Re: [c-nsp] confreg 0x42 on a Sup32

2009-07-31 Thread Graham Wooden
Yup, that was the ticket. Thanks Tim! -graham On 7/31/09 11:06 AM, "Tim Stevenson" wrote: > Hi Graham, > > You need to do this from *both* rommons. The config reg is sync'd between RP & > SP when you do a write mem, but if you are manually changing it from in the > rommon, then each rommon is

Re: [c-nsp] Recommended IOS for 7500

2009-07-31 Thread Pete Templin
Jay Nakamura wrote: Not sure many people are still using 7500 but was wondering what IOS people are using that's stable these days. I googled the archive but couldn't find anything past 2005. RSP4/VIP2-50/ 1~2 MC-DS3 PA and 2 FE ports Not much fancy feature needed. Rate limiting and some clas

Re: [c-nsp] Recommended IOS for 7500

2009-07-31 Thread Gert Doering
Hi, On Fri, Jul 31, 2009 at 04:50:05PM -0400, Jay Nakamura wrote: > Speaking of scrapping it, what router or L3 switch would you recommend to > > - Connect legacy T1 users (1 or 2 DS3s) 7200VXR, NPE225 or NPE400 (NPEs below 225 won't work, 300 is unsupported). > - Connect direct Ethernet users

Re: [c-nsp] Recommended IOS for 7500

2009-07-31 Thread Richard A Steenbergen
On Fri, Jul 31, 2009 at 04:50:05PM -0400, Jay Nakamura wrote: > Speaking of scrapping it, what router or L3 switch would you recommend to > > - Connect legacy T1 users (1 or 2 DS3s) > - Connect direct Ethernet users (Colo or Eth WAN 40~50mbps aggragate) > > that's cheap and reliable, new or used?

Re: [c-nsp] Recommended IOS for 7500

2009-07-31 Thread Jay Nakamura
Speaking of scrapping it, what router or L3 switch would you recommend to - Connect legacy T1 users (1 or 2 DS3s) - Connect direct Ethernet users (Colo or Eth WAN 40~50mbps aggragate) that's cheap and reliable, new or used? Again, QoS and rate limiting is most we would use over simple L3 forward

Re: [c-nsp] Recommended IOS for 7500

2009-07-31 Thread Richard A Steenbergen
On Fri, Jul 31, 2009 at 04:12:10PM -0400, Jay Nakamura wrote: > Not sure many people are still using 7500 but was wondering what IOS > people are using that's stable these days. I googled the archive but > couldn't find anything past 2005. > > RSP4/VIP2-50/ 1~2 MC-DS3 PA and 2 FE ports > > Not m

Re: [c-nsp] Recommended IOS for 7500

2009-07-31 Thread Rodney Dunn
Latest 12.0(32)S rebuild that is on Cisco.com or either 12.4(25). Rodney Jay Nakamura wrote: Not sure many people are still using 7500 but was wondering what IOS people are using that's stable these days. I googled the archive but couldn't find anything past 2005. RSP4/VIP2-50/ 1~2 MC-DS3 P

Re: [c-nsp] Recommended IOS for 7500

2009-07-31 Thread Scott Granados
I can't speak to the IOS but they do make good end tables. :) - Original Message - From: "Jay Nakamura" To: Sent: Friday, July 31, 2009 1:12 PM Subject: [c-nsp] Recommended IOS for 7500 Not sure many people are still using 7500 but was wondering what IOS people are using that's st

[c-nsp] Recommended IOS for 7500

2009-07-31 Thread Jay Nakamura
Not sure many people are still using 7500 but was wondering what IOS people are using that's stable these days. I googled the archive but couldn't find anything past 2005. RSP4/VIP2-50/ 1~2 MC-DS3 PA and 2 FE ports Not much fancy feature needed. Rate limiting and some class based QoS capability

Re: [c-nsp] SFC DOWN

2009-07-31 Thread e ninja
Jack, http://howtos.mysolvr.com/How_to_Power_Off_and_On_a_Cisco_GSR_12000_Linecard Eninja On Thu, Jul 30, 2009 at 9:23 PM, jack daniels wrote: > > Hi All, > > > > I'm facing a issue in Cisco 12416 request your help - > > > > show GSR - > > "Slot 19 type = Switch Fabric Card 16XOC192 > > st

Re: [c-nsp] 7206 NPE-G2 - Cat 3750 sfp issue

2009-07-31 Thread Geoffrey Pendery
I vaguely recalled the 7200VXR/G2's requiring the "fancy" DOM SFPs, not the regular GLC- SFP's. A little Googling turned up this: http://www.cisco.com/en/US/prod/collateral/routers/ps341/prod_qas0900aecd80471791.html "Q. Which SFP modules are supported on the Cisco NPE-G2? A. The following SFP mo

Re: [c-nsp] can you port forward to a non connected subnet?

2009-07-31 Thread Ryan West
Hi, That works fine. You just need to enable routing to that remote subnet to the local SVI on the switch. -ryan -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott Granados Sent: Friday, July 31, 2009 2:48 PM To: ci

[c-nsp] can you port forward to a non connected subnet?

2009-07-31 Thread Scott Granados
Hi, I have a question RE port forwarding. BACKGROUND We have a pix with two interfaces. One public interface has a static outside of 206.x.x.77 and we have an internal interface with an interface IP of 10.18.7.254. On the inside interface we attach a core switch with lots of VLANs with diff

Re: [c-nsp] ISP in US

2009-07-31 Thread Daryl G. Jurbala
On Jul 30, 2009, at 6:42 PM, Andy William wrote: Thx all and i will think about Gulfstream Daryl :) but i start to think about P2P connections like AT&T IPL (International Private Line) or ATM PVC between both sites , what do you think ? what is the estimated cost for 2M connection ? T

Re: [c-nsp] GRE/NAT ?

2009-07-31 Thread Rodney Dunn
That yes. I took his question as nat'ing post encapsulated inner packets due to his "inside" reference: >>> Can you NAT traffic inside GRE? Luan Nguyen wrote: So you are talking about NAT after GRE? You certainly could NAT and then GRE-encapsulated the NATTED traffic? Regards, ---

Re: [c-nsp] GRE/NAT ?

2009-07-31 Thread Luan Nguyen
So you are talking about NAT after GRE? You certainly could NAT and then GRE-encapsulated the NATTED traffic? Regards, Luan Nguyen Chesapeake NetCraftsmen, LLC. http://www.netcraftsmen.net -Original Message- From: Rodney

Re: [c-nsp] GRE/NAT ?

2009-07-31 Thread Rodney Dunn
There is no code that does translation of the inner ip frame that I'm aware of. Rodney Luan Nguyen wrote: No? I remember doing overlapping RFC1918 sites for GRE/IPSEC VPN. Regards, Luan Nguyen Chesapeake NetCraftsmen, LLC. http://www.netcraftsmen.net -

Re: [c-nsp] confreg 0x42 on a Sup32

2009-07-31 Thread Tim Stevenson
Hi Graham, You need to do this from *both* rommons. The config reg is sync'd between RP & SP when you do a write mem, but if you are manually changing it from in the rommon, then each rommon is going to have an independent value. Break to the SP, confreg 0x2142, reset, then wait for the RP

Re: [c-nsp] GRE/NAT ?

2009-07-31 Thread Luan Nguyen
No? I remember doing overlapping RFC1918 sites for GRE/IPSEC VPN. Regards, Luan Nguyen Chesapeake NetCraftsmen, LLC. http://www.netcraftsmen.net --- -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:c

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-31 Thread Michael K. Smith - Adhost
Add Time Warner to the IPv6 enabled list as well. Mike > -Original Message- > From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of Jo Rhett > Sent: Thursday, July 30, 2009 11:30 PM > To: Eric Van Tol > Cc: cisco-nsp@puck.nether.net > Subject:

Re: [c-nsp] GRE/NAT ?

2009-07-31 Thread Rodney Dunn
No. Jeff Kell wrote: The GRE question reminded me of a nagging thought... Can you NAT traffic inside GRE? Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.

Re: [c-nsp] GRE

2009-07-31 Thread Rodney Dunn
Jason wrote: Greetings, This is a quick and simple question. Can someone confirm my suspicion that GRE is process switched on a 2651XM? on 12.4 and later code (can't remember exactly where we did it) the SYN is CEF switched and the rest of the flow. RST/FIN's are process switched to tear

Re: [c-nsp] GRE/NAT ?

2009-07-31 Thread Jeff Kell
The GRE question reminded me of a nagging thought... Can you NAT traffic inside GRE? Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] GRE

2009-07-31 Thread Jason
Greetings, This is a quick and simple question. Can someone confirm my suspicion that GRE is process switched on a 2651XM? Also, if there's a document somewhere outlining what is process switched on which router/switch that would be really handy to have. Thanks, Jason _

Re: [c-nsp] confreg 0x42 on a Sup32

2009-07-31 Thread Graham Wooden
Thanks Tim and Jesse for the replies. Well, I only had a small window this morning to get this resolved and both confregs from rommon didn't seem to bypass the config like I wanted. Also tried just confreg with no args, and selecting it to ignore the config with still no affect. But as I

Re: [c-nsp] Route Reflectors & Multipath

2009-07-31 Thread Oliver Boehmer (oboehmer)
Dean Smith <> wrote on Thursday, July 23, 2009 22:54: > Is there any tweak, trick or feature that enables a route-reflector > to pass on multiple iBGP paths to clients ? > > This is for a straightforward iBGP ipv4 setup (no multiprotocol bgp > or MPLS, so no unique VRF ids etc). until add-path i

Re: [c-nsp] 3750 switch dropping packets when trust dscp enabled

2009-07-31 Thread Lobo
Thanks for the explanation Brad. Makes sense to me now. Jose Brad Henshaw wrote: Lobo wrote: I setup a traffic generator to send 95Mbps of traffic with DSCP EF (46) across the different switches but when it hit the 3750, the egress traffic was only ~4Mbps. After reading up a b

Re: [c-nsp] 7206 NPE-G2 - Cat 3750 sfp issue

2009-07-31 Thread Marko Milivojevic
> I use > 1000BASE-LX/LH (GLC-LH-SM), on both Catalyst and 7206 NPE-G2, interface and > protocol are up but I cannot do anything, what am I missing? How are your speed negotiation settings on both ends? ___ cisco-nsp mailing list cisco-nsp@puck.nether.n

[c-nsp] MTBF & MTTR in mpls

2009-07-31 Thread Narma Wahyuadi
anyone know what is value of mtbf & mttr usually in cloud MPLS ? is there any resource to calculate it ? for me it's very difficult to know my MPLS reliability _ Note: The information contained in this e-mail is intended only fo

Re: [c-nsp] How to monitor ipsec tunnel

2009-07-31 Thread Andy Saykao
Thanks Ben. Unfortunately, that OID object doesn't exist on the Cisco 3640 with the IOS I'm using. nagios# snmpwalk -v 2c -c public 203.17.101.x 1.3.6.1.4.1.9.9.171.1.3.1.1 SNMPv2-SMI::enterprises.9.9.171.1.3.1.1 = No Such Object available on this agent at this OID nagios# snmpwalk -v 2c -c pu

Re: [c-nsp] How to monitor ipsec tunnel

2009-07-31 Thread Ben White
You can get a count of the number of tunnels up under 1.3.6.1.4.1.9.9.171.1.3.1.1 http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en&translate=Translate&objectInput=cipSecGlobalActiveTunnels Check min/max values on that? 2009/7/31 Andy Saykao : > Hi All, > > We've got an IPSEC tunnel c

[c-nsp] Point to Multipoint L2L

2009-07-31 Thread Rens
Hi all, Currently we setup Lan2Lan services via L2TPv3 tunnels and with QinQ if vlan transparency is needed. The problem is that sometimes we need to connect multiple sites to the same L2L. I have read a little bit about VPLS but it seems you need a MPLS network for this, which I don't hav