[c-nsp] How can enable PfR PIRO function on IOS 12.4(24)T

2009-04-07 Thread Darren Yang
Hi, The Cisco introduced PfR can support OSPF as parent route on IOS 12.4(24)T and this term is PIRO(Protocol Independent Route Optimization). Detail link this: http://www.cisco.com/en/US/docs/ios/oer/configuration/guide/oer-trf_rte_ctl.html#wp1060987 But when I use 12.4(24)T in Cisco 1812

Re: [c-nsp] 10GE card for 7609

2009-04-07 Thread Marian Ďurkovič
On Mon, 6 Apr 2009 19:24:00 +0300, Saku Ytti wrote 3. Topologies used c) anritsu --darkfibre-- ten7/1:7600:ten7/2 --darkfibre-- anritsu 4. Pure IP performance 4.1 no features configured, plain IP routing c) 64bytes does 87.5% of linerate, rate appraoches 100% as size grows,

Re: [c-nsp] EEM event-manager and event none question.

2009-04-07 Thread M Usman Ashraf
Hi, You have to use event none, under event manager applet A-EU-UP, if you want to do so. On Mon, Apr 6, 2009 at 9:18 PM, luismi asturlui...@gmail.com wrote: I have this code... event manager applet A-EU-UP event track 10 state up action 1.0 syslog msg Track 10 Up. Houston we don't have

Re: [c-nsp] EEM event-manager and event none question.

2009-04-07 Thread luismi
I just did a test right now. The appelt is running ok without event none as expected, seems to be that is monitoring the track 10 without more manual intervention as I can see in the output of sh track 10 El lun, 06-04-2009 a las 19:49 +0300, Tassos Chatzithomaoglou escribió: Event none is

Re: [c-nsp] two ISPs, two routers, one firewall - bgp question

2009-04-07 Thread Ivan Pepelnjak
Outbound traffic traverses the DMZ segment twice (FW - R2 - R1). Inbound traffic traverses the DMZ segment once (R2 - FW). The difference is that FW has no idea where to send the traffic (follows default route), whereas R2 knows the internal network is reachable through the FW. Hope this helps

Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-07 Thread Adam Armstrong
Gert Doering wrote: Hi, On Tue, Apr 07, 2009 at 10:25:26AM +0100, Adam Armstrong wrote: As a general rule, you shouldn't force the duplex on a port unless the autonegotiation fails! (as it does on some quite old hardware) ... and the context of *this* discussion is likely involving

[c-nsp] cisco IOS ip helper-address and MADCAP

2009-04-07 Thread A . L . M . Buxey
hi, just a quick question to peak some folks interest on a monday morningand since I didnt get an answer from google et al. does anyone know if cisco 'ip helper-address' can deal with MADCAP (multicast address assignment via DHCP - also known in some circles as MDHCP)? I know there is very

Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-07 Thread Gert Doering
Hi, On Tue, Apr 07, 2009 at 10:25:26AM +0100, Adam Armstrong wrote: As a general rule, you shouldn't force the duplex on a port unless the autonegotiation fails! (as it does on some quite old hardware) ... and the context of *this* discussion is likely involving PA-FE-TX's, which are quite

Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-07 Thread Adam Armstrong
Lee wrote: My experience has been that setting the speed and duplex on a catalyst switch stops it from doing auto-negotiation. So with the switch ports set to 100/full I'd expect the 7500 ports to come up as 100/half. But we don't have any cat4006s at work.. I don't know if they do

[c-nsp] Squid cannot see wccp traffic through GRE Tunnel

2009-04-07 Thread Christina Klam
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, We have been having some problems with wccpv2 working through a GRE tunnel between a 6504e (version s3223-ipservicesk9_wan-mz.122-33.SXI.bin) and a Squid server (RHEL5). The tunnel is up; and we an see GRE traffic on both sides. WCCP is up as

Re: [c-nsp] Squid cannot see wccp traffic through GRE Tunnel

2009-04-07 Thread Adrian Chadd
On Tue, Apr 07, 2009, Christina Klam wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 All, We have been having some problems with wccpv2 working through a GRE tunnel between a 6504e (version s3223-ipservicesk9_wan-mz.122-33.SXI.bin) and a Squid server (RHEL5). The tunnel is up; and

[c-nsp] RES: Squid cannot see wccp traffic through GRE Tunnel

2009-04-07 Thread Juliano Luz - Sicredi
Maybe a problem related to MTU size? Check http://www.cisco.com/en/US/tech/tk827/tk369/technologies_tech_note09186a0080 093f1f.shtml -Mensagem original- De: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] Em nome de Christina Klam Enviada em: terça-feira,

[c-nsp] BGP across continents

2009-04-07 Thread Alasdair McWilliam
Hi, I am setting up a multihomed hosting centre in Europe. As part of the service offered we will be providing Disaster Recovery services, using our ability to re-route customer IP prefixes, through to another hosting centre in Canada. We have a requirement for some prefixes within our net block

[c-nsp] remove

2009-04-07 Thread JJ JJ
remove Date: Tue, 7 Apr 2009 21:38:57 +0800 From: adr...@creative.net.au To: ck...@ias.edu CC: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Squid cannot see wccp traffic through GRE Tunnel On Tue, Apr 07, 2009, Christina Klam wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1

Re: [c-nsp] BGP across continents

2009-04-07 Thread Joe Provo
On Tue, Apr 07, 2009 at 03:22:04PM +0100, Alasdair McWilliam wrote: [snip] Is there any way around this or is the only option to request a second ASN? Among the give you enough rope options, neighbor allowas-in; use with caution. There are many other options, including to build tunnels

[c-nsp] carrier router models comparison

2009-04-07 Thread Emanuel Popa
hi there, due to the increase in traffic volume in the last couple of years we need to really think about the future of the network. we have deployed and we are managing a 50GE multi-ring topology network with Cisco 7600 routers. i don't want to get into more details about ring topology

Re: [c-nsp] Too dumb for SLB on ASR1Ks?

2009-04-07 Thread Elmar K. Bins
So far, I have gotten only the one response to my question. What would be the suggestion? Ask Cisco for configuration help? Create a bug id? Any ideas/guidance? I'm under the impression my basic config should be working but it doesn't... You know, any input etc... Elmar.

Re: [c-nsp] NAT on ASR1000

2009-04-07 Thread Tassos Chatzithomaoglou
Rodney, can you do a sh plat soft stat contr br? -- Tassos Rodney Dunn wrote on 07/04/2009 18:46: Few bugs still being worked through but the 72xx and 76xx croaked under the load: ASR1002ESP10#sh proc cpu sort | excl 0.00 CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes:

Re: [c-nsp] carrier router models comparison

2009-04-07 Thread Tassos Chatzithomaoglou
Besides your choices, ASR 9000 should be out soon (its IOS XR Software is already available). -- Tassos Emanuel Popa wrote on 07/04/2009 18:51: hi there, due to the increase in traffic volume in the last couple of years we need to really think about the future of the network. we have

[c-nsp] upload to 2 upstreams

2009-04-07 Thread RAZAFINDRATSIFA Rivo Tahina
Hi all, We have two upstreams and our upload traffic is load balanced between them, when one of them is down, how can I do to send all output to the one which is still up? Regards. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Packet Loss on 6513

2009-04-07 Thread Mesiatowsky, Shawn
We currently have 2 6513's in our core, and we have seen packet loss on our network. I was trying to locate the source of the packet loss. We did see some input queue drops on the SVI's and physical interfaces. I had increased our queue size on the vlan interfaces to 500, and our packet drops

Re: [c-nsp] Too dumb for SLB on ASR1Ks?

2009-04-07 Thread Seth Mattinen
Elmar K. Bins wrote: So far, I have gotten only the one response to my question. What would be the suggestion? Ask Cisco for configuration help? Create a bug id? Any ideas/guidance? I'm under the impression my basic config should be working but it doesn't... You know, any input etc...

Re: [c-nsp] Packet Loss on 6513

2009-04-07 Thread Seth Mattinen
Mesiatowsky, Shawn wrote: We currently have 2 6513's in our core, and we have seen packet loss on our network. I was trying to locate the source of the packet loss. We did see some input queue drops on the SVI's and physical interfaces. I had increased our queue size on the vlan interfaces

Re: [c-nsp] NAT on ASR1000

2009-04-07 Thread Rodney Dunn
sh plat software status control-processor brief Load Average Slot Status 1-Min 5-Min 15-Min RP0 Healthy 0.00 0.04 0.01 ESP0 Healthy 0.00 0.00 0.00 SIP0 Healthy 0.02 0.02 0.00 Memory (kB) Slot StatusTotal Used (Pct) Free (Pct) Committed (Pct) RP0 Healthy

[c-nsp] Packet Loss on 6513

2009-04-07 Thread Mesiatowsky, Shawn
We currently have 2 6513's in our core, and we have seen packet loss on our network. I was trying to locate the source of the packet loss. We did see some input queue drops on the SVI's and physical interfaces. I had increased our queue size on the vlan interfaces to 500, and our packet drops

Re: [c-nsp] Too dumb for SLB on ASR1Ks?

2009-04-07 Thread Rodney Dunn
I just asked one of the platform PM's. It's not supported on ASR1k. Rodney On Tue, Apr 07, 2009 at 06:01:15PM +0200, Elmar K. Bins wrote: So far, I have gotten only the one response to my question. What would be the suggestion? Ask Cisco for configuration help? Create a bug id? Any

[c-nsp] Cisco 3750 ME %SCHED-3-THRASHING

2009-04-07 Thread Chris Lane
All,Please help me identify why my 3750ME is throwing these errors. %SCHED-3-THRASHING: Process thrashing on watched message event. -Process= SSH Process, ipl= 6, pid= 98 -Traceback= 2E4424 2E4B70 D0C404 D0C78C ED455C ED4FE8 ED5A44 ED657C ED6650 CBE0C8 CBE32C CBEA68 CBE914 29BD4C ED996C EDA25b

Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-07 Thread Bill Wichers
[snip] ... and the context of *this* discussion is likely involving PA-FE-TX's, which are quite old hardware, and cannot do any sort of autoneg. True, so the ports should probably be nailed to full at both sides. Correct, they are PA-FE-TX's. There are two such PAs in a VIP2-50, and those

Re: [c-nsp] BGP across continents

2009-04-07 Thread Alasdair McWilliam
Hello, I did think about GRE tunnels but GRE would still need to know about the tunnel destination interfaces. I guess I could get around that by using the IP address of the ISP interfaces on the border routers, but each router will have a link to 2 upstreams, so I'd have to look at that

[c-nsp] GigE sub-int won't come up

2009-04-07 Thread Justin Shore
I'm trying to add a simple sub-int to a built-in GigE interface on a 7206VXR G2. I already have several sub-ints on the same interface and they're working great (typing this email across one of them). However when I added a new sub-int it refused to come up and I can't figure out why.

Re: [c-nsp] GigE sub-int won't come up

2009-04-07 Thread Justin M. Streiner
On Tue, 7 Apr 2009, Justin Shore wrote: What in the world would keep a sub-int on an Ethernet interface from coming up? I'm not even sure what debug options are available for something like this. Connected to Gi0/2 is a 4948 and that VLAN is permitted across the trunk. Is there an active

[c-nsp] MLS and accelerated switching

2009-04-07 Thread Rick Ernst
I'm still working on developing a network design for our ethernet core to best balance the cost/value of just moving bits. The core is currently a pair of 7507/RSP16/GEIP+ routers running as BGP route-reflectors between the border and aggregation layers. The 7507s (and GEIPs) don't have the

Re: [c-nsp] GigE sub-int won't come up

2009-04-07 Thread Justin Shore
Justin M. Streiner wrote: Is there an active access port in VLAN 999 on the 4948, or somewhere downstream of it, assuming any neccessary trunking at the site is already in place? I've seen VLANs not come up before, until there is actually a host in the VLAN. There is an active switchport in

[c-nsp] 7200/NPE-G2 field notices

2009-04-07 Thread Dale Shaw
In case you missed 'em.. Title: Updated Cisco Field Notice: FN - 62535 - NPE-G2, Incompatibility With Lower-Revision VXR Series Chassis With Specific Port Adaptors - RMA required URL: http://www.cisco.com/en/US/customer/ts/fn/620/fn62535.html Title: Updated Cisco Field Notice: FN - 62514 -

[c-nsp] ASR1004 - ipv6 static route in a vrf

2009-04-07 Thread Pshem Kowalczyk
Hi, I'm playing with an ASR1004 to test some ipv6 capabilities. For some reason I can't seem to get a static route working: ASR1(config)#ipv6 route vrf Public 2407:7000::/32 Null0 ASR1(config)#do sh ipv6 route vrf Public IPv6 Routing Table - Public - 1 entries Codes: C - Connected, L - Local, S

Re: [c-nsp] ASR1004 - ipv6 static route in a vrf

2009-04-07 Thread Pshem Kowalczyk
It was simpler then I though - there has to be at least one interface with ipv6 configured for the static route to work. kind regards Pshem ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive

[c-nsp] rate limiting pointers?

2009-04-07 Thread Scott Granados
Since the topic of rate limiting came up... I have a 7206VXR NPE-300 and 2 switches (2960 and 3550). I plan on setting up a trunk from the 7206 to the 3500 and break out via vlans as you'd expect. What are some good methods for rate limiting the individual ports on the access switches? I'm

Re: [c-nsp] BGP across continents

2009-04-07 Thread Geyer, Nick
I have rolled out ASR1002/ESP5's as border routers in a few places now and they perform fantastically. Doing BGP, bogon filtering and basic ACL's, the highest usage ones I have running in production at the moment push up to ~200Mbps sustained and the routers don't even blink at it. Definitely a

Re: [c-nsp] rate limiting pointers?

2009-04-07 Thread Muhammad Salman Zahid
Dear Scott, Read try the following: Step 1: Define ACL for desired IP Pools Step 2: Define a Packet classification criteria Class-map match-all traffic_class_name description Control plane normal traffic match access-group name Access_list_name Step 3: Define a Service Policy

[c-nsp] about eompls on 7609

2009-04-07 Thread ying-xiang
hi: following is my topology brief: SwitchA---PE1(7609-1)---PE2(7609-2)---SwitchB Both switchA and switchB are configured a vlan100 to achieve layer two transport through EoMPLS and they works without any issue but i got an error when i tried to set the same vlan id on the PEs could anyone