![Page 1: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/1.jpg)
1Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Welcome to theRIPE NCC
IP Request Tutorial
January 27, 2003
RIPE Network Coordination Centre <[email protected]>
![Page 2: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/2.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 2
Logistics
• Time line : 9:00-10:30, break, 11:00-12:30• Material
– http://www.ripe.net/ripe/meetings/ripe-47/tutorials/ip-request/
– Reference Booklet
• Target audience: non-LIRs, new LIR staff• Objectives
– how to interact with RIPE NCC– present latest policies & procedures
• LIR Training Courses: http://www.ripe.net/training/lir/
• Trainers
![Page 3: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/3.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 3
Overview• Basic RIPE Database Issues
– querying DB– creating person object
• Setting up an LIR. 1st Allocation– terminology– setting-up an LIR– first allocation
• Assigning PA Address Space– communication with hostmasters– completing the request form
• Evaluation of Requests• Registering Address Space
– managing your allocation• Assignment Windows• Sub-allocations • Reverse Delegation• PI Request • AS Numbers
![Page 4: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/4.jpg)
4Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Basic RIPE Database Issues
• Description• DB query • Creating contact info objects
More info: http://www.ripe.net/db/
![Page 5: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/5.jpg)
5Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Basic RIPE Database Issues
• Description• DB query • Creating contact info objects
More info: http://www.ripe.net/db/
![Page 6: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/6.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 6
RIPE Whois Database Intro
• Public Network Management Database
• Software • RIPE NCC• Requirements by RIPE community (DB-WG)
• Data• LIRs, End Users, RIPE NCC• Not responsibility of RIPE NCC
![Page 7: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/7.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 7
Object Types
• Information about: objects:IP address space . . . . . . . . . . . inetnum, inet6num Reverse domains. . . . . . . . . . . . domainRouting policies . . . . . . . . . . . . . route, aut-num, etcContact details . . . . . . . . . . . . . person, role,
Data protection . . . . . . . . . . . . . mntner, irt
• Documents:– RIPE NCC Database Reference Manual (ripe-252)– RIPE NCC DB User Manual: Getting Started (ripe-253)
![Page 8: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/8.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 8
Basic Queries
• WhoisWhois (client, web interface)• whois -h whois.ripe.net• http://www.ripe.net/perl/whois
– Searches only look-up keys
– Look-up keys - usually object name
• GlimpseGlimpse - full text search http://www.ripe.net/db/whois-free.html
Examples
![Page 9: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/9.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 9
Creating a Person Object
• Only one object per person
• Fill out a template whois -t person
• whois -v person (verbose)
Send to <[email protected]> (“robot”)
OR
Webupdates: http://www.ripe.net/webupdates Webupdates
Demo
![Page 10: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/10.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 10
person: [mandatory] [single] [lookup key]
address: [mandatory] [multiple] [ ]
phone: [mandatory] [multiple] [ ]
fax-no: [optional] [multiple] [ ]
e-mail: [optional] [multiple] [lookup key]
nic-hdl: [mandatory] [single] [primary/look-up key]
remarks: [optional] [multiple] [ ]
notify: [optional] [multiple] [inverse key]
mnt-by: [optional] [multiple] [inverse key]
changed: [mandatory] [multiple] [ ]
source: [mandatory] [single] [ ]
person: [mandatory] [single] [lookup key]
address: [mandatory] [multiple] [ ]
phone: [mandatory] [multiple] [ ]
fax-no: [optional] [multiple] [ ]
e-mail: [optional] [multiple] [lookup key]
nic-hdl: [mandatory] [single] [primary/look-up key]
remarks: [optional] [multiple] [ ]
notify: [optional] [multiple] [inverse key]
mnt-by: [optional] [multiple] [inverse key]
changed: [mandatory] [multiple] [ ]
source: [mandatory] [single] [ ]
whois -t person
*
attributes
person: [mandatory] [single] [lookup key]
address: [mandatory] [multiple] [ ]
phone: [mandatory] [multiple] [ ]
fax-no: [optional] [multiple] [ ]
e-mail: [optional] [multiple] [lookup key]
nic-hdl: [mandatory] [single] [primary/look-up key]
remarks: [optional] [multiple] [ ]
notify: [optional] [multiple] [inverse key]
mnt-by: [optional] [multiple] [inverse key]
changed: [mandatory] [multiple] [ ]
source: [mandatory] [single] [ ]
![Page 11: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/11.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 11
role: Technical BlueLight Staff ...nic-hdl: AUTO-#initials
AUTO-2BL
nic-hdl
person: Piet Bakker...nic-hdl: AUTO-1PB1234-RIPE
• Unique identifier for person and role objects
• Format: <initials>[number]-<database>– e.g. JFK11-RIPE
Use “AUTO-<number>” placeholders to generate new nic-handle
BL112-RIPE
![Page 12: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/12.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 12
Database Robot Responses<[email protected]>
• Successful update
• Errors– object NOT accepted
• If unclear, send questions to <[email protected]>• include error report and original message• ticketised
![Page 13: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/13.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 13
Questions?
<[email protected]> problems with the DB robot (auto-)<[email protected]> basic questions (mailing list)
Diag CH
![Page 14: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/14.jpg)
14Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Setting up an LIRFirst Allocation
• Terminology• How to set-up an LIR• First allocation and assignments
![Page 15: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/15.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 15
Terminology 1
• Allocation– address space set apart, for LIR’s future use
• LIR+ customers: LIR,Reseller,End User
– status: ALLOCATED PA
• Assignment– made from allocation or sub-allocation– address space in use in networks
(End User, Reseller or LIR’s infrastructure)– status: ASSIGNED PA (=Provider Aggregatable)
assignment assignment
/20 allocation = 4096 addresses
![Page 16: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/16.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 16
Terminology 2• Sub-Allocation *
– address space from LIR’s allocation set apart by LIR for Reseller’s future use (Reseller+ End User)
– status: SUB-ALLOCATED PA
• AW*– maximum nr of addresses an LIR can assign without RIPE NCC’s
approval
a /20 allocation = 4096 addresses:
assignments
assignment
assignment
sub-allocation
![Page 17: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/17.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 17
Classless Addressing
• Classful: 3 fixed network sizes: A, B, C• Problem: waste of addresses, routing
• Solution: Classless Inter Domain routing (CIDR) flexible allocation / assignment sizes!
hierarchical distribution
• Always make classless assignments! “/23 & /25” or /27 etc…. not always /24 !!!
![Page 18: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/18.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 18
IP Address Distribution
RIPE NCCARIN APNIC
LIRLIRLIR
ISP
End User End UserEnd User
/8
…, /16, …, /20
…, /19, …, /24, …, /29
Internet Registry Goals:
AGGREGATION routing!
CONSERVATION no stockpiling!
REGISTRATION uniqueness / troubleshooting
LACNIC
IANA / ICANN/8
![Page 19: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/19.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 19
How to Set-up an LIR
• Complete application form & send to <[email protected]>
provide Reg-ID & contact persons
• Sign contract - “Service agreement”• Pay the sign-up & yearly fee
New LIRs get 2 free vouchers for RIPE Meetings
![Page 20: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/20.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 20
First Allocation
• Steps:
– complete “PA Assignment Request Form” for assignment (ripe-283)
– send to <[email protected]> -- or via LIR Portal– RIPE NCC evaluates and approves request– complete IPv4 First Allocation Request Form (ripe-272) – send to <[email protected]> -- or via LIR Portal
• Minimum allocation size /21 (2048 addresses)
![Page 21: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/21.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 21
After the First Allocation Approval
• inetnum objects in the RIPE Database:– RIPE NCC hostmaster creates allocation
* LIR staff creates assignment(s)
• Whole allocation can be announced immediately * LIR can create route object for the whole allocation
AW=0 -- every subsequent assignment must be approved by the RIPE NCC
![Page 22: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/22.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 22
inetnum: 80.35.64.0 - 80.35.79.255netname: NL-BLUELIGHT-20000909descr: Provider Local Registry...status: ALLOCATED PAmnt-by: RIPE-NCC-HM-MNTmnt-lower: BLUELIGHT-MNTmnt-routes: BLUELIGHT-MNT
...
Examples of inetnum Objects
inetnum: 80.35.64.0 - 80.35.67.255netname: BLUELIGHTdescr: Infrastructure...status: ASSIGNED PAmnt-by: BLUELIGHT-MNTmnt-lower: BLUELIGHT-MNTmnt-routes: BLUELIGHT-MNT...
Mandatory protectionby the RIPE-NCC
Mandatory hierarchicalauthorisation using LIR-MNTNER(hostmaster will create one)
Mandatory protectionby the LIR-MNTNER
Recommended hierarchical authorisation
![Page 23: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/23.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 23
Questions?
![Page 24: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/24.jpg)
24Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Assigning ‘PA’ Address Space
• Assignment Process •Terminology
•Communication with hostmasters
• Provider Aggregatable (PA) Request form
• LIR Portal
![Page 25: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/25.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 25
Assignment Process, AW=0
LIR Evaluates Request
Approach RIPE NCC
(*) request > AW?
need 2nd opinion?
yes
no
no
yes
LIR Updates RIPE Database
LIR Updates Local Records
LIR Chooses Addresses
RIPE NCCevaluates &
approves
End User
![Page 26: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/26.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 26
Communication Process
robot
errors?
LIR
human hmLIR
questions?
online: via ‘LIR Portal’ ore-mail: <[email protected]>
Always include:- Reg-ID- your name- (ticket nr)
} * Evaluation
Re-send usingthe same ticket number
Re-send usingthe same ticket number
IP Request Form
Ticket Queue
yes
no
yesno
approval
![Page 27: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/27.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 27
LIR Contact Persons
RIPE NCC internal “reg” file for each registry– confidential– only contact persons can
• send requests• change contact info
• To update contact info: “LIR Portal”– create person objects in RIPE DB– “reg” file not updated from RIPE DB!
Members’ mailing lists<[email protected]> (lst-localir) ; <[email protected]> (lst-contrib)
H
H
![Page 28: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/28.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 28
LIR Portal• Secured web access to private RIPE NCC registry data
– https://lirportal.ripe.net/
• Viewing and editing LIR info and resources:– (contact, billing + online payment, IP allocations and assignments,
AS, status of tickets)
• Online Request Forms and “PA Assignment Wizard’
• Activate account• Create user accounts with different privileges
– These user accounts are not ‘LIR contact persons’ !– create “LIR contact persons” in General Menu (from user account)
• X.509 PKI
• feedback ? mailing list: <[email protected]>
New!
LIR Portal Demo
New!
![Page 29: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/29.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 29
Ticketing System
• Unique ticket nr per request• NCC#YYYYMMnnnn
• Include it in every message about the request– do not create duplicate tickets!
• Check status on web: open-ncc,open-reg, closed
– LIR Portal
Example
![Page 30: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/30.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 30
Hostmaster-robot
• Replies with:– Acknowledgement, – Warnings,– Error msg.
• Errors:– request NOT in ‘Ticket Queue’
• Keyword in ‘Subject’:– NOAUTO
![Page 31: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/31.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 31
When to Send a Request
If request size bigger than AW
• Separate request forms for:– each End User network– LIR’s own infrastructure
• can be in a single request: – LIR’s own network– blocks of IPs for server housing and web hosting– blocks of IPs for connection to End Users
![Page 32: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/32.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 32
How to Get it Right the First Time • Before sending:
– FAQ:• http://www.ripe.net/ripencc/faq/
– Short tips and tricks• http://www.ripe.net/ripencc/tips/tips.html
– IPv4 Address Assignment and Allocation Policies (ripe-288)– LIR Training Course Reference Booklet
• http://www.ripe.net/training/lir/material/refbook.doc
• ‘PA Assignment Wizard’ via LIR Portal• Request online via LIR PORTAL (syntax checked!)
– https:/lirportal.ripe.net DEMO• or: PA Assignment Request Form: (ripe-283):
– http://www.ripe.net/docs/iprequestform.html
New!
![Page 33: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/33.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 33
General Information
Example of the completed form– For the small ISP Laika, customer of the LIR Bluelight
#[General Information]# • request-type: pa-ipv4 do not change pre-filled fields!• x-ncc-regid: nl.bluelight
#[Address Space User]#• organisation-name: Laika• organisation-location: Amsterdam• website-if-available: www.laika-dog.nl• Does the organisation already have address space that can
meet the needs of this request? Enter “Yes” or “No” space-available: No
A
![Page 34: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/34.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 34
??
?
dynamic dial-up Amsterdam web/mail/ftp servers Amsterdamcustomers’ servers Amsterdamtraining room LAN AmsterdamAmsterdam office LAN dynamic dial-up Utrecht web/mail/ftp servers UtrechtInet cafe Utrechttraining room LAN Utrecht
/25 /27 /28 /28 /26 /25 /27 /28 /28 /24,/25,/26 totals: /24,/26,/27,/28
/25,/26,/28,/29 /24,/25,/27,28
Size in CIDR Imm 1yr 2yr Purpose
#[ Addressing Plan ]#
/25 /28 /28 /28 /27 /25 /28 /28 0
/25 /28 /29 /28 /27 0 0 /28 0
Real needs
/25 /27 /28 /28 /27,/28 /25 /27 /28 /28
Concrete plans
subnet:subnet:subnet:subnet:subnet:subnet:subnet:subnet:subnet:
cumulative numbers
subnet: /25 /25 /25 /25 dynamic dial-up Amsterdam
subnet: /25 0 /25 /25 dynamic dial-up Utrecht
subnet: /26 /27 /27 /27,/28 Amsterdam office LAN
subnet: /27 0 /28 /27 web/mail/ftp servers Utrecht
subnet: /27 /28 /28 /27 web/mail/ftp servers A’dam
subnet: /28 /28 /28 /28 training room LAN Amsterdam
totals: /24,/25,/28 /25,/26 /24,/26,/28 /24,/25
Total of the request
![Page 35: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/35.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 35
number of subnets: 6address space returned:
195.20.42.0 - 195.20.42.127 to UpstreamISP by 20030725
… (here: table from previous slide)
Which netname will be used when registering this network in the RIPE Database?
netname: LAIKA-NET
#[ Addressing Plan ]#...continued
![Page 36: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/36.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 36
#[Equipment description]#
equipment-name: Dial-up Servermanufacturer-name: Cycladesmodel-number: PR4000other-data: capacity 32 lines each, 2 x 4 = 8 servers
equipment-name: Hosting Servermanufacturer-name: Dellmodel-number: various modelsother-data: 23 + 19 servers
![Page 37: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/37.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 37
#[Network description]#Amsterdam web hosting and dynamic dial-up: 22 domain hosting clients (ftp+mail)200 http 1.1 websites on 1 server4 access servers
Utrecht web hosting and dynamic dial-up: 18 domain hosting clients (ftp+mail)150 http 1.1 websites on 1 server4 access servers
#[Network diagram]#
Please enter “Yes” or “No” if you have attached a network diagram in JPEG or Postscript format.diagram-attached: No
![Page 38: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/38.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 38
Questions?
![Page 39: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/39.jpg)
39Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Evaluation of Request
![Page 40: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/40.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 40
Evaluation -- Address Space User
• Does the organisation already have address space that can meet the needs for this request? Yes/No?– From other LIRs?
– Query the RIPE DB• use “Glimpse”
Ask your customer
![Page 41: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/41.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 41
Evaluation -- Addressing Plan Returning addresses?
• Subnet purpose description
• All subnets classless?– network can be several CIDR blocks
• Utilisation: 25% immediately, 50% in one year
• Time frame: – other forecast periods can be used
![Page 42: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/42.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 42
Evaluation Policies• Policy document: ripe-288
– dynamic dial-up! not static
– name-based virtual web hosting! not IP-based• exceptions (SSL, ftp&mail servers..)
– special verification methods for more than /20:also for xDSL, cable, GPRS… • http://www.ripe.net/rs/ipv4-verification.html
– DHCP recommended
![Page 43: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/43.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 43
Renumbering Request
• Customer changing providers– returning PA space to old LIR
– replacing PI space with PA
• in Addressing Plan fill out:address-space-returned: 195.42.0.0/25 to ISP-A 20030923
“return” lines in reg fileH
![Page 44: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/44.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 44
Possible Additional Information
• Pointer to web site – company – unusual hw / sw
Deployment plan – receipts
Network diagram
• Fax or mail info (+3120-5354445)
– handled confidentially • include ticket nr, reg-id, hostmaster’s name
A
![Page 45: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/45.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 45
Sample Deployment Plan• When big expansion is planned• Must match addressing plan
size in CIDR Imm. 1yr 2yr purpose
subnet: /21 0 /22 /21 London popsubnet: /21 0 /22 /21 Berlin popsubnet: /21 0 /22 /21 Moscow popsubnet: /21 0 /22 /21 Paris pop
PlannedoperationalDate
DateEquipmentordered
Type of Equipment
Number of hosts
Location
02/200405/200406/200409/2004
08/200311/200311/2003--------
modemsmodemsmodemsmodems
2040204020402040
LondonBerlinParisMoscow
![Page 46: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/46.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 46
Approval
• Approval message sent to LIR– size
• (e.g. 400 IPs = /24, /25 & /28)– netname– date
• ticket closed
• LIRs archives approval message– plus all original documents
next step: Registration in DB
![Page 47: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/47.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 47
Questions?
![Page 48: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/48.jpg)
48Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Registering Address Spacein the RIPE Database
– How to create network object– Managing LIR’s allocation
![Page 49: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/49.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 49
Why Register?
• Last and important step in the assignmen process– contact info – overview– uniqueness
• Address space considered in use only if registered in RIPE DB
* or else delays in : new allocation, reverse del, AW raise, audit…
• Responsibility of the LIR
![Page 50: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/50.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 50
Creating Network (inetnum) Objects
• via “Webupdates” (Demo)• or via email interface: <[email protected]>
– send completed “network template” (whois -t inetnum)– with the (only) keyword NEW in ‘subject’
• to avoid over-writing existing objects
• or done automatically if using “PA Assignment Wizard” (LIR Portal)
‘inetnum’ value in ‘dash’ or ‘slash’ notation!• e.g. 80.35.64.32 - 80.35.64.63 or 80.35.64.32/27
Keep netname as approved in request Has to pass hierarchical authentication
New!
![Page 51: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/51.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 51
Valid Assignments (Summary)
• Larger than AW:– Approved, and registered in RIPE DB
• one or more objects• correct date • size and netname as approved
* Within AW: – Registered in the RIPE DB
• netname pointing to End User
* or remarks: INFRA-AW
• “Assignment is only valid as long as original criteria remain valid” (ripe-288)
![Page 52: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/52.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 52
Questions?
![Page 53: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/53.jpg)
53Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Assignment Windows and How to Get One
![Page 54: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/54.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 54
Assignment Window:Definition for End Users
– Maximum number of IP addresses the LIR can assign without prior approval of RIPE NCC
– AW is per LIR
AW is per 12 months per each End User
AW is 0 initially, then raised gradually
policy set by address-policy-wg
R
![Page 55: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/55.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 55
Initially: AW=0
• SendEVERY End User’s request
andEVERY request for LIR’s infrastructure
to the RIPE NCC
• Separate request forms – for each End User network
• Do not send more than ~ 5 requests at once
![Page 56: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/56.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 56
When Is the AW Raised ?
• Correct requests • Policies applied• Valid DB objects
• AW = average size of requests
• Approach RIPE NCC: <[email protected]> if AW not raised
![Page 57: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/57.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 57
When Is the AW Lowered ?
• New LIR staff need training
• Negative auditing report
Find out the AW size:– asm-window line(s) in the “reg” file– LIR Portal (Demo)
H
![Page 58: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/58.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 58
Assignments = or < AW LIRs’ Responsibilities :
Evaluate all requests
• Keep documentation for all assignments– RIPE NCC may ask for it later
• Register all assigned networks in RIPE DB– choose netname
• Remind customer’s previous ISP after renumbering – to delete old DB objects
R
![Page 59: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/59.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 59
Assignment Process for an End User
LIR Evaluates Request
Approach RIPE NCC
(*) request > AW?
need 2nd opinion?
yes
no
no
yes
LIR Updates RIPE Database
LIR Updates Local Records
LIR Chooses Addresses
RIPE NCCevaluates &
approves
(*) Total size of this request plus all previous assignments of this End User within the last 12 months, that haven’t been requested from the RIPE NCC
End User
![Page 60: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/60.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 60
Questions?
<[email protected]>, LIR Portal
![Page 61: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/61.jpg)
61Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Sub-allocations
• Sub-allocations • Assignments in Sub-allocations• Resellers and End-Users
![Page 62: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/62.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 62
Sub-allocation • From LIR to Reseller
– only if LIR has AW ! – no approval needed
• Up to 400% of LIR’s AW – for each customer within any 12 months
• Minimum size: /24– sub-allocation only possible if AW>= /26
• Maximum size: /20 (even if AW >22!)
New!
![Page 63: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/63.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 63
Registering Sub-allocations
• LIR must register it in RIPE DB– LIR has final responsibility for whole sub-allocation
• inetnum object: – “status: SUB-ALLOCATED PA”
– use Reseller’s mntner in mnt-lower *
• Considered as ’addresses in use’– new allocation
New!
![Page 64: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/64.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 64
Assignments from Sub-allocations
• From Reseller to itself or to End User
• Size of assignments:– AW rules also apply within sub-allocations– Reseller can use “INFRA-AW” rule for own infrastructure
• Assignments must be registered in the RIPE DB: – “status:ASSIGNED PA”– netname pointing to End User
• RIPE NCC may ask for documentation later
New!
![Page 65: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/65.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 65
Sub-allocations to Resellers
• LIR can sub-allocate address space to a Reseller• Reseller can assign address space to End User
• …but if no sub-allocation made:– LIR makes separate assignments to
• Reseller’s infrastructure• End User
– Separate assignments must be• requested (if above AW)• registered in the RIPE DB
New!
![Page 66: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/66.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 66
Using Sub-allocation for a Reseller
right Sub-allocation for
ISP ENGOS &
all its (future)
customers
ENGOS makes assignments for its own infrastructure and for its End Users from
its sub-allocatiom
BlueLight’s AllocationNew!
![Page 67: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/67.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 67
If Not Using Sub-allocation for a Reseller
wrong Assignment for
ISP ENGOS &
all its (future)
customers
Overlapping (second level) assignments for separate customers of ENGOS &
ENGOS’ own infrastructure
right
Internal Reservations
for ENGOS’s customers
BlueLight’s Allocation
assignments for separate customers of ENGOS & ENGOS’ own
infrastructure
Overlapping = two inetnum objects with the status: ASSIGNED PA partially covering the same range
BlueLight’s Allocation
![Page 68: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/68.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 68
• Aggregate
• Use sub-allocations
• Make sensible internal “reservations”
– good: space for some customers to grow
– bad: fragments allocation
How to Manage Your Allocation
![Page 69: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/69.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 69
Questions?
![Page 70: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/70.jpg)
70Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Reverse Delegation Procedures
We assume you already understand DNS
The Course Reference Booklet has extra configuration examples for this section
![Page 71: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/71.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 71
Why Do You Need Reverse DNS Delegation ?
• All host-IP mappings in the DNS (A record) should have a corresponding IP-host mapping (PTR record)
• Otherwise– users blocked from various services (ftp, mail, IRC)
– troubleshooting more difficult (traceroute)
– more useless network traffic
• Removed if bills not paid! email: <[email protected]>
![Page 72: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/72.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 72
Request Procedure Who Can Request and When?
• Reverse delegation requests must come from LIRs and not End Users
• /16 zones can be delegated to the LIR immediately after allocation
• /24 zones are delegated– to LIR or End User as the address space is used
as valid assignments
![Page 73: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/73.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 73
Request the Delegation
• Send domain template to “Marvin”, <[email protected]>– always include reg-ID
Marvin performs checks (see next slide)
• After making ‘checks’, “Marvin” enters NS lines into the parent zone file and sends an acknowledgement.
![Page 74: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/74.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 74
What Does “Marvin” Check?
• Checks if the nameserver setup is correct(RFC1912)
• Checks that the address space is either:– a valid assignment (in each /24 zone)– a valid /16 (or shorter prefix) allocation
• Creates the domain object in the database (DB Syntax checked)
![Page 75: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/75.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 75
Example domain Objectwhois -t domain
domain: 142.35.80.in-addr.arpa
descr: Reverse delegation for Bluelight’s Customers
Splitblock
admin-c: JJ231-RIPE
tech-c: JAJA1-RIPE
zone-c: WF2121-RIPE
nserver: ns.bluelight.nl
nserver: ns2.example.nl
mnt-by: BLUELIGHT-MNT
changed: [email protected]
source: RIPE
Notice: DB SW will add date!
names instead of IP addresses
no DOT at the end
![Page 76: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/76.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 76
Problems with inaddr Robot?
• Diagnostics are sent to the requester• 20 warning points are considered an error
– correct errors and re-send to <[email protected]>
• Full documentation :– http://www.ripe.net/reverse/
• If problems continue, contact– <[email protected]> for DNS technical questions.
include full error report + inaddr ticket nr– <[email protected]> for assignment validity issues.
include full error report + assignment ticket nr
![Page 77: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/77.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 77
Updating the Delegation• Modifying the DNS: change the nserver lines in
the domain object and send it to “Marvin”.
• Deleting a delegation: send the domain object with the extra attribute to Marvin: delete: <reason, email addr>
• For modifying contact details: send updated domain objects to “Marvin”
• In all cases: Must pass authentication
![Page 78: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/78.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 78
Reverse Delegation of /16 Allocation
• Requirements and procedures the same as /24, except– ns.ripe.net is a mandatory secondary nameserver
• We suggest you add your maintainer as a mnt-lower on the domain object
• LIRs should continue to check sub-zone setup before delegating /24s– web check or send to <[email protected]> with
Subject: TEST
![Page 79: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/79.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 79
Multiple /24 Delegations
• Up to 128 reverse domain objects can be sent in one e-mail, even if not consecutive
• Shorthand notation for consecutive zones: eg: 10-15.35.80.in-addr.arpa
• Each domain object must be signed separately if auth: PGP-KEY in the mntner
![Page 80: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/80.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 80
< /24 Delegations
Reverse delegation also possible for a /24 shared by several customers - not a reason for classful assignments
• RIPE NCC delegates the whole /24 to the LIR
• Customers can run own primary nameserver if– LIR delegates parts as address space gets assigned– use CNAME to direct to extra domain
(RFC 2317) R
![Page 81: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/81.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 81
Questions?
![Page 82: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/82.jpg)
82Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
PI Request
![Page 83: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/83.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 83
PA vs. PI Assignments
• Provider Aggregatable• End User addresses out of LIR’s allocation• must be returned when changing providers
• Provider Independent• End User addresses directly from RIPE NCC• can be kept when changing providers
• Make contracts (ripe-127)• only way to distinguish PA and PI space
![Page 84: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/84.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 84
Reasons for Requesting PI
Multihoming• Independence
– e.g. IXP, ccTLD
• Needing unique / portable address space– but not the whole allocation– not distributing addresses to End Users
• Changing providers often• Routing part of the network separately
![Page 85: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/85.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 85
3 Ways of Multihoming• LIR (PA allocation & ASN)
• PI addresses (PI assignment & ASN) ISPs may filter on “minimum allocation size” (ripe-269) next assignment not aggregatable wasting ASN; larger routing table
Multihoming with PA assignments, without ASN future aggregation overlapping prefixes may be filtered out renumbering
![Page 86: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/86.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 86
Multihoming with PA Addresses
80.1/16
80.1/16
80.1.0/24195.8/16
195.8/16
80.1.0/24
LIR2AS2
LIR3AS3
= route announcement Not a recommendation / BCP!
80.1.0/24
![Page 87: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/87.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 87
Requesting PI Space
• LIR sends request on behalf of customer
• Request online via LIR PORTAL• https://lirportal.ripe.net
• or: Complete ‘PI Assignment Request Form’ (ripe-285)• http://www.ripe.net/ripe/docs/pi-requestform.html
![Page 88: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/88.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 88
Requesting PI Space
• Differences from “PA Request Form”:
– in #[Initial Information]# template answer additional questions:• why does customer want PI (and not PA)?• requesting extra address space for routing or administrative
reasons?• aware of consequences?
– In #[Database Templates]# • fill out inetnum template
![Page 89: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/89.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 89
Evaluation of PI Requests
• PI discouraged by the RIPE community!– LIRs should convince End Users to use PA– LIR explains consequences to End User, in contract
(example: ripe-127)
• Same criteria as PA – conservative estimates– classless
• Assignment is only valid as long as original criteria remain valid (ripe-288)
![Page 90: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/90.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 90
After the PI Assignment Approval
• RIPE NCC will – assign a PI block– create assignment object in RIPE DB
• LIR / End User must not (sub)assign further• LIR assists End User with reverse DNS
delegation, route object, mntner• If End User changes provider
– old LIR adds new ISP’s mntner– and removes own mntner
![Page 91: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/91.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 91
Questions?
LIR Portal Only for resources requested by/through your LIR.
![Page 92: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/92.jpg)
92Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net
Autonomous System Numbersand the Routing Registry
• It is assumed that attendee is familiar with BGP routing, and has interest in obtaining public ASN
![Page 93: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/93.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 93
Autonomous System• Definition:
– “One or more connected networks (…) with a SINGLE and CLEARLY DEFINED routing policy” (RFC-1930)
– every AS: unique AS number
• IANA allocates AS numbers to RIRs
• RIR assigns AS number– to LIR or to End User (via LIR)
AS number and route object registered in Routing Registry (part of RIPE DB)
![Page 94: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/94.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 94
How to Get an AS Number ?• Request online via LIR PORTAL
– name of organisation
– address prefix to be announced with this requested AS#
– ticket nr of pending assignment request (if applicable)
– peering contacts’ e-mails
– aut-num object template
– mntner object template
– your name
• or: Complete ASN request form: ripe-278• http://www.ripe.net/ripe/docs/asnrequestform.html
– Send to <[email protected]>
either or
![Page 95: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/95.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 95
Criteria for Evaluation of ASN Requests
• Mandatory: multihomed and unique routing policy– e-mail addresses of peers
• Feasible to peer with specified ASNs?
• Can private ASN be used ?
AS Number Policies (ripe-263)
![Page 96: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/96.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 96
RPSL
• “Routing Policy Specification Language” (RFC 2622)
• “Using RPSL in Practice” (RFC 2650)
• All BGP parameters can be described in RPSL
• import,export, “action” can be: pref=<value> or other parameters
– smaller “pref” = more preferred route
![Page 97: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/97.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 97
AS2
aut-num: AS2
import: from AS2 action pref=20; accept AS2 export: to NEW announce AS2
AS Example
NEWaut-num: NEWexport: to AS2 announce NEW
Internet
aut-num: AS3AS3 export: to NEW announce ANY
import: from NEW action pref=200; accept NEW
import: from AS3 action pref=100; accept ANY
import: from NEW action pref=120;
accept NEW
export: to AS3 announce NEW
ANY
import: from AS2 action pref=200; accept ANY
![Page 98: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/98.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 98
Registration in RIPE Database
• RIPE NCC hostmaster - creates aut-num object - informs requester
• User keeps up to date:– routing policy (aut-num, route objects)– contact info (person/role, mntner)
User creates route object
![Page 99: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/99.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 99
aut-num: NEWas-name: BLUELIGHTdescr: Bluelight AS#
import: from AS2 action pref=20; accept AS2 import: from AS3 action pref=100; accept ANY import: from AS2 action pref=200; accept ANY
export: to AS2 announce NEW export: to AS3 announce NEW admin-c: JJ231-RIPE
tech-c: JAJA1-RIPEmnt-by: BLUELIGHT-MNTmnt-routes: BLUELIGHT-MNTchanged: [email protected]: RIPE
aut-num TemplateAS42
AS42 AS42
Object
20011010
![Page 100: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/100.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 100
The “route” Object route: 80.35.64.0/20 descr: BLUELIGHT-NET origin: AS42 mnt-by: BLUELIGHT-MNT mnt-routes: BLUELIGHT-OTHER-MNT changed: [email protected] source: RIPE
• ‘route:’ and ‘origin:’ primary key • LIR creates route object(s) mnt-routes for hierarchical authorisation
![Page 101: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/101.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 101
Creating “route” Object Pass multiple authentications
Add appropriate mntner in mnt-routes of allocation object via LIR Portal
1. mntner in the mnt-routes of the originating ASN
• if not there, then mnt-lower, then mnt-by
AND
2. mntner in the mnt-routes of the address space if not there, then mnt-by
AND
3. mntner referenced in the route object itself
![Page 102: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/102.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 102
Internet Routing Registry• Globally distributed DB with routing policy information• Tools: http://www.ripe.net/db/irrtoolset/
– traceroute with info of traversed ASes (prtraceroute)– create aut-num based on router conf (aoe)– configure router based on IRR (rtconfig)– list routes registered by the specified AS (roe)
• Routing Registry Consistency Check (RRCC)
• RIPE Routing Registry– subset– “-a” flag to query all mirrored Routing Registries
Routing Registry course: http://www.ripe.net/training/rr/
![Page 103: Local Internet Registries. RIPE 47 - IP Request Tutorial. 1 Welcome to the RIPE NCC IP Request Tutorial January 27, 2003 RIPE Network](https://reader035.vdocument.in/reader035/viewer/2022062301/5697c01b1a28abf838ccf57d/html5/thumbnails/103.jpg)
Local Internet Registries . RIPE 47 - IP Request Tutorial . http://www.ripe.net 103
Questions?
LIR Portal Only for resources requested by / through your LIR.