Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

On Fri Feb 01, 2008 at 08:56:59AM +0100, [EMAIL PROTECTED] wrote: And what's the point, anyway? As far as I know the 3550 *hardware* can't do IPv6 routing. As long as you're talking about *software* IPv6 routing, a suitable 2800 router would probably give you better performance... The point

Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

On (2008-02-01 08:56 +0100), [EMAIL PROTECTED] wrote: And what's the point, anyway? As far as I know the 3550 *hardware* can't do IPv6 routing. As long as you're talking about *software* IPv6 routing, a suitable 2800 router would probably give you better performance... I'd never plan to

[c-nsp] BGP - Older routes?

Hello list, I have a BGP router with 2 eBGP peers (upstreams). This morning one of the two upstreams (say A) had a scheduled maintenance, and most of the outgoing traffic went to B. But when A came back up 4 hours longer, outgoing traffic mostly kept going through B, and traffic towards A did

Re: [c-nsp] ARP flooding prevention

Hi Michel, Using CoPP protects the RP, i.e. traffic that the PFC decides has to be punted to the MSFC. Here's a simplified and somewhat wrong picture of how the forwarding paths work: Interfaces RP Gi4/1 --\ +-+ CoPP +--+ Gi4/2 ---+--| PFC

Re: [c-nsp] Filtering packets by content

Konstantin Barinov wrote on Friday, February 01, 2008 2:48 PM: Hello! Which platform will be able to filter more than 2 Gbit/sec bandwidth by packet contents? For example, I need to drop all outgoing http and udp according to some rules. Sup32-PISA can only do up to 2Gbps. What is the

Re: [c-nsp] Spanning-Tree question

Though you using 2 different VTP domains/VLAN databases, are the VLANs per business unit at least unique so the VLAN databases don't have overlapping VLANs? What's the purpose of interconnecting the 4 switches? What are the connections between the 4 switches? access port (same vlan on each

Re: [c-nsp] Nexus 7000

I am interested in this feature, also, so asking around I've heard something about VSS in NX-OS 4.1, maybe in the summer (?!?) - On Thursday 31 January 2008 15:53:54 Tim Durack wrote: No mention of VSS after they've been talking it up recently. Nice if they can make it all work reliably.

Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

On Fri, 1 Feb 2008, Saku Ytti wrote: On (2008-02-01 08:56 +0100), [EMAIL PROTECTED] wrote: And what's the point, anyway? As far as I know the 3550 *hardware* can't do IPv6 routing. As long as you're talking about *software* IPv6 routing, a suitable 2800 router would probably give you

Re: [c-nsp] ARP flooding prevention

Ok, thanks all for feedback. It seems that the configurations are always generic for the whole router. It is possible to add limiting only for a specific interfaces? cheers, michel -Original Message- From: Peter Rathlev [mailto:[EMAIL PROTECTED] Sent: Friday, February 01, 2008 1:05 PM

Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

Yeah, that's what I was thinking too. We use these for layer 2 everywhere. Being a US govt network, we're required to have IPv6 support on those as well. V6 management is all we really need on 3550. Chuck -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

Re: [c-nsp] Spanning-Tree question

Separate VLANs (not overlapping) The four switches are connected for redundancy purposes. Business unit A has resources upstream that business unit B must be able to access (but still needs to remain separate administratively) As the shabby diagram depicts, each business unit switch is trunked

[c-nsp] Filtering packets by content

Hello! Which platform will be able to filter more than 2 Gbit/sec bandwidth by packet contents? For example, I need to drop all outgoing http and udp according to some rules. Sup32-PISA can only do up to 2Gbps. What is the next step, load balance between them only? br -- Konstantin Barinov

[c-nsp] Check out my Facebook profile

I set up a Facebook profile with my pictures, videos and events and I want to add you as a friend so you can see it. First, you need to join Facebook! Once you join, you can also create your own profile. Thanks, Junaid Here's the link:

Re: [c-nsp] 2611XM throughput

Thanks for the responses I received on and off list to this post. Consensus is: 2611XM will not do 10Mbps or above. I'll look into a 18xx or 28xx upgrade. Thanks! Adam - Original Message - From: Justin Shore [EMAIL PROTECTED] To: Adam Greene [EMAIL PROTECTED] Cc:

Re: [c-nsp] Filtering packets by content

Hi, If you just need L4 access-lists, like blocking all port 80/tcp traffic and not all HTTP (which could use another port and thus needs a more thorough examination of the flows), you can use regular hardware based access-lists on a Sup720/PFC3 and all will be well. If you need inspection (like

Re: [c-nsp] 3750ME L2/MPLS combined scenario

We've tried that with 3750ME, and the half a million bugs and architectural flaws made us drop that line of devices out of MPLS altogether. Keeping the PW with L2 on 3750ME will make your customer happier. I don't know yet the price point and MPLS FCS for Juniper EX, but if it's really cheaper

Re: [c-nsp] BGP - Older routes?

Guten Tag Vincent De Keyzer, am Freitag, 1. Februar 2008 um 16:22 schrieben Sie: Hello list, I have a BGP router with 2 eBGP peers (upstreams). This morning one of the two upstreams (say A) had a scheduled maintenance, and most of the outgoing traffic went to B. But when A came back up 4

Re: [c-nsp] OSPF router gets separated from a broadcast domain

Peter Rathlev wrote: That makes sense. But our experience in a real life scenario is that the partitioning of OSPF speaking transport network creates the blackhole as well. I will try to build this in the lab. May the root cause of the blackhole wasn't the network separation, but something

Re: [c-nsp] Line Code Violations on DS3

On Wed, 30 Jan 2008, Nick Voth wrote: Try putting a 12 db attenuator on the transmit portion, then re-try your loopback. We've found that the PA-MC-T3 cards tend to overdrive the DS3 a bit, and the only way that we've been able to get rid of the errors is attenuating the transmit load.

Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

On (2008-02-01 14:40 +0100), Mohacsi Janos wrote: Alternaively you could choose 3560 or 3750 series (not ME) that is capable for IPv6 routing in a limited way. No BGP IPv6 support... When I asked about the IPv6 BGP support plan - no plan currently. This is very bad :( Yes, I've been

[c-nsp] bridging two eth for ip flow

Hello, I have a 2621 lying around that I would like to use as a transparent bridge and enable ip flow exports on. So the basic idea is to bridge the two ethernet interfaces, then put the device inline with a network. Can this be done? Thanks, Dan ___

Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

Actually you might be pleasantly surprised with an IPv6 attack on a 3550 - I suspect the IPv4 traffic would just keep on truckin', less any routing updates that might arrive during the event. I had a customer with about 14k public IP addresses passing through a 3550. The machine was crazy

Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

Simon Lockhart wrote: Noticed that 12.2(44)SE was recently released for the Cat3550 switch, and feature navigator lists a whole load of IPv6 support. Yay! However, it doesn't seem to work very well... interface Loopback0 no ip address ipv6 address 2001:4B10::100/128 ipv6 enable end

Re: [c-nsp] Line Code Violations on DS3

Try putting a 12 db attenuator on the transmit portion, then re-try your loopback. We've found that the PA-MC-T3 cards tend to overdrive the DS3 a bit, and the only way that we've been able to get rid of the errors is attenuating the transmit load. Interesting, you're saying to put

Re: [c-nsp] bridging two eth for ip flow

Dan Letkeman wrote: Hello, I have a 2621 lying around that I would like to use as a transparent bridge and enable ip flow exports on. So the basic idea is to bridge the two ethernet interfaces, then put the device inline with a network. Can this be done? Thanks, Dan

Re: [c-nsp] OSPF router gets separated from a broadcast domain

On Fri, 2008-02-01 at 18:04 +0100, Gabor Ivanszky wrote: Peter Rathlev wrote: If you only use these networks as OSPF transport networks, it's not a big problem if they're black holed. Since they're not destinations, neither clients nor servers ever see them in anything but a trace. But

Re: [c-nsp] BGP - Older routes?

Vincent De Keyzer wrote on Friday, February 01, 2008 4:22 PM: Hello list, I have a BGP router with 2 eBGP peers (upstreams). This morning one of the two upstreams (say A) had a scheduled maintenance, and most of the outgoing traffic went to B. But when A came back up 4 hours longer,

Re: [c-nsp] PIM Split Rules and Multicast over L3 MPLS VPN

Hi Jeff, I still did not have opportunity to test it over L3. However, I tested it over L2 VPNs. The result was pretty good, specially when using the more complex algorithm available in the command ip multicast multipath Each IPTV program took a different interface when using the following:

Re: [c-nsp] BGP - Older routes?

On Feb 1, 2008 9:22 AM, Vincent De Keyzer [EMAIL PROTECTED] wrote: Hello list, I have a BGP router with 2 eBGP peers (upstreams). This morning one of the two upstreams (say A) had a scheduled maintenance, and most of the outgoing traffic went to B. But when A came back up 4 hours longer,

Re: [c-nsp] Line Code Violations on DS3

On 2/1/08, Gregory Boehnlein [EMAIL PROTECTED] wrote: Try putting a 12 db attenuator on the transmit portion, then re-try your loopback. We've found that the PA-MC-T3 cards tend to overdrive the DS3 a bit, and the only way that we've been able to get rid of the errors is