Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Lincoln Dale
Jason Koh wrote: From what I see, it looks like a problem with NVRAM. show running-config doesn't work on the (nvram-stored) running-config. Any insights on this will be greatly appreciated. contact TAC, they can help debug it further based on the actual configuration stored on your

[c-nsp] How to enable IS-IS MIB support

2008-09-30 Thread vijaya simha reddy aedavelli
Hi all, I've CISCO router with IOS 12.2(28)SB7 and model 7000 series. It is supporting IS-IS but IS-IS MIB support is not there. My questions are 1) Is there any patch/way available to enable this IS-IS MIB(standard/experimental) support for this IOS. 2) How to enable IS-IS MIB support.

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Phil Mayers
Jason Koh wrote: Hi there I have a strange problem with a pair of cat6509s. Both are connected to each other via OSPF and IBGP, with EBGP with my upstream providers. Whenever I use show running-config, it will pause for an extremely long time after the line Building Configuration. It happens

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Jason Koh
Hi there. 1. The time taken for show run is about 7-10 minutes long 2. #sh start Using 67275 out of 391160 bytes Can't really tell how much lines are there. It's a lot. 3. ROM: System Bootstrap, Version 12.1(11r)E1, RELEASE SOFTWARE (fc1) BOOTLDR: c6sup2_rp Software (c6sup2_rp-PS-M), Version

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Phil Mayers
Jason Koh wrote: Hi there. 1. The time taken for show run is about 7-10 minutes long 2. #sh start Using 67275 out of 391160 bytes Can't really tell how much lines are there. It's a lot. For comparison, we've got: Using 220185 out of 1964024 bytes ...and ~8300 lines in the config and an

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Michel Grossenbacher
Given its not a solution to your problem, but you can use the *linenum*keyword behind the sh start command to display the line numbers. So you know how many line numbers you got. best regards Michel 2008/9/30 Jason Koh [EMAIL PROTECTED] Hi there. 1. The time taken for show run is about 7-10

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Phil Mayers
Michel Grossenbacher wrote: Given its not a solution to your problem, but you can use the *linenum*keyword behind the sh start command to display the line numbers. So you know how many line numbers you got. Maybe on some versions of IOS, but certain not on any 12.2SX release I've ever seen

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Michel Grossenbacher
Uhm my bad, yes you're right. I dont know why I still think that all IOS versions got the same architecture and base features, I should know it by now :-) 2008/9/30 Phil Mayers [EMAIL PROTECTED] Michel Grossenbacher wrote: Given its not a solution to your problem, but you can use the

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Jeff Kell
Michel Grossenbacher wrote: Uhm my bad, yes you're right. I dont know why I still think that all IOS versions got the same architecture and base features, I should know it by now :-) Indeed. If it looks like a duck, walks like a duck, and quacks like a duck, it's probably an Early Deployment

Re: [c-nsp] Maximizing Router capabilities

2008-09-30 Thread Rodney Dunn
I got in touch with the ASR1000 PM's. I had remembered seeing a discussion on it. I can see both sides of the fence on this one. Originally what the BU really wanted was two feature sets (Base and Advanced Enterprise Services) and they were priced accordingly. A number of customers wanted a

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread David Freedman
Well, you are waiting for NVGEN which ... snip I've just found a URL which explains it so I don't have to : http://6200networks.com/2008/09/17/configuration-generation-performance-enhancement/ I can tell you I have NVGEN caching enabled on 12.2SXH2a on SUP720 router(config)#parser config ?

[c-nsp] FWSM breaks router ACL

2008-09-30 Thread Jeff Fitzwater
I have FWSM running 4.0(2) in 6509 with sup 720 CXL running 12.2(33)SXH2a The FWSM runs in transparent mode and appears between our ISPs and edge router. The FWSM has 3 BVIs , one for each ISP. The same router connects to 3 downstream routers via 3 different gig interfaces. With the

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Ross Vandegrift
On Tue, Sep 30, 2008 at 02:55:52PM +0100, David Freedman wrote: Well, you are waiting for NVGEN which ... snip I've just found a URL which explains it so I don't have to : http://6200networks.com/2008/09/17/configuration-generation-performance-enhancement/ I can tell you I have NVGEN

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread David Freedman
Well, do you have a lot of VLANs configured? Since vlan config is now done through the running-config as well, I'm imagining NVGEN has to parse the vlan.dat as well , if it is big I would imagine this adding to the NVGEN running time. Dave. Ross Vandegrift wrote: On Tue, Sep 30, 2008 at

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Ross Vandegrift
On Tue, Sep 30, 2008 at 03:13:46PM +0100, David Freedman wrote: Well, do you have a lot of VLANs configured? Yea - on the order of a thousand, with SVIs and the whole nine yards. The config is over 500kiB. Since vlan config is now done through the running-config as well, I'm imagining NVGEN

Re: [c-nsp] FWSM breaks router ACL

2008-09-30 Thread Ryan Hughes
This sounds like similar issues one of my customers has had on this code train with the FWSM's. Here's the bug id: CSCsI39710. We had to upgrade the code to SXH4 to resolve this. It may be something else but the experience sounds similar to what he was experiencing. On Tue, Sep 30, 2008 at 9:41

[c-nsp] SA-VAM2+ usage problem?

2008-09-30 Thread Nemeth Laszlo
Hello, I have two 7201 (c7200p-advipservicesk9-mz.124-15.T3.bin) routers with SA-VAM2+ modules. I have a tunnel interface between this routers. If I make a ~24Mbit/sec traffic into this tunnel, the routers CPU's goes to 90%. It was the performance without VAM2+ too. So the VAM2+ modul

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Dmitry Kiselev
Hello! On Tue, Sep 30, 2008 at 02:55:52PM +0100, David Freedman wrote: I can tell you I have NVGEN caching enabled on 12.2SXH2a on SUP720 router(config)#parser config ? cache Cache the configuration It is a bit dangerous. I have seen invalid runing config output while parser cache

Re: [c-nsp] Converting OSPF backbone to iBGP

2008-09-30 Thread Dan Armstrong
A quick addition to this thread: Assuming that your IGP carries is only point to point loopbacks... In an all iBGP network - what do you do with customer's that are using your address space? Do you redistribute Connected ( static routes) on your access routers into iBGP? I assume that's

Re: [c-nsp] SA-VAM2+ usage problem?

2008-09-30 Thread Luan Nguyen
On average, the VAM2+ should be able to do ~60Mbps VPN traffic (on a 7206VXR NPEG2) Maybe try to use IPSEC profile configuration instead of the legacy interface crypto map configuration. And also, try a different IOS. There should be at least a 12.4.15T7 out there I believe.

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Tassos Chatzithomaoglou
We have 2 6500/SUP2 running old 12.1(26)E9 and having almost 1MB of uncompressed config and 14500 lines: 6500#sh start Using 178291 out of 391160 bytes, uncompressed size = 976219 bytes sh run takes about 10 sec and sh start only 1 sec. On the other hand wr mem takes about 80 sec (compression

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Justin Shore
Dmitry Kiselev wrote: Hello! On Tue, Sep 30, 2008 at 02:55:52PM +0100, David Freedman wrote: I can tell you I have NVGEN caching enabled on 12.2SXH2a on SUP720 router(config)#parser config ? cache Cache the configuration It is a bit dangerous. I have seen invalid runing config output

Re: [c-nsp] FWSM breaks router ACL

2008-09-30 Thread Jeff Fitzwater
Ryan do you hve any info on that BUG ID CSCsI39710? I cannot find it in the BUG lookup tool nor do I see the IOS SXH4. Thanks for the info. Jeff On Sep 30, 2008, at 10:28 AM, Ryan Hughes wrote: This sounds like similar issues one of my customers has had on this code train with the

Re: [c-nsp] Converting OSPF backbone to iBGP

2008-09-30 Thread Dan Armstrong
Unfortunately our access network is highly distributed, consequently our address space is highly de-aggregated at the access layer. We shove our Supernets into iBGP regionally and currently let our IGP sort out the lower layers... which is what I want to get away from. Mark Tinka wrote:

Re: [c-nsp] Converting OSPF backbone to iBGP

2008-09-30 Thread Mark Tinka
On Tuesday 30 September 2008 22:59:34 Dan Armstrong wrote: In an all iBGP network - what do you do with customer's that are using your address space? Do you redistribute Connected ( static routes) on your access routers into iBGP? I assume that's about all you can do, right? You can

[c-nsp] IP-VPN CE-PE local pref problem

2008-09-30 Thread Mark Tech
Hi I have set up a dual homed IP-VPN network between 2 PE's and 2 CE's using  SoO - thas all working fine. I have added an inbound route-map to the 'backup' PE and CE to reduce the local preference in order to make the other PE and CE the preferred gateways. CE1PE1 primary |   

Re: [c-nsp] Extremely slow performing show running-config

2008-09-30 Thread Eric Pedersen
We had a problem with really slow config access with modular IOS on sup720s. It took several minutes to do show running-config or write mem. I don't remember the version, but switching back to non-modular IOS fixed it. Hi there I have a strange problem with a pair of cat6509s.

Re: [c-nsp] Converting OSPF backbone to iBGP

2008-09-30 Thread Mark Tinka
On Tuesday 30 September 2008 23:56:29 Dan Armstrong wrote: Unfortunately our access network is highly distributed, consequently our address space is highly de-aggregated at the access layer. We shove our Supernets into iBGP regionally and currently let our IGP sort out the lower layers...

[c-nsp] ibgp convergence time ?

2008-09-30 Thread julien leroiso
Hi, I have 2 bgp routers (named border1 and border2) with a ebgp session to one ISP (yyy.yyy.yyy.yyy) and ibgp session (xxx.xxx.xxx.1 and xxx.xxx.xxx.2). My border2 is very very slow to converge. After +-3h I didn't get all my border1 routes. I reset the session it's the same. I tryed to debug

Re: [c-nsp] ibgp convergence time ?

2008-09-30 Thread Jared Mauch
On Sep 30, 2008, at 1:14 PM, julien leroiso wrote: Hi, I have 2 bgp routers (named border1 and border2) with a ebgp session to one ISP (yyy.yyy.yyy.yyy) and ibgp session (xxx.xxx.xxx.1 and xxx.xxx.xxx.2). My border2 is very very slow to converge. After +-3h I didn't get all my border1

Re: [c-nsp] SA-VAM2+ usage problem?

2008-09-30 Thread Peter Rathlev
Hi Laszlo, On Tue, 2008-09-30 at 15:55 +0200, Nemeth Laszlo wrote: I have two 7201 (c7200p-advipservicesk9-mz.124-15.T3.bin) routers with SA-VAM2+ modules. I have a tunnel interface between this routers. If I make a ~24Mbit/sec traffic into this tunnel, the routers CPU's goes to 90%. It

Re: [c-nsp] IP-VPN CE-PE local pref problem

2008-09-30 Thread Mark Tech
Here you go PE1#sh ip bgp vpnv4 rd 894:1 5.14.93.0 BGP routing table entry for 894:1:5.14.93.0/24, version 222 Paths: (3 available, best #2, table ipvpn_0001)   Advertised to update-groups: 1   65535     5.14.95.244 (metric 11) from 5.14.95.244 (5.14.95.244)   Origin IGP, metric 0,

Re: [c-nsp] IP-VPN CE-PE local pref problem

2008-09-30 Thread Luan Nguyen
Try changing the route-map to: route-map ipvpn_0001 permit 10 set extcommunity soo 894:1 set local-preference 90 instead of: route-map ipvpn_0001 permit 10 set extcommunity soo 894:1 route-map ipvpn_0001 permit 20 set local-preference 90 Luan

Re: [c-nsp] SA-VAM2+ usage problem?

2008-09-30 Thread Luan Nguyen
Oh yeah, Fragmentation definitely is problematic. When a packet has to be splitted into two fragments to accommodate a smaller interface MTU and one of these fragment packets is large enough that it needs to be fragmented again after it has been encrypted. The IPSec peer has to reassemble this

Re: [c-nsp] SA-VAM2+ usage problem?

2008-09-30 Thread Jens S Andersen
Hi It could be related to MTU size. If the sending router has to fragment the encrypted packet the receiving router must reassemble the packet before decrypting can take place. Defragmentation is done at process-level. show ip traffic will show this. On my GRE/IPSEC tunnels i have ip mtu

[c-nsp] Propagating a default route...

2008-09-30 Thread Jeff Kell
Having an issue with BGP... I have a border router that can't do full feeds (6500/Sup2) so it is taking partials (upstream customers). I am trying to make decisions on which upstream to use as a default route. For traffic shaping purposes, I have a server that acts as an eBGP peer to get the

Re: [c-nsp] ibgp convergence time ?

2008-09-30 Thread Gert Doering
Hi, On Tue, Sep 30, 2008 at 07:14:50PM +0200, julien leroiso wrote: I have 2 bgp routers (named border1 and border2) with a ebgp session to one ISP (yyy.yyy.yyy.yyy) and ibgp session (xxx.xxx.xxx.1 and xxx.xxx.xxx.2). My border2 is very very slow to converge. After +-3h I didn't get all my

Re: [c-nsp] Propagating a default route...

2008-09-30 Thread Luan Nguyen
Perhaps set a static route for xx.xx.xx.xx (where you get your default route) in your server? - Luan Nguyen Senior Network Engineer Mobile:

[c-nsp] Cisco BGP Running on VRF?

2008-09-30 Thread Murphy, William
I have a Cat6506 VSS720-3C-XL switch on which I have configured BGP on a VRF using address-family ipv4 unicast vrf internet. I am getting BGP routes and all appears well but I can only display BGP info by using show ip bgp vpnv4 ... commands. I didn't intend to run VPNV4 and it appears the

[c-nsp] Transparent LAN over Layer3

2008-09-30 Thread Paul Stewart
Hi there. We've had a few customer requests recently for TLS (transparent LAN service) at some of our sites where we are connected via routers. Without changing out half our network infrastructure in these areas to accommodate, I'm looking for a way to utilize Cisco 1800,2800,3800 series

Re: [c-nsp] Transparent LAN over Layer3

2008-09-30 Thread Michael K. Smith
Hello Paul: If you control the L2 transport all the way from each of the clients' sites then you could just us Q-in-Q trunking. The next level up would be VPLS at Layer 2 with isolated L2 domains on the same fabric. Finally. MPLS at Layer 3. What portion of network do you control. Can you own

Re: [c-nsp] Transparent LAN over Layer3

2008-09-30 Thread Paul Stewart
Thanks... Yes, we own the end to end network however it's a routed network in those segments... router--router--router--switch--switch--router--router--router--rout er specifically...;) If we could hand them off a few VLAN's we would just do that and not even use Q-in-Q unless we really needed

Re: [c-nsp] Transparent LAN over Layer3

2008-09-30 Thread Robert Boyle
At 10:20 PM 9/30/2008, Paul Stewart wrote: Yes, we own the end to end network however it's a routed network in those segments... router--router--router--switch--switch--router--router--router--rout er specifically...;) If we could hand them off a few VLAN's we would just do that and not even