[c-nsp] vlan question

2009-02-23 Thread Deric Kwok
Hi I configure router's ethernet1 to support 4 vlans and each vlans will have /28 I have 48 ports switch. I will configure a truck port in port2 and also configure eg: port 3 - port 16 vlan2 port 17 - port 33 vlan3 port 34 - port 48 vlan4 Now I have question: 1/ how is the last vlan

Re: [c-nsp] Cisco Refurbished Equipment Program

2009-02-23 Thread Powers, Kenny
When you RMA a part back to Cisco refurb, they send you another refurbished part back. I am myself a provider of secondary market hardware and have gone through Cisco refurb a few times for my clients. My opinion on it would be that Cisco does not put a whole lot of emphasis on this program

Re: [c-nsp] Cisco Refurbished Equipment Program

2009-02-23 Thread Chris Wallace
Probably just a fluke, it happened to be that one of the 9 or so fans wasn't spinning at the proper RPM's. ---Chris On Feb 20, 2009, at 6:03 PM, Gert Doering wrote: OHi, On Fri, Feb 20, 2009 at 04:54:09PM -0500, Chris Wallace wrote: We purchased a Cisco 6509 through this program a

Re: [c-nsp] Cisco Refurbished Equipment Program

2009-02-23 Thread Gert Doering
Hi, On Mon, Feb 23, 2009 at 10:09:26AM -0500, Chris Wallace wrote: Probably just a fluke, it happened to be that one of the 9 or so fans wasn't spinning at the proper RPM's. Which is exactly my point - the fans are monitored very well by the onboard diagnostics, and I find it surprising that

[c-nsp] VRF and STATIC ROUTE to GLOBAL

2009-02-23 Thread Jeff Fitzwater
This question was posted earlier, before I opened ticket with CISCO. Router is 6500 with 720-CXL running SXI code. 1. I have router A which is used to connect to our three ISPs ( two I1s and one I2 connection with full BGP), and also receives all our internal campus traffic via RIP

Re: [c-nsp] VRF and STATIC ROUTE to GLOBAL

2009-02-23 Thread Richard N. Ingram
Jeff Fitzwater wrote: This question was posted earlier, before I opened ticket with CISCO. Router is 6500 with 720-CXL running SXI code. 1. I have router A which is used to connect to our three ISPs ( two I1s and one I2 connection with full BGP), and also receives all our internal campus

Re: [c-nsp] Security question regarding VTP in a L2 shared environment

2009-02-23 Thread Geoffrey Pendery
Hypothetically, if there is no L2 or L3 security in place, would it be as simple as creating a sw acc vlan 230, and allowing 230 on the trunk port on my switch to start scoping about at the other end? Well, the L2 security in question is that on the other end of the trunk, it *should* be

[c-nsp] what ip should be in switch?

2009-02-23 Thread chloe K
Hi all I would like to know what is best way to setup ip in swtich If the switch ip is not in operation network eg: private ip, I can't see any operation ip in the port of the switch by sh arp. it is only showing all arp in management network If I use this ip as same as

Re: [c-nsp] Security question regarding VTP in a L2 shared environment

2009-02-23 Thread Steve Bertrand
Geoffrey Pendery wrote: Hypothetically, if there is no L2 or L3 security in place, would it be as simple as creating a sw acc vlan 230, and allowing 230 on the trunk port on my switch to start scoping about at the other end? Well, the L2 security in question is that on the other end of the

Re: [c-nsp] what ip should be in switch?

2009-02-23 Thread Jay Hennigan
chloe K wrote: Hi all I would like to know what is best way to setup ip in swtich If the switch ip is not in operation network eg: private ip, I can't see any operation ip in the port of the switch by sh arp. it is only showing all arp in management network If I use this ip as

Re: [c-nsp] VRF and STATIC ROUTE to GLOBAL

2009-02-23 Thread schilling
I am not clear about your route-map match subs, set vrf. If your two specific subnets are in one campus core, you need to put them in to VRF ESNET by ip forwarding vrf ESNET. If these two specific subnets are distributed in your campus core, you need to use end-to-end vrf-lite or MPLS, and put

Re: [c-nsp] VRF and STATIC ROUTE to GLOBAL

2009-02-23 Thread Luan Nguyen
Instead of an external link with 2 physical ports, you could try to create a GRE tunnel with 2 loopback interfaces. interface Loopback0 ip address 10.10.10.1 255.255.255.0 ! interface Loopback10 ip address 10.10.100.1 255.255.255.0 ! interface Tunnel1 ip vrf forwarding NSP ip address

Re: [c-nsp] VRF and STATIC ROUTE to GLOBAL

2009-02-23 Thread Jeff Fitzwater
On Feb 23, 2009, at 1:59 PM, schilling wrote: I am not clear about your route-map match subs, set vrf. If your two specific subnets are in one campus core, you need to put them in to VRF ESNET by ip forwarding vrf ESNET. If these two specific subnets are distributed in your campus core,

Re: [c-nsp] Broadcast storm control

2009-02-23 Thread Christian Meutes
Hi, --On Dienstag, November 06, 2007 11:33:20 -0600 Justin Shore jus...@justinshore.com wrote: The book discusses how to harden HSRP, VLANs, VTP and trunk ports and how to prevent ARP attacks, STP attacks, etc. It has a good 802.1x section as well. It's got a good amount of useful info. I

[c-nsp] Small routing issue

2009-02-23 Thread Todd Shipway
I'm working on a small issue that I just can't track down. The connection is 2 T1's bonded in a multilink interface. Connection within the core network is fine from the remote end, but the traffic will not make it to the default route on the core 7513. Hundreds of other connections are setup

[c-nsp] Mpls Troubleshooting Question

2009-02-23 Thread Rocker Feller
Hi, I work in an ISP environment and in it I found developed MPLS delivering ip vpns. There is one client with 5 branches. All work fine except for 1. This is the scenario. The default route is derived from the corporate office (HQ). Its network range is 172.16.0.0/16 Say branch with problem

Re: [c-nsp] VRF and STATIC ROUTE to GLOBAL

2009-02-23 Thread schilling
#core B ip vrf ESNET . . int vlan100 desc no1 prefix for ESNET ip address 192.168.100.1 255.255.255.0 ip forwarding vrf ESNET int vlan101 desc no2 prefix for ESNET ip address 192.168.101.1 255.255.255.0 ip forwarding vrf ESNET int vlan200 desc VRF ESNET to edge A global ip address

Re: [c-nsp] Mpls Troubleshooting Question

2009-02-23 Thread schilling
check no ip unreachable on the PE interface? I got bite once. verify the LSP? Ivan's blog for rescue :-) http://wiki.nil.com/PE-to-PE_troubleshooting_in_MPLS_VPN_networks Schilling On Mon, Feb 23, 2009 at 4:51 PM, Rocker Feller rocker.rockerfel...@gmail.com wrote: Hi, I work in an ISP

Re: [c-nsp] Small routing issue

2009-02-23 Thread Todd Shipway
I changed the ip as a test. There is a route for .224.117/30. I pasted the route for the old ip. My mistake. On Feb 23, 2009, at 6:02 PM, Matlock, Kenneth L matlo...@exempla.org wrote: The F0/0 interface on the 2651 is configured for 198.70.224.117/30, yet you're routing

Re: [c-nsp] Broadcast storm control

2009-02-23 Thread Justin Shore
Christian Meutes wrote: Hi, --On Dienstag, November 06, 2007 11:33:20 -0600 Justin Shore jus...@justinshore.com wrote: the original problem was as far as I remember access switches with disabled or not working spanning-tree created l2-loop and flooded PE edge port. Replying to a question

Re: [c-nsp] Broadcast storm control

2009-02-23 Thread A . L . M . Buxey
Hi, Christian Meutes wrote: Hi, --On Dienstag, November 06, 2007 11:33:20 -0600 Justin Shore jus...@justinshore.com wrote: the original problem was as far as I remember access switches with disabled or not working spanning-tree created l2-loop and flooded PE edge port. Replying to a

Re: [c-nsp] Small routing issue

2009-02-23 Thread Matlock, Kenneth L
The F0/0 interface on the 2651 is configured for 198.70.224.117/30, yet you're routing 198.70.33.176/29 to them. Is there NAT'ing going on, or did I miss something? Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org -Original Message- From:

Re: [c-nsp] Mpls Troubleshooting Question

2009-02-23 Thread Rocker Feller
Hi, My full scenario CE1 --- PE1 --- PE2 - CEZ On the PE1 interface I have a tunnel to CEZ . nb: PE2 is not mpls enabled. CEZ has a ptp link to PE2 LSP - tunnel is up from PE1--- CEZ and I can reach the CEZ router via the tunnel ptp. - from the CEZ lan CE1

Re: [c-nsp] Netconf (over SSHv2) in SXI

2009-02-23 Thread Teller, Robert
When I was working on an application to post xml code to my ace modules I found the xml info on the ace module, have you tried enabling http/https and browsing to the device? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf

Re: [c-nsp] Broadcast storm control

2009-02-23 Thread Christian Meutes
Hi, --On Montag, Februar 23, 2009 23:25:36 + a.l.m.bu...@lboro.ac.uk wrote: Replying to a question from 2 years ago? I wish I had some of your free time in my pocket! :-) surely so busy that its taken 2 years to reply? ;-) (thats the sort of 'free time' I wouldnt be after! ;-) ) I

Re: [c-nsp] Mpls Troubleshooting Question

2009-02-23 Thread Ibrahim Abo Zaid
Hi Rocker that doesn't seem to me as MPLS VPN topology as both PE1 interfaces to CE1 and CEZ are non-MPLS interfaces , it is much like local-switching scenario try using CONNECT command best regards --Ibrahim On Tue, Feb 24, 2009 at 2:11 AM, Rocker Feller rocker.rockerfel...@gmail.com