Re: [c-nsp] Cisco ASR as BBRAS... ? (is this a sane solution)

Hi Frank, The reason for choosing the ASR it that it also has to terminate some bigger access connections delivered to us as OinQ ethernet, but thats plain stuff and is not a speciffic BBRAS function. Just to clarify, are you using radius for DHCP subscribers or only for PPP ? One last

[c-nsp] PIX/ASA Change Control

I have recently taken over management of about 10 Firewalls. We have a mix of ASA and PIX's. I am currently using a text file to track changes I make to the firewalls. I would like to find a piece of software that is geared to doing this more efficiently. I have Googled and did not find

Re: [c-nsp] PIX/ASA Change Control

On Jun 25, 2009, at 3:21 PM, Kelsay, Mark wrote: What are you using that you would recommend? http://en.wikipedia.org/wiki/Revision_Control_System --- Roland Dobbins rdobb...@arbor.net // http://www.arbornetworks.com

Re: [c-nsp] PIX/ASA Change Control

Have you looked at SolarWinds Network Configuration Manager (Cirrus), you can track changes very easily. Regards, Kiran -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Kelsay, Mark Sent: 25 June 2009 09:21 To:

Re: [c-nsp] PIX/ASA Change Control

Hi Mark, Try RANCID (http://www.shrubbery.net/rancid/) - its free and awesome! Cheers, Will 2009/6/25 Kelsay, Mark mark.kel...@confused.com: I have recently taken over management of about 10 Firewalls.  We have a mix of ASA and PIX's.  I am currently using a text file to track changes I

Re: [c-nsp] PIX/ASA Change Control

Hi, Kelsay, Mark schrieb: I have recently taken over management of about 10 Firewalls. We have a mix of ASA and PIX's. I am currently using a text file to track changes I make to the firewalls. I would like to find a piece of software that is geared to doing this more efficiently. I have

Re: [c-nsp] Cisco ASR as BBRAS... ? (is this a sane solution)

I think, ASR quite good solutoin for your case because ERX is too big and too expensive for 2K subscribers. Planing inmplementation you should remember that you need ISG for CoA support and your Radius servers should support Cisco AVPairs for service activation. Nik -Original

Re: [c-nsp] PIX/ASA Change Control

I can truly recommend NCM, works like a charm, although it does cost a bit Mvh, Roy Otto Kleiv NC-Spectrum -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Oddiraju, Kiran @ London SMC Sent: 25. juni 2009 11:02 To:

Re: [c-nsp] PIX/ASA Change Control

Hi, On Thu, Jun 25, 2009 at 9:02 PM, Roy Otto Kleivroy.otto.kl...@nc-spectrum.no wrote: I can truly recommend NCM, works like a charm, although it does cost a bit I've heard good things about NCM, and was given an extra boost of confidence once I discovered it wasn't a Cisco software product

Re: [c-nsp] PIX/ASA Change Control

No. It's really awesome. Sent from handheld. On Jun 25, 2009, at 5:19 AM, William wil...@gmail.com wrote: Hi Mark, Try RANCID (http://www.shrubbery.net/rancid/) - its free and awesome! Cheers, Will 2009/6/25 Kelsay, Mark mark.kel...@confused.com: I have recently taken over management

Re: [c-nsp] WS-X6724+CFC and ES20 line cards

On Wed, 24 Jun 2009 18:25:48 +0400, Gert Doering g...@greenie.muc.de wrote: I found some specs about latter but nothing useful about X6724. The problem that I'm facing now is with given small ISP network blueprint to implement and the lack of some specified parts. I.e. I need two mentioned

Re: [c-nsp] WS-X6724+CFC and ES20 line cards

Hi, On Thu, Jun 25, 2009 at 07:23:44PM +0400, victor wrote: I'd very much like to ask the same question my head-office which distributes this kind of reference material. The only purpose ES20 serve in their design is to establish VPLS connection between two (four in the future) core

Re: [c-nsp] PIX/ASA Change Control

I'm using rancid with good results for the same purpose The only problem I've seen is that with the ASA when you make changes there is sometimes re-ordering in the config, or a slight difference in tabulation (I've seen missing spaces in network-object groups for example) between the configs so

[c-nsp] NAT

I have a RAC 2xnodes (CRS) setup behind a NAT Firewall (IP nating 1:1), when the clients connect to DB they only connect to first IP and not using the second IP. How should I configure my RAC/NAT/TNSnames to give the clients the option to connect both IP's inorder to have Load balance? since am

Re: [c-nsp] WS-X6724+CFC and ES20 line cards

On Thu, 25 Jun 2009 19:30:54 +0400, Gert Doering g...@greenie.muc.de wrote: On Thu, Jun 25, 2009 at 07:23:44PM +0400, victor wrote: I'd very much like to ask the same question my head-office which distributes this kind of reference material. The only purpose ES20 serve in their design is to

Re: [c-nsp] PIX/ASA Change Control

It handles it fine. This is basically all you have to do to get it work with ASA/PIXen: add user customer-fw1 admin add password customer-fw1 mypasswordmypassword add autoenable customer-fw1 0 add method customer-fw1 ssh telnet We did a very minor tweak

Re: [c-nsp] PIX/ASA Change Control

hi, regarding RANCID and Cisco ASAs - are there common scripts etc for logging/scraping such devices as there are for cisco (clogin), foundry (flogin) etc? ..or does it all just magically work with clogin (looking at the clogin and rancid code it seems to be that way...but theres so many CLI

Re: [c-nsp] PIX/ASA Change Control

I use rancid with my asa5540's, works like a charm with clogin. a.l.m.bu...@lboro.ac.uk wrote: hi, regarding RANCID and Cisco ASAs - are there common scripts etc for logging/scraping such devices as there are for cisco (clogin), foundry (flogin) etc? ..or does it all just magically work with

[c-nsp] number of broadband sessions on ESR10K and 7600

Hi - does anyone know how many PPPoE and IPoE sessions can 7600 support PER CHASSIS with ES+40 cards (no interested in SIP-400)? Also how many PPPoX sessions can support ESR 10K - I see in the documentation that the number per chassis is 32K but then Cisco is selling licenses for 64K sessions.

[c-nsp] Network Address Response

I was wondering the reasoning for routers/switches to respond for the network portion of an ip-address range. For example, a router interface A with 10.0.0.1/30 and interface B with 10.0.0.5/30. Generate a ping from a device several hops away on the A side to the B side network address of

[c-nsp] Mac OSX WakeOnLan

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, We have been trying to get WakeOnLan for Mac OSX to work reliably across subnets without success. I have added ip directed-broadcast [access-list#] to the interface VLANs for those buildings/users with Mac Minis. However, it works only part

[c-nsp] VRF-AWARE MBGP

I'm looking for a way to advertise vrf routes via MBGP. I would expect it to look something like this: router bgp AS# address-family ipv4 vrf NAME multicast or address-family ipv4 multicast vrf NAME But neither of these are valid options. Any suggestions?

Re: [c-nsp] Mac OSX WakeOnLan

Christina Klam ck...@ias.edu wrote: We have been trying to get WakeOnLan for Mac OSX to work reliably across subnets without success. I have added ip directed-broadcast [access-list#] to the interface VLANs for those buildings/users with Mac Minis. However, it works only part of the time.

Re: [c-nsp] VRF-AWARE MBGP

you need address-family ipv4 mdt and a separate vrf to carry the traffic Josh Fleishman wrote: I'm looking for a way to advertise vrf routes via MBGP. I would expect it to look something like this: router bgp AS# address-family ipv4 vrf NAME multicast or address-family ipv4 multicast

[c-nsp] Can't ping outside network over T1

I've got a weird issue that I can't seem to solve. Overview. Network is running on a core router which is a 7513 with channelized DS3's split into ds1's to customers. I have one customer who has 2 T1's bonded using multilink ppp. I can ping everything on our network, including other customers.

Re: [c-nsp] Can't ping outside network over T1

Nope. No filtering at all on the entire path for this customer. On Thu, Jun 25, 2009 at 11:28 PM, rgolod...@infratection.com wrote: Todd, any egress filtering to the customer in place that is different from your other configs? Richard --Original Message-- From: Todd Shipway

Re: [c-nsp] Cisco ASR as BBRAS... ? (is this a sane solution)

Ah, so there's non-BBRAS traffic you need to push around -- then the ASR makes more sense. We're using RADIUS for those who need static IPs -- all others get it via DHCP. There's no difference in the VC creation, but what happens with those who have a Framed-IP entry, they get that IP address

Re: [c-nsp] PIX/ASA Change Control

Like Ryan said, clogin takes care of it. The only problem I've run into is with v8.2 of the ASA code. Some nimrod programmer thought it would be a good idea to store config related to the new core dump option in v8.2 in a text file on the flash volume. The programmer also decided to update

Re: [c-nsp] Can't ping outside network over T1

On Thu, 25 Jun 2009, Todd Shipway wrote: Any ideas what may cause something like this? I've got a ton of other customers setup with this identical hardware and configuration working fine. I've also swapped out hardware at the remote end as well. If you traceroute from the peer, how far do