Re: [c-nsp] NAC for Thin-Clients?

2008-07-26 Thread Scott Keoseyan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 If it's a thinclient, isn't it running firmware or something else that you are probably not going to be able to load anything onto (the endpoint) component anyways? I would look into some sort of authentication to lock the ports down. If ther

Re: [c-nsp] Policing individual vlans per port on 3750 (non metro)

2008-07-26 Thread Arie Vayner (avayner)
Jose, Take a look at vlan-based QOS http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/relea se/12.2_44_se/configuration/guide/swqos.html#wp1703760 Arie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jose Sent: Saturday, July 26, 2008 1

Re: [c-nsp] OER/DRIP specs protocol format

2008-07-26 Thread Lala Lander
Please try here as there are couple of awesome white papers here on PfR. www.cisco.com/go/srnd On Sat, Jul 26, 2008 at 11:18 AM, mack <[EMAIL PROTECTED]> wrote: > Does anyone have a link to the protocol the Optimized Edge Routing uses to > communicate? > I am curious what the protocol is and wha

Re: [c-nsp] Funny bug?

2008-07-26 Thread Gert Doering
Hi, On Sat, Jul 26, 2008 at 08:53:43PM +0200, Daniel Roesen wrote: > But we're used to counting problems nowadays, aren't we? :) I've actually given up trying to keep track of Cisco counter bugs... "Too many for a single brain to remember" gert -- USENET is *not* the non-clickable part of WWW

Re: [c-nsp] Funny bug?

2008-07-26 Thread Daniel Roesen
On Tue, Jul 08, 2008 at 06:39:46AM -0700, Robert Beckett wrote: > You actually have two bugs here: > > for the "Output queue :0/40" > CSCdx72484 show interface has an inconsistent format in Output queue > display > > for the "ouxtput" > CSCdz44280 5 minute output/input rate does not display corr

Re: [c-nsp] Maximizing Router capabilities

2008-07-26 Thread Daniel Roesen
On Sat, Jul 26, 2008 at 10:22:38AM +0200, Gert Doering wrote: > > > You should really shop by feature set. Advanced Enterprise IOS > > > licenses are expensive. > > > > Except on ASR1000, where the full-blown Advanced Enterprise image > > (positioned for "Enterprise users") is 10kUSD list, vs. t

[c-nsp] OER/DRIP specs protocol format

2008-07-26 Thread mack
Does anyone have a link to the protocol the Optimized Edge Routing uses to communicate? I am curious what the protocol is and what it does. >From the documentation it uses port 3949 which corresponds to something called "Dynamic Routing Information Protocol". -- LR Mack McBride Network Administra

Re: [c-nsp] OT: Ethernet over DS3 or OC3 bridge

2008-07-26 Thread Michael Smith
Hello Justin: > From: Justin Shore <[EMAIL PROTECTED]> > Date: Fri, 25 Jul 2008 18:32:29 -0500 > To: 'Cisco-nsp' > Subject: [c-nsp] OT: Ethernet over DS3 or OC3 bridge > > Does anyone have any suggestions for a Ethernet to DS3 or OC3 bridge? I > need multiple DS3 support for the longer-term b

[c-nsp] Interface Queues

2008-07-26 Thread Ibrahim Abo Zaid
Hi All i am a bit confused between Interface queues that can be configured using tx-queue-limit and hold-queue , what is the difference between these queues ? appreciate your replies . best regards --Ibrahim ___ cisco-nsp mailing list cisco-nsp@puck

Re: [c-nsp] IS-IS: Ignore Attached Bit

2008-07-26 Thread Mark Tinka
On Thursday 24 July 2008 05:19:28 Asbjorn Hojmark - Lists wrote: > > r(config)#router isis > > r(config-router)#ignore-attached-bit > > r(config-router)# > > When/why would you want to do that? Just to add to what Shankar mentioned, in our particular case, we only use IS-IS to carry our infrast

[c-nsp] Policing individual vlans per port on 3750 (non metro)

2008-07-26 Thread Jose
Hi everyone. Ran into a little snag this afternoon when I needed to police layer 2 customers on a single port in a similar fashion to the way we do it on the 3550-24s. Normally we would we create the aggregate policer, use a class map that matches on vlan id and another one that matches any i

Re: [c-nsp] Maximizing Router capabilities

2008-07-26 Thread Gert Doering
Hi, On Fri, Jul 25, 2008 at 10:50:42PM +0200, Daniel Roesen wrote: > On Mon, Jul 21, 2008 at 11:00:16AM -0500, Justin C. Darby wrote: > > You should really shop by feature set. Advanced Enterprise IOS > > licenses are expensive. > > Except on ASR1000, where the full-blown Advanced Enterprise im

Re: [c-nsp] Blocking Forged Source Addresses

2008-07-26 Thread Łukasz Bromirski
Skeeve Stevens wrote: What is the best strategy to Block Forged Source Addresses on a Cisco border router? It was just recently discussed. Use uRPF. -- "Don't expect me to cry for all the | Łukasz Bromirski reasons you had to die" -- Kurt Cobain |http://lukasz.bromirski.

[c-nsp] Blocking Forged Source Addresses

2008-07-26 Thread Skeeve Stevens
What is the best strategy to Block Forged Source Addresses on a Cisco border router? .Skeeve -- Skeeve Stevens, RHCE [EMAIL PROTECTED] / www.skeeve.org Cell +61 (0)414 753 383 / skype://skeeve eintellego - [EMAIL PROTECTED] - www.eintellego.net -- I'm a groove licked love child king of the ver