15 Nov
2018
15 Nov
'18
3:19 p.m.
Hi,
I have just finished doing a bit of network cleanup on my ASA and 1841 and
noticed that a number of the HECnet GRE tunnels seems to be down or
possibly misconfigured.
I know that my IP address changed a while back as part of the transition to
Australia's National Broadband Network (NBN) and my router can now be found
at 110.141.227.104. I am pretty sure that Brian sent out an update, but I'm
not sure how well it was applied.
Since changing IP addresses I've only been able to establish a tunnel
with 50.131.218.138 (area 42). However, when I attempt to ping the other
end I am unable to reach 42.1023.
After looking at my firewall logs I noticed that someone at 81.135.164.245
was attempting to establish a GRE tunnel. After looking at the existing
configuration I noticed that it was a similar address to what had been last
configured for area 22. I made the change and now I can establish a link
to area 22 and I can successfully ping 22.1023.
However, that is were it ends. I have tunnels configured for area 59, 23,
61, 9 and 52, but I have no connection to the other end. Worse, I have no
connection to the HECnet as a larger entity.
Is anyone else other than myself and Mark Darvill still using the tunnels?
If there is a lack of interest in the maintenance, I would be happy to take
it over and start running the bridge here too.
Thoughts? Anybody... :-)
Regards, Tim.
15 Nov
15 Nov
3:30 p.m.
On 11/15/18 9:19 AM, Tim Sneddon wrote:
I have just finished doing a bit of network cleanup on
my ASA and 1841
and noticed that a number of the HECnet GRE tunnels seems to be down or
possibly misconfigured.
I know that my IP address changed a while back as part of the transition
to Australia's National Broadband Network (NBN) and my router can now be
found at 110.141.227.104. I am pretty sure that Brian sent out an
update, but I'm not sure how well it was applied.
Since changing IP addresses I've only been able to establish a tunnel
with?50.131.218.138 (area 42).? However, when I attempt to ping the
other end I am unable to reach 42.1023.
After looking at my firewall logs I noticed that someone
at?81.135.164.245 was attempting to establish a GRE tunnel.? After
looking at the existing configuration I noticed that it was a similar
address to what had been last configured for area 22.? I made the change
and now I can establish a link to area 22 and I can successfully ping
22.1023.
However, that is were it ends.? I have tunnels configured for area 59,
23, 61, 9 and 52, but I have no connection to the other end.? Worse, I
have no connection to the HECnet as a larger entity.
Is anyone else other than myself and Mark Darvill still using the
tunnels?? If there is a lack of interest in the maintenance, I would be
happy to take it over and start running the bridge here too.
The GRE tunnel system is in use here at the LSSM, area 61. I just
updated your endpoint address in my router. I've not seen any updates
from Brian that changed your tunnel endpoint address.
I can ping 42.1023, but not 22.1023. Most of my routes go through
42.1022.
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
4:34 p.m.
On Thu, Nov 15, 2018 at 10:30 PM Dave McGuire <mcguire at neurotica.com> wrote:
The GRE tunnel system is in use here at the LSSM,
area 61. I just
updated your endpoint address in my router. I've not seen any updates
from Brian that changed your tunnel endpoint address.
Excellent. I can now see area 61. I gave my router a kick in the guts too
and now I can see area 22, 61 and 42.
I can ping 42.1023, but not 22.1023. Most of my routes go through
42.1022.
Ahh, I should have looked at the route table more clearly :-) Yes, 42.1022
is the area 42 router and after my reboot I can now ping it.
Thanks for your response. I've now got three links up :-)
Regards, Tim.
16 Nov
16 Nov
3 a.m.
Let me hop on Ian's machine and see how the tunnel thing is doing. I've
been meaning to rewrite that anyway so maybe this will be the motivation. ?
On Thu, Nov 15, 2018, 09:30 Dave McGuire <mcguire at neurotica.com wrote:
On 11/15/18 9:19 AM, Tim Sneddon wrote:
I have just finished doing a bit of network
cleanup on my ASA and 1841
and noticed that a number of the HECnet GRE tunnels seems to be down or
possibly misconfigured.
I know that my IP address changed a while back as part of the transition
to Australia's National Broadband Network (NBN) and my router can now be
found at 110.141.227.104. I am pretty sure that Brian sent out an
update, but I'm not sure how well it was applied.
Since changing IP addresses I've only been able to establish a tunnel
with 50.131.218.138 (area 42). However, when I attempt to ping the
other end I am unable to reach 42.1023.
After looking at my firewall logs I noticed that someone
at 81.135.164.245 was attempting to establish a GRE tunnel. After
looking at the existing configuration I noticed that it was a similar
address to what had been last configured for area 22. I made the change
and now I can establish a link to area 22 and I can successfully ping
22.1023.
However, that is were it ends. I have tunnels configured for area 59,
23, 61, 9 and 52, but I have no connection to the other end. Worse, I
have no connection to the HECnet as a larger entity.
Is anyone else other than myself and Mark Darvill still using the
tunnels? If there is a lack of interest in the maintenance, I would be
happy to take it over and start running the bridge here too.
The GRE tunnel system is in use here at the LSSM, area 61. I just
updated your endpoint address in my router. I've not seen any updates
from Brian that changed your tunnel endpoint address.
I can ping 42.1023, but not 22.1023. Most of my routes go through
42.1022.
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
5:34 p.m.
On Fri, Nov 16, 2018 at 10:01 AM Brian Hechinger <wonko at 4amlunch.net> wrote:
Let me hop on Ian's machine and see how the tunnel
thing is doing. I've
been meaning to rewrite that anyway so maybe this will be the motivation. ?
Awesome, thanks. Happy, to be motivational :-) I'm also happy to help out
with anything if you need it.
Regards, Tim.
11:22 a.m.
It would probably be worth working out again who is using GRE and redefine and
re-establish all of the tunnels.
GRE works well for me as it is always on and there when I need to use it.
The tunnels I can see and am peering with are:
0 12.1023 Tunnel57 0000.0000.0000 A
0 23.1023 Tunnel59 0000.0000.0000 A
0 42.1022 Tunnel51 0000.0000.0000 A
0 61.1023 Tunnel53 0000.0000.0000 A
I am routing to the rest of HECnet through area 12 currently and can decent ping mim::
1.13
My tunnel IP is 81.138.115.178 and am happy to peer with anyone else using GRE. The IP
81.135.164.245 is my current dynamically assigned address so Tim, probably better if you
switch to 81.138.115.178 as it will likely change.
Mark
On 15 Nov 2018, at 14:30, Dave McGuire <mcguire at
neurotica.com> wrote:
On 11/15/18 9:19 AM, Tim Sneddon wrote:
I have just finished doing a bit of network
cleanup on my ASA and 1841
and noticed that a number of the HECnet GRE tunnels seems to be down or
possibly misconfigured.
I know that my IP address changed a while back as part of the transition
to Australia's National Broadband Network (NBN) and my router can now be
found at 110.141.227.104. I am pretty sure that Brian sent out an
update, but I'm not sure how well it was applied.
Since changing IP addresses I've only been able to establish a tunnel
with 50.131.218.138 (area 42). However, when I attempt to ping the
other end I am unable to reach 42.1023.
After looking at my firewall logs I noticed that someone
at 81.135.164.245 was attempting to establish a GRE tunnel. After
looking at the existing configuration I noticed that it was a similar
address to what had been last configured for area 22. I made the change
and now I can establish a link to area 22 and I can successfully ping
22.1023.
However, that is were it ends. I have tunnels configured for area 59,
23, 61, 9 and 52, but I have no connection to the other end. Worse, I
have no connection to the HECnet as a larger entity.
Is anyone else other than myself and Mark Darvill still using the
tunnels? If there is a lack of interest in the maintenance, I would be
happy to take it over and start running the bridge here too.
The GRE tunnel system is in use here at the LSSM, area 61. I just
updated your endpoint address in my router. I've not seen any updates
from Brian that changed your tunnel endpoint address.
I can ping 42.1023, but not 22.1023. Most of my routes go through
42.1022.
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
5:33 p.m.
On Fri, Nov 16, 2018 at 6:22 PM Mark Darvill <mark.darvill at mac.com> wrote:
It would probably be worth working out again who is
using GRE and redefine
and re-establish all of the tunnels.
GRE works well for me as it is always on and there when I need to use it.
The tunnels I can see and am peering with are:
0 12.1023 Tunnel57 0000.0000.0000 A
0 23.1023 Tunnel59 0000.0000.0000 A
0 42.1022 Tunnel51 0000.0000.0000 A
0 61.1023 Tunnel53 0000.0000.0000 A
I am routing to the rest of HECnet through area 12 currently and can
decent ping mim:: 1.13
My tunnel IP is 81.138.115.178 and am happy to peer with anyone else using
GRE. The IP 81.135.164.245 is my current dynamically assigned address so
Tim, probably better if you switch to 81.138.115.178 as it will likely
change.
There might be something wrong with your setup, Mark. I switched to your
dynamic IP as I could not get your tunnel to come up. However, I
discovered that your dynamic IP was attempting to connect to me, so I made
the configuration change and the link came up. I'll try switching back,
just to make sure it isn't my end with the problem.
Regards, Tim.
5:56 p.m.
On Thu, Nov 15, 2018 at 10:30 PM Dave McGuire <mcguire at neurotica.com> wrote:
The GRE tunnel system is in use here at the LSSM,
area 61. I just
updated your endpoint address in my router. I've not seen any updates
from Brian that changed your tunnel endpoint address.
I can ping 42.1023, but not 22.1023. Most of my routes go through
42.1022.
I noticed that I lost my tunnel to you again. I'm trying to debug a few
things in my setup here and so was wondering if you had powered off your
router, maybe done a reboot without a "write mem"? Typically I would just
leave it until it came back up, but getting GRE to reliably pass through
this ASA is a pain :-)
Regards, Tim.
6 p.m.
Which IP address was it? I did see a config error on my firewall that was sending out GRE
traffic on the dynamic address by mistake. This has now been fixed and inbound and
outbound should now flow over 81.138.115.178.
Mark
On 16 Nov 2018, at 16:56, Tim Sneddon <tim at
sneddon.id.au> wrote:
On Thu, Nov 15, 2018 at 10:30 PM Dave McGuire <mcguire at neurotica.com
<mailto:mcguire at neurotica.com>> wrote:
The GRE tunnel system is in use here at the LSSM, area 61. I just
updated your endpoint address in my router. I've not seen any updates
from Brian that changed your tunnel endpoint address.
I can ping 42.1023, but not 22.1023. Most of my routes go through
42.1022.
I noticed that I lost my tunnel to you again. I'm trying to debug a few things in my
setup here and so was wondering if you had powered off your router, maybe done a reboot
without a "write mem"? Typically I would just leave it until it came back up,
but getting GRE to reliably pass through this ASA is a pain :-)
Regards, Tim.
20 Nov
20 Nov
3:01 a.m.
On Sat, Nov 17, 2018 at 1:00 AM Mark Darvill <mark.darvill at mac.com> wrote:
Which IP address was it? I did see a config error on
my firewall that was
sending out GRE traffic on the dynamic address by mistake. This has now
been fixed and inbound and outbound should now flow over 81.138.115.178.
Thanks, Mark. I've just updated the configuration and the tunnel is
immediately back up!
Regards, Tim.
16 Nov
16 Nov
6:58 p.m.
On 11/16/18 11:56 AM, Tim Sneddon wrote:
I noticed that I lost my tunnel to you again.? I'm
trying to debug a few
things in my setup here and so was wondering if you had powered off your
router, maybe done a reboot without a "write mem"?
No, this network is in heavy use by a bunch of people. It doesn't get
powered off, and I schedule maintenance windows for reboots.
I've just shut/no shut the tunnel interface; let's see if that brings
it back up.
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
20 Nov
20 Nov
3:04 a.m.
On Sat, Nov 17, 2018 at 1:58 AM Dave McGuire <mcguire at neurotica.com> wrote:
On 11/16/18 11:56 AM, Tim Sneddon wrote:
That is good to know. I can use your tunnel as a benchmark for any changes
I make locally.
I noticed that I lost my tunnel to you again.
I'm trying to debug a few
things in my setup here and so was wondering if you had powered off your
router, maybe done a reboot without a "write mem"?
No, this network is in heavy use by a bunch of people. It doesn't get
powered off, and I schedule maintenance windows for reboots. I've just shut/no shut the tunnel interface;
let's see if that brings
it back up.
I think it was my end as I have reworked some changes and tunnels are all
re-established. Thanks for resetting the tunnel at your end though. It is
much appreciated.
Regards, Tim.
5:17 a.m.
My tunnel to Dave has been down for a few days now. I can't explain it, but
my tunnel just randomly goes down without warning, and then eventually
comes back up on its own, seemingly without any reason or help. I'm not
saying it's necessarily anything on Dave's end, but I'm at a loss to
explain it. I've been running an emulated cisco 7200-series instance in
dynamips/dynagen for years now, and only started noticing the problem in
the past year. My router is at 61.200 and normally connects to Dave's
61.1023. Dave, is it possible you started using 61.200 for something on
your end?
Regards,
Mark
On Fri, Nov 16, 2018 at 9:58 AM Dave McGuire <mcguire at neurotica.com> wrote:
On 11/16/18 11:56 AM, Tim Sneddon wrote:
I noticed that I lost my tunnel to you again.
I'm trying to debug a few
things in my setup here and so was wondering if you had powered off your
router, maybe done a reboot without a "write mem"?
No, this network is in heavy use by a bunch of people. It doesn't get
powered off, and I schedule maintenance windows for reboots.
I've just shut/no shut the tunnel interface; let's see if that brings
it back up.
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
5:29 a.m.
On 11/19/18 11:17 PM, Mark Abene wrote:
My tunnel to Dave has been down for a few days now. I
can't explain it,
but my tunnel just randomly goes down without warning, and then
eventually comes back up on its own, seemingly without any reason or
help. I'm not saying it's necessarily anything on Dave's end, but I'm at
a loss to explain it. I've been running an emulated cisco 7200-series
instance in dynamips/dynagen for years now, and only started noticing
the problem in the past year. My router is at 61.200 and normally
connects to Dave's 61.1023. Dave, is it possible you started using
61.200 for something on your end?
Nope, I'm not using 61.200 for anything.
Things are otherwise stable here. I've always been suspicious of
emulated Ciscos...do you have real hardware you can try?
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
6:02 a.m.
Unfortunately I don't have any ciscos in hardware anymore. It's still
strange that I never had any trouble with DECnet that I've noticed, until
the past year. The only thing I can say that's changed in my home setup is
moving to a Netgear Orbi wifi mesh to fully cover my house, but I don't see
any immediate reason why my simulated cisco would periodically lose its
DECnet neighbor. It's not on wifi.
-M
On Mon, Nov 19, 2018 at 8:29 PM Dave McGuire <mcguire at neurotica.com> wrote:
On 11/19/18 11:17 PM, Mark Abene wrote:
My tunnel to Dave has been down for a few days
now. I can't explain it,
but my tunnel just randomly goes down without warning, and then
eventually comes back up on its own, seemingly without any reason or
help. I'm not saying it's necessarily anything on Dave's end, but I'm at
a loss to explain it. I've been running an emulated cisco 7200-series
instance in dynamips/dynagen for years now, and only started noticing
the problem in the past year. My router is at 61.200 and normally
connects to Dave's 61.1023. Dave, is it possible you started using
61.200 for something on your end?
Nope, I'm not using 61.200 for anything.
Things are otherwise stable here. I've always been suspicious of
emulated Ciscos...do you have real hardware you can try?
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
6:12 a.m.
This is the relevant part of my config. Even though I've been using this
config for several years, let me know if anything looks out of place:
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname hecgw1
!
enable secret 5 XXX
!
ip subnet-zero
no ip icmp rate-limit unreachable
ip cef
!
!
ip tcp synwait-time 5
no ip domain lookup
!
!
decnet routing iv-prime 61.200
decnet node-type routing-iv
!
!
!
!
!
!
!
!
!
!
!
!
!
bridge crb
!
!
!
interface Tunnel0
no ip address
decnet cost 20
tunnel source FastEthernet0/0
tunnel destination 50.73.179.1
tunnel path-mtu-discovery
bridge-group 1
bridge-group 1 spanning-disabled
!
interface FastEthernet0/0
ip address x.x.x.x 255.255.255.0
duplex full
speed auto
decnet cost 20
bridge-group 1
bridge-group 1 input-lsap-list 202
bridge-group 1 input-type-list 201
bridge-group 1 spanning-disabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.x
no ip http server
!
!
access-list 201 permit 0x6003 0x0000
access-list 201 permit 0x6004 0x0000
access-list 202 deny 0x0000 0xFFFF
!
!
!
bridge 1 protocol ieee
bridge 1 route decnet
bridge 1 route ip
call rsvp-sync
!
!
mgcp profile default
!
dial-peer cor custom
!
!
!
!
gatekeeper
shutdown
!
!
...(line settings omitted)
Thanks.
On Mon, Nov 19, 2018 at 9:02 PM Mark Abene <phiber at phiber.com> wrote:
Unfortunately I don't have any ciscos in hardware
anymore. It's still
strange that I never had any trouble with DECnet that I've noticed, until
the past year. The only thing I can say that's changed in my home setup is
moving to a Netgear Orbi wifi mesh to fully cover my house, but I don't see
any immediate reason why my simulated cisco would periodically lose its
DECnet neighbor. It's not on wifi.
-M
On Mon, Nov 19, 2018 at 8:29 PM Dave McGuire <mcguire at neurotica.com>
wrote:
On 11/19/18 11:17 PM, Mark Abene wrote:
My tunnel to Dave has been down for a few days
now. I can't explain it,
but my tunnel just randomly goes down without warning, and then
eventually comes back up on its own, seemingly without any reason or
help. I'm not saying it's necessarily anything on Dave's end, but I'm at
a loss to explain it. I've been running an emulated cisco 7200-series
instance in dynamips/dynagen for years now, and only started noticing
the problem in the past year. My router is at 61.200 and normally
connects to Dave's 61.1023. Dave, is it possible you started using
61.200 for something on your end?
Nope, I'm not using 61.200 for anything.
Things are otherwise stable here. I've always been suspicious of
emulated Ciscos...do you have real hardware you can try?
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
6:19 a.m.
Weirdo. I am *swimming* in Cisco hardware. Want some? ;)
Yeah, I don't see why that'd happen either. Very strange. Do you
have a machine at another site (VPS or something) that you can set up
Dynamips on to eliminate anything on your local network as a possibility?
-Dave
On 11/20/18 12:02 AM, Mark Abene wrote:
Unfortunately I don't have any ciscos in hardware
anymore. It's still
strange that I never had any trouble with DECnet that I've noticed,
until the past year. The only thing I can say that's changed in my home
setup is moving to a Netgear Orbi wifi mesh to fully cover my house, but
I don't see any immediate reason why my simulated cisco would
periodically lose its DECnet neighbor. It's not on wifi.
-M
On Mon, Nov 19, 2018 at 8:29 PM Dave McGuire <mcguire at neurotica.com
<mailto:mcguire at neurotica.com>> wrote:
On 11/19/18 11:17 PM, Mark Abene wrote:
--
Dave McGuire, AK4HZ
New Kensington, PA
My tunnel to Dave has been down for a few days
now. I can't
explain it,
but my tunnel just randomly goes down without
warning, and then
eventually comes back up on its own, seemingly without any reason or
help. I'm not saying it's necessarily anything on Dave's end, but
I'm at
a loss to explain it. I've been running an
emulated cisco 7200-series
instance in dynamips/dynagen for years now, and only started noticing
the problem in the past year. My router is at 61.200 and normally
connects to Dave's 61.1023. Dave, is it possible you started using
61.200 for something on your end?
? Nope, I'm not using 61.200 for anything.
? Things are otherwise stable here.? I've always been suspicious of
emulated Ciscos...do you have real hardware you can try?
? ? ? ? ? ? -Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
27 Nov
27 Nov
11:21 p.m.
Heh. I'd switched to running IOS in emulation because I just don't have
anywhere to put a real cisco. Plus I have never had any problem with
dynamips, and I've used it professionally for some pretty complex network
simulations in the past, all without issue, so I don't think it's dynamips
at fault here. It's odd that it's both intermittent, and that it started
within the past year. My HECnet connection currently isn't working. I think
this is the longest I've noticed it being down, despite having restarted my
Netgear as well as the dynamips/dynagen instance more than once (it runs on
an Intel NUC along with several emulated systems).
-Mark
On Mon, Nov 19, 2018 at 9:19 PM Dave McGuire <mcguire at neurotica.com> wrote:
Weirdo. I am *swimming* in Cisco hardware. Want some? ;)
Yeah, I don't see why that'd happen either. Very strange. Do you
have a machine at another site (VPS or something) that you can set up
Dynamips on to eliminate anything on your local network as a possibility?
-Dave
On 11/20/18 12:02 AM, Mark Abene wrote:
7200-series
--
Dave McGuire, AK4HZ
New Kensington, PA
Unfortunately I don't have any ciscos in
hardware anymore. It's still
strange that I never had any trouble with DECnet that I've noticed,
until the past year. The only thing I can say that's changed in my home
setup is moving to a Netgear Orbi wifi mesh to fully cover my house, but
I don't see any immediate reason why my simulated cisco would
periodically lose its DECnet neighbor. It's not on wifi.
-M
On Mon, Nov 19, 2018 at 8:29 PM Dave McGuire <mcguire at neurotica.com
<mailto:mcguire at neurotica.com>> wrote:
On 11/19/18 11:17 PM, Mark Abene wrote:
or
My tunnel to Dave has been down for a few days
now. I can't
explain it,
> but my tunnel just randomly goes down without warning, and then
> eventually comes back up on its own, seemingly without any reason help.
I'm not saying it's necessarily anything on Dave's end, but
I'm
at
> a loss to explain it. I've been running an emulated cisco > instance in dynamips/dynagen for years
now, and only started
noticing
the
problem in the past year. My router is at 61.200 and normally
connects to Dave's 61.1023. Dave, is it possible you started using
61.200 for something on your end?
Nope, I'm not using 61.200 for anything.
Things are otherwise stable here. I've always been suspicious of
emulated Ciscos...do you have real hardware you can try?
-Dave
--
Dave McGuire, AK4HZ
New Kensington, PA
1988
days inactive
2000
days old
17 comments
5 participants
participants (5)
-
mark.darvill＠mac.com -
mcguire＠neurotica.com -
phiber＠phiber.com -
tim＠sneddon.id.au -
wonko＠4amlunch.net