Re: [c-nsp] BFD for static routes

2008-01-18 Thread Gert Doering
Hi, On Thu, Jan 17, 2008 at 09:36:29PM +0100, Arie Vayner (avayner) wrote: Unfortunately, BFD on SVI is not currently supported... Given the platform's architecture (everything is a SVI, even if you don't see it right away) this smells like someone has been smoking particularily bad weed...

Re: [c-nsp] MUX-UNI IOS version

2008-01-18 Thread David Granzer
Hello, On 1/18/08, Alexandre Snarskii [EMAIL PROTECTED] wrote: On Fri, Jan 18, 2008 at 01:07:16AM +0100, Peter Rathlev wrote: Hello, Anybody knows what software supports MUX-UNI? All our 7600/SRBx can do it, and none of our 6500/SXF6 can. Does any later SXF support MUX-UNI? Or do we

[c-nsp] Már Sæmundsson, Helgi is out of the office.

2008-01-18 Thread Helgi Már Sæmundsson
I will be out of the office starting 18.01.2008 and will not return until 28.01.2008. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] HP network node manager

2008-01-18 Thread Rivo Tahina RAZAFINDRATSIFA
Hi all, May be this is out of topic, I'd like to know if HP network node manager can also provide high level reporting. Regards. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] MUX-UNI IOS version

2008-01-18 Thread Alexandre Snarskii
On Fri, Jan 18, 2008 at 01:07:16AM +0100, Peter Rathlev wrote: Hello, Anybody knows what software supports MUX-UNI? All our 7600/SRBx can do it, and none of our 6500/SXF6 can. Does any later SXF support MUX-UNI? Or do we have to make the jump to SXH? Or SRA on 6500? For me it works on

[c-nsp] ODAP subnet allocation server redundancy

2008-01-18 Thread Alexander Serkin
Hello, nsps. Does anybody know a redundancy solution for ODAP address allocation server? I mean how to configure two cisco boxes to be an address pool managers for the same subnet allocation and to avoid conflicts? Tnank you, -- als smime.p7s Description: S/MIME cryptographic signature

[c-nsp] Blocking IS-IS traffic

2008-01-18 Thread Ulysses Maciel da Costa
Hi, I have a vlan in my router's switchport, and I receive a link from other company. Last week my network goes down. I analyze my network and saw a lot of IS-IS packets. By the way, my routes inside this vlan are static. I've tried to create an ACL inside my vlan to block these IS-IS packets

Re: [c-nsp] Snmp restart on router

2008-01-18 Thread Masood Ahmad Shah
If you want to restart SNMP process on Cisco router, you can use commands as listed below... no snmp-server community whatever-it-is snmp-server community whatever-it-is by doing this you will have restarted snmp process :) Why you want to restart SNMP process? Regards, Masood Ahmad Shah

Re: [c-nsp] Coax question for DS3

2008-01-18 Thread Howard Leadmon
Not at all, it will be fine either way as they are grounded shielded cables. I suspect the biggest nice thing about having the two lines bound together is just the convenience of having the pair together, damn easy to trace. I have many times had a major telco come and just put in two individual

[c-nsp] Virtual-Template DOS?

2008-01-18 Thread Duracom Lists
I have been terminating DSL on my 7206vxr for quite some time.  My router began acting sluggish the last couple of days for some odd reason the cpu was being pegged out.  Below was what was in the logs non stop.  I only have 5 DSL customers terminated to this router.  In order for me to get the

[c-nsp] Coax question for DS3

2008-01-18 Thread Nick Voth
Hey guys, I've never had to pull our own DS3 coax cable before and I'm now faced with it. It's no big deal, BUT in some of the Cisco documentation it recommends that the 2 strands of coax be bound together with shrink wrap or something like that. I'm using 75-ohm RG6 shielded coax with the

Re: [c-nsp] Blocking IS-IS traffic

2008-01-18 Thread Rubens Kuhl Jr.
IS-IS is carried by OSI, not IP; you should try finding the ethertype it's using (maybe 00FE or FEFE) and use a MAC ACL to filter the OSI traffic. Converting to an IP routerport without IS-IS attached would achieve better isolation, is it possible on this scenario ? We strongly prefer to use

Re: [c-nsp] HP network node manager

2008-01-18 Thread Vincent De Keyzer
May be this is out of topic, What makes you think this would *not* be off-topic? :-) Try the list next door, hp-nsp. Vincent ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Blocking IS-IS traffic

2008-01-18 Thread Aaron
I would recheck the configuration of the port since you typically need to explicitly enable ISIS on the interface. Aaron On Jan 18, 2008 9:49 AM, Oliver Boehmer (oboehmer) [EMAIL PROTECTED] wrote: Agree with Rubens. If you absolutely need to run IS-IS on a Vlan where you also have hosts which

[c-nsp] Snmp restart on router

2008-01-18 Thread Gabriel Mateiciuc
Does anyone know if/how the snmp process can be restarted ? Gabriel Mateiciuc Academia de Studii Economice Departamentul Reţele Echipa Infrastructura +40 (21) 3191900 x 122 +40 (21) 3191901 x 122 ___ cisco-nsp mailing list

[c-nsp] MPLS on CAT5500

2008-01-18 Thread Brandon Price
Guys, I apologize if this is a lame-brain question but I am new to MPLS... We have a pretty simple MPLS VPN setup comprised of the following 3 routers: PE1 -- P - PE2 PE2 is a new router we are transitioning customers to. PE1 is 7206VXR 12.4(17) PE2 is CAT6513/SUP720-3B 12.2(18)SXF12

Re: [c-nsp] MPLS on CAT5500

2008-01-18 Thread Gert Doering
Hi, On Sat, Jan 19, 2008 at 12:17:56AM +0500, Masood Ahmad Shah wrote: Someday ago I was talking to one of my Juniper friend and he was saying that you can't use one Cisco box as P and PE simultaneously though you can use Juniper. Vendor J marketing bullshit. (Don't tell our routers that

Re: [c-nsp] RIB_failure

2008-01-18 Thread Phil Bedard
What are you trying to accomplish exactly? If you want to use the BGP routes as primary versus the IGP routes, you can set the administrative distance higher for the IGP learned routes. Suppress- inactive will keep the BGP peer from re-advertising those RIB-failure routes to another

Re: [c-nsp] RIB_failure

2008-01-18 Thread Phil Bedard
If the ultimate goal is no BGP rib-failure then yes. If the end goal is to steer traffic a certain direction then that may or may not be a proper solution. I don't have the whole scenario so I can't say for sure. Phil On Jan 18, 2008, at 5:47 PM, Suzan S. wrote: I think we will loose

Re: [c-nsp] MDS Design and Implementation in Australia

2008-01-18 Thread Lincoln Dale (ltd)
Skeeve, Looking to talk to someone regarding costs and timeframes of designing and implementing a MDS based solution in Sydney. Contact me via email please at [EMAIL PROTECTED] timeframes on MDS are always very quick. its typically 7 days lead time, more commonly its in the range of 3 days.

[c-nsp] EoMPLS and VPLS Load Balancing

2008-01-18 Thread [EMAIL PROTECTED]
Hi, Considering the scenario, do you see a way to load balancing Layer 2 VPN over MPLS (VPWS or old AtoM and VPLS? (that is, one xconnect takes PE1-P1-PE2 and other takes PE1-P2-PE2) CE-PE1-P1-PE2CE2 | | | |__P2__| Tks, Alaerte

Re: [c-nsp] MPLS on CAT5500

2008-01-18 Thread Tom Storey
In my lab, which consists of 4 x 2600 series routers, I implemented a little MPLS scenario such as the following: PE1 PE2 P1 PE3 ||| TailsTailsTails Each of the PEs are 2611's and the P is a 2621, all non XM. So I guess I can say

Re: [c-nsp] MPLS on CAT5500

2008-01-18 Thread Peter Rathlev
On Sat, 2008-01-19 at 00:17 +0500, Masood Ahmad Shah wrote: Someday ago I was talking to one of my Juniper friend and he was saying that you can't use one Cisco box as P and PE simultaneously though you can use Juniper. If it worked and work like a charm, please share your experience. A P

Re: [c-nsp] Concentrator and DHCP server problem

2008-01-18 Thread Masood Ahmad Shah
It should work fine as long as the relay and filters are configured properly. I'm writing the steps which works fine for me. 1. From the VPN Concentrator console, select Configuration System IP Routing DHCP Relay. Select the Enabled check box to activate DHCP relay, and enter the forwarding IP

Re: [c-nsp] MPLS on CAT5500

2008-01-18 Thread Masood Ahmad Shah
Someday ago I was talking to one of my Juniper friend and he was saying that you can't use one Cisco box as P and PE simultaneously though you can use Juniper. If it worked and work like a charm, please share your experience. Regards, Masood Ahmad Shah -Original Message- From: [EMAIL

Re: [c-nsp] Over/Undersubscription on certain12000 Line cards

2008-01-18 Thread Pete Templin
Drew Weaver wrote: some of the interfaces that could be in said routers such as: 3GE-GBIC-SC (engine 2) 4OC12/POS-IR-SC-B(engine2) Could suffer from a pretty iffy oversubscription issue: How does a 4OC12 card get oversubscribed when the backplane interface is OC48? [snip] Except that

Re: [c-nsp] Coax question for DS3

2008-01-18 Thread Nick Voth
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nick Voth Sent: Friday, January 18, 2008 7:18 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Coax question for DS3 Hey guys, I've never had to pull our own DS3 coax cable before and I'm now

Re: [c-nsp] Coax question for DS3

2008-01-18 Thread Ted Mittelstaedt
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nick Voth Sent: Friday, January 18, 2008 7:18 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Coax question for DS3 Hey guys, I've never had to pull our own DS3 coax cable before and I'm now

Re: [c-nsp] Snmp restart on router

2008-01-18 Thread Tolstykh, Andrew
This is not the case, removing and reapplying the SNMP community string wont reset the SNMP process. Even on the modular IOS attempting to restart the SNMP process will take down additional core processes. The answer that I got from my SE was no, clean SNMP process restart is not possible.

[c-nsp] RES: Virtual-Template DOS?

2008-01-18 Thread Leonardo Gama Souza
If you are under a DoS attack and figure out that you are receiving too many PADI packets, you can throttle them: virtual-template 1 sessions per-mac throtlle... cheers -Mensagem original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Em nome de Masood Ahmad Shah Enviada em:

Re: [c-nsp] ACE (4700 Series) experience

2008-01-18 Thread Colin McNamara
Being that that ace appliance (combination of ace + application velocity system) has JUST been released I doubt there will be much input outside of a lab or POC environment. That being said, I have played with it in the lab, and other then the general gui suckage issues, I think it is pretty

Re: [c-nsp] Stress testing.

2008-01-18 Thread Masood Ahmad Shah
you can test (SYN flood and ICMP) using hping www.hping.org. Whenever I configure a firewall I always use this tool. Hmm BGP testing I never come across this before. If you found one please share. Regards, Masood Ahmad Shah -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [c-nsp] MPLS on CAT5500

2008-01-18 Thread Brandon Price
PE1 to P is 100mb link which supports Jumbo frames no problem. The 5500 also acts as a PE for a few of our COLO customers so It needs to Be running MPLS while I transition the WAN links from PE1 to PE2 Hope that makes sense.. Brandon Price Sterling Communications Inc. /31 --- The Subnet

[c-nsp] ACE (4700 Series) experience

2008-01-18 Thread jason . plank
Looking for feedback on the ACE appliance? Please post reviews and/or experience with the product. I am in the process of evaluating a few different vendors and was curious how real world experience has gone. -- Regards, Jason Plank CCIE #16560 e: [EMAIL PROTECTED]

[c-nsp] Over/Undersubscription on certain12000 Line cards

2008-01-18 Thread Drew Weaver
Hi there. Let us say you were stuck with a set of routers for a finite set of time which wasn’t adjustable no matter how much you cried about it. Let us say for example that these were 12000 series routers and these particular 12000 series routers could only use line cards which

Re: [c-nsp] MPLS on CAT5500

2008-01-18 Thread Phil Bedard
What is the PE1 to P link? I would try very hard to not use the 5500 as a P router. Maybe MPLSoGRE would work? Or using the 5505 as a bridge? If they are both Ethernet, then just trunk things through. Phil On Jan 18, 2008, at 12:46 PM, Brandon Price wrote: Guys, I apologize if this is

Re: [c-nsp] ACE (4700 Series) experience

2008-01-18 Thread Ramcharan, Vijay A
Realize your question was on the ACE appliance. However I have implemented and worked with the ACE modules. They are a big step up from the CSS in terms of performance. Configuration is very different than CSS. SSL cert handling is still a royal pain though improved from CSS. Has behaved

Re: [c-nsp] Coax question for DS3

2008-01-18 Thread Jay Hennigan
Nick Voth wrote: Hey guys, I've never had to pull our own DS3 coax cable before and I'm now faced with it. It's no big deal, BUT in some of the Cisco documentation it recommends that the 2 strands of coax be bound together with shrink wrap or something like that. I'm using 75-ohm RG6