Local Internet Registries. Training Course. 1 Welcome to the Local Internet Registry Course RIPE Network Co-ordination Centre NEW version.

Slides:



Advertisements
Similar presentations
Update about the “SHOULDs Analysing Project” in RIPE Policy Documents “Should” we use the RFC 2119 Defined Language in RIPE Policy Documents? Jan Žorž,
Advertisements

IP Addressing Introductory material.
Implementing IPv6 Module B 8: Implementing IPv6
© 2008 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 1 Introduction to IPv4 Introduction to Networks.
IPv4 Addresses. Internet Protocol: Which version? There are currently two versions of the Internet Protocol in use for the Internet IPv4 (IP Version 4)
Database Update Kaveh Ranjbar Database Department Manager, RIPE NCC.
IPv6: The Future of the Internet? July 27th, 1999 Auug.
An Engineering Approach to Computer Networking
APNIC Internet Routing Registry An introduction to the IRR TWNIC Meeting, 3 December 2003 Nurani Nimpuno, APNIC.
2010-8: Rework of IPv6 Assignment Criteria David Farmer ARIN XXVI.
1 K. Salah Module 5.1: Internet Protocol TCP/IP Suite IP Addressing ARP RARP DHCP.
CSE5803 Advanced Internet Protocols and Applications (7) Introduction The IP addressing scheme discussed in Chapter 2 are classful and can be summarised.
Oct 21, 2004CS573: Network Protocols and Standards1 IP: Addressing, ARP, Routing Network Protocols and Standards Autumn
Subnetting.
Domain Name System: DNS
TDC365 Spring 2001John Kristoff - DePaul University1 Interconnection Technologies Routing I.
IAB/IESG Recommendations on IPv6 Address Allocation Bob Hinden at RIPE Sept Brian Carpenter at ARIN Oct Alain Durand at APNIC Oct
Reverse DNS. Overview Principles Creating reverse zones Setting up nameservers Reverse delegation procedures.
Lecture Week 8 The Routing Table: A Closer Look
IAB/IESG Recommendations on IPv6 Address Allocation Bob Hinden at RIPE Sept Brian Carpenter at ARIN Oct Alain Durand at APNIC Oct
Local Internet Registries. Training Course. 1 Welcome to the IP Tutorial 26 January 2001 RIPE Network Co-ordination Centre
Anne Lord & Mirjam Kühne. AfNOG Workshop, 10 May The whois Database Introduction and Usage.
1 26-Aug-15 Addressing the network using IPv4 Lecture # 2 Engr. Orland G. Basas Prepared by: Engr. Orland G. Basas IT Lecturer.
Local Internet Registries. Training Course. 1 Welcome to the Local Internet Registry Course RIPE Network Co-ordination Centre NEW version.
NATO Advanced Networking Workshop. Ljubljana, 19 September “How to Run a Local Internet Registry” or all your IPs are belong.
IPv6 Interim Policy Draft RIPE 42 Amsterdam, The Netherlands 1 May 2002.
Policy Implementation and Experience Report Leslie Nobile.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 4: Addressing in an Enterprise Network Introducing Routing and Switching in the.
Scaling IXPs Scalable Infrastructure Workshop. Objectives  To explain scaling options within the IXP  To introduce the Internet Routing Registry at.
AussieISP Fall ‘99 Sydney, 9 April 1999 Overview and Status Report.
Name Resolution Domain Name System.
IP Addressing Introductory material. An entire module devoted to IP addresses.
© 2007 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 Network Addressing Networking for Home and Small Businesses – Chapter 5.
IPv4 Addresses. Internet Protocol: Which version? There are currently two versions of the Internet Protocol in use for the Internet IPv4 (IP Version 4)
The APNIC Whois Database Introduction and Usage. whois.apnic.net whois.ripe.netwhois.arin.net Server Unix Client ‘X’ Client Command Prompt / Web Interface.
Database Update Paul Palse Database Manager, RIPE NCC.
A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Internet Registry allocation and assignment Policies.
APNIC Policy Update 1 st TWNIC IP Open Policy Meeting 3 December, 2003 Taipei, Taiwan.
70-291: MCSE Guide to Managing a Microsoft Windows Server 2003 Network Chapter 2: Configuring Network Protocols.
A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E APNIC Update RIPE 40 Prague, 1-5 October, 2001.
NATO Advanced Networking Workshop. Ljubljana, 19 September RIPE whois Database RIPE Network Coordination Centre.
Lecture 4: BGP Presentations Lab information H/W update.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 4: Addressing in an Enterprise Network Introducing Routing and Switching in the.
IP Policy in APNIC and What about TWNIC ? Kuo-Wei Wu.
Mirjam Kühne 1 EC, Oct Policy Development in RIPE & the RIPE NCC Mirjam Kühne RIPE NCC.
1 Kyung Hee University Chapter 18 Domain Name System.
Erik Bais, May 13 th 2015 PP – unassigned yet General Transfer Policy Presenter : Erik Bais –
Andrei Robachevsky. APNIC/APRICOT2001, February 2001, Kuala Lumpur, Malaysia. 1 New Version of the RIPE Database Andrei Robachevsky.
Anne Lord & Mirjam Kühne. AfNOG Workshop, 10 May IP Address Management AfNOG Workshop, 11 May 2001 Accra, Ghana presented by:
1 IPv6 Allocation Policy and Procedure Global IPv6 Summit in China 2007 April 13, 2007 Gerard Ross and Guangliang Pan.
DNS DNS overview DNS operation DNS zones. DNS Overview Name to IP address lookup service based on Domain Names Some DNS servers hold name and address.
IP Addressing and ICT Development in the Pacific Islands Anne Lord and Save Vocea, APNIC ICT Workshop, Fiji, November, 2002.
Andrei Robachevsky. 12th APNIC Open Plicy Meeting, August 2001, Taipei, Taiwan. 1 New Version of the RIPE Database Andrei Robachevsky.
Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network.
CS470 Computer Networking Protocols
A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Emerging Registry Criteria ASO General Assembly Budapest, 19 May 2000.
17 th APNIC Open Policy Meeting APNIC IPv6 Address Guidelines Akira Nakagawa )/ POWEREDCOM Billy MH Cheon / KRNIC Toshiyuki.
A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E IP Addresses: A critical resource for Asia-Pacific Internet development China Inet.
Chapter 5. An IP address is simply a series of binary bits (ones and zeros). How many binary bits are used? 32.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Addressing the network IPv4 CCNA Exploration Semester 1 – Chapter 6.
1 FRED – open source registry system CZ.NIC, z.s.p.o. Jaromír Talíř
LESSON Networking Fundamentals Understand IPv4.
IP: Addressing, ARP, Routing
Regional Internet Registries An Overview
CS4470 Computer Networking Protocols
AFRINIC Services Update
IPv4 Addresses.
IPv6 Address Allocation APNIC
RIPE Whois Database Software Recent Changes
Dr. John P. Abraham Professor UTRGV
Presentation transcript:

Local Internet Registries. Training Course. 1 Welcome to the Local Internet Registry Course RIPE Network Co-ordination Centre NEW version for RPSL launch to be ready for 3rd April!!!

Local Internet Registries. Training Course. 2 Logistics Mobile phones, toilets, fire exits, parking, smoking places... Time line –breaks –lunch ( vegetarians? ) –early departures? Material –slides –handouts –reference booklet URLs included –trainers

Local Internet Registries. Training Course. 3 Method and Notations Flow of the content –material divided into sections –from general to more specific issues –from simple to more complex examples Notation in slides:  details follow in the rest of the current section * advanced issue; to be clarified later on  find enclosed in handouts Questions –exchange of experience –useful feedback for improvement

Local Internet Registries. Training Course. 4 Schedule 9:30 Introduction RIPE & RIPE NCC Basic RIPE Database –querying DB –creating person/role object Initial Administrivia –setting up the LIR –terminology –first request Requesting Address Space –assignment process –completing the request form –communication with hostmasters 11:00 coffee break Evaluation of requestsEvaluation of requests –policies –administering your allocation DB how to create network object advanced queries Assignment Window 13:00 lunch Reverse Delegation AS Numbers 15:00 tea break Advanced database issues –updating objects –protecting objects New allocation PI Request IPv6

Local Internet Registries. Training Course. 5 Course Background ? Course objective - to make LIR’s life easier by –explaining how RIPE NCC does it’s job –teaching how LIRs can interact with RIPE NCC –bringing the latest details about policies –listening to comments and input form LIRs Discovering faces behind addresses History and background –given since 1995 –in whole RIPE NCC service region –but in English –paid as a part of startup fee

Local Internet Registries. Training Course. 6 RIPE and RIPE NCC

Local Internet Registries. Training Course. 7 RIPE and RIPE NCC Réseaux IP Européens (1989) –RIPE is a collaborative organisation open to all parties interested in Internet administration, development and network operations RIPE Network Co-ordination Centre –membership organisation which supports its members and RIPE community –one of 3 Regional Internet Registries (RIR)

Local Internet Registries. Training Course. 8 Introduction to RIPE

Local Internet Registries. Training Course. 9 How RIPE Works RIPE works as –open forum –voluntary participation –decisions made by consensus –meetings –working groups mailing lists web archived –NO legal power  does NOT develop Internet Standards RIPE chair

Local Internet Registries. Training Course RIPE Meetings 3 times a year RIPE 39, Bologna, Italy, 30 April - 4May 2001 RIPE 40, Prague, Czech Republic, 1-5 Oct ~4.5 day long 300+ participants Working group meetings Plenary Presentations Long breaks Social events Terminal room –IPv4, IPv6, wireless connectivity

Local Internet Registries. Training Course Introduction to

Local Internet Registries. Training Course RIPE NCC History Actions agreed in RIPE community needed –continuity and professionalism –neutrality and impartiality Birth - April 1992 –TERENA legal umbrella Became RIR in September 1992 Contributing LIRs in 1995 In 1998 independent A new structure (ripe-161) –not-for-profit association

Local Internet Registries. Training Course Formal Decision Making “Consensus” Model RIPE proposes activity plan RIPE NCC proposes budget to accompany activity plan (ripe-213) General Assembly votes on both activities and budget at yearly meeting

Local Internet Registries. Training Course Vital Statistics Statistics 1992 –3 staff members –No Local IR’s –182,528 hosts in European Internet –7,955 objects in RIPE database (June ‘92) Statistics Now –67 staff (22 nationalities)  2,595+ participating Local IR’s  12,088,135+ countable hosts in the RIPE NCC region  3,792,085+ objects in the database

Local Internet Registries. Training Course Service Regions

Local Internet Registries. Training Course RIPE NCC Services Member Services Registration Services –IPv4 addresses –IPv6 addresses –AS numbers –LIR Training Courses Reverse domain delegation –NOT registering domain names Test Traffic Measurements  Public Services  RIPE whois DB maintenance  Routing Registry Maintenance Co-ordination –RIPE support –liaison with: LIRs / RIRs / ICANN - ASO/etc Information dissemination New Projects –RIS, R2C2, DISI Maintenance of tools

Local Internet Registries. Training Course Summary: RIPE & RIPE NCC Two separate organisations, closely interdependent RIPE –open forum for discussing policies RIPE NCC –legitimate, not-for-profit association –formal membership –neutral and impartial

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course RIPE Database Description How to query the Database How to create contact information objects

Local Internet Registries. Training Course RIPE Database Intro Public Network Management Database Software Management RIPE NCC Database Working Group (RIPE community) Data Management LIRs other users RIPE NCC Information content not responsibility of RIPE NCC  Protection mechanisms not default, but strongly encouraged

Local Internet Registries. Training Course Migration to DB Version 3 Re-implementation of DB software –re-written server and client –Routing Policy Specification Language RPSL compliant (RFC-2622) –some attributes and objects changed e.g. mandatory protection of inetnum-s most changes in the RR –user query scripts need re-writing Everybody will be affected!

Local Internet Registries. Training Course Database Migration Time Line 23-Apr-2001: switching to the RPSL database –queries return RPSL only –RIPE-181 updates possible; automatically converted to RPSL Date |23 April | 14 May | 15 October RPSL | | RIPE-181 | | | N / A 15-Oct-2001: RIPE-181 updates no longer possible

Local Internet Registries. Training Course Querying RIPE Database

Local Internet Registries. Training Course Object Types Information about objects IP address space inetnum, inet6num reverse domainsdomain routing policies route, aut-num contact detailsperson, role, mntner Server whois.ripe.net UNIX command line queries Most important documents –ripe-157, ripe-181

Local Internet Registries. Training Course Basic Queries Whois (command line, web interface) –searches only look-up keys –returns exact match –some inverse look-ups possible using “-i” flag Glimpse - full text search Look-up keys - usually the object name –person, role: name, , nic-hdl –inetnum: address (or range), netname Inverse keys –notify, mnt-by, mnt-lower, admin-c, tech-c, zone-c, Examples

Local Internet Registries. Training Course Creating Database Objects

Local Internet Registries. Training Course Creating person Object Check if person object exists in RIPE DB –whois {person’s name; address} –only one object per person Obtain and complete a template  whois -t person –-v (verbose)  Send to  see “The DB Transition Handout” ( ) Each person and role object has unique nic-hdl Transition to RPSL

Local Internet Registries. Training Course whois -t person person: [mandatory] [single] [lookup key] address: [mandatory] [multiple] [ ] phone: [mandatory] [multiple] [ ] fax-no: [optional] [multiple] [ ] [optional] [multiple] [lookup key] nic-hdl: [mandatory] [single] [primary/look-up key] remarks: [optional] [multiple] [ ] notify: [optional] [multiple] [inverse key] mnt-by: [optional] [multiple] [inverse key] changed: [mandatory] [multiple] [ ] source: [mandatory] [single] [ ]

Local Internet Registries. Training Course role: Technical BlueLight Staff... nic-hdl: AUTO-#initials AUTO-2BL nic-hdl person: Piet Bakker... nic-hdl: AUTO-1 PB1234-RIPE Format: [number]- –e.g. AB123-APNIC, CD567-RIPE Used in all the attributes where contact info needed nic-hdl is the primary key for person and role objects  Use “AUTO-#” placeholders BL112-RIPE

Local Internet Registries. Training Course Database Robot Responses Successful update –acknowledgement Warnings –object accepted but might be ambiguous –object corrected and accepted Errors –object NOT corrected and NOT accepted –diagnostics in acknowledgement If not clear send questions to –include error report

Local Internet Registries. Training Course ‘role’ Object % whois -h whois.ripe.net -t role role: [mandatory] [single] [primary/look-up key] address: [mandatory] [multiple] [ ] phone: [optional] [multiple] [ ] fax-no: [optional] [multiple] [ ] [mandatory] [multiple] [look-up key] trouble: [optional] [multiple] [ ] admin-c: [mandatory] [multiple] [inverse key] tech-c: [mandatory] [multiple] [inverse key] nic-hdl: [mandatory] [single] [primary/look-up key] remarks: [optional] [multiple] [ ] notify: [optional] [multiple] [inverse key] mnt-by: [optional] [multiple] [inverse key] changed: [mandatory] [multiple] [ ] source: [mandatory] [single] [ ]

Local Internet Registries. Training Course Usage of role Objects To describe the group of technical contacts To describe the contact persons for LIR Steps: –create one person object per staff –create role object and reference all person objects –use role object nic-hdl in tech-c attribute Use trouble and notify attributes

Local Internet Registries. Training Course Role Object for Contact Persons role: BlueLight Contact Role description:Hostmaster for Blue Light BV admin-c: JAJA1-RIPE tech-c: AB321-RIPE tech-c: WF2121-RIPE trouble: 24/7 phone number: nic-hdl:BL112-RIPE notify: notify: mntner:BLUELIGHT-MNT source: RIPE

Local Internet Registries. Training Course Creating Maintainer Object Protection of objects mandatory except for person, role and domain –updates of objects that contain mnt-by attribute must pass the authentication rules in the mntner object 1) Decide on the authentication method –ripe-157, ripe-189, ripe-190 documents 2) Complete the object template –whois -t mntner 3) Manual registration necessary –send the object to –requester need to be from the LIR  See also: Protection of RIPE DB objects

Local Internet Registries. Training Course Creating DB Objects ( Summary ) Steps: –1) complete the object template –2) send in to See also: –creating inetnum objects –querying RIPE DB –protection of DB objects –updating DB information

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Initial Administrative Details Becoming LIR Terminology First Request

Local Internet Registries. Training Course Setting up LIR Completed application form (ripe-212)  Provided Reg-ID & contact persons –  Read relevant RIPE documents –ripe-185 etc Signed contract (ripe-191) –agreed to follow policies and procedures *Paid the sign-up & yearly fee –

Local Internet Registries. Training Course Terminology Allocation –address space given to registries which is held by them to assign to customers or to own organisation Assignment –address space given to end-users for use in operational networks –also called: ticket, request, approval, network, block, range, object assignment /20 allocation = 4096 addresses assignment Set aside?

Local Internet Registries. Training Course Goals of the Internet Registry System Responsibilities of Local Internet Registries Aggregation –routability –... Conservation –determine operational needs –prevent stockpiling addresses Registration –uniqueness –troubleshooting

Local Internet Registries. Training Course Internet Registry Structure IANA / ICANN RIPE NCCARINAPNIC Enterprise LIR Local IR Registry ISP End User

Local Internet Registries. Training Course Obsolete Classful Notation 16,777,216 65,536 networkhost 8 16 Class A Class B Class C Obsolete because of – depletion of B space – too many routes from C space Solution – Classless Inter Domain Routing  hierarchical address space allocation

Local Internet Registries. Training Course Classfull Subnetting –using subnet mask in Class B and Class C networks Supernetting –using multiple Class C networks Variable Length Subnet Mask CIDR (Classless Inter Domain Routing) –flexible boundary between network and host part source and destination address in the prefix format –route aggregation Hierarchical address space allocation History of IP Addressing

Local Internet Registries. Training Course Classless Notation AddressesPrefixClassfulNet Mask... 8 / / / / / /241 C /2016 C’s /1932 C’s /18 /17 /16 64 C’s 128 C’s 1 B 

Local Internet Registries. Training Course First Request  LIR wants a block of IP addresses –e.g. for own network / infrastructure do not include needs of customers yet –no need to justify usage of the whole allocation Steps:  Complete request form ripe-141  Send request to  RIPE NCC evaluate and approve request With the first ASSIGNMENT approved, RIPE NCC also makes an ALLOCATION –default minimum size /20 (4096 addresses)

Local Internet Registries. Training Course First Request Approved  RIPE NCC hostmaster enters allocation and assignment objects into the RIPE databaseallocationassignment –only at the first request -/24 & /25 & /26 (448) instead of /23 (512) -at the beginning of the block (can be modified later) -with RIPE-NCC-NONE-MNT (or LIR mntner) Whole allocated range can be announced immediately AW=0 –Every request has to be sent to RIPE NCC for approval New in RPSL!

Local Internet Registries. Training Course Requesting the Address Space Assignment Process Completing the request form Communication with the hostmaster Answers from the HM robot Creating DB objects

Local Internet Registries. Training Course Assignment Process

Local Internet Registries. Training Course Assignment Process (TXT) 1. Gather information 2. Complete the request form 3. Send it to the HM (robot) –wait for 2-7 days 4. Read the answer and correct errors 5. Re-send, using the same ticket number –(message without errors goes to the wait q)  6. Answer the questions from HM staff (Evaluation loop) –(wait for approval)  7. Choose address range  8. Register network in the RIPE Database

Local Internet Registries. Training Course When to Send a Request For your own infrastructure –one block of many clients with 4 or less IPs per client leased lines dial-up p2p links (???) web hosting For each customer –more then /30 For ISP-client’s infrastructure For ISP-client’s customers => Separate request form needed

Local Internet Registries. Training Course Request Form I. General Information Overview of Organisation Contact Information Current Address Space Usage II. The Request Request Overview Addressing Plan III. Database Information IV. Optional Information

Local Internet Registries. Training Course Before Submitting the Request  Web formform –filling in the requests –syntax check ftp://ftp.ripe.net/tools/web141.pl.cgiftp://ftp.ripe.net/tools/web141.pl.cgi Frequently asked questions Short tips and tricks Link to:

Local Internet Registries. Training Course Tips for Completing the Request Form Complete all the “templates” –otherwise hostmasters will ask you questions Add additional information –help us understand your (client’s) network –more info, less questions to ask! All the data communicated with RIPE NCC is kept strictly confidential Documentation for RIPE NCC has to be in English

Local Internet Registries. Training Course General Information #[Overview of organisation template]# information relevant to the address space request –Name and location of the company? –What are the company activities? –What is the structure? Does it have subsidiaries and where? For what part of the company are the addresses requested? #[Requester Template]# –LIR contact for RIPE NCC #[User Template]# –customer’s contact for LIR

Local Internet Registries. Training Course #[ Current Address Space Usage Template ]# Prefix Subnet Mask Size Imm 1yr 2yr Description Dynamic dial-up A’dam Amsterdam office LAN Utrecht office LAN Mail servers Totals Actual addresses All segments in use

Local Internet Registries. Training Course Design of the Network How many physical segments it will consist of? –each described in the separate row in the Addressing Plan –equal to the number of subnets-year-2 What is each segment going to be used for? (“Description”) –including equipment used How many network interfaces in each segment? (“Imm”) Expectations of growth? (“1yr”, “2yr”) –cumulative, total numbers –plan for the network to grow! Classless segment size (“Size”) –minimum CIDR block that contains number of hosts in “2yr” –add 2 more “loopback” and “broadcast” for small networks Relative prefix starts from all zeroes –starting address for each segment

Local Internet Registries. Training Course dynamic dial-up Amsterdam web/mail/ftp servers Amsterdam customers’ servers Amsterdam training room LAN Amsterdam Amsterdam office LAN (*1) dynamic dial-up Utrecht web/mail/ftp servers Utrecht Inet cafe Utrecht training room LAN Utrecht Totals (*1) Office LAN = workstations, router, 2 printers and 1 fileserver Relative Subnet Mask Size Imm 1yr 2yr Description Prefix #[ Addressing Plan Template ]# Cumulative, total numbers Real needsConcrete plans

Local Internet Registries. Training Course #[ Request Overview Template ]# request-size: 448 addresses-immediate: 170 addresses-year-1: 297 addresses-year-2: 342 subnets-immediate: 6 subnets-year-1: 8 subnets-year-2: 9 Totals: inet-connect: YES, already connected to “UpstreamISP” country-net: NL  private-considered: Yes request-refused: NO  PI-requested: NO  address-space-returned: /25, to UpstreamISP, “in 3 months”

Local Internet Registries. Training Course #[ Network template ]# inetnum: netname: descr: country: admin-c: tech-c: status: mnt-by: changed: source: BLUELIGHT Company infrastructure in both locations NL AB231-RIPE JJ213-RIPE ASSIGNED PA RIPE-NCC-NONE-MNT RIPE * New in RPSL! Notice: no date needed! Notice: no value needed!

Local Internet Registries. Training Course Communication with Registration Services (link back to the Assignment Process)

Local Internet Registries. Training Course LIR Contact Persons  Stored in RIPE NCC internal file for each registry –confidential To keep them be up-to-date –write to –not automatically updated from the RIPE Database! –use role object: notify: Only registered contact persons can –send requests to hostmasters –change contact information Always sign your messages –PGP optional (soon)  Members’ mailing lists –not majordomo maintained – (lst-localir) ; (lst-contrib)

Local Internet Registries. Training Course Registry Identification (RegID) Distinguishes between member registries and individuals Format. Include with every message Suggestion - modify mail header X-NCC-RegID: nl.bluelight

Local Internet Registries. Training Course RIPE NCC Mailboxes –IPv4, IPv6, ASN requests –ticketised –… –updating contact information –updating allocation inetnum objects –updating PI assignment objects info –questions unrelated to address space requests –… Always include Reg-ID

Local Internet Registries. Training Course Ticketing System Unique ticket number per request –given by the robot upon receiving without one –facilitates retrieval / archiving –format: NCC#YYYYMMXXXX e.g. NCC# Check status of your ticket on the web – open ncc ; open reg ; closed –age of your ticket and oldest ticket in queue –list of the headers of all the messages exchanged Example

Local Internet Registries. Training Course Hostmaster-robot Checks request form –Reg-ID, contact persons –syntax e.g. missing templates, cross-template inconsistencies –policy problems e.g. inefficient usage Acknowledgement & diagnostics –please read very carefully –use LONGACK for more detailed info –in case of questions, ask Warnings –…………..

Local Internet Registries. Training Course HM Robot Error Response Error message –the request/ticket is NOT sent to the wait-queue –necessary to correct & re-send the request –use the same ticket number HOW??? HM - have you tried this?? –NOAUTO to bypass further robot checks No errors: hostmaster wait-queue –“ongoings” directly to hostmasters Next step: evaluation human hostmasters will ask you additional questions –followed by approval

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Evaluation (link to the assignment process) We saw HOW to complete the request form, now we will see WHY - what policies apply - what questions might HM staff ask - what do you need to ask your customers

Local Internet Registries. Training Course #[ Current Address Space Usage ]# Evaluation Are there any previous assignments? –also from other LIRs ALL active previous assignments need to be specified Investigate by querying the RIPE Database –see Section “Querying the RIPE DB” Can request be fulfilled with previous assignment?

Local Internet Registries. Training Course Evaluation -- Addressing Plan Do totals in “Addressing Plan” match numbers in “Request Overview”? –OUT?! ROBOT WILL CHECK THIS?? Are all subnets classless? –segments do not need to be one CIDR block (Leo?) Utilisation and efficiency guidelines: 25% immediately, 50% in one year Time frame guidelines: –1yr and 2yr periods can be adjusted to your planing Can address space be conserved by using –different subnet sizes?

Local Internet Registries. Training Course (New) Technologies If special hardware/software is used include the URLs of manufacturer’s sites if available Special allocation and verification procedures apply  static dial up assignments  IP based virtual web hosting cable modems, ADSL GPRS? –recommended investigate and implement dynamic assignment technologies whenever possible } STRONGLY DISCOURAGED

Local Internet Registries. Training Course Different “Policies” ADSL? All the policies specified in ripe-185 document –to influence the policy, take part in

Local Internet Registries. Training Course Motivation for ‘No Reservations’ Policy Def.: Address space set aside for future use –internal reservations space between two assignments within allocation –requested reservations zero segments in the “Addressing Plan” RIPE NCC does not approve requested reservations –administrative convenience not catered for –2 year network growth planning sufficient But, LIRs are free to make internal reservations –See “Administering your allocation”

Local Internet Registries. Training Course Private Address Space RFC-1918 (Address Allocation for Private Internets) Suitable for –partial connectivity –limited access to outside services can use application layer gateways (fire walls, NAT) Motivation –saves public address space –allows for more flexibility –security

Local Internet Registries. Training Course Possible Additional Information Include pointer to web site  Deployment plan  purchase/delivery receipts  Topology map (design of the network) Additional info can be faxed –handled and kept confidentially –include ticket number and Reg-ID

Local Internet Registries. Training Course Sample Deployment Plan Needed when big expansion planned Matching addressing plan –but providing more details Relative Subnet Mask Size Imm. 1yr 2yr Description Prefix London POP Berlin POP Moscow POP Paris POP Planned operational Date Equipment ordered Type of Equipment Number of hosts Location 01/ / / / / modems 2048 London Berlin Paris Moscow

Local Internet Registries. Training Course Renumbering Request Mention explicitly that customer is already using addresses Customer(s) changing providers returning PA addresses to OldISP renumbering to the PA range of NewISP –encourage customer to renumber whole network to new addresses Changing from PI (or UNSPECIFIED) to PA Send a request if amount is above LIR’s AW Time-frame guidelines -- 3 months address-space-returned: /24 to UpstreamISP1 in /24 to UpstreamISP2 in

Local Internet Registries. Training Course Renumbering Many Customers Procedure made easier to encourage renumbering – DHCP recommended when setting up the network If all ‘1-1’ renumberings –include all in one request form –separate inetnum and addressing plan for each “50% utilisation” guideline After the return date –If you are previous ISP of this customer make sure you remove old data from RIPE Database –RIPE NCC hostmasters send regular reminders  check ‘return’ lines in your “Reg file” data ??????????

Local Internet Registries. Training Course Evaluation -- Network Template  Relevant netname Contact persons –need to be registered as person objects beforehand –can be multiple –reference nic-hdls (may be a role object) –admin-c responsible for the network, able to make decisions on site –tech-c technical setup of the network can be from LIR, or contractor, or from client’s site

Local Internet Registries. Training Course How to Choose a netname Look-up key, not unique Syntax: uppercase letters, numbers & “-” Hints –[LIR name]-[client’s_name]-{type_of_service, location} –do not use the same netname for different clients –use the same netname for multiple assignments to the same client RIPE NCC’s only reference to LIR’s assignment (AW=0) –keep the approved netname when creating DB object –checked during reverse delegation, new allocation, AW and audit procedures

Local Internet Registries. Training Course … approval (link to the assignment process) approval and then: Choosing the Address Range

Local Internet Registries. Training Course Wait for the approval prior to assignment and registration Decide on the range of addresses within your address space –classless assignment on bit boundary Update local records for later reference –archive original documents with assignment Assignment for customer’s network Assignment for LIR’s network Internal Administration

Local Internet Registries. Training Course Aggregate within your allocation Sensible internal reservations –keep free space for some customers to grow –but - may never be claimed –fragments address space => requesting new allocation appropriate when previous allocated space used ~ 80% ! Divide your allocation based on types of services Divide your allocation based on locations But - LIR can have only one “open” allocation –open = more then 20% unused space How to Administer Allocation

Local Internet Registries. Training Course Assignments to (Small) ISPs LIR cannot allocate address space to an ISP If the customer of LIR is an ISP, distinguish –ISP’s infrastructure –ISP’s customers Separate assignments need to be –requested –evaluated / approved –registered in the RIPE Database  Avoid overlapping assignments –i.e. “big” assignment/object for ISP & all its customers, plus for separate customers

Local Internet Registries. Training Course Non-Overlapping Assignments / /25 BLUELIGHT GOODY2SHOES ENGOS /29 ENGO /29 ENGO-8 wrong!

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Registering Address Space in the RIPE Database

Local Internet Registries. Training Course Address space is considered in use only if registered in the RIPE Database –to provide contact info for troubleshooting –to enable overview of address space used –assignment is “valid” only in (correctly) registered Register all end-user networks separately –avoid overlapping inetnum objects –by default, database will not prevent creation of overlapping inetnum objects

Local Internet Registries. Training Course Creating network object AW=0 –take the “network template” from approved ripe-141 form AW>0 –whois -t inetnum Send to  see “The DB Transition Handout” ( ) –with the keyword NEW in the subject line to avoid over-writing the existing objects (address range is the primary key for inetnum) Transition to RPSL!

Local Internet Registries. Training Course inetnum Object Template inetnum: [mandatory] [single] [primary/look-up key] netname: [mandatory] [single] [lookup key] descr: [mandatory] [multiple] [ ] country: [mandatory] [multiple] [ ] admin-c: [mandatory] [multiple] [inverse key] tech-c: [mandatory] [multiple] [inverse key] rev-srv: [optional] [multiple] [inverse key] status: [generated] [single] [ ] remarks: [optional] [multiple] [ ] notify: [optional] [multiple] [inverse key] mnt-by: [mandatory] [multiple] [inverse key] mnt-lower: [optional] [multiple] [inverse key] mnt-routes: [optional] [single] [inverse key] changed: [mandatory] [multiple] [ ] source: [mandatory] [single] [ ]

Local Internet Registries. Training Course Pay attention to... Insert the address range –in the ‘network template’ from the approved request form –can not be in prefix notation! Keep the same netname attribute as approved –or see “How to Choose a netname” In the change attribute leave out the date –DB will add the current date  Protection is mandatory mnt-by: BLUELIGHT-MNT  Recommended: include mnt-lower New in RPSL!

Local Internet Registries. Training Course Most Common Warnings and Errors

Local Internet Registries. Training Course Changes with RPSL Objects format - stricter syntax checks!!! –line continuation –attribute order is relevant –support for end of line comments –no empty attributes allowed New flags for querying Submission to the DB supports: –MIME –PGP (GnuPG) Access control to “public” and “contact” data New in RPSL!

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Querying Address Ranges

Local Internet Registries. Training Course Querying Address Ranges –whois [customer’s IP range] –whois [customer’s netname] not unique search key –whois -m [your allocated IP range] will show list of all LIR’s first level customer(s) network(s) first level more specific address ranges –whois -L [customer’s IP range] will show LIR’s own allocation object EXAMPLES!! Web interface!

Local Internet Registries. Training Course Example DB Query / /25 BLUELIGHT GOODY2SHOES whois -M /19 whois -m /19 whois -L ENGOS /29 ENGO /29 ENGO-8

Local Internet Registries. Training Course Inverse Lookups in RIPE DB whois -i {attribute} {value} whois -i admin-c,tech-c,zone-c JAJA1-RIPE –whois -i admin-c,tech-c,zone-c -T domain JAJA1-RIPE –whois -i zone-c JAJA1-RIPE whois -i mnt-by BLUELIGHT-MNT whois -i notify

Local Internet Registries. Training Course Recursive Lookups whois => inetnum,route,person(s) –whois -r => inetnum, route –whois -T inetnum => inetnum,persons –whois -r -T inetnum => inetnum –whois -T route => route whois => inetnum, role, person –whois CREW-RIPE => role, persons –whois -r CREW-RIPE => role

Local Internet Registries. Training Course RIPE DB Flags -h … (NEW ONES!)

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Assignment Window Policies and Procedures

Local Internet Registries. Training Course Assignment Window Policy Assignment Window –maximum amount of address space LIR can assign without prior approval of the NCC  initially AW equals zero  gradually raised Why necessary? –support to LIRs during start up –familiarisation with RIPE NCC procedures –align criteria for request evaluation –maintain contact between LIRs and RIPE NCC

Local Internet Registries. Training Course Initially: AW=0 Send EVERY customer’s request and EVERY request for assignment to your own infrastructure / network to the RIPE NCC for evaluation Separate request forms needed Do not send too many at the same time

Local Internet Registries. Training Course When is AW Size Raised All approved assignments registered Policies understood, procedures followed Valid DB objects are –approved, with correct netname size date –unapproved - must be within AW size Complete documentation with requests AW not always automatically raised  approach us

Local Internet Registries. Training Course When is AW Size Lowered New staff need training  After negative auditing report  To enforce payment  To find out the AW size –asm-window line –write to

Local Internet Registries. Training Course Assignment Window Size AssignmentLocal IR Assignment limit Window(host addresses) AW =0All new Registries AW =/28requests  16 addr AW =/27requests  32 addr AW =/26requests  64 addr... AW =/22requests  1024 addr AW =/21requests  2048 addr …... AW size corresponds to average size of requests AW is for LIR, and not for person or company AW is per 12 months per customer Increasing Responsibility of Local IR

Local Internet Registries. Training Course LIR Responsibilities With the AW Evaluate all the requests within your AW size –implement all the polices from ripe-185 document –make classless, conservative assignments –implement dynamic solutions when possible promote NAT, DHCP, http1.1, dynamic dial-up... Keep all the documentation about your decisions –useful for administration, and if client comes back –RIPE NCC might ask for it later Register all the assigned networks in RIPE DB –choose appropriate netname Chase the previous ISP after renumbering –to delete the outdated DB objects

Local Internet Registries. Training Course Assignment Process With AW Between Local IR’s and their customers Documentation completed? ask for more Documentation LIR Evaluate request no yes Gathering information Approach RIPE NCC Evaluation request > AW? need 2nd opinion? yes no Finish the assignment no ye s

Local Internet Registries. Training Course Update RIPE database Assignment Process With AW (cont’d) Add Registry ID Add comments & recommendations Send to RIPE NCC Complete the request form Update local records Notify customer Pick addresses Wait for acknowledgement RIPE NCC evaluates & approves ( Finish the assignment ) ( Approach RIPE NCC ) ( Finish the assignment )

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Reverse Delegation Procedures /24 zone Smaller zone Multiple /24 zones /16 zone

Local Internet Registries. Training Course What is Forward and Reverse DNS Delegation ? Forward Delegation –enables naming of IP hosts on the Internet –hierarchical authority for domain registration organisational structure Reverse Delegation –enables association of IP addresses with domain names –hierarchical authority for reverse zone depends on who distributed the address space –reverse delegation takes place on octet boundaries

Local Internet Registries. Training Course IN-ADDR.ARPA Domain. (ROOT) edu arpa com net nl in-addr = in-addr.arpa bluelight www Forward mapping Reverse mapping (A ) (PTR amsterdam

Local Internet Registries. Training Course Why Do You Need Reverse DNS Delegation ? All host-IP mappings in the DNS (A record) should have a corresponding IP-host mapping (PTR record) Failure to have this will likely –block users from various services (ftp, mail) –make troubleshooting more difficult –produce more useless network traffic in general

Local Internet Registries. Training Course Overview of the Request Procedure LIRs have to request reverse delegation /24 zones are delegated –to LIR / end-user –as the address space gets assigned Steps  valid assignment of address space  /24 reverse zone setup  on LIR or end-users nameserver(s), or both  send domain object to include Reg-ID

Local Internet Registries. Training Course “Valid” Assignment According to ripe-185 policies  Within “Assignment Window” -or approved from RIPE NCC Hostmaster inetnum object registered in RIPE Database –netname attribute is NCC's only reference if assignment approved do NOT change netname without notifying  this is mentioned when we approve your IP requests –registered after the approval date

Local Internet Registries. Training Course /24 Reverse Zone Setup Recommendations At least two nameservers required –one nameserver setup as primary –at least one other as secondary SOA values reasonably RFC1912 compliant Nameservers not on same physical subnet –preferably with another provider Serial numbers YYYYMMDDnn format Use IP address instead of name of nameserver Do NOT use rev-srv attribute in inetnum object

Local Internet Registries. Training Course Example domain Object whois -t domain domain: in-addr.arpa descr: Reverse delegation for Bluelight Customers SPLITBLOCK admin-c: JJ231-RIPE tech-c: JAJA1-RIPE zone-c: WF2121-RIPE nserver: ns.bluelight.nl nserver: ns2.bluelight.nl mnt-by: BLUELIGHT-MNT changed: source: RIPE * Notice: no date needed!

Local Internet Registries. Training Course Request the Delegation Send domain template to –an automatic mailbox Tool will –check assignment validity –check if zone is correctly setup –(try to) enter object to RIPE DB

Local Internet Registries. Training Course Problems with inaddr Robot? Error report will be sent to requester –correct errors and re-send For questions see FAQ If error reports continue –contact –please include the full error report

Local Internet Registries. Training Course < /24 Delegations Reverse delegation is also possible for a /24 shared by more customers => NOT reason for classfull assignments RIPE NCC reverse delegate authority for the entire /24 to LIR –procedure and requirements the same as for /24 If customer wants to run own primary nameserver –LIR delegates parts as address space gets assigned –use CNAME to create an extra point of delegation (RFC-2317)

Local Internet Registries. Training Course $ORIGIN in-addr.arpa IN NS ns.goody2shoes.nl IN NS ns2.bluelight.nl IN NS ns.cyberfalafel.nl IN NS ns2.bluelight.nl. 0 IN CNAME IN CNAME IN CNAME IN CNAME IN CNAME IN CNAME IN PTR  CNAME Example Zonefile at Provider Primary Nameserver

Local Internet Registries. Training Course  CNAME Example Zonefiles at Customers’ Nameservers $ORIGIN IN NS IN NS ns2.bluelight.nl. 1INPTRwww.goody2shoes.nl. 2INPTRmail.goody2shoes.nl INPTRkantoor.goody2shoes.nl. $ORIGIN IN NS IN NS ns2.bluelight.nl. 33INPTRwww.cyberfalafel.nl INPTRcafe3.cyberfalafel.nl.

Local Internet Registries. Training Course Reverse Delegation of Multiple /24 –for range of consecutive zones possible also for sub-range –if represented in single inetnum object Shorthand notation for domain attribute inetnum: w.z.x.0 - w.z.y domain: x-y.z.w.in-addr.arpa in-addr.arpa Submit as one domain object –processed separately –separate response Recommended

Local Internet Registries. Training Course Reverse Delegation of /16 Allocation If a LIR has a /16 allocation, the RIPE NCC can delegate the entire reverse zone to the LIR Requirements and procedures the same as /24, except –/16 domain object –three nameservers needed –ns.ripe.net a mandatory secondary After delegation LIR –should continue to check sub-zone setup before further delegation –recommended use of the inaddr robot TEST keyword or web check

Local Internet Registries. Training Course Changing Delegation Change the nserver lines in domain object –submit domain object to –NOT enough to update the object in RIPE DB! Deleting a delegation is automatic –include delete attribute to the exact copy of the object –send to To change contact details in domain object –submit updated object to

Local Internet Registries. Training Course Summary of the Process 1) Assign address space 2) Zone setup on the nameservers 3) Complete the domain object template 4) Send the domain object to nurani??

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Autonomous System Numbers It is assumed that attendee is familiar with BGP routing, and have interest in obtaining public ASN

Local Internet Registries. Training Course AS3 AS2 AS3 Policy Based Routing Internet NEW end-user end-user ISP Regional Transit Provider Backbone Provider BlueLight Goody2Shoes

Local Internet Registries. Training Course Autonomous System Definition: a group of IP networks run by one or more network operators which has a unique and clearly defined routing policy RIR is allocated a range of AS numbers by IANA –16 bit number RIR assigns unique AS number –for LIR or for the customer * AS number, routing policy and originating routes are registered in the Routing Registry

Local Internet Registries. Training Course How To Get an AS Number ? Complete request form: ripe-147 –aut-num object template contact person(s)  mntner object template –address space to be announced with this AS# Send to –web syntax check: Being multihomed and routing policy are mandatory

Local Internet Registries. Training Course RPSL Routing Policy Specification Language –allows for more refined policy details –allows hierarchical authentication –replacing ripe-181 language Syntax aut-num: NEW export: to AS3 announce NEW import: from AS2 action pref=120; accept ANY pref defines ….. RPSL!

Local Internet Registries. Training Course AS2 aut-num: AS2 import: from AS2 action pref=120; accept AS2 export: to NEW announce AS2 AS Example NEW aut-num: NEW export: to AS2 announce NEW Internet aut-num: AS3 AS3 export: to NEW announce ANY import: from NEW action pref=120; accept NEW import: from AS3 action pref=100; accept ANY import: from NEW action pref=120; accept NEW export: to AS3 announce NEW ANY import: from AS2 action pref=200; accept ANY

Local Internet Registries. Training Course Evaluation of ASN Request What address space will be announced? How long it will take you to achieve multihomed status? Is it feasible to peer with specified ASNs? (etc.. HM!!)

Local Internet Registries. Training Course Registration in RIPE Database RIPE NCC hostmaster - creates aut-num object (and maintainer) - informs requester *User is responsible for keeping up to date –routing policy –referenced contact info (person/role, mntner) RIPE NCC hostmaster regularly checks consistency of data in Routing Registry –

Local Internet Registries. Training Course aut-num: NEW descr: Bluelight AS# import: from AS2 action pref=120; accept AS2 import: from AS3 action pref=120; accept ANY import: from AS2 action pref=120; accept ANY export: to AS2 announce NEW export: to AS3 announce NEW admin-c: JJ231-RIPE tech-c: JAJA1-RIPE mnt-by: NEW-MNT changed: source: RIPE aut-num Template AS42 BLUELIGHT-MNT Object RPSL!

Local Internet Registries. Training Course The Route Object route: /24 descr: BLUELIGHT-NET origin: AS42 mnt-by: BLUELIGHT-MNT changed: source: RIPE Authorisation required when creating the object –mntner of the address space block –mntner of the originating ASN –mntner of the encompassing route object –mntner referenced in the object itself New in RPSL!

Local Internet Registries. Training Course Internet Routing Registry Globally distributed DB with routing policy information –provides a map of global routing policy (ASExplorer) –shows routing policy between any two ASes (prpath) –allows simulation of routing policy effects –enables creation of aut-num based on router conf (aoe) –enables router configuration (rtconfig) –provides contact information (whois) RIPE Routing Registry –subset of information in RIPE database –syntax description in RFC-2622 previously RIPE-181 RPSL!

Local Internet Registries. Training Course Changes in RR with RPSL New “set” objects as-set (ex as-macro), route-set (ex community) peering-set, filter-set, rtr-set, as-block –hierarchical set names New attributes –member-of, mbrs-by-ref (implicit membership) Reserved prefixes (RP) –AS-, RS-, RTRS-, FLTR-, PRNG- RSP-Auth (RFC-2725) –stronger and hierarchical authorisation and authorisation mnt-routes: [ rpsl list of prefixes | ANY] referral-by: auth-override: YYYYMMDD RPSL!

Local Internet Registries. Training Course aut-num Changes in RPSL aut-num: [mandatory] [single] [primary/look-up key] as-name: [mandatory] [single] descr: [mandatory] [multiple] as-in: [optional] [multiple] [ ] as-out: [optional] [multiple] [ ] interas-in: [optional] [multiple] [ ] interas-out: [optional] [multiple] [ ] as-exclude: [optional] [multiple] [ ] member-of: [optional] [multiple] [inverse key] *** New in RPSL *** import: [optional] [multiple] *** as-in in RIPE 181 *** export: [optional] [multiple] *** as-out in RIPE 181 *** default: [optional] [multiple] remarks: [optional] [multiple] admin-c: [mandatory] [multiple] [inverse key] tech-c: [mandatory] [multiple] [inverse key] cross-mnt: [optional] [multiple] [inverse key] cross-nfy: [optional] [multiple] [inverse key] notify: [optional] [multiple] [inverse key] mnt-lower: [optional] [multiple] [inverse key] *** RPS auth *** mnt-routes: [optional] [multiple] [inverse key] *** RPS auth *** mnt-by: [mandatory] [multiple] [inverse key] changed: [mandatory] [multiple] source: [mandatory] [single] automatically translated, new, preserved, deprecated RPSL!

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Advanced Database Issues DB administration – updating – deleting Protection Test Database

Local Internet Registries. Training Course DB Update Procedure Changing an object –obtain object from RIPE DB –make needed changes –keep the same primary key –add the changed line to the new version of object value: address and date keep the old changed lines in *do not forget authentication (password, PGP key) Deleting an object –add delete line to the exact copy of current object –value: address, reason and date –submit to the database

Local Internet Registries. Training Course When to Change Your Objects Fixing overlapping assignments Merging two inetnum (domain, route) objects  Splitting one assignment into more smaller ones Changing the netname Protecting unprotected objects –including mnt-by attribute Updating peering agreements in aut-num  Updating references to new contact persons/roles –admin-c, tech-c, zone-c Updating contact info –phone/address change in person/role/mntner

Local Internet Registries. Training Course Primary Keys (????)

Local Internet Registries. Training Course Inetnum: person: JAJA1-RIPE Case Study -- Contact Person Left 1. whois -i tech-c JAJA1-RIPE 2. Create new person object ( for Carl Dickens, new guy ) 3. Change the tech-c reference in all inetnum objects 4. Delete old person object Inetnum: JAJA1-RIPE... CD2-RIPE person:

Local Internet Registries. Training Course JJ231-RIPE JJ231-RIPE Replacing tech-c Using role Object 1. Create person object for each tech-c 2. Create role object for all tech-c:s 3. Change the tech-c reference in all inetnum objects to reference role object 4. Keep role object up-to-date with staff changes JJ231-RIPE BL112-RIPE... BL112-RIPE CD2-RIPE JJ231-RIPE role: person: CD2-RIPE person:

Local Internet Registries. Training Course Case Study: Replacing one assignment with smaller ones RIPE NCC registers first assignment as one block, at the beginning of allocated range To administer your allocation better, you can split this assignment into several smaller –delete the original object –create two of more new ones –keep the same netname or let RIPE NCC know of the change –be careful when choosing the size of internal reservation Add EXAMPLE!

Local Internet Registries. Training Course Deleting an Object (example) person: Piet Bakker address: Goody 2 Shoes address: Warmoesstraat 1 address: Amsterdam phone: nic-hdl: PIBA2-RIPE changed: source: RIPE delete: duplicate object Exact copy of the DB object

Local Internet Registries. Training Course Protecting DB Objects

Local Internet Registries. Training Course Notification / Authorisation notify attribute (optional) –sends notification of change to the address specified  mnt-by attribute & mntner object – mnt-by mandatory (except dn, pn, ro)  Hierarchical authorisation for inetnum & domain objects –mnt-lower attribute New in RPSL!

Local Internet Registries. Training Course How To Protect DB Data Read documents (ripe-157, ripe-189)  choose authentication method  Create mntner object Existing objects must be updated –include mnt-by attribute referencing mntner object When creating new objects –include mnt-by attribute referencing mntner object No mnt-by => mnt-by: RIPE-NCC-NONE-MNT Transition to RPSL!

Local Internet Registries. Training Course Authorisation Mechanism inetnum: netname: BLUELIGHT-1 descr: Blue Light Internet ………….. mnt-by:BLUELIGHT-MNT mntner: BLUELIGHT-MNT descr: Maintainer for all Bluelight objects admin-c: JJ231-RIPE tech-c: BL112-RIPE auth: CRYPT-PW q5nd!~sfhk0# upd-to: mnt-nfy: referral-by: RIPE-DBM-MNT mnt-by: BLUELIGHT-MNT changed: source: RIPE New in RPSL!

Local Internet Registries. Training Course Maintainer Object Attributes  auth (mandatory, multiple) upd-to (mandatory) –notification for failed updates mnt-nfy (optional, encouraged) –works like notify but for all objects that refer to this mntner mnt-by (mandatory) –can reference the object itself referral-by (mandatory) –references mntner object that created this object Manual registration of object necessary Send object to New in RPSL!

Local Internet Registries. Training Course Authentication Methods 1. auth: NONE could be used with mnt-nfy attribute 2. auth: MAIL-FROM { , reg-exp} –e.g. protection from typos 3. auth: CRYPT-PW {encrypted password} include password attribute in your updates 4. auth: PGP-KEY- key-cert object see: ripe-190 & ripe-189 RIPE NCC can provide you with a licence for free

Local Internet Registries. Training Course GnuPG Authentication

Local Internet Registries. Training Course Hierarchical Authorisation inetnum: netname: NL-BLUELIGHT …... status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: BLUELIGHT-MNT changed: changed: source: TEST Ask for mnt-lower attribute mnt-lower protects –only against creation –only one level below Include also in assignment inetnum objects 

Local Internet Registries. Training Course DB protection and RPSL (summary) referral-by attribute mandatory in mntner objects –references mntner object that created this object –in transition phase: RIPE-DB-MNT mnt-by mandatory attribute in all objects –except dn, pn, ro –in transition phase: no mnt-by => mnt-by: RIPE-NCC-NONE-MNT Reserved prefixes (RP) –in transition phase: – mntner: => mntner: MNT- New in RPSL!

Local Internet Registries. Training Course Test Database Non-production whois Database Similar interface as “real” RIPE whois Database –whois & whois -h test-whois.ripe.net ; –syntax checking –error reports Enable to submit your own maintainer Ideal for testing –various authorisation schemes –self-made scripts that update RIPE DB Source: TEST

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course PI Request

Local Internet Registries. Training Course PA vs. PI Assignments Provider Aggregatable customer uses addresses out of LIR’s allocation good for routing tables  customer must renumber if changing ISP Provider Independent customer receives range of addresses from RIPE NCC customer takes addresses when changing ISP  possible routing problems Make contractual agreements –example: ripe-127 –the only way to distinguish PA and PI space

Local Internet Registries. Training Course Requesting PI Space LIR sends request on behalf of PI customer Complete ripe-141 as usual Differences: #[Request Overview Template]# PI-requested: YES #[Network Template]# status: ASSIGNED PI Explain why the customer wants PI –aware of the consequences? impossible to get contiguous range in the future

Local Internet Registries. Training Course Evaluation of PI Request Conservative estimates –will NOT get more addresses (then needed) to prevent routing problems Classless Assignment is only valid as long as original criteria remain valid (ripe-185) After approval –RIPE NCC assigns a block from own range –RIPE NCC puts assignment in database  with RIPE-NCC-HM-PI-MNT

Local Internet Registries. Training Course Example PI DB Entry inetnum: netname: GOODY2SHOES-2 descr: Own Private Network 4 Goody2Shoes descr: Amsterdam, Netherlands country: NL admin-c: PIBA2-RIPE tech-c: JAJA1-RIPE status: ASSIGNED PI mnt-by: RIPE-NCC-HM-PI-MNT mnt-lower:RIPE-NCC-HM-PI-MNT mnt-by: BLUELIGHT-MNT changed: source: RIPE

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course New allocation

Local Internet Registries. Training Course Allocation Procedures ‘Slow Start’ –default minimum first allocation /20 LIR announces the whole prefix –size of future allocations depends on current usage rate presumably enough for next two years not always contiguous Motivation for ‘slow start’ –fair distribution of address space –keeps pace with customer base growth –slows down exhaustion of IPv4 address space

Local Internet Registries. Training Course Requesting New Allocation If previous allocated space used ~ 80% ! Send to NOT ripe-141 form NEWBLOCK in the subject line for higher priority –summary of addresses assigned / free –list assignments of the last allocation Suggested format: Allocation: /19 assigned: 7372 free: 820 Range Netname BLUELIGHT GOODY2SHOES CYB-FAL ENGOS-1...

Local Internet Registries. Training Course Evaluation of New Allocation Request Are LIR’s records consistent with RIPE NCC’s local records RIPE database –RIPE NCC wants to see 3 random requests Are all assignments valid? within AW correct netname attribute & the date Quality of RIPE DB records up-to-date person & role objects no overlapping inetnum objects Tool available: asused-public

Local Internet Registries. Training Course Prior to Making New Allocation If inconsistencies are found –LIR will be asked to correct data first –AW is reviewed When data is corrected or deadline for correction is set –RIPE NCC allocates new block to LIR  updates the DB LIR announces new prefix

Local Internet Registries. Training Course Allocation inetnum Object inetnum: netname: NL-BLUELIGHT descr: Provider Local Registry country: NL admin-c: JJ231-RIPE tech-c: JAJA1-RIPE status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: BLUELIGHT-MNT changed: changed: changed: source: RIPE

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course IPv6

Local Internet Registries. Training Course Why IPv6? Next generation protocol –scalability bits addresses –security –dynamic hosts numbering –QoS Interoperable with IPv4 simple and smooth transition –hardware vendors –applications

Local Internet Registries. Training Course Get IPv6 Addresses From: RIR (sub)TLA holder 6bone Using 2002::/16 prefix

Local Internet Registries. Training Course Transition Mechanisms

Local Internet Registries. Training Course IPv6 Introduction Current format boundaries |-3|--13-|--13-|-6-|--13-|--16--| bits-----| |FP|-TLA-|-sub-|Res|-NLA-|--SLA-|---Interface ID---| |--|-ID--|-TLA-|---|--ID-|--ID--| | |----public topology ----|-site-|-----Interface----| /23 /29 /35 /48 /64 Classfull; another level of hierarchy –(sub)TLA –NLA –SLA Hexadecimal representation of addresses

Local Internet Registries. Training Course IPv6 Allocation Policies "Provisional IPv6 Assignment and Allocation Policy Document” (ripe-196) –discussion on and Bootstrap Phase Criteria Peering with 3  Autonomous Systems (in DFZ) AND Plan to provide IPv6 services within 12 months  40 IPv4 customers AND either OR 6bone experience

Local Internet Registries. Training Course IPv6 Allocations Request form (ripe-195) ”Slow start” –first allocation to a TLA Registry will be a /35 block representing 13 bits of NLA space –additional 6 bits reserved by RIR for the allocated sub-TLA for subsequent allocations Reverse Delegation of an IPv6 Sub-TLA – IANA allocations –APNIC 2001:0200::/23(23+ subTLAs) –ARIN 2001:0400::/23(12+ subTLAs) –RIPE NCC 2001:0600::/23(30+ subTLAs) –

Local Internet Registries. Training Course Database Object inet6num:2001:0600::/23 netname: EU-ZZ descr: RIPE NCC descr: European Regional Registry country: EU admin-c: MK16-RIPE admin-c: DK58 tech-c: OPS4-RIPE status: SUBTLA mnt-by: RIPE-NCC-HM-MNT mnt-lower: RIPE-NCC-HM-MNT changed: source: RIPE Generated by the DB!

Local Internet Registries. Training Course Questions?

Local Internet Registries. Training Course Questionnaire  Please complete the questionnaire precious feedback constant improvement Thank you

Local Internet Registries. Training Course RIPE NCC Recycling Procedures Please return the reusable badges. Thank you