Re: [c-nsp] 6506 SUP2/MSFC2 Native IOS upgrade issue

2007-06-07 Thread David Prall
To start with you have to upgrade to 256MB of RAM on both the SP and RP to support 12.2(18)SXF on the Sup2. http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/122sx/ol_4164.ht m#wp2561255 David -- http://dcp.dcptech.com > -Original Message- > From: [EMAIL PROTECTED] > [mailt

Re: [c-nsp] 6506 SUP2/MSFC2 Native IOS upgrade issue

2007-06-07 Thread Jon Lewis
On Thu, 7 Jun 2007, Bryan wrote: > - Greetings all, trying to upgrade the IOS on a SUP2/MSFC2 which is > already in native move at 12.1(27b)E and trying to upgrade to 12.2.18 > but I keep seeing similar errors to this: > > - I uploaded the image to disk0: and set the following: > > boot system fla

Re: [c-nsp] Cisco equivalent of juniper hardware

2007-06-07 Thread Brad Henshaw
Phil Bedard wrote: > Your answers mean that the LAN-type GigE on the 7600 series > is probably not what you want. > Some of those cards are oversubscribed (IE, there are 24 GigE > ports handled by 2 10-gig ASICs.) and they don't do shaping. > > While it's very new, the ES20 20-port GigE blade fo

[c-nsp] 6506 SUP2/MSFC2 Native IOS upgrade issue

2007-06-07 Thread Bryan
- Greetings all, trying to upgrade the IOS on a SUP2/MSFC2 which is already in native move at 12.1(27b)E and trying to upgrade to 12.2.18 but I keep seeing similar errors to this: - I uploaded the image to disk0: and set the following: boot system flash disk0:s222-adventerprisek9_wan-mz.122-18.

Re: [c-nsp] Suggestions on FTTH solutions

2007-06-07 Thread Brad Henshaw
Hjan wrote: > Justin Shore ha scritto: > > > Has anyone deployed FTTH with Cisco equipment? Can anyone > > point me a page on Cisco's site that will point me to > > Cisco's FTTH product line? > > Yes ;) > > Metro ethernet: > http://www.cisco.com/en/US/netsol/ns577/networking_solutions_s > olu

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread Anton Smith
Hi Jon, I also posted about this awhile ago, and it turned out to be the conf register. Once we changed it, it worked fine. In our case, it would not boot from the sup addon flash, which was a bit of a bummer since we needed to use an IOS image that was larger than 64 meg. A work mate found th

Re: [c-nsp] Sup 32 PISA not booting up on 6506E

2007-06-07 Thread Sukumar Subburayan
Kamal, Also, it looks like your RP rommon is not set correctly and SP/RP DUALCON (ie dualconsole mode..) is set. You probably got this as a demo unit from someone in Cisco, and they probably din't clean all this up. >From the SP-rommon do this: priv unset DUALCON sync Then try booting again.

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread David Prall
That looks bad. I would add the one you have already a second time. Did a quick search and found this http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note0918 6a00803e5282.shtml -- http://dcp.dcptech.com > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EM

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread Jon Lewis
On Thu, 7 Jun 2007, Church, Charles wrote: > Do you have a boot system command in the running config? If you put one > in and 'wri mem', that should get pushed down to the SP as well: > > boot system flash disk0:s222-advipservicesk9_wan-mz.122-18.SXF6.bin > > Router#rem com sw sh boot > > BOOT va

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread Mikael Abrahamsson
On Thu, 7 Jun 2007, Jon Lewis wrote: > The config-register on the supervisor (as shown by rem com sw sh ver) is > 0x2142. On all our other 6500s, both the msfc and sup conf-regs are > 0x2102. How do you change the conf-reg on the supervisor? Is it as > simple as > rem com sw conf t > conf-reg 0

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread Church, Charles
Do you have a boot system command in the running config? If you put one in and 'wri mem', that should get pushed down to the SP as well: boot system flash disk0:s222-advipservicesk9_wan-mz.122-18.SXF6.bin Router#rem com sw sh boot BOOT variable = disk0:s222-advipservicesk9_wan-mz.122-18.SXF6.b

Re: [c-nsp] Suggestions on FTTH solutions

2007-06-07 Thread hjan
Justin Shore ha scritto: > Has anyone deployed FTTH with Cisco equipment? Can anyone point me a > page on Cisco's site that will point me to Cisco's FTTH product line? Yes ;) Metro ethernet: http://www.cisco.com/en/US/netsol/ns577/networking_solutions_solution.html http://www.cisco.com/warp/p

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread David Prall
That's it. I can't find my notes on this one. I think this was mentioned here previously as well. David -- http://dcp.dcptech.com > -Original Message- > From: Jon Lewis [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 07, 2007 3:59 PM > To: David Prall > Cc: cisco-nsp@puck.nether.ne

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread Jon Lewis
On Thu, 7 Jun 2007, Church, Charles wrote: > Do a 'conf-reg 0x2102' from the normal CLI. Then do a 'wri mem'. The > wri mem should push the config register setting down to the switch side. > The remote command method you listed won't work, since it's a one-line > command only. Do a 'show boot'

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread Jon Lewis
On Thu, 7 Jun 2007, David Prall wrote: > You just set the config register, then confirm with the remote commands. > Some where in the mix it didn't synchronize between the two. Had this > problem on a 6500, spent 4 hours trying to figure out why it was happening. > I now confirm and verify. ok...

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread Church, Charles
Do a 'conf-reg 0x2102' from the normal CLI. Then do a 'wri mem'. The wri mem should push the config register setting down to the switch side. The remote command method you listed won't work, since it's a one-line command only. Do a 'show boot' and 'rem comm sw sh boot' when done to verify. Chuc

Re: [c-nsp] 6500/7600 boot issues

2007-06-07 Thread David Prall
You just set the config register, then confirm with the remote commands. Some where in the mix it didn't synchronize between the two. Had this problem on a 6500, spent 4 hours trying to figure out why it was happening. I now confirm and verify. David -- http://dcp.dcptech.com > -Original

[c-nsp] 6500/7600 boot issues

2007-06-07 Thread Jon Lewis
Several months ago, I posted about a 6509/sup7203bxl we have that won't boot properly without manual help (being told to boot from the rom-mon prompt, or fails-back to booting from sup-bootflash...depending on what rom-mon code we use (upgraded to latest falls back to whatever is in sup-bootfla

[c-nsp] 2960 vs 3560 hardware

2007-06-07 Thread Jeff Kell
We're looking at options to setup a departmental lab with a couple local servers and some high-end desktops, and trying to match a nice, smoking switch to handle the traffic. 6500 is out of the question :-) 4948 is pushing it, but would clearly provide 48-ports full-duplex gigabit non-blocking

[c-nsp] OSPF neighbor up on only one end

2007-06-07 Thread Rick Ernst
I ran into a situation where members of an OSPF area all saw a (pair of) neighbors up, but those routers didn't show any of the other area members up. Unable to ping to the weird routers. Several Cisco 7500s and Cat5500/multi-RSM routers in the area. VLAN 2 and 3 (on different physical links a

[c-nsp] WIC-1ADSL V. WIC-1ADSL-DG aquestion

2007-06-07 Thread Scott Granados
Hi all Can someone easily break down for me the differences between the DG and non DG version? What does that extra diagnostic feature by in exchange for the fewer IOS options available? Thank you Scott ___ cisco-nsp mailing list cisco-nsp@puck.net

Re: [c-nsp] Netflow config on 6500 720-3B

2007-06-07 Thread Tim Stevenson
More generically, whatever version you specify in the mls nde sender CLI is completely overridden when you enter the ip flow-export version 9 CLI (intuitive, I know), and both the h/w & s/w flows will export in v9 format. tstevens-6509e(config)#mls nde send ver 5 tstevens-6509e(config)#do sh ml

Re: [c-nsp] Netflow config on 6500 720-3B

2007-06-07 Thread Ian Cox
At 12:00 PM 6/6/2007 -0400, Jeff Fitzwater wrote: >MLS has no commands to enable version 9. CISCO states that you do not >use MLS for version 9. Does that mean I cannot get hardware switches >flows for version 9? Maybe I should use version 5 which is supported >in MLS. Enable version 5 for mls

Re: [c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Brett Frankenberger
On Thu, Jun 07, 2007 at 12:57:39PM +0300, Hank Nussbacher wrote: > At 05:00 AM 07-06-07 -0400, Rodney Dunn wrote: > >Also depends if you have the priority set and who came up first. > > From the OSPF Design Guide: > http://www.cisco.com/warp/customer/104/1.html > > "DR and BDR election is done v

Re: [c-nsp] Sup 32 PISA not booting up on 6506E

2007-06-07 Thread Sukumar Subburayan
Also, are we sure that you are booting a Sup32-PISA here, and not just a Sup32/MSFC2C? Kamal, can you contact me offline? sukumar On Thu, 7 Jun 2007, Rodney Dunn wrote: > Kamal, > > string is bootdisk:s32p3-adventerprisek9_wan-mz.V122_18_ZY_THROTTLE_070425 > > That looks like some datecode im

Re: [c-nsp] Qos pre-classify

2007-06-07 Thread John Kougoulos
Ian MacKinnon wrote: > >> >> On Thu, Jun 07, 2007 at 02:50:14PM +0100, Ian MacKinnon wrote: >>> Hi All, >>> >>> Given the config below for a vpn tunnel, when I add the command "qos >>> pre-classify" to the crypto map and the tunnel interface, I get really >>> bad slowdown of traffic. >>> >>> 2. Qu

Re: [c-nsp] Improve VPN performance by reducing MTU via DHCP?

2007-06-07 Thread Sridhar Ayengar
Rodney Dunn wrote: > True. The only drawback of that is that only applies to TCP so > your udp still has the issue. > > Personally, if I were designing it and had a way to force > all my workstations down I would strongly consider it if their > main data transport is over some form of tunneled inf

Re: [c-nsp] Improve VPN performance by reducing MTU via DHCP?

2007-06-07 Thread Rodney Dunn
True. The only drawback of that is that only applies to TCP so your udp still has the issue. Personally, if I were designing it and had a way to force all my workstations down I would strongly consider it if their main data transport is over some form of tunneled infrastructure. The performance l

Re: [c-nsp] 6500 not supporting md5 on HSRP?

2007-06-07 Thread Tim Stevenson
It's not available yet, target is the "whitney 1" release. Tim At 02:17 PM 6/7/2007 +0200, Rutger Bevaart opined: >Hello list, > >On a sup32 running s3223-ipservicesk9_wan-mz.122-18.SXF9.bin I am unable >to configure md5 authentication HSRP for VLAN interfaces... > >On a 3560 I am able to (under

[c-nsp] debug BGP flapping peer

2007-06-07 Thread schilling
Hi, Software Version: 12.2(18)SXF7 Problem Details: BGP peer is flapping only one way. The other way is ok. ping with small and big packet size are all ok from peer loopbacks and connected vlan interfaces. show ip bgp neighbor showed that keepalives are temporarily in throttle due to closed TCP

Re: [c-nsp] Improve VPN performance by reducing MTU via DHCP?

2007-06-07 Thread Vinny Abello
It is advisable that you change the MSS value on the interface that connects to the segment with your workstations. This is usually the recommended way to achieve this. On the interface: ip tcp adjust-mss 1200 This is assuming an IOS based device. If you have a PIX/ASA, you must use the equivale

Re: [c-nsp] Improve VPN performance by reducing MTU via DHCP?

2007-06-07 Thread Sridhar Ayengar
Vincent De Keyzer wrote: > Does that sound good to you? Anybody ever tried this? Can you think of any > side effect of changing the MTU of all PCs? A lot of people have to do something similar when using PPPoE, which uses an MTU of 1492. You also have the option of activating MSS-Clamping on the

Re: [c-nsp] Qos pre-classify

2007-06-07 Thread Ian MacKinnon
Rodney Dunn wrote: > What exactly are you trying to accomplish with this configuration? > IPSec tunnel between 2 sites over shared infrastructure. > What type of box is this on? I ask because there are some hooks > to QOS for the HW crypto engines for LLQ. 1812 running 12.4(11)T2 > > I have no

[c-nsp] Improve VPN performance by reducing MTU via DHCP?

2007-06-07 Thread Vincent De Keyzer
Hello list, our company is about to build a corporate European network over VPNs, and a colleague of mine read somewhere that VPN performance can be improved by changing the MTU of workstations (this seems to be an option of DHCP server). In this way, the encapsulated packets are not bigger tha

Re: [c-nsp] Qos pre-classify

2007-06-07 Thread Rodney Dunn
What exactly are you trying to accomplish with this configuration? What type of box is this on? I ask because there are some hooks to QOS for the HW crypto engines for LLQ. I have no idea what impact it would have for your scenario with shaping on the tunnel. What we really recommend is to have

[c-nsp] Qos pre-classify

2007-06-07 Thread Ian MacKinnon
Hi All, Given the config below for a vpn tunnel, when I add the command "qos pre-classify" to the crypto map and the tunnel interface, I get really bad slowdown of traffic. 2. Questions, is anybody using qos pre-classify to prioritise voice? And I just wonder if trying to shape the tunnel and sha

Re: [c-nsp] HSRP with 2 LAN switches

2007-06-07 Thread Rutger Bevaart
Have a look at BGP Conditional Advertisements, e.g. have your router drop the advertised routes to external peers if your internal connection is gone... see: http://www.cisco.com/warp/public/459/cond_adv.html Met vriendelijke groet / Kind Regards, Rutger Bevaart __

Re: [c-nsp] Cisco equivalent of juniper hardware

2007-06-07 Thread Phil Bedard
Your answers mean that the LAN-type GigE on the 7600 series is probably not what you want. Some of those cards are oversubscribed (IE, there are 24 GigE ports handled by 2 10-gig ASICs.) and they don't do shaping. While it's very new, the ES20 20-port GigE blade for the 7600 I think is the

[c-nsp] 6500 not supporting md5 on HSRP?

2007-06-07 Thread Rutger Bevaart
Hello list, On a sup32 running s3223-ipservicesk9_wan-mz.122-18.SXF9.bin I am unable to configure md5 authentication HSRP for VLAN interfaces... On a 3560 I am able to (under interface configuration) do: "standby 1 authentication md5 key-string 7 " I checked with sup32 and sup720's, and it does

[c-nsp] Policing switch ports on 1811

2007-06-07 Thread The Father
Hi everyone. I'm trying to find a way to rate-limit or police to 3Mbps two of the switch ports on an 1811 router. I have configured both FE ports as follows: interface FastEthernet2 switchport access vlan 10 load-interval 30 ! interface FastEthernet9 switchport access vlan 10 load-interval 30

Re: [c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Rodney Dunn
That does not look right. Can you get 'debug ip os adj' and flap the vlan 50 on either A or C? Before you do it get: sh ip os int vlan 50 on both Rodney On Thu, Jun 07, 2007 at 12:57:39PM +0300, Hank Nussbacher wrote: > At 05:00 AM 07-06-07 -0400, Rodney Dunn wrote: > >Also depends if you have

Re: [c-nsp] Maximum-routes Routes on 7600 with SUP2/PFC2

2007-06-07 Thread Euan Galloway
On Wed, Jun 06, 2007 at 07:41:40AM -0500, Justin Shore wrote: > To add to Zahid's question with a question of my own, does anyone have > any OIDs for monitoring TCAM usage via SNMP? I have a pair of 3BXLs > with full tables that I'd like to keep an eye on. A walk of .1.3.6.1.4.1.9.9.97.1.9 on S

[c-nsp] Fwd: Sup 32 PISA not booting up on 6506E

2007-06-07 Thread Kamal Dissanayaka
Sorry, I havent copied this to Mailing list. I got location of image through rodney, I will try it and let you know the results. Best regards Kamal -- Forwarded message -- From: Kamal Dissanayaka <[EMAIL PROTECTED]> Date: Jun 7, 2007 7:18 PM Subject: Re: [c-nsp] Sup 32 PISA not b

Re: [c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Hank Nussbacher
At 05:00 AM 07-06-07 -0400, Rodney Dunn wrote: >Also depends if you have the priority set and who came up first. From the OSPF Design Guide: http://www.cisco.com/warp/customer/104/1.html "DR and BDR election is done via the Hello protocol. Hello packets are exchanged via IP multicast packets (Ap

Re: [c-nsp] Cisco equivalent of juniper hardware

2007-06-07 Thread Benoit Auquier
[EMAIL PROTECTED] a écrit : >> I think you have missed some important factors: >> >> Do you need totally non-overbooked linecards? >> I'm not sure to understand exactly what you mean, but we expect to use all the interfaces near their max capacity >> What are your QoS requirements, will LAN

Re: [c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Hank Nussbacher
At 11:48 AM 07-06-07 +0300, Hank Nussbacher wrote: PNG did not make it thru so you can find it here: http://www.interall.co.il/vlans.png Thanks, Hank >What causes a router to become a Designated Router (DR) on a VLAN? I >always thought highest router-id, but I have a few test routers and here

Re: [c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Rodney Dunn
Also depends if you have the priority set and who came up first. What is the uptime of C? On Thu, Jun 07, 2007 at 11:48:52AM +0300, Hank Nussbacher wrote: > What causes a router to become a Designated Router (DR) on a VLAN? I > always thought highest router-id, but I have a few test routers and

[c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Hank Nussbacher
What causes a router to become a Designated Router (DR) on a VLAN? I always thought highest router-id, but I have a few test routers and here is what I get: C#sho ip ospf nei Neighbor ID Pri State Dead Time Address Interface 192.168.1.1 1 FULL/DR 00:0

Re: [c-nsp] Sup 32 PISA not booting up on 6506E

2007-06-07 Thread Rodney Dunn
Kamal, string is bootdisk:s32p3-adventerprisek9_wan-mz.V122_18_ZY_THROTTLE_070425 That looks like some datecode image on a throttle. I can't find it so I couldn't try to decode the crash. Can you try the 12.2(18)ZY that is on CCO or is your image one given to you after that? Rodney O

[c-nsp] GigE and max usable bandwidth

2007-06-07 Thread Sven Juergensen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list, does anyone have a clue about when a gige link on a 3508 becomes saturated? Once the throughput gets to about 650Mbps TX and roughly 280Mbps RX, there are lots of output buffer failures and underruns showing up 'show int gig 0/2'. - From wha