[136109] in North American Network Operators' Group
Connectivity to Brazil
daemon@ATHENA.MIT.EDU (Steve Danelli)
Tue Feb 1 08:55:45 2011
From: Steve Danelli <the76posse@gmail.com>
Date: Tue, 1 Feb 2011 08:54:47 -0500
To: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Hello all!!! First post here =20
Some carrier, somewhere between us and the service provider is selectively d=
ropping the IKE packets originating from our VPN gateway and destined for ou=
r Brazil gateway. Other traffic is able to pass, as are the IKE packets comi=
ng back from Brazil to us. This is effectively preventing us from establishi=
ng the IPSEC tunnel between our gateways.
=20
Also something else is awry, for two given hosts on the same subnet (x.y.z.5=
2 and x.y.z.53), they take two wildly divergent paths:
=20
=20
For dest x.y.x.52
=20
16 ms 3 ms 3 ms xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
2 ms 2 ms 2 ms xe-0-1-0.er1.lga5.us.above.net [64.125.27.61]
12 ms 3 ms 13 ms e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
117 ms 118 ms 118 ms te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
136 ms 137 ms 136 ms ctbc-multimidia-data-net-s-a.gigabitethernet1-2.=
ar5.gru1.gblx.net [207.138.94.102]
157 ms 136 ms 138 ms xe-3-2-0-0.core-b.ula001.ctbc.com.br [201.48.44.=
165]
132 ms 132 ms 141 ms ge-3-0-0-0.core-b.spo511.ctbc.com.br [201.48.44.=
14]
135 ms 133 ms 134 ms ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]
=20
=20
For dest x.y.x.53
=20
3 ms 2 ms 3 ms xe-2-3-0.cr1.lga5.us.above.net [64.125.31.34]
2 ms 2 ms 2 ms xe-1-1-0.er1.lga5.us.above.net [64.125.26.162]
19 ms 3 ms 12 ms e2-4-10000m.ar9.nyc1.gblx.net [208.178.58.197]
117 ms 117 ms 117 ms te3-4-10g.asr1.gru1.gblx.net [67.16.142.238]
117 ms 117 ms 118 ms 64.209.106.170
118 ms 118 ms 118 ms ae1-0.edge-a.spo511.ctbc.com.br [201.48.44.93]
=20
Anyone have any insight on to what may be occurring?
=20
Sent from my iPhone=
