Hey Oli,
1811(config-vpdn-acc-in)#protocol ?
any Use any protocol
l2f Use L2F
l2tp Use L2TP
pptp Use PPTP
doesn't seem to have protocol pppoe.
So at the moment I have:
---
username Tunnel-In password 7 x
username LAC-Gosford-Test password 7 x
vpdn enable
vpdn multihop
!
vpd
On Mon, 4 Jun 2007, Zahid Hassan wrote:
> Dear All,
>
>
>
> I am carrying full feed Internet (219K) plus VPNv4 routes (1K)
> on an OSR-7609 with SUP-2/PFC2.
>
> I seems to be getting intermittent packets drops and loss of
> connectivity from CPEs terminating on this OSR.
>
> I wondering if has
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of MKS
> Sent: Monday, June 04, 2007 17:23
> To: cisco-nsp@puck.nether.net
> Subject: [c-nsp] Serial-server with modem.
>
> I'm looking for a device to do out-of-band management via
> PSTN/ISDN to the
>
Hi,
Anyone else running 7304 NSE-150's?
Having issues? Please contact me off list and we can swap notes.
Thanks
Brad
--
Brad Gould, Network Engineer
Internode
PO Box 284, Rundle Mall 5000
Level 3, 132 Grenfell Street, Adelaide 5000
P: 08 8228 2999 F: 08 8235 6999
[EMAIL PROTECTED]; http://w
Tauren Mills wrote:
> Phil,
>
> Thanks for the suggestion. However, changing the arp timeout to 300
> doesn't seem to have helped.
Hmm. Re-reading your email, it doesn't sound like that was the problem
anyway.
Can you supply more detail on the physical topo? Does the router hang
off the switc
Hello list,
I have the following issue with a 7600/WS-SUP720-3BXL (12.2(33)SRA3).
I only see hits on the ingress flow-sampler map and "no" hits on the
egress map?
I have configured netflow like this:
interface Vlan208
description "Blaat"
ip address 123.456.789.0 255.255.255.252
no mls ip
On Tue, 2007-06-05 at 11:35 +0200, Koen wrote:
> Hello list,
>
> I have the following issue with a 7600/WS-SUP720-3BXL (12.2(33)SRA3).
> I only see hits on the ingress flow-sampler map and "no" hits on the
> egress map?
>
> I have configured netflow like this:
My understanding was that egress n
Hi,
Is there anyway of getting reliable ACL counters from a Sup720 with PFC3
(non-B/BXL) ?
Is it true that 'show access-lists ' only shows software (MSFC)
handled traffic while 'show tcam interface vlanXXX acl in ip' shows the
hardware counters.
Thanks,
Mark
Mark Tohill
UTV Internet
T:+44
I think what you want is optimised acl logging
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a00801609f6.html#wp1035523
Mark Tohill wrote:
> Hi,
>
> Is there anyway of getting reliable ACL counters from a Sup720 with PFC3
> (non-B/BXL) ?
>
> Is
I've always been told that the card slots in the non VXR 7206s were not hot
swappable. I've got a non VXR 7206 with 1 AC and 1 DC power supply. The DC
needs to come out and an AC stuck back in it's place because it's new home
does not have DC power available. Can you hot swap the power supply in
On Tue, Jun 05, 2007, Richey wrote:
> I've always been told that the card slots in the non VXR 7206s were not hot
> swappable. I've got a non VXR 7206 with 1 AC and 1 DC power supply. The DC
> needs to come out and an AC stuck back in it's place because it's new home
> does not have DC power avai
Hi all,
I have trouble configuring reverse telnet on a 7200/NPE-G2 running
12.2(31)SB5.
sh log:
*Jun 5 03:38:30.275: %-3-INVSTATE: unknown AUTHOR/CONN: Internal
state is invalid: astruct 0x36856E0 ustruct 0x0
-Traceback= 8C6D84 7E2F10 7E2E18 8325DC 832F5C B63E98
sh run | b aux:
line aux
On Tue, Jun 05, 2007, Shakeel Ahmad wrote:
> Guys,
>
> In a scenario, we want to advertise the connected network (Loopback
> interface) into Two OSPF process. It works fine but while advertising we
> need to keep our loopback Classful as connected redistribution doesn't allow
> classless.
.. redi
Guys,
In a scenario, we want to advertise the connected network (Loopback
interface) into Two OSPF process. It works fine but while advertising we
need to keep our loopback Classful as connected redistribution doesn't allow
classless.
Is there any idea, how can i redistribute a /32 instead of cla
I've worked a couple of issues with the NSE-150 if
you want to elaborate on what problem(s) you are seeing.
I don't consider myself an expert on it yet though.
Rodney
On Tue, Jun 05, 2007 at 06:08:00PM +0930, Brad Gould wrote:
> Hi,
>
> Anyone else running 7304 NSE-150's?
>
> Having issues?
On Tue, 5 Jun 2007, Richey wrote:
> I've always been told that the card slots in the non VXR 7206s were not hot
> swappable. I've got a non VXR 7206 with 1 AC and 1 DC power supply. The DC
> needs to come out and an AC stuck back in it's place because it's new home
> does not have DC power avail
Hi all,
On 05.06.2007, at 12:51, Falk Stern wrote:
> Hi all,
>
> I have trouble configuring reverse telnet on a 7200/NPE-G2 running
> 12.2(31)SB5.
>
> #sh run | i aaa:
> aaa new-model
> aaa authentication login default local
> aaa authorization exec default local
> aaa authorization reverse-acces
Besides on-site rogues, there's also the issue of 'accidental' associations
to neighboring APs.
Frank
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Seth Mattinen
Sent: Monday, June 04, 2007 7:44 PM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] wir
I know on our SUP2s running SXF8 that command doesn't produce
any output, not sure if it worked in previous versions...
Phil
On Jun 5, 2007, at 3:35 AM, Mohacsi Janos wrote:
>
>
>
> On Mon, 4 Jun 2007, Zahid Hassan wrote:
>
>> Dear All,
>>
>>
>>
>> I am carrying full feed Internet (219K) plus V
i know its a wiered question: redist connected , i could have used it as a
network statement in both OSPF process of which i am not sure (not able to
achieve too) : say i have a loopback 0 with ip: 1.1.1.1/32
so putting network statements in OSPF process 1 & 2 (in different areas)
will not let me
Mohacsi Janos wrote:
> On Mon, 4 Jun 2007, Zahid Hassan wrote:
...
>> I am carrying full feed Internet (219K) plus VPNv4 routes (1K)
>> on an OSR-7609 with SUP-2/PFC2.
>>
>> I seems to be getting intermittent packets drops and loss of
>> connectivity from CPEs terminating on this OSR.
>>
>> I wonde
Jon Lewis wrote:
> On Tue, 5 Jun 2007, Richey wrote:
>> I've always been told that the card slots in the non VXR 7206s were not hot
>> swappable. I've got a non VXR 7206 with 1 AC and 1 DC power supply. The DC
>> needs to come out and an AC stuck back in it's place because it's new home
>> does n
If I had to be perfectly honest..I hate making changes to 24 AP
50 would really be a pain. If this is a School district. why do
they have to have local access. Is each school Firewalled?
Someone did recommend multiple controllers for redundancy which is a
good Idea. But if the sch
The schools are not firewalled between each other. They all have a
local file server. Maybe I'm getting confused... Here's an example.
Notebook A connects to an access point in the school, is able to roam
from AP to AP within the building, the user logs into the local server
does there work
I was told the same thing.. but Just tell TAC you only have 8 per
site =)
-Original Message-
From: Pickett, McLean (OCTO) [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 05, 2007 8:48 AM
To: Voll, Scott; Dan; [EMAIL PROTECTED]; cisco-nsp@puck.nether.net
Subject: RE: [c-nsp] wireless
Your right I don't want to traverse the WAN twice either but how
much traffic is really going across twice. Is it enough to worry about?
Scott
-Original Message-
From: Dan [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 05, 2007 8:44 AM
To: Voll, Scott
Cc: [EMAIL PROTECTED]; cisco
You also need to configure IOS NF to capture that, it won't do it by default:
ip flow-export version {5|9} [peer-as|origin-as] [bgp-nexthop]
Tim
At 11:37 AM 6/5/2007 +0100, Phil Mayers opined:
>Why are you under the impression you don't see AS information with
>hardware switching? My understandi
It's been running about a year on AC power. It's always had 1 DC and 1 AC
in the router, it's never had both connected at the same time. When it was
moved we were going to setup our own DC power plant but it never got done.
The UPS that feeds the router is on borrowed time so I need to get it mov
The 8 AP H-REAP limitation has been lifted. You can have as many H-REAP AP's
on a controller as you like. The limitation was marketing driven, and as far
as I know, it was never enforced.
There are some limitations with H-REAP relating to RRM and location
services. Check out the deployment guide:
I lost it and it was posted here a few days ago - what is the command to
see the type of interface used on a 10GigE connection?
Thanks,
Hank
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archiv
'show int cap' perhaps?
- jared
On Tue, Jun 05, 2007 at 08:01:04PM +0300, Hank Nussbacher wrote:
> I lost it and it was posted here a few days ago - what is the command to
> see the type of interface used on a 10GigE connection?
>
> Thanks,
> Hank
>
> __
With all due respect, what does a firewall have to do with this?
Are you treating wireless as an insecure medium and placing it outside the
firewall? With WPA-Enterprise/802.1X there's no reason wireless can't be as
secure, if not more secure, than your wired network which is likely not
running 8
It's the north-south/east-west discussion. With H-REAP you can manage them
centrally but switch the traffic locally. As McLean noted, with the low
number of APs at each location, RRM and LBS won't really be possible.
If go without a distributed solution then you'll want to analyze your
current t
Same problem I ran into... if each site is Firewalled then tunneling
traffic back to the local network becomes a problem for local access.
The only problem with out Firewalled Sites is that you traverse the WAN
twice.
This has nothing to do with security as much as it does traffic flow.
Scott
Hi all,
I am planning on migrating a legacy network that utilizes VLAN 1 on Cisco
devices for it's core network to another VLAN ID (100 in this case).
Is there any gotcha's that I should be aware of? All the switches and
routers have IP addresses that reside in vlan 1, so this may cause me some
Can the WS-C3560G-48TS-S do extended access-lists on a per-port basis when
using the standard -S image?
--Mike
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pi
I have a Cisco 3550-24... on post all lights flash amber very quickly
and stay that way... nothing on the console...
Any ideas on fault?
Jonathan
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
On Tue, 5 Jun 2007, Jared Mauch wrote:
> 'show int cap' perhaps?
Nope. That one I know. It's output was 1 line per interface and showed
near the end of the line the type of GBIC identified. -Hank
>
> - jared
>
> On Tue, Jun 05, 2007 at 08:01:04PM +0300, Hank Nussbacher wrote:
>>
Show int status? It lists the transceiver on the GE cards. Not sure
about 10GE though...
Chuck
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hank Nussbacher
Sent: Tuesday, June 05, 2007 3:40 PM
To: Jared Mauch
Cc: cisco-nsp@puck.nether.net
Subject: Re
Hi Gustavo-
I'd thought this had come up on the list before, but I couldn't find it
in the archives.
If you're really looking for performance, breadth of features, and
continued support, I'd really suggest that you steer your customer
toward an FWSM or PIX/ASA. The IOS Firewall Feature set on
Hi folks...
We're looking at deploying some 5350 boxes for dial-up Internet purposes.
I'm pretty sure they can support what we need but my question is specific to
T1 inbound...
We know they support PRI (23B+1D) but can you run 24 channels at 56K instead
of 23 channels at 64K? In our telco area w
On Tue, 5 Jun 2007, Paul Stewart wrote:
> We know they support PRI (23B+1D) but can you run 24 channels at 56K instead
> of 23 channels at 64K? In our telco area we know this as DEA versus PRI and
> the older Livingston Portmasters etc support this just fine - presuming you
> can do this with Cis
On Tue, 5 Jun 2007, Hank Nussbacher wrote:
> On Tue, 5 Jun 2007, Jared Mauch wrote:
>
>> 'show int cap' perhaps?
>
> Nope. That one I know. It's output was 1 line per interface and showed
> near the end of the line the type of GBIC identified. -Hank
show interface status
jms
On Tue, 5 Jun 2007, Hank Nussbacher wrote:
> Nope. That one I know. It's output was 1 line per interface and showed
> near the end of the line the type of GBIC identified. -Hank
You're probably thinking of "show interface status [module ]".
_
Thanks ;) Just purely for dial-up in a remote area I finally found
reference on Cisco's site after sending out this message and it shows
48,56,64K options on each channel...;)
All the best,
Paul
-Original Message-
From: Jon Lewis [mailto:[EMAIL PROTECTED]
Sent: Tuesday, June 05,
DEA? as in 24 CAS E&M Trunks? It should support it, I know that there are
issues handling delivery of the calling-party ANI over this in E&M Wink
configs on some other IOS platforms... Probably some TCL work arounds to
handle *ANI*DNIS* instead of just DNIS, but for dial-up you really wouldn't
need
On Tue, 5 Jun 2007, Church, Charles wrote:
> Show int status? It lists the transceiver on the GE cards. Not sure
> about 10GE though...
Yes, it works in 10G interfaces too.
...
Te9/1 gw1.ocl Ten1/1 connectedroutedfull10G 10Gbase-LX4
Te9/2 gw2.omc Ten7/1 connected
How are you identifying "voice traffic"?
I'll probably have to think of a hack to make what you are
asking for to work.
ea> On Thu, May 31, 2007 at 01:11:38PM -0400, Paul Stewart wrote:
> > Hi folks...
> >
> > A while back (month or so) I posed a few questions about Policy Based
> > Routing -
You'd configure it like this:
controller t1 X/X/X
mode cas
framing esf
linecode b8zs
ds0-group 0 timeslots 1-24 type e&m-wink-start
!
That'd create voice-port X/X/X:0 for you...
12.4(11)T supports this:
e&m-delay-dial E & M Delay Dial
e&m-fgd E & M Type II FGD
e&m-im
Weak power supply? Do you have one that you can switch it out with?
Dan.
Jonathan Charles wrote:
> I have a Cisco 3550-24... on post all lights flash amber very quickly
> and stay that way... nothing on the console...
>
> Any ideas on fault?
>
>
>
> Jonathan
> ___
Yes the SMI software feature set supports ACL's on a per port basis
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:cisco-nsp-
> [EMAIL PROTECTED] On Behalf Of TCIS List Acct
> Sent: Tuesday, June 05, 2007 11:46 AM
> To: cisco-nsp@puck.nether.net
> Subject: [c-nsp] WS-C3560G-48TS-S
Like so?
6513-720-01 (enable) sho mod 12
Mod Slot Ports Module-Type Model Sub Status
--- - - --- ---
12 12 4 1BaseGX Ethernet WS-X6704-10GE yes ok
Michael Balasko
CCSP,MCSE,MCNE,SCP
Net
No.
This worked fine for 4 years and died this morning... I woke up and it
was all blinky...
Jonathan
On 6/5/07, Dan <[EMAIL PROTECTED]> wrote:
> Weak power supply? Do you have one that you can switch it out with?
>
> Dan.
>
> Jonathan Charles wrote:
> > I have a Cisco 3550-24... on post all
Just a parallel question relating to this thread.
Won't this type of T1 service yield bad performance? Is this a case where
switch lines are muxed on to a channel bank type thing and then demuxed
again in theory adding all sorts of nice artifacts? As opposed to a
multipath type thing that giv
Thanks Brian,
By any chance do you know if in case he'd choose the IOS firewall, there would
be anything like SDM to manage it? I didn't find anything like it.
Anyway, you've convinced me. I'll suggest him to continue using its current
pix525 cluster, although I still think he'd be better suite
On Jun 5, 2007, at 2:32 PM, Gustavo Novais wrote:
> Do you know if the sup32-PISA brings any improvement on the IOS
> firewall area?
Sup32 w/PISA provides up to 2gb/sec of stateless full-packet
filtering via hardware-accelerated Flexible Packet Matching (FPM).
It's always good to do as mu
Anyone have experience with a working fwsm v6 setup? I have a couple v4
hosts behind the fwsm that I want to v6 enable.
Can I just enable v6 on the inside & outside interfaces and it'll just
work (with the right access-list)?
___
cisco-nsp mailing lis
On 6/5/07, Gustavo Novais <[EMAIL PROTECTED]> wrote:
> I'll suggest him to continue using its current pix525 cluster,
If they want to give the IOS Firewall a shot though for what a
dual-720 is going to cost, putting in a pair of 2821 or 2851 SEC-K9
bundle's with SDM shouldn't be too painful.
> D
I've only raised this thread exactly because it is painful to me, that someone
even considers only using sup720 for L2 Switching. If they have money to spend,
they should spend it wisely, but... unfortunately, given what has been said
here, IOS FW on sup720 is not a good choice, either because
Jeff Crowe wrote:
> Hi all,
>
> I am planning on migrating a legacy network that utilizes VLAN 1 on Cisco
> devices for it's core network to another VLAN ID (100 in this case).
>
> Is there any gotcha's that I should be aware of? All the switches and
> routers have IP addresses that reside in vl
Tom Zingale (tomz) wrote:
> Yes the SMI software feature set supports ACL's on a per port basis
>
So I can apply an ACL on a Layer2 port, that allows/denies TCP/IP traffic? I
know I can do this on some Foundry switches, but have never tried on a 35xx
when
the port is not a L3 port..
--Mike
Yes on a vlan or port you can allow/deny tcp/ip traffic. See the docs
http://www.cisco.com/en/US/partner/products/hw/switches/ps5528/products_
configuration_guide_chapter09186a008081da63.html
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:cisco-nsp-
> [EMAIL PROTECTED] On Behalf
On Tue, 5 Jun 2007, Jay Ford wrote:
Ba-bing!
Thanks,
-Hank
> On Tue, 5 Jun 2007, Hank Nussbacher wrote:
>> Nope. That one I know. It's output was 1 line per interface and showed
>> near the end of the line the type of GBIC identified. -Hank
>
> You're probably thinking of "show interface stat
Having problems figuring out what I need to configure on a Cisco router
to make it a 6to4 relay. Any pointers?
I plan on anycasting 192.88.99.0/24 from this router.
thanks.
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/
6to4 Auto Tunnels
http://www.cisco.com/en/US/products/sw/iosswrel/ps5187/products_configuratio
n_guide_chapter09186a00801d6604.html#wp1048589
--
http://dcp.dcptech.com
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of matthew zeier
> Sent: Tuesday
thanks - dunno why I couldn't find that on my own.
If I anycast 192.88.99.0/24, am I right that the tunnel source must be
192.88.99.1? Or is it some other globally routable interface?
David Prall wrote:
> 6to4 Auto Tunnels
> http://www.cisco.com/en/US/products/sw/iosswrel/ps5187/products_confi
On Tue, 5 Jun 2007, matthew zeier wrote:
> Having problems figuring out what I need to configure on a Cisco router
> to make it a 6to4 relay. Any pointers?
>
> I plan on anycasting 192.88.99.0/24 from this router.
There's a cisco doc somewhere but here's a sample config from our routers:
interf
In a 6to4 auto tunnel, you use 2002:192 88:99 1::1/16 as your address. Where
the IPv4 address is converted to Hex. I'm not sure you should anycast the
address, since this address is typically used as your BGP next hop. Might
load balance it with sticky, only need an IPv4 slb setup. If anyone has do
Thank you for the reply on this. We did exactly what you mention here
(trying to isolate channels) and found the performance metrics didn't change
very much except that there seemed to be little impairment with just a
single T-1. We do not believe that variance in latency exists to the point
that
Tom Zingale (tomz) wrote:
> Yes on a vlan or port you can allow/deny tcp/ip traffic. See the docs
> http://www.cisco.com/en/US/partner/products/hw/switches/ps5528/products_
> configuration_guide_chapter09186a008081da63.html
>
Thanks, that link answers most of my questions. Performance wise, it
David Prall wrote:
> In a 6to4 auto tunnel, you use 2002:192 88:99 1::1/16 as your address. Where
> the IPv4 address is converted to Hex. I'm not sure you should anycast the
> address, since this address is typically used as your BGP next hop. Might
> load balance it with sticky, only need an IPv
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
matthew zeier wrote:
> thanks - dunno why I couldn't find that on my own.
>
> If I anycast 192.88.99.0/24, am I right that the tunnel source must be
> 192.88.99.1? Or is it some other globally routable interface?
- -
If my memor
> So I can apply an ACL on a Layer2 port, that allows/denies TCP/IP traffic? I
> know I can do this on some Foundry switches, but have never tried on a 35xx
> when
> the port is not a L3 port..
I did this several years ago with 3550 switches at my previous
employer. Worked just fine (though it
Hi,
after my last post I did some more research and my list is now down to:
Juniper WXC
Packeteer -SkyX - I have satellite links hence my choice for this
Expand Networks - They have good reviews from ISPs who have deployed them.
On 5/29/07, Richard J. Sears <[EMAIL PROTECTED]> wrote:
>
> After
74 matches
Mail list logo