[c-nsp] BGP outbound route-map support for community-lists not working ?

2012-02-02 Thread Reuben Farrelly
I've been experimenting with a new (and what I thought was improved design/modification) in terms of our internal and external BGP routing, and I've hit a bit of a snag. We are largely an end user AS but we do have a couple of eBGP customers connecting to us who require AS transit.

[c-nsp] IPv6 disable SLAAC

2012-02-02 Thread Christian Bösch
hi list, i want to force ipv6 stateful address configuration with dhcpv6. therefor i want to disable router advertisements on a cat6500. in interface config are some commands which are confusing for me to find out what they do and what the difference of them is. maybe someone can explain…. ipv6

[c-nsp] Traceroute results masking path to destination

2012-02-02 Thread Randy Heimann
Hello, I am having some difficulty understanding some trace route results that I am receiving from the network I am on. If I tracert from my location (France), the results are all masked with the destination address (Google's public DNS). I understand that something in the network is

Re: [c-nsp] IPv6 disable SLAAC

2012-02-02 Thread Gert Doering
Hi, On Thu, Feb 02, 2012 at 01:41:14PM +0100, Christian Bösch wrote: ipv6 nd prefix default 3600 3600 no-autoconfig This is what we use. Send RAs, but tell hosts that they must not use the info for autoconfig. ipv6 nd ra suppress This doesn't do what you'd expect - it will stop periodic

Re: [c-nsp] Cisco Router - L2L VPN and Remote Access VPN on same Router Example

2012-02-02 Thread Bernard Wanyama
Hi Erik, Try this: aaa authentication login LOCAL_AUTH local keeps your SSH Telnet working aaa authorization network VPN_LOCAL_AUTH local for Xauth crypto map REMOTE_VPN client authentication list LOCAL_AUTH crypto map REMOTE_VPN isakmp authorization list VPN_LOCAL_AUTH Create dynamic

Re: [c-nsp] Traceroute results masking path to destination

2012-02-02 Thread Christopher.Marget
I am having some difficulty understanding some trace route results that I am receiving from the network I am on. If I tracert from my location (France), the results are all masked with the destination address (Google's public DNS). I understand that something in the network is substituting

Re: [c-nsp] QOS for 4948E - 15.0(2)SG3 code

2012-02-02 Thread Asbjorn Hojmark
The 4948E is basically a fixed-configuration Catalyst 4500 with a Supervisor 6 in a small box, so you can use the 4500 configuration guide. -A Sent from my tablet; excuse brevity On 01/02/2012, at 16.04, Mack McBride mack.mcbr...@viawest.com wrote: Does anyone have documentation on QOS for

Re: [c-nsp] QOS for 4948E - 15.0(2)SG3 code

2012-02-02 Thread Mack McBride
Except the global configuration commands are such as 'qos' are not available. 'show qos' is also not available :( Mack -Original Message- From: Asbjorn Hojmark [mailto:li...@hojmark.org] Sent: Thursday, February 02, 2012 8:16 AM To: Mack McBride Cc: cisco-nsp@puck.nether.net Subject:

[c-nsp] XFP DOM support in IOS vs. XR

2012-02-02 Thread Jason Lixfeld
I have some third party XFPs that don't appear to support DOM in IOS but they support it in XR. Is this a known phenomenon or am I missing something? Unsupported in older IOS, perhaps? I'm trying in a 7600/SUP720/12.2(33)SRC4/7600-ES20-10G3CXL: ios#show int te4/0/0 transceiver detail

Re: [c-nsp] BGP outbound route-map support for community-lists not working ?

2012-02-02 Thread Peter Rathlev
On Thu, 2012-02-02 at 22:13 +1100, Reuben Farrelly wrote: I've been experimenting with a new (and what I thought was improved design/modification) in terms of our internal and external BGP routing, and I've hit a bit of a snag. ... router bgp 100 address-family ipv4 neighbor

Re: [c-nsp] IPv6 disable SLAAC

2012-02-02 Thread Peter Rathlev
On Thu, 2012-02-02 at 13:41 +0100, Christian Bösch wrote: i want to force ipv6 stateful address configuration with dhcpv6. therefor i want to disable router advertisements on a cat6500. Keep in mind that DHCPv6 cannot give you a gateway so you still need the RAs to connect to anything not on

Re: [c-nsp] Traceroute results masking path to destination

2012-02-02 Thread Peter Rathlev
On Thu, 2012-02-02 at 14:39 +0100, Randy Heimann wrote: I am having some difficulty understanding some trace route results that I am receiving from the network I am on. If I tracert from my location (France), the results are all masked with the destination address (Google's public DNS). I

[c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Christopher J. Pilkington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm looking at the new ASR100x series boxes. We'll have 6 routers, each with a eBGP upstream and full iBGP mesh. So, worst case, 6 full tables. ASR1001 literature claims 1M IPv4 routes in the ESP documentation, which I'm assuming refers to the

[c-nsp] ASR XR LACP config guide?

2012-02-02 Thread -Hammer-
Based on the number of questions I see here and on NANOG I guess the documentation is limited or hard to find on the ASRs. Can anyone provide a link to some documentation specific to LACP configuration on the XE software? I understand the functionality showed up somewhere around 2.5-2.6 but my

Re: [c-nsp] ASR XR LACP config guide?

2012-02-02 Thread Brian Christopher Raaen
is this for IOS-XE on an ASR1000 or IOS-XR on an ASR 9000. I'm assuming that you mean a ASR1000, but your subject was asking about IOS-XR which only runs one ASR9000, CRS-1, or CRS-3 --- Brian Raaen Network Architect Zcorum On Thu, Feb 2, 2012 at 3:20 PM, -Hammer- bhmc...@gmail.com wrote:

Re: [c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Blake Dunlap
You should note that lit is incorrect in regards to the FIB as was pointed out on the list a few days ago. Look lower in the document for the accurate numbers based on the included ESP. I believe it is only 500k ipv4. -Blake On Thu, Feb 2, 2012 at 14:08, Christopher J. Pilkington c...@0x1.net

Re: [c-nsp] XFP DOM support in IOS vs. XR

2012-02-02 Thread Nick Hilliard
On 02/02/2012 17:25, Jason Lixfeld wrote: I have some third party XFPs that don't appear to support DOM in IOS but they support it in XR. Is this a known phenomenon or am I missing something? Unsupported in older IOS, perhaps? It's line-card model, line card hardware revision and IOS version

Re: [c-nsp] ASR XR LACP config guide?

2012-02-02 Thread -Hammer-
Major (minor) typo on my part. IOS-XE on an ASR 1004. Who put the E and the R so close together on the keyboard? Switching to Dvorak -Hammer- I was a normal American nerd -Jack Herer On 2/2/2012 2:28 PM, Brian Christopher Raaen wrote: is this for IOS-XE on an ASR1000 or IOS-XR on an

Re: [c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Christopher J. Pilkington
On Thu, Feb 02, 2012 at 03:01:35PM -0600, Blake Dunlap wrote: You should note that lit is incorrect in regards to the FIB as was pointed out on the list a few days ago. Look lower in the document for the accurate numbers based on the included ESP. I believe it is only 500k ipv4. I have seen

Re: [c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Nick Hilliard
On 02/02/2012 22:03, Christopher J. Pilkington wrote: I have seen this statement also on multiple occasions, but I have not found the document showing this 500k number, nor has anyone ever referenced a link with it. This information isn't hard to find.

Re: [c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Christopher J. Pilkington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Feb 02, 2012 at 10:28:44PM +, Nick Hilliard wrote: On 02/02/2012 22:03, Christopher J. Pilkington wrote: I have seen this statement also on multiple occasions, but I have not found the document showing this 500k number, nor has

Re: [c-nsp] Ambiguous ACL log in 12.2(58)SE2?

2012-02-02 Thread Preston Chilcote (pchilcot)
I did a little digging and found: CSCts01106Extended ACL is broken when ACL is used with log or time kw I don't think there are plans for anymore 12.2(58)SE throttle rebuilds, but I'm working to get it fixed in a 15.0(1)SE rebuild, assuming there's another one planned. - Preston Chilcote

Re: [c-nsp] QOS for 4948E - 15.0(2)SG3 code

2012-02-02 Thread Asbjorn Hojmark
You have to unlearn those old-style C4K configurations and use MQC. (QoS cannot be turned off, so the qos command is not needed. Show qos makes no sense with MQC, where you do 'sh policy-map') You have to look under Sup6 (and 4948E!) in the config guide:

Re: [c-nsp] Ambiguous ACL log in 12.2(58)SE2?

2012-02-02 Thread Jeff Kell
Given the fact that if you have a switch running with such ACL statements in place (and working), upgrading to 12.2(58) will break them would seem to be something PSIRT would be interested in (but I received no response after reporting it). The bug may be tied to my case :) Jeff On 2/2/2012

Re: [c-nsp] Ambiguous ACL log in 12.2(58)SE2?

2012-02-02 Thread Preston Chilcote (pchilcot)
Hi Jeff, They are looking at it now. Thanks for reporting it. Preston Chilcote Cisco TAC -Original Message- From: Jeff Kell [mailto:jeff-k...@utc.edu] Sent: Thursday, February 02, 2012 4:23 PM To: Preston Chilcote (pchilcot) Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp]

Re: [c-nsp] prioritize VoIP and Skype traffic in office routers

2012-02-02 Thread Chuck Church
Martin, If you can easily match the VoIP traffic via an extended access list, that will be fine. If your ISP is rate limiting you to 20 mbit, you might want to use shaping or policing to limit your non-preferred traffic to 18 megabit, and then prioritize the VoIP/Skype traffic. This