Re: [c-nsp] IOS 15.0 - why the numbering jump?

2009-10-05 Thread Mark Tinka
On Monday 05 October 2009 10:20:13 am Matthew Marlowe wrote: Peter, Someone on twitter said that Asian culture has a phobia of the number 14,... off-topic Well, to be exact, the Chinese are generally superstitious of the number 4. That includes anything that has a 4 in it, e.g., 14, 24,

Re: [c-nsp] IOS 15.0 - why the numbering jump?

2009-10-05 Thread Alan Buxey
Hi, Conversely, 8 is considered to be associated with good luck and fortune. ...and whilst we dont have such superstitions in the Western world life might be better if we did.. ASA 8.x, RedHat 8.x, IE 8.x, SUSE 8.x and IOS 12.2-SXF8 all spring to mind ;-) alan

Re: [c-nsp] IOS 15.0 - why the numbering jump?

2009-10-05 Thread Mark Tinka
On Monday 05 October 2009 05:09:59 pm Alan Buxey wrote: ... SUSE 8.x... SuSE 8.2 was actually very good - it's been downhill ever since, although I'm still a loyal follower :-). Okay, really going off-topic now :-). Cheers, Mark = who's running openSuSE-11.1 over VMware Fusion 2.0.5

Re: [c-nsp] SUP720 - 12.2(18)SXF17

2009-10-05 Thread Alan Buxey
Hi, But yes, splurging a 30gig hard-disk image out over multicast with TTL=1 on the packets will definitely cause TTL-exceeded problems ;o) bonus points++ for the application using a global multicast address too. nice. alan ___ cisco-nsp mailing

Re: [c-nsp] SUP720 - 12.2(18)SXF17

2009-10-05 Thread Alan Buxey
Hi, Not to fault Cisco, or anyone else for that matter but shouldn't switches that cost a quarter of a million dollars be able to protect themselves from these sorts of things just as a default? turn off multicast for that VLAN - its its TTL=1 then it didnt really want to multicast anyway -

Re: [c-nsp] SUP720 - 12.2(18)SXF17

2009-10-05 Thread Phil Mayers
Alan Buxey wrote: Hi, Not to fault Cisco, or anyone else for that matter but shouldn't switches that cost a quarter of a million dollars be able to protect themselves from these sorts of things just as a default? turn off multicast for that VLAN - its its TTL=1 then it didnt really want to

[c-nsp] Monitoring HTTP / url access @10gig

2009-10-05 Thread Phil Mayers
We currently monitor web access from our campus with a VACL capture, picked up by a server-class machine with a 10gig port. Hardware is sup720, and our internet links are 10gig, doing well over 1gbit/sec. For various reasons this solution is unsatisfactory; the VACL doesn't work well and

Re: [c-nsp] Monitoring HTTP / url access @10gig

2009-10-05 Thread Ge Moua
We beta tested the GigaMon platform and for the most part it does what it claims it can do; basically takes a span feed and fans it out for analysis; in the end it was just too $$pricey$$ ( ~$100K USD); seems like the target mkt are carriers and large service providers. Our OITSecurity group

Re: [c-nsp] Monitoring HTTP / url access @10gig

2009-10-05 Thread Phil Mayers
Ge Moua wrote: We beta tested the GigaMon platform and for the most part it does what it claims it can do; basically takes a span feed and fans it out for analysis; in the end it was just too $$pricey$$ ( ~$100K USD); seems like the target mkt are carriers and large service providers. Our

Re: [c-nsp] Monitoring HTTP / url access @10gig

2009-10-05 Thread Ge Moua
I'm a bit surprise you were not able to match on IPv6 addresses; will something like this get any IPv6 traffic at all? ipv6 access-list IPv6-Sample-ACL permit ipv6 any any To answer your question: current: * Vlan based SPANs, with edge feed on dot.1q trunk; this allows for poor man

Re: [c-nsp] Monitoring HTTP / url access @10gig

2009-10-05 Thread Phil Mayers
Ge Moua wrote: I'm a bit surprise you were not able to match on IPv6 addresses; will something like this get any IPv6 traffic at all? It's complicated, but seemingly the 6500 won't VACL-capture IPv6 traffic which it's also routing. It could be a bug, but as I say we've had other problems

Re: [c-nsp] Monitoring HTTP / url access @10gig

2009-10-05 Thread Ge Moua
What code are you running on the Sup720 (3bxl ? I assume) ?? Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking Telecommunications Services Phil Mayers wrote: Ge Moua wrote: I'm a bit surprise you were not able to match on IPv6

Re: [c-nsp] Monitoring HTTP / url access @10gig

2009-10-05 Thread Phil Mayers
Ge Moua wrote: What code are you running on the Sup720 (3bxl ? I assume) ?? 12.2(33)SXI, but we've seen other problems on other versions; I don't have an exhaustive list, to hand. The config is something along the lines of: vlan access-map v6_Capture 10 match mac address PERMIT_ANY

Re: [c-nsp] sliding window quota

2009-10-05 Thread chip
There's also the Citrix Wan Scaler appliance (old Orbital Data) and the offering from Asankya. -- Just my $.02, your mileage may vary, batteries not included, etc ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Jeff Bacon
If you want to cut delay for switching, you may want to consider the new top-of-rack 10G boxes, which are typically cut-through. You may find I'm thinking about that for within the datacenter. It's hard finding a justification for the C-vendor's products though - a N7 is just too much, and I

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Nick Hilliard
On 05/10/2009 15:35, Jeff Bacon wrote: Admittedly, for the cost, I can buy an arista 1U for wave passthru and just tap multiple 1Gs over to the 6500. Aristas use SFP+. Good luck running colours over them. :-) Actually, Optoway in Taiwan produce CWDM SFP+ transceivers. I don't know anyone

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Azher Mughal
In order to use SFP+ from other vendors in Arista, you need to get them enabled first. -Azher Nick Hilliard wrote: On 05/10/2009 15:35, Jeff Bacon wrote: Admittedly, for the cost, I can buy an arista 1U for wave passthru and just tap multiple 1Gs over to the 6500. Aristas use SFP+. Good

[c-nsp] Invitation to connect on LinkedIn

2009-10-05 Thread Zahid Hassan
LinkedIn Zahid Hassan pidió añadirte como contacto en LinkedIn: -- Sebastián, I'd like to add you to my professional network on LinkedIn. - Zahid Aceptar invitación de Zahid Hassan

Re: [c-nsp] Invitation to connect on LinkedIn

2009-10-05 Thread Alex Balashov
Fail. Zahid Hassan wrote: LinkedIn Zahid Hassan pidió añadirte como contacto en LinkedIn: -- Sebastián, I'd like to add you to my professional network on LinkedIn. - Zahid Aceptar invitación de Zahid Hassan

[c-nsp] does PBR apply to traffic from connected interfaces to router itself?

2009-10-05 Thread Tassos Chatzithomaoglou
I'm doing some tests and i have a case where a vpdn user is able to send snmp requests to the router's loopback where he's connected, although i have a route-map under his vtemplate sending all snmp to null0. I have verified that snmp cannot go outside of router (so route-map is indeed

Re: [c-nsp] Invitation to connect on LinkedIn

2009-10-05 Thread Jay Hennigan
Alex Balashov wrote: Fail. Fail indeed. Why anyone would provide their email password to sites which guarantee to spam every address they can find 1s surprising. Why anyone on this list would do so is mind-boggling. -- Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net

Re: [c-nsp] Enclosed rack with filtered air

2009-10-05 Thread jp
A minor reconfiguration to positive pressure would prevent dust from getting sucked in. Put the filter on the bottom, then the fan drawing air through the filter, then it will create a small pressure inside the cabient, keeping dust out, except that which might leak through or around the

[c-nsp] Invitation to connect on LinkedIn

2009-10-05 Thread Inder Rishi Singh Kochar
LinkedIn Inder Rishi Singh Kochar pidió añadirte como contacto en LinkedIn: -- Sebastián, I'd like to add you to my professional network on LinkedIn. - Inder Rishi Singh Aceptar invitación de Inder Rishi Singh Kochar

Re: [c-nsp] facebook related

2009-10-05 Thread jp
Which Cisco router are you? [obnoxious moving graphics] Congratulation; You are the 7500 series; you are power hungry, warm, impressive looking, and traditional. Watch out; Geeks are attracted to your pretty color and impressive presence. See what routers your friends are. If you want to know

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Richard A Steenbergen
On Mon, Oct 05, 2009 at 04:06:31PM +0100, Nick Hilliard wrote: Depends on what you do with them. They are a first generation blade, and are 6yo technology at this stage and, well, things have moved on since 2003. XENPAK is moribund as a transceiver type which means that any money you

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Jeff Bacon
Don't forget they are absurdly under-buffered (16MB per card, compared to 256MB for 6708), and you can easily cause head of line blocking with certain traffic profiles. If you want to run anywhere close to line rate on them you need to monitor for drops or overruns and be prepared to play the

Re: [c-nsp] Will UDLD work with converters ?

2009-10-05 Thread Justin Shore
Mark Tinka wrote: We've seen strange issues with converters were providers were unable to guarantee Jumbo frame MTU sizes because the media converters don't support them - what the hell... This happened to me with Versitron MCs. I had a set in production that worked perfectly fine. Then

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Richard A Steenbergen
On Mon, Oct 05, 2009 at 03:47:05PM -0500, Jeff Bacon wrote: Well that's wonderfully comforting. Though I really probably only need two ports anyway - ring-in and ring-out. Maybe not so bad. I'd consider a 720-VS-10G head if I had some confidence that those two ports on the sup were actually

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Tim Durack
Well that's wonderfully comforting. Though I really probably only need two ports anyway - ring-in and ring-out. Maybe not so bad. I'd consider a 720-VS-10G head if I had some confidence that those two ports on the sup were actually connected to the fabric. The 10Gig ports on the VS-S720 are

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Tim Durack
We've selected the 6708 for our 10Gig installs. DFCs and good sized buffers. Lots of availability on the used market. Can be run in line-rate or over-subscribed mode, which might suit your deployment. I have hopes for SFP+ linecards to drive 10Gig costs down, but I don't think much is going to

Re: [c-nsp] DWDM optics on 6500s

2009-10-05 Thread Mark Tinka
On Monday 05 October 2009 11:06:31 pm Nick Hilliard wrote: As I said, it depends on what you want to do. If you're running just a couple of gigs and don't care about the broadcast traffic problem or, say, are using them for L3 traffic instead of L2, then they are great. Similarly, the

Re: [c-nsp] does PBR apply to traffic from connected interfaces to router itself?

2009-10-05 Thread Vincent C Jones
On Mon, 2009-10-05 at 22:49 +0300, Tassos Chatzithomaoglou wrote: I'm doing some tests and i have a case where a vpdn user is able to send snmp requests to the router's loopback where he's connected, although i have a route-map under his vtemplate sending all snmp to null0. I have