[c-nsp] cisco core switch 6509

2012-06-18 Thread osama hammoudeh
Dears 

 

I have cisco core switch (VS-C6509E-S720-10G) , there is module 10G
(WS-X6716-10GE) was already installed on this core and was working fine
,  but from yesterday this module not working  I mean when I do  show
module switch 1  to see the status  it show me that all module status
PASS and this module OTHER .

 

I tried to : 

1-  reboot the core switch

2-  change the slot where the module is installed to other slot 

3-  installing the module on other core switch

 

but I still have the same problem .

 

 

please advise .

 

best regards 

osama hammoudeh

 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] cisco core switch 6509

2012-06-18 Thread Phil Mayers

On 18/06/12 09:03, osama hammoudeh wrote:




I tried to :

1-  reboot the core switch

2-  change the slot where the module is installed to other slot

3-  installing the module on other core switch



but I still have the same problem .


It sounds like it is failing the diagnostics, and probably needs an RMA 
if you've rebooted/moved the module and the problem persists.


Check the output of:

sh diagnostic result module X

...but really, you need to contact Cisco / your reseller and get a 
replacement, I suspect.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] IOS IPv6 Forwarding over Virtual-Access %IPV6_FORWARDING-3-NULLIDB

2012-06-18 Thread Sascha Pollok

Hello Cisco-folks,

Friend G**gle does not really help about this logging message when trying
to forward IPv6 down a Virtual-Access terminating a PPTP tunnel:

*Jun 18 2012 12:17:48 CEST: %IPV6_FORWARDING-3-NULLIDB: Uninitialized 
interface pointer - ipv6_fib_forw -Process= L2X Data Daemon, ipl= 0, 
pid= 193 -Traceback= 0x8173D634z 0x81096DACz 0x8133B70Cz 0x8133BFF4z 
0x8133C050z 0x801F1254z 0x801F1734z 0x801F1960z 0x801F1A94z 0x804E6FC4z 
0x804CD854z.


Ping/Connections using the Link-Local seem to work but this happens
when e.g. sending a ping via the Virtual-Access.

This is on a 886VA (acting as PPTP Server) running 15.1(2)T1.

Anyone?

Thanks a bunch.
Sascha

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Need help............

2012-06-18 Thread sumeet salunke
Dear Team,

I am going to implement new project in which all cisco device will be
replaced from cisco

what should i take as a backup from devices


Thanks  Regards,
Sumeet  Salunke
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ospf with vrf

2012-06-18 Thread adam vitkovsky
Domain-id is not a loop prevention mechanism -it simply tells the egress PE
how to insert the LSA into local VRF LSDB
By default Domain-id is set to VRF OSPF Process-id # of the originating PE
that redistributed the route into MP-BGP
When egress PE redistributes routes form MP-BGP into VRF OSPF process the PE
compares the local VRF OSPF Process-id with the Domain-id associated with
the MP-BGP route
-if the two match the LSA is inserted as Type-3 LSA into local VRF LSDB
-if the two do not match the LSA is inserted as Type-5 LSA into local VRF
LSDB
-the value can be set manually in case you can't use the same ospf process
id on each PE serving the particular customer site


Domain-tag and the down-bit are loop prevention mechanisms
Down-bit is used on LSA-3
Domain-tag is used on LSA Type-5 and Type-7 (simply because these LSA types
do not have down-bit in the LSA header)
Down-bit is set to Downward (set to 1) by egress PE when redistributing
Type-3 routes from MP-BGP down to VRF OSPF process
Domain-tag is set to MP-BGP-AS# by originating  PE when redistributing
Type-5 routes from OSPF up  to MP-BGP process

Each PE that has VRF OSPF process checks the Type-3 LSAs coming from CE for
down-bit
If the Type-3 LSA has a down bit set to Downward the PE doesn't set the
Routing-Bit on this LSA and doesn't consider it during the SPF computation
(If the routing bit is not set on the LSA the LSA is not added into the
routing table -thus is not redistributed into MP-BGP)
When type-3 LSA from particular area reaches PE router with a down-bit set
-the PE knows that this LSA must have already been redistributed from MPLS
into this area by some other PE router
-thus redistributing it back to MPLS would cause a routing information loop

Each PE that has VRF OSPF process checks the Type-5 LSAs coming from CE and
compares whether the domain-tag set equals to the PE MP-BGP-AS#
If yes the PE will not set the routing-bit on this LSA thus the LSA will not
get into the routing table -this it will not be redistributed to MP-BGP
-the value can be set manually in cases where you operate mpls domain that
spans multiple autonomous systems and customer site connected to one AS# has
a backhaul link to site connected to another AS#
-in this case the common domain tag has to be manually set on all PEs
providing OSPF routing for this particular customer



adam

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Aaron
Sent: Sunday, June 17, 2012 5:34 AM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ospf with vrf

I think I found the answer, although I don't fully understand it all yet.  I
have heard about this before and recall some of it.

This seemed to do the trick...under, router ospf vrf testvrf capability
vrf-lite

I read this. https://supportforums.cisco.com/thread/202402

 Apparently it has something to do with loop prevention and pe checks of
domain id and down bit or something like that to keep pe from adding
anything other than type 1 and 2's to rib.

Aaron

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Aaron
Sent: Saturday, June 16, 2012 10:16 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] ospf with vrf

why does my pe lose the ability to add type 3 (summary) routes, learned from
ce, to its rib AFTER I convert its ospf process to vrf ?

 

in other words, when my pe's ospf process does not have vrf config I see the
IA routes to other areas, but as soon as I change my ospf process to vrf I
lose my IA routes.  They are still in the ospf db though, but just not being
added to the RIB.

 

Aaron

 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] cisco core switch 6509

2012-06-18 Thread Ambedkar
Hi, i think that module is in ROMMON mode, if yes boot manually .
bye.

On Mon, Jun 18, 2012 at 2:42 PM, Phil Mayers p.may...@imperial.ac.ukwrote:

 On 18/06/12 09:03, osama hammoudeh wrote:



 I tried to :

 1-  reboot the core switch

 2-  change the slot where the module is installed to other slot

 3-  installing the module on other core switch



 but I still have the same problem .


 It sounds like it is failing the diagnostics, and probably needs an RMA if
 you've rebooted/moved the module and the problem persists.

 Check the output of:

 sh diagnostic result module X

 ...but really, you need to contact Cisco / your reseller and get a
 replacement, I suspect.

 __**_
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/**mailman/listinfo/cisco-nsphttps://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at 
 http://puck.nether.net/**pipermail/cisco-nsp/http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Need help............

2012-06-18 Thread Umair Saeed
Hi,

I think Following outputs must be captured so that you can compare old and
new routers.

--show running
--Show module
--sh ip route summary
--show ip ospf interface brief
--show ip ospf neighbor
--show ip protocols
--show cdp neighbors
--show ip bgp summary


Best Regards,

Umair Saeed
Phone # +92-3332354591



-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of sumeet salunke
Sent: Monday, June 18, 2012 4:26 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Need help

Dear Team,

I am going to implement new project in which all cisco device will be
replaced from cisco

what should i take as a backup from devices


Thanks  Regards,
Sumeet  Salunke
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] cisco core switch 6509

2012-06-18 Thread Edward Salonia
It sounds like and RMA as others have suggested...

Is there anything in the logs or diag about the card to indicate why it is not 
coming up? 

Is it showing as pwrdown on the sho mod output? If so,  try 'power enable 
module 1' from conf t and see what it says in the logs as to it running diag 
and going to state of pwrdown. It should give a reason.

Any other changes recently?

Try removing the optics?

- Ed
--Original Message--
From: osama hammoudeh
Sender: cisco-nsp-boun...@puck.nether.net
To: cisco-nsp@puck.nether.net
Cc: Mohammad Salbad
Subject: [c-nsp] cisco core switch 6509
Sent: Jun 18, 2012 4:03 AM

Dears 

 

I have cisco core switch (VS-C6509E-S720-10G) , there is module 10G
(WS-X6716-10GE) was already installed on this core and was working fine
,  but from yesterday this module not working  I mean when I do  show
module switch 1  to see the status  it show me that all module status
PASS and this module OTHER .

 

I tried to : 

1-  reboot the core switch

2-  change the slot where the module is installed to other slot 

3-  installing the module on other core switch

 

but I still have the same problem .

 

 

please advise .

 

best regards 

osama hammoudeh

 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] gns3 - router/switch types supported

2012-06-18 Thread Aaron
Do y'all know if GNS3 (0.8.2) only supports the routers and switches that
are shown in the default install?  I'm fairly new to GNS3 and I only see
1700,2600,2691,3600,3700,7200,pix, etc, etc and was wondering if GNS3 can
support 3800, 1800 (current gear list for ccie r/s 4.0) ?

 

Also, any idea if IOS XR will be supported in GNS3 anytime soon?  Like
asr9000 running ios xr?

 

Aaron

 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] radius-server test argument

2012-06-18 Thread Oliver Boehmer (oboehmer)
 
   I would like to use the 'test' feature of radius-server in order
that
 the router can detect dead servers faster. I've got the following
line:
 
 radius-server host x.x.x.13 auth-port 1812 acct-port 1813 timeout 5
test
 username servercheck idle-time 1 key XX

   The 'servercheck' name has to be in the router's local user
database,
 but by doing so, this user can then be used to log into the router.
I'd
 rather not allow this if possible and would like to know if anyone can
 tell me how I might set this user name up to not be useful for
anything
 else other than this test argument?

hmm, assuming you only use local as last-resort for login authen/
author, you could define this user with autocommand exit, so if
someone ever uses it when Tacacs is down, the session disconnects right
away. 

oli

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] gns3 - router/switch types supported

2012-06-18 Thread Chris Evans
Development has stopped for dynamips the last I heard. This was because all
newer platforms are going to a licensed model and more asic based.
Emulating newer hardware is much more complex.
On Jun 18, 2012 11:43 AM, Aaron aar...@gvtc.com wrote:

 Do y'all know if GNS3 (0.8.2) only supports the routers and switches that
 are shown in the default install?  I'm fairly new to GNS3 and I only see
 1700,2600,2691,3600,3700,7200,pix, etc, etc and was wondering if GNS3 can
 support 3800, 1800 (current gear list for ccie r/s 4.0) ?



 Also, any idea if IOS XR will be supported in GNS3 anytime soon?  Like
 asr9000 running ios xr?



 Aaron



 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] gns3 - router/switch types supported

2012-06-18 Thread Jose Madrid
Aaron,

For my CCIE studies I use GNS3 and run all 3725's. I have physical switches
so I cannot be much help in that respect.  Feel free to email me directly
if you have more ?'s.

On Mon, Jun 18, 2012 at 9:02 AM, Chris Evans chrisccnpsp...@gmail.comwrote:

 Development has stopped for dynamips the last I heard. This was because all
 newer platforms are going to a licensed model and more asic based.
 Emulating newer hardware is much more complex.
 On Jun 18, 2012 11:43 AM, Aaron aar...@gvtc.com wrote:

  Do y'all know if GNS3 (0.8.2) only supports the routers and switches that
  are shown in the default install?  I'm fairly new to GNS3 and I only see
  1700,2600,2691,3600,3700,7200,pix, etc, etc and was wondering if GNS3 can
  support 3800, 1800 (current gear list for ccie r/s 4.0) ?
 
 
 
  Also, any idea if IOS XR will be supported in GNS3 anytime soon?  Like
  asr9000 running ios xr?
 
 
 
  Aaron
 
 
 
  ___
  cisco-nsp mailing list  cisco-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/




-- 
It has to start somewhere, it has to start sometime.  What better place
than here? What better time than now?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ospf with vrf

2012-06-18 Thread Aaron
Thanks adam...  I just tested the following

ospf/bgp then bgp/ospf advertisement
flow

Ce1---(area1)-(ospf process id 1)pe1--p---pe2(ospf process id
1)(area2)-ce2

During the above scenario I see IA routes in CE2, learned from CE1.  Then
when I change pe2's ospf process ID to 2 ce2 rib sees them as E2.

I didn't have to use the domain-ID trick.  O, I think I just realized
what you meantif I want to ensure that the routes continue to be seen as
IA in ce2's rib, then I WOULD need the domain-id thing

I just tested itfyi R2 is pe2.  Domain-tag 1 didn't work.  Routes
remained learned as E2 in ce2.  Domain-id 0.0.0.1 worked.  Ce2's rib now
shows ospf learned routes from ce1 as IA again.  Apparently this domain-id
thing has to be entered in dotted quad notation , but the ospf process id is
1-65535.  Not sure how I would match up any and every ospf proc id to
domain-id dotted dec formatperhaps it's just a decimal conversion on the
domain-id to match the exact ospf process id number.  Ok fine, I'll test it.
See below... 

R2(config-router)#no domain-tag 1
R2(config-router)#do sh run | sec router ospf
router ospf 2 vrf one
 router-id 10.10.10.2
 log-adjacency-changes
 redistribute bgp 1 subnets
 network 2.2.2.1 0.0.0.0 area 1
 network 10.10.10.2 0.0.0.0 area 1
R2(config-router)#
R2(config-router)#domain
R2(config-router)#domain-?
domain-id  domain-tag

R2(config-router)#domain-id ?
  A.B.C.D  OSPF domain ID in IP address format
  Null Null Domain-ID
  type OSPF domain ID type in Hex format

R2(config-router)#domain-id t
R2(config-router)#domain-id type ?
  0005  Type 0x0005
  0105  Type 0x0105
  0205  Type 0x0205
  8005  Type 0x8005

R2(config-router)#domain-id 0.0.0.1 ?
  secondary  Secondary Domain-ID
  cr

R2(config-router)#domain-id 0.0.0.1
R2(config-router)#


Yep, I just changed pe1's ospf proc ID to a random number I picked678.

Then saw again, E2 in Ce2 rib.

I changed pe2's ospf domain-id to 0.0.2.166 and BANG, IA's in ce2 rib.
Nice, thanks adam.

Aaron





-Original Message-
From: adam vitkovsky [mailto:adam.vitkov...@swan.sk] 
Sent: Monday, June 18, 2012 6:35 AM
To: 'Aaron'; cisco-nsp@puck.nether.net
Subject: RE: [c-nsp] ospf with vrf

Domain-id is not a loop prevention mechanism -it simply tells the egress PE
how to insert the LSA into local VRF LSDB By default Domain-id is set to VRF
OSPF Process-id # of the originating PE that redistributed the route into
MP-BGP When egress PE redistributes routes form MP-BGP into VRF OSPF process
the PE compares the local VRF OSPF Process-id with the Domain-id associated
with the MP-BGP route -if the two match the LSA is inserted as Type-3 LSA
into local VRF LSDB -if the two do not match the LSA is inserted as Type-5
LSA into local VRF LSDB -the value can be set manually in case you can't use
the same ospf process id on each PE serving the particular customer site


Domain-tag and the down-bit are loop prevention mechanisms Down-bit is used
on LSA-3 Domain-tag is used on LSA Type-5 and Type-7 (simply because these
LSA types do not have down-bit in the LSA header) Down-bit is set to
Downward (set to 1) by egress PE when redistributing
Type-3 routes from MP-BGP down to VRF OSPF process Domain-tag is set to
MP-BGP-AS# by originating  PE when redistributing
Type-5 routes from OSPF up  to MP-BGP process

Each PE that has VRF OSPF process checks the Type-3 LSAs coming from CE for
down-bit If the Type-3 LSA has a down bit set to Downward the PE doesn't set
the Routing-Bit on this LSA and doesn't consider it during the SPF
computation (If the routing bit is not set on the LSA the LSA is not added
into the routing table -thus is not redistributed into MP-BGP) When type-3
LSA from particular area reaches PE router with a down-bit set -the PE knows
that this LSA must have already been redistributed from MPLS into this area
by some other PE router -thus redistributing it back to MPLS would cause a
routing information loop

Each PE that has VRF OSPF process checks the Type-5 LSAs coming from CE and
compares whether the domain-tag set equals to the PE MP-BGP-AS# If yes the
PE will not set the routing-bit on this LSA thus the LSA will not get into
the routing table -this it will not be redistributed to MP-BGP -the value
can be set manually in cases where you operate mpls domain that spans
multiple autonomous systems and customer site connected to one AS# has a
backhaul link to site connected to another AS# -in this case the common
domain tag has to be manually set on all PEs providing OSPF routing for this
particular customer



adam

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Aaron
Sent: Sunday, June 17, 2012 5:34 AM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ospf with vrf

I think I found the answer, although I don't fully understand it all yet.  I
have heard about this before and recall some 

Re: [c-nsp] gns3 - router/switch types supported

2012-06-18 Thread Eduardo Angueta
Does anyone knows about IUO and if we can simulate IOS-XR there?
I'm trying to get started with CCIE SP track.

regards

-Mensaje original-
De: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] En nombre de Jose Madrid
Enviado el: Monday, June 18, 2012 11:09 AM
Para: Chris Evans
CC: cisco-nsp@puck.nether.net
Asunto: Re: [c-nsp] gns3 - router/switch types supported

Aaron,

For my CCIE studies I use GNS3 and run all 3725's. I have physical switches so 
I cannot be much help in that respect.  Feel free to email me directly if you 
have more ?'s.

On Mon, Jun 18, 2012 at 9:02 AM, Chris Evans chrisccnpsp...@gmail.comwrote:

 Development has stopped for dynamips the last I heard. This was 
 because all newer platforms are going to a licensed model and more asic based.
 Emulating newer hardware is much more complex.
 On Jun 18, 2012 11:43 AM, Aaron aar...@gvtc.com wrote:

  Do y'all know if GNS3 (0.8.2) only supports the routers and switches 
  that are shown in the default install?  I'm fairly new to GNS3 and I 
  only see 1700,2600,2691,3600,3700,7200,pix, etc, etc and was 
  wondering if GNS3 can support 3800, 1800 (current gear list for ccie r/s 
  4.0) ?
 
 
 
  Also, any idea if IOS XR will be supported in GNS3 anytime soon?  
  Like
  asr9000 running ios xr?
 
 
 
  Aaron
 
 
 
  ___
  cisco-nsp mailing list  cisco-nsp@puck.nether.net 
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/




--
It has to start somewhere, it has to start sometime.  What better place than 
here? What better time than now?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
This message and any attachments are intended only for the use of the 
individual to whom they are addressed and it may contain information that is 
privileged or confidential. If you have received this communication by mistake, 
please notify us immediately by e-mail or telephone.The storage, recording, use 
or disclosure of this e-mail and its attachments by anyone other than the 
intended recipient is strictly prohibited. This message has been verified using 
antivirus software; however, the sender is not responsible for any damage to 
hardware or software resulting from the presence of any virus.

Este mensaje y cualquier anexo son exclusivamente para la persona a quien van 
dirigidos y pueden contener información privilegiada o confidencial. Si usted 
ha recibido esta comunicación por error, le agradecemos notificarlo de 
inmediato por esta misma vía o por teléfono. Está prohibida su retención, 
grabación, utilización o divulgación con cualquier propósito. Este mensaje ha 
sido verificado con software antivirus; sin embargo, el remitente no se hace 
responsable en caso de que en éste o en los archivos adjuntos haya presencia de 
algún virus que pueda generar daños en los equipos o programas del destinatario.___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] gns3 - router/switch types supported

2012-06-18 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Eduardo Angueta wrote:
 Does anyone knows about IUO and if we can simulate IOS-XR there?
 I'm trying to get started with CCIE SP track.
 

The current IOS-XR virtualization requires a hardware emulation layer that
makes it difficult to implement on scale and doesn't provide all the
necessary features.  That is why you have not seen it available in either
the CCIE360 or the Cisco Learning Labs (CLL) products (nor implemented as
virtual in the CCIE SP and SP-OPs exams).

Look for some enhancements in the CLL product later this year that will
make it more attractive as a platform for CCIE RS practice and as a
general lab mockup environment.  Introduction of an XR virtualization for
the environment is still dependent on development that must be completed by
the BU and consequently, there is no current timeline for its introduction.

- -- 
=
bep

-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/fd/IACgkQE1XcgMgrtyZ6wwCfcLJGnSKH4ulnE45bTs+mnJvh
6oUAn0goY72bXsdZKeEQlw5yupP5uhRN
=BwOK
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] RES: Fw: LNS Error %VPDN-3-NORESOURCE:

2012-06-18 Thread Leonardo Gama Souza
 Did I missed anything?

Do you have the following config in the LNS?

aaa authorization network default group RADIUS1
aaa authorization subscriber-service default local

And for the user in the Radius:

  Framed-IP-Address += x.x.x.x,
  Cisco-avpair += ip:vrf-id=VRF-C,
  Cisco-avpair += ip:ip-unnumbered=loopback101

If so, try using PAP auth.

Regards.


 From: ar ar_...@yahoo.com
To: cisco-nsp cisco-nsp@puck.nether.net 
Sent: Saturday, June 16, 2012 10:53 PM
Subject: [c-nsp] Fw:  LNS Error %VPDN-3-NORESOURCE:
 




Attached is the complete debug output.

Below is the config.
There's one vrf configured.
And I am attaching the l2tp client to this vrf.

Since global l2tp (no vrf) was able to authenticate, can this be a possible IOS 
issue?

vpdn-group 1
 description 
 accept-dialin
  protocol l2tp
  virtual-template 1
 terminate-from hostname XXX
 source-ip x.x.x.x
 local name LNS1
 lcp renegotiation on-mismatch
 l2tp tunnel password 7 02081B3C22517C54
 l2tp tunnel timeout no-session 600
 ip tos
reflect


interface Virtual-Template1
 mtu 1462
 ip unnumbered Loopback0
 ip tcp adjust-mss 1422
 no peer default ip address
 keepalive 60
 ppp authentication chap NEW

end



aaa group server radius RADIUS1
 server-private x.x.x.xauth-port 1812 acct-port 1813 key 7 123456781C

aaa authentication ppp NEW group RADIUS1


!
interface Loopback101
 ip vrf forwarding VRF-C
 ip address 10.16.1.101 255.255.255.255

ip vrf VRF-C
 rd 100:109
 route-target export 100:109
 route-target import 100:109





___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 6500 L2 Switch Traffic locally between two SubInterfaces on different ports?

2012-06-18 Thread Erik Sundberg
Does service instance and bridge domains require the ES-20 Cards on the 6500s?

Thanks

Erik




-Original Message-
From: Aaron [mailto:aar...@gvtc.com]
Sent: Sunday, June 17, 2012 9:49 PM
To: Erik Sundberg
Subject: RE: [c-nsp] 6500 L2 Switch Traffic locally between two SubInterfaces 
on different ports?

Can you use service instance and bridge domain to tie them together?

Aaron

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Erik Sundberg
Sent: Sunday, June 17, 2012 12:09 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] 6500 L2 Switch Traffic locally between two SubInterfaces on 
different ports?

I need to switch traffic at L2 between two sub interfaces G1/2.3000 and
G1/3.100

I was thinking I can do this with EoMPLS but no so much I get the following 
error and I understand why.

SWITCH(config)#int g1/3.100
SWITCH(config-subif)#encapsulation dot1Q 100 SWITCH(config-subif)#xconnect
192.168.0.2 3 encapsulation mpls Local switching to peer address 192.168.0.2 is 
not supported

Is there any way to switch L2 traffic between two subinterface on the same of 
different ports?




Cisco 6500 Sup720-3bxl using WS-x6724-SFP module, 
s72033_rp-ADVIPSERVICESK9_WAN-M, Version 12.2(33)SXH8b
-


interface GigabitEthernet1/2
 no ip address
!
interface GigabitEthernet1/2.2000
!To other MPLS Device on network EoMPLS
encapsulation dot1Q 2000
xconnect 192.168.0.1 1 encapsulation mpls !
Interface GigabitEthernet1/2.3000
!!Need to connect to
GigabitEthernet1/3.100 encapsulation dot1Q 3000 !
interface GigabitEthernet1/3
 no ip address
!
Interface GigabitEthernet1/3.100
Need to connect to G1/2.3000 
encapsulation dot1Q 100

Thanks

Erik




CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or 
previous e-mail messages attached to it may contain confidential information 
that is legally privileged. If you are not the intended recipient, or a person 
responsible for delivering it to the intended recipient, you are hereby 
notified that any disclosure, copying, distribution or use of any of the 
information contained in or attached to this transmission is STRICTLY 
PROHIBITED. If you have received this transmission in error please notify the 
sender immediately by replying to this e-mail. You must destroy the original 
transmission and its attachments without reading or saving in any manner. Thank 
you.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


CONFIDENTIALITY NOTICE: This e-mail transmission, and any documents, files or 
previous e-mail messages attached to it may contain confidential information 
that is legally privileged. If you are not the intended recipient, or a person 
responsible for delivering it to the intended recipient, you are hereby 
notified that any disclosure, copying, distribution or use of any of the 
information contained in or attached to this transmission is STRICTLY 
PROHIBITED. If you have received this transmission in error please notify the 
sender immediately by replying to this e-mail. You must destroy the original 
transmission and its attachments without reading or saving in any manner. Thank 
you.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] DHCP Relay agent

2012-06-18 Thread M K

Hi , I am trying o configure DHCP relay agent using the ip helper-addressThe 
topology is R1 F0/0 -- R3 F0/0 , R3 F0/1 -- R2 F0/0
R1#sh run int f0/0Building configuration...
Current configuration : 96 bytes!interface FastEthernet0/0 ip address 
192.168.10.1 255.255.255.0 speed 100 full-duplexend
ip dhcp excluded-address 192.168.20.3ip dhcp pool POOL   network 192.168.20.0 
255.255.255.0   default-router 192.168.20.3 
R2#sh run int f0/0Building configuration...
Current configuration : 93 bytes!interface FastEthernet0/0 ip address dhcp no 
ip route-cache speed 100 full-duplexend
R3#sh run int f0/0Building configuration...
Current configuration : 96 bytes!interface FastEthernet0/0 ip address 
192.168.10.2 255.255.255.0 speed 100 full-duplexend
R3#sh run int f0/1Building configuration...
Current configuration : 151 bytes!interface FastEthernet0/1 ip address 
192.168.20.3 255.255.255.0 ip helper-address 192.168.10.1 speed 100 full-duplex
The issue i am facing is that when i check the interface on R2 , there is no IP 
assigned
R2#sh ip int bri | inc DHCPFastEthernet0/0unassigned  YES DHCP  
 upup 
Even though , I can see it from the Server (R1)
R1#sh ip dhcp binding Bindings from all pools not associated with VRF:IP 
address  Client-ID/  Lease expirationType   
 Hardware address/User name192.168.20.6
0063.6973.636f.2d63.Mar 01 2002 10:57 PMAutomatic
3230.312e.3538.3435.2e30.3030.302d.4661.
302f.30
Any ideas guys ?
Thanks
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/