Re: [c-nsp] PPPoE related question

2009-03-23 Thread Tseveendorj Ochirlantuu
Thank you very much. Christoph Loibl Oliver Boehmer Regards, Tseveen. On Sun, Mar 22, 2009 at 4:50 PM, Oliver Boehmer (oboehmer) oboeh...@cisco.com wrote: Tseveendorj wrote on Sunday, March 22, 2009 09:06: Hello, I'm trying to do PPPoE on c3825 router but I faced VPDN related

[c-nsp] Pulling a VLAN out of a QinQ trunk

2009-03-23 Thread Skeeve Stevens
Hey all, Say I have a QinQ VLAN from one place to another... and it goes through a few switches. If I wanted to do something to one of the VLAN's inside the QinQ, is that possible? Examples of things I would like to do. - SVI with a IP address in an intermediate switch - Push it

Re: [c-nsp] Pulling a VLAN out of a QinQ trunk

2009-03-23 Thread Chris Phillips
There is a way that I know, but it's not pretty. Build the QnQ to an additional port on the device you want to inject/break out the VLAN from. Make sure it is mode dot1q-tunnel. Then loop it (cross connect it) to another port on the same device and make that is a trunk port. Specify the

Re: [c-nsp] isis adjecency...

2009-03-23 Thread Mateusz Blaszczyk
2009/3/23 Swati Sharma networkstuff.train...@gmail.com: Hi All, Thanks for prompt reply. My fault, I forgot to put mpls ldp sync under address family. Now it is up. and what does it have to do with isis adj? am I missing something here? -- pgp-key 0x1C655CAB signature.asc Description:

Re: [c-nsp] Changing SSH Port on IOS

2009-03-23 Thread Ziv Leyes
Nice feature the login enhancement, but could you please share with me what would be a good recommended setting for all the values? On the web page they talk about using the auto secure command, I don't seem to have such option on my IOS, but I have all the others, so I guess I'll have to set

[c-nsp] stateful dynamic traffic forwarding solution

2009-03-23 Thread Ibrahim Abo Zaid
Hi All I am looking for IOS feature or solution can do the following , there are 2 hosts A and B from the same subnet , when host A connects to host B , router should forward traffic to next-hop X while when host B connects to A , router should forward traffic to next-hop Y both A and B are

Re: [c-nsp] isis adjecency...

2009-03-23 Thread Mark Tinka
On Monday 23 March 2009 05:31:46 pm Mateusz Blaszczyk wrote: and what does it have to do with isis adj? am I missing something here? I was thinking the same thing - it might seem more probable that this might have had something to do with IOS XR's failure to commit the configuration, but

Re: [c-nsp] TCAM at Cat4500 Sup6E

2009-03-23 Thread Dmitry Kiselev
Hello! On Wed, Mar 18, 2009 at 06:08:54PM +0200, Dmitry Kiselev wrote: I complete several TCAM management tests by myself and clearly see that current 12.2(50)SG1 software do all TCAM rearrangements pretty well. Nice work, Cisco! A lot of thanks! Could anybody clear me with TCAM on Cat4500

Re: [c-nsp] Changing SSH Port on IOS

2009-03-23 Thread Church, Charles
I use it on some managed routers sitting on other ISP networks. We allow access via the access class from the ISPs that us admins have home accounts on, in addition to the block dedicated to the company that manages them. If we get more than 3 failed attempts in a 1 minute period, it'll lock

Re: [c-nsp] Pulling a VLAN out of a QinQ trunk

2009-03-23 Thread Skeeve Stevens
Actually... this is exactly what I came up with this afternoon as a work-around... but I was kind hoping it was stupid and there was an easier more sensible way is there? ;-) -- Skeeve Stevens, CEO/Technical Director eintellego Pty Ltd - The Networking Specialists ske...@eintellego.net /

Re: [c-nsp] Changing SSH Port on IOS

2009-03-23 Thread Justin Shore
I would suggest testing auto secure in a lab environment first rather than on a production device. You don't want to auto secure your way out of admin access to the device... Justin Ziv Leyes wrote: Nice feature the login enhancement, but could you please share with me what would be a good

[c-nsp] GRE throughput on 3750G

2009-03-23 Thread Ramcharan, Vijay A
All, I'm just looking for confirmation that GRE on the 3750G is done in software with the resulting low throughput (~20Mbps with iperf across GRE tunnel on 3750G). All testing and reading that I've done indicates that the hardware on the 3750 is not especially built for router-specific features

[c-nsp] ios upgrade for cisco 1200 airnet ap

2009-03-23 Thread snort bsd
Hi all: I am trying to upgrade the ios for Cisco Aironet 1200 AIR-AP1231G-A-K9 Wireless AP and have few questions. It has only 16MB memory in it. 1) Do I have to delete the original code before copy new code in? It seem to be so since every time I tried to copy new code in, in the half

Re: [c-nsp] GRE throughput on 3750G

2009-03-23 Thread Adrian Chadd
On Mon, Mar 23, 2009, Ramcharan, Vijay A wrote: All, I'm just looking for confirmation that GRE on the 3750G is done in software with the resulting low throughput (~20Mbps with iperf across GRE tunnel on 3750G). All testing and reading that I've done indicates that the hardware on the 3750

Re: [c-nsp] ios upgrade for cisco 1200 airnet ap

2009-03-23 Thread Jared Mauch
I've always done the upgrade via the web U/I. If it fails, you can delete everything then copy and extract the tar. I'm running JEC2 - Jared On Mar 23, 2009, at 11:30 AM, snort bsd wrote: Hi all: I am trying to upgrade the ios for Cisco Aironet 1200 AIR-AP1231G-A- K9 Wireless

Re: [c-nsp] GRE throughput on 3750G

2009-03-23 Thread Seth Mattinen
Ramcharan, Vijay A wrote: All, I'm just looking for confirmation that GRE on the 3750G is done in software with the resulting low throughput (~20Mbps with iperf across GRE tunnel on 3750G). All testing and reading that I've done indicates that the hardware on the 3750 is not especially built

Re: [c-nsp] GRE throughput on 3750G

2009-03-23 Thread Ray Burkholder
Ramcharan, Vijay A wrote: All, I'm just looking for confirmation that GRE on the 3750G is done in software with the resulting low throughput (~20Mbps with iperf across GRE tunnel on 3750G). All testing and reading that I've done indicates that the hardware on the 3750 is not especially

Re: [c-nsp] GRE throughput on 3750G

2009-03-23 Thread Ramcharan, Vijay A
Thanks for the clarifications and feedback received from all. GRE on 3750 = software switched with no candy and tastes bad :-( GRE on 3845 = software switched but with candy so it's more palatable :-) Vijay Ramcharan -Original Message- From: Adrian Chadd

Re: [c-nsp] GRE throughput on 3750G

2009-03-23 Thread Jeff Kell
Ramcharan, Vijay A wrote: Thanks for the clarifications and feedback received from all. GRE on 3750 = software switched with no candy and tastes bad :-( GRE on 3845 = software switched but with candy so it's more palatable But careful, too much of it will rot your teeth :-) Jeff

[c-nsp] Exceeding the bandwidth points on a 7200

2009-03-23 Thread Justin Shore
I have a situation on a 7206VXR w/ a NPE-G1 where I need to add a MC DS3 module. The box already has 4 PA-A3-OC3SMI PAs. I'd like to add a PA-MC-T3 to the box as well. I know that the OC3 PAs max the bandwidth points out for each PCI bus. However the OC3s are very lightly loaded. Looking

Re: [c-nsp] Exceeding the bandwidth points on a 7200

2009-03-23 Thread Walter Keen
I think there was a supportable way of adding another module via the IO slot using a special card in the IO slot that provides you with a PA slot that doesn't count towards the BW points of the other busses if I remember correctly. Justin Shore wrote: I have a situation on a 7206VXR w/ a NPE-G1

Re: [c-nsp] stateful dynamic traffic forwarding solution

2009-03-23 Thread Peter Rathlev
Hi Ibrahim, On Mon, 2009-03-23 at 12:59 +0200, Ibrahim Abo Zaid wrote: I am looking for IOS feature or solution can do the following , there are 2 hosts A and B from the same subnet , when host A connects to host B , router should forward traffic to next-hop X while when host B connects to A

[c-nsp] Needs some help with QOS

2009-03-23 Thread John Lange
I have crafted and applied some rules which I thought would prioritize traffic from an 871w (via ADSL) to one specific host. The idea is that any traffic destined to this host should be prioritized over all other traffic. Unfortunately my test show absolutely no effect. If I upload a couple of

Re: [c-nsp] Needs some help with QOS

2009-03-23 Thread Wouter Prins
Hi John, ==match access-group name al-qos1== That acl doesnt exist? Also for DSL, use some appropiate bandwidht values: bandwidth xxx bandwidth receive yyy Use the show policy-map interface dialer 0 to see if the matching works Regards, Wouter 2009/3/23 John Lange j...@johnlange.ca I have

[c-nsp] Traffic analysis via Netflow/BGP export?

2009-03-23 Thread Jeff Crowe
Hi all, I am looking for a tool/a collective of tools to help me better manage my traffic on my edge router. I am thinking that looking at netflows and BGP paths would be the best but I am unsure of the tools to use to start collecting this information. I would like to have a tool that allows

Re: [c-nsp] Traffic analysis via Netflow/BGP export?

2009-03-23 Thread Mateusz Blaszczyk
Jeff, I would like to have a tool that allows me to historically view traffic trends going to destination AS's so I can adjust some route-maps to better balance traffic egressing my network.  Any suggestions would be appreciated. That one seems easy and straightforward.

Re: [c-nsp] Traffic analysis via Netflow/BGP export?

2009-03-23 Thread Charles Wyble
Mateusz Blaszczyk wrote: Jeff, I would like to have a tool that allows me to historically view traffic trends going to destination AS's so I can adjust some route-maps to better balance traffic egressing my network. Any suggestions would be appreciated. That one seems easy and

Re: [c-nsp] Exceeding the bandwidth points on a 7200

2009-03-23 Thread Gert Doering
Hi, On Mon, Mar 23, 2009 at 01:55:19PM -0500, Justin Shore wrote: That G1 is truly bored, averaging below 10% utilization. I know that IOS will bitch about it on boot but it will still continue to work won't it? Any other side effects (other than TAC not liking it if they see it until I

Re: [c-nsp] Exceeding the bandwidth points on a 7200

2009-03-23 Thread Darryl Dunkin
Yep, the part number is C7200-JC-PA. Details: http://www.cisco.com/en/US/prod/collateral/routers/ps341/product_data_sh eet0900aecd804419c6.html -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Walter Keen Sent: Monday,

Re: [c-nsp] Exceeding the bandwidth points on a 7200

2009-03-23 Thread Jeremy Bresley
The card Walter mentioned is the C7200-JC-PA. http://www.cisco.com/en/US/prod/collateral/routers/ps341/product_data_sheet0900aecd804419c6.html It works with the NPE-G1 or G2 and it looks like the PA-MC-T3 is listed a supported adapter in it. This basically replaces your I/O card (or blank if

[c-nsp] Etherchannel and variable latency on member links

2009-03-23 Thread Peter Rathlev
Hi, We have some bandwidth issues between two sites, experiencing out discards on interfaces. The connection is currently between 2+2 switchports in WS-X6516-GBIC cards and they're connected by ~4 km SM connection with LX GBICs. The redundancy is blocked by STP. To increase bandwidth in a cost

[c-nsp] BGP problem on IPSec links

2009-03-23 Thread zarenks
Hi, I wonder if anyone had experienced the problem I have noticed with dynamic routing (BGP) running over IPSec link. I have traced the archived posts regarding the IPSec problems but could not find anything regarding my case. There is a typical remote access site connected to MPLS-VPN cloud

Re: [c-nsp] Traffic analysis via Netflow/BGP export?

2009-03-23 Thread David Hughes
On 24/03/2009, at 6:17 AM, Jeff Crowe wrote: I am looking for a tool/a collective of tools to help me better manage my traffic on my edge router. I am thinking that looking at netflows and BGP paths would be the best but I am unsure of the tools to use to start collecting this

Re: [c-nsp] Etherchannel and variable latency on member links

2009-03-23 Thread Jeff Kell
Peter Rathlev wrote: As far as I can understand the loadsharing is strictly deterministic, so out-of-order frames shouldn't be a problem. I assume the switch itself doesn't care about the difference; we plan to use LACP as we do on all other etherchannels. AFAIK, etherchannel will select one

Re: [c-nsp] Traffic analysis via Netflow/BGP export?

2009-03-23 Thread Jon Wolberg
Hi Jeff- Netflow Tracker is a very nice product, however it's got a reasonable price tag for it: http://www.flukenetworks.com/fnet/en-us/products/NetFlow+Tracker/ We've been using it for quite a while. Jon Wolberg Operations Manager PowerVPS / Defender Hosting Defender Technologies Group,

[c-nsp] Cisco ACE and ASN

2009-03-23 Thread bas
Hello list, Does anyone have any experience with high volume webcontent that is loadbalanced through ASN? From the cisco website: Asymmetric server normalization (ASN): Cisco ACE can load balance an initial request from the client to a real server; however, the server directly responds to the

Re: [c-nsp] Exceeding the bandwidth points on a 7200

2009-03-23 Thread Justin Shore
Gert Doering wrote: IOS will bitch, but unless this has changed recently, all interfaces will just work. Of course you're on your own - if you complain to TAC about high CPU and packet losses, they are very likely to tell you your own fault. OTOH, if the PA-A3s are *so* lightly loaded, I'd

Re: [c-nsp] Cisco ACE and ASN

2009-03-23 Thread oles
From the cisco website: Asymmetric server normalization (ASN): Cisco ACE can load balance an initial request from the client to a real server; however, the server directly responds to the client, bypassing Cisco ACE. I am curious how the ACE perfomance scales. with linux, iproute2 is your