[afripv6-discuss] Re: afripv6-discuss Digest, Vol 84, Issue 12

Fri Jul 26 12:17:45 SAST 2013

Hello everyone,
just to inform you that my organisation is developing the Cameroon strategy for migration to IPv6 with the support of AfriNIC.
cordially.

----
Djamaa BOUBA
Director of Normalisation and Cooperation
National Agency for ICTs
Yaoundé-Cameroun
Email (Pro) : bouba at antic.cm
GSM : +237 77 32 46 17

________________________________
 De : "afripv6-discuss-request at afrinic.net" <afripv6-discuss-request at afrinic.net>
À : afripv6-discuss at afrinic.net 
Envoyé le : Vendredi 26 juillet 2013 11h00
Objet : afripv6-discuss Digest, Vol 84, Issue 12

Send afripv6-discuss mailing list submissions to
    afripv6-discuss at afrinic.net

To subscribe or unsubscribe via the World Wide Web, visit
    https://lists.afrinic.net/mailman/listinfo.cgi/afripv6-discuss
or, via email, send a message with subject or body 'help' to
    afripv6-discuss-request at afrinic.net

You can reach the person managing the list at
    afripv6-discuss-owner at afrinic.net

When replying, please edit your Subject line so it is more specific
than "Re: Contents of afripv6-discuss digest..."

Today's Topics:

   1. Re: IPv6 on NetASQ firewall U450-A? (Nishal Goburdhan)
   2. Re: IPv6 on NetASQ firewall U450-A (Loganaden Velvindron)
   3. African IPv6 Progress vs Rest of the World (Mukom Akong T.)

----------------------------------------------------------------------

Message: 1
Date: Thu, 25 Jul 2013 12:56:32 +0200
From: Nishal Goburdhan <ndg at ieee.org>
Subject: Re: [afripv6-discuss] IPv6 on NetASQ firewall U450-A?
To: IPv6 in Africa <afripv6-discuss at afrinic.net>
Message-ID: <345FE82E-C5BE-4ED2-98B2-D628736551EF at ieee.org>
Content-Type: text/plain; charset=us-ascii

On 24 Jul 2013, at 1:41 PM, sara at suin.edu.sd wrote:

> Hi every one

hi sara,

> I'm looking for some helping in getting some equipment in our network IPv6 enabled. 
> 
> In our organisation we have a NetASQ firewall U450-A. Software version 9.0.1.
> And, of course, we want to enable IPv6 on it, os that we can connect the rest of our network...
> We already know that IPv6 Routing of IPv6 packets is now supported on this software version, but this option appears to be disabled by default and can only be configured in the CLI.
> I'm not certain of the best approach to doing this; one thing that worries me, is that hacking around in the CLI might not necessarily produce the results that we need.
> 
> I've written to the NetASQ support team twice now for assistance, as I can't seem to find any documentation online to support what I'd need.
> Sadly, they have not responded yet.
> So, I thought I'd reach out to the community for assistance. 
> Does anyone have here have contacts at NetASQ, or experience using this device for IPv6 ?

i don't.  and i agree - it's probably not a good idea to chance the CLI without vendor assistance, as future upgrade could easily nullify your work.
i don't have experience with that, and, sadly, don't know anyone that has, either.

what i could suggest:
* do you have a spare device like this, that you can run tests on?  that sounds obvious, but if you do, and if you can get it online in some sort of controlled lab environment, perhaps the good folks here can assist.  i know a few folks that wouldn't mind poking around on new/different hardware...
* my google-fu says that 9.0.1 is the last version of code for your platform;  i'm *always* wary of advising folks to use the "newest and greatest" in their production environments.  operational clue says that you let this bake in for a while before use.  in your case, my worry for you would be that there doesn't seem to be a later release available for you;  so if you do run into a service affecting problem, you don't have any other recourse. 

it's disappointing that your vendor isn't responding.  have you tried your reseller (the person you purchased this from) ? 
(i wonder if vendors truly realise the detriment that they create through non-support in today's well-connected society :-/)

my usual rule of:  vote with your wallet, is probably useful to apply here  ;-)
have you considered an alternative - say FreeBSD + pf, or is that not an option? 

--n.

------------------------------

Message: 2
Date: Thu, 25 Jul 2013 18:02:13 +0400
From: Loganaden Velvindron <loganaden at gmail.com>
Subject: Re: [afripv6-discuss] IPv6 on NetASQ firewall U450-A
To: IPv6 in Africa <afripv6-discuss at afrinic.net>
Message-ID:
    <CAOp4FwSivJ0dWrPd-4MYs444icjsLgtjrDA3u07d_P8jLWqyTw at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"

On Thu, Jul 25, 2013 at 2:56 PM, Nishal Goburdhan <ndg at ieee.org> wrote:

> On 24 Jul 2013, at 1:41 PM, sara at suin.edu.sd wrote:
>
> > Hi every one
>
> hi sara,
>
> > I'm looking for some helping in getting some equipment in our network
> IPv6 enabled.
> >
> > In our organisation we have a NetASQ firewall U450-A. Software version
> 9.0.1.
> > And, of course, we want to enable IPv6 on it, os that we can connect the
> rest of our network...
> > We already know that IPv6 Routing of IPv6 packets is now supported on
> this software version, but this option appears to be disabled by default
> and can only be configured in the CLI.
> > I'm not certain of the best approach to doing this; one thing that
> worries me, is that hacking around in the CLI might not necessarily produce
> the results that we need.
> >
> > I've written to the NetASQ support team twice now for assistance, as I
> can't seem to find any documentation online to support what I'd need.
> > Sadly, they have not responded yet.
> > So, I thought I'd reach out to the community for assistance.
> > Does anyone have here have contacts at NetASQ, or experience using this
> device for IPv6 ?
>
> i don't.  and i agree - it's probably not a good idea to chance the CLI
> without vendor assistance, as future upgrade could easily nullify your work.
> i don't have experience with that, and, sadly, don't know anyone that has,
> either.
>
> what i could suggest:
> * do you have a spare device like this, that you can run tests on?  that
> sounds obvious, but if you do, and if you can get it online in some sort of
> controlled lab environment, perhaps the good folks here can assist.  i know
> a few folks that wouldn't mind poking around on new/different hardware...
> * my google-fu says that 9.0.1 is the last version of code for your
> platform;  i'm *always* wary of advising folks to use the "newest and
> greatest" in their production environments.  operational clue says that you
> let this bake in for a while before use.  in your case, my worry for you
> would be that there doesn't seem to be a later release available for you;
>  so if you do run into a service affecting problem, you don't have any
> other recourse.
>
> it's disappointing that your vendor isn't responding.  have you tried your
> reseller (the person you purchased this from) ?
> (i wonder if vendors truly realise the detriment that they create through
> non-support in today's well-connected society :-/)
>
> my usual rule of:  vote with your wallet, is probably useful to apply here
>  ;-)
> have you considered an alternative - say FreeBSD + pf, or is that not an
> option?
>
>
>
NetASQ uses FreeBSD as its embedded OS. I think that a FreeBSD box is a
sensible solution, and you
can get pretty good support by asking on freebsd-net or IRC.

> --n._______________________________________________
> afripv6-discuss mailing list
> afripv6-discuss at afrinic.net
> https://lists.afrinic.net/mailman/listinfo.cgi/afripv6-discuss
>

-- 
This message is strictly personal and the opinions expressed do not
represent those of my employers, either past or present.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.afrinic.net/pipermail/afripv6-discuss/attachments/20130725/3a98936e/attachment-0001.htm

------------------------------

Message: 3
Date: Thu, 25 Jul 2013 18:51:46 +0100
From: "Mukom Akong T." <mukom.tamon at gmail.com>
Subject: [afripv6-discuss] African IPv6 Progress vs Rest of the World
To: IPv6 in Africa <afripv6-discuss at afrinic.net>
Message-ID:
    <CAHDzDLD-btge99N3zgPK1Lyzbvx_RsVE+Q332JkgUduoDnVSPg at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"

http://v6asns.ripe.net/v/6?s=_RIR_AfriNIC;s=_ALL

This from a link shared by Graham on AfNOG mailing list late last year.
Seem we Africans used to lead the world in IPv6 deployment but then fell
behind in May 2009. Also seems that from Dec. 2012, the gap is widening as
we get left behind .... again.

Just wondering

a) What happened when we were ahead?
b) How did we loose the lead?
c) How can we transform the massive interest around the continent into
successful deployments?

Mukom Akong T.

http://about.me/perfexcellence |  twitter: @perfexcellent
------------------------------------------------------------------------------------------------------------------------------------------
��hen you work, you are the FLUTE through whose lungs the whispering of the
hours turns to MUSIC" - Kahlil Gibran
-------------------------------------------------------------------------------------------------------------------------------------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.afrinic.net/pipermail/afripv6-discuss/attachments/20130725/191e7972/attachment-0001.htm

------------------------------

_______________________________________________
afripv6-discuss mailing list
afripv6-discuss at afrinic.net
https://lists.afrinic.net/mailman/listinfo.cgi/afripv6-discuss

End of afripv6-discuss Digest, Vol 84, Issue 12
***********************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.afrinic.net/pipermail/afripv6-discuss/attachments/20130726/22496185/attachment.htm