Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Mikael Abrahamsson
On Tue, 1 Sep 2009, Seth Mattinen wrote: Yeah, metal dust would be a killer. I don't know what to say either; magnetic air filters? Maybe salvage/buy some powerful magnets and mount them in your airflow. See if they collect anything over time. If they do, at least you'll have evidence. I've

Re: [c-nsp] some WCCP questions

2009-09-01 Thread Adrian Chadd
On Tue, Sep 01, 2009, Dracul wrote: > Hi, > > Followup question regarding WCCP. > > How long does it take to refresh cached data in squid? Will wccp be able to > detect if the cached data is already a few hours old? Lets say > for news websites that are cached. Thanks! That's a question for squi

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Seth Mattinen
Michael Ulitskiy wrote: > On Tuesday 01 September 2009 07:26:27 pm you wrote: > >> Something really odd/fishy is going on at the facility in question. >> Either they have a problem and won't admit it, or they're just as >> baffled as you are. But there is obviously *something* very bad going on >

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Please see inline On Tuesday 01 September 2009 06:17:11 pm you wrote: > As another person mentioned, your surge suppressor might not be effective > enough, or perhaps after a couple of surges it was rendered useless. > > If you can afford the financial hit, I'd get some large online UPS's for you

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
This is my main suspect now. They are doing work in the facility. Not heavy construction, but they do install cages and cabinets for new tenants and they're definitely using tools that produce metal dust. My theory is that because of we've been the 1st customer who moved into that facility we'v

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
On Tuesday 01 September 2009 07:26:27 pm you wrote: > Something really odd/fishy is going on at the facility in question. > Either they have a problem and won't admit it, or they're just as > baffled as you are. But there is obviously *something* very bad going on > to fry power supplies like tha

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Justin, I'm not going to argue an importance of proper grounding. Also I do want to thank you for your reply. At this point I really doubt that the problem is grounding related, but I'll definitely keep that in mind. Also in my experience I've never seen a place where every piece of equipment w

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael K. Smith
You might also be experiencing a sag, not a spike, where your going below the rated power input for the supply. These can be as damaging as a spike, and the surge protectors don't usually catch them - you have to have a line conditioner in place for that. Regards, Mike On 9/1/09 11:12 AM, "Micha

Re: [c-nsp] Monitoring CPU usage on a Sup720-3BXL (BGP)

2009-09-01 Thread e ninja
Richard, On the contrary, as I stated below, the 'impact' of BGP scanner (a housekeeping task executed by the main processor) on 'system' performance will continue to diminish as more platforms become modular (distributed architecture) and/or switch packets in hardware (i.e, independent of RP and

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Randy McAnally
He mentioned he was one of the first customers in the colo so this might be a possibility -- Randy -- Original Message --- From: "Scott Granados" To: "Seth Mattinen" , "Michael Ulitskiy" Cc: cisco-nsp@puck.nether.net Sent: Tue, 1 Sep 2009 17:35:34 -0700 Subject: Re: [c-nsp] Mult

Re: [c-nsp] Monitoring CPU usage on a Sup720-3BXL (BGP)

2009-09-01 Thread Richard A Steenbergen
On Tue, Sep 01, 2009 at 03:56:02PM -0700, e ninja wrote: > > *BGP scanner is a housekeeping maintenance activity by the main system > processor. As such, its 'impact' on the 'system' should continue to diminish > as more platforms become modular (distributed architecture) and/or switch > packets i

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Scott Granados
Also make sure that the provider isn't doing work in the facility. I'll never forget going to an L3 datacenter and arriving to find workmen in the overhead grinding away and dropping dust and who knows what else in to all the racks below including a rack of Netra T1's that promptly sucked in th

[c-nsp] ASA5520 to Pix can't bring up IPSEC L2L tunnel

2009-09-01 Thread Scott Granados
Hi, I have a Pix out in the field and an ASA5520 that I'm trying to configure to pass L2L traffic. I keep getting an error that says IKEV1 IP=a.b.c.d removing peer from peer table failed, no match ip=a.b.c.d unable to remove peer table entry What am I doing wrong? Here are the important config

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread John van Oppen
I have never seen a piece of network gear that is AC which does not have the electrical ground bonded to the chassis, I was under the impression that bonding is required for safety.The only time I have ever seen this is a floating positive side on -48v gear, but even that is not terribly common

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Seth Mattinen
Randy McAnally wrote: > I'm sorry, but I highly doubt this is why his devices are failing. Each > device receives ground through the power cord (3rd prong is there for a > reason, as well it is tied to chassis ground internally). Secondly, the > cabinets themselves should be grounded as is the ca

Re: [c-nsp] Monitoring CPU usage on a Sup720-3BXL (BGP)

2009-09-01 Thread e ninja
Drew,* Responses inline in italics..* On Tue, Sep 1, 2009 at 11:10 AM, Drew Weaver wrote: >Hey there, > > We've probably all seen this issue before, with BGP scanner eating up a > large amount of CPU time on a powerful supervisor/route processor, etc. My > question is, how are y

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Randy McAnally
As another person mentioned, your surge suppressor might not be effective enough, or perhaps after a couple of surges it was rendered useless. If you can afford the financial hit, I'd get some large online UPS's for your equipment that will effectively isolate you from their power. Although you d

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Edward Salonia
You could look at something like this: http://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=ACF001 It gets installed in the bottom of the rack to take air from below the raised floor and blow it up the front of your cabinet. It has a built in (replaceable) filter, so it will ke

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Justin Shore
Unless you scrapped the paint off of every joint between the chassis through the mounting brackets to the rack then you aren't guaranteed a good connection. That's why most telco screw kits come with the star washer to help scrap the paint of the rack and why most telco equipment frames and mo

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Unless they vaporized by the short. Unfortunately I don't have those supplies anymore. They're either in the garbage or shipped back to vendor for replacement. In any case it would let me make certain about the reason for the failures at most (which is sure very important), but the important

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Randy McAnally
You could pull apart a blown supply and look for them. According to the wiki they should be somewhat visible, at least with a magnifying glass. -- Randy -- Original Message --- From: Michael Ulitskiy To: cisco-nsp@puck.nether.net Sent: Tue, 1 Sep 2009 16:35:49 -0400 Subject: Re:

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Well, I find the idea with whiskers particularly interesting, because a lot of things described are perfectly matched with my situation. We did recently moved, the data-center does have tiled raised floor (don't know if it zinced though) and the airflow is bottom to top which probably helps to b

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Randy McAnally
I'm sorry, but I highly doubt this is why his devices are failing. Each device receives ground through the power cord (3rd prong is there for a reason, as well it is tied to chassis ground internally). Secondly, the cabinets themselves should be grounded as is the case in any proper facility. By

Re: [c-nsp] Leaking specific routes from a VRF

2009-09-01 Thread Ramcharan, Vijay A
You should be able to use an export map, apply a specific route-target to the desired prefixes and add that specific rt to the destination VRF. Vijay Ramcharan, CCIE #14824 (RS/SP), CCDP. Net. Eng., Verizon Business - ITSGD. C: 917-821-8009. -Original Message- From: cisco-nsp-boun..

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Sure, but what the proper grounding is? Does it mean that I have to run a dedicated grounding wire to every piece of equipment? The racks are properly grounded (according to provider) and every server is screwed to them. The power is provided via NEMA L5-20P twisted lock connecter with proper g

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Justin Shore
Michael Ulitskiy wrote: I forgot to mention that after the 1st wave of failures we have installed tripp lite surge protectors on all circuits. These last failures happened with tripp lites installed, so it shouldn't be transients. The events are random. Happened during daytime, night-time, wee

Re: [c-nsp] Leaking specific routes from a VRF

2009-09-01 Thread Daniska Tomas
> > In a working MPLS VPN scenario, is it possible to import and export > specific > routes between different VRFs? > You can use a VRF-level export maps to filter on export or to assign prefix-specific RTs. You can use import maps to filter specific prefixes on import. Which suits you better d

Re: [c-nsp] Monitoring CPU usage on a Sup720-3BXL (BGP)

2009-09-01 Thread Richard A Steenbergen
On Tue, Sep 01, 2009 at 02:10:22PM -0400, Drew Weaver wrote: > Hey there, > > We've probably all seen this issue before, with BGP scanner eating up > a large amount of CPU time on a powerful supervisor/route processor, > etc. My question is, how are you supposed to accurately monit

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Mark Kent
>> Check out http://en.wikipedia.org/wiki/Zinc_whiskers and Google for >> "zinc whiskers". Or, just as useful to you, check out new-ish research results: http://blogs.physicstoday.org/update/2009/05/how-tin-whiskers-grow.html Note that it is in-plane strain *gradients* that lead to the whisker

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Justin Shore
Michael Ulitskiy wrote: As for grounding lug I would gladly add it to 6500 chassis if that was the only problem. Running it to every piece of equipment which count about 50 pieces at the moment wouldn't be fun at all... Doh... I hate to say it, but the devices shouldn't have gone into product

[c-nsp] Leaking specific routes from a VRF

2009-09-01 Thread Bhabarnaba Das
Hi all, In a working MPLS VPN scenario, is it possible to import and export specific routes between different VRFs? For example, if I have two VRFs, VRF1 and VRF2 and I want a particular route from VRF2 in VRF1, is there a way to import that specific route without importing all other routes from

[c-nsp] Monitoring CPU usage on a Sup720-3BXL (BGP)

2009-09-01 Thread Drew Weaver
Hey there, We've probably all seen this issue before, with BGP scanner eating up a large amount of CPU time on a powerful supervisor/route processor, etc. My question is, how are you supposed to accurately monitor the performance/utilization of the system when this thing is push

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
I forgot to mention that after the 1st wave of failures we have installed tripp lite surge protectors on all circuits. These last failures happened with tripp lites installed, so it shouldn't be transients. The events are random. Happened during daytime, night-time, weekdays, weekend. I can't

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Randy McAnally
I second transients (in other words, major voltage spikes). My previous reply stands. Good luck. -- Randy www.FastServ.com -- Original Message --- From: "Scott Granados" To: "Seth Mattinen" , Sent: Tue, 1 Sep 2009 10:39:36 -0700 Subject: Re: [c-nsp] Multiple power supply fai

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Well, they claim they have their engineers checked grounding, wiring, UPSes logs. They also claim they're doing unintrusive power circuit monitoring and so far found no problems. As for grounding lug I would gladly add it to 6500 chassis if that was the only problem. Running it to every piece o

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Scott Granados
Are these random events? Have you mapped the failures against any sort of power testing / maintenance that the provider is conducting? We used to blow power supplies in an XO facility in San Francisco and found out after some digging that their power folks were crack smokers, not professionals

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Interesting. Never heard of that. Can I ask you how you found the source of the problem and what you did to get it eliminated? Michael On Tuesday 01 September 2009 01:06:12 pm Geoffrey Pendery wrote: > Another odd-ball thing to look for, which has plagued us in a few > locations, is zinc whisker

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Randy McAnally
Move out ASAP. You're going to lose many more servers/routers before the issue is finally identified, and even more before it is remedied (if it ever is). -- Randy -- Original Message --- From: Seth Mattinen To: cisco-nsp@puck.nether.net Sent: Tue, 01 Sep 2009 10:21:26 -0700 Su

Re: [c-nsp] Troubleshooting High CPU

2009-09-01 Thread e ninja
*Response inline in italics...* On Mon, Aug 31, 2009 at 9:45 PM, David Warner wrote: > Hi - Thanks for the feedback. > > Yes - same hardware (3845), sw, config and traffic. Just deployed as > active/standby for HSRP. The chief suspect is the port channel between the > ESWs but would like to get t

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Seth Mattinen
Michael Ulitskiy wrote: > Hello, > > After a little pause it started happening again and we lost 2 more power > supplies > (this time in servers) during last week. > Can anybody advice on a good organization that could do independent power > analysis > in New York, NY? > Thank you, > Unfortu

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Geoffrey Pendery
Another odd-ball thing to look for, which has plagued us in a few locations, is zinc whiskers. You mention physically moving to a new colo provider, and that your power is supposed to be clean... We've had repeated power supply failures because of zinc whiskers in a few of our sites. Check out htt

Re: [c-nsp] interfaces flapping QinQ and/or spanning tree

2009-09-01 Thread David Barak
Hi Bruno, Here's a possibility - some vendors implementations of NIC redundancy in a virtualization environment require the use of non-burned-in NICs. If the servers are built offline, the automatic MAC address assignment can (and will) pick duplicate NICs. The solutions are to either build

Re: [c-nsp] Multiple power supply failures. Advise needed

2009-09-01 Thread Michael Ulitskiy
Hello, After a little pause it started happening again and we lost 2 more power supplies (this time in servers) during last week. Can anybody advice on a good organization that could do independent power analysis in New York, NY? Thank you, Michael On Friday 14 August 2009 09:56:00 pm you w

[c-nsp] NAT Ager CPU Usage

2009-09-01 Thread Philip Davis
Hello, I have a 2621XM that is using more CPU on the NAT aging process that I would expect. At this moment that process is sitting around 15% with ~1700 entries in the NAT translation table. In comparison I have other 2621XMs at other sites doing 2500+ NAT translations where the NAT ager pro

[c-nsp] spurious NAT "disconnects"

2009-09-01 Thread Jeff Bacon
I have a TAC case open for this, but I'll throw it out to the crowd as well. Cat6500, dual-sup720-3B, SXH4. Two linecards - a 6748-GE-TX (no DFC) and a 6816A (DFC3). The switch acts as a "vendor nexus" - we connect to a bunch of exchanges, and it's the gateway between us and them. Most of the t

Re: [c-nsp] ME 6514 and VPLS

2009-09-01 Thread Phil Mayers
Ray Burkholder wrote: ME6524 is able to do point-to-point Ethernet L2 circuits (EoMPLS), not point-to-multipoint (VPLS). ME6524 can be part of a H-VPLS hierarchy as a leaf, not as a node, which is very similar to do point-to-point because the multipoint decisions are made on th node. Going int

Re: [c-nsp] ME 6514 and VPLS

2009-09-01 Thread Ray Burkholder
> > ME6524 is able to do point-to-point Ethernet L2 circuits (EoMPLS), not > point-to-multipoint (VPLS). ME6524 can be part of a H-VPLS hierarchy > as a leaf, not as a node, which is very similar to do point-to-point > because the multipoint decisions are made on th node. > Going into feature na

[c-nsp] interfaces flapping QinQ and/or spanning tree

2009-09-01 Thread Bruno Filipe
Hi there,... Something Weird is happening to me...the setup is very simple (there's nothing fancy) but for some reason I do have my switch ports flapping all the time and due to the fact the spanning tree is busy converging whenever that happens causing lot of problems... Have you guys ever fa

Re: [c-nsp] ME 6514 and VPLS

2009-09-01 Thread Rubens Kuhl
ME6524 is able to do point-to-point Ethernet L2 circuits (EoMPLS), not point-to-multipoint (VPLS). ME6524 can be part of a H-VPLS hierarchy as a leaf, not as a node, which is very similar to do point-to-point because the multipoint decisions are made on th node. Rubens On Tue, Sep 1, 2009 at

[c-nsp] ME 6514 and VPLS

2009-09-01 Thread Alain RICHARD
Is it extremly difficult to find information about VLPS support on cisco products. I would like to build some VPLS configuration and I would like to know what kind of VPLS configuration the ME 6524 is able to support. The product brochure indicates "Support H-VPLS architecture, with L2 ac

Re: [c-nsp] some WCCP questions

2009-09-01 Thread Dracul
Hi, Followup question regarding WCCP. How long does it take to refresh cached data in squid? Will wccp be able to detect if the cached data is already a few hours old? Lets say for news websites that are cached. Thanks! regards, Chris On Tue, Sep 1, 2009 at 3:36 PM, Dracul wrote: > Thanks adr

Re: [c-nsp] dampening for VPNv4

2009-09-01 Thread Ben Steele
Are you referring to a BGP session between your PE and a CE or the MP-BGP session between your PE's? Either way I don't think aggressive dampening is a good idea and is just a bandaid to the real underlying problem, you have instability inside your vrf's IGP, this may be due to link flapping, poor

Re: [c-nsp] instabilities with SXI2?

2009-09-01 Thread Phil Mayers
Alan Buxey wrote: Hi, Daniska Tomas wrote: TAC was pretty responsive, they have identified this as CSCtb27643. It happens in SXI2, both modular and monolithic, and whether in VSS or not, just when DFCs are in place. The ddts is not public so ask your local team. FWIW we just ran into this; TAC

Re: [c-nsp] instabilities with SXI2?

2009-09-01 Thread Alan Buxey
Hi, > Daniska Tomas wrote: >> TAC was pretty responsive, they have identified this as CSCtb27643. >> It happens in SXI2, both modular and monolithic, and whether in VSS >> or not, just when DFCs are in place. The ddts is not public so ask >> your local team. > > FWIW we just ran into this; TAC told

Re: [c-nsp] instabilities with SXI2?

2009-09-01 Thread Phil Mayers
Daniska Tomas wrote: TAC was pretty responsive, they have identified this as CSCtb27643. It happens in SXI2, both modular and monolithic, and whether in VSS or not, just when DFCs are in place. The ddts is not public so ask your local team. FWIW we just ran into this; TAC told me SXI2a would be

Re: [c-nsp] slow down VTY speed

2009-09-01 Thread Gert Doering
Hi, On Mon, Aug 31, 2009 at 11:56:41PM -0700, Tony wrote: > We have the situation that when RANCID grabs a config from an > older 7204 with NPE-300 it causes the CPU to hit 100% for a long > 4-5 seconds, which is long enough for OSPF with 1 second hello-interval > to time out and declare neighbour

Re: [c-nsp] some WCCP questions

2009-09-01 Thread Dracul
Thanks adrian, >That takes time - the WCCPv2 router will take a while to time out the >now-unreachable server. It would be possible to hack in some code to try >sending a last "gasping breath" packet to the WCCPv2 router to say the >cache is about to disappear, but it won't save existing connectio

Re: [c-nsp] slow down VTY speed

2009-09-01 Thread Pierfrancesco Caci
:-> "Tony" == Tony writes: > Hi all, > I'm wondering if there is a way to slow down the speed of VTY (telnet) sessions on a Cisco router ? > We have the situation that when RANCID grabs a config from an > older 7204 with NPE-300 it causes the CPU to hit 100% for a long > 4-

[c-nsp] slow down VTY speed

2009-09-01 Thread Tony
Hi all, I'm wondering if there is a way to slow down the speed of VTY (telnet) sessions on a Cisco router ? We have the situation that when RANCID grabs a config from an older 7204 with NPE-300 it causes the CPU to hit 100% for a long 4-5 seconds, which is long enough for OSPF with 1 second he

Re: [c-nsp] some WCCP questions

2009-09-01 Thread Adrian Chadd
On Tue, Sep 01, 2009, Dracul wrote: > Hi List, > > I'm planning to setup WCCP + Squid. Hi! > If the squid server should be offline or the squid process dies, will the > users? port 80 requests automatically redirect to the ?live? internet > connection?? Yes! > Because in old "forced" redirecti