Re: [c-nsp] Need a Primer on WCCP / Web Hijacking

wccp should work..google around for some example configs, there is plenty around, it is pretty straightforward..it is the overall solution that you will need to decide on what will be best fit for your problem/environment wccp on router gre tunnel squid box auth to radius etc, whatever or you

Re: [c-nsp] MPLS multilink MTU

Hi Rodney It's works! after changing physical interface MTU instead of using mpls mtu xxx I have attached the debug output before and after changing. Before: Jul 30 06:07:32.398: Se3/5:0 LCP: O CONFREQ [Listen] id 254 len 23 Jul 30 06:07:32.398: Se3/5:0 LCP:MagicNumber 0x3C11DFE2

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

I am going for a collapsed core design and using 4948's for top of rack access. From: Mike Louis [mailto:[EMAIL PROTECTED] Sent: Tue 7/29/2008 7:56 PM To: Teller, Robert; Tony Varriale; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] 6509 ACE/FWSM

[c-nsp] 2950 L2 ?

Hi can someone confirm me that 2950 do or don't do L3 ? I'll need to configure many vlan gateway on, but I don't remember if I can do it on that device. thx ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] 2950 L2 ?

Sorry the title should be : 2950 L3 ? On Wed, Jul 30, 2008 at 9:38 AM, julien leroiso [EMAIL PROTECTED]wrote: Hi can someone confirm me that 2950 do or don't do L3 ? I'll need to configure many vlan gateway on, but I don't remember if I can do it on that device. thx

Re: [c-nsp] 2950 L2 ?

The 2950 switch is a Layer 2 switch, and does not do any Layer 3 switching. On Wed, Jul 30, 2008 at 9:43 AM, julien leroiso [EMAIL PROTECTED] wrote: Sorry the title should be : 2950 L3 ? On Wed, Jul 30, 2008 at 9:38 AM, julien leroiso [EMAIL PROTECTED]wrote: Hi can someone confirm me that

Re: [c-nsp] Need a Primer on WCCP / Web Hijacking

Mikrotik with Hotspot Profile... for cheaper fast solution rgs a. rahman isnaini rangkayo sutan Jonathan Charles wrote: Cust has access points open to public, they need to hijack the web requests and take them a web page where they enter a security code, and then allow them... So, I need to

Re: [c-nsp] IPsec Throughput on Cisco 800 series routers

Since it is PPPoE and IPSEC on the top then I would say play a little with your MTU since IPSEC and PPPoE demand a chunk from it. Then you have to consider the size of your encrypted packets. Do you do payload or datagram encryption (mode)? A really good way I recently tuned an IPSEC tunnel was

[c-nsp] How can do Multi-Interface Path with DMVPN or GET-VPN

Hi All, I have deployed six 1812-Router at Headquarter and Branch using DMVPN. Recently, all sites add new line(ADSL 8M/640K). I want to use two lines at the same time below... 1. one line transmit critical data(VoIP, Video Conference...), another transmit normal data(Web) 2. When one line

Re: [c-nsp] Is proxy-arp evil?

Re:) [EMAIL PROTECTED] (Whisper) wrote: There was a big discussion on this list about proxy-arp several months ago. And I do suppose that's why I find proxy-arp quite suspicious, and why I asked about someone having a different idea for a solution. Do a search for the forums that keep this

Re: [c-nsp] Need a Primer on WCCP / Web Hijacking

or pfsense captive portal (easy to set up, cheaper than mikrotik) or openwrt + chilispot (somewhat more difficult to set up, even cheaper yet) ---rob a. rahman isnaini r.sutan [EMAIL PROTECTED] writes: Mikrotik with Hotspot Profile... for cheaper fast

[c-nsp] Dont let it happen to you...

http://supportwiki.cisco.com/ViewWiki/index.php/Catalyst_3550_switch_reloads_and_gives_the_%22EXPRESS_SETUP-6-CONFIG_IS_RESET%22_error_message_when_the_mode_button_is_pressed_for_a_longer_time_during_a_password_recovery Sam Sam Hall Robert Wiseman Sons Ext: 6655 Tel: +44 (0)1355 270655

Re: [c-nsp] 2950 L2 ?

Yep, the 2950 can have a maximum of 1 layer 3 interface active (I assume for management). If you have a Layer3 Vlan interface up, and try to bring a second one up, it automatically disables the first. (Not that I've ever accidentally done that and had to drive out to the chassis to console in

Re: [c-nsp] MPLS multilink MTU

Ah ha...so with the physical MTU (which please start using it over mpls mtu) we picked up on that and adjusted the MRRU negotiated value it appears. Rodney On Wed, Jul 30, 2008 at 02:34:41PM +0800, Soon Kian wrote: Hi Rodney It's works! after changing physical interface MTU instead of

Re: [c-nsp] Is proxy-arp evil?

The router would proxy arp if it has a more specific route out another interface. But it's a hack and I would not design my network around it working personally. Rodney On Wed, Jul 30, 2008 at 01:05:12PM +0200, Elmar K. Bins wrote: Re:) [EMAIL PROTECTED] (Whisper) wrote: There was a

[c-nsp] Quick 6500 Sup2 / BGP / memory...

Quick question for someone that's been there done that from someone who has said I thought it would work more often than I'd like :-) Can you get a full BGP feed (two peers) into a Sup2? with uRPF? Which RAM needs to be upgraded? I found out the hard way it won't fit into a SUP2/MSFC2/PFC2

Re: [c-nsp] Quick 6500 Sup2 / BGP / memory...

On Wed, Jul 30, 2008 at 09:59:35AM -0400, Jeff Kell wrote: Quick question for someone that's been there done that from someone who has said I thought it would work more often than I'd like :-) Can you get a full BGP feed (two peers) into a Sup2? with uRPF? Which RAM needs to be

[c-nsp] 6500/SUP720 SXH boot loader images

Release notes for 12.2(18)SXF include the following under Feature Set Guidelines and Restrictions: There are no 12.2SX boot loader images: none are required. As expected, i didn't find any to download too. Release notes for 12.2(33)SXH do not include the above statement. As expected (!) i

Re: [c-nsp] interpretation of sysTrafficPeakTime

Arie, Actually i was using sh platform hardware capacity fabric to see it through the cli. Still, my main concern is... should i stick to my 1st explanation or the 2nd one? -- Tassos Arie Vayner (avayner) wrote on 29/7/2008 11:22 μμ: Tasso, Your analysis makes sense. It seems that this

Re: [c-nsp] How can do Multi-Interface Path with DMVPN or GET-VPN

I think the best solution here would be to look at deploying OER/(now called PfR) for this. I've never done it myself but have seen scenarios where it's targeted at doing pretty much exactly what you are asking. Rodney On Wed, Jul 30, 2008 at 06:44:03PM +0800, Yang Darren wrote: Hi All, I

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

My plan is to collapse my core switch(3750), pix, and css devices into two 6509's with the fwsm/ace/Gig-e modules. I am just trying to decide the best way to segregate the internal lan and middle tier dmz's. Our experience with 6500/7600 and IOS support makes this look like a bad

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

I already have the hardware and I am prepping for migration. -Original Message- From: Kevin Graham [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2008 9:57 AM To: Gert Doering; Teller, Robert Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 6509 ACE/FWSM Modules?? My

Re: [c-nsp] 2950 L2 ?

With only 1 exception I have seen.. 29xx layer 2 3xxx / 45xx / 65xx layer3 The exception is the 3500XL-- Layer 2.. Later, Jim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of julien leroiso Sent: Wednesday, July 30, 2008 3:39 AM To:

Re: [c-nsp] 2950 L2 ?

Hi, On Wed, Jul 30, 2008 at 02:58:09PM -0400, Jim McBurnett wrote: With only 1 exception I have seen.. 29xx layer 2 3xxx / 45xx / 65xx layer3 The exception is the 3500XL-- Layer 2.. Well, a 65xx with Sup1 or Sup2 and no MSFC is also L2 only... And a 2948G-L3 is neither L2 or L3 (it's a

Re: [c-nsp] interpretation of sysTrafficPeakTime

The value represents the amount of time that has passed since the highest recorded peak. I don't know if this value rolls over or not. I don't think it does. Tassos Chatzithomaoglou [EMAIL PROTECTED] wrote: Arie, Actually i was using sh platform hardware capacity fabric to see it

[c-nsp] WebVPN/SSL VPN module for 6500

Dear All, Does anyone know if there is any replacement module planned for WebVPN or SSL VPN for the 6500 chassis ? The current WebVPN Services Module is apparently already or will soon be declared EOL/EOS. http://www.cisco.com/en/US/prod/collateral/modules/ps2706/ps6404/product_dat

[c-nsp] Netflow / 3560 platform

Can anyone explain why Cisco fails to support Netflow on the 3560 Catalyst switches? /b ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Netflow / 3560 platform

Hi, adding back cisco-nsp On Wed, Jul 30, 2008 at 6:54 PM, Buhrmaster, Gary [EMAIL PROTECTED]wrote: Can anyone explain why Cisco fails to support Netflow on the 3560 Catalyst switches? They did not build the hardware to support it. One of the many feature/cost choices made on that

Re: [c-nsp] 32 bit ASN

I'm asking about this. I'll get back with you. It's going to be in a 12.0(33)S rebuild for sure. But I need to check back on what the 12008 decision was...ie: only in 32S rebuilds? On Mon, Jul 28, 2008 at 12:24:56PM -0700, Troy Beisigl wrote: Hi, Does anyone know if the 32 bit ASN support

Re: [c-nsp] WebVPN/SSL VPN module for 6500

Zahid Hassan wrote: Dear All, Does anyone know if there is any replacement module planned for WebVPN or SSL VPN for the 6500 chassis ? The current WebVPN Services Module is apparently already or will soon be declared EOL/EOS.

Re: [c-nsp] Dont let it happen to you...

Sam Hall wrote: http://supportwiki.cisco.com/ViewWiki/index.php/Catalyst_3550_switch_reloads_and_gives_the_%22EXPRESS_SETUP-6-CONFIG_IS_RESET%22_error_message_when_the_mode_button_is_pressed_for_a_longer_time_during_a_password_recovery I ran into this problem a year or so back. Our cable guy