Re: [c-nsp] NAT-ON-A-STICK for VRF Traffic

2009-08-24 Thread Ziv Leyes
This footnote confirms that this email message has been scanned by PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses. __ Information from ESET NOD32 Antivirus, version of virus signature database 4364 (20090

Re: [c-nsp] GSR 12k GRP Images?!?

2009-08-24 Thread Mikael Abrahamsson
On Mon, 24 Aug 2009, Jerry Bacon wrote: Which brings up a question I've had for a while. What's the difference between the 12.0S and the 12.0SY versions? You can use the feature navigator for that, but basically 12.0(32)SY has a few added features over 12.0(32)S such as support for more hardw

Re: [c-nsp] GSR 12k GRP Images?!?

2009-08-24 Thread Jerry Bacon
Which brings up a question I've had for a while. What's the difference between the 12.0S and the 12.0SY versions? TIA -- Jerry B. - Original Message - From: "Matt Addison" The 1600 is obsolete too, but you can still get images for that. Looks like you can still get GRP images thr

Re: [c-nsp] NAT-ON-A-STICK for VRF Traffic

2009-08-24 Thread Andy Saykao
I've been able to get this working using NVI but I'm finding the traceroute is a bit strange. It times out after the Internet GW interface (202.45.118.x) which is on NAT-PE. When I go back to using nat inside/outside interfaces, the traceroute goes through fine. Any ideas why a NVI would not give a

[c-nsp] OT: What Data Leak Prevention Solution Do You Use?

2009-08-24 Thread Felix Nkansah
Hi, I would like to know which platforms, products or solutions you have deployed in-house or for your clients to effectively prevent leakage of corporate data? Felix ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/

Re: [c-nsp] asa SSL VPN

2009-08-24 Thread Scott McGrath
The SSL vpn client is implemented either as a ActiveX control or a java application depending upon platform. It replicates the functionality of the IPsec client and is currently the only support Cisco has for 64 bit OS'es There is a WebVPN license as well which only allows access to published

Re: [c-nsp] Nat Virtual Interface

2009-08-24 Thread Andy Saykao
Sorry...fixed...after more googling, found that you can view the nat translation with: test-mpls-cr#sh ip nat nvi translations Pro Source global Source local Destin local Destin global tcp 74.125.109.25:80 74.125.109.25:80 210.15.230.x:1129 192.168.2.2:1129 tcp 74.125.

Re: [c-nsp] Nat Virtual Interface

2009-08-24 Thread Ryan West
s ip nat nvi trans Sent from handheld. On Aug 24, 2009, at 6:44 PM, "Andy Saykao" wrote: > Are we suppose to be able to view the nat translations taking place > when > using a NAT Virtual Interface. > > Here's me pinging google using a NVI, but I can't see any NAT > translations taking place?

[c-nsp] Nat Virtual Interface

2009-08-24 Thread Andy Saykao
Are we suppose to be able to view the nat translations taking place when using a NAT Virtual Interface. Here's me pinging google using a NVI, but I can't see any NAT translations taking place The translation must be taking place because my PC has address of 192.168.2.2 (gets natted to 210.15.2

[c-nsp] asa SSL VPN

2009-08-24 Thread Bill Blackford
A basic question about functionality. Does the asa clientless SSL work the same as the VPN Concentrator's webvpn? I'm reading some documentation that is leading me to believe that it only will allow access to published services. vs., modifying the client route table and tunneling address ranges.

Re: [c-nsp] 6500 QoS

2009-08-24 Thread Justin Shore
Randy McAnally wrote: We got minor packet loss and noticeably slower speeds off the bat with 'mls qos' enabled with all defaults, even with only 40-50% interface utilization. In fact it took a while to figure it out. Be very careful when you enable it if even minor packet loss will be an issue

Re: [c-nsp] Long Uptime

2009-08-24 Thread Konstantin Barinov
OK, here we go :) > sh ver WS-C5505 Software, Version McpSW: 6.3(10) NmpSW: 6.3(10) Copyright (c) 1995-2002 by Cisco Systems NMP S/W compiled on Nov 4 2002, 17:17:28 MCP S/W compiled on Nov 04 2002, 17:01:16 ... Uptime is 910 days, 16 hours, 37 minutes >sh ver Cisco IOS Software, 7200 Soft

Re: [c-nsp] Long Uptime

2009-08-24 Thread Brian Johnson
sw01.oake#sh ver Cisco IOS Software, Catalyst 4000 L3 Switch Software (cat4000-I9S-M), Version 12.2(25)EWA3, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2005 by Cisco Systems, Inc. Compiled Tue 23-Aug-05 14:07 by dchih Image text-base: 0x1000,

Re: [c-nsp] Long Uptime

2009-08-24 Thread Sean Granger
Yep ... w/ crypto : WS-C5500 Software, Version McpSW: 6.4(13) NmpSW: 6.4(13) Copyright (c) 1995-2004 by Cisco Systems NMP S/W compiled on Sep 13 2004, 19:20:01 MCP S/W compiled on Sep 13 2004, 19:19:28 ... Uptime is 1164 days, 20 hours, 24 minutes (cat5000-sup3k9.6-4-13.bin) >>> Gert Doeri

Re: [c-nsp] Long Uptime

2009-08-24 Thread Gert Doering
Hi, On Mon, Aug 24, 2009 at 10:30:08AM -0400, Ross Halliday wrote: > Fabric-West> sh ver > WS-C5500 Software, Version McpSW: 6.4(9) NmpSW: 6.4(9) > Copyright (c) 1995-2004 by Cisco Systems > NMP S/W compiled on Mar 10 2004, 18:22:30 > MCP S/W compiled on Mar 10 2004, 18:17:56 > ... > Uptime is 128

Re: [c-nsp] Long Uptime

2009-08-24 Thread Ross Halliday
Fabric-West> sh ver WS-C5500 Software, Version McpSW: 6.4(9) NmpSW: 6.4(9) Copyright (c) 1995-2004 by Cisco Systems NMP S/W compiled on Mar 10 2004, 18:22:30 MCP S/W compiled on Mar 10 2004, 18:17:56 ... Uptime is 1287 days, 7 hours, 37 minutes These things are beasts, last reload was for a CatOS

Re: [c-nsp] Long Uptime

2009-08-24 Thread Andrey 'sshd' Petrenko
24.08.2009 13:40, Tom Sands пишет: D12-1.sat1>show ver Cisco Catalyst 1900/2820 Enterprise Edition Software Version V9.00.02 Copyright © Cisco Systems, Ins. 1993-1999 D12-1.sat1 uptime is 2926day(s) 18hour(s) 01minute(s) 25second(s) --

Re: [c-nsp] Long Uptime

2009-08-24 Thread Tom Sands
D12-1.sat1>show ver Cisco Catalyst 1900/2820 Enterprise Edition Software Version V9.00.02 Copyright © Cisco Systems, Ins. 1993-1999 D12-1.sat1 uptime is 2926day(s) 18hour(s) 01minute(s) 25second(s) Tom Sands

Re: [c-nsp] EoMPLS between subinterface and physical interface

2009-08-24 Thread Saku Ytti
On (2009-08-17 20:03 +0300), Tassos Chatzithomaoglou wrote: > == > For a particular EoMPLS connection, both the ingress EoMPLS > interface on the ingress PE and the egress EoMPLS interface on the > egress PE have to be subinterfaces with dot1Q encapsulation or >