[c-nsp] AUDIT

Dear Group, I have been assigned to do AUDIT ( LAN / WAN ) for a NETWORK comprising of devices 2950 , 3750 , 4500 , 2800 , 2600 , 7206 VXR . Please advice which commands showuld I need to conectrate more and check outputs for making audit report Thanks and Regards

Re: [c-nsp] Problem encountered while securing NTP

Kevin Graham wrote: CSCsw79186. Its broken more than the bug suggests; both v3 and v4 clients are get applied only to the 'peer' access-group. I had meant to bring this to PSIRT's attention when the advisory went out, but got distracted by something shiny. Excellent catch. I tried to search

Re: [c-nsp] AUDIT

nipper and rat (router audito tool) El mié, 07-10-2009 a las 13:20 +0530, jack daniels escribió: Dear Group, I have been assigned to do AUDIT ( LAN / WAN ) for a NETWORK comprising of devices 2950 , 3750 , 4500 , 2800 , 2600 , 7206 VXR . Please advice which commands showuld I need to

[c-nsp] ME3400 - Priority Queue

Hi, From the following command I can see the egress priority queue is disabled on the port sh platform qos debug interface g0/12 queueing GigabitEthernet0/12 Egress Priority Queue : disabled Shaped queue weights (absolute) : 332 0 0 0 Shared queue weights : 0 255 255 1 The port bandwidth

Re: [c-nsp] AUDIT

jack daniels wrote: I have been assigned to do AUDIT ( LAN / WAN ) for a NETWORK comprising of devices 2950 , 3750 , 4500 , 2800 , 2600 , 7206 VXR . Please advice which commands showuld I need to conectrate more and check outputs for making audit report If you are a bit more specific about

Re: [c-nsp] GSR CPU Process is very HIGH 95%

bharath kondi wrote on Wednesday, October 07, 2009 14:32: Hi All, I am seeing a strange thing in our GSR 12000, CPU process reached 95%. Below is the findings, can anyone help me ASAP. The highest usage is Net Input. What is Net Input? Please help me guys. Thanks in advance.

Re: [c-nsp] GSR CPU Process is very HIGH 95%

Dear Oliver, No. Thanks. Bharath Kondi On Wed, Oct 7, 2009 at 8:57 PM, Oliver Boehmer (oboehmer) oboeh...@cisco.com wrote: bharath kondi wrote on Wednesday, October 07, 2009 14:32: Hi All, I am seeing a strange thing in our GSR 12000, CPU process reached 95%. Below is the

Re: [c-nsp] GSR CPU Process is very HIGH 95%

Thanks Oliver. My problem solved. I was disconnecting each and every cable connected to GSR and check the process and found one unwanted cable connecting and generating traffic. Now everything back to normal. Thanks for your support. Regards, Bharath Kondi On Wed, Oct 7, 2009 at 8:57 PM, Oliver

Re: [c-nsp] GSR CPU Process is very HIGH 95%

bharath kondi mailto:bluffmaster4hea...@gmail.com wrote on Wednesday, October 07, 2009 15:10: are you switching traffic across the PRP/GRP's Management Ethernet ports? Those must only be used for management, i.e. traffic from/to the GSR .. Dear Oliver, No. hmm, your

Re: [c-nsp] Cisco 3750 Stack less disruptive EtherChannel configuration

well, in cross-stack etherchannel, the only supported protocol is LACP, not mode on Jauhen. luismi wrote: Hi, We had a problem with a stack 3750 here and the configuration is.. Stack (2x3750) === FEC === SW 2960 It is a cross etherchannel configuration. 3750 is not working with L3 mode at

Re: [c-nsp] Cisco 3750 Stack less disruptive EtherChannel configuration

Jauhen, Manual etherchannels using mode on are supported, but can cause the issues that the OP reported. http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_example09186a00806cb982.shtml#stack -ryan -Original Message- From: cisco-nsp-boun...@puck.nether.net

[c-nsp] Anomaly Detection Module/Anomaly Guard Module

I was wondering if anyone has any experience working with the Cisco ADM AGM modules for the 6500s and how they compare with external appliance based solutions for DDoS mitigation. Anyone have any opinions on these? It seems like it would be nice to just drop these into a few systems but I'm

Re: [c-nsp] GSR CPU Process is very HIGH 95%

Lasher, Donn mailto:dlas...@newedgenetworks.com wrote on Wednesday, October 07, 2009 17:08: -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Oliver Boehmer (oboehmer) Sent: Wednesday, October 07, 2009 6:22 AM To:

Re: [c-nsp] GSR CPU Process is very HIGH 95%

-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Oliver Boehmer (oboehmer) Sent: Wednesday, October 07, 2009 6:22 AM To: bharath kondi Cc: BHARATH KONDI; bhar...@vtelecoms.com.my; cisco-nsp@puck.nether.net Subject: Re:

Re: [c-nsp] GSR CPU Process is very HIGH 95%

Dear All, It is a Tagged port connecting to our multi layer switch, where we tagged so many vlans which is not needed (This port is configured for IBGP with a dot1q vlan on GSR, and the other side multilayer switch allowing so many vlans, this is configured by earlier engineer, right now we are

[c-nsp] Cisco 3400 port shaping message limitation

Hello all, I was in the middle of the configuration of ME-3400-24TS-A (12.2(50)SE1) for port-shaping and run into interesting message: censw(config-if)#! censw(config-if)#! censw(config-if)#interface FastEthernet0/12 censw(config-if)#service-policy output UNI-out-internet-1024kbps

Re: [c-nsp] GSR CPU Process is very HIGH 95%

Bharath, Several things can cause RP (or LC) CPU spike at interrupt level. What does a 'sh align', 'sh int stat', 'sh ver' and 'sh diag summ' say? If they reveal no clues, you may have to profile the CPU. Oli, Contact TAC should probably be re-phrased to say contact your maintenance

Re: [c-nsp] GSR CPU Process is very HIGH 95%

Lasher, Donn wrote: To clarify, this depends on both the card type (engine 0/1/2/3/4/5) and traffic type (mpls, DSCP marking, etc). You can be doing everything right, and still have 50% CPU with the wrong combination of those two.. (For example, MPLS Labeling and Engine0 GIG-E card at 100M of

Re: [c-nsp] So when is IPv6 failover coming to the ASA?

On Mon, 28 Sep 2009, Nick Hilliard wrote: On 28/09/2009 18:13, Abello, Vinny wrote: I don't care so much at this point if it fails over or not. If I were to configure it, would it at least work as far as passing the traffic? I thought I read early on that it would cause a conflict between

[c-nsp] Unable To Use T3 Card (PA-MC-2T3-EC)

Hi Everyone: I am trying to install a Cisco T3 Card, Model #: PA-MC-2T3-EC, on a Cisco 7206VXR with NPE-G2. When I insert the card, I get the alarm below. Oct 7 18:11:45.100: %ENTITY_ALARM-6-INFO: CLEAR CRITICAL PA Slot 2 Active Card Removed OIR Alarm Oct 7 18:11:50.220:

Re: [c-nsp] SUP720 - 12.2(18)SXF17

On Mon, Oct 5, 2009 at 5:43 AM, Phil Mayers p.may...@imperial.ac.uk wrote: mls rate-limit all ttl-failure 100 10 mls rate-limit all mtu-failure 100 10 There's no reason not to have the TTL failure rate limit enabled AFAIK. Choose a value appropriate to you, obviously. One gotcha here is

Re: [c-nsp] Unable To Use T3 Card (PA-MC-2T3-EC)

I am currently running (C7200P-SPSERVICESK9-M), Version 12.4(4)XD10 Dominic - Original Message - From: Byrd, William w...@thoughtcrime.net To: Dominic domi...@broadconnect.ca Sent: Wednesday, October 07, 2009 3:26 PM Subject: Re: [c-nsp] Unable To Use T3 Card (PA-MC-2T3-EC) What

[c-nsp] Anyone Running SXI2a on 6500 Sup720-3BXL

All: Anyone running 12.2(33)SXI2a on a 6500 Sup720-3BXL? We are looking at installing it on our systems and wanted to see if it has any field exposure. Features include: OSPFv2 BGP HSRP 10G interfaces Rapid STP CoPP SVIs Monitor sessions We are also planning to implement IPv6 and related

Re: [c-nsp] GSR CPU Process is very HIGH 95%

-Original Message- From: Pete Templin [mailto:peteli...@templin.org] Subject: Re: [c-nsp] GSR CPU Process is very HIGH 95% Lasher, Donn wrote: To clarify, this depends on both the card type (engine 0/1/2/3/4/5) and traffic type (mpls, DSCP marking, etc). You can be doing everything

Re: [c-nsp] GSR CPU Process is very HIGH 95%

On Wed, Oct 7, 2009 at 2:01 PM, Lasher, Donn dlas...@newedgenetworks.comwrote: -Original Message- From: Pete Templin [mailto:peteli...@templin.org] Subject: Re: [c-nsp] GSR CPU Process is very HIGH 95% Lasher, Donn wrote: To clarify, this depends on both the card type (engine

Re: [c-nsp] Problem encountered while securing NTP

Hello, Cisco PSIRT will be amending the NTP advisory to reflect the encountered bug, update should be available in about 24 hours. CSCsw79186 will be available in 12.4(24)T2, which according to our knowledge, should be available for download on Cisco.Com mid-October/2009. It is