(TIL) Today I Learned...

[Reggle]

Network-minded me thinks you can stop it on the firewall too... Those tunnels go towards a location on the internet.
Teredo is UDP/3544 and IPv6IP is protocol 41. Although GPO is cleaner of course.

[NetworkGroover]

TIL that Xbox Live uses Teredo tunneling.

[SimonV]

Network-minded me thinks you can stop it on the firewall too... Those tunnels go towards a location on the internet.
Teredo is UDP/3544 and IPv6IP is protocol 41. Although GPO is cleaner of course.

Yes, found that out too when reading up on it. There was also some Teredo traffic being dropped on our edge firewalls but minimal.
Biggest problem was the clients registering their AAAA record in DNS and that a lot of the client-client and client-server communications were tunneled as 6to4.
It's just a major annoyance for the other teams who expect IPv4 output.

Also interesting is that a client always does a second AAAA query when the 6to4 adapter is enabled. 

[deanwebb]

TIL that I've been filling out my timecard all wrong. 

[SimonV]

Network-minded me thinks you can stop it on the firewall too... Those tunnels go towards a location on the internet.
Teredo is UDP/3544 and IPv6IP is protocol 41. Although GPO is cleaner of course.

Yes, found that out too when reading up on it. There was also some Teredo traffic being dropped on our edge firewalls but minimal.
Biggest problem was the clients registering their AAAA record in DNS and that a lot of the client-client and client-server communications were tunneled as 6to4.
It's just a major annoyance for the other teams who expect IPv4 output.

Also interesting is that a client always does a second AAAA query when the 6to4 adapter is enabled. 

I spent at least five mails explaining we are not disablnig IPv6 but 6to4. Summary of Change Request comes in: Disable IPv6 on all computers. Server guys   Hope they didn't mess up the GPO

[deanwebb]

TIL how to repair a database table for a webforum. Tapatalk users should be back online now.

[wintermute000]

that you can do per tunnel QoS on a mGRE DMVPN. eek!

http://www.cisco.com/c/en/us/td/docs/ios/sec_secure_connectivity/configuration/guide/15_0/sec_secure_connectivity_15_0_book/sec_per_tunnel_qos.html


Also, cisco dcloud 'labs' are 50% sales demo, though being able to type your own show commands beats slideware any day of the week

[NetworkGroover]

that you can do per tunnel QoS on a mGRE DMVPN. eek!

http://www.cisco.com/c/en/us/td/docs/ios/sec_secure_connectivity/configuration/guide/15_0/sec_secure_connectivity_15_0_book/sec_per_tunnel_qos.html


Also, cisco dcloud 'labs' are 50% sales demo, though being able to type your own show commands beats slideware any day of the week

I'm not a WAN guy, but this sounds like something I'd never want to deal with... then again I hate QoS in general.

[NetworkGroover]

TIL that I've been filling out my timecard all wrong. 

Timecard?  I thought it was a base requirement to enslave an engineer with a salary!

[deanwebb]

TIL that I've been filling out my timecard all wrong. 

Timecard?  I thought it was a base requirement to enslave an engineer with a salary!

We fill out our time allocation so that the higher-ups can determine if we're allocated properly, or if they need to allocate more resources.

[that1guy15]

that you can do per tunnel QoS on a mGRE DMVPN. eek!

http://www.cisco.com/c/en/us/td/docs/ios/sec_secure_connectivity/configuration/guide/15_0/sec_secure_connectivity_15_0_book/sec_per_tunnel_qos.html


Also, cisco dcloud 'labs' are 50% sales demo, though being able to type your own show commands beats slideware any day of the week

I'm not a WAN guy, but this sounds like something I'd never want to deal with... then again I hate QoS in general.

No they nailed this correctly! Think about a large distributed network with a large number of sites connecting back to the hub office over a variety of link types. Setting up profiles to match each of those and assigning policies and QoS per each profile. Architect once and deploy everywhere.

So the following profiles:
ATT_MPLS_100Mbps
ATT_MPLS_50Mbps
TW_MPLS_50Mbps
T1_WTF_Do_we_still_have_these
Dial_Up_AYFKM

[NetworkGroover]

that you can do per tunnel QoS on a mGRE DMVPN. eek!

http://www.cisco.com/c/en/us/td/docs/ios/sec_secure_connectivity/configuration/guide/15_0/sec_secure_connectivity_15_0_book/sec_per_tunnel_qos.html


Also, cisco dcloud 'labs' are 50% sales demo, though being able to type your own show commands beats slideware any day of the week

I'm not a WAN guy, but this sounds like something I'd never want to deal with... then again I hate QoS in general.

No they nailed this correctly! Think about a large distributed network with a large number of sites connecting back to the hub office over a variety of link types. Setting up profiles to match each of those and assigning policies and QoS per each profile. Architect once and deploy everywhere.

So the following profiles:
ATT_MPLS_100Mbps
ATT_MPLS_50Mbps
TW_MPLS_50Mbps
T1_WTF_Do_we_still_have_these
Dial_Up_AYFKM

Hehe - like I said I'm not a WAN guy (until I have to be), and I hate QoS (until I have to do it - again) so..... guess it's good I work in the DC where I don't worry about this too much.  

LOL @ "T1_WTF..."

[LynK]

not to get off topic, but T1 is still a widely used, and common infrastructure in today's society. We have about 100 or so sites still on T1 MPLS infrastructure.... Not willing to make the price jump to 10MB metro-e, but also wanting new technology... I cant wait until they want video here... haha

[SofaKing]

TIL that I've been filling out my timecard all wrong. 

Timecard?  I thought it was a base requirement to enslave an engineer with a salary!

We fill out our time allocation so that the higher-ups can determine if we're allocated properly, or if they need to allocate more resources.

We do the same at my company.  This way the business knows which department to bill for our services.  I work for a large retail company and IT does not create revenue(even though the business can't run without us) so we have to get our funds from somewhere

[routerdork]

T1_WTF_Do_we_still_have_these
Dial_Up_AYFKM

Amen brother!!