Re: [c-nsp] Cisco MMPPP

2008-07-16 Thread Ben Steele
i'm talking strictly between your LNS and your CPE here, if you find your MMPPP is giving poor performance due to physical differences between the 2 sessions (ie speed and latency), then try doing something a little more creative like multihopping both ppp sessions onto the one router and u

Re: [c-nsp] "Total output drops" - congestion ? - 7200-VXR

2008-07-16 Thread Brad Henshaw
Wilkinson, Alex wrote: > can anyone recommed a tool to 'blast' this particular interface TTCP with UDP traffic, best directed at a null-routed IP address on the other side of that interface. Pay careful attention to the order of command-line parameters or weird things will happen. If you want

Re: [c-nsp] Cisco MMPPP

2008-07-16 Thread Edi Guntoro
Thanks Ben, I understand now. Coz previously, regarding the user I though this is a single user with PC/notebook/windows dialing using two different wireless service... is it possible? regards - Original Message From: Ben Steele <[EMAIL PROTECTED]> To: Edi Guntoro <[EMAIL PROTEC

Re: [c-nsp] Cisco MMPPP

2008-07-16 Thread Ben Steele
Yes it's possible to have say windows do multilink ppp through 2 seperate network devices, never tried it though so not sure how reliable their implementation of it is. Ben On 16/07/2008, at 5:12 PM, Edi Guntoro wrote: Thanks Ben, I understand now. Coz previously, regarding the user I tho

[c-nsp] Three STM-1 on one Cisco 7200vxr-npeG1

2008-07-16 Thread Samit
Hi, Is it recommended to run three STM-1 (PA-POS-1OC3) on a single Cisco700vxr with NPE-G1 ? Regards, Samit ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pi

Re: [c-nsp] 2621xm vs 1800?

2008-07-16 Thread Paul Cosgrove
There is a nice index including this and other similar product comparisions (switch performance, vpn performance etc.) at:- http://www.cisco.com/web/partners/tools/quickreference/index.html Paul. Paul Stewart wrote: Thanks... that's actually the document I was looking for ;) Our theory to da

Re: [c-nsp] Shape an L3 interface to 100mbit

2008-07-16 Thread Stig Johansen
Hi again, It may be a bit unclear, but on the 3560/3750-platform, you'll have to do egress policing by manipulating the DSCP-values on input-interfaces and tweaking the srr-queues on the output-interfaces. The old 3550-platform supported egress policing via aggregate-policers, a bit more logicall

Re: [c-nsp] Three STM-1 on one Cisco 7200vxr-npeG1

2008-07-16 Thread Garry
Samit wrote: Hi, Is it recommended to run three STM-1 (PA-POS-1OC3) on a single Cisco700vxr with NPE-G1 ? Technically, it is supported, as each of the two buses have 600 bandwidth points, with an STM-1 interface taking up 300. Question is whether it might be recommendable to get a second r

Re: [c-nsp] The maximum number of match packets Cisco Router can detect on ACL at one time.

2008-07-16 Thread Rodney Dunn
If I remember correctly they are rate limited. You should use netflow and match on ACL dst if of Null0 rather than the log feature of the ACL's. Rodney On Wed, Jul 16, 2008 at 12:31:26PM +0700, a. rahman isnaini r.sutan wrote: > Hi charles, > > Depends on the engine processor. > Our G1 can hand

Re: [c-nsp] Cisco 2851 bug ?

2008-07-16 Thread Rodney Dunn
Yep. Done in CEF path. Rodney On Tue, Jul 15, 2008 at 05:34:21PM +0100, Paul Cosgrove wrote: > Hi Rodney, > > Is that safe to do even if the traffic rate and/or cpu is high? > > Looks like a nice feature. > > Paul. > > Rodney Dunn wrote: > >Or you could load the new 12.4(20)T and set up a pac

Re: [c-nsp] "Total output drops" - congestion ? - 7200-VXR

2008-07-16 Thread Rodney Dunn
What is the configuration of that interface and can you provide a 'sh int' between two drop periods? On Wed, Jul 16, 2008 at 02:22:31PM +0800, Wilkinson, Alex wrote: > Hi all, > > I am having problems with a particular device going down every 3-4 days. > The switchport for which this device is co

Re: [c-nsp] Three STM-1 on one Cisco 7200vxr-npeG1

2008-07-16 Thread Mark Tinka
On Wednesday 16 July 2008 18:10:00 Garry wrote: > Technically, it is supported, as each of the two buses > have 600 bandwidth points, with an STM-1 interface taking > up 300. Question is whether it might be recommendable to > get a second router for redundancy reasons, e.g. if you > are terminatin

Re: [c-nsp] "Total output drops" - congestion ? - 7200-VXR

2008-07-16 Thread Farhan Jaffer
Have you tried 'hold-queue ...' command. This may resolves your problem. On Wed, Jul 16, 2008 at 11:22 AM, Wilkinson, Alex <[EMAIL PROTECTED]> wrote: > Hi all, > > I am having problems with a particular device going down every 3-4 days. > The switchport for which this device is connected to is te

Re: [c-nsp] The maximum number of match packets Cisco Router can detect on ACL at one time.

2008-07-16 Thread a. rahman isnaini r.sutan
OK than, so Cisco Router has a limitation on plotting the maximum hits/matches on ACL to a raw log. Thanks Rodney. a. rahman isnaini r.sutan Rodney Dunn wrote: If I remember correctly they are rate limited. You should use netflow and match on ACL dst if of Null0 rather than the log feature of

Re: [c-nsp] bandwidth points table (former Three STM-1 on one Cisco 7200vxr-npeG1)

2008-07-16 Thread Andrey Oleinik
Gentlemen, Saying about Cisco it's very new and interesting matrices for me (I mean bus/interface bandwidth points). Is this info available publicly? Thank U -- Respect, Andy Oleynik ... andyo> > Is it recommended to run three STM-1 (PA-POS-1OC3) on a single andyo> > Cisco700vxr with NPE-G1 ? a

Re: [c-nsp] bandwidth points table (former Three STM-1 on one Cisco 7200vxr-npeG1)

2008-07-16 Thread Mathias Spoerr
http://www.cisco.com/en/US/prod/collateral/routers/ps341/prod_presentation09186a008009184d.pdf Regards, Mathias From: Andrey Oleinik <[EMAIL PROTECTED]> To: Garry <[EMAIL PROTECTED]> Cc: "cisco-nsp@puck.nether.net" Date: 16.07.2008 15:00 Subject: Re: [c-nsp] bandwidth points table (former Thr

[c-nsp] ASA connectivity issues

2008-07-16 Thread Eric Gauthier
Hello, We've had an ASA5500 online for about two years providing VPN services for wireless users on our campus (v8.0(3)). Starting over the weekend, we've encountered a problem where users can connect and authenticate, but traffic isn't passing through the box (i.e. client side show transmit

Re: [c-nsp] Three STM-1 on one Cisco 7200vxr-npeG1

2008-07-16 Thread Justin M. Streiner
On Wed, 16 Jul 2008, Samit wrote: Is it recommended to run three STM-1 (PA-POS-1OC3) on a single Cisco700vxr with NPE-G1 ? Could it be done? Yes, but I wouldn't expect to see good performance if you try to move anything approaching line-rate traffic on those interfaces. jms __

Re: [c-nsp] Three STM-1 on one Cisco 7200vxr-npeG1

2008-07-16 Thread Arie Vayner (avayner)
Samit, Take a look at the Jacket Card. It would help to extend the bandwidth point limitation: http://www.cisco.com/en/US/docs/routers/7200/install_and_upgrade/port_ad apter_jacket_card_install/8427J.html Arie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behal

Re: [c-nsp] "Total output drops" - congestion ? - 7200-VXR

2008-07-16 Thread David Freedman
It is inadvisable to increase the output hold-queue as far as I am aware, this could cause packets to be delayed on egress which could cause TCP timeouts. Dave. Farhan Jaffer wrote: > Have you tried 'hold-queue ...' command. This may resolves your problem. > > > On Wed, Jul 16, 2008 at 11:22 AM

Re: [c-nsp] Three STM-1 on one Cisco 7200vxr-npeG1

2008-07-16 Thread a. rahman isnaini r.sutan
Nope You will have no buffer should flooding traffic occurs. a. r.isnaini rangkayo sutan Justin M. Streiner wrote: On Wed, 16 Jul 2008, Samit wrote: Is it recommended to run three STM-1 (PA-POS-1OC3) on a single Cisco700vxr with NPE-G1 ? ___

[c-nsp] Can an AS5350 route ISDN calls to ISDN?

2008-07-16 Thread Andreas Sikkema
Hi, We're using a Cisco AS5350 as a SIP <-> ISDN PRI gateway. Normally we route calls from the incoming ISDN line to a SIP server (and vice versa). Currently we're wondering if we can route calls coming in from a specific ISDN line to another ISDN line directly without having to go through a SI

Re: [c-nsp] "Total output drops" - congestion ? - 7200-VXR

2008-07-16 Thread Rolf Mendelsohn
Hi Guys, This really depends on the speed of the Interface and what is connected on the other side. We had a Serial Satellite link of 5M, which was never running higher than 4.5M - due to regular bursty traffic. After increasing the queue (fair-queue 320 256 0) the link now does about 4.9M, w

Re: [c-nsp] Can an AS5350 route ISDN calls to ISDN?

2008-07-16 Thread Alex Balashov
Andreas Sikkema wrote: We're using a Cisco AS5350 as a SIP <-> ISDN PRI gateway. Normally we route calls from the incoming ISDN line to a SIP server (and vice versa). Currently we're wondering if we can route calls coming in from a specific ISDN line to another ISDN line directly without havin

[c-nsp] configurations

2008-07-16 Thread Raul Lopez Nevot
Hello, anybody having a AS5350 with PRI(s) and asterisk running for incoming/outgoing calls between SIP and ISDN/Analog is willing to post as5350 config and asterisk config? just to get straight to the core... ___ cisco-nsp mailing list cisco-nsp@puck.n

Re: [c-nsp] configurations

2008-07-16 Thread Alex Balashov
On Wed, July 16, 2008 5:53 pm, Raul Lopez Nevot wrote: > Hello, > anybody having a AS5350 with PRI(s) and asterisk running for > incoming/outgoing calls between SIP and ISDN/Analog is willing to post > as5350 config and asterisk config? All the configs I have are rather lengthy (for AS5300s and

[c-nsp] Cisco 2651XM and NM

2008-07-16 Thread Jason Berenson
Greetings, So, according to this at table 3: http://www.cisco.com/en/US/prod/collateral/routers/ps259/product_data_sheet09186a00801aa71c.html the NM-2FE are not supported on the 2651XM. Any idea as to how I could get 3 FE ports on a 2651XM? I don't need anywhere near line speed but need the

Re: [c-nsp] Cisco 2651XM and NM

2008-07-16 Thread Doug McIntyre
On Wed, Jul 16, 2008 at 06:56:37PM -0400, Jason Berenson wrote: > So, according to this at table 3: > > http://www.cisco.com/en/US/prod/collateral/routers/ps259/product_data_sheet09186a00801aa71c.html > > the NM-2FE are not supported on the 2651XM. Any idea as to how I could get > 3 FE ports on

Re: [c-nsp] Cisco 2651XM and NM

2008-07-16 Thread Jason Berenson
Doug, The only issue is the XM is not EOL and the 3640 is, I think. I may be able to dig up a 3640 in my office, if not I'll probably go with a 2691. -Jason Doug McIntyre wrote: On Wed, Jul 16, 2008 at 06:56:37PM -0400, Jason Berenson wrote: So, according to this at table 3: http://www

Re: [c-nsp] "Total output drops" - congestion ? - 7200-VXR

2008-07-16 Thread Wilkinson, Alex
0n Wed, Jul 16, 2008 at 07:28:05AM -0400, Rodney Dunn wrote: >What is the configuration of that interface and can you provide >a 'sh int' between two drop periods? >From 'running-config' interface FastEthernet4/10 no snmp trap link-status >From 'show int FastEthernet4/10'

[c-nsp] NAT and hairpin's

2008-07-16 Thread Geyer, Nick
Hi Everyone, Just wondering if anyone has come up with a way to hairpin traffic using a Cisco router? The problem is as follows; Say for example I have a router connecting to the Internet and an internal LAN doing normal NA, e.g; 203.1.2.3 -> ROUTER <- 192.168.1.0/24 (203.1.2.3 being th

Re: [c-nsp] NAT and hairpin's

2008-07-16 Thread Marc Archer
Hi Nick, We had the same problem at work and used DNS to get around it. The only solution we found was to have an second internal DNS that would resolv to the internal IP so that both internal and external users could access the server from a common DNS name. Marc. 2008/7/17 Geyer, Nick <[EMAIL

Re: [c-nsp] NAT and hairpin's

2008-07-16 Thread Ben Steele
This is where dns doctoring on the asa/pix really comes in handy! Split dns is usually the way to go but I had another thought, can you put the public 203 address as an alias on the server and then setup a policy route-map on your lan interface to match packets with a destination of your se

Re: [c-nsp] NAT and hairpin's

2008-07-16 Thread Geyer, Nick
Hi Marc, That's what I usually do as well. In this scenario though an internal DNS server is not an option as all traffic is by IP address not hostname. Its got me stumped and I know Cisco used to say it was not possible, but am just wondering if there is anything new that could be used/man