[c-nsp] Cat3750 crash 12.2(40)SE

2007-11-19 Thread Dale Shaw
Hi all, Has anyone seen this crash? Happened on a 2-member Cat3750-12S-E stack. All I did was change the IP address on a Port-channel interface and it died on me. I literally just went: conf t, int po1, ip address a.b.c.d 255.255.255.0 and it fell over. First it crashed the stack master (switch

Re: [c-nsp] Basic QoS/Rate limiting

2007-11-19 Thread a. rahman isnaini r. sutan
Hi, I've done this before very well by inserting bwmanager box as a bridge (fortunately it's ethernet type). As Cisco didn't give any better optioan rather than create per IP customer access-list to match again rate-limit / traffic shape on the interface. BWmanager box was : ETINC and now repl

Re: [c-nsp] VLAN Limits - 2821/3825

2007-11-19 Thread Paul Stewart
Thanks very much... yes, that answers my concerns ;) I knew the limits weren't overly high but for our use (one VLAN per port) this works quite well... Thanks again, Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Rathlev Sent: Monday, Novem

Re: [c-nsp] Basic QoS/Rate limiting

2007-11-19 Thread Peter Rathlev
On Mon, 2007-11-19 at 06:44 -0600, Dave Weis wrote: > Is there an easy way on a 2800 to enforce per client speed limits for > ethernet connected clients? Ideally I would like to control them to X > kbps down and Y kbps up. The switches the clients are connected to don't > have any rate limiting

Re: [c-nsp] VLAN Limits - 2821/3825

2007-11-19 Thread Peter Rathlev
On Mon, 2007-11-19 at 13:05 -0800, Curtis Doty wrote: > > Trying to find out what the maximum VLAN's on a 2821 or 3825 is? > > Configuration is router + NM-16ESW card and we'd like to use them as a small > > distribution router at remote sites and assign each port to it's own VLAN - > > I know ther

Re: [c-nsp] etherchannel problems

2007-11-19 Thread Christopher E. Brown
I does seem like dynamic would be more risky, but in practice I have found that running LACP is alot better than "channel mode on". It takes a few seconds longer to start up, but does a very good job of protecting against unbound interfaces. Holemans Wim wrote: > We just got bitten by a serious

Re: [c-nsp] Basic QoS/Rate limiting

2007-11-19 Thread Dave Weis
On Mon, 19 Nov 2007, Aman Chugh wrote: > Yes, You could create a vlan for each client/clients and then have rate > limiting done on sub interface vlan interface on your router. There's about 100 clients on the network, I was hoping to avoid anything that requires individual configurations. That

Re: [c-nsp] VLAN Limits - 2821/3825

2007-11-19 Thread Curtis Doty
11:10am Paul Stewart said: > Trying to find out what the maximum VLAN's on a 2821 or 3825 is? > Configuration is router + NM-16ESW card and we'd like to use them as a small > distribution router at remote sites and assign each port to it's own VLAN - > I know there's a limit but can't find documen

[c-nsp] Fail-Over solution

2007-11-19 Thread Sebastian Ganschow
Hi, we've got several customers who have 2 connections to our backbone. Mostly a connection with > 10 mbit/s and a smaller backup connection with up to 2 mbit/s. Currently the second router will be connected with the LAN in case the primary connection fails. We would like to implement a solution

Re: [c-nsp] Forwarding Netflow traffic to multiple collectors

2007-11-19 Thread Adam Powers
Lancope sells a "Flow Replicator" for those that want a commercial solution... http://www.lancope.com/products/replicator.aspx It can do both passive replication via packet capture or you can send directly to the IP of the replicator itself. The source IP is maintained while the destination IP an

Re: [c-nsp] etherchannel problems

2007-11-19 Thread Phil Bedard
If you were using LACP then this should have taken the remote side out of the Etherchannel as well. There is no knob to take the interface down during these conditions, but dynamic negotiation should solve the issue. Phil On Nov 19, 2007, at 11:11 AM, Holemans Wim wrote: > We just got bit

Re: [c-nsp] Symmetric load-splitting with CEF

2007-11-19 Thread Oliver Boehmer (oboehmer)
Tomas Daniska <> wrote on Monday, November 19, 2007 3:06 PM: > Hi all, > > I am aware that symmetric load splitting to transparent stateful > devices (such as IPS, SCE etc...) is possible with EtherChanneling > (with some careful balancing algorithm design), and is available on > c6k5 for some ti

[c-nsp] etherchannel problems

2007-11-19 Thread Holemans Wim
We just got bitten by a serious etherchannel problem : we have an 2 gig etherchannel link between 2 campus. Someone on the other end misconfigured an interface (typed 6/1 instead of 1/6) and had overwritten the allowed vlans on one of the interfaces. As a result of this, the interface was thrown o

[c-nsp] VLAN Limits - 2821/3825

2007-11-19 Thread Paul Stewart
Hi folks... Trying to find out what the maximum VLAN's on a 2821 or 3825 is? Configuration is router + NM-16ESW card and we'd like to use them as a small distribution router at remote sites and assign each port to it's own VLAN - I know there's a limit but can't find documentation to back it up...

Re: [c-nsp] Basic QoS/Rate limiting

2007-11-19 Thread Aman Chugh
Yes, You could create a vlan for each client/clients and then have rate limiting done on sub interface vlan interface on your router. Aman On 11/19/07, Dave Weis <[EMAIL PROTECTED]> wrote: > > > Is there an easy way on a 2800 to enforce per client speed limits for > ethernet connected clients? I

Re: [c-nsp] Symmetric load-splitting with CEF

2007-11-19 Thread Fred Reimer
Yes, interchassis EtherChannel is now supported with Cisco's VSS technology. Thanks, Fred Reimer, CISSP, CCNP, CQS-VPN, CQS-ISS Senior Network Engineer Coleman Technologies, Inc. 954-298-1697 > -Original Message- > From: [EMAIL PROTECTED] [mailto:cisco-nsp- > [EMAIL PROTECTED] On Beha

[c-nsp] Symmetric load-splitting with CEF

2007-11-19 Thread Tomas Daniska
Hi all, I am aware that symmetric load splitting to transparent stateful devices (such as IPS, SCE etc...) is possible with EtherChanneling (with some careful balancing algorithm design), and is available on c6k5 for some time. But - c6k5 do not support cross-chassis EtherChannels with current su

Re: [c-nsp] OSPF, summarization, areas etc.

2007-11-19 Thread Jon Lewis
On Mon, 19 Nov 2007, Primoz Jeroncic wrote: > Until recently we had all our network in one single area (not area 0). Now I > moved our backbone to area 0, while keeping most of spokes in old area > (area 100). > > I will be moving these spokes to different areas later on, but I would like to > cla

[c-nsp] OSPF, summarization, areas etc.

2007-11-19 Thread Primoz Jeroncic
Hi guys Before I go back to books and try to find out this hard way, I'm hoping someone can jump for help, and support my laziness :) Due to some legacy reasons we had pretty bad OSPF setup here. Now I finally started to move things further, but I have few problems. Or maybe they are not problems,

[c-nsp] Basic QoS/Rate limiting

2007-11-19 Thread Dave Weis
Is there an easy way on a 2800 to enforce per client speed limits for ethernet connected clients? Ideally I would like to control them to X kbps down and Y kbps up. The switches the clients are connected to don't have any rate limiting capability. If this isn't possible is there a simple way t

Re: [c-nsp] WRR between LSP's

2007-11-19 Thread Oliver Boehmer (oboehmer)
Padmavathi Chilukoori <> wrote on Monday, November 19, 2007 1:16 PM: > Hi Oli, > > We have a scenario as below; > > (LSR) > ( LER) [ A ]-[ B ]==[ C ] (LER) > | > | > [ D

Re: [c-nsp] cisco-nsp Digest, Vol 60, Issue 60

2007-11-19 Thread Padmavathi Chilukoori
Hi Oli, We have a scenario as below; (LSR) ( LER) [ A ]-[ B ]==[ C ] (LER) | | [ D ] ( LER ) Following are the 2 signalled LSP's, LSP1: A-

Re: [c-nsp] Weird Error Message in 'sho ver' on GSR after upgrade

2007-11-19 Thread Arie Vayner (avayner)
Michael, Please try issuing the "test mbus clear-jam-counts []" command. This should clear the warnings. If they reappear, it means that you have a problem on these cards. Then you should try to reseat the cards, and if it still keeps reappearing, RMA them... I strongly suggest you follow the who

Re: [c-nsp] Invalid packet (too small) length=0

2007-11-19 Thread Nemeth Laszlo
Dear Oli! Oliver Boehmer (oboehmer) i'rta: > Nemeth Laszlo <> wrote on Saturday, November 17, 2007 9:47 PM: >> I received this messages yesterday: >> Nov 16 21:57:23: Invalid packet (too small) length=0 >> The router is a 7606 with Sup720-3BXL, ios: >> s72033-adventerprisek9_wan-mz.122-18.SXF

Re: [c-nsp] Invalid packet (too small) length=0

2007-11-19 Thread Nemeth Laszlo
Dear Oli! Oliver Boehmer (oboehmer) i'rta: > Nemeth Laszlo <> wrote on Saturday, November 17, 2007 9:47 PM: >> I received this messages yesterday: >> Nov 16 21:57:23: Invalid packet (too small) length=0 >> The router is a 7606 with Sup720-3BXL, ios: >> s72033-adventerprisek9_wan-mz.122-18.SXF6.bin

Re: [c-nsp] DCEF and CPP

2007-11-19 Thread Gabor Ivanszky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I am not sure on this, but on 7500 only dCEF is supported, and dCEF runs only on the linecards, and not on the RSP. Control plane policing should take place on the RSP, which in turn don't have any congestion mgmt/avoidance function at all. re