Re: [c-nsp] Juniper Netscreen SSG 140 versus Cisco ASA 5510 series

2007-07-07 Thread Jeremy Stinson
Zahid, Netscreen FWs are great compared to the pix/asa lines. Don't know if this is an issue but the SSG140 only support 2048 BGP routes. If you need more then you should definantly take a look at using a front end router. Else, this is a great device. Good luck, Jeremy - Original Messag

Re: [c-nsp] ISP Network Monitoring/Helpdesk/Workflow Automation

2007-07-07 Thread Gerry Boudreaux
Since you know JFFNMS :-) Also investigate solarwinds, netsaint, nagios, smokeping, bigbrother, mrtg, and there are several others. There are also the commercial varieties also OpenView, NetCool etc. Which perform well and have scaleable architectures. There are also many "ticketing" systems

Re: [c-nsp] ISP Network Monitoring/Helpdesk/Workflow Automation

2007-07-07 Thread Roland Dobbins
On Jul 8, 2007, at 9:34 AM, Paul Stewart wrote: > And I'm looking for a way to monitor them (with thresholds, > alarms, escalations, etc) In terms of traffic utilization and heuristics, enable NetFlow, collect it with nfdump, and graph it with nfsen. NetFlow gives extremely useful visibilit

Re: [c-nsp] Advice on upgrade

2007-07-07 Thread neb
> > --- [EMAIL PROTECTED] wrote: > >> New to Cisco world (which is why I ask advice here and not a sales rep >> :->), I think I am going to want either a 7304-NSE-100, or 7604 with >> Sup32, or would a 7200 NPE-G2 be more than capable? >> >> We are not in need of BGP as we have a single carrier, bu

Re: [c-nsp] Juniper Netscreen SSG 140 versus Cisco ASA 5510 series

2007-07-07 Thread Joe Maimon
Zahid Hassan wrote: > Dear All, > > > > Can anyone please comment or give any insight about the > Juniper Netscreen SSG 140 versus the Cisco ASA 5510 series. > > I am looking for BGP support on my perimeter firewalls and as the Cisco ASA > 5500 > series still doesn't support BGP, I am thinki

[c-nsp] ISP Network Monitoring/Helpdesk/Workflow Automation

2007-07-07 Thread Paul Stewart
Hi folks... Looking for suggestions for "management software" Both as individual suggestions but also if there exists a product that does it all and integrates We have about 200 routers/switches (all Cisco) of which 100 are inhouse and the rest are at customer sites, 60-80 servers running

Re: [c-nsp] Juniper Netscreen SSG 140 versus Cisco ASA 5510 series

2007-07-07 Thread Phil Mayers
On Sat, 2007-07-07 at 16:08 -0500, ChrisSerafin wrote: > I'm a Cisco bigot, but when it comes to security, Cisco is lacking. I > would go with a perimeter router for routing/BGP and a NS SSG for the > security portion. What you may not be aware of is that the recommended deployment mode for a

Re: [c-nsp] Catalyst QoS Based on VLAN ID

2007-07-07 Thread Bob Sinclair
Skeeve Stevens wrote: > I found a feature called 'Per Vlan Per Port Policing' which is on the > latest > two IOS's available for the 3560 and 3750 +G versions. > > In the 3550 it is simple with the 'match vlan x' option under the > class-map... but even though the feature navigator says the 3560/3

Re: [c-nsp] Advice on upgrade

2007-07-07 Thread Howard Leadmon
Now I am curious, outside of maybe stackability, and of course if you need 10GE, but outside that, is there any other advantage to the 3750G over the 3560G? I am just curious, as I needed a single switch and went with a 3560G, as I didn't really see any added advantage to the 3750 unless I ov

Re: [c-nsp] Juniper Netscreen SSG 140 versus Cisco ASA 5510 series

2007-07-07 Thread ChrisSerafin
I'm a Cisco bigot, but when it comes to security, Cisco is lacking. I would go with a perimeter router for routing/BGP and a NS SSG for the security portion. Chris Serafin Security Engineer [EMAIL PROTECTED] Zahid Hassan wrote: > Dear All, > > > > Can anyone please comment or give any insigh

Re: [c-nsp] PBR Strange behavior

2007-07-07 Thread Kevin Graham
--- [EMAIL PROTECTED] wrote: > Bear in mind 'ip policy route-map BLAH' has no effect on self generated > packets. ...though 'ip local policy route-map BLAH' will; not the ideal way to test, but often will do. ___ cisco-nsp mailing list cisco-nsp@puck

Re: [c-nsp] CF

2007-07-07 Thread Aaron
I've use the san disk version with no problems On 7/6/07, Shawn Morris <[EMAIL PROTECTED]> wrote: > > In our lab we're using off-the-shelf Micro Center-branded 1GB CF cards and > CF/PCMCIA adapters without a problem in both a 12k with a PRP2 and > 7206VXRs > with NPE300/400. > > On 7/6/07, Peter

[c-nsp] Juniper Netscreen SSG 140 versus Cisco ASA 5510 series

2007-07-07 Thread Zahid Hassan
Dear All, Can anyone please comment or give any insight about the Juniper Netscreen SSG 140 versus the Cisco ASA 5510 series. I am looking for BGP support on my perimeter firewalls and as the Cisco ASA 5500 series still doesn't support BGP, I am thinking of going for the SSG 140 series. Any co

Re: [c-nsp] Advice on upgrade

2007-07-07 Thread Kevin Graham
--- [EMAIL PROTECTED] wrote: > New to Cisco world (which is why I ask advice here and not a sales rep > :->), I think I am going to want either a 7304-NSE-100, or 7604 with > Sup32, or would a 7200 NPE-G2 be more than capable? > > We are not in need of BGP as we have a single carrier, but this m

[c-nsp] IOS XR Mail Groups

2007-07-07 Thread GOYAL, SANDEEP, ATTLABS
Folks I am working on IOS XR (CRS or GSR)and wondering if there is any other mail groups or discussion board more specific to IOS XR, Where we share issues related to XR.I am willing to join. Your advise is greatly appreciated. Sandeep Goyal ___ cisco-

Re: [c-nsp] Advice on upgrade

2007-07-07 Thread Mark Tinka
On Saturday 07 July 2007 17:06, Gary Stanley wrote: > I'd look at the 7201, it has a couple gb of memory, quite a > few gig ports, only consumes 84W(?) of power, and is in 1u > form factor. Would this box be capable of anything beyond 1Gbps (much less a sustained 800Mbps throughput)? From previo

Re: [c-nsp] Advice on upgrade

2007-07-07 Thread Gary Stanley
At 03:23 AM 7/7/2007, [EMAIL PROTECTED] wrote: >Hello, > >The time has come for us to upgrade the border router, currently not a Cisco. > >The traffic passing on GIGE is around 800 mbp/s >Have need for 3 GIG ports currently with view to a fourth next quarter. It >has 17 ACLs (not huge lists). > >Ne

[c-nsp] Advice on upgrade

2007-07-07 Thread neb
Hello, The time has come for us to upgrade the border router, currently not a Cisco. The traffic passing on GIGE is around 800 mbp/s Have need for 3 GIG ports currently with view to a fourth next quarter. It has 17 ACLs (not huge lists). New to Cisco world (which is why I ask advice here and not