Re: [c-nsp] Latest Nexus 5k NX-OS?

2013-05-01 Thread Thomason, Simon
Thanks

Simon Thomason
Network Engineer

2649 Logan Road
Eight Mile Plains, QLD, 4113
PO Box 4 Springwood, QLD 4127
T +61 7 3361 2359
F +61 7 3841 1048
E simon.thoma...@racq.com.au<mailto:simon.thoma...@racq.com.au>
W racq.com

<http://www.racq.com.au>[cid:image001.jpg@01CC2B42.71ED1320]<http://www.racq.com.au/><http://www.racq.com.au>




<http://www.racq.com.au/decadeofaction>[cid:image002.jpg@01CC2B42.71ED1320]<http://www.racq.com.au/decadeofaction><http://www.racq.com.au/decadeofaction>





Like us on [cid:image003.gif@01CC2B42.71ED1320] 
<http://www.facebook.com/racqofficial>   Follow us on 
[cid:image004.gif@01CC2B42.71ED1320] <http://www.twitter.com/racqofficial>
From: Ramesh Karki [mailto:rameshka...@gmail.com]
Sent: Wednesday, 15 June 2011 9:37 AM
To: Thomason, Simon
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Latest Nexus 5k NX-OS?


It is better to stay with existing version until 5.03(n2) get released.

5.0.3.N1.1c has a bug (CSCtn94753) which cause the slot# to appear 
automatically in config and can't delete them easily.

Thanks
  -R

On Tue, Jun 14, 2011 at 3:35 PM, Thomason, Simon 
mailto:simon.thoma...@racq.com.au>> wrote:
Hey All,

Was just wondering if anyone has started to use n5000-uk9.5.0.3.N1.1c.bin NX-OS?

I have been advised this will fix a few issues with our monitoring solution 
Statseeker (nexus does not send correct snmp info to statseeker).

Currently running on n5000-uk9.5.0.2.N2.1.bin so there are really no major 
features in the newer version to really drive home the point of an upgrade.

Just wanted to hear from anyone running on the cutting edge and if they have 
had any issues with it.

Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland's largest display of collectable vehicles. Visit 
www.racq.com/motorfest<http://www.racq.com/motorfest>

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail 
unsubscr...@racq.com.au<mailto:unsubscr...@racq.com.au> or contact RACQ on 13 
19 05.

___
cisco-nsp mailing list  
cisco-nsp@puck.nether.net<mailto:cisco-nsp@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland's largest display of collectable vehicles. Visit 
www.racq.com/motorfest

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited. RACQ does not warrant or represent that this email is 
free from viruses or defects. If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
<><><><>___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Cisco AnyConnect VPN Client

2013-05-01 Thread Thomason, Simon
Where are you getting this information from?



As of 8.4 they redid the licensing for anyconnect and also added ikev2 ipsec to 
the anyconnect suite unless I missed something.





If you can get pics

[cid:image001.png@01CC9AD5.10537C00]





-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott Voll
Sent: Friday, 4 November 2011 7:20 AM
To: Manu Chao
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Cisco AnyConnect VPN Client



NO.  Anyconnect is a ssl vpn only. and licensed.



Scott



On Thu, Nov 3, 2011 at 9:24 AM, Manu Chao  wrote:



> I haven't found how to configure IPSec with Cisco AnyConnect VPN Client.

>

> Is it possible?

> ___

> cisco-nsp mailing list  cisco-nsp@puck.nether.net

> https://puck.nether.net/mailman/listinfo/cisco-nsp

> archive at http://puck.nether.net/pipermail/cisco-nsp/

>

___

cisco-nsp mailing list  cisco-nsp@puck.nether.net

https://puck.nether.net/mailman/listinfo/cisco-nsp

archive at http://puck.nether.net/pipermail/cisco-nsp/



Show Your RACQ Card & Save during November and save 20% at Repco. For more info 
visit: www.racq.com/repco

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited. RACQ does not warrant or represent that this email is 
free from viruses or defects. If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
<>___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Local printer will not print when connected to Cisco VPN client or checkpoint..Please help

2012-03-27 Thread Thomason, Simon
Sorry I am pretty certain I total miss read this one. Split tunnelling will 
only work if you specify what is and is not interesting traffic for the VPN and 
local network.

Depending on what client you are using you can enable local lan access in 
anyconnect (not certain if there is an option for this in the old Cisco VPN).




-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Quinn Kuzmich
Sent: Wednesday, 28 March 2012 12:04 PM
To: Renelson Panosky
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Local printer will not print when connected to Cisco VPN 
client or checkpoint..Please help

Enable split tunneling on the VPN or plug the printer into a local USB port.

Q

On Tue, Mar 27, 2012 at 7:32 PM, Renelson Panosky wrote:

> I have a user who work from home and he has a home network printer which
> connected to his wireless router throuh a LAN port.  Whenever he is VPN
> into the office he is not able to print from his home network printer.
> but if he  disconnect from the VPN then he can print.   I already make sure
> split tunnelling is enabled on the VPN server  and Local LAN access is
> enabled on his machines.  However he can print if he connects his wireless
> printer directly to his PC or Laptop he is just can't print wirelessly.
> Any idea how i can get him to be able to print wirelessly while VPN into
> the office.
>
> Things i've already checked:
>
> 1) he can ping his printer IP address
> 2) While connected to the VPN he can see his home printer
>
> Any help will greatly appreciated...
>
> Renelson
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


RACQ gets more than 9 out of 10 cars going again – quick smart. That’s 
Australia’s highest success rate! Be part of Queensland’s largest club. Visit 
racq.com/roadsiderescue

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Local printer will not print when connected to Cisco VPN client or checkpoint..Please help

2012-03-27 Thread Thomason, Simon
Does the printer have a default gateway as in able to see outside its own 
subnet? Can you ping/tracroute to it?


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Quinn Kuzmich
Sent: Wednesday, 28 March 2012 12:04 PM
To: Renelson Panosky
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Local printer will not print when connected to Cisco VPN 
client or checkpoint..Please help

Enable split tunneling on the VPN or plug the printer into a local USB port.

Q

On Tue, Mar 27, 2012 at 7:32 PM, Renelson Panosky wrote:

> I have a user who work from home and he has a home network printer which
> connected to his wireless router throuh a LAN port.  Whenever he is VPN
> into the office he is not able to print from his home network printer.
> but if he  disconnect from the VPN then he can print.   I already make sure
> split tunnelling is enabled on the VPN server  and Local LAN access is
> enabled on his machines.  However he can print if he connects his wireless
> printer directly to his PC or Laptop he is just can't print wirelessly.
> Any idea how i can get him to be able to print wirelessly while VPN into
> the office.
>
> Things i've already checked:
>
> 1) he can ping his printer IP address
> 2) While connected to the VPN he can see his home printer
>
> Any help will greatly appreciated...
>
> Renelson
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


RACQ gets more than 9 out of 10 cars going again – quick smart. That’s 
Australia’s highest success rate! Be part of Queensland’s largest club. Visit 
racq.com/roadsiderescue

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] 2960S IOS

2012-03-20 Thread Thomason, Simon
Always a good idea to read the field notice and current / fixed bugs in your 
new IOS. There might be a bug but it might not be relevant to your situation.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Elliot
Sent: Wednesday, 21 March 2012 3:43 PM
To: jiri.procha...@superhosting.cz; cisco-nsp
Subject: Re: [c-nsp] 2960S IOS



>
> John,
>
>
> we're using 15.0.1-SE2 (and 15.0.1-SE1) on aproximately 20 2960S's for a
> while and we have no problem so far.
>


Thanks to all who responded - have upgraded to 15.0(1)SE2...fingers crossed we 
encounter no issues :)
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


RACQ gets more than 9 out of 10 cars going again – quick smart. That’s 
Australia’s highest success rate! Be part of Queensland’s largest club. Visit 
racq.com/roadsiderescue

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] 2960S IOS

2012-03-20 Thread Thomason, Simon
Not certain if anyone is looking into smart install or vstack but when you go 
to 15 train you get a few nicer features which is one of the reasons we have 
gone into the 15 train where we can.




-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Thomason, Simon
Sent: Wednesday, 21 March 2012 9:16 AM
To: 'John Elliot'; cisco-nsp
Subject: Re: [c-nsp] 2960S IOS

Hi John,

I just upgrade our branch fleet of 2960s' to 15.0.1-SE2 if that helps.

Cheers,

Simon.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Elliot
Sent: Wednesday, 21 March 2012 9:13 AM
To: cisco-nsp
Subject: [c-nsp] 2960S IOS


Hi Guys,
Have a pair of new 2960S's that are running 12.2(55)SE3 - Just after a 
recommendation on whether to upgrade to 12.2.58-SE2 or go to 15.0.1-SE2 ?
Cheers.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


RACQ gets more than 9 out of 10 cars going again – quick smart. That’s 
Australia’s highest success rate! Be part of Queensland’s largest club. Visit 
racq.com/roadsiderescue

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note:
If you are not the intended recipient, please delete this email as its use is 
prohibited.
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

RACQ gets more than 9 out of 10 cars going again – quick smart. That’s 
Australia’s highest success rate! Be part of Queensland’s largest club. Visit 
racq.com/roadsiderescue

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] 2960S IOS

2012-03-20 Thread Thomason, Simon
Hi John,

I just upgrade our branch fleet of 2960s' to 15.0.1-SE2 if that helps.

Cheers,

Simon.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Elliot
Sent: Wednesday, 21 March 2012 9:13 AM
To: cisco-nsp
Subject: [c-nsp] 2960S IOS


Hi Guys,
Have a pair of new 2960S's that are running 12.2(55)SE3 - Just after a 
recommendation on whether to upgrade to 12.2.58-SE2 or go to 15.0.1-SE2 ?
Cheers.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


RACQ gets more than 9 out of 10 cars going again – quick smart. That’s 
Australia’s highest success rate! Be part of Queensland’s largest club. Visit 
racq.com/roadsiderescue

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Cisco ASA and ipads

2012-01-29 Thread Thomason, Simon
Software client but I was thinking if the client could send information about 
itself (dot1x) part then this might work. Sorry if I have miss understood dot1x 
but thought that the same kind of functionality could be use such as for 
wireless with the vpn client.

Just trying to find out what can be done right now.


-Original Message-
From: Christopher J. Pilkington [mailto:c...@0x1.net]
Sent: Monday, 30 January 2012 3:16 PM
To: Thomason, Simon
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Cisco ASA and ipads

On Jan 29, 2012, at 22:28, "Thomason, Simon"  wrote:

> Just did a quick search to see if the ASA would support Dot1x and does not 
> look like they do as this might have been a different option.

Perhaps I'm misunderstanding your topology here... are these laptops
entering your network with a software VPN client, or do you have a
router at their site terminating the VPN tunnel?

If the former, I don't see how 802.1x fits.

-cjp


Renew your membership online, simply visit 
http://www.racq.com.au/my_racq/make_a_payment today.

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco ASA and ipads

2012-01-29 Thread Thomason, Simon
That would be a policy question not a technical one :)


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Dobbins, Roland
Sent: Monday, 30 January 2012 1:48 PM
To: Cisco NSP
Subject: Re: [c-nsp] Cisco ASA and ipads


On Jan 30, 2012, at 9:54 AM, Thomason, Simon wrote:

> have the ASA aware that the device connecting is an IPAD and heavily restrict 
> its access.

Why does being an iPad make a device somehow undesirable and deserving of heavy 
restrictions?

It can be argued that the iPad is at least superficially more secure than 
general-purpose computers.  If I were to differentiate access policies between 
iPads and general-purpose computers (which I can't imagine having a need to 
do), I'd be inclined to give the iPads *more* privileges than the 
general-purpose computers, not less.

---
Roland Dobbins  // <http://www.arbornetworks.com>

The basis of optimism is sheer terror.

  -- Oscar Wilde


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Renew your membership online, simply visit 
http://www.racq.com.au/my_racq/make_a_payment today.

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco ASA and ipads

2012-01-29 Thread Thomason, Simon
I am looking at allowing IPADS to from a VPN with our ASA to provide limited 
access.

I would like to ideally have the IPAD connect with a cert and username password 
but have the ASA aware that the device connecting is an IPAD and heavily 
restrict its access.

I really need the ASA to be aware what these device are to prevent users 
importing a laptop certain and gaining full access to the network over their 
IPAD. I am pretty certain you can get this functionality with premium but just 
want to check you can and it works well.

Has anyone look into this at all?

Just did a quick search to see if the ASA would support Dot1x and does not look 
like they do as this might have been a different option.

Cheers,

Simon T

Renew your membership online, simply visit 
http://www.racq.com.au/my_racq/make_a_payment today.

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited. RACQ does not warrant or represent that this email is 
free from viruses or defects. If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-15 Thread Thomason, Simon
Do you know what the limit to vlans on flexfabric is? As we seem to be running 
into an issues with Vlan limits right now and depending on which person/website 
I ask depends on the limit.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Asbjorn Hojmark - Lists
Sent: Friday, 16 December 2011 10:42 AM
To: 'Pablo Espinosa'
Cc: 'cisco-nsp'
Subject: Re: [c-nsp] Cisco Nexus and HP Flexfabric

We have customers running the Nexus B22HP (Cisco/HP FEX) and it works pretty
well.

Flex-Whatever sucks. Bowling balls through straws. It's a switch, but not a
switch. It doesn't do QoS. (Flex-NIC bandwidth-limitations work only in one
direction). It doesn't do multi-hop FCoE (no FCoE out of the rack), and thus
requires more FC ports = more expensive, it is limited in number of VLANs.
Management sucks. Server admins configure networking.

>From my experience I'd say

1st prio: B22HP -> N5500 (limited market exposure, but cool tech)
2nd prio: Pass-Through -> N2232 -> N5500
...
5th prio: CBS-3120X -> N5500
...
8th prio: barbed wired
...
Cth prio: VC FlexFabric -> N5500
...
Fth prio: VC Flex-10 -> N5500

Seriously.

-A

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Pablo Espinosa
Sent: Tuesday, December 13, 2011 11:10 PM
To: cisco-nsp
Subject: Re: [c-nsp] Cisco Nexus and HP Flexfabric

Actually, I mis-spoke on the HP Flexfabric question.

I've been asked to consider the HP Flexfabric product OR the
integrated Cisco Nexus 2K within an HP Blade serverIf anyone has
deployed either solution, I would love some feedback

thanks
p-

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Stuck for gift ideas? Check out racq.com/shop where you are sure to find 
something for everyone.

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco 5k with HP flex Fabric

2011-12-13 Thread Thomason, Simon
Tried all of these things kind of lost on this one. Waiting to hear back from 
HP.


-Original Message-
From: Håvard Staub Nyhus [mailto:hny...@gmail.com]
Sent: Tuesday, 13 December 2011 11:16 PM
To: Thomason, Simon
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Cisco 5k with HP flex Fabric

> Has anyone run into issues with adding new vlans to a VPC for HP blades? I 
> have just provisioned a new network to pump down to my HP blades but have run 
> into issues on the HP farm.

HP Flexfabric certainly feels like a black hole in the data center
network infrastructure. Are you sure the vlan is correctly provisioned
on the HP blades? It is certainly easy enough to misconfigure the
flexfabric with regards to failover.

What kind of channel protocol are you running? LACP? what does "show
port-channel summary" say? Is everything connected properly? Try
turning on LLDP on your Nexus and verify your connections...

--
Håvard Staub Nyhus
Network Consultant
+47 41 88 00 99


Stuck for gift ideas? Check out racq.com/shop where you are sure to find 
something for everyone.

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Cisco 5k with HP flex Fabric

2011-12-12 Thread Thomason, Simon
Hi All,

Has anyone run into issues with adding new vlans to a VPC for HP blades? I have 
just provisioned a new network to pump down to my HP blades but have run into 
issues on the HP farm.

Currently have 12 chassis spread over 2 sites with 2 new networks (1 per site) 
not working at all at one site and only 1 of the 6 chassis working with the new 
network.

At both sites I have allocated a new port with just this new network on it and 
brought up a server fine on the new network.

At our DR site I have had the server team reboot both flexfabric one at a time 
and still does not work.

I have even gone to the length of having the new VLAN taken off and put back on 
the flex fabric.

Just wanted to see if anyone else had run into an issues like this. Server team 
currently have a job opened with HP but wanted to see if anyone could help here.

Below is some code for the VPC but the only real difference is that the working 
one has a few less vlans.

---code

EMP31D11NEXUS# sh vlan id 328

VLAN Name StatusPorts
  - ---
328  MS_Exchange_10.53.128.0/24   activePo1, Po2, Po3, Po37, Po38, Po39
Po40, Po50, Po51, Po52, Po53
Po55, Po56, Po64, Po65

Remote SPAN VLAN

Disabled

Primary  Secondary  Type Ports
---  -  ---  ---

!Working VPC
interface port-channel40
  description Blade Chassis EMPR1C6CH1 VConnect 2
  switchport mode trunk
  vpc 40
  switchport trunk allowed vlan 314,321-323,328,360,362,617
  spanning-tree port type edge trunk
  speed 1

! example of a a VPC that is not working.
EMP31D11NEXUS# sh run int po50

!Command: show running-config interface port-channel50
!Time: Tue Dec 13 14:15:00 2011

version 5.0(2)N2(1)

interface port-channel50
  description L EMPR1C1CH1-VC1
  switchport mode trunk
  vpc 50
  switchport trunk allowed vlan 310-311,314-315,321-323,328,360,362,610-615,617
  spanning-tree port type edge trunk
  speed 1

---code



Stuck for gift ideas? Check out racq.com/shop where you are sure to find 
something for everyone.

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please delete this email as its use is 
prohibited. 
RACQ does not warrant or represent that this email is free from viruses or 
defects.
If you do not wish to receive any further commercial electronic messages from 
RACQ
please e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco Branch router needs a reboot after updating MOH

2011-12-05 Thread Thomason, Simon
Hey All,

Just to clear up levels of knowledge before I begin I only do the data side of 
the network but I am now chasing up a problem for our Voice team as each time 
they update the Music on hold on our branch routes they need to reboot the 
router to get the MOH to work properly.

I for the life of me can believe that you have to reboot a router to get MOH 
working so I am asking the if there something they are missing with this 
updates. I did a bit of basic looking around and could not find out anything 
with my limited knowledge of this area.

Any help our guidance would be appreciated. Also know I could lodge a job on 
this one but thought it must be something simple missing.

Models 1800 2800 2900 affected.

issue
Issue - Once we upload the new MOH file, if we don't reboot the gateway then 
phones doesn't play the complete hold message and just keep repeating 2-3 
seconds of whole file. We tried it on all RACQ branches and each gateway had 
the same issue.
issue


Config
!
call-manager-fallback
 moh SampleAudioSource.ulaw.wav
 multicast moh 239.1.1.9 port 16384 route 10.54.21.1 10.54.20.1
!
Config

log
CRN11R01#sh ver
Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.0(1)M1, 
RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Wed 02-Dec-09 15:23 by prod_rel_team

ROM: System Bootstrap, Version 15.0(1r)M1, RELEASE SOFTWARE (fc1)

CRN11R01 uptime is 19 hours, 10 minutes
System returned to ROM by reload at 18:26:47 EST Mon Dec 5 2011
System restarted at 18:28:05 EST Mon Dec 5 2011
System image file is "flash0:c2900-universalk9-mz.SPA.150-1.M1.bin"
Last reload reason: Reload Command



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
exp...@cisco.com.

Cisco CISCO2911/K9 (revision 1.0) with 479232K/45056K bytes of memory.
Processor board ID #
3 Gigabit Ethernet interfaces
21 Serial interfaces
1 Channelized E1/PRI port
2 Voice FXS interfaces
DRAM configuration is 64 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
254464K bytes of ATA System CompactFlash 0 (Read/Write)


License Info:

License UDI:

-
Device#   PID   SN
-
*0CISCO2911/K9  #



Technology Package License Information for Module:'c2900'


TechnologyTechnology-package  Technology-package
  Current   Type  Next reboot
-
ipbaseipbasek9  Permanent ipbasek9
security  None  None  None
ucuck9  Permanent uck9
data  None  None  None

Configuration register is 0x2102


Directory of flash0:/

1  -rw-62558836  Feb 11 2010 15:43:34 +10:00  
c2900-universalk9-mz.SPA.150-1.M1.bin
2  -rw-2903  Feb 11 2010 15:50:40 +10:00  cpconfig-29xx.cfg
3  -rw- 2915328  Feb 11 2010 15:50:54 +10:00  cpexpress.tar
4  -rw-1038  Feb 11 2010 15:51:04 +10:00  home.shtml
5  -rw-  115712  Feb 11 2010 15:51:12 +10:00  home.tar
6  -rw- 1697952  Feb 11 2010 15:51:24 +10:00  
securedesktop-ios-3.1.1.45-k9.pkg
7  -rw-  415956  Feb 11 2010 15:51:36 +10:00  
sslclient-win-1.1.4.176.pkg
8  -rw- 600   Mar 8 2010 12:46:20 +10:00  vlan.dat
9  -rw- 2795232   Dec 5 2011 18:26:24 +10:00  SampleAudioSource.ulaw.wav
   10  -rw-   18294  Jan 18 2011 12:23:56 +10:00  CRN11R01-18012011.CONF

260153344 bytes total (189607936 bytes free)
log

Simon Thomason

Stuck for gift ideas? Check out racq.com/shop where you are sure to find 
something for everyone.

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited. RACQ does not warrant or represent that this email is 
free from viruses or defects. If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.
Please Note: 
If you are not the intended recipient, please de

Re: [c-nsp] Cisco AnyConnect VPN Client

2011-11-03 Thread Thomason, Simon
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/data_sheet_c78-527494.html

VPN Protocol Choice SSL (TLS and DTLS), and IPsec/IKEv2
 New in AnyConnect 3.0

* AnyConnect now provides a choice of VPN protocols, allowing administrators to 
use whichever protocol best fits their business needs
* Tunneling support includes SSL (TLS and DTLS) and next-generation IPsec 
(IKEv2)
* DTLS provides an optimized connection for latency-sensitive traffic, such as 
VoIP traffic or TCP-based application access
* TLS (HTTP over TLS/SSL) ensures availability of network connectivity through 
locked-down environments, including those using web proxy servers
* IPsec/IKEv2 provides an optimized connection for latency-sensitive traffic 
when security policies require use of IPsec


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Manu Chao
Sent: Friday, 4 November 2011 2:24 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Cisco AnyConnect VPN Client

I haven't found how to configure IPSec with Cisco AnyConnect VPN Client.

Is it possible?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Show Your RACQ Card & Save during November and save 20% at Repco. For more info 
visit: www.racq.com/repco

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Changing VLANs

2011-11-02 Thread Thomason, Simon
You could use EEM and tcl scripts to do this.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mohammad Khalil
Sent: Thursday, 3 November 2011 4:15 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Changing VLANs


Hi all , i have a layer 2 switch , i want to connect a PC to a port and number 
of DHCP servers to other ports
i want to the PC to communicate with each server every 5 minutes
for example PC is connected to F0/1 and Server 1 is connected to F0/2 , after 5 
minutes i want the port the PC connecting to to change its VLAN in order to 
communicate with Server 2 which is connected to port F0/3 (which is on 
different VLAN)

Thanks

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Show Your RACQ Card & Save during November and save 20% at Repco. For more info 
visit: www.racq.com/repco

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] "Strange" Cisco ASA5520 errors - Connection limit exceeded

2011-10-27 Thread Thomason, Simon
Sh activation-key

ASA# sh activation-key

Licensed features for this platform:
Maximum Physical Interfaces   : Unlimited  perpetual
Maximum VLANs : 150perpetual
Inside Hosts  : Unlimited  perpetual
Failover  : Active/Active  perpetual
VPN-DES   : Enabledperpetual
VPN-3DES-AES  : Enabledperpetual
Security Contexts : 2  perpetual
GTP/GPRS  : Disabled   perpetual
AnyConnect Premium Peers  : 2  perpetual <<< what does this 
one say?
AnyConnect Essentials : Disabled   perpetual
Other VPN Peers   : 750perpetual
Total VPN Peers   : 750perpetual
Shared License: Disabled   perpetual
AnyConnect for Mobile : Disabled   perpetual
AnyConnect for Cisco VPN Phone: Disabled   perpetual
Advanced Endpoint Assessment  : Disabled   perpetual
UC Phone Proxy Sessions   : 2  perpetual
Total UC Proxy Sessions   : 2  perpetual
Botnet Traffic Filter : Disabled   perpetual
Intercompany Media Engine : Disabled   perpetual



-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Peter Adkins
Sent: Friday, 28 October 2011 3:13 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] "Strange" Cisco ASA5520 errors - Connection limit exceeded

Hi all,

The scenario is that we have two 5520s for this environment configured for
fail-over, these devices currently terminate a whopping 2x L2L IPSec VPNs
and a handful of SSL VPN sessions.

This morning we encountered a strange issue which was originally believed to
be due to ACLs not permitting traffic; effectively, if I were to log in to
one of the configured SSL VPNs I was unable to connect to any services
configured to be permitted through the VPN filter.  As a last ditch effort
to work out what was wrong I permitted ANY IP traffic through to the
required network, however, this still didn't fix the issue.

As an example of what we were seeing, when attempts to telnet into TCP port
1433 were failing, the following was found in the logs:

...
%ASA-3-201011: Connection limit exceeded -35/5000 for input packet from
X.X.X.X/65374 to Y.Y.Y.Y/1433 on interface outside
%ASA-3-201011: Connection limit exceeded -35/5000 for input packet from
X.X.X.X/65374 to Y.Y.Y.Y/1433 on interface outside
%ASA-3-201011: Connection limit exceeded -35/5000 for input packet from
X.X.X.X/65374 to Y.Y.Y.Y/1433 on interface outside
%ASA-3-201011: Connection limit exceeded -35/5000 for input packet from
X.X.X.X/65375 to Y.Y.Y.Y/1433 on interface outside
%ASA-3-201011: Connection limit exceeded -35/5000 for input packet from
X.X.X.X/65375 to Y.Y.Y.Y/1433 on interface outside
%ASA-3-201011: Connection limit exceeded -35/5000 for input packet from
X.X.X.X/65375 to Y.Y.Y.Y/1433 on interface outside
...

The Cisco website indicates that these sorts of messages would be presented
if the configured connection limits were, well, exceeded. However, I am
slightly perplexed as to the current count staying at -35 for all reported
messages -- as there was a large number of them.

...
Interface outside:
  Service-policy: CONNS
Class-map: CONNS
  Set connection policy: conn-max 5000 embryonic-conn-max 30
current embryonic conns 0, current conns -35, drop 5622
  Set connection timeout policy:
embryonic 0:40:00 half-closed 0:20:00 idle 2:00:00
DCD: enabled, retry-interval 0:00:15, max-retries 5
DCD: client-probe 530, server-probe 0, conn-expiration 106
...

I could understand if we were reaching a session limit, however, with only
two clients connected and a max of 5000 I don't believe this to be the case.
Also, as mentioned, the current session index being 'stuck' at -35 concerns
me slightly.

In the end, we had failed over to the redundant node which did not exhibit
this issue. However, as soon as we failed back the problem came straight
back. The only way to resolve the issue was a reload.

I'm trying to work out whether anyone has encountered this issue before on
an ASA55x0 running 8.2(4). Mainly to determine whether this was something
strange, or me just being daft. As much as I'd like to log a TAC case for
this one, this particular device does not have a valid support contract.
However, for my sanity I'd like to establish whether this is / was a
potential code issue, or a problem with the device itself.

Regards,
Peter Adkins
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Members sav

[c-nsp] Anyconnect 3.0 client as a service.

2011-10-18 Thread Thomason, Simon
Hello all,

I just wanted to know if you could start the anyconnect 3.0 client on a windows 
xp machine as service or system process so normal users can not ctrl + alt + 
del and kill the process.


Cheers,

Simon T

Members save 1%* p.a. on car loan rates with no ongoing fees. Apply today at 
http://www.racq.com.au/promotions/racq_car_loans

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] redundant Cat3560 trunk links

2011-10-09 Thread Thomason, Simon
Etherchannel?


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of zaidoon h
Sent: Sunday, 9 October 2011 9:52 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] redundant Cat3560 trunk links

How to connect  redundant
Cat3560  with trunk links to 7606 (ios 12.2 sr ) ?
how to terminate l3 sub interfaces ?
Dose 802.1Q Tunneling Works ? any advise please.

Zaid
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Members save 1%* p.a. on car loan rates with no ongoing fees. Apply today at 
http://www.racq.com.au/promotions/racq_car_loans

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] WAAS Mobile client and IE7

2011-07-25 Thread Thomason, Simon
Hey All,

Bit of a long shot but is anyone running WAAS mobile client and having issues 
with IE7.

I have had reports and now able to replicate issues where IE7 will open and 
crash the WAAS mobile client.

Currently have a tac case open but just wanted to see if anyone has run into an 
issues like this and whether there is a quick fix (other than stop using IE7).

WAAS mobile version 3.5.2

Cheers,

Simon T.

Save money and avoid queues – pre-purchase discounted Ekka tickets at your 
local RACQ store. Visit: racq.com/entertainment

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Cisco Nexus 2248TP interface down/inactive

2011-07-21 Thread Thomason, Simon
More information is required!

What interfaces are you working on?

What makes you think it is a spanning-tree issue? Logs debugs?


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Renelson Panosky
Sent: Friday, 22 July 2011 10:28 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Cisco Nexus 2248TP interface down/inactive

I am working in this interface 2248TP some of the interface are showing 
down/inactive.  My svi on the core are up/up.  I think it maybe a spanning-tree 
issue but I am not sure.  can anyone help ?



___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Save money and avoid queues – pre-purchase discounted Ekka tickets at your 
local RACQ store. Visit: racq.com/entertainment

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Nexus 2k - host ports

2011-06-23 Thread Thomason, Simon
Hey All,

Just doing a little research at the moment for some design work and I found out 
that you can not plug a switch into a nexus2k as all ports are host ports.

I am certain a least a few people on here have had a look into this and was 
just wondering if there is some kind of work around?

I have also been trying to find out if on the road map for the nexus platform 
there is something in the works to support this at a later date.

Reason for plugging a switch into the Nexus2k's would be to allow the ilo ports 
which only operate at 100M to be plugged into a cheaper switch rather than 
burning up a 10/100/1000 extender per rack with a 10gig extender.

---reference---
Host interfaces are for host or server connectivity only; host interfaces 
cannot connect to another network. These interfaces are always enabled as edge 
ports; as they come up, these ports immediately transition to the forwarding 
state. Host interfaces are always enabled with BPDU Guard. If a BPDU is 
received, the port is immediately placed in an error-disabled state which keeps 
the link down.

http://www.cisco.com/en/US/docs/switches/datacenter/nexus2000/sw/configuration/guide/rel_4_0_1a/FEX-features.html

Host interfaces are for host or server connectivity only; host interfaces 
cannot connect to another network. These interfaces are always enabled as edge 
ports; as they come up, these ports immediately transition to the forwarding 
state. Host interfaces are always enabled with BPDU Guard. If a BPDU is 
received, the port is immediately placed in an error-disabled state which keeps 
the link down.
---reference---

Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland’s largest display of collectable vehicles. Visit 
www.racq.com/motorfest

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Latest Nexus 5k NX-OS?

2011-06-16 Thread Thomason, Simon
I just saw this email going over the release notes now. I did not see that 
CSCtn94753 was fixed but only skimming over right now.


Flex links looks pretty interesting along with Orphan port shutdown.

-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Gill
Sent: Thursday, 16 June 2011 12:39 AM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Latest Nexus 5k NX-OS?

FYI 5.0(3)N2(1) is out now

John Gill
cisco


On 6/14/11 7:37 PM, Ramesh Karki wrote:
> It is better to stay with existing version until 5.03(n2) get released.
>
> 5.0.3.N1.1c has a bug (CSCtn94753) which cause the slot# to appear
> automatically in config and can't delete them easily.
>
> Thanks
>-R
>
> On Tue, Jun 14, 2011 at 3:35 PM, Thomason, Simon> wrote:
>
>> Hey All,
>>
>> Was just wondering if anyone has started to use n5000-uk9.5.0.3.N1.1c.bin
>> NX-OS?
>>
>> I have been advised this will fix a few issues with our monitoring solution
>> Statseeker (nexus does not send correct snmp info to statseeker).
>>
>> Currently running on n5000-uk9.5.0.2.N2.1.bin so there are really no major
>> features in the newer version to really drive home the point of an upgrade.
>>
>> Just wanted to hear from anyone running on the cutting edge and if they
>> have had any issues with it.
>>
>> Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon
>> over Queensland’s largest display of collectable vehicles. Visit
>> www.racq.com/motorfest
>>
>> Please Note: If you are not the intended recipient, please delete this
>> email as its use is prohibited.  RACQ does not warrant or represent that
>> this email is free from viruses or defects.  If you do not wish to receive
>> any further commercial electronic messages from RACQ please e-mail
>> unsubscr...@racq.com.au or contact RACQ on 13 19 05.
>>
>> ___
>> cisco-nsp mailing list  cisco-nsp@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland’s largest display of collectable vehicles. Visit 
www.racq.com/motorfest

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Latest Nexus 5k NX-OS?

2011-06-14 Thread Thomason, Simon
Hey All,

Was just wondering if anyone has started to use n5000-uk9.5.0.3.N1.1c.bin NX-OS?

I have been advised this will fix a few issues with our monitoring solution 
Statseeker (nexus does not send correct snmp info to statseeker).

Currently running on n5000-uk9.5.0.2.N2.1.bin so there are really no major 
features in the newer version to really drive home the point of an upgrade.

Just wanted to hear from anyone running on the cutting edge and if they have 
had any issues with it.

Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland’s largest display of collectable vehicles. Visit 
www.racq.com/motorfest

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Wireless 802.1x authentication failures

2011-06-14 Thread Thomason, Simon
Are all the clients and server in sync with time? Just out of interest.

-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Edward Iong
Sent: Tuesday, 14 June 2011 4:53 PM
To: engel.lab...@gmail.com
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Wireless 802.1x authentication failures


Hi there,

I have checked the cert is not expired





> CC: cisco-nsp@puck.nether.net
> From: engel.lab...@gmail.com
> Subject: Re: [c-nsp] Wireless 802.1x authentication failures
> Date: Tue, 14 Jun 2011 15:22:14 +0900
> To: edward_io...@hotmail.com
>
> You may want to eliminate several issues contributing to this problem. One 
> thing to check is the expiration date of the certificate issued for MS ISA.
>
> HTH
>
> Sent from my iPhone
>
> On 2011/06/14, at 15:13, Edward Iong  wrote:
>
> >
> > Dear All,
> >
> > We are using windows certificates for authenticate domain computers to 
> > connect wireless network.
> >
> > In previous, it is working. Everyone can access wireless network. But now 
> > no one can get access, we found in the MS ISA event Log, it has a warning 
> > message as below
> >
> >
> > Event Type: Warning
> > Event Source: IAS
> > Event Category: None
> > Event ID: 2
> > Date: 6/14/2011
> > Time: 1:16:37 PM
> > User: N/A
> > Computer: EDC-HKNT135
> > Description:
> > User host/BDNB00011.bd.ABC.com was denied access.
> > Fully-Qualified-User-Name = ABC\BDNB00011$
> > NAS-IP-Address = 10.XXX.XXX.51
> > NAS-Identifier = BDWLC1
> > Called-Station-Identifier = :xxx
> > Calling-Station-Identifier =
> > Client-Friendly-Name = BDWLC1
> > Client-IP-Address = 10.XXX.XXX.51
> > NAS-Port-Type = Wireless - IEEE 802.11
> > NAS-Port = 1
> > Proxy-Policy-Name = Use Windows authentication for all users
> > Authentication-Provider = Windows
> > Authentication-Server = 
> > Policy-Name = 
> > Authentication-Type = EAP
> > EAP-Type = 
> > Reason-Code = 48
> > Reason = The connection attempt did not match any remote access policy.
> > For more information, see Help and Support Center at 
> > http://go.microsoft.com/fwlink/events.asp.
> > Data:
> > : 00 00 00 00 
> >
> > Could anyone have any clues? or any suggestion for me to find out the issue 
> > come from?
> >
> >
> > Thanks and Regards,
> >
> >
> > Edward
> >
> >
> >
> >
> > ___
> > cisco-nsp mailing list cisco-nsp@puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland’s largest display of collectable vehicles. Visit 
www.racq.com/motorfest

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] CIsco 5548P with 2248TP

2011-06-02 Thread Thomason, Simon
Configuration would be a good starting point?

I am assuming you have checked all the basic things; Plugged in and powered on? 
Cabled correctly (Multi or single mode cables)? Interface show fex or optic?


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Renelson Panosky
Sent: Friday, 3 June 2011 4:52 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] CIsco 5548P with 2248TP

Have anybody here is running  Cisco Nexus 5548P with 2248TP.  I configured
everything but i still can't see the Cisco Nexus 2248TP.  Can anyone help me
with this ?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Like us on Facebook at http://www.facebook.com/racqofficial
Follow us on Twitter at http://twitter.com/RACQOfficial

Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland’s largest display of collectable vehicles. Visit 
www.racq.com/motorfest

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] problems with 6500 and syncing sup config.

2011-06-01 Thread Thomason, Simon
Hey Ken,

Lodged a job to tac just in case as this is a core device but I did get a few 
off list emails which pointed me in the right direction.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Matlock, Kenneth L
Sent: Thursday, 2 June 2011 12:15 AM
To: Phil Mayers; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] problems with 6500 and syncing sup config.

Also be VERY careful about this if you're running Modular code.

Modular code actively reads/writes to the flash filesystem periodically,
and not sure if it touches the NVRAM during normal operation.

Ken Matlock
Network Analyst
Exempla Healthcare
(303) 467-4671
matlo...@exempla.org


-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Phil Mayers
Sent: Wednesday, June 01, 2011 1:28 AM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] problems with 6500 and syncing sup config.

On 06/01/2011 02:33 AM, Thomason, Simon wrote:
> Been getting the following error when doing a write me on a 6500.
>
> Jun  1 11:16:35.721 EST: %SYS-SPSTBY-4-CONFIG_NV_NEED_OVERRUN: Non
> config data present at the end of nvram needs to be overwritten to
> fit the configuration into nvram Jun  1 11:16:37.437 EST:

Sounds like the nvram: on the standby sup is full and/or corrupted.

Try:

dir nvram:
dir slavenvram:

...and see if anything obvious presents itself.

It's possible you'll need to:

erase nvram:
erase slavenvram:
wr mem

...but I'd be cautious about doing that. I'm not sure what else it might

kill (e.g. SNMP ifindex persistence, SSH keys, etc.)
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
*** Exempla Confidentiality Notice *** The information contained in this 
message may be privileged and confidential and protected from disclosure. If 
the reader of this message is not the intended recipient, or an employee or 
agent responsible for delivering this message to the intended recipient, you 
are hereby notified that any other dissemination, distribution or copying of 
this communication is strictly prohibited. If you have received this 
communication in error, please notify me immediately by replying to the message 
and deleting it from your computer. Thank you. *** Exempla Confidentiality 
Notice ***


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland’s largest display of collectable vehicles. Visit 
www.racq.com/motorfest
Like us on Facebook at http://www.facebook.com/racqofficial Follow us on 
Twitter at http://twitter.com/RACQOfficial

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] problems with 6500 and syncing sup config.

2011-05-31 Thread Thomason, Simon
Been getting the following error when doing a write me on a 6500.

Jun  1 11:16:35.721 EST: %SYS-SPSTBY-4-CONFIG_NV_NEED_OVERRUN: Non config data 
present at the end of nvram needs to be overwritten to fit the configuration 
into nvram
Jun  1 11:16:37.437 EST: %PFINIT-SP-1-CONFIG_SYNC_FAIL: Sync'ing the private 
configuration to the standby Router FAILED, the file may be already locked by a 
command like: show config.

Had a look around and could not find out a solution for how to fix this issues 
as I have killed everyone's session to the 6500 but still get this error.

I am not certain what process show startup would be in the show process and 
have not as yet been able to find information as to which process this would be.

Anyone seen this before or know of a solution?

Cheer,

Simon.

Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon 
over Queensland’s largest display of collectable vehicles. Visit 
www.racq.com/motorfest
Like us on Facebook at http://www.facebook.com/racqofficial Follow us on 
Twitter at http://twitter.com/RACQOfficial

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Nexus 5k NX-OS upgrade issues VPC access port.

2011-04-12 Thread Thomason, Simon
Hey All,



Just wanted to check something off with the subject matter experts.



Last night did an upgrade on my pair of nexus 5k from 5.0.2N1.1 to 5.0.2.N2.1 
and ran into and issues where after one device was rebooted one of my VPC 
failed until the second Nexus one was upgrade.



I am pretty certain the issue was that that VPC was not running as a edge port 
which caused STP to be inconsistent and causing a type 1 global on the VPC 
taking it down.



So the question is, if I change this port-channel to type edge will this fix 
the issues as I would like to do another pair Friday night.





Log
***
Compatibility check result during upgrade process
***


SPT12D11NEXUS# install all kickstart 
bootflash:n5000-uk9-kickstart.5.0.2.N2.1.bin system 
bootflash:n5000-uk9.5.0.2.N2.1.bin

Verifying image bootflash:/n5000-uk9-kickstart.5.0.2.N2.1.bin for boot variable 
"kickstart".
[] 100% -- SUCCESS

Verifying image bootflash:/n5000-uk9.5.0.2.N2.1.bin for boot variable "system".
[] 100% -- SUCCESS

Verifying image type.
[] 100% -- SUCCESS

Extracting "system" version from image bootflash:/n5000-uk9.5.0.2.N2.1.bin.
[] 100% -- SUCCESS

Extracting "kickstart" version from image 
bootflash:/n5000-uk9-kickstart.5.0.2.N2.1.bin.
[] 100% -- SUCCESS

Extracting "bios" version from image bootflash:/n5000-uk9.5.0.2.N2.1.bin.
[] 100% -- SUCCESS

Performing module support checks.
[] 100% -- SUCCESS

Notifying services about system upgrade.
[] 100% -- SUCCESS



Compatibility check is done:
Module  bootable  Impact  Install-type  Reason
--    --    --
 1   yes  disruptive reset  STP ISSU preupgrade check 
failed - Upgrade needs to be disruptive!



Images will be upgraded according to following table:
Module   Image Running-Version New-Version  Upg-Required
--  --  --  --  
 1  system 5.0(2)N1(1) 5.0(2)N2(1)   yes
 1   kickstart 5.0(2)N1(1) 5.0(2)N2(1)   yes
 1biosv1.3.0(09/08/09)v1.3.0(09/08/09)no
 1   power-seqv1.2v1.2no


Additional info for this installation:
--

Port: port-channel14 in VLAN0312 is Designated. Topology change could occur 
during ISSU.
Upgrade needs to be disruptive!!!


Switch will be reloaded for disruptive upgrade.
Do you want to continue with the installation (y/n)?


***
Error logs on Nexus No.1
***
SPT12D11NEXUS# sh log | in port-channel14
2011 Apr 12 23:25:04.570 SPT12D11NEXUS %ETH_PORT_CHANNEL-5-CREATED: 
port-channel14 created
2011 Apr 12 23:25:12.154 SPT12D11NEXUS 
%ETHPORT-5-IF_DOWN_PORT_CHANNEL_MEMBERS_DOWN: Interface port-channel14 is down 
(No operational members)
2011 Apr 12 23:25:16.597 SPT12D11NEXUS %ETHPORT-5-SPEED: Interface 
port-channel14, operational speed changed to 1 Gbps
2011 Apr 12 23:25:16.598 SPT12D11NEXUS %ETHPORT-5-IF_DUPLEX: Interface 
port-channel14, operational duplex mode changed to Full
2011 Apr 12 23:25:16.598 SPT12D11NEXUS %ETHPORT-5-IF_RX_FLOW_CONTROL: Interface 
port-channel14, operational Receive Flow Control state changed to off
2011 Apr 12 23:25:16.598 SPT12D11NEXUS %ETHPORT-5-IF_TX_FLOW_CONTROL: Interface 
port-channel14, operational Transmit Flow Control state changed to off
2011 Apr 12 23:25:21.622 SPT12D11NEXUS %ETHPORT-5-SPEED: Interface 
port-channel14, operational speed changed to 1 Gbps
2011 Apr 12 23:25:21.623 SPT12D11NEXUS %ETHPORT-5-IF_DUPLEX: Interface 
port-channel14, operational duplex mode changed to Full
2011 Apr 12 23:25:21.623 SPT12D11NEXUS %ETHPORT-5-IF_RX_FLOW_CONTROL: Interface 
port-channel14, operational Receive Flow Control state changed to off
2011 Apr 12 23:25:21.623 SPT12D11NEXUS %ETHPORT-5-IF_TX_FLOW_CONTROL: Interface 
port-channel14, operational Transmit Flow Control state changed to off
2011 Apr 12 23:25:53.352 SPT12D11NEXUS %ETHPORT-5-IF_DOWN_INITIALIZING: 
Interface port-channel14 is down (Initializing)
2011 Apr 12 23:25:53.373 SPT12D11NEXUS 
%ETHPORT-5-IF_DOWN_PORT_CHANNEL_MEMBERS_DOWN: Interface port-channel14 is down 
(No operational members)
2011 Apr 12 23:25:57.159 SPT12D11NEXUS %ETHPORT-5-SPEED: Interface 
port-channel14, operational speed changed to 1 Gbps
2011 Apr 12 23:25:57.160 SPT12D11NEXUS %ETHPORT-5-IF_DUPLEX: Interface 
port-channel14, operational duplex mode changed to Full
2011 Apr 12 23:25:57.160 SPT12D11NEXUS %ETHPORT-5-IF_RX_FLOW_CONTROL: Interface 
port-channel14, operational Receive Flow Control state changed to off
2011 Apr 12 23:25:57.160 SPT12D11NEXUS %ETHPORT-5-IF_TX_FLOW_CONTROL: Interface 
port-channel14, operational Transmit Flow Control state change

Re: [c-nsp] N5K with Generic Copper sfp

2011-03-21 Thread Thomason, Simon
Hey Chris,

Port is set to 1G but have not tried the command just yet. Not certain I am 
going as this is a production device and really do not want to have an event 
happen.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Chris Evans
Sent: Tuesday, 22 March 2011 11:17 AM
To: tvarri...@comcast.net
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] N5K with Generic Copper sfp

The command still works. You also need to configure speed 1000 under the
port.
On Mar 21, 2011 9:03 PM, "Tony Varriale"  wrote:
> On 3/21/2011 6:22 PM, Thomason, Simon wrote:
>> Hey All,
>>
>> Was just wondering if anyone has had much luck using generic copper sfp
in a nexus 5020? I have run into an issue with a generic SFP will not bring
the port up on my 5k but a Cisco one work first time.
>>
>> I do know that Cisco will say to use a Cisco sfp but there is a rather
big price difference between generic and cisco :(
>>
>>
>> log---
>> EMP31D12NEXUS# sh interface ethernet 1/16 transceiver
>> Ethernet1/16
>> sfp is present
>> name is OEM
>> type is 10Gbase-(unknown)
>> part number is GLC-T-CRB
>> revision is A1
>> serial number is TT1209160022
>> nominal bitrate is 1200 MBits/sec
>> Link length supported for copper is 100 m(s)
>> cisco id is --
>> cisco extended id number is 4
>> !
>> Eth1/16 TBA - 10.53.109.x/ down 314 full 1000 1/10g
>>
>>
>>
>> EMP31D12NEXUS# sh interface ethernet 1/16 transceiver
>> Ethernet1/16
>> sfp is present
>> name is CISCO-AVAGO
>> type is 10Gbase-(unknown)
>> part number is ABCU-5710RZ-CS4
>> revision is
>> serial number is AGM1327260K
>> nominal bitrate is 1300 MBits/sec
>> Link length supported for copper is 100 m(s)
>> cisco id is --
>> cisco extended id number is 4
>> !
>> Eth1/16 TBA - 10.53.109.x/ up 314 full 1000 1/10g
>> log---
>>
>> ---config---
>> interface Ethernet1/16
>> description TBA - 10.53.109.x/24
>> switchport access vlan 314
>> speed 1000
>> storm-control broadcast level 0.50
>> udld aggressive
>> channel-group 18 mode active
>> ---config---
>>
>> $50 off vehicle inspections
>> An RACQ vehicle inspection is great for new car buyers, or to check for
any faults before your warranty expires. Members get $50 off the retail
price. For more info visit
http://www.racq.com.au/motoring/cars/car_advice/vehicle_inspections
>>
>> Please Note: If you are not the intended recipient, please delete this
email as its use is prohibited. RACQ does not warrant or represent that this
email is free from viruses or defects. If you do not wish to receive any
further commercial electronic messages from RACQ please e-mail
unsubscr...@racq.com.au or contact RACQ on 13 19 05.
>>
>>
>> ___
>> cisco-nsp mailing list cisco-nsp@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
> The unsupported-transceiver used to work but it's been a long while. I
> suspect it's turned off now.
>
> tv
>
> ___
> cisco-nsp mailing list cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


$50 off vehicle inspections
 An RACQ vehicle inspection is great for new car buyers, or to check for any 
faults before your warranty expires. Members get $50 off the retail price. For 
more info visit 
http://www.racq.com.au/motoring/cars/car_advice/vehicle_inspections

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] N5K with Generic Copper sfp

2011-03-21 Thread Thomason, Simon
Hey All,

Was just wondering if anyone has had much luck using generic copper sfp in a 
nexus 5020? I have run into an issue with a generic SFP will not bring the port 
up on my 5k but a Cisco one work first time.

I do know that Cisco will say to use a Cisco sfp but there is a rather big 
price difference between generic and cisco :(


log---
EMP31D12NEXUS# sh interface ethernet 1/16 transceiver
Ethernet1/16
sfp is present
name is OEM
type is 10Gbase-(unknown)
part number is GLC-T-CRB
revision is A1
serial number is TT1209160022
nominal bitrate is 1200 MBits/sec
Link length supported for copper is 100 m(s)
cisco id is --
cisco extended id number is 4
!
Eth1/16TBA - 10.53.109.x/ down 314   full10001/10g



EMP31D12NEXUS# sh interface ethernet 1/16 transceiver
Ethernet1/16
sfp is present
name is CISCO-AVAGO
type is 10Gbase-(unknown)
part number is ABCU-5710RZ-CS4
revision is
serial number is AGM1327260K
nominal bitrate is 1300 MBits/sec
Link length supported for copper is 100 m(s)
cisco id is --
cisco extended id number is 4
!
Eth1/16TBA - 10.53.109.x/ up   314   full10001/10g
log---

---config---
interface Ethernet1/16
  description TBA - 10.53.109.x/24
  switchport access vlan 314
  speed 1000
  storm-control broadcast level 0.50
  udld aggressive
  channel-group 18 mode active
---config---

$50 off vehicle inspections
 An RACQ vehicle inspection is great for new car buyers, or to check for any 
faults before your warranty expires. Members get $50 off the retail price. For 
more info visit 
http://www.racq.com.au/motoring/cars/car_advice/vehicle_inspections

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Ping test with DF bit and MTU / IP MTU value

2011-01-18 Thread Thomason, Simon
Hey Muhammad,

If you set the MTU size to 1520 and set the DF (do not fragment bit) then it 
will tell all device to never fragment the packets... So if a single hope in 
the chain can not support the max size of the packet you are sending it will 
drop the packet.

Sorry not certain if I missed something here but that seems like a simple 
enough question and answer?!?!

Cheers,

Simon

-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Muhammad Atif Jauhar
Sent: Wednesday, 19 January 2011 12:21 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Ping test with DF bit and MTU / IP MTU value

Hi,

I have very basic question related to MTU / IP MTU value and ping test with
DF bit

*Scenario: *
I have one router connected to HUB router with Link leasing from SP
** 1. On spoke side, we have GigaEthernet Interface with MTU
value set to 1520
 2. On HUB side, that link is terminated on layer-2 switch and
from there to router sub-interface with IP MTU value set to 1520.
 3.  Configurations on both router
* a.  SPOKE Side*
* *interface GigabitEthernet0/1
 mtu 1520
 bandwidth 1
 ip address 192.168.0.1
255.255.255.252
 ip ospf network point-to-point
 ip ospf cost 1000
 ip ospf hello-interval 1
 ip ospf dead-interval 3
 ip ospf mtu-ignore
 duplex auto
 speed auto
 mpls ip
   *b. HUB Side*
*
 interface
GigabitEthernet0/1.100
 bandwidth 1
 encapsulation dot1Q 100
 ip address 192.168.0.2
255.255.255.252
 ip mtu 1520
 ip ospf network point-to-point
 ip ospf cost 1000
 ip ospf hello-interval 1
 ip ospf dead-interval 3
 ip ospf mtu-ignore

mpls ip


*
*Issue:*

I am testing the link and face issue.
  1. while performing ping test without df bit, I am able to
ping with size upto 18024
  2. while performing ping test with df bit, I am able to
ping with size 1520
  3. while performing ping test with df bit, I am able to
ping with size more than 1520

*Kindly let me know, why I am not able to ping with DF bit with size more
than 1520 (MTU value). How can I troubleshoot the issue. *
*
*
*Any comment please*
--
Regards,

Muhammad Atif Jauhar
(+60-10-2155076)
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Buy your loved one the gift of peace of mind with an RACQ gift membership. Join 
the Club today at www.racq.com/membership, 13 1905, 24 hours every day or in 
store

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] How to limit bandwidth on CISCO switch interfaces

2011-01-05 Thread Thomason, Simon
http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a00800a3a25.shtml
 <<< should cover you off.


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of JA Colmenares
Sent: Thursday, 6 January 2011 2:54 PM
To: Cisco NSP Forum
Subject: [c-nsp] How to limit bandwidth on CISCO switch interfaces



I need to limit bandwidth on the trunk ports of two connected switches(2960 to 
3750). It is currently transmitting at 100 mbps and I want to limit it to 50 
mbps How can this be done? can anyone provide any steps or resources to get 
this done.
Thanks
Juan



___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Buy your loved one the gift of peace of mind with an RACQ gift membership. Join 
the Club today at www.racq.com/membership, 13 1905, 24 hours every day or in 
store

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Layer Two tunneling question (advice needed)

2011-01-03 Thread Thomason, Simon
Do you have MPLS between your 6500 already as what you are talking about doing 
is a xconnect or EoMPLS which would rely on you already having an MPLS network?

A xconnect would provide you with layer2 between sites and they are easy to 
setup as long as you already have the MPLS network in place.

You might want to also have a look at OTV on the nexus 7k if you want layer2 
site to site.

Cheers,

Simon T


-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Neiberger
Sent: Tuesday, 4 January 2011 10:23 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Layer Two tunneling question (advice needed)

I've never had to configure any sort of layer two tunneling, so I'm
not really familiar with my options. I'm pretty sure there are many
here who have done this, so I thought I'd ask. What we need to do is
fairly simple. Here's a basic map:


DeviceA -- [6500] ---(fiber run to different site)
[6500] --- DeviceB

At the moment, the devices on each end are connected to layer three
interfaces, not switchports, and the link between the 6500s is routed.
We've run into a legacy issue and the solution is to put DeviceA and
DeviceB on the same vlan. However, we do not want to change the
routing between the 6500s. We really, *really* want to leave the
routing in place. Switching to an all layer-two design causes some
other headaches for us that you don't see because of my simplified
diagram.

So, I think some sort of layer two tunneling is in order. What are our
options if we want to make DeviceA and DeviceB think they're local to
each other and in the same LAN? I've heard of L2TP and of various MPLS
techniques that might solve this, but I've just never needed to use
them and really know nothing about how they're configured or if
they're even legitimate options.

Any thoughts?

Many thanks!
John
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Buy your loved one the gift of peace of mind with an RACQ gift membership. Join 
the Club today at www.racq.com/membership, 13 1905, 24 hours every day or in 
store

Please Note: If you are not the intended recipient, please delete this email as 
its use is prohibited.  RACQ does not warrant or represent that this email is 
free from viruses or defects.  If you do not wish to receive any further 
commercial electronic messages from RACQ please e-mail unsubscr...@racq.com.au 
or contact RACQ on 13 19 05.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/