Re: [c-nsp] Route selection in VRF

Felix Bako <> wrote on Wednesday, September 10, 2008 10:00 PM: > Hey Guys, > > I have two routers each terminating my upstream providers.on each i > have configured Internet on a VRF and doing ebgp with my providers on > the the VRF. > Customers connected to The PEs are importing the Internet VRF

Re: [c-nsp] EoMPLS between C7206 and C3845

Hi, I have narrowed the problem. Now EoMPLS is working between the two routers - the change is that instead of connecting CE2 to the EtherSwitch module of C3845, I have connected it on an external 2950 switch which is then dot1q trunked to C3845. The problem appears when I connect the host on the

[c-nsp] Datacenter Network Design

We are looking into start hosting our customers' apps and data and would like for you to provide me link to internet resources (or books) to get me started on a network design that includes: - 3rd party Compliance (security for example) - Redundancy (routers, firewalls, switches) - load balancin

[c-nsp] Datacenter network design

We are looking into start hosting our customers' apps and data and would like for you to provide me link to internet resources (or books) to get me started on a network design that includes: - 3rd party Compliance (security for example) - Redundancy (routers, firewalls, switches) - load balanc

[c-nsp] Cisco pushes 'network memory' to alleviate high-speed bottlenecks

"On a 10Gbps link, for example, packets can arrive approximately every 50ns, while commodity memory – for example, DRAM memory -- can only be accessed once every 50ns. Packets c

Re: [c-nsp] how to accomplish multiple 'native' vlans

interface x 0/y switchport trunk native vlan Z -- http://dcp.dcptech.com > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Chris Hale > Sent: Thursday, September 11, 2008 12:35 AM > To: cisco-nsp@puck.nether.net > Subject: [c-nsp] how to accomplis

[c-nsp] how to accomplish multiple 'native' vlans

All - We are converting our L2 network from Riverstone to Cisco. One problem I have not been able to solve yet is the way the Riverstone and Cisco units handle untagged traffic entering a physical port. We have many connections to customers whereby we have equipment we would like to manage with

Re: [c-nsp] Setting the Remote Syslog Port in IOS

interesting! i will try this out... thanks Brandon! Christian On Thu, Sep 11, 2008 at 12:03 AM, Brandon Bennett <[EMAIL PROTECTED]> wrote: >> because that is not how splunk works, we want to create separate >> splunk instances, each instance has its own syslog port... > You can use syslog-ng fil

Re: [c-nsp] Setting the Remote Syslog Port in IOS

> because that is not how splunk works, we want to create separate > splunk instances, each instance has its own syslog port... You can use syslog-ng filters to dump out named pipes and have splunk read the named pipes. That way you can still filter on facility but have seperate splunk instances.

Re: [c-nsp] 10G Xenpak 'virgin' question

Jeff Kell wrote: We're trying to light up our first 10G Xenpak link, so far without success, so I'm looking for a quick sanity check. 3750G-16TD switch with an LR Xenpak [ours], trying to link to a Ciena [not ours] add/drop ONS. Just to "close this thread" -- the Ciena end was a Corestream wit

Re: [c-nsp] VPN Failover

You can have multiple "set peer" statements in a given crypto map. Use the "default" keyword (http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/gt_ipspp.ht ml) along with Dead Peer Detection to have redundancy between SITEB and DRSITE. -Terry > -Original Message- > From: [E

Re: [c-nsp] (no subject)

Are the routers connected to gig switches? And do the duplex and speed settings match up? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of hawk98 TheHawk Sent: Thursday, September 04, 2008 1:04 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] (no subject)

[c-nsp] RES: GSR12008 Error

Most likely so. Could be occurred an ESD. But on other hand the LC might have been bad seatedor there is a problem with that specific slot... Cheers, Leonardo. De: Chris Lane [mailto:[EMAIL PROTECTED] Enviada: qua 10/9/2008 18:12 Para: Leonardo Gama Souza C

Re: [c-nsp] GSR12008 Error

I think its safe to say its the LC. Issue is resolved with LC removed. Site is remote across country, i will get a maintenance window and get more info in the near future. Regards, Chris On Wed, Sep 10, 2008 at 5:00 PM, Leonardo Gama Souza < [EMAIL PROTECTED]> wrote: > You can try to insert th

Re: [c-nsp] Setting the Remote Syslog Port in IOS

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 2008/9/10 Christian Koch : > checked for any switches after the inputting the ip address on logging > host command but nothing was available > > > #logging host 1.1.1.1 transport ? > % Unrecognized command How about some sort of port-forwarding? - -

[c-nsp] Route selection in VRF

Hey Guys, I have two routers each terminating my upstream providers.on each i have configured Internet on a VRF and doing ebgp with my providers on the the VRF. Customers connected to The PEs are importing the Internet VRFs RTs for Internet Access. The two routers are also doing IBP between them s

[c-nsp] RES: GSR12008 Error

You can try to insert that LC into another slot and collect those commands if the issue come back. De: Chris Lane [mailto:[EMAIL PROTECTED] Enviada: qua 10/9/2008 17:44 Para: Leonardo Gama Souza Cc: cisco-nsp@puck.nether.net Assunto: Re: [c-nsp] GSR12008 Error

Re: [c-nsp] GSR12008 Error

Here is output. cr.la1.ca#execute-on all show controller fia = Line Card (Slot 3) = >From Fabric FIA Errors --- redund overflow 0 cell drops 0 cell parity 0 Switch cards present0x001FSlots 16 17 18 19 20 Switch cards monitored 0x001FS

Re: [c-nsp] GSR12008 Error

Darn, problem for me is i removed the 8 port FastE card that was causing all the grief last night because it kept reloading. I removed the one connection i had in LC and LC still continued to bounce.Here is the output anyways. - On Wed, Sep 10, 2008 at 4:

Re: [c-nsp] IPv6 on the 877W

Well, I got my replacement 877W and tried all the helpful hints I recieved. Sadly, the Dot11Radio0 interface *does not* seem to support any "ipv6 ..." command, although it can be assigned an IPv4 address in the same manner. No problem for the wired segment, as the vlan 1 interface behaves as expect

[c-nsp] RES: GSR12008 Error

Oh. I forgot one thing. You must issue this command on all LC as well. De: Chris Lane [mailto:[EMAIL PROTECTED] Enviada: qua 10/9/2008 17:25 Para: Leonardo Gama Souza Cc: cisco-nsp@puck.nether.net Assunto: Re: [c-nsp] GSR12008 Error No errors as you can see.

Re: [c-nsp] GSR12008 Error

No errors as you can see. cr.la1.ca#sh controller fia Fabric configuration: 2.4Gbps bandwidth, redundant fabric Master Scheduler: Slot 17 Backup Scheduler: Slot 16 >From Fabric FIA Errors --- redund fifo parity 0 redund overflow 0 cell drops 0 crc32 lkup

Re: [c-nsp] Configure Backup Radius Server

On Wed September 10 2008 14:33, Rhino Lists wrote: > I have a 7206 terminating DSL connections currently I only have it pointed > to my primary RADIUS server. I am now wanting to also point it to my > backup RADIUS server for the obvious reasons. I have the following in > mind: > > > > radius-ser

Re: [c-nsp] Setting the Remote Syslog Port in IOS

checked for any switches after the inputting the ip address on logging host command but nothing was available #logging host 1.1.1.1 transport ? % Unrecognized command On Wed, Sep 10, 2008 at 3:55 PM, Tassos Chatzithomaoglou <[EMAIL PROTECTED]> wrote: > Have you tried "logging host XXX transport

Re: [c-nsp] Setting the Remote Syslog Port in IOS

because that is not how splunk works, we want to create separate splunk instances, each instance has its own syslog port... On Wed, Sep 10, 2008 at 2:46 PM, Pelle <[EMAIL PROTECTED]> wrote: > On Wed, Sep 10, 2008 at 18:41, Christian Koch <[EMAIL PROTECTED]> wrote: > >> I wanted to segregate logs

[c-nsp] RES: GSR12008 Error

Hi, Look for errors in "show controller fia". Maybe the LC was badly seated... Maybe you have a bad SFC... There are a lot of possibilities. Cheers, Leonardo Gama. De: [EMAIL PROTECTED] em nome de Chris Lane Enviada: qua 10/9/2008 15:58 Para: cisco-nsp@puck.ne

Re: [c-nsp] 4900M 10/100/1000 management interfaces

Thanks Jeff I thought I was running 12.2(46)SG, but I forgot to change the config-register.. so it was kind of embarrasing after all :-) I now see the interface, thanks for your help. One more question though. The interface says 10/100/1000 MGT, yet it is "interface FastEthernet1" and will only l

Re: [c-nsp] Setting the Remote Syslog Port in IOS

Have you tried "logging host XXX transport udp port Y"? -- Tassos Christian Koch wrote on 10/09/2008 19:41: I know i can set the remote syslog port on ASA/PIX's, but i don't seem to see that it is possible in IOS. I wanted to segregate logs by sending them from certain devices to separate sysl

[c-nsp] Configure Backup Radius Server

I have a 7206 terminating DSL connections currently I only have it pointed to my primary RADIUS server. I am now wanting to also point it to my backup RADIUS server for the obvious reasons. I have the following in mind: radius-server dead-criteria time 5 tries 4 radius-server host aaa.bbb.cc

Re: [c-nsp] 4900M 10/100/1000 management interfaces

The interface is Fa1 and has a fixed config name of mgmtVrf What they did was set up a VRF interface so that you can have an isolated management port that resides in a separate routing domain. One problem i found is that you need the latest code that supports the new interface (12.2-46SG

Re: [c-nsp] Setting the Remote Syslog Port in IOS

This is actually what i do now, but we are moving away from syslog-ng to splunk, basically for the ease of searching and report generation, especially for the lower tiered noc techs, so in splunk you can create multiple "virtual" instances, so what we wanted to do was separate say customer logging

[c-nsp] GSR12008 Error

All, GSR question, appears Cisco finally got around to updating the IOS train on 12.0.32.S – we have been running S8 for a while but S11 just came out and it appears to have many new features! One of my routers is running 12.0.32.S6 – its been so for 2years. I had a bad 8 port FastE lc a while bac

Re: [c-nsp] Setting the Remote Syslog Port in IOS

On Wed, Sep 10, 2008 at 18:41, Christian Koch <[EMAIL PROTECTED]> wrote: > I wanted to segregate logs by sending them from certain devices to > separate syslog ports Why not simply use different facilities? -- Pelle ___ cisco-nsp mailing list cisco-n

[c-nsp] 4900M 10/100/1000 management interfaces

Hi, This is going is be something every embarrasing I feel :-) I've got a Cisco 4900M running 12.2(46)SG, it has a 10/100/1000 mgt interface on the back of the switch that I want to use to manage the switch, but when I boot it up I do not see an interface corresponding to this. I see the 20x Gig

Re: [c-nsp] Setting the Remote Syslog Port in IOS

Interesting approach. I installed syslog-ng on my syslog server (CentOS 5.2) and am filtering very extensively based on source host and pattern matching inside the trap. I have lots of different files in place now based on what cisco device created the trap and what the message in the trap is

Re: [c-nsp] Router reloads on it's own

It's in the text region. Almost surely a software bug. I decoded the PC and it's in the arp command code. Did you do a clear arp or any other arp commmand? If so you will see it in the command history of the crashinfo file. The code is old so it's probably already fixed. Was a crashinfo f

[c-nsp] Setting the Remote Syslog Port in IOS

I know i can set the remote syslog port on ASA/PIX's, but i don't seem to see that it is possible in IOS. I wanted to segregate logs by sending them from certain devices to separate syslog ports Can anyone confirm this behavior? Has anyone had the need to do something similar? Thanks Christia

[c-nsp] AS5350 and ENUM, what happens when DNS gives no results?

Hi, We've got a Cisco AS5350 with a reasonably complex configuration with several inbound dialpeers that involve calling TCL applications. For various reasons we want to route some calls around all this configuration and send them directly to a SIP server. We've thought of doing this with ENU

Re: [c-nsp] Using CA certificates and pre-shared keys on the same box

You could try to configure 2 ISAKMP profiles: one use CA, one use pre-shared. Then configure 2 IPSEC profiles accordingly. -Luan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, September 10, 2008 10:07 AM To: cisco-ns

Re: [c-nsp] NBAR & QoS

Ok. I will read up on it for the IOS release. I hate to upgrade since this would involve taking the router down and it has been up for over year. That's great about the memory. I will test it out and let you know my findings. rootnet On Wed, Sep 10, 2008 at 10:40 AM, Church, Charles <[EMAIL PROTE

Re: [c-nsp] NBAR & QoS

>From what I've seen, NBAR doesn't use a whole lot of memory, it'll grab a small amount off the bat when you enable it, and that's it. Maybe 10 megs. I'm not familiar with 12.2SB though. I think you'd have to read the release notes for NBAR in the two trains. They've added more protocol support

[c-nsp] RES: Using CA certificates and pre-shared keys on the same box

Yes. Just add another isakmp policy statement using the pre-shared authentication mode. Cheers, Leonardo Gama. De: [EMAIL PROTECTED] em nome de [EMAIL PROTECTED] Enviada: qua 10/9/2008 11:07 Para: cisco-nsp@puck.nether.net Assunto: [c-nsp] Using CA certificat

Re: [c-nsp] Router reloads on it's own

Here is sh region: show region Region Manager: Start End Size(b) Class Media Name 0x0E00 0x0FFF33554432 Iomem R/Wiomem 0x6000 0x7DFF 503316480 Local R/Wmain 0x60008DE0 0x6183C02F25375312 IText R/Omain:text 0x6183E000 0x62803

Re: [c-nsp] NBAR & QoS

Chuck, I am pushing about 13Mbit with the small DSL base and sub interfaces. I expect to push more here by the end of Oct and wanted to make sure we are throttling the file sharing before it gets bad. I am running 12.2 SB what advantages do I have for running 12.4? Also what does your memory lo

Re: [c-nsp] Router reloads on it's own

What does 'sh region' say? It's a bus error where the PC and address match. Either it's bad memory if the PC value is out of valid text space or it's a stack corruption type issue which is a software bug. 12.2(25)S throttls is end of engineering. You would need to upgrade to 12.2(33)SRC1. Rodne

Re: [c-nsp] BGP Route Selection

Thanks to everyone that replied.. indeed, I typoed on my route-map.. core1#show route-map as-3356-incoming route-map as-3356-incoming, permit, sequence 5 Match clauses: as-path (as-path filter): 99 Set clauses: local-preference 150 Policy routing matches: 0 packets, 0 bytes route-ma

[c-nsp] Router reloads on it's own

Can anyone help me with the following? How can I get more info regarding this error message?: System returned to ROM by bus error at PC 0x60995708, address 0x60995708 at 12:09:02 CET Mon Sep 8 2008 System restarted at 12:10:43 CET Mon Sep 8 2008 System image file is "disk0:c7200-p-mz.122-25.S

[c-nsp] Using CA certificates and pre-shared keys on the same box

Hi, I have a 2851 working as a hub for remote VPN sites using CA certificates. I want to add other remotes which are using pre-shared keys as their authentication method. Is it possible to configure the hub router to support both the CA trustpoint and per-shared keys? Kind regards Nasir S

[c-nsp] FWSM shun counters followup

This is a followup of my previous question about FWSM "show shun statistics" and the counter value being only 64K. I sent the problem to CISCO tech which returned the following response... -- I have confirmed with our developers that the hit count is a two byte counter in the N

Re: [c-nsp] BGP Route Selection

You could fix it with a route-map and as-path. ip as-path access-list 98 permit ^3356$ route-map as-3356-inbound permit 5 match as-path 98 set local-preference 200 Then in the router bgp section, add this: neighbour 4.53.194.5 route-map as-3356-inbound in This will solve the problem for the s

Re: [c-nsp] Errors before boot loader

If the main IOS image fails so you have tftpboot ability. On Wed, Sep 10, 2008 at 12:16:21PM +0300, Ziv Leyes wrote: > I had a similar problem then updated the boot loader to a newer one and the > problem was solved. > To this I must ask, what's the most important reason I'd want to use a boot >

[illinois.jobs.com] Harry - Palnar Inc, List of Hotlist consultants available imemdiately like - Java, SAS, Dotnet, ETL, Sap - BW,SD,FICO,BI

Dear Partner, Good Morning! Have a Great day at work… Harry from Palnar, A New Jersey Based firm having a Great 11 years Background in Software implementation, Outsourcing and consulting.. Please Visit our Website “www.Palnar.com” for more information Here you can find the list of Hotlist prof

Re: [c-nsp] Can the PE router take on multiple roles?

It would work fine. Watch the CPU and memory to gauge scalability as you grow. Rodney On Wed, Sep 10, 2008 at 03:34:48PM +1000, Andy Saykao wrote: > Hi All, > > We have a few spare 7301's out the back and I was thinking of using one > of them to be a NAT-PE router. No biggie with doing this bu

Re: [c-nsp] jumbo frame

On Wed, 2008-09-10 at 07:08 -0400, kcc wrote: > Do I need to enable the jumbo frame in cisco eg: mtu 9000 > or it can automatically learn? If you're asking whether the switch/router can automatically "sense" that it need to use a 9000 byte MTU, then the answer is no. Packets exceeding the configur

[c-nsp] CLI Restricted Flag Override

We have CUCM6.1 with a Q.931 connection from a Cisco voice gateway to a TDM PBX network. On some PBX's in the network, the CLI restricted flag is set, and this is transmitted across the Q.931 link. I can see the calling number on the gateway, but the IP Phone displays "Unknown Number". Is there any

Re: [c-nsp] NBAR & QoS

We're using it on a 2821 for the same purpose - QOS to 2 upstreams, and file sharing shaping. Currently running about 10% CPU when pushing about 9mb through it. It's probably good for almost a full DS-3 on the 2821, at least in our application. If you can run 12.4 on the NPE225, I'd say enable i

Re: [c-nsp] jumbo frame

On Wednesday 10 September 2008 19:08:24 kcc wrote: > Do I need to enable the jumbo frame in cisco eg: mtu 9000 > or it can automatically learn? The biggest problems operators have faced with PMTUd is filtering. If this is for your backbone, this is in your control. That said, we hard-set jumbo

[c-nsp] jumbo frame

Hi Do I need to enable the jumbo frame in cisco eg: mtu 9000 or it can automatically learn? Thank you ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/ci

Re: [c-nsp] BGP Route Selection

Hi, On Tue, Sep 09, 2008 at 11:44:45PM -0400, Gregory Boehnlein wrote: > 3356, (aggregated by 3356 4.69.130.12) > 4.53.194.5 from 4.53.194.5 (4.69.181.195) > Origin IGP, metric 1000, localpref 100, valid, external, > atomic-aggregate > Community: 3356:0 3356:3 3356:100 3356:123 3

Re: [c-nsp] VPN Failover

On Wed, Sep 10, 2008 at 11:24 AM, Nimal David Sirimanne <[EMAIL PROTECTED]> wrote: > Hi guys, > Is it then possible, if SITEA -- vpn -- SITEB fails, that it will failover > to SITEA -- vpn -- DRSITE? > Hi, Have a look at DPD and RRI features. Cisco design guides: http://www.cisco.com/applicatio

[c-nsp] VACL capture versus OAL on 6500s

All, I know that VACL capture is mutually exclusive with OAL on 6500s. We have a chassis which currently has OAL configured i.e. logging ip access-list cache rate-limit 300 int VlanX logging ip access-list cache in logging ip access-list cache out I now need to use VACL capture; can I just

[c-nsp] VPN Failover

Hi guys, We have 2 major offices (SITEA,SITEB)running site-2-site VPN connection between them. We are now setting up a new DR site (DRSITE) for SITEB However, our constraint is that SITEB internal network addressing and DRSITE internal network addressing has to be exactly the same. If intern

Re: [c-nsp] Monitoring CPU punted traffic

On Tue, 2008-09-09 at 16:33 -0400, Jeff Fitzwater wrote: > I am running 720CXL with SXH code and am trying to monitor the punted > traffic to the RP so that I can confirm what actually gets punted to > it. > > It appears to show packets but not positive I have configured it > correctly. Has

Re: [c-nsp] Errors before boot loader

I had a similar problem then updated the boot loader to a newer one and the problem was solved. To this I must ask, what's the most important reason I'd want to use a boot loader AND an IOS while I can just use IOS that can boot-load too? Ziv -Original Message- From: [EMAIL PROTECTE

Re: [c-nsp] Errors before boot loader

On Wednesday 10 September 2008 16:28:35 Peter Rathlev wrote: > If it's a platform with seperate boot-image (like 7200) > you could update this boot loader. I don't know exactly > why one would/wouldn't do that, but the first line seems > to indicate that boot-image and IOS-image are different > ve

[c-nsp] NBAR & QoS

Hello, I am looking into running NBAR along side with QoS in our network. I was wondering what the list was doing if running NBAR. I want to protect against excessive file sharing customers or at least throttle those specific applications. Some suggestions as the best place to configure this in

Re: [c-nsp] Errors before boot loader

On Tue, 2008-09-09 at 16:01 +0200, Rens wrote: > Hi, > > Should I worry about errors that are sent from the boot loader? If Rodney says no, you probably shouldn't. :-) > %SYS-4-CONFIG_NEWER: Configuration from version 12.4 may not be correctly > understood > %-4-SERVUNDEF: The server-group