<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.gingersoftwaremark
{mso-style-name:ginger_software_mark;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">As an interesting note,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">When I requested the removal of NAT from an internal office network, it wasn’t the management that resisted so much as the technical staff and the IT department.
The question about security was brought up over and over again, as well as the amount of work to migrate away from RFC1918 space.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Eventually the problem was solved by stating this wasn’t a request anymore, get it done. Not an ideal approach but sometimes it’s the only way to get things
done. But what this highlights is the fact that you need management buy in sometimes to overcome stubborn resistance from technical people to the same.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Sad but true.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Andrew<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> rpd-bounces@afrinic.net [mailto:rpd-bounces@afrinic.net]
<b>On Behalf Of </b>Mukom Akong T.<br>
<b>Sent:</b> Monday, July 21, 2014 11:44 AM<br>
<b>To:</b> Seun Ojedeji<br>
<b>Cc:</b> Guy Antony Halse; rpd List<br>
<b>Subject:</b> Re: [rpd] Re: Factors affecting in-region utilization - way forward?<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Mon, Jul 21, 2014 at 11:42 AM, Seun Ojedeji <<a href="mailto:seun.ojedeji@gmail.com" target="_blank">seun.ojedeji@gmail.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Below is the order that is experienced<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">1) We don't think <span class="gingersoftwaremark">its</span> necessary to change -
<span class="gingersoftwaremark">Infact this</span> is mostly the case and when <span class="gingersoftwaremark">
ICT directorate</span> of an institution <span class="gingersoftwaremark">don't think</span> there is any benefit/need to run native v4 every other item below get stalled!<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">[Counter] <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">a) So long as we are using NAT, the more users we worse performance will get. Show the IT director graphs that show that even though
<span class="gingersoftwaremark">Internet</span> is slow, we are still within our bandwidth usage. (The pain
<span class="gingersoftwaremark">here which</span> they feel is poor performance.
<span class="gingersoftwaremark">Yes I</span>'ve used this before<span class="gingersoftwaremark"> ...</span>successfully)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">b) Let's start with the network engineers, eliminate NATs internally! Route your RFC1918 space to and NAPT at
<span class="gingersoftwaremark">the the</span> edge. This has two implications<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"> * You get visibility into your own internal <span class="gingersoftwaremark">
nework</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> * You make it easier to see that NAT is the bottleneck because your NAT kludge is not distributed everywhere on the network. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">c) It should be easy to make the case for a larger block of public IPv4 space for services. (<span class="gingersoftwaremark">and</span> hint, if you work on some cool internal services that the management and users love but suddenly can't
use them when they are not in the office on campus, then you have one more reason to justify what that service should be on a public IP address.)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">2) We understand the need to <span class="gingersoftwaremark">
change but</span> scare of security implications<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">[Counter] "What security implications are those?". Education is the first weapon against fear. "Look your fear in the eye and it will lose its power over you" <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">a) User behavior (clicking strange links, visiting hostile <span class="gingersoftwaremark">
sites etc</span>) already <span class="gingersoftwaremark">by-pass</span> <span class="gingersoftwaremark">
whateve</span> security they think NAT provides.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">b) SPI whence from the perceived benefits of NAPT come from isn't an inherent part of NAPT - it just happens to be often co-exist with a NAPT service. If for some reason you really want to do that with a public IP address, it is possible
to do.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">3) Our ISP is hindering our change due to extra recurring charges<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Specify your requirements that will work for you in your new RFP and put your ISP on notice. Only in rare cases does an institution not have options in ISP for a whole 3 years<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<p class="MsoNormal"><br>
4) Our management may not approve extra cost of internet (<span class="gingersoftwaremark">its</span> not something to feel and touch like classrooms :))<o:p></o:p></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Most universities actually do highly value ICT as an investment to better the institution. The question is that does the ICT Director and his team know what the elements of effective ICTs are? So long as ICT infrastructure becomes another
word for "Internet access" on campus, then of <span class="gingersoftwaremark">course while</span> there is some Internet<span class="gingersoftwaremark"> ...</span> there's no need to improve.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Effective ICTs <span class="gingersoftwaremark">for</span> the service of education is quite a lot about putting in place infrastructure that helps students, staff and administration both on-campus and off campus. These services should
be available on <span class="gingersoftwaremark">campus but</span> also when people move off campus. Things like<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">- MOOC or e-Learning services hosted on <span class="gingersoftwaremark">
campus but</span> that can be accessed off campus <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">- Online <span class="gingersoftwaremark">registrations</span> systems<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">- Transcript application services<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">- <span class="gingersoftwaremark">Time-tables</span> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">- <span class="gingersoftwaremark">etc</span> <span class="gingersoftwaremark">
etc</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I have a <span class="gingersoftwaremark">philosphy</span> that one uses responsibility to buy freedom and credibility. I doubt that there's a university where the network and
<span class="gingersoftwaremark">sys admin team</span> have worked hard to put in place a routed internal RFC1918 network with useful services and still fail to make the case of a large block of public space. If there are, I'm offering to help guide them how
to make the case to their suits.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">And no, a simple request to <span class="gingersoftwaremark">
management</span> of let's get public IPv4 space for every user will most likely get ignored and ridiculed because of the mere size. If the top 10 universities on this continent decided to give each network user 1 public IP address, your
<span class="gingersoftwaremark">favourite</span> RIR's v4 space won't last a year.<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <br>
<br>
Mukom Akong T.<br>
<br>
<a href="http://about.me/perfexcellence" target="_blank">http://about.me/perfexcellence</a> | twitter: @perfexcellent
<br>
------------------------------------------------------------------------------------------------------------------------------------------<br>
“When you work, you are the FLUTE through whose lungs the whispering of the hours turns to MUSIC" - Kahlil Gibran<br>
-------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></p>
</div>
</div>
</div>
<br>
<hr>
<font face="Arial" color="Black" size="2">DISCLAIMER: This email contains proprietary information some or all of which may be legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this email, please
notify the author by replying to this email. If you are not the intended recipient, you must not use, disclose, copy, print, or rely on this email. We cannot accept liability for any statements made which are clearly the sender's own and not expressly made
on behalf of this company or one of its agents.<br>
<br>
</font>
</body>
</html>