Re: [c-nsp] filter LDP bindings

2008-08-11 Thread Oliver Boehmer (oboehmer)
Sergio, is PE2 really adjacent to PE1? I don't think it is, there must be some LDP speaker in the middle. If PE2 was adjacent to PE1, the outgoing label for 150.0.0.0/24 and 10.0.0.1/32 would be imp-null (aka "pop label" as those networks are directly connected on PE1), not 18 or 20, as you've ind

Re: [c-nsp] MD5 checksums for IOS images

2008-08-11 Thread Ziv Leyes
Taken from here: http://www.cisco.com/warp/public/707/cisco-sr-20080516-rootkits.shtml "For those customers whose www.cisco.com account does not provide access to the Cisco IOS Upgrade Planner tool and hence cannot obtain the Cisco calculated, known-good MD5 hash value for a given Cisco IOS soft

[c-nsp] a multicast problem

2008-08-11 Thread 田云生
Dear. In my network, The usersA cannot see the multicast application smoothly at worktime, but at rest time, it's smoothly. The usersB can see the multicast application smoothly any time. what's the possible cause? Please help me, Thanks! Source(vlan10) | |

[c-nsp] MD5 checksums for IOS images

2008-08-11 Thread Church, Charles
Anyone, Is there a central place to find MD5 hashes for IOS images, other than going through the process of getting to the point of almost downloading each image? We're thinking about implementing processes to verify image integrity, have about 40 or so different images we use currently on a

Re: [c-nsp] Good 10GE Metro switch

2008-08-11 Thread Justin M. Streiner
On Mon, 11 Aug 2008, Joe Loiacono wrote: PS - Should I worry (alot) about being at or slightly above the 40 Km distance? That depends on the test results on your fiber span. If the fiber is clean, of high quality, and well-spliced, then there could be a little 'slop' in the loss budget. At

Re: [c-nsp] Good 10GE Metro switch

2008-08-11 Thread Chris Gauthier
If this is just a satellite location, I would try to avoid BGP unless absolutely necessary. Maybe OSPF can meet your needs for this and then you can inject routes as needed. Chris - Original Message - From: "Alex Burba" <[EMAIL PROTECTED]> To: "Joe Loiacono" <[EMAIL PROTECTED]> Cc:

Re: [c-nsp] Good 10GE Metro switch

2008-08-11 Thread Alex Burba
It will do fine until you won't try to upload full view or try to serve more then 10-15 downlinks, i suppose. 2008/8/12 Joe Loiacono <[EMAIL PROTECTED]> > We have a requirement for about 2+ GE between two metro locations. I'm > looking at the 3750-E with 2 X2 10GE uplink ports. I would use the >

[c-nsp] Good 10GE Metro switch

2008-08-11 Thread Joe Loiacono
We have a requirement for about 2+ GE between two metro locations. I'm looking at the 3750-E with 2 X2 10GE uplink ports. I would use the 10GBASE-ER X2 Transceiver Module for the distance. Actually the distance is about at the 40 Km limit - but that's another question. Want to do BGP with a lim

Re: [c-nsp] Crash bug in SXH3

2008-08-11 Thread Sami Joseph
I've worked with different vendors "TAC"/Support and it would be fair to admit that there is a world of difference between the support i get from Cisco and other vendors. Within TAC information is openly shared and comes in quickly whether its a bug or else, while with others, i will have to wait t

Re: [c-nsp] Excessive AMDP2_FE-3-UNDERFLO

2008-08-11 Thread Rolf Mendelsohn
Hi Nimal, Check you processor / memory utilisation & check that all traffic is being CEF switched: sh proc cpu sh proc cpu history sh mem sh switching If traffic is being CEF switched and your CPU is running very high, you may consider upgrading your NPE - btw. what NPE do you have in that r

Re: [c-nsp] filter LDP bindings

2008-08-11 Thread Sergio D.
This maybe of some value: PE1#show mpls ldp bindings advertisement-acls Advertisement spec: Prefix acl = 1 tib entry: 1.1.1.0/30, rev 26 tib entry: 1.1.1.4/30, rev 27 tib entry: 10.0.0.1/32, rev 33 Advert acl(s): Prefix acl 1 tib entry: 10.0.0.2/32, rev 34 Advert a

Re: [c-nsp] OSPF Reference bandwidth auto-cost and LAG

2008-08-11 Thread Alastair Johnson
Oliver Boehmer (oboehmer) wrote: Alastair Johnson <> wrote on Monday, August 11, 2008 12:56 PM: e.g. if I have ref BW = 100G, and a P-C with 2 10GE links, it should be metric = 5. If one 10GE link disappears from the bundle, do I have metric = 10? yes, the bandwidth on the port-channel inter

Re: [c-nsp] filter LDP bindings

2008-08-11 Thread Sergio D.
Oli, from a neighbor a hop away: PE2#show mpls ldp bindings 10.0.0.1 32 tib entry: 10.0.0.1/32, rev 10 local binding: tag: 17 remote binding: tsr: 25.25.25.25:0, tag: 20 PE2# prefix I want to filter: PE2#show mpls forwarding-table 150.0.0.1 Local OutgoingPrefix

Re: [c-nsp] Filtering telnet without ACL

2008-08-11 Thread Saku Ytti
On (2008-08-11 20:30 +1000), Lincoln Dale wrote: > you could potentially do it using CoPP policy with a CoPP policy for the > address(es) you wish, 0bps configured for other rates. OP was about doing it w/o ACL, CoPP would violate that rule. > if its just telnet, then certainly an access-cl

Re: [c-nsp] filter LDP bindings

2008-08-11 Thread Oliver Boehmer (oboehmer)
Sergio, your config looks fine, so I don't know what's happening. Can you show a "show mpls ldp bindings 10.0.0.1 32" on the LDP neighbor(s) or a "show mpls forwarding interface " where is the neighbor's interface to PE1? No need to specify a "to " to select which neighbors you want to advertise

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Paul Cosgrove
Hi Antal, Is that a workaround for a specific bug? Usually the IP MTU defaults to the MTU. You can check them with "show int" vs "show ip int". If the TCP session is between directly connected IPs, a TCP MSS equal to 40 byte less than the IP MTU is used. In other cases (e.g. peerings betw

Re: [c-nsp] Crash bug in SXH3

2008-08-11 Thread Phil Mayers
Hank Nussbacher wrote: On Mon, 11 Aug 2008, Phil Mayers wrote: Bård Dahlmo wrote: On Thu, 7 Aug 2008, Phil Mayers wrote: Just a warning, there is a fatal crash bug in SXH3 related to using SCP. Considering the release notes claim fixes in that very area, this is highly amusing (note: issue

Re: [c-nsp] Crash bug in SXH3

2008-08-11 Thread Hank Nussbacher
On Mon, 11 Aug 2008, Phil Mayers wrote: Bård Dahlmo wrote: On Thu, 7 Aug 2008, Phil Mayers wrote: Just a warning, there is a fatal crash bug in SXH3 related to using SCP. Considering the release notes claim fixes in that very area, this is highly amusing (note: issue may not actually be amus

Re: [c-nsp] Console access via cell phone

2008-08-11 Thread Paul Stewart
We're using Lantronix here for the same purpose Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rens Sent: Monday, August 11, 2008 9:01 AM To: 'Justin Shore' Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Console access via cell phone I fou

Re: [c-nsp] filter LDP bindings

2008-08-11 Thread Sergio D.
thanks for the response. I am using 12.3(22) and "no mpls ldp advertise-labels" turns into "no tag-switching advertise-tags" which I already have. Oliver, thanks for clearing up the assignment of the label, I guess thats fine as long as it doesn't get advertised which is what I am trying to avoid.

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Antal Gergely
Jay Nakamura wrote: Datagrams (max data segment is 536 bytes): put a "ip mtu 1500" on the wan interface. its not the same as mtu -- Antal GERGELY Backbone Network Department IP Services DIGI KFT Budapest Vaci ut 35. H-1134 Hungary signature.asc Description: OpenPGP digital signatur

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Paul Cosgrove
Forgot to cc the list on this earlier email. Paul Cosgrove wrote: Hi Chuck, Indeed it is apparently more than that: Jay mentioned receiving 20,000 routes before he sees the issue, so I guess about 75%. I had similar thoughts about this but wasn't (and still am not) sure how frequently in pr

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Paul Cosgrove
Hi Jay, PMTUD is not working here. You can see from the command output that a TCP MSS of 536 bytes is being used rather than the expected 1440 bytes: > Datagrams (max data segment is 536 bytes): This limits the size of BGP packets, requiring more to be sent and so increasing the load on the

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Church, Charles
12.4 mainline seems pretty mature at this point. I've got a 2821 doing full tables from 2 upstrems over Ethernet, running 12.4(19), been solid for months, running prefix lists, heavy QOS, and a few other things. Unless you really need a feature from a 'T' train (or hardware support), you're usuall

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Jeff Cartier
**While I am at it, I noticed 12.4 line IOS for 28xx is MD release. Which, cisco's link doesn't tell you what that means. I know GD, ED, etc releases but wasn't sure what MD relase meant. Mainline deployment? Here's a good read - http://en.wikipedia.org/wiki/Cisco_IOS Mainline deployments are u

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Jay Nakamura
To answer couple people's questions, MTU on the routers are 1500. I have tested with ping and df-bit set. Provider has higher frame size to cover that MTU over the WAN link and our switches that connects to them on both ends have higher frame size. (1526 frame size or higher) While I am at it,

Re: [c-nsp] Crash bug in SXH3

2008-08-11 Thread Phil Mayers
Bård Dahlmo wrote: On Thu, 7 Aug 2008, Phil Mayers wrote: Just a warning, there is a fatal crash bug in SXH3 related to using SCP. Considering the release notes claim fixes in that very area, this is highly amusing (note: issue may not actually be amusing) CSCsr86489 Nice. TAC case has be

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Jeff Cartier
Can you provide any system stats? What is the CPU and memory looking like...if something appears to be off it could indicate a code-level issue. Jeff Cartier Applied Computer Solutions (519) 944-4300 ext. 233 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

Re: [c-nsp] Crash bug in SXH3

2008-08-11 Thread Bård Dahlmo
On Thu, 7 Aug 2008, Phil Mayers wrote: Just a warning, there is a fatal crash bug in SXH3 related to using SCP. Considering the release notes claim fixes in that very area, this is highly amusing (note: issue may not actually be amusing) CSCsr86489 -- Bård Dahlmo

Re: [c-nsp] impact of policy based routing

2008-08-11 Thread rendo
Hi Rubens, Thanks for the answer, do you have any doc or url for the information below? -rendo- On Mon, Aug 11, 2008 at 10:09 AM, Rubens Kuhl Jr. <[EMAIL PROTECTED]> wrote: > It depends on whether the policy route will be only processed by the > SUP/RSP-720 or not. > > Although the following te

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Church, Charles
Oh, yeah. Sorry, I didn't catch the 'WAN' part of it the first time. That does make MTU a possibility. But didn't he get like 20% of his routes before the error message? Since it was 12.4(20)T (pretty bleeding edge), I'd lean towards that still. I'd think that an MTU problem would show up way b

Re: [c-nsp] Console access via cell phone

2008-08-11 Thread Rens
I found a Siemens MC35i But no luck so far getting it to work, anyone has experience with this? -Original Message- From: Justin Shore [mailto:[EMAIL PROTECTED] Sent: lundi 11 août 2008 14:46 To: Rens Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Console access via cell phone Rens w

Re: [c-nsp] Console access via cell phone

2008-08-11 Thread Justin Shore
Rens wrote: Hi, Is there any device that you can connect to the console port of a switch that you can put a SIM card in? So you can just dial to that number and have console access on the switch? A couple of Avocent's console server product lines support PCMCIA expansion cards including cell

Re: [c-nsp] OSPF Reference bandwidth auto-cost and LAG

2008-08-11 Thread Oliver Boehmer (oboehmer)
Alastair Johnson <> wrote on Monday, August 11, 2008 12:56 PM: > Hi, > > I am trying to understand how IOS implements the OSPF reference > bandwidth related to LAG interfaces. > > The only background material I can find on this is along the lines of: > http://www.cisco.com/en/US/tech/tk365/techn

Re: [c-nsp] Console access via cell phone

2008-08-11 Thread Stig Johansen
Google is your friend: http://www.google.com/search?q=gsm+modem+rs232 Best regards, Stig Meireles Johansen -Opprinnelig melding- Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] På vegne av Rens Sendt: 11. august 2008 13:28 Til: cisco-nsp@puck.nether.net Emne: [c-nsp] Console access via c

[c-nsp] Console access via cell phone

2008-08-11 Thread Rens
Hi, Is there any device that you can connect to the console port of a switch that you can put a SIM card in? So you can just dial to that number and have console access on the switch? Regards, Rens ___ cisco-nsp mailing list cisco-nsp

[c-nsp] OSPF Reference bandwidth auto-cost and LAG

2008-08-11 Thread Alastair Johnson
Hi, I am trying to understand how IOS implements the OSPF reference bandwidth related to LAG interfaces. The only background material I can find on this is along the lines of: http://www.cisco.com/en/US/tech/tk365/technologies_q_and_a_item09186a0080094704.shtml#q3 Can anyone confirm whether L

Re: [c-nsp] Filtering telnet without ACL

2008-08-11 Thread Lincoln Dale
Saku Ytti wrote: Although question was protocol specific which makes it hard to satisfy without ACLs. You could imagine that the box may be offering NTP, DNS or TFTP to the network which should continue to work. you could potentially do it using CoPP policy with a CoPP policy for the addre

Re: [c-nsp] filter LDP bindings

2008-08-11 Thread Paolo Lucente
Hi Sergio, to add to what Oliver said that you maybe want to make sure you have in the configuration a "no mpls ldp advertise-labels" line. Without that, even if you configure a filter (which is successfully matched as you shown), labels would still be announced to adjacent LDP peers. Don't know

Re: [c-nsp] Filtering telnet without ACL

2008-08-11 Thread Saku Ytti
On (2008-08-11 11:36 +0300), Joost greene wrote: > Ok, i thought this is a feature i dont know about :) > > I guess the answer would be PBR with prefix-list. Although question was protocol specific which makes it hard to satisfy without ACLs. You could imagine that the box may be offering NTP, D

Re: [c-nsp] Filtering telnet without ACL

2008-08-11 Thread Joost greene
Ok, i thought this is a feature i dont know about :) I guess the answer would be PBR with prefix-list. Thank you all. On Mon, Aug 11, 2008 at 11:21 AM, Saku Ytti <[EMAIL PROTECTED]<[EMAIL PROTECTED]> > wrote: > On (2008-08-11 11:13 +0300), Joost greene wrote: > > > I forgot to mention that the

Re: [c-nsp] 2851 and full BGP

2008-08-11 Thread Paul Cosgrove
Hi Chuck, Jay will be able to clarify, but I took the following to mean that the two are separated via third party infrastructure: "two 2851s connected to each other over gigabit Ethernet WAN". May well be a bug though. Paul. Church, Charles wrote: Wasn't the original problem the iBGP conn

Re: [c-nsp] Filtering telnet without ACL

2008-08-11 Thread Saku Ytti
On (2008-08-11 11:13 +0300), Joost greene wrote: > I forgot to mention that the question said to limit telnet access to > loopback of two routers without using Access lists so i can see your answer > makes sense but what do you mean by MPLS LSR ? LSR = Label Switch(ing) Router. Essentially it's M

Re: [c-nsp] Filtering telnet without ACL

2008-08-11 Thread Joost greene
Hi Saku, I forgot to mention that the question said to limit telnet access to loopback of two routers without using Access lists so i can see your answer makes sense but what do you mean by MPLS LSR ? Thanks, Joost On Fri, Aug 1, 2008 at 5:04 PM, Saku Ytti <[EMAIL PROTECTED]<[EMAIL PROTECTED]> >