Re: [c-nsp] logging traffic

2007-08-31 Thread Eimantas Zdanevičius
Thanks for help. For now i get traffic connections from ASA 5520 logged to syslog server. In future i wil use NetFlow. Can anyone recommend good free netflow tools? Pagarbiai, Eimantas Zdanevičius Tinklo administratorius UAB Oslo products Žirmūnų g. 27, LT-09105, Vilnius Tel.: +370 5 276 2002

Re: [c-nsp] Debugging LFI fragmentation

2007-08-31 Thread Oliver Boehmer \(oboehmer\)
Leonardo Souza wrote on Thursday, August 30, 2007 8:53 PM: Correct. I sent ping packets with 1500 bytes . My problem is that on the other side, I see no debug output for MLP (events, fragments etc...). By the way, it´s a C10K. It seems a bug. I dont know... As the 10k processes the

Re: [c-nsp] My sham-links disappeared?

2007-08-31 Thread Code Monkey
On 8/31/07, Code Monkey [EMAIL PROTECTED] wrote: I just upgraded a 7206 NPE 300 router running IOS (C7200-JK9S-M), Version 12.2(15)T17 to an NPE G1 running (C7200-JK9S-M), Version 12.4(16). ... I was sure the new one had all that the old one had, I had tested it, and almost everything is

Re: [c-nsp] logging traffic

2007-08-31 Thread Gabor Ivanszky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 nfsen ntop Eimantas Zdanevičius wrote: Thanks for help. For now i get traffic connections from ASA 5520 logged to syslog server. In future i wil use NetFlow. Can anyone recommend good free netflow tools? Pagarbiai, Eimantas Zdanevičius Tinklo

[c-nsp] 32bit ASNs on 12.0S

2007-08-31 Thread Sven Juergensen (KielNET)
Hi list, does or will the 12.0S-Train support 32bit AS-numbers? Judging by the 'router bgp x' command, it's 16bit here. Best regards, sven03 -- Mit freundlichen Gruessen i. A. Sven Juergensen Fachbereich Informationstechnologie KielNET GmbH Gesellschaft fuer Kommunikation Preusserstr.

[c-nsp] L2 interworking on 7600 RSP720

2007-08-31 Thread MKS
Hi I was trying Layer 2 interworking for ATM to Ethernet on cisco 7600 RSP-7203C software SRB1 advanced ip services e.g. interface GigabitEthernet5/2.20 encapsulation dot1Q 20 end interface ATM9/1/0 no ip address no atm enable-ilmi-trap pvc 0/400 l2transport encapsulation aal5 ! end

Re: [c-nsp] 32bit ASNs on 12.0S

2007-08-31 Thread Gert Doering
Hi, On Fri, Aug 31, 2007 at 12:18:53PM +0200, Sven Juergensen (KielNET) wrote: does or will the 12.0S-Train support 32bit AS-numbers? It doesn't (and neither does any other IOS version publically available). Rumors say that 32 bit ASN support will appear early next year. (IOS XR *does*

Re: [c-nsp] 32bit ASNs on 12.0S

2007-08-31 Thread Marco Huggenberger
Hi Folks 2007/8/31, Gert Doering [EMAIL PROTECTED]: It doesn't (and neither does any other IOS version publically available). Rumors say that 32 bit ASN support will appear early next year. (IOS XR *does* have 32-bit ASN, as far as I have been told). Status for ASN Integration in different

[c-nsp] 6500 IOS SLB and 'log' keyword?

2007-08-31 Thread Mark Tohill
Hello, We have a 6509-E(single Sup720/MSFC3/PFC3) are running modular 12.2(18)SXF4 ADVANCEDIP on 2 x 6509-E(single Sup720/MSFC3/PFC3). We would like to implement IOS SLB (no CSM, as yet). ! ip slb serverfarm WEB nat server real 192.168.30.11 weight 1 inservice ! ! ip slb vserver WEB-WWW

Re: [c-nsp] Cisco IP SLA - DHCP and VRFs

2007-08-31 Thread Peter Hicks
All, Peter Hicks wrote: I'm attempting to use IP SLA on an 877W with IOS 12.4(11)XJ3 to run DHCP requests from a specific VRF. I'm setting rttMonEchoAdminVrfName to the correct VRF, but when performing a set operation, I get NOSUCHINSTANCE returned. I found the issue. Not all the SLA

[c-nsp] GSR 12008 temp issue

2007-08-31 Thread Chris Lane
Hello We have a GSR12008 and we just inserted a single 3 port GigE card. Since insertion i keep getting this error %ENV_MON-2-TEMP: Hotpoint temp sensor(slot 2) temperature has reached CRITICAL level at 70(C) I have searched the doc's and the all point to this: Error Message %ENV_MON-2-TEMP :

Re: [c-nsp] GSR 12008 temp issue

2007-08-31 Thread Matt Addison
Check your AC? 40 degree inlet temperature is kind of disturbing... -- 8 -- Issue 1: GSR 12008 Cooling If the ambient (room) air temperature is above 40° C (104° F), some existing Cisco GSR 12008s may not be able to adequately cool themselves. This is true regardless of the Cisco GSR 12008

Re: [c-nsp] 7204vxr freeze-up question

2007-08-31 Thread Rodney Dunn
You did a sh controller for 3/0 but your 'sh int' was from 2/0. It's hard to know all those controller counters without going and looking at the code for that driver. But, suffice to say that the interface should never lock up and have to be bounced to forward traffic or receive traffic. If it

Re: [c-nsp] BGP path preference

2007-08-31 Thread Niels Bakker
* [EMAIL PROTECTED] (Jon Lewis) [Thu 30 Aug 2007, 17:13 CEST]: On Wed, 29 Aug 2007, Andy Dills wrote: Don't forget that you can prepend incoming announcements as well as outgoing announcements. This is what I'd do (and have done before) to even things out. Some would argue that when

Re: [c-nsp] BGP path preference

2007-08-31 Thread Oliver Boehmer \(oboehmer\)
Niels Bakker wrote on Friday, August 31, 2007 3:22 PM: * [EMAIL PROTECTED] (Jon Lewis) [Thu 30 Aug 2007, 17:13 CEST]: On Wed, 29 Aug 2007, Andy Dills wrote: Don't forget that you can prepend incoming announcements as well as outgoing announcements. This is what I'd do (and have done

Re: [c-nsp] GSR 12008 temp issue

2007-08-31 Thread Pierfrancesco Caci
:- Chris == Chris Lane [EMAIL PROTECTED] writes: cr.nyc2.ny# show environment temperatures Slot # Hot Sensor Inlet Sensor (deg C) (deg C) 1 55.541.5 2 71.041.0 3 59.544.5 4 59.0

Re: [c-nsp] 7204vxr freeze-up question

2007-08-31 Thread Adam Greene
Rodney, Thanks. I appreciate the follow-up. The show int was from g2/0 because it was originally freezing up while the card was in that slot. We moved it to g3/0 and it kept on freezing up. I took the show controller reading after we had moved it to that slot. I can consistently trigger this

Re: [c-nsp] Debugging LFI fragmentation

2007-08-31 Thread Leonardo Souza
Comments inline... Oliver Boehmer (oboehmer) [EMAIL PROTECTED] escreveu:Leonardo Souza wrote on Thursday, August 30, 2007 8:53 PM: Correct. I sent ping packets with 1500 bytes . My problem is that on the other side, I see no debug output for MLP (events, fragments etc...). By the way,

Re: [c-nsp] Debugging LFI fragmentation

2007-08-31 Thread Oliver Boehmer \(oboehmer\)
Leonardo Souza wrote on Friday, August 31, 2007 4:59 PM: Comments inline... Oliver Boehmer (oboehmer) [EMAIL PROTECTED] escreveu: Leonardo Souza wrote on Thursday, August 30, 2007 8:53 PM: Correct. I sent ping packets with 1500 bytes . My problem is that on the other side, I see

Re: [c-nsp] BGP hardware requirements

2007-08-31 Thread Hyunseog Ryu
I agree on Mark's assessment for memory upgrade. If you are concerned about cost, you can find third party memory from kingston or some other well-known manufacturers. It is good idea to upgrade memory to max, so you don't have to shutdown the router to upgrade it again. Also, BGP may use lots of

[c-nsp] Error Msgs

2007-08-31 Thread Paul Stewart
Hi there... Cisco 3825 showing the following errors - looking for input... Aug 31 13:13:36: %SYS-4-CHUNKMALLOCFAIL: Could not allocate chunks for CEF: arp throt Total free: 0, Total inuse: 500, Cause : Not a dynamic chunk -Process= interrupt level, ipl= 1, pid= 87 -Traceback= 0x612B36C4

Re: [c-nsp] Error Msgs

2007-08-31 Thread Justin M. Streiner
How much free memory do you have and what is the size of the largest block of it? malloc() fails typically show up when the router is very low on free memory or the free memory is so fragmented that IOS has trouble allocating new chunks when requested. jms On Fri, 31 Aug 2007, Paul Stewart

Re: [c-nsp] BGP/private and public ASN mix trick

2007-08-31 Thread David Prall
64001 is not a Private AS, you need to use 64512 to 65535. Then use remove-private-as on external connections. David -- http://dcp.dcptech.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Kraal Sent: Saturday, August 25, 2007 10:38 AM

Re: [c-nsp] Debugging LFI fragmentation

2007-08-31 Thread Leonardo Souza
I realize nowthat's ok. I'll do a test, configuring a access-list x.x.x.x log-input to punt these packets to RP. Maybe it works. Regards. Flickr agora em português. Você clica, todo mundo vê. Saiba mais. ___ cisco-nsp mailing

[c-nsp] protecting cisco switches

2007-08-31 Thread Mark Messier
A site I manage has top-of-rack HP switches redundantly connected to two cisco 4948 switches, and those 4948 switches are interconnected with a trunk. Every now and then an HP switch appears to do something stupid and this impacts the cisco switches, sometimes fatally. This can happen with no

Re: [c-nsp] protecting cisco switches

2007-08-31 Thread Roland Dobbins
On Aug 31, 2007, at 12:28 PM, Mark Messier wrote: What can I do on the cisco switches to protect them and yet still leave them functional enough to achieve the desired redundancy? There are various layer-2 features such as Loop Guard (sounds most relevant to this particular issue), Root

Re: [c-nsp] FWSM blocking multicast traffic between two hosts in sameVlan?

2007-08-31 Thread David Prall
Is the FWSM your default gateway. If so you need something to act as the PIM Router in order for IGMP Snooping to work correctly. I'm not sure if the FWSM can do this. You could also configure your switch as an IGMP snooping queurier if no PIM Router is present. David -- http://dcp.dcptech.com

Re: [c-nsp] BGP path preference

2007-08-31 Thread Jon Lewis
On Fri, 31 Aug 2007, Oliver Boehmer (oboehmer) wrote: On Wed, 29 Aug 2007, Andy Dills wrote: Don't forget that you can prepend incoming announcements as well as outgoing announcements. This is what I'd do (and have done before) to even things out. Some would argue that when prepending