Re: [v6ops] new draft: draft-servin-v6ops-monitor-ds-ipv6

[Arturo Servin <[e-mail]>]

John,

	Thanks for your comments. We really appreciate them.

	We will add them to the next revision. Some comments in line for
clarification.

On 7/30/13 8:54 AM, John Mann wrote:
> Hi,
> 
> Some culture shift may be necessary when changing from monitoring IPv4
> to IPv4+IPv6 .
> 
> For example, "interface counters" may count all packets, not just IPv4
> packets.

Taken, thanks.

> All existing network graphs and statistics are likely to be useless for
> monitoring IPv6 (separate from IPv4).

Ok, this seems to be implicit to me. Do you want us to add some specific
advice (or perhaps I didn't properly understand your point)?

> 
> Also, just because IPv4 is working over a network path and IPv6 is
> enabled over the same path, does not prove that IPv6 is working over the
> same path.


> How about backup links - 
> It is necessary to send real IPv6 traffic over every path to test that
> it does go through.
> Pinging the GUA or ULA of every IPv6 router interfaces could be used to
> test if routing is working and ACLs permit traffic.

	OK, I think that I got your point.

	Is this practice common?

	Even if not common, if you or the WG find it useful we would add it.


> 
> Aim to test the IPv6 network the same ways as you test for IPv4 -
> management traffic, pings, application-layer tests etc.
> 
> ===
> There are also new things that you can monitor that are IPv6-specific.
> 
> For example, poll each router to see what IPv6 routers it can see.
> On point-to-point or HSRP/VRRP router interfaces, you expect to see one
> other router;
> on non-HSRP/VRRP user interfaces, you expect to see no other routers.
> Are the other routers you can see "your" routers, or are they rogues
> advertising bogus routes, like 6to4 prefixes?
> 
> You can snoop for rogue IPv6 routers even if you don't have your
> router's interface enabled to route IPv6 traffic.
> 
> Are the RA's the router received recent, or received a while ago?

	Basically the idea is to recommend to monitor RA in your network?
Something else?

	The means could be what you suggest or to use something like NDPmon, right?

> 
> If your router has OSPFv3 neighbors, are they all in state FULL? 

	Is this something that is normally done, perhaps for large ISPs or
Enterprises?

Thanks!
as