Re: [c-nsp] Policy routing on a 3750 - What am I doing wrong?

2009-03-20 Thread Stig Johansen
Aaron wrote: In trying to do some IP policy routing on a 3750, I ran into some odd behavior. I'd appreciate any pointers/help to get this working. First of all, the 3750's does most things in hardware, and this is as a rule not counted anywhere. You'll only see hits and counters moved when the

Re: [c-nsp] Policy routing on a 3750 - What am I doing wrong?

2009-03-20 Thread Amjad Ul Hasnain Qasmi
Can you send show sdm prefer . You would probably need routing-pbr or route SDM template on your 3750 in order to support PBR. http://www.cisco.com/en/US/products/hw/switches/ps5023/products_tech_note091 86a00801e7bb9.shtml -Original Message- From: cisco-nsp-boun...@puck.nether.net

[c-nsp] Names of various cisco operating systems

2009-03-20 Thread Sam Stickland
Hi, I'm in the middle of preparing a patch for SNMP::Info to detect the operating systems and versions running on a wider range of Cisco equipment. It's left me somewhat stumped what to write in the os field for most of the devices below. IOS has a name, CatOS has a name, but what on earth

Re: [c-nsp] Names of various cisco operating systems

2009-03-20 Thread Brian Raaen
If you ftp to (ftp.cisco.com), you can download all Cisco's MIB data over anonymous ftp. They would be contained in those files. Alternately, you could try using the search function on Cisco's web site.-- - Brian Raaen Network Engineer email: /bra...@zcorum.com/

Re: [c-nsp] Sup720-3BXL and diag issues

2009-03-20 Thread Jimmy Changa
I have three chassis with the same SUP and IOS revisions. 1 chassis seems to fail the cards, the other 2 seem to have no problems with them. I will reboot the problematic 6500 during a maintenance window. On Thu, Mar 19, 2009 at 2:06 PM, Bob Snyder rsny...@toontown.erial.nj.uswrote: On Wed,

Re: [c-nsp] BCP 38 on single-mode uRPF platforms?

2009-03-20 Thread Pete Templin
Jerimiah Cole wrote: Pete Templin wrote: ... I'm now leaning towards 'reachable-via any' on all Internet customer ports, with per-port (per-customer) ACLs to prevent spoofing. Aside from having to maintain those per-port/per-customer ACLs and a risk to multi-homed customers if

[c-nsp] QoS Questions

2009-03-20 Thread Jeff Cartier
This question is in regards to QoS on a 3750... If I'm trying to establish the PQ for Vlan2...and I have interfaces that aren't in vlan 2, lets say they are an access-port in vlan 11...would this interface configuration be correct or incorrect? interface GigabitEthernet1/0/1 description

Re: [c-nsp] Names of various cisco operating systems

2009-03-20 Thread Justin Shore
SNMPv2-MIB::sysDescr.0 = STRING: Cisco Firewall Services Module Version 3.2(10) I can't get SNMP to work on a IDSM2 or I'd send you that output too. Justin Sam Stickland wrote: Hi, I'm in the middle of preparing a patch for SNMP::Info to detect the operating systems and versions running

Re: [c-nsp] Names of various cisco operating systems

2009-03-20 Thread Sam Stickland
All, I should clarify. I have access to all these types of devices, that's why I'm adding the support to SNMP:Info in the first place :) Cisco Firewall Services Module Version 3.2(10) strikes me as just a description of the device, rather than containing an operating system name. A

Re: [c-nsp] Names of various cisco operating systems

2009-03-20 Thread Justin Shore
Ah, I'm with you now. I'll stop messing with these damn IDSM2s then. :-) I don't know what their internal dev name would be but then again I seriously doubt if many other people using SNMP::Info would either. Were it me I think I'd name it something like this: FWSM 3.2(10) IDSM2 6.0(1)E1

Re: [c-nsp] BCP 38 on single-mode uRPF platforms?

2009-03-20 Thread Jerimiah Cole
Pete Templin wrote: ... I'm now leaning towards 'reachable-via any' on all Internet customer ports, with per-port (per-customer) ACLs to prevent spoofing. Aside from having to maintain those per-port/per-customer ACLs and a risk to multi-homed customers if 'reachable-via rx' gets triggered

[c-nsp] Cache Flow

2009-03-20 Thread Keith
How much cpu load does enabling ip route-cache flow on an interface put on a router? Have a 7206vxr with 256M of ram. Runs BGP, but we only take a default route from that particular upstream, not full or partial tables. Router peaks out about 300Meg of traffic total in/out with the cpu topping

Re: [c-nsp] Cache Flow

2009-03-20 Thread Julio Arruda
Keith wrote: How much cpu load does enabling ip route-cache flow on an interface put on a router? Have a 7206vxr with 256M of ram. Runs BGP, but we only take a default route from that particular upstream, not full or partial tables. Router peaks out about 300Meg of traffic total in/out with