normally address to service providers that sit behind a block of addresses and
are able to provide visibility from their networks , looking glasses are as
usefull but if you need someone to be as cleaver as the ones on training at
Holloway just be more specific as there are plenty of options around the world
and also in the UK ......:-)
________________________________
From: isabel dias <isabeldias1 at yahoo.com>
To: Kevin Hodle <kevin.hodle at gmail.com>; Steve Danelli <the76posse at gmail.com>
Cc: "nanog at nanog.org" <nanog at nanog.org>
Sent: Tue, February 1, 2011 4:16:42 PM
Subject: Re: Connectivity to Brazil
I still don't know where you are and the simulation you are doing .....can you
be more specific ?
________________________________
From: Kevin Hodle <kevin.hodle at gmail.com>
To: Steve Danelli <the76posse at gmail.com>
Cc: isabel dias <isabeldias1 at yahoo.com>; "nanog at nanog.org" <nanog at nanog.org>
Sent: Tue, February 1, 2011 2:27:41 PM
Subject: Re: Connectivity to Brazil
I just need you to help me with some cash just till i get back home
On Tue, Feb 1, 2011 at 3:21 PM, Steve Danelli <the76posse at gmail.com> wrote:
> Isabel - I am a network engineer working for a small financial firm outside
>Philadelphia.
>
> Can you offer any insight?
>
>
> On Feb 1, 2011, at 9:10 AM, isabel dias <isabeldias1 at yahoo.com> wrote:
>
>> who are you?
>>
>> From: Steve Danelli <the76posse at gmail.com>
>> To: "nanog at nanog.org" <nanog at nanog.org>
>> Sent: Tue, February 1, 2011 1:54:47 PM
>> Subject: Connectivity to Brazil
>>
>> Hello all!!! First post here
>>
>> Some carrier, somewhere between us and the service provider is selectively
>>dropping the IKE packets originating from our VPN gateway and destined for our
>>Brazil gateway. Other traffic is able to pass, as are the IKE packets coming
>>back from Brazil to us. This is effectively preventing us from establishing the
>
>>IPSEC tunnel between our gateways.
>>
>> Also something else is awry, for two given hosts on the same subnet (x.y.z.52
>>and x.y.z.53), they take two wildly divergent paths:
>>
>>
>> For dest x.y.x.52
>>
>> 16 ms 3 ms 3 ms xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
>> 2 ms 2 ms 2 ms xe-0-1-0.er1.lga5.us.above.net [64.125.27.61]
>> 12 ms 3 ms 13 ms e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
>> 117 ms 118 ms 118 ms te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
>> 136 ms 137 ms 136 ms
>> ctbc-multimidia-data-net-s-a.gigabitethernet1-2.ar5.gru1.gblx.net
>>[207.138.94.102]
>> 157 ms 136 ms 138 ms xe-3-2-0-0.core-b.ula001.ctbc.com.br
[201.48.44.165]
>> 132 ms 132 ms 141 ms ge-3-0-0-0.core-b.spo511.ctbc.com.br [201.48.44.14]
>> 135 ms 133 ms 134 ms ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]
>>
>>
>> For dest x.y.x.53
>>
>> 3 ms 2 ms 3 ms xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
>> 2 ms 2 ms 2 ms xe-1-1-0.er1.lga5.us.above.net [64.125.26.162]
>> 19 ms 3 ms 12 ms e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
>> 117 ms 117 ms 117 ms te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
>> 117 ms 117 ms 118 ms 64.209.106.170
>> 118 ms 118 ms 118 ms ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]
>>
>> Anyone have any insight on to what may be occurring?
>>
>>
>>
>> Sent from my iPhone
>>
>
--
Cheers,
Kevin
================================================================
:: :: Kevin Hodle | http://www.linkedin.com/in/kevinhodle
:: :: PGP Key ID | fingerprint
:: :: 0x803F24BE | 1094 FB06 837F 2FAB C86B E4BE 4680 3679 803F 24BE
"Elegance is not a dispensable luxury but a factor that decides
between success and failure. "
-Edsgar Dijkstra
================================================================