[c-nsp] MLPPP support on a 2651XM

2007-12-06 Thread Justin Shore
Can anyone tell me if MLPPP is supported on a 2651XM with 2x WIC-1DSU-T1 (might be a V2s) and a VWIC-2MFT-T1 mounted on a NM-2W? The router and WICs are pre-existing and the customer needs to double their bandwidth. It's cheaper to buy a NM-2W and a VWIC-2MFT-T1, reusing the WICs, instead of

[c-nsp] Cisco Distributed Director

2007-12-06 Thread Aaron R
Hi Guys, I am hoping to setup Distributed Director in order for clients to locate the closest web server when browsing our web sites. Has anyone had experience load balancing multiple DD routers? I was thinking of setting up DNS round robin but I don't think this will work as each DD router nee

Re: [c-nsp] Policing Question

2007-12-06 Thread Bill ford
Hi Paolo, Thanks for your feedback, much appreciated... As the max bandwidth for the customer is 8 Mbps, how does the the below policing values looks to you. police cir 400 bc 2000 be 2000 conform-action transmit exceed-action drop With burst configured to 2000, which going by CIR=bc/tc t

Re: [c-nsp] Replacement for HSRP

2007-12-06 Thread Bob Chan
what about IP SLA w/ reaction ? On Dec 7, 2007 12:35 AM, Scott Granados <[EMAIL PROTECTED]> wrote: > This might be like fly swatting with sledge hammers but how about BGP in > this situation? > > Depending on your network addressing particulars and your ISP you could do > something like have each

Re: [c-nsp] IP blocks from Asian RIRs?

2007-12-06 Thread a. rahman isnaini r. sutan
why 202/8 ? - a. r. isnaini. rangkayo sutan - Original Message - From: "Alastair Johnson" <[EMAIL PROTECTED]> To: "Alex Balashov" <[EMAIL PROTECTED]> Cc: Sent: Thursday, December 06, 2007 10:39 PM Subject: Re: [c-nsp] IP blocks from Asian RIRs? > Alex Balashov wrote: >> Is there a go

Re: [c-nsp] router and transparent bridging help needed.

2007-12-06 Thread Aaron
Bruce Pinsky wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Aaron wrote: > >> Ibrahim Abo Zaid wrote: >> >>> Dear Aaron >>> >>> >>> regarding the bridging frame directly to your internal router via your >>> firewall , the below Cisco documents shows transparent bridging o

Re: [c-nsp] netflow

2007-12-06 Thread Justin Shore
Eric Van Tol wrote: > If you are looking for OSS, ntop will do the job as well, although I've > had problems keeping it running in the past (probably due more to > operator error, though): I'm catching up on old list mail. I too have had ntop stability issues, especially when combined with netf

Re: [c-nsp] Inconsistent vlan (6500, spanning tree)

2007-12-06 Thread Pshem Kowalczyk
Whatever was wrong with the boxes - doesn't seem to affect the supervisor ports. After we moved the config and the cables - everything started to work as expected. regards Pshem ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.ne

Re: [c-nsp] router and transparent bridging help needed.

2007-12-06 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Aaron wrote: > Ibrahim Abo Zaid wrote: >> Dear Aaron >> >> >> regarding the bridging frame directly to your internal router via your >> firewall , the below Cisco documents shows transparent bridging over >> many scenarios including frame-relay t

Re: [c-nsp] How to easily and securely pull configuration from a PIX/ASA

2007-12-06 Thread Thorsten Dahm
Marc Haber wrote: > On Thu, Dec 06, 2007 at 12:48:19AM +, Thorsten Dahm wrote: >> Marc Haber schrieb: >>> I am wondering what's the easiest way to pull the full configuration >>> (sans passwords/keys, if that makes things any easier) from a PIX or >>> ASA box. >> Use RANCID over SSH. If n

[c-nsp] Modems on 7200 Aux Ports

2007-12-06 Thread Patrick Muldoon
Got a bunch of remote 7206's (Mostly NPE-G2 or NPE-G1)s. Looking to add a modem to each of them for some OOB Access. Being lazy and don't want to make all the cables. Just verifying that CAB-RJ-MODEM is what I want to purchase. Thanks in advance, -Patrick -- Patrick Muldoon Network/Softwa

Re: [c-nsp] Question to ACS

2007-12-06 Thread Fred Reimer
You would setup a new group in your AD domain, and then map it to a new group on the ACS. Then, set the default group to the "default" ACS group, and disable this group. You can create multiple NT group mappings and use per group settings to allow them access to certain resources, via downloadabl

[c-nsp] Question to ACS

2007-12-06 Thread Ahmad Cheikh-Moussa
Hi! I don't know, whether this is the right list or not. I have an ACS Appliance which is connected to an Active directory Server. The configuration for that connection is done in the external database configuration. All user within the domain can be authenticated. Now I do not want that every act

Re: [c-nsp] Replacement for HSRP

2007-12-06 Thread Scott Granados
This might be like fly swatting with sledge hammers but how about BGP in this situation? Depending on your network addressing particulars and your ISP you could do something like have each router set up an IGP session between them over a common gig interface, then one gig out of each router to

Re: [c-nsp] %CDP-4-DUPLEX_MISMATCH - But they aren't connected!

2007-12-06 Thread Tuc at T-B-O-H.NET
> > Tuc at T-B-O-H.NET wrote: > > >>> The setup looks like this : > >>> > >>> TRANSIT1 TRANSIT2 > >>>| | > >>>|-E0/0|-E1/0 > >>>| | > >>> - > >>> 36

[c-nsp] Replacement for HSRP

2007-12-06 Thread Bulgaria Online - Assen Totin
Hi all, I have a pretty weird situation and I'm trying to figure out a work-around for it. We have 2 Cisco 2821 each equipped with a 16-port switch (Service Module). Both act as gateways to a local network - each LAN device is connected to both Service Modules (bonding interface) and one

Re: [c-nsp] Policing Question

2007-12-06 Thread Fred Reimer
You want WRED then. You are getting global TCP synchronization. That's where all of the TCP streams are transmitting and then you hit your maximum bandwidth and packets get dropped from all streams. So TCP will back off and slow things down, on all streams. Then they see that no more packets ar

Re: [c-nsp] IP blocks from Asian RIRs?

2007-12-06 Thread Alastair Johnson
Alex Balashov wrote: > Is there a good way to retrieve a list of all IP blocks assigned by APNIC > / the Asian RIRs? Please don't blanket filter all APNIC space, it is very irritating to the other "western" countries within those ranges that you (or your customers) may want to interact with, su

Re: [c-nsp] How to easily and securely pull configuration from a PIX/ASA

2007-12-06 Thread Marc Haber
On Thu, Dec 06, 2007 at 12:48:19AM +, Thorsten Dahm wrote: > Marc Haber schrieb: > > I am wondering what's the easiest way to pull the full configuration > > (sans passwords/keys, if that makes things any easier) from a PIX or > > ASA box. > > Use RANCID over SSH. If necessary you can change t

Re: [c-nsp] IP blocks from Asian RIRs?

2007-12-06 Thread Alex Balashov
On Fri, 7 Dec 2007, Alastair Johnson wrote: > Please don't blanket filter all APNIC space, it is very irritating to > the other "western" countries within those ranges that you (or your > customers) may want to interact with, such as New Zealand and Australia. Yeah, I've figured that out sin

[c-nsp] Finding SNMP trap source via SNMP

2007-12-06 Thread Sam Stickland
Hi, I'm trying to come up with a system to better determine which is the "management" address on a device. Some of our devices have multiple loopbacks, some don't have loopbacks, so it's immediately easy to tell how to do this. It occurs to me that looking at the interfaces specified in the t

Re: [c-nsp] Cisco 3400 ME switch with DC power

2007-12-06 Thread Raymond Macharia
hi Randy, because the switches will be located in POPs with less than good AC power and cooling DC was the better option. By the way the DC version has also a higher MTBF. I only found it strange that Cisco has not provisioned a power supply for it like for other devices. Raymond On Dec 5, 2007 6