Autonomous Network Configuration by Negotiation: Problem Statement & Requirements

Size: px
Start display at page:

Download "Autonomous Network Configuration by Negotiation: Problem Statement & Requirements"

Transcription

1 Autonomous Network Configuration by Negotiation: Problem Statement & Requirements NMRG IETF 88 November 2013 Sheng Jiang Brian Carpenter

2 Motivation for Autonomous Network Many ISP networks contain >100k network devices Devices are often managed by different staffs Configuration, management, maintenance, troubleshooting and recovery of these devices is a major OPEX burden Substantial staff training and coordination More directly coordination among devices is desired Autonomy of configuration would be a major benefit Plug and play for the ISP Network devices decide configurations by themselves Network devices need to talk and negotiate with each other directly 2/10 Pages

3 Autonomous: Network Managed by Itself Complexity Human Management Crisis point Network Information that needs to be managed Introduce Autonomous (Self-management) Tech Current Status for Various Networks Time Human-based management cannot handle the more and more complex network The automation of network could simplify the human management, reduce the human error and the cost of network maintenance Autonomous also requires network devices become more intelligent and complex 3/10 Pages

4 The Missing Part: Device Negotiation Ability In routing protocols, distributed autonomous configuration is a well established mechanism Mainly one-way information announcement model The question is how to extend autonomy to cover all kinds of distributed configuration needs to be less hierarchical and less dependent on human operators than a traditional NMS Negotiation ability between network devices is needed The network devices need to know more information from the relevant devices The configuration should be decided in coordination model 4/10 Pages

5 Brief Look at Negotiation Requirements Able to manage any type of information about a node, flow, link, VPN, tunnel or security setting No human intervention Support of forecasting or "dry run" before changing configuration When a new user/device appears, able to set up coincidence resources or configuration on multiple other devices Automatic recovery (renegotiation) after faults Strong authentication 5/10 Pages

6 Brief Look at Negotiation-enabled Autonomous Scenarios Classical: negotiation between downstream and upstream network devices Typically when a new device or customer connects Particularly when downstream devices trigger the upstream devices to create/modify a corresponding configuration, or allocate/change corresponding resources When dynamically optimizing coincidence configuration interactively 6/10 Pages

7 Brief Look at Negotiation-enabled Autonomous Scenarios (2) Negotiation between peer network devices Typically when a new customer-to-customer flow arises, or a faulty node has to be bypassed When sharing limited resource among peer network devices Negotiation between networks Typically when a change in traffic engineering settings is needed (multiple connections) Dynamic establishment and adjustment of differentiated service classes to support Service Level Agreements Better coordination among networks 7/10 Pages

8 A Simple Autonomous Example With Device Negotiation Enterprise/ Office Networks Global Internet Resident Area/ Home Networks CGN 100 Public IPv4 Addresses Each CGN 8/10 Pages

9 A Simple Autonomous Example With Device Negotiation Enterprise/ Office Networks Global Internet Resident Area/ Home Networks CGN Allow Negotiation CGN More User Access Morning 160 Public IPv4 Addresses Do you have spare public IPv4 addresses Spared 60 public IPv4 addresses for you 8/10 Pages

10 A Simple Autonomous Example With Device Negotiation Enterprise/ Office Networks Global Internet Resident Area/ Home Networks CGN Allow Negotiation CGN Do you have spare public IPv4 addresses Spared 80 public IPv4 addresses for you Night More User Access 180 Public IPv4 addresses 8/10 Pages

11 Contents of draft-jiang-config-negotiation-ps Analysis of requirements for a generic negotiation protocol Analysis of scenarios Considerations for detailed design requirements Brief review of some existing protocols We have not found one that does what we want Possible protocol behavior model draft-jiang-config-negotiation-protocol-00 Configuration Negotiation Protocol for Network Devices 9/10 Pages

12 Questions? Discussion? Thanks! 10/10 Pages

INTRODUCTION TO SELF-ORGANIZING MANAGEMENT & CONTROL PLANE, ETSI NGP ISG

INTRODUCTION TO SELF-ORGANIZING MANAGEMENT & CONTROL PLANE, ETSI NGP ISG INTRODUCTION TO SELF-ORGANIZING MANAGEMENT & CONTROL PLANE, ETSI NGP ISG Sheng JIANG (Principal Engineer, Huawei) on behalf of ETSI NGP ISG ETSI 2014. All rights reserved 2 ETSI 2014. All rights reserved

More information

Internet Research Task Force (IRTF) M. Behringer Cisco Systems June 2015

Internet Research Task Force (IRTF) M. Behringer Cisco Systems June 2015 Internet Research Task Force (IRTF) Request for Comments: 7576 Category: Informational ISSN: 2070-1721 S. Jiang Huawei Technologies Co., Ltd B. Carpenter Univ. of Auckland M. Behringer Cisco Systems June

More information

Advisory Guidelines for 6to4 Deployment

Advisory Guidelines for 6to4 Deployment Advisory Guidelines for 6to4 Deployment draft-carpenter-v6ops-6to4[-teredo]-advisory-03 Brian Carpenter March 2011 1 Acknowledgements Very useful and practical input from at least 20 people: Emile Aben,

More information

Dissemination of Paths in Path-Aware Networks

Dissemination of Paths in Path-Aware Networks Dissemination of Paths in Path-Aware Networks Christos Pappas Network Security Group, ETH Zurich IETF, November 16, 2017 PANRG Motivation How does path-awareness extend to the edge? 2 PANRG Motivation

More information

Considerations and Actions of Content Providers in Adopting IPv6

Considerations and Actions of Content Providers in Adopting IPv6 Considerations and Actions of Content Providers in Adopting IPv6 Sheng Jiang / Huawei Brian Carpenter / University of Auckland www.huawei.com IPv6 Trends Global IPv4 registry (IANA) ran out of spare blocks

More information

An Autonomic Control Plane

An Autonomic Control Plane An Autonomic Control Plane draft-ietf-anima-autonomic-control-plane update for ietf99:08 ietf100:12 100 th IETF, November 2017, Singapore Michael Behringer (editor), Toerless Eckert (editor), Steinthor

More information

Resource Certification

Resource Certification Resource Certification CISSP, science group manager RIPE NCC robert@ripe.net 1 Contents Motivation for Resource Certification (RPKI) Architecture overview Participating in RPKI Most importantly: use cases

More information

PREREQUISITES TARGET AUDIENCE. Length Days: 5

PREREQUISITES TARGET AUDIENCE. Length Days: 5 Cisco Implementing Cisco IP Routing v2.0 (ROUTE) ROUTE v2.0 includes major updates and follows an updated blueprint. However, note that this course does not cover all items listed on the blueprint. Some

More information

A Reference Model for Autonomic Networking draft-behringer-anima-reference-model-00.txt

A Reference Model for Autonomic Networking draft-behringer-anima-reference-model-00.txt A Reference Model for Autonomic Networking 92 nd IETF, 27 Mar 2015 Michael Behringer Brian Carpenter Toerless Eckert 1 Background History A Framework for Autonomic Networking Jun 2012 draft-behringer-autonomic-network-framework-00.txt

More information

Cisco Implementing Cisco IP Routing v2.0 (ROUTE)

Cisco Implementing Cisco IP Routing v2.0 (ROUTE) Course Overview ROUTE v2.0, a five-day ILT course, includes major updates and follows an updated blueprint. (However, note that this course does not cover all items listed on the blueprint.) Some older

More information

L2TP Configuration. L2TP Overview. Introduction. Typical L2TP Networking Application

L2TP Configuration. L2TP Overview. Introduction. Typical L2TP Networking Application Table of Contents L2TP Configuration 1 L2TP Overview 1 Introduction 1 Typical L2TP Networking Application 1 Basic Concepts of L2TP 2 L2TP Tunneling Modes and Tunnel Establishment Process 4 L2TP Features

More information

Virtual Private Cloud. User Guide. Issue 03 Date

Virtual Private Cloud. User Guide. Issue 03 Date Issue 03 Date 2016-10-19 Change History Change History Release Date What's New 2016-10-19 This issue is the third official release. Modified the following content: Help Center URL 2016-07-15 This issue

More information

Case 1: VPN direction from Vigor2130 to Vigor2820

Case 1: VPN direction from Vigor2130 to Vigor2820 LAN to LAN IPSec VPN between Vigor2130 and Vigor2820 using Aggressive mode In this document we will introduce how to create a LAN to LAN IPSec VPN between Vigor2130 and a Vigor2820 using Aggressive mode.

More information

Table 3-1 Joint Staff IPv6 Operational Criteria

Table 3-1 Joint Staff IPv6 Operational Criteria Table 3-1 Joint Staff Joint Staff Final TE Report Criterion 1 security of unclassified network operations, classified network operations, black backbone operations, integration of HAIPE, integration of

More information

A Bandwidth-Broker Based Inter-Domain SLA Negotiation

A Bandwidth-Broker Based Inter-Domain SLA Negotiation A Bandwidth-Broker Based Inter-Domain SLA Negotiation Haci A. Mantar θ, Ibrahim T. Okumus, Junseok Hwang +, Steve Chapin β θ Department of Computer Engineering, Gebze Institute of Technology, Turkey β

More information

BGP Additional Paths. Finding Feature Information. Information About BGP Additional Paths. Problem That Additional Paths Can Solve

BGP Additional Paths. Finding Feature Information. Information About BGP Additional Paths. Problem That Additional Paths Can Solve The feature allows the advertisement of multiple paths through the same peering session for the same prefix without the new paths implicitly replacing any previous paths. This behavior promotes path diversity

More information

Migration Technologies. Dual Stack and Tunneling Using GRE, 6to4, and 6in4.

Migration Technologies. Dual Stack and Tunneling Using GRE, 6to4, and 6in4. Migration Technologies. Dual Stack and Tunneling Using GRE, 6to4, and 6in4. 1 By Gaza IPv6 Project Team Eng. Mohammed Abu-Jamous Why Not Dual Stack? Dual Stack is very important in our migration plane.

More information

TELE GREENLAND A/S (Referred to as TELE-POST) Wholesale Data Services. Annex D4. Global IP Service. Technical Description

TELE GREENLAND A/S (Referred to as TELE-POST) Wholesale Data Services. Annex D4. Global IP Service. Technical Description TELE GREENLAND A/S (Referred to as TELE-POST) Wholesale Data Services Global IP Service Technical Description 31.7.2015 Page 1 of 6 Contents 1. Introduction... 4 2. General definitions... 4 3. Service

More information

IPv6 Prefix Delegation for Hosts. Fred L. Templin IETF100 v6ops Working Group November 16, 2017

IPv6 Prefix Delegation for Hosts. Fred L. Templin IETF100 v6ops Working Group November 16, 2017 IPv6 Prefix Delegation for Hosts Fred L. Templin (fltemplin@acm.org) IETF100 v6ops Working Group November 16, 2017 Draft History Draft -00 posted 11/06/2015 and announced to v6ops Draft -01 resolved list

More information

Global IP Network Mobility

Global IP Network Mobility Using Border Gateway Protocol (BGP) Andrew L. Dul andrew.l.dul@boeing.com IETF 62 Minneapolis March 6-11, 2005 The Boeing Company 2005. All rights reserved. Page 1 3/31/2005 Connexion by Boeing Service

More information

A Future Internet Architecture Based on De-Conflated Identities

A Future Internet Architecture Based on De-Conflated Identities A Future Internet Architecture Based on De-Conflated Identities Subharthi Paul, Raj Jain, Jianli Pan Washington University in Saint Louis Saint Louis, MO 63130 Jain@wustl.edu IEEE Globecom 2010, Miami,

More information

Enhancements in EIGRP

Enhancements in EIGRP Cisco Support Community Presents Tech-Talk Series Enhancements in EIGRP Pawan Gupta Rahul Kukreja Agenda Ø EIGRP IETF Draft Ø EIGRP Named Mode Ø EIGRP Wide Metric Ø New Innovations in EIGRP ü Add Path

More information

Cisco Training - HD Telepresence MPLS: Implementing Cisco MPLS V3.0. Upcoming Dates. Course Description. Course Outline

Cisco Training - HD Telepresence MPLS: Implementing Cisco MPLS V3.0. Upcoming Dates. Course Description. Course Outline Cisco Training - HD Telepresence MPLS: Implementing Cisco MPLS V3.0 From the technology basics to advanced VPN configuration. $3,995.00 5 Days Upcoming Dates Dec 10 - Dec 14 Mar 25 - Mar 29 Course Description

More information

Table of Contents Chapter 1 MPLS L3VPN Configuration

Table of Contents Chapter 1 MPLS L3VPN Configuration Table of Contents Table of Contents... 1-1 1.1 MPLS L3VPN Overview... 1-1 1.1.1 MPLS L3VPN Model... 1-2 1.1.2 MPLS L3VPN Implementation... 1-5 1.1.3 Nested MPLS L3VPN Implementation... 1-7 1.1.4 Hierarchical

More information

Configuration Guide TL-ER5120/TL-ER6020/TL-ER REV3.0.0

Configuration Guide TL-ER5120/TL-ER6020/TL-ER REV3.0.0 Configuration Guide TL-ER5120/TL-ER6020/TL-ER6120 1910012186 REV3.0.0 June 2017 CONTENTS About This Guide Intended Readers... 1 Conventions... 1 More Information... 1 Viewing Status Information... 2 System

More information

Application Note. Applies to MultiMax

Application Note. Applies to MultiMax Application Note Setup L2TP VPN Environment Applies to MultiMax Document Name: Application Note Version: /1.01.00 Date: 2014-07-18 Updates between document versions are cumulative. Therefore, the latest

More information

Virtual Tunnel Interface

Virtual Tunnel Interface This chapter describes how to configure a VTI tunnel. About s, on page 1 Guidelines for s, on page 1 Create a VTI Tunnel, on page 2 About s The ASA supports a logical interface called (VTI). As an alternative

More information

Cisco CCNP ROUTE: Implementing Cisco IP Routing (ROUTE) 2.0. Upcoming Dates. Course Description. Course Outline

Cisco CCNP ROUTE: Implementing Cisco IP Routing (ROUTE) 2.0. Upcoming Dates. Course Description. Course Outline Cisco CCNP ROUTE: Implementing Cisco IP Routing (ROUTE) 2.0 Implementing Cisco IP Routing (ROUTE) v2.0 is an instructor-led five day training course developed to help students prepare for Cisco CCNP certification.

More information

Add Path Support in EIGRP

Add Path Support in EIGRP The feature enables hubs in a single Dynamic Multipoint VPN (DMVPN) domain to advertise multiple best paths to connected spokes when the Enhanced Interior Gateway Routing Protocol (EIGRP) is the routing

More information

KARP KMP-Using IKEv2 with TCP-AO

KARP KMP-Using IKEv2 with TCP-AO 83 rd IETF @ Paris KARP KMP-Using IKEv2 with TCP-AO draft-chunduri-karp-using-ikev2-with-tcp-ao-01 Uma Chunduri, Albert Tian Ericsson Inc. Joe Touch USC/ISI IETF 83, Paris, France March 26-30,2011 1 Using

More information

Network Design with latest VPN Technologies

Network Design with latest VPN Technologies Network Design with latest VPN Technologies Carsten Rossenhövel Managing Director Which VPN type fits the purpose? SOHO Teleworkers Internet Branch Office Questions to identify: What are the business goals?

More information

Problem space matrix based on the guideline* Crossing IPv4 Island

Problem space matrix based on the guideline* Crossing IPv4 Island Problem space matrix based on the guideline* Crossing IPv4 Island IPv6-Only Core Network Stateful RFC5571 (L2TP) DS-Lite (draft) Stateless RFC5969 (6rd) Our target 4rd (to be STD) (draft-despres-intarea-4rd)

More information

How to Set Up an IPsec Connection Between Two Ingate Firewalls/SIParators. Lisa Hallingström Paul Donald

How to Set Up an IPsec Connection Between Two Ingate Firewalls/SIParators. Lisa Hallingström Paul Donald How to Set Up an IPsec Connection Between Two Ingate Firewalls/SIParators Lisa Hallingström Paul Donald Table of Contents How to configure Ingate Firewall/SIParator for IPsec connections...3 Certificates...3

More information

Using HTTP/2 as a Transport for Arbitrary Bytestreams

Using HTTP/2 as a Transport for Arbitrary Bytestreams Using HTTP/2 as a Transport for Arbitrary Bytestreams draft-kinnear-httpbis-http2-transport Eric Kinnear (ekinnear@apple.com) Tommy Pauly (tpauly@apple.com) HTTPBIS IETF 104, March 2019, Prague!1 Transport

More information

G806+H3C WSR realize VPN networking

G806+H3C WSR realize VPN networking G806+H3C WSR800-10 realize VPN networking File Version: V1.0.0 1 1.Configure H3C WSR 800-10 1.1.Enter H3C WSR 800-10 Web Server Power the H3C WSR 800-10 and connect PC Ethernet interface to H3C WSR 800-10

More information

Automating VPN Management

Automating VPN Management Automating VPN Management By Scott Hilton, Vice President Product Management Assured Digital, Inc. Although many network managers, users and executives agree on the benefits of virtual private networking,

More information

IP Routing Volume Organization

IP Routing Volume Organization IP Routing Volume Organization Manual Version 20091105-C-1.03 Product Version Release 6300 series Organization The IP Routing Volume is organized as follows: Features IP Routing Overview Static Routing

More information

A Multihoming based IPv4/IPv6 Transition Approach

A Multihoming based IPv4/IPv6 Transition Approach A Multihoming based IPv4/IPv6 Transition Approach Lizhong Xie, Jun Bi, and Jianping Wu Network Research Center, Tsinghua University, China Education and Research Network (CERNET) Beijing 100084, China

More information

ISP Border Definition. Alexander Azimov

ISP Border Definition. Alexander Azimov ISP Border Definition Alexander Azimov ISP goal (one ASN) BGP Decision Process Step Attribute Transit 1 Highest Local Preference value Non-transit 2 Lowest AS Path length Transit 3 Lowest

More information

IPsec Dead Peer Detection Periodic Message Option

IPsec Dead Peer Detection Periodic Message Option IPsec Dead Peer Detection Periodic Message The IPsec Dead Peer Detection Periodic Message feature is used to configure the router to query the liveliness of its Internet Key Exchange (IKE) peer at regular

More information

IPv6 Transition Solutions for 3GPP Networks

IPv6 Transition Solutions for 3GPP Networks v6 Transition Solutions for 3GPP Networks draft-wiljakka-3gpp-ipv6-transition-00.txt Juha Wiljakka, Nokia on behalf of the 3GPP ngtrans design team 54 th IETF Meeting, Yokohama, Japan 17.07.02 1 3gpp_trans/

More information

The Background The Problem The Alternatives A Simpler, One-Stop Solution... 4

The Background The Problem The Alternatives A Simpler, One-Stop Solution... 4 ESTABLISHING A2P MOBILE MESSAGING ON YOUR TERMS November 2016 TABLE OF CONTENTS The Background.... 3 The Problem.... 3 The Alternatives.... 4 A Simpler, One-Stop Solution... 4 Why Tata Communications Mobile

More information

Multicast OLSP Establishment Scheme in OVPN over IP/GMPLS over DWDM

Multicast OLSP Establishment Scheme in OVPN over IP/GMPLS over DWDM Multicast OLSP Establishment Scheme in OVPN over IP/GMPLS over DWDM Jeong-Mi Kim 1, Oh-Han Kang 2, Jae-Il Jung 3, and Sung-Un Kim 1,4 1 Pukyong National University, 599-1 Daeyeon 3-Dong Nam-Gu, Busan,

More information

User Guide TL-R470T+/TL-R480T REV9.0.2

User Guide TL-R470T+/TL-R480T REV9.0.2 User Guide TL-R470T+/TL-R480T+ 1910012468 REV9.0.2 September 2018 CONTENTS About This Guide Intended Readers... 1 Conventions... 1 More Information... 1 Accessing the Router Overview... 3 Web Interface

More information

CSC 6575: Internet Security Fall 2017

CSC 6575: Internet Security Fall 2017 CSC 6575: Internet Security Fall 2017 Network Security Devices IP Security Mohammad Ashiqur Rahman Department of Computer Science College of Engineering Tennessee Tech University 2 IPSec Agenda Architecture

More information

Configuring Auto-Anchor Mobility

Configuring Auto-Anchor Mobility Information About Auto-Anchor Mobility, page 1 Information About Auto-Anchor Mobility You can use auto-anchor mobility (also called guest tunneling) to improve load balancing and security for roaming clients

More information

Implementing Cisco IP Routing (ROUTE)

Implementing Cisco IP Routing (ROUTE) Implementing Cisco IP Routing (ROUTE) COURSE OVERVIEW: Implementing Cisco IP Routing (ROUTE) v2.0 is an instructor-led five-day training course developed to help students prepare for Cisco CCNP certification.

More information

Enhanced Feasible-Path Unicast Reverse Path Filtering draft-sriram-opsec-urpf-improvements-01

Enhanced Feasible-Path Unicast Reverse Path Filtering draft-sriram-opsec-urpf-improvements-01 Enhanced Feasible-Path Unicast Reverse Path Filtering draft-sriram-opsec-urpf-improvements-01 K. Sriram and D. Montgomery OPSEC Working Group Meeting, IETF-99 July 2017 Acknowledgements: The authors are

More information

Emerging MPLS OAM mechanisms

Emerging MPLS OAM mechanisms Emerging MPLS OAM mechanisms Answering the interoperability and scalability question Data Networks Operation John Nakulski Product Manager October 2006 Page 1 Agenda Introduction The Need for MPLS OAM

More information

IP Mobility vs. Session Mobility

IP Mobility vs. Session Mobility IP Mobility vs. Session Mobility Securing wireless communication is a formidable task, something that many companies are rapidly learning the hard way. IP level solutions become extremely cumbersome when

More information

Introduction to The Internet

Introduction to The Internet Introduction to The Internet ITU/APNIC/MOIC IPv6 Workshop 19 th 21 st June 2017 Thimphu These materials are licensed under the Creative Commons Attribution-NonCommercial 4.0 International license (http://creativecommons.org/licenses/by-nc/4.0/)

More information

Security Concerns With Tunneling draft-ietf-v6ops-tunnel-security-concerns-00

Security Concerns With Tunneling draft-ietf-v6ops-tunnel-security-concerns-00 Security Concerns With Tunneling draft-ietf-v6ops-tunnel-security-concerns-00 Dave Thaler Suresh Krishnan Jim Hoagland IETF 72 1 Status Formerly draft-ietf-v6ops-teredo-securityconcerns-02.txt Most points

More information

MPLS Multi-protocol label switching Mario Baldi Politecnico di Torino (Technical University of Torino)

MPLS Multi-protocol label switching Mario Baldi Politecnico di Torino (Technical University of Torino) MPLS Multi-protocol label switching Mario Baldi Politecnico di Torino (Technical University of Torino) http://staff.polito.it/mario.baldi MPLS - 1 From MPLS Forum Documents MPLS is the enabling technology

More information

VPN Auto Provisioning

VPN Auto Provisioning VPN Auto Provisioning You can configure various types of IPsec VPN policies, such as site-to-site policies, including GroupVPN, and route-based policies. For specific details on the setting for these kinds

More information

ANIMA WG (Autonomic Networking Integrated Model and Approach) Rechartering Consideration

ANIMA WG (Autonomic Networking Integrated Model and Approach) Rechartering Consideration ANIMA WG (Autonomic Networking Integrated Model and Approach) Rechartering Consideration By co-authors Sheng Jiang & Toerless Eckert ANIMA WG History of ANIMA WG Primary presentations in 2013 Dedicated

More information

Creating VPN s with IPsec

Creating VPN s with IPsec 2014 Creating VPN s with IPsec SPRING ENTERPRISE INFO SECURITY 4040/601 WILSON CHANCE HINCHMAN This paper will define the term VPN, explain for what and why VPNs are used. IPsec, which is vital to the

More information

Cisco CISCO Securing Networks with ASA Advanced. Practice Test. Version

Cisco CISCO Securing Networks with ASA Advanced. Practice Test. Version Cisco 642-515 CISCO 642-515 Securing Networks with ASA Advanced Practice Test Version 3.1 QUESTION NO: 1 Cisco 642-515: Practice Exam Which two statements correctly describe configuring active/active failover?

More information

MPLS VPN Half-Duplex VRF

MPLS VPN Half-Duplex VRF The feature provides scalable hub-and-spoke connectivity for subscribers of an Multiprotocol Label Switching (MPLS) Virtual Private Network (VPN) service. This feature addresses the limitations of hub-and-spoke

More information

Configuring Scalable Hub-and-Spoke MPLS VPNs

Configuring Scalable Hub-and-Spoke MPLS VPNs Configuring Scalable Hub-and-Spoke MPLS VPNs Last Updated: December 15, 2011 This module explains how to ensure that virtual private network (VPN) clients that connect to the same provider edge (PE) router

More information

Scalable Multipath Routing (towards)

Scalable Multipath Routing (towards) Scalable Multipath Routing (towards) 71st Meeting of the IFIP WG 10.4 Working Group on Dependability and Security Ian Welch, School of Engineering and Computer Science; Victoria University of Wellington

More information

Achieving Sub-50 Milliseconds Recovery Upon BGP Peering Link Failures

Achieving Sub-50 Milliseconds Recovery Upon BGP Peering Link Failures 1 Achieving Sub-50 Milliseconds Recovery Upon BGP Peering Link Failures Olivier Bonaventure, Clarence Filsfils and Pierre Francois Abstract Recent measurements show that BGP peering links can fail as frequently

More information

IPv6 at Google. Lorenzo Colitti

IPv6 at Google. Lorenzo Colitti IPv6 at Google Lorenzo Colitti lorenzo@google.com Why? IPv4 address space predictions (G. Huston) To put it into perspective... Iljitsch van Beijnum, Ars Technica Why IPv6? Cost Buying addresses will be

More information

Autonomic Networking BRKGEN Michael Behringer

Autonomic Networking BRKGEN Michael Behringer Autonomic Networking BRKGEN-2999 Michael Behringer Autonomic Networking Intro How We Got Here Our First Goal Was: Automatic Network Security External NOC External How to Distinguish inside from outside

More information

SFC in the DOCSIS Network James Kim Cable Television Laboratories, Inc.

SFC in the DOCSIS Network James Kim Cable Television Laboratories, Inc. SFC in the DOCSIS Network James Kim Cable Television Laboratories, Inc. Abstract Service Function Chaining (SFC) is a concept that has been around for a while. Newer technology advancements in the SDN

More information

BGP Cost Community. Prerequisites for the BGP Cost Community Feature

BGP Cost Community. Prerequisites for the BGP Cost Community Feature The feature introduces the cost extended community attribute. The cost community is a non-transitive extended community attribute that is passed to internal BGP (ibgp) and confederation peers but not to

More information

MIPv6: New Capabilities for Seamless Roaming Among Wired, Wireless, and Cellular Networks

MIPv6: New Capabilities for Seamless Roaming Among Wired, Wireless, and Cellular Networks Page 1 M: New Capabilities for Seamless Roaming Among Wired, Wireless, and Cellular Networks Paul Schmitz Technical Marketing Engineer Geoff Weaver Business Development Manager Copyright 2002. *Third-party

More information

An Analysis of The Fast Handovers for Mobile IPv6 Protocol

An Analysis of The Fast Handovers for Mobile IPv6 Protocol An Analysis of The Fast Handovers for Mobile IPv6 Protocol Janne Lundberg Helsinki University of Technology Laboratory for Theoretical Computer Science May 28, 2003 Abstract Fast Handovers for Mobile IPv6

More information

Network Configuration Example

Network Configuration Example Network Configuration Example Configuring Protocol Independent Multicast Join Load Balancing Release NCE0054 Modified: 2017-01-20 Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, California 94089

More information

A Flow Label Based QoS Scheme for End-to-End Mobile Services

A Flow Label Based QoS Scheme for End-to-End Mobile Services A Flow Label Based QoS Scheme for End-to-End Mobile Services Tao Zheng, Lan Wang, Daqing Gu Orange Labs Beijing France Telecom Group Beijing, China e-mail: {tao.zheng; lan.wang; daqing.gu}@orange.com Abstract

More information

Virtual Private Networks.

Virtual Private Networks. Virtual Private Networks thm@informatik.uni-rostock.de http://wwwiuk.informatik.uni-rostock.de/ Content Virtual Private Networks VPN Basics Protocols (IPSec, PPTP, L2TP) Objectives of VPNs Earlier Companies

More information

How to Configure Forcepoint NGFW Route-Based VPN to AWS with BGP TECHNICAL DOCUMENT

How to Configure Forcepoint NGFW Route-Based VPN to AWS with BGP TECHNICAL DOCUMENT How to Configure Forcepoint NGFW Route-Based VPN to AWS with BGP TECHNICAL DOCUMENT Table of Contents TABLE OF CONTENTS 1 INTRODUCTION 2 AWS Configuration: 2 Forcepoint Configuration 3 APPENDIX 7 Troubleshooting

More information

Route Filtering. Types of prefixes in IP core network: Internal Prefixes External prefixes. Downstream customers Internet prefixes

Route Filtering. Types of prefixes in IP core network: Internal Prefixes External prefixes. Downstream customers Internet prefixes 1 Types of prefixes in IP core network: Internal Prefixes External prefixes Downstream customers Internet prefixes 2 Internal prefixes originated in IP core network Loopback Transport Connect inter-regional

More information

ROUTE OPTIMIZATION EXTENSION FOR THE MOBILE INTERNET PROTOCOL IN LINUX

ROUTE OPTIMIZATION EXTENSION FOR THE MOBILE INTERNET PROTOCOL IN LINUX ROUTE OPTIMIZATION EXTENSION FOR THE MOBILE INTERNET PROTOCOL IN LINUX M. L. Jiang and Y. C. Tay ABSTRACT The base Mobile Internet Protocol (Mobile IP)[1] provides a means for portable computers to roam

More information

ITU-T Y Framework of multi-homing in IPv6-based NGN

ITU-T Y Framework of multi-homing in IPv6-based NGN INTERNATIONAL TELECOMMUNICATION UNION ITU-T Y.2052 TELECOMMUNICATION STANDARDIZATION SECTOR OF ITU (02/2008) SERIES Y: GLOBAL INFORMATION INFRASTRUCTURE, INTERNET PROTOCOL ASPECTS AND NEXT-GENERATION NETWORKS

More information

Open, Hierarchical SDN Control Systems: Ecosystem Progress

Open, Hierarchical SDN Control Systems: Ecosystem Progress Open, Hierarchical SDN Control Systems: Ecosystem Progress Chris Janz, Technical VP Next-Generation Optical Networks, Nice 2016 SaaS Application Communication Entertainment Social networking Information

More information

6421A: Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure

6421A: Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure www.peaksolutions.com 6421A: Configuring and Troubleshooting a Windows Server 2008 Network Infrastructure Course 6421A: Five days; Instructor-Led Introduction This five-day instructor-led course provides

More information

Antonio Cianfrani. Virtual LAN (VLAN)

Antonio Cianfrani. Virtual LAN (VLAN) Antonio Cianfrani Virtual LAN (VLAN) Ethernet Ethernet standard (IEEE 802.3) for Local Area Network (LAN). CSMA/CD (Carrier Sense Multiple Access/Collision Detection) Carrier Sense: all devices have to

More information

HAWAII INTERNET EXCHANGE

HAWAII INTERNET EXCHANGE HAWAII INTERNET EXCHANGE Technical Specification, Version 3.6, April 21, 2009 (This specification may be superseded either in whole or in part, at a later time.) ABSTRACT The Hawaii Internet Exchange,

More information

Multi-Protocol Label Switching (MPLS) Support

Multi-Protocol Label Switching (MPLS) Support This chapter describes the system's support for BGP/MPLS VPN and explains how it is d. The product administration guides provide examples and procedures for configuration of basic services on specific

More information

Introduction to The Internet

Introduction to The Internet Introduction to The Internet ITU/APNIC/MICT IPv6 Security Workshop 23 rd 27 th May 2016 Bangkok Last updated 5 th May 2015 1 Introduction to the Internet p Topologies and Definitions p IP Addressing p

More information

Firepower Threat Defense Site-to-site VPNs

Firepower Threat Defense Site-to-site VPNs About, on page 1 Managing, on page 3 Configuring, on page 3 Monitoring Firepower Threat Defense VPNs, on page 11 About Firepower Threat Defense site-to-site VPN supports the following features: Both IPsec

More information

Solution Overview Vectored Event Grid Architecture for Real-Time Intelligent Event Management

Solution Overview Vectored Event Grid Architecture for Real-Time Intelligent Event Management Solution Overview Vectored Event Grid Architecture for Real-Time Intelligent Event Management Copyright Nuvon, Inc. 2007, All Rights Reserved. Introduction The need to improve the quality and accessibility

More information

Cradlepoint to Palo Alto VPN Example. Summary. Standard IPSec VPN Topology. Global Leader in 4G LTE Network Solutions

Cradlepoint to Palo Alto VPN Example. Summary. Standard IPSec VPN Topology. Global Leader in 4G LTE Network Solutions Cradlepoint to Palo Alto VPN Example Summary This configuration covers an IPSec VPN tunnel setup between a Cradlepoint Series 3 router and a Palo Alto firewall. IPSec is customizable on both the Cradlepoint

More information

NETCONF Design and Implementation of a Prototype

NETCONF Design and Implementation of a Prototype International University Bremen Electrical Engineering and Computer Science Faculty NETCONF Design and Implementation of a Prototype Author: Catalin Ciocov Supervisor: Jürgen Schönwälder 13 th May 2004

More information

Computer Networks Technologies and Services January 31 st, Question 11

Computer Networks Technologies and Services January 31 st, Question 11 Computer Networks Technologies and Services January 31 st, 2014 First and last name... Student ID...... Answers to multiple choice questions 1 2 3 4 5 6 7 8 9 10 Answers to essay questions Question 11

More information

Internet Key Exchange

Internet Key Exchange CHAPTER16 The help topics in this section describe the (IKE) configuration screens. (IKE) What Do You Want to Do? (IKE) is a standard method for arranging for secure, authenticated communications. IKE

More information

Port MIX Concept, live experiences, procedures. Port MIX 1

Port MIX Concept, live experiences, procedures. Port MIX 1 Concept, live experiences, procedures 1 Our view Absence of L2 routing loops or other Spanning Tree related problems is only a prerequisite for an Exchange Point The equation one port one mac one customer

More information

MPLS OAM Technology White Paper

MPLS OAM Technology White Paper MPLS OAM Technology White Paper Issue 01 Date 2012-10-30 HUAWEI TECHNOLOGIES CO., LTD. 2012. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without

More information

Network Camera. Model No. BB-HCM403A. Troubleshooting... 3

Network Camera. Model No. BB-HCM403A. Troubleshooting... 3 Network Camera Indoor Ceiling Use Only Model No. BB-HCM403A (PoE Ready) Table of Contents... 3 Indicator Display when using an optional AC Adaptor (Model No. BB-HCA2A)... 3 Indicator Display when using

More information

Release Notes. NCP Android Secure Managed Client. 1. New Features and Enhancements. 2. Improvements / Problems Resolved. 3.

Release Notes. NCP Android Secure Managed Client. 1. New Features and Enhancements. 2. Improvements / Problems Resolved. 3. NCP Android Secure Managed Client can be commissioned for use in one of two environments: NCP Secure Enterprise Management, or NCP Volume License Server. Release: 2.32 build 067 Date: May 2013 1. New Features

More information

NCP Secure Client Juniper Edition Release Notes

NCP Secure Client Juniper Edition Release Notes Service Release: 10.11 r32792 Date: November 2016 Prerequisites Operating System Support The following Microsoft Operating Systems are supported with this release: Windows 10 32/64 bit Windows 8.x 32/64

More information

Route Filtering. Types of prefixes in IP core network: Internal Prefixes External prefixes. Downstream customers Internet prefixes

Route Filtering. Types of prefixes in IP core network: Internal Prefixes External prefixes. Downstream customers Internet prefixes Types of prefixes in IP core network: Internal Prefixes External prefixes Downstream customers Internet prefixes Internal prefixes originated in IP core network Loopback Transport Connect inter-regional

More information

DPX8000 Series Deep Service Switching Gateway User Configuration Guide Firewall Service Board Module v1.0

DPX8000 Series Deep Service Switching Gateway User Configuration Guide Firewall Service Board Module v1.0 DPX8000 Series Deep Service Switching Gateway User Configuration Guide Firewall Service Board Module v1.0 i Hangzhou DPtech Technologies Co., Ltd. provides full- range technical support. If you need any

More information

HUAWEI USG6000 Series Next-Generation Firewall Technical White Paper VPN HUAWEI TECHNOLOGIES CO., LTD. Issue 1.1. Date

HUAWEI USG6000 Series Next-Generation Firewall Technical White Paper VPN HUAWEI TECHNOLOGIES CO., LTD. Issue 1.1. Date HUAWEI USG6000 Series Next-Generation Firewall Technical White Paper VPN Issue 1.1 Date 2014-03-14 HUAWEI TECHNOLOGIES CO., LTD. 2014. All rights reserved. No part of this document may be reproduced or

More information

5 Days Course on LAN Switching & Wireless and Accessing the WAN (CCNA 3 & 4)

5 Days Course on LAN Switching & Wireless and Accessing the WAN (CCNA 3 & 4) PROFESSIONAL TRAINING COURSE 5 Days Course on LAN Switching & Wireless and Accessing the WAN (CCNA 3 & 4) About the Course This course is designed based on CCNA curriculum. Focus of this course is on two

More information

EVPN BUM Procedures Update

EVPN BUM Procedures Update EVPN BUM Procedures Update Jeffrey Zhang, Wen Lin Jorge Rabadan, Keyur Patel IETF 93, Prague EVPN BUM Procedures RFC 7432 (EVPN) refers to RFC 7117 (VPLS Multicast) for quite some EVPN BUM procedures RFC

More information

Internet security and privacy

Internet security and privacy Internet security and privacy IPsec 1 Layer 3 App. TCP/UDP IP L2 L1 2 Operating system layers App. TCP/UDP IP L2 L1 User process Kernel process Interface specific Socket API Device driver 3 IPsec Create

More information

Technical Overview of DirectAccess in Windows 7 and Windows Server 2008 R2. Microsoft Windows Family of Operating Systems

Technical Overview of DirectAccess in Windows 7 and Windows Server 2008 R2. Microsoft Windows Family of Operating Systems Technical Overview of in Windows 7 and Windows Server 2008 R2 Microsoft Windows Family of Operating Systems Published: January 2009 This document supports a preliminary release of a software product that

More information

Juniper Networks Live-Live Technology

Juniper Networks Live-Live Technology Juniper Networks Live-Live Technology Increasing Resiliency 1 Table of Contents Executive Summary... 3 Introduction... 3 Resiliency Challenges... 3 Juniper s Live-Live Solution...4 Live-Live...4 How MoFRR

More information

Introduction to MPLS APNIC

Introduction to MPLS APNIC Introduction to MPLS APNIC Issue Date: [201609] Revision: [01] What is MPLS? 2 Definition of MPLS Multi Protocol Label Switching Multiprotocol, it supports ANY network layer protocol, i.e. IPv4, IPv6,

More information