Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Matt Carter
Firstly, I'm no expert in Cisco buffers, but it seems you have failures all the way up to and including the Huge buffer pool, which I would think is most certainly going to result in packet drop. Secondly, I did come across a bug which looks awefully like the message you are seeing. 006349: Jul 2

[c-nsp] Max performance 6148(A--GE-TX boards

2007-10-24 Thread Holemans Wim
We have a bunch of 65XX with 6148-GE-TX or 6148A-GE-TX boards to connect a large number of servers and different etherchannels between them. When i checked the release notes for 12.2SX, i found the following lines : "... WS-X6148A-GE-TX *Number of ports: 48 Number of port groups: 6 Port ranges per

Re: [c-nsp] Ethernet Question - Problem with link

2007-10-24 Thread d_mark
Hi Paul, what's about the speed and duplex settings of the 2 Ethernet-ports? regards Mark Paul Stewart wrote: > Hi folks... > > Just looking for a thought - ethernet cable from switch to switch. One side > is up/up but other side is up/down > > Both sides configured properly (access port,

Re: [c-nsp] router packets & outbound acl

2007-10-24 Thread Richard Gallagher
IP local policy route will stop the pings: http://www.cisco.com/univercd/cc/td/doc/product/software/ios113ed/cs/ csprtn1/csindep.htm#xtocid273467 On 20/10/2007, at 7:39 AM, Ian Dickinson wrote: > Oliver Boehmer (oboehmer) wrote: >> *any* self-originated packet (for example a ping or telnet or

Re: [c-nsp] Managed, cheap, DC powered switch

2007-10-24 Thread Eric Helm
Brandon Bennett wrote: > I work for a telco and have a need for cheap managed switches that are > DC powered. Cisco's line up is a 2950-24-DC. > > I am looking for something with: > * Better port density (48 ports per 1U). > * IOS like configuration (not needed, but would be nice not to > cro

[c-nsp] OT: Choice Resale

2007-10-24 Thread Sherry Ollins
I would like to apologize to anyone who received an unwanted email from Choice Resale over the last few days. We have a new salesperson who did not realize that this type of email was not appropriate to send to list members. Choice Resale prides itself on being an important and valuable resource

Re: [c-nsp] 6503-E with Sup720-3BXL?

2007-10-24 Thread Deepak Jain
Gert Doering wrote: > Hi, > > On Wed, Oct 24, 2007 at 04:19:12PM -0400, Deepak Jain wrote: >> Ahh... now this raises the question. >> >> Has anyone actually fired up a 720 in a larger chassis (say a 9-slot) >> without any cards and seen what kind of power availability it reports? >> Or if it e

Re: [c-nsp] 6503-E with Sup720-3BXL?

2007-10-24 Thread Gert Doering
Hi, On Wed, Oct 24, 2007 at 05:25:54PM -0400, Deepak Jain wrote: > Don't see the 1300 or 1400W power supply options on the calculator, even > though it says it'll use < 700w. The CAC-1300 is EOL since a while. For the 6509, the smallest you can get today is 2500W (if I remember correctly), for

Re: [c-nsp] 6503-E with Sup720-3BXL?

2007-10-24 Thread Deepak Jain
Don't see the 1300 or 1400W power supply options on the calculator, even though it says it'll use < 700w. Thanks though. DJ Juan Angel Menendez wrote: > > Cisco Power Calculator: http://tools.cisco.com/cpc/ > > At 17:19 24/10/2007, Deepak Jain wrote: > >> Ahh... now this raises the

Re: [c-nsp] Risk of enabling ip accounting

2007-10-24 Thread Gert Doering
Hi, On Tue, Oct 23, 2007 at 10:37:56PM +0200, Vincent De Keyzer wrote: > what is the level of risk involved in enabling IP accounting on an > interface? Instant CPU death... > More specifically, this is about a Catalyst 4948 doing L2/L3 and > switching a total of 100 Mbits in and out (CPU is a

Re: [c-nsp] 6503-E with Sup720-3BXL?

2007-10-24 Thread Gert Doering
Hi, On Wed, Oct 24, 2007 at 04:19:12PM -0400, Deepak Jain wrote: > Ahh... now this raises the question. > > Has anyone actually fired up a 720 in a larger chassis (say a 9-slot) > without any cards and seen what kind of power availability it reports? > Or if it even fires up? Well, with a dual

Re: [c-nsp] Problems adding VLAN's to portchannel trunk

2007-10-24 Thread Murphy, William
We have an HP Blade Center also and our switch is hard coded to on... Don't think the HP boxes support pAgP... Bill Murphy Senior Network Analyst University of Texas Health Science Center - Houston -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Lou

Re: [c-nsp] 6503-E with Sup720-3BXL?

2007-10-24 Thread Eric Gauthier
Heya, On Wed, Oct 24, 2007 at 04:19:12PM -0400, Deepak Jain wrote: > Ahh... now this raises the question. > > Has anyone actually fired up a 720 in a larger chassis (say a 9-slot) > without any cards and seen what kind of power availability it reports? > Or if it even fires up? We're currently

Re: [c-nsp] Problems adding VLAN's to portchannel trunk

2007-10-24 Thread Mike Louis
When the channel goes down is it err-disabled because of port-channel misconfig? You could set the sides to channel-group 1 mode on on each side and then add the vlan. that should work. From: [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Nate Carlson [

Re: [c-nsp] 6503-E with Sup720-3BXL?

2007-10-24 Thread Juan Angel Menendez
Cisco Power Calculator: http://tools.cisco.com/cpc/ At 17:19 24/10/2007, Deepak Jain wrote: >Ahh... now this raises the question. > >Has anyone actually fired up a 720 in a larger chassis (say a 9-slot) >without any cards and seen what kind of power availability it reports? >Or if it e

Re: [c-nsp] Cisco WS-X6724-GE-TX Blade

2007-10-24 Thread Fred Reimer
You may want to check what speed(s) are supported on the 6724/48 SFP blades when using TX SFP's. SOME switches support 10/100/1000 when using TX SFP's, but SOME switches (and I believe all "Gigabit" blades for the 6500 series fall in this category) only support 1000Mbps on TX SFP's... Fred Reimer

Re: [c-nsp] OT - spam from Choice Resale

2007-10-24 Thread jared mauch
I have removed them all from puck lists. Jared Mauch On Oct 24, 2007, at 4:09 PM, "Aaron Daubman" <[EMAIL PROTECTED]> wrote: > ...I also recently received that message from Jenny Kuntz > <[EMAIL PROTECTED]> > (but also use the same email address on cisco-nsp and NANOG) > > On 10/24/07, Seth Matt

Re: [c-nsp] 6503-E with Sup720-3BXL?

2007-10-24 Thread Deepak Jain
Ahh... now this raises the question. Has anyone actually fired up a 720 in a larger chassis (say a 9-slot) without any cards and seen what kind of power availability it reports? Or if it even fires up? Deepak Tim Stevenson wrote: > This particular verbiage refers only to the 6, 9, & 13 slot sy

Re: [c-nsp] OT - spam from Choice Resale

2007-10-24 Thread Aaron Daubman
...I also recently received that message from Jenny Kuntz <[EMAIL PROTECTED]> (but also use the same email address on cisco-nsp and NANOG) On 10/24/07, Seth Mattinen <[EMAIL PROTECTED]> wrote: [snip] > > NANOG, cisco-nsp: any of you get this too? ___ cis

Re: [c-nsp] Problems adding VLAN's to portchannel trunk

2007-10-24 Thread Nate Carlson
On Wed, 24 Oct 2007, Jeff Fitzwater wrote: > Add them to the port channel interface NOT the physical ports. Yeah, got an off-list reply saying the same thing - we will give that a shot. Appreciate it! | nate carlson | [EMA

Re: [c-nsp] Problems adding VLAN's to portchannel trunk

2007-10-24 Thread Jeff Fitzwater
Add them to the port channel interface NOT the physical ports. Jeff Fitzwater OIT Network Systems Princeton University Nate Carlson wrote: > We've got a 6509 [12.2(17a)SX1] connected to a couple switches in a HP > c-Class blade chassis, which are Cisco 3020's [CBS30X0-LANBASE-M, > 12.2(25)SEF1

Re: [c-nsp] Problems adding VLAN's to portchannel trunk

2007-10-24 Thread A . L . M . Buxey
Hi, not sure about adding the VLANs to the allowed list of the port-channel itself but switchport nonegotiate on the gig interfaces should stop the VLAN mismatch issue alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.ne

[c-nsp] Managed, cheap, DC powered switch

2007-10-24 Thread Brandon Bennett
I work for a telco and have a need for cheap managed switches that are DC powered. Cisco's line up is a 2950-24-DC. I am looking for something with: * Better port density (48 ports per 1U). * IOS like configuration (not needed, but would be nice not to crosstrain my team) * CHEAP. The gear is

Re: [c-nsp] OT - spam from Choice Resale

2007-10-24 Thread Seth Mattinen
Chris Woodfield wrote: > Hello, > > I'm guessing that you've scraped my email address from one or more > professional mailing lists (NANOG, cisco-nap, et al). > > Being in this business, you should probably know that unsolicited > marketing emails such as these, even when targeted, are *highl

[c-nsp] Problems adding VLAN's to portchannel trunk

2007-10-24 Thread Nate Carlson
We've got a 6509 [12.2(17a)SX1] connected to a couple switches in a HP c-Class blade chassis, which are Cisco 3020's [CBS30X0-LANBASE-M, 12.2(25)SEF1]. We've got an issue where we can't add a VLAN to the trunk without it going down because of VLAN mismatch while we are trying to add it to all t

Re: [c-nsp] OT - spam from Choice Resale

2007-10-24 Thread Paul Stewart
Yup.. got a few of them myself lately actually the phone calls have been *really* picking up lately too from various companies - get's irritating. Have suppliers, am happy - if need more WILL CALL YOU :) Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

[c-nsp] OT - spam from Choice Resale

2007-10-24 Thread Chris Woodfield
Hello, I'm guessing that you've scraped my email address from one or more professional mailing lists (NANOG, cisco-nap, et al). Being in this business, you should probably know that unsolicited marketing emails such as these, even when targeted, are *highly* frowned upon and do very little

Re: [c-nsp] Dynagen

2007-10-24 Thread azher
I found this one http://7200emu.hacki.at/ -Azher Nicholas Weaver wrote:http://www.internetworkexpert.com/ Nicholas Weaver [EMAIL PROTECTED] m: 817-914-6166 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Phil Bedard Sent: Wednesday, October 24, 2

Re: [c-nsp] Dynagen

2007-10-24 Thread Nicholas Weaver
http://www.internetworkexpert.com/ Nicholas Weaver [EMAIL PROTECTED] m: 817-914-6166 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Phil Bedard Sent: Wednesday, October 24, 2007 12:46 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; cisco-nsp@puck.nether

Re: [c-nsp] Full net table too large for Sup720 already?

2007-10-24 Thread Jeff Fitzwater
It depends on how many specific routes your peers are sending you. If one sends you lots of /24 routes then it could fill the table, or if 2 peers send you a total of >230K (default) with lots of specific routes from one then it will also fill the CEF table space.You could increase th

Re: [c-nsp] Dynagen

2007-10-24 Thread Phil Bedard
internetexperts? I believe has good dynagen config files for use with some of their practice labs. It works really well, the only issue with using it for a full lab scenario is the lack of ethernet switching and the features found on those devices. Phil On Oct 24, 2007, at 11:00 AM, [EMAIL

Re: [c-nsp] Full net table too large for Sup720 already?

2007-10-24 Thread Phil Bedard
Depending on your use, look at the SUP720-3BXL or the RSP720-3CXL (if you are using a 7600). The Sup720-3B isn't really geared towards applications needing a full Internet table. Phil On Oct 24, 2007, at 1:34 PM, Drew Weaver wrote: > Hi, I've been doing some research on har

Re: [c-nsp] 6500 12.2SX* Port-Channel Private VLAN support

2007-10-24 Thread Tim Durack
Good to know. I actually want to do something like: > vlan 44 > private-vlan primary > private-vlan association 400 > ! > > ! > vlan 400 > private-vlan community > ! > interface Port-channel1 > switchport trunk encapsulation dot1q > switchport mode dynamic desirable > switchport private-v

[c-nsp] T1 CSU/DSU WIC output issue

2007-10-24 Thread Church, Charles
Hey all, Working on a problem with a funky T1 going into a WIC-1DSU-T1 on a 2650 running 12.4(16). Output shows this: x-2650#sh service-mod s0/0 Interface Serial0/0 Module type is T1/fractional Hardware revision is 0.96, Software revision is 20050811-0.3, Image checksum is 0x80

[c-nsp] Full net table too large for Sup720 already?

2007-10-24 Thread Drew Weaver
Hi, I've been doing some research on hardware and I've been reading that the regular Sup720 may already be obsolete as far as the full BGP route tables go, is this true? I find it somewhat hard to believe that a GRP-B can handle it, yet a Sup720 cannot, but that's life I guess.

[c-nsp] Cisco WS-X6724-GE-TX Blade

2007-10-24 Thread andrew burns
Hi, We're in a situation where next year we're going to have to replace our 6513 chassis with 6509-E simply to get a full complement of 6748-GE-TX blades. What we'd prefer to do is just add 6724-GE-TX to slots 1-6 as required. However, these blades don't exist - only 6724-SFP exist. So, as 24

Re: [c-nsp] 6500 12.2SX* Port-Channel Private VLAN support

2007-10-24 Thread Collins, Richard (SNL US)
I tried testing this with a 2 trunk etherchannel between two switches. Host1 and Host2 connected to SW1 (3560) Host3 connected to SW2 (3560) I used the secondary VLAN 400 as community for all these hosts. I found I could create a vlan filter list on SW2 which blocked Host1 <> Host3 but allowed

Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Howard Leadmon
It's running 12.4(15)T1, as posted in my initial write up. I could be wrong, but I think with the NPE-G2, I have to use the T train for support of that NPE. I checked CCO to see I there was any newer version, but I don't see anything. Two others were nice enough to send me this link: http://pu

Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Seth Mattinen
Howard Leadmon wrote: > The sucker should have more RAM than it knows what to do with.. *smiles* > >> sho proc mem > Processor Pool Total: 1898778796 Used: 240963296 Free: 1657815500 > I/O Pool Total: 67108864 Used:5887264 Free: 61221600 > Transient Pool Total: 16777216 Used:

Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Howard Leadmon
Yep, I am running BGP, CEF, and OSPF on the router. Doubt it should impact this, but I am using the 3 GE ports on the NPE-G2, as well as I have PA-2T3+ adapter, and a PA-MC-8T1 installed and in use. I have the router maxed out on RAM, so hopefully memory isn't an issue, but he's a show mem: >

Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Howard Leadmon
The sucker should have more RAM than it knows what to do with.. *smiles* >sho proc mem Processor Pool Total: 1898778796 Used: 240963296 Free: 1657815500 I/O Pool Total: 67108864 Used:5887264 Free: 61221600 Transient Pool Total: 16777216 Used: 18372 Free: 16758844 Unles

Re: [c-nsp] redirect nexthop on ASA 5510

2007-10-24 Thread Christian Zeng
Hi, * Moerman, Maarten <[EMAIL PROTECTED]> wrote: >Deny TCP (no connection) from 192.168.1.59/3389 to 192.168.2.92/3289 >flags SYN ACK on interface inside You already solved one design issue by allowing samesec-traffic intra-interface. The problem is asymmetric traffic flow. The first packet hi

Re: [c-nsp] Ethernet Question - Problem with link

2007-10-24 Thread Michael Malitsky
Did you use a cross-over cable? Michael > Message: 1 > Date: Wed, 24 Oct 2007 06:50:05 -0400 > From: "Paul Stewart" <[EMAIL PROTECTED]> > Subject: Re: [c-nsp] Ethernet Question - Problem with link > To: "'Mike Louis'" <[EMAIL PROTECTED]>, "'Pete Templin'" > <[EMAIL PROTECTED]> > Cc: cisco-n

Re: [c-nsp] BFD feedback?

2007-10-24 Thread Tim Durack
But if BFD detected a failure in end-to-end forwarding, this could signal protocol down on the interface, and not actually take the link down, right? On 10/24/07, Arie Vayner (avayner) <[EMAIL PROTECTED]> wrote: > Actually, dropping the link is sometimes wrong, as you sometimes have > point to poi

Re: [c-nsp] BFD feedback?

2007-10-24 Thread Arie Vayner (avayner)
Leonardo, This is usually cause by too aggressive tuning of the timers... Also, using dampening could help with flapping links Arie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Leonardo Gama Souza Sent: Wednesday, October 24, 2007 14:35 PM To: cisco

Re: [c-nsp] Ethernet Question - Problem with link

2007-10-24 Thread Michael K. Smith - Adhost
Hello Paul: > -Original Message- > From: [EMAIL PROTECTED] [mailto:cisco-nsp- > [EMAIL PROTECTED] On Behalf Of Paul Stewart > Sent: Tuesday, October 23, 2007 6:49 PM > To: cisco-nsp@puck.nether.net > Subject: [c-nsp] Ethernet Question - Problem with link > > Hi folks... > > Just looking

Re: [c-nsp] redirect nexthop on ASA 5510

2007-10-24 Thread Darryl Dunkin
The flaw here is that your packets are not bi-directionally being passed through your ASA, so it never sees any TCP session come up as only one direction of traffic is passing through it. If your source is 192.168.1.59, and you redirect the packet back to your LAN via 192.168.1.2, the router at 19

Re: [c-nsp] BFD feedback?

2007-10-24 Thread Arie Vayner (avayner)
Actually, dropping the link is sometimes wrong, as you sometimes have point to point link that have different layer 2 "legs" (for example Ethernet over SDH). The end to end connectivity would fail, but the local link to the local SDH node has to stay up... Thanks Arie -Original Message-

[c-nsp] Dynagen

2007-10-24 Thread azher
Hi, I just cleared my ccie written for r&s and now preparing for the using dynagen. However i was thinking how others are using dynagen for their lab preparation, some thoughts on effective utilization and what can done out of it, and sharing net files will be helpful. Thnx -Azher __

Re: [c-nsp] BFD feedback?

2007-10-24 Thread Chris Woodfield
I wasn't advocating that BFD *only* work at the link level, but for point-to-point links it's a feature I'd like to have as an option. There would obviously need to be some mechanism by which BFD packets would continue to be sent and received despite the interface protocol being shut down,

[c-nsp] Adding static multicast entry with IGMP snooping

2007-10-24 Thread Ruben Montes (Europe)
Hello, We're moving some of our VMWare servers from our core C6513 to a new Cisco 4948 switch. We are migrating the same configuration for these servers from the C6513 to the C4948. We have some static MAC multicast entries, and the "mac-address-table static " command seems not compatible with I

Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Gregory Boehnlein
> I just recently installed a new 7206VXR/NPE-G2 router, and looking at > the logging output I am seeing the following: > > Oct 23 11:27:51.705 EDT: %SYS-4-CHUNKMALLOCFAIL: Could not allocate > chunks for > CEF: arp throt > Total free: 0, Total inuse: 500, Cause : Not a dynamic chunk > -Process

[c-nsp] redirect nexthop on ASA 5510

2007-10-24 Thread Moerman, Maarten
Hi All, I'm having trouble configuring a ASA5510 to behave as a router that sets a "redirect next hop". I've configured the ASA perfectly, VPN is working, NAT is working, routing SEEMS to be working but does not work for stateful connections. I have: Internet -> Cisco 2600 public IP/something

Re: [c-nsp] Ethernet Question - Problem with link

2007-10-24 Thread Paul Stewart
Thanks - yes VLAN exists and no changes to VLAN database recently other than adding this new VLAN it's on an access port which is trunked out on another port... Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Louis Sent: Wednesday, October

[c-nsp] BFD feedback?

2007-10-24 Thread Leonardo Gama Souza
Hi. Once a while ago, I faced some problems with rapid flaps from optical transmission. Take care of some bugs that can hit you. Kind regards. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archiv

Re: [c-nsp] BFD feedback?

2007-10-24 Thread Phil Mayers
> > That said, I do feel that tying BFD to routing protocol events only > > is a bit shortsighted - why not have an option to just change line > > protocol to down in a case of BFD timeout failure, and let the > > routing protocols react the that naturally? > > > Surely this wouldn't work

Re: [c-nsp] BFD feedback?

2007-10-24 Thread Sam Stickland
Chris Woodfield wrote: > BFD is a lifesaver where you have circuits such as metro ethernet > links that don't lose link state when something in the middle blocks > connectivity. It's less useful across WAN links that depend on end-to- > end connectivity to maintain line protocol. > > As Arie,

Re: [c-nsp] Internal vlan usage - 6500 sup32

2007-10-24 Thread Phil Mayers
On Wed, 2007-10-24 at 10:10 +0100, Ian MacKinnon wrote: > Hi All, > > I am trying to create some vlans on a 6500 Sup32 running 12.2SXH > > When I try and create vlan 1010 and give it a name I get an error. > > eg > conf t > vlan 1010 > name myname > > Gives > %Failed to commit extended VLAN(s)

[c-nsp] Internal vlan usage - 6500 sup32

2007-10-24 Thread Ian MacKinnon
Hi All, I am trying to create some vlans on a 6500 Sup32 running 12.2SXH When I try and create vlan 1010 and give it a name I get an error. eg conf t vlan 1010 name myname Gives %Failed to commit extended VLAN(s) changes. and the log shows Oct 24 09:04:21.264: %PM-SP-4-EXT_VLAN_INUSE: VLAN 101

Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Hyunseog Ryu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Did you check the memory usage from the router such as "show proc mem" ? It seems to me that IOS fails to allocate the memory for CEF table because there is no memory available (Totle free: 0). Hyun Howard Leadmon wrote: > I just recently installed

[c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Howard Leadmon
I just recently installed a new 7206VXR/NPE-G2 router, and looking at the logging output I am seeing the following: Oct 23 11:27:51.705 EDT: %SYS-4-CHUNKMALLOCFAIL: Could not allocate chunks for CEF: arp throt Total free: 0, Total inuse: 500, Cause : Not a dynamic chunk -Process= "", ipl= 1,