 23:42, Cory Smelosky <b4 at
gewt.net
<mailto:b4 at gewt.net>> wrote:
On Fri, 1 Jul 2016, wonko at 4amlunch.net <mailto:wonko at 4amlunch.net> wrote:
Are you still dynamic?
Yes, but a lot lot less.
What DNS record had I given before?
-brian
--
Cory Smelosky
http://gewt.net <http://gewt.net/> Personal stuff
http://gimme-sympathy.org <http://gimme-sympathy.org/> Projects On Jul 1, 2016, at 13:53, Cory Smelosky <b4 at
gewt.net
<mailto:b4 at gewt.net>> wrote:
g0/1.
Sent from my iPhone
> On Jul 1, 2016, at 10:27, wonko at 4amlunch.net
> <mailto:wonko at 4amlunch.net> wrote:
>
> What's the interface so I can update the config tool.
>
> -brian
>
>> On Jun 30, 2016, at 22:39, Cory Smelosky <b4 at gewt.net
>> <mailto:b4 at gewt.net>> wrote:
>>
>> Okay,
>>
>> 2851 at the edge now (I had it available - just needed it shipped).
>>
>> The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
9:22 p.m.
New subject: Cisco tunnels: update my IP (again)
On Sun, 3 Jul 2016, Dave McGuire wrote:
Would you please regenerate that with my tunnel source set to "Vlan2"?
-Dave
Is your VLAN ID in fact "2"? ;)
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
9:51 p.m.
New subject: Cisco tunnels: update my IP (again)
On 07/03/2016 03:22 PM, Cory Smelosky wrote:
It is. I get the feeling you find that more interesting than I do. ;)
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
Would you
please regenerate that with my tunnel source set to "Vlan2"?
Is your VLAN ID in fact "2"? ;)
9:53 p.m.
New subject: Cisco tunnels: update my IP (again)
On Sun, 3 Jul 2016, Dave McGuire wrote:
On 07/03/2016 03:22 PM, Cory Smelosky wrote:
It is. I get the feeling you find that more interesting than I do. ;)
VLAN names and tags and subnets don't necessarily match in the legacy
network at work. ;)
Office (10.2/16) is Vlan100, 10.5/16 is 102, and all kinds of oddities.
Would
you please regenerate that with my tunnel source set to "Vlan2"?
Is your VLAN ID in fact "2"? ;) -Dave
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
10:04 p.m.
New subject: Cisco tunnels: update my IP (again)
On 07/03/2016 03:53 PM, Cory Smelosky wrote:
On Sun, 3 Jul 2016, Dave McGuire wrote:
How bizarre. ;) The actual vlan *names* (VTP-wise) here are sensible
at least. ;)
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
On 07/03/2016 03:22 PM, Cory Smelosky wrote:
It is. I get the feeling you find that more interesting than I do. ;)
VLAN names and tags and subnets don't necessarily match in the legacy
network at work. ;)
Office (10.2/16) is Vlan100, 10.5/16 is 102, and all kinds of oddities. Would
you please regenerate that with my tunnel source set to "Vlan2"?
Is your VLAN ID in fact "2"? ;)
10:06 p.m.
New subject: Cisco tunnels: update my IP (again)
On Sun, 3 Jul 2016, Dave McGuire wrote:
It was set up by someone who hated VLANs. Seriously.
Office (10.2/16) is Vlan100, 10.5/16 is 102, and all kinds of oddities.
How bizarre. ;) The actual vlan *names* (VTP-wise) here are sensible
at least. ;)
-Dave
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
10:38 p.m.
New subject: Cisco tunnels: update my IP (again)
How can you hate VLANs? Seriously.
-brian
On Jul 3, 2016, at 16:06, Cory Smelosky <b4 at
gewt.net> wrote:
On Sun, 3 Jul 2016, Dave McGuire wrote:
It was set up by someone who hated VLANs. Seriously.
Office (10.2/16) is Vlan100, 10.5/16 is 102, and all kinds of oddities.
How bizarre. ;) The actual vlan *names* (VTP-wise) here are sensible
at least. ;)
-Dave
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
10:39 p.m.
New subject: Cisco tunnels: update my IP (again)
On Sun, 3 Jul 2016, Brian Hechinger wrote:
How can you hate VLANs? Seriously.
-brian
I was confused by that as well...
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
8:54 p.m.
New subject: Cisco tunnels: update my IP (again)
Error reloading router: gw.neurotica.com :: No SNMP response received before timeout
Error reloading router: dev.gimme-sympathy.org :: No SNMP response received before
timeout
You two no workie!
-brian
On Jul 1, 2016, at 23:42, Cory Smelosky <b4 at
gewt.net> wrote:
On Fri, 1 Jul 2016, wonko at 4amlunch.net <mailto:wonko at 4amlunch.net> wrote:
Are you still dynamic?
Yes, but a lot lot less.
What DNS record had I given before?
-brian
--
Cory Smelosky
http://gewt.net <http://gewt.net/> Personal stuff
http://gimme-sympathy.org <http://gimme-sympathy.org/> Projects On Jul 1, 2016, at 13:53, Cory Smelosky <b4 at
gewt.net> wrote:
g0/1.
Sent from my iPhone
> On Jul 1, 2016, at 10:27, wonko at 4amlunch.net wrote:
>
> What's the interface so I can update the config tool.
>
> -brian
>
>> On Jun 30, 2016, at 22:39, Cory Smelosky <b4 at gewt.net> wrote:
>>
>> Okay,
>>
>> 2851 at the edge now (I had it available - just needed it shipped).
>>
>> The new IP is 24.4.35.228 - all tunnels SHOULD ACTUALLY COME UP now.
8:56 p.m.
New subject: Cisco tunnels: update my IP (again)
On 07/03/2016 02:54 PM, Brian Hechinger wrote:
Error reloading router: gw.neurotica.com
<http://gw.neurotica.com> :: No
SNMP response received before timeout
Error reloading router: dev.gimme-sympathy.org
<http://dev.gimme-sympathy.org> :: No SNMP response received before timeout
What's your source address? I may have missed it in an access list on
a new router. (7600, woohoo!)
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
9:10 p.m.
New subject: Cisco tunnels: update my IP (again)
On Sun, 3 Jul 2016, Dave McGuire wrote:
On 07/03/2016 02:54 PM, Brian Hechinger wrote:
I forgot to add the ACL too. ;)
Got the management plane tightened, though!
Error reloading router: gw.neurotica.com
<http://gw.neurotica.com> :: No
SNMP response received before timeout
Error reloading router: dev.gimme-sympathy.org
<http://dev.gimme-sympathy.org> :: No SNMP response received before timeout
What's your source address? I may have missed it in an access list on
a new router. (7600, woohoo!)
-Dave
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
9:18 p.m.
New subject: Cisco tunnels: update my IP (again)
Also:
my tunnel to you is down, Brian. ;)
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
4 Jul
4 Jul
1:55 a.m.
New subject: Cisco tunnels: update my IP (again)
Yeah. I need to fix things on my end. SNMP to my router is via an openvpn tunnel
that's been down forever. :)
-brian
On Jul 3, 2016, at 15:18, Cory Smelosky <b4 at
gewt.net> wrote:
Also:
my tunnel to you is down, Brian. ;)
--
Cory Smelosky
http://gewt.net Personal stuff
http://gimme-sympathy.org Projects
23 Jun
23 Jun
2:30 p.m.
Why don't you put your 2600 as your boarder-gw?
interface Tunnel1
ip address 192.108.195.70 255.255.255.252
ip router isis
ipv6 address 2001:440:1880:ABCD::2/64
ipv6 enable
ipv6 mtu 1420
ipv6 router isis
decnet cost 1
isis metric 2
tunnel source ATM0/1/0.1
tunnel destination 192.36.147.120
!
interface ATM0/1/0
mtu 4470
no ip address
ip virtual-reassembly in max-fragments 64 max-reassemblies 512
load-interval 30
atm restart timer 90
no atm ilmi-keepalive
dsl enable-training-log delay 0
dsl power-cutback 6
dsl noise-margin -2
dsl gain-setting rx-offset 3
dsl bitswap both
!
interface ATM0/1/0.1 point-to-point
mtu 4470
ip dhcp client broadcast-flag set
ip address dhcp
ip nat outside
ip virtual-reassembly in
atm route-bridged ip
pvc 0/35
protocol bridge
encapsulation aal5snap
-P
On 23/06/2016 1:47 PM, Cory Smelosky wrote:
`
Found the actual problem!
IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
So, does this mean that you're still off the air?
Regards, Tim.
4:26 p.m.
My connection exceeds the capabilities of the 2620 or I would.
Sent from my iPhone
On Jun 23, 2016, at 05:30, Peter Lothberg <roll at
Stupi.SE> wrote:
Why don't you put your 2600 as your boarder-gw?
interface Tunnel1
ip address 192.108.195.70 255.255.255.252
ip router isis
ipv6 address 2001:440:1880:ABCD::2/64
ipv6 enable
ipv6 mtu 1420
ipv6 router isis
decnet cost 1
isis metric 2
tunnel source ATM0/1/0.1
tunnel destination 192.36.147.120
!
interface ATM0/1/0
mtu 4470
no ip address
ip virtual-reassembly in max-fragments 64 max-reassemblies 512
load-interval 30
atm restart timer 90
no atm ilmi-keepalive
dsl enable-training-log delay 0
dsl power-cutback 6
dsl noise-margin -2
dsl gain-setting rx-offset 3
dsl bitswap both
!
interface ATM0/1/0.1 point-to-point
mtu 4470
ip dhcp client broadcast-flag set
ip address dhcp
ip nat outside
ip virtual-reassembly in
atm route-bridged ip
pvc 0/35
protocol bridge
encapsulation aal5snap
-P
`
On
23/06/2016 1:47 PM, Cory Smelosky wrote:
Found the actual problem!
IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
So, does this mean that you're still off the air?
Regards, Tim.
4:55 p.m.
...it also exceeds the capabilities of a 2851.
Sent from my iPhone
On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at
gewt.net> wrote:
My connection exceeds the capabilities of the 2620 or I would.
Sent from my iPhone
On Jun 23, 2016, at 05:30, Peter Lothberg
<roll at Stupi.SE> wrote:
Why don't you put your 2600 as your boarder-gw?
interface Tunnel1
ip address 192.108.195.70 255.255.255.252
ip router isis
ipv6 address 2001:440:1880:ABCD::2/64
ipv6 enable
ipv6 mtu 1420
ipv6 router isis
decnet cost 1
isis metric 2
tunnel source ATM0/1/0.1
tunnel destination 192.36.147.120
!
interface ATM0/1/0
mtu 4470
no ip address
ip virtual-reassembly in max-fragments 64 max-reassemblies 512
load-interval 30
atm restart timer 90
no atm ilmi-keepalive
dsl enable-training-log delay 0
dsl power-cutback 6
dsl noise-margin -2
dsl gain-setting rx-offset 3
dsl bitswap both
!
interface ATM0/1/0.1 point-to-point
mtu 4470
ip dhcp client broadcast-flag set
ip address dhcp
ip nat outside
ip virtual-reassembly in
atm route-bridged ip
pvc 0/35
protocol bridge
encapsulation aal5snap
-P
`
On
23/06/2016 1:47 PM, Cory Smelosky wrote:
Found the actual problem!
IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE from
the DECnet tunnel IPs to a separate box as is currently configured.
So, does this mean that you're still off the air?
Regards, Tim.
5:09 p.m.
What sort of connection do you have?
-brian
On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at
gewt.net> wrote:
...it also exceeds the capabilities of a 2851.
Sent from my iPhone
On Jun 23, 2016, at 07:26, Cory Smelosky <b4
at gewt.net> wrote:
My connection exceeds the capabilities of the 2620 or I would.
Sent from my iPhone
On Jun 23, 2016, at 05:30, Peter Lothberg
<roll at Stupi.SE> wrote:
Why don't you put your 2600 as your boarder-gw?
interface Tunnel1
ip address 192.108.195.70 255.255.255.252
ip router isis
ipv6 address 2001:440:1880:ABCD::2/64
ipv6 enable
ipv6 mtu 1420
ipv6 router isis
decnet cost 1
isis metric 2
tunnel source ATM0/1/0.1
tunnel destination 192.36.147.120
!
interface ATM0/1/0
mtu 4470
no ip address
ip virtual-reassembly in max-fragments 64 max-reassemblies 512
load-interval 30
atm restart timer 90
no atm ilmi-keepalive
dsl enable-training-log delay 0
dsl power-cutback 6
dsl noise-margin -2
dsl gain-setting rx-offset 3
dsl bitswap both
!
interface ATM0/1/0.1 point-to-point
mtu 4470
ip dhcp client broadcast-flag set
ip address dhcp
ip nat outside
ip virtual-reassembly in
atm route-bridged ip
pvc 0/35
protocol bridge
encapsulation aal5snap
-P
> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
> Found the actual problem!
>
> IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect GRE
from the DECnet tunnel IPs to a separate box as is currently configured.
>
So, does this mean that you're still off the air?
Regards, Tim.
`
5:13 p.m.
Sounds like he's been dying to be asked that question. ;) Well Cory,
spill it! ;)
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
On June 23, 2016 11:09:52 AM Brian Hechinger <wonko at 4amlunch.net> wrote:
What sort of connection do you have?
-brian
On Jun 23, 2016, at 10:55, Cory Smelosky <b4
at gewt.net> wrote:
...it also exceeds the capabilities of a 2851.
Sent from my iPhone
On Jun 23, 2016, at 07:26, Cory Smelosky <b4
at gewt.net> wrote:
My connection exceeds the capabilities of the 2620 or I would.
Sent from my iPhone
On Jun 23, 2016, at 05:30, Peter Lothberg
<roll at Stupi.SE> wrote:
Why don't you put your 2600 as your boarder-gw?
interface Tunnel1
ip address 192.108.195.70 255.255.255.252
ip router isis
ipv6 address 2001:440:1880:ABCD::2/64
ipv6 enable
ipv6 mtu 1420
ipv6 router isis
decnet cost 1
isis metric 2
tunnel source ATM0/1/0.1
tunnel destination 192.36.147.120
!
interface ATM0/1/0
mtu 4470
no ip address
ip virtual-reassembly in max-fragments 64 max-reassemblies 512
load-interval 30
atm restart timer 90
no atm ilmi-keepalive
dsl enable-training-log delay 0
dsl power-cutback 6
dsl noise-margin -2
dsl gain-setting rx-offset 3
dsl bitswap both
!
interface ATM0/1/0.1 point-to-point
mtu 4470
ip dhcp client broadcast-flag set
ip address dhcp
ip nat outside
ip virtual-reassembly in
atm route-bridged ip
pvc 0/35
protocol bridge
encapsulation aal5snap
-P
>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>> Found the actual problem!
>>
>> IPSec VTI VPNs means I can't do source-based NAT/firewall rules to redirect
>> GRE from the DECnet tunnel IPs to a separate box as is currently configured.
>>
>
> So, does this mean that you're still off the air?
>
> Regards, Tim.
>
>
`
5:51 p.m.
175/10 cable with a constant ache to upgrade to gigabit from one of the providers. ;)
----- Original Message -----
From: "Brian Hechinger" <wonko at
4amlunch.net>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:09:24 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
What sort of connection do you have?
-brian
> On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at gewt.net> wrote:
>
> ...it also exceeds the capabilities of a 2851.
>
> Sent from my iPhone
>
>> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at gewt.net> wrote:
>>
>> My connection exceeds the capabilities of the 2620 or I would.
>>
>> Sent from my iPhone
>>
>>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at Stupi.SE> wrote:
>>>
>>>
>>> Why don't you put your 2600 as your boarder-gw?
>>>
>>> interface Tunnel1
>>> ip address 192.108.195.70 255.255.255.252
>>> ip router isis
>>> ipv6 address 2001:440:1880:ABCD::2/64
>>> ipv6 enable
>>> ipv6 mtu 1420
>>> ipv6 router isis
>>> decnet cost 1
>>> isis metric 2
>>> tunnel source ATM0/1/0.1
>>> tunnel destination 192.36.147.120
>>> !
>>> interface ATM0/1/0
>>> mtu 4470
>>> no ip address
>>> ip virtual-reassembly in max-fragments 64 max-reassemblies 512
>>> load-interval 30
>>> atm restart timer 90
>>> no atm ilmi-keepalive
>>> dsl enable-training-log delay 0
>>> dsl power-cutback 6
>>> dsl noise-margin -2
>>> dsl gain-setting rx-offset 3
>>> dsl bitswap both
>>> !
>>> interface ATM0/1/0.1 point-to-point
>>> mtu 4470
>>> ip dhcp client broadcast-flag set
>>> ip address dhcp
>>> ip nat outside
>>> ip virtual-reassembly in
>>> atm route-bridged ip
>>> pvc 0/35
>>> protocol bridge
>>> encapsulation aal5snap
>>>
>>> -P
>>>
>>>
>>>
>>>
>>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>>> Found the actual problem!
>>>>>
>>>>> IPSec VTI VPNs means I can't do source-based NAT/firewall rules
to redirect GRE
>>>>> from the DECnet tunnel IPs to a separate box as is currently
configured.
>>>>>
>>>>
>>>> So, does this mean that you're still off the air?
>>>>
>>>> Regards, Tim.
>>>>
>>>>
>>>
>>> `
>>
5:14 p.m.
Nice and all...but how much are you actually *using*? ;)
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
On June 23, 2016 11:13:04 AM Cory Smelosky <b4 at gewt.net> wrote:
175/10 cable with a constant ache to upgrade to
gigabit from one of the
providers. ;)
----- Original Message -----
From: "Brian Hechinger" <wonko at
4amlunch.net>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:09:24 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
> What sort of connection do you have?
>
> -brian
>
>> On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at gewt.net> wrote:
>>
>> ...it also exceeds the capabilities of a 2851.
>>
>> Sent from my iPhone
>>
>>> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at gewt.net> wrote:
>>>
>>> My connection exceeds the capabilities of the 2620 or I would.
>>>
>>> Sent from my iPhone
>>>
>>>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at Stupi.SE>
wrote:
>>>>
>>>>
>>>> Why don't you put your 2600 as your boarder-gw?
>>>>
>>>> interface Tunnel1
>>>> ip address 192.108.195.70 255.255.255.252
>>>> ip router isis
>>>> ipv6 address 2001:440:1880:ABCD::2/64
>>>> ipv6 enable
>>>> ipv6 mtu 1420
>>>> ipv6 router isis
>>>> decnet cost 1
>>>> isis metric 2
>>>> tunnel source ATM0/1/0.1
>>>> tunnel destination 192.36.147.120
>>>> !
>>>> interface ATM0/1/0
>>>> mtu 4470
>>>> no ip address
>>>> ip virtual-reassembly in max-fragments 64 max-reassemblies 512
>>>> load-interval 30
>>>> atm restart timer 90
>>>> no atm ilmi-keepalive
>>>> dsl enable-training-log delay 0
>>>> dsl power-cutback 6
>>>> dsl noise-margin -2
>>>> dsl gain-setting rx-offset 3
>>>> dsl bitswap both
>>>> !
>>>> interface ATM0/1/0.1 point-to-point
>>>> mtu 4470
>>>> ip dhcp client broadcast-flag set
>>>> ip address dhcp
>>>> ip nat outside
>>>> ip virtual-reassembly in
>>>> atm route-bridged ip
>>>> pvc 0/35
>>>> protocol bridge
>>>> encapsulation aal5snap
>>>>
>>>> -P
>>>>
>>>>
>>>>
>>>>
>>>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>>>> Found the actual problem!
>>>>>>
>>>>>> IPSec VTI VPNs means I can't do source-based NAT/firewall
rules to redirect GRE
>>>>>> from the DECnet tunnel IPs to a separate box as is currently
configured.
>>>>>>
>>>>>
>>>>> So, does this mean that you're still off the air?
>>>>>
>>>>> Regards, Tim.
>>>>>
>>>>>
>>>>
>>>> `
>>>
6:09 p.m.
With ZFS replication across work/home and home/old Ohio stuff, downloading the entire
internet, and being impatient...I do quite regularly max it out. ;)
----- Original Message -----
From: "Dave McGuire" <mcguire at
neurotica.com>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:14:53 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
Nice and all...but how much are you actually *using*?
;)
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
On June 23, 2016 11:13:04 AM Cory Smelosky <b4 at gewt.net> wrote:
> 175/10 cable with a constant ache to upgrade to gigabit from one of the
> providers. ;)
>
> ----- Original Message -----
>> From: "Brian Hechinger" <wonko at 4amlunch.net>
>> To: hecnet at Update.UU.SE
>> Sent: Thursday, June 23, 2016 8:09:24 AM
>> Subject: Re: [HECnet] Cisco tunnels: update my IP
>
>> What sort of connection do you have?
>>
>> -brian
>>
>>> On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at gewt.net> wrote:
>>>
>>> ...it also exceeds the capabilities of a 2851.
>>>
>>> Sent from my iPhone
>>>
>>>> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at gewt.net> wrote:
>>>>
>>>> My connection exceeds the capabilities of the 2620 or I would.
>>>>
>>>> Sent from my iPhone
>>>>
>>>>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at Stupi.SE>
wrote:
>>>>>
>>>>>
>>>>> Why don't you put your 2600 as your boarder-gw?
>>>>>
>>>>> interface Tunnel1
>>>>> ip address 192.108.195.70 255.255.255.252
>>>>> ip router isis
>>>>> ipv6 address 2001:440:1880:ABCD::2/64
>>>>> ipv6 enable
>>>>> ipv6 mtu 1420
>>>>> ipv6 router isis
>>>>> decnet cost 1
>>>>> isis metric 2
>>>>> tunnel source ATM0/1/0.1
>>>>> tunnel destination 192.36.147.120
>>>>> !
>>>>> interface ATM0/1/0
>>>>> mtu 4470
>>>>> no ip address
>>>>> ip virtual-reassembly in max-fragments 64 max-reassemblies 512
>>>>> load-interval 30
>>>>> atm restart timer 90
>>>>> no atm ilmi-keepalive
>>>>> dsl enable-training-log delay 0
>>>>> dsl power-cutback 6
>>>>> dsl noise-margin -2
>>>>> dsl gain-setting rx-offset 3
>>>>> dsl bitswap both
>>>>> !
>>>>> interface ATM0/1/0.1 point-to-point
>>>>> mtu 4470
>>>>> ip dhcp client broadcast-flag set
>>>>> ip address dhcp
>>>>> ip nat outside
>>>>> ip virtual-reassembly in
>>>>> atm route-bridged ip
>>>>> pvc 0/35
>>>>> protocol bridge
>>>>> encapsulation aal5snap
>>>>>
>>>>> -P
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>>>>> Found the actual problem!
>>>>>>>
>>>>>>> IPSec VTI VPNs means I can't do source-based NAT/firewall
rules to redirect GRE
>>>>>>> from the DECnet tunnel IPs to a separate box as is currently
configured.
>>>>>>>
>>>>>>
>>>>>> So, does this mean that you're still off the air?
>>>>>>
>>>>>> Regards, Tim.
>>>>>>
>>>>>>
>>>>>
>>>>> `
5:33 p.m.
"Downloading the entire Internet"...I love it. :)
I didn't know you were still running hardware at your old place in Ohio..?
-Dave
On 06/23/2016 12:09 PM, Cory Smelosky wrote:
With ZFS replication across work/home and home/old
Ohio stuff, downloading the entire internet, and being impatient...I do quite regularly
max it out. ;)
----- Original Message -----
--
Dave McGuire, AK4HZ
New Kensington, PA
From: "Dave McGuire" <mcguire at
neurotica.com>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:14:53 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
> Nice and all...but how much are you actually *using*? ;)
>
> -Dave
>
> --
> Dave McGuire, AK4HZ
> New Kensington, PA
>
>
>
> On June 23, 2016 11:13:04 AM Cory Smelosky <b4 at gewt.net> wrote:
>
>> 175/10 cable with a constant ache to upgrade to gigabit from one of the
>> providers. ;)
>>
>> ----- Original Message -----
>>> From: "Brian Hechinger" <wonko at 4amlunch.net>
>>> To: hecnet at Update.UU.SE
>>> Sent: Thursday, June 23, 2016 8:09:24 AM
>>> Subject: Re: [HECnet] Cisco tunnels: update my IP
>>
>>> What sort of connection do you have?
>>>
>>> -brian
>>>
>>>> On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at gewt.net> wrote:
>>>>
>>>> ...it also exceeds the capabilities of a 2851.
>>>>
>>>> Sent from my iPhone
>>>>
>>>>> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at gewt.net>
wrote:
>>>>>
>>>>> My connection exceeds the capabilities of the 2620 or I would.
>>>>>
>>>>> Sent from my iPhone
>>>>>
>>>>>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at
Stupi.SE> wrote:
>>>>>>
>>>>>>
>>>>>> Why don't you put your 2600 as your boarder-gw?
>>>>>>
>>>>>> interface Tunnel1
>>>>>> ip address 192.108.195.70 255.255.255.252
>>>>>> ip router isis
>>>>>> ipv6 address 2001:440:1880:ABCD::2/64
>>>>>> ipv6 enable
>>>>>> ipv6 mtu 1420
>>>>>> ipv6 router isis
>>>>>> decnet cost 1
>>>>>> isis metric 2
>>>>>> tunnel source ATM0/1/0.1
>>>>>> tunnel destination 192.36.147.120
>>>>>> !
>>>>>> interface ATM0/1/0
>>>>>> mtu 4470
>>>>>> no ip address
>>>>>> ip virtual-reassembly in max-fragments 64 max-reassemblies 512
>>>>>> load-interval 30
>>>>>> atm restart timer 90
>>>>>> no atm ilmi-keepalive
>>>>>> dsl enable-training-log delay 0
>>>>>> dsl power-cutback 6
>>>>>> dsl noise-margin -2
>>>>>> dsl gain-setting rx-offset 3
>>>>>> dsl bitswap both
>>>>>> !
>>>>>> interface ATM0/1/0.1 point-to-point
>>>>>> mtu 4470
>>>>>> ip dhcp client broadcast-flag set
>>>>>> ip address dhcp
>>>>>> ip nat outside
>>>>>> ip virtual-reassembly in
>>>>>> atm route-bridged ip
>>>>>> pvc 0/35
>>>>>> protocol bridge
>>>>>> encapsulation aal5snap
>>>>>>
>>>>>> -P
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>>>>>> Found the actual problem!
>>>>>>>>
>>>>>>>> IPSec VTI VPNs means I can't do source-based
NAT/firewall rules to redirect GRE
>>>>>>>> from the DECnet tunnel IPs to a separate box as is
currently configured.
>>>>>>>>
>>>>>>>
>>>>>>> So, does this mean that you're still off the air?
>>>>>>>
>>>>>>> Regards, Tim.
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> `
6:14 p.m.
I need to keep the router and switch maintained so I don't get calls at 4am because my
dad needs to check sports scores. ;)
----- Original Message -----
From: "Dave McGuire" <mcguire at
neurotica.com>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:33:28 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
"Downloading the entire Internet"...I love
it. :)
I didn't know you were still running hardware at your old place in Ohio..?
-Dave
On 06/23/2016 12:09 PM, Cory Smelosky wrote:
With ZFS replication across work/home and
home/old Ohio stuff, downloading the
entire internet, and being impatient...I do quite regularly max it out. ;)
----- Original Message -----
--
Dave McGuire, AK4HZ
New Kensington, PA From: "Dave McGuire" <mcguire at
neurotica.com>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:14:53 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
> Nice and all...but how much are you actually *using*? ;)
>
> -Dave
>
> --
> Dave McGuire, AK4HZ
> New Kensington, PA
>
>
>
> On June 23, 2016 11:13:04 AM Cory Smelosky <b4 at gewt.net> wrote:
>
>> 175/10 cable with a constant ache to upgrade to gigabit from one of the
>> providers. ;)
>>
>> ----- Original Message -----
>>> From: "Brian Hechinger" <wonko at 4amlunch.net>
>>> To: hecnet at Update.UU.SE
>>> Sent: Thursday, June 23, 2016 8:09:24 AM
>>> Subject: Re: [HECnet] Cisco tunnels: update my IP
>>
>>> What sort of connection do you have?
>>>
>>> -brian
>>>
>>>> On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at gewt.net> wrote:
>>>>
>>>> ...it also exceeds the capabilities of a 2851.
>>>>
>>>> Sent from my iPhone
>>>>
>>>>> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at gewt.net>
wrote:
>>>>>
>>>>> My connection exceeds the capabilities of the 2620 or I would.
>>>>>
>>>>> Sent from my iPhone
>>>>>
>>>>>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at
Stupi.SE> wrote:
>>>>>>
>>>>>>
>>>>>> Why don't you put your 2600 as your boarder-gw?
>>>>>>
>>>>>> interface Tunnel1
>>>>>> ip address 192.108.195.70 255.255.255.252
>>>>>> ip router isis
>>>>>> ipv6 address 2001:440:1880:ABCD::2/64
>>>>>> ipv6 enable
>>>>>> ipv6 mtu 1420
>>>>>> ipv6 router isis
>>>>>> decnet cost 1
>>>>>> isis metric 2
>>>>>> tunnel source ATM0/1/0.1
>>>>>> tunnel destination 192.36.147.120
>>>>>> !
>>>>>> interface ATM0/1/0
>>>>>> mtu 4470
>>>>>> no ip address
>>>>>> ip virtual-reassembly in max-fragments 64 max-reassemblies 512
>>>>>> load-interval 30
>>>>>> atm restart timer 90
>>>>>> no atm ilmi-keepalive
>>>>>> dsl enable-training-log delay 0
>>>>>> dsl power-cutback 6
>>>>>> dsl noise-margin -2
>>>>>> dsl gain-setting rx-offset 3
>>>>>> dsl bitswap both
>>>>>> !
>>>>>> interface ATM0/1/0.1 point-to-point
>>>>>> mtu 4470
>>>>>> ip dhcp client broadcast-flag set
>>>>>> ip address dhcp
>>>>>> ip nat outside
>>>>>> ip virtual-reassembly in
>>>>>> atm route-bridged ip
>>>>>> pvc 0/35
>>>>>> protocol bridge
>>>>>> encapsulation aal5snap
>>>>>>
>>>>>> -P
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>>>>>> Found the actual problem!
>>>>>>>>
>>>>>>>> IPSec VTI VPNs means I can't do source-based
NAT/firewall rules to redirect GRE
>>>>>>>> from the DECnet tunnel IPs to a separate box as is
currently configured.
>>>>>>>>
>>>>>>>
>>>>>>> So, does this mean that you're still off the air?
>>>>>>>
>>>>>>> Regards, Tim.
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> ` 
5:40 p.m.
Corey, you need to check the time on your system. You mails are in the
future...
Johnny
On 2016-06-23 18:14, Cory Smelosky wrote:
I need to keep the router and switch maintained so I
don't get calls at 4am because my dad needs to check sports scores. ;)
----- Original Message -----
From: "Dave McGuire" <mcguire at
neurotica.com>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:33:28 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
> "Downloading the entire Internet"...I love it. :)
>
> I didn't know you were still running hardware at your old place in Ohio..?
>
> -Dave
>
> On 06/23/2016 12:09 PM, Cory Smelosky wrote:
>> With ZFS replication across work/home and home/old Ohio stuff, downloading the
>> entire internet, and being impatient...I do quite regularly max it out. ;)
>>
>> ----- Original Message -----
>>> From: "Dave McGuire" <mcguire at neurotica.com>
>>> To: hecnet at Update.UU.SE
>>> Sent: Thursday, June 23, 2016 8:14:53 AM
>>> Subject: Re: [HECnet] Cisco tunnels: update my IP
>>
>>> Nice and all...but how much are you actually *using*? ;)
>>>
>>> -Dave
>>>
>>> --
>>> Dave McGuire, AK4HZ
>>> New Kensington, PA
>>>
>>>
>>>
>>> On June 23, 2016 11:13:04 AM Cory Smelosky <b4 at gewt.net> wrote:
>>>
>>>> 175/10 cable with a constant ache to upgrade to gigabit from one of the
>>>> providers. ;)
>>>>
>>>> ----- Original Message -----
>>>>> From: "Brian Hechinger" <wonko at 4amlunch.net>
>>>>> To: hecnet at Update.UU.SE
>>>>> Sent: Thursday, June 23, 2016 8:09:24 AM
>>>>> Subject: Re: [HECnet] Cisco tunnels: update my IP
>>>>
>>>>> What sort of connection do you have?
>>>>>
>>>>> -brian
>>>>>
>>>>>> On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at gewt.net>
wrote:
>>>>>>
>>>>>> ...it also exceeds the capabilities of a 2851.
>>>>>>
>>>>>> Sent from my iPhone
>>>>>>
>>>>>>> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at
gewt.net> wrote:
>>>>>>>
>>>>>>> My connection exceeds the capabilities of the 2620 or I
would.
>>>>>>>
>>>>>>> Sent from my iPhone
>>>>>>>
>>>>>>>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at
Stupi.SE> wrote:
>>>>>>>>
>>>>>>>>
>>>>>>>> Why don't you put your 2600 as your boarder-gw?
>>>>>>>>
>>>>>>>> interface Tunnel1
>>>>>>>> ip address 192.108.195.70 255.255.255.252
>>>>>>>> ip router isis
>>>>>>>> ipv6 address 2001:440:1880:ABCD::2/64
>>>>>>>> ipv6 enable
>>>>>>>> ipv6 mtu 1420
>>>>>>>> ipv6 router isis
>>>>>>>> decnet cost 1
>>>>>>>> isis metric 2
>>>>>>>> tunnel source ATM0/1/0.1
>>>>>>>> tunnel destination 192.36.147.120
>>>>>>>> !
>>>>>>>> interface ATM0/1/0
>>>>>>>> mtu 4470
>>>>>>>> no ip address
>>>>>>>> ip virtual-reassembly in max-fragments 64
max-reassemblies 512
>>>>>>>> load-interval 30
>>>>>>>> atm restart timer 90
>>>>>>>> no atm ilmi-keepalive
>>>>>>>> dsl enable-training-log delay 0
>>>>>>>> dsl power-cutback 6
>>>>>>>> dsl noise-margin -2
>>>>>>>> dsl gain-setting rx-offset 3
>>>>>>>> dsl bitswap both
>>>>>>>> !
>>>>>>>> interface ATM0/1/0.1 point-to-point
>>>>>>>> mtu 4470
>>>>>>>> ip dhcp client broadcast-flag set
>>>>>>>> ip address dhcp
>>>>>>>> ip nat outside
>>>>>>>> ip virtual-reassembly in
>>>>>>>> atm route-bridged ip
>>>>>>>> pvc 0/35
>>>>>>>> protocol bridge
>>>>>>>> encapsulation aal5snap
>>>>>>>>
>>>>>>>> -P
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>>>>>>>> Found the actual problem!
>>>>>>>>>>
>>>>>>>>>> IPSec VTI VPNs means I can't do source-based
NAT/firewall rules to redirect GRE
>>>>>>>>>> from the DECnet tunnel IPs to a separate box as
is currently configured.
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>> So, does this mean that you're still off the
air?
>>>>>>>>>
>>>>>>>>> Regards, Tim.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>> `
>
> --
> Dave McGuire, AK4HZ
> New Kensington, PA
5:42 p.m.
----- Original Message -----
From: "Johnny Billquist" <bqt at
softjar.se>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:40:06 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
Corey, you need to check the time on your system. You
mails are in the
future...
Fixed.
Could've sworn I had ntpd running...
Johnny
5:44 p.m.
On 06/23/2016 12:14 PM, Cory Smelosky wrote:
I need to keep the router and switch maintained so I
don't get calls
at 4am because my dad needs to check sports scores. ;)
Ahh ok.
Your dad is too cool for that sports crap. Is there any hope for him?
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
5:17 p.m.
Damn, that?s nice. Upload could be better though.
Get a 7301, they aren?t terribly expensive. :)
-brian
On Jun 23, 2016, at 11:51, Cory Smelosky <b4 at
gewt.net> wrote:
175/10 cable with a constant ache to upgrade to gigabit from one of the providers. ;)
----- Original Message -----
From: "Brian Hechinger" <wonko at
4amlunch.net>
To: hecnet at Update.UU.SE
Sent: Thursday, June 23, 2016 8:09:24 AM
Subject: Re: [HECnet] Cisco tunnels: update my IP
> What sort of connection do you have?
>
> -brian
>
>> On Jun 23, 2016, at 10:55, Cory Smelosky <b4 at gewt.net> wrote:
>>
>> ...it also exceeds the capabilities of a 2851.
>>
>> Sent from my iPhone
>>
>>> On Jun 23, 2016, at 07:26, Cory Smelosky <b4 at gewt.net> wrote:
>>>
>>> My connection exceeds the capabilities of the 2620 or I would.
>>>
>>> Sent from my iPhone
>>>
>>>> On Jun 23, 2016, at 05:30, Peter Lothberg <roll at Stupi.SE>
wrote:
>>>>
>>>>
>>>> Why don't you put your 2600 as your boarder-gw?
>>>>
>>>> interface Tunnel1
>>>> ip address 192.108.195.70 255.255.255.252
>>>> ip router isis
>>>> ipv6 address 2001:440:1880:ABCD::2/64
>>>> ipv6 enable
>>>> ipv6 mtu 1420
>>>> ipv6 router isis
>>>> decnet cost 1
>>>> isis metric 2
>>>> tunnel source ATM0/1/0.1
>>>> tunnel destination 192.36.147.120
>>>> !
>>>> interface ATM0/1/0
>>>> mtu 4470
>>>> no ip address
>>>> ip virtual-reassembly in max-fragments 64 max-reassemblies 512
>>>> load-interval 30
>>>> atm restart timer 90
>>>> no atm ilmi-keepalive
>>>> dsl enable-training-log delay 0
>>>> dsl power-cutback 6
>>>> dsl noise-margin -2
>>>> dsl gain-setting rx-offset 3
>>>> dsl bitswap both
>>>> !
>>>> interface ATM0/1/0.1 point-to-point
>>>> mtu 4470
>>>> ip dhcp client broadcast-flag set
>>>> ip address dhcp
>>>> ip nat outside
>>>> ip virtual-reassembly in
>>>> atm route-bridged ip
>>>> pvc 0/35
>>>> protocol bridge
>>>> encapsulation aal5snap
>>>>
>>>> -P
>>>>
>>>>
>>>>
>>>>
>>>>>> On 23/06/2016 1:47 PM, Cory Smelosky wrote:
>>>>>> Found the actual problem!
>>>>>>
>>>>>> IPSec VTI VPNs means I can't do source-based NAT/firewall
rules to redirect GRE
>>>>>> from the DECnet tunnel IPs to a separate box as is currently
configured.
>>>>>>
>>>>>
>>>>> So, does this mean that you're still off the air?
>>>>>
>>>>> Regards, Tim.
>>>>>
>>>>>
>>>>
>>>> `
>>>
2865
days inactive
2875
days old
52 comments
10 participants
participants (10)
-
b4＠gewt.net -
bqt＠softjar.se -
crossd＠gmail.com -
gregg.drwho8＠gmail.com -
johnhreinhardt＠yahoo.com -
mcguire＠neurotica.com -
Paul_Koning＠Dell.com -
roll＠Stupi.SE -
tim＠sneddon.id.au -
wonko＠4amlunch.net