Re: [c-nsp] ibgp TTL

2009-10-14 Thread JC Cockburn
Hi, What about simple acl on the non-mpls interfaces blocking bgp from loopback of ibgp src -> loopback of ibgp dest? Am I missing the boat completely? I know you don't want acl's on any core intf's, but if you want funny solutions you might have to do funny stuff... Cheers ;-) -Original Me

Re: [c-nsp] IPv6 on ME3400

2009-10-14 Thread Brad Henshaw
Dale W. Carder wrote: >On Oct 14, 2009, at 10:03 PM, ML wrote: >> I've got a customer that *needs* a 1-2 RU router that handles IPv6 in >> hardware. > Make sure what you want to do fits in the "sdm profile". > Carving up tcam for ipv6 steals from other areas like mac addrs, vlans, v4 routes and s

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Oliver Boehmer (oboehmer)
> How about explicit path TE with no autoroute announce (and only statics > for these dedicated iBGP loopbacks?) well, if the only path to the destination is through the "non-MPLS part of the network", there will be no TE path available. so the tunnel will go down and the statics go away, and IG

Re: [c-nsp] Flexwan module - Memory

2009-10-14 Thread Kevin Graham
> My doubt are 1. whether these cwan1/0-disk0: and cwan1/1-disk0: are builtin > flash modules on Flexwan module? Yes. > 2. if so can i upload my IOS in those modules No. FlexWAN (as with all linecards) boots after the MSFC/Sup. Its devices are inaccessible from either Sup or MSFC ROMMON. > be

Re: [c-nsp] IPv6 on ME3400

2009-10-14 Thread Łukasz Bromirski
On 2009-10-15 05:54, ML wrote: Speaking of uRPF does anyone have it working at all on the ME3400. I've yet to find a working configuration. Far as I can tell Cisco said they had it but never delivered. The hardware on ME3400 is not capable to perform uRPF check. Making it in software would be

Re: [c-nsp] Flexwan module - Memory

2009-10-14 Thread Sony Scaria
Thanks a lot Kevin, one more doubt pls, then what is the purpose of Flash in Flexman? Rgds/ Sony On Thu, Oct 15, 2009 at 9:48 AM, Kevin Graham < kgra...@industrial-marshmallow.com> wrote: > > > > > > My doubt are 1. whether these cwan1/0-disk0: and cwan1/1-disk0: are > builtin > > flash modules

Re: [c-nsp] IPv6 on ME3400

2009-10-14 Thread ML
Dale W. Carder wrote: On Oct 14, 2009, at 10:03 PM, ML wrote: I've got a customer that *needs* a 1-2 RU router that handles IPv6 in hardware. I know the 3650/3750 can handle but I only need at most 4 SFP ports. The ME-3400G-2CS-A is perfect. However I know IPv6 was just added to this platfo

Re: [c-nsp] IPv6 on ME3400

2009-10-14 Thread Dale W. Carder
On Oct 14, 2009, at 10:03 PM, ML wrote: I've got a customer that *needs* a 1-2 RU router that handles IPv6 in hardware. I know the 3650/3750 can handle but I only need at most 4 SFP ports. The ME-3400G-2CS-A is perfect. However I know IPv6 was just added to this platform. Can anyone conf

[c-nsp] Flexwan module - Memory

2009-10-14 Thread Sony Scaria
I noticed the following on my cisco 6509E, Switch02#dir ? /all List all files /recursive List files recursively all-filesystems List files on all filesystems bootflash: Directory or file name const_nvram: Directory or file name cwan1/0-disk0: Directory or

[c-nsp] IPv6 on ME3400

2009-10-14 Thread ML
I've got a customer that *needs* a 1-2 RU router that handles IPv6 in hardware. I know the 3650/3750 can handle but I only need at most 4 SFP ports. The ME-3400G-2CS-A is perfect. However I know IPv6 was just added to this platform. Can anyone confirm the quality of IPv6 functionality on th

Re: [c-nsp] L2TP LNS issue

2009-10-14 Thread Patrick Cole
Dave, Negative - the ppp doesn't even get to IPCP stage and defaultroute is not turned on. On another note, I tested a cisco and the LAC and it's working fine with the same config so must be something with pppd/xl2tpd. I've used this config before with l2tpns but never tried with IOS before. Not

Re: [c-nsp] Es20+ card and licensing question

2009-10-14 Thread Dale Shaw
Hi Andy, On Thu, Oct 15, 2009 at 6:01 AM, Webster, Andy wrote: > Hi, >        I'm looking at the ES20+ cards for 7600s and I am confused by > the licensing options.  There are two license options 76-ES+BASIC and > 76-ES+ADVIP.  Do I need to purchase one of these two options for each > ES20+ card

Re: [c-nsp] monitoring switch stacks

2009-10-14 Thread Kevin Graham
> just wondered what folk did out there to monitor switch stacks > (eg stackwise+ switch stacks like 3750e, 2975gs etc (not the older > gigastack ones) ) - using the basic methods such as ICMP will > only show the presence of connectivity to the stack but not the > actual health of the stack -

Re: [c-nsp] monitoring switch stacks

2009-10-14 Thread Ge Moua
Dale, are you guys monitoring queue drops on the edge switches like a Cisco 3750? If so, I'm thinking the OID will be slightly different? Thanks for the reply ! Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking & Telecommunications Servic

Re: [c-nsp] monitoring switch stacks

2009-10-14 Thread Dale W. Carder
Hey Ge! We monitor for input queue drops on 6500's with this oid: .1.3.6.1.4.1.9.9.276.1.1.1.1.10 Our alert for the NOC is drops > 100/sec results in a major alarm. Usually it's something stupid happening on a given vlan that needs to be beat down. For SVI's, this goes hand in hand with punt

[c-nsp] Es20+ card and licensing question

2009-10-14 Thread Webster, Andy
Hi, I'm looking at the ES20+ cards for 7600s and I am confused by the licensing options. There are two license options 76-ES+BASIC and 76-ES+ADVIP. Do I need to purchase one of these two options for each ES20+ card or is it possible to run the card without either license? Is each license

Re: [c-nsp] monitoring switch stacks

2009-10-14 Thread Ge Moua
Dale Carder- Are you guys also monitoring queue drops on the interfaces too; if so can you forward me the OID? Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking & Telecommunications Services Dale W. Carder wrote: On Oct 14, 2009, at 1:

Re: [c-nsp] monitoring switch stacks

2009-10-14 Thread Dale W. Carder
On Oct 14, 2009, at 1:19 PM, Alan Buxey wrote: just wondered what folk did out there to monitor switch stacks (eg stackwise+ switch stacks like 3750e, 2975gs etc (not the older gigastack ones) ) - using the basic methods such as ICMP will only show the presence of connectivity to the stack

[c-nsp] monitoring switch stacks

2009-10-14 Thread Alan Buxey
hi, just wondered what folk did out there to monitor switch stacks (eg stackwise+ switch stacks like 3750e, 2975gs etc (not the older gigastack ones) ) - using the basic methods such as ICMP will only show the presence of connectivity to the stack but not the actual health of the stack - eg on

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Manu Chao
Thank you Oli, OSPF stub area or IS-IS Level 1 was the better option compared to ACL on the non-MPLS router because routing control stay under MPLS backbone control Increasing metric is useless because non MPLS path must NEVER be used On Wed, Oct 14, 2009 at 6:44 PM, Oliver Boehmer (oboehmer) <

[c-nsp] ASA5520 IPSEC and windows mobile?

2009-10-14 Thread Scott Granados
Hi, Has anyone successfuly configured the ASA5520 to accept VPN connections from windows mobile 6.1 devices? I can't figure out how to define a tunnel-group and google results aren't helping much. I saw one example where you put the username/tunnel so something like sgranados/internal-is-ac

Re: [c-nsp] ASN statistic tools

2009-10-14 Thread Paolo Lucente
Hi, You can certainly have a look to the following page which captures a number of NetFlow collector packages (free and commercial) available around. I'm sure most of them are supporting ASNs: http://www.switch.ch/network/projects/completed/TF-NGN/floma/software.html If you are looking at someth

Re: [c-nsp] ibgp TTL

2009-10-14 Thread David Freedman
How about explicit path TE with no autoroute announce (and only statics for these dedicated iBGP loopbacks?) > Manu, > >> More detail: >> >> I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with >> IS-IS L2 or OSPF area 0 as IGP. >> >> This IGP is extended to some non MPLS r

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Oliver Boehmer (oboehmer)
Manu, > More detail: > > I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with > IS-IS L2 or OSPF area 0 as IGP. > > This IGP is extended to some non MPLS routers X. > > In some backbone links failure, IGP allow MP-iBGP to stay UP via X links > (non MPLS). > > This specifi

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Manu Chao
I am running IS-IS :( This feature is not yet supported but it is a good option Thanks for your input On Wed, Oct 14, 2009 at 6:33 PM, David Freedman wrote: > Manu Chao wrote: > > Oli, > > > > More detail: > > > > I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks > with > >

Re: [c-nsp] ibgp TTL

2009-10-14 Thread David Freedman
Manu Chao wrote: > Oli, > > More detail: > > I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with > IS-IS L2 or OSPF area 0 as IGP. > > This IGP is extended to some non MPLS routers X. > > In some backbone links failure, IGP allow MP-iBGP to stay UP via X links > (non MPLS

Re: [c-nsp] 3560 buffering

2009-10-14 Thread joshua sahala
jeff, at a previous employer, all the cisco 3750/3560 switches were scrapped and replaced with 4948s or f10 s50n. the f10 had one of the worst ncurses interfaces i've seen (but, now that they run sftos, the cli is markedly improved). the buffer sizes on the small form-factor cisco switches are t

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Manu Chao
Oli, More detail: I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with IS-IS L2 or OSPF area 0 as IGP. This IGP is extended to some non MPLS routers X. In some backbone links failure, IGP allow MP-iBGP to stay UP via X links (non MPLS). This specific IGP design introduce

[c-nsp] Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities

2009-10-14 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Advisory ID: cisco-sa-20091014-cup Revision 1.0 For Public Release 2009 October 14 1600 UTC (GMT

Re: [c-nsp] file transfer

2009-10-14 Thread Gary T. Giesen
ttcp is also an option. It's a hidden command in most IOS platforms/releases, and allows you to test TCP throughput. There's also a UNIX version you can use to test between a router and a unix box or between unix boxes. You can google for the code.. On Wed, Oct 14, 2009 at 4:42 AM, Garry wrote: >

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Marko Milivojevic
On Wed, Oct 14, 2009 at 12:10, Oliver Boehmer (oboehmer) wrote: > yes, only supported for ebgp. Would be interested about the "very > specific design" and why Manu requires this functionality? I'm not sure what Manu has in mind, but I had a need to use similar feature to prevent iBGP working over

Re: [c-nsp] mls qos on 7600 with native vlan and MPLS

2009-10-14 Thread Jerome Durand
For all egress traffic, PFC QoS uses a configurable map to derive a CoS value from the final internal DSCP value associated with the traffic. I understand, but what if your port is native? (ie. without 802.1p, means without cos??) How does the router classify from unexisting cos? Thanks for t

Re: [c-nsp] Cisco 12416 Power Management

2009-10-14 Thread Antonio Soares
Hello Oliver, Any possibilities of 12.0(32)SY6 being affected too ? 12k2>sh ver | inc IOS IOS (tm) GS Software (C12KPRP-P-M), Version 12.0(32)SY6, RELEASE SOFTWARE (fc2) 12k2> Because the Bug you mentioned is exactly what i have: 12k2>sh diag (...) PEM 1 (AC_PWR_1): Failsafe PS [Failsafe-PE

[c-nsp] Cisco SCE RTM

2009-10-14 Thread Mohammad Khalil
hi all i have SCE 2020 with sca console 3.5.0 i installed RTM on it and all is working fine now i have another SCE with SCA console 3.5.0 (the same console version) and its 8000 series but when i try to apply the ./rtmcmd.sh with the rest of the line , i get the below error Failed to proce

Re: [c-nsp] Cisco 12416 Power Management

2009-10-14 Thread Oliver Boehmer (oboehmer)
> > I'm trying to figure out why i have this output: > > ++ > 12k2>sh env power_supply > > Failsafe power system > > Slot # 48V AMP_48 > (Volt) (Amp) > 27 PEM153 10 Failsafe-PEM= Failsafe PS this

Re: [c-nsp] mls qos on 7600 with native vlan and MPLS

2009-10-14 Thread Ольга Ружанская
Hello, > My understanding is that this queueing mode can be based only on COS > field on GE and 10/100/1000 line cards. So what will be the router > behaviour if there is no 802.Q and therefore no 802.1p During processing, PFC QoS represents the priority of all traffic (including non-IP traffic

Re: [c-nsp] L2TP LNS issue

2009-10-14 Thread David Freedman
Silly (semi-related) question, but I (hope) you are not installing a default to ppp0 on your *nix box when the session comes up, or if you are, you have a static via your main nic to the l2tp endpoint address, else you will cause the tunnel to fall down due to recursion. Dave.

Re: [c-nsp] 3560 buffering

2009-10-14 Thread Marian Ďurkovič
On Wed, Oct 14, 2009 at 06:45:32AM -0500, Jeff Bacon wrote: > > There's a fundamental clash between desktop switch design and TCP operation > > on > > recent operating systems. Switches like 3560G by default buffer 100 > > MTU-sized > > packets, i.e. something like 150 kB of data. 3560Es are even

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Oliver Boehmer (oboehmer)
yes, only supported for ebgp. Would be interested about the "very specific design" and why Manu requires this functionality? oli > AFAIK this command is for eBGP only, no? > > On Tue, Oct 13, 2009 at 10:07 PM, Matlock, Kenneth L > wrote: > > > Router bgp > > Neighbor ttl-security hop

Re: [c-nsp] 3560 buffering

2009-10-14 Thread Jeff Bacon
> There's a fundamental clash between desktop switch design and TCP operation on > recent operating systems. Switches like 3560G by default buffer 100 MTU-sized > packets, i.e. something like 150 kB of data. 3560Es are even worse, they only > buffer 64 MTU-sized packets by default (~100 kB of data)

Re: [c-nsp] BGP Backdoor Links Problem

2009-10-14 Thread Manu Chao
You needn't BGP Backdoor option Prefer BGP Communities, easier, better On Mon, Oct 12, 2009 at 4:08 AM, Fossett, Jeff S wrote: > Hi Team - figured most of you could provide a fix for the following > scenario in your sleep, so I thought I'd reach out. > We have a Primary DataCenter and a DR Facili

Re: [c-nsp] 3560 buffering

2009-10-14 Thread Peter Rathlev
On Wed, 2009-10-14 at 10:45 +0100, Mateusz Blaszczyk wrote: > On Tue, Oct 13, 2009 at 05:59:55PM +0200, Peter Rathlev wrote: > [...] > > ! Only output queue-set 1, queue 2 is used. Adjust all thresholds to > > ! 400% of default. (This is AFAIK the maximum even though the parser > > ! accepts up to

Re: [c-nsp] 3560 buffering

2009-10-14 Thread Mateusz Blaszczyk
On Tue, Oct 13, 2009 at 05:59:55PM +0200, Peter Rathlev wrote: [...] > ! Only output queue-set 1, queue 2 is used. Adjust all thresholds to > ! 400% of default. (This is AFAIK the maximum even though the parser > ! accepts up to 3200%.) > mls qos queue-set output 1 threshold 2 400 400 100 400 So m

Re: [c-nsp] ASN statistic tools

2009-10-14 Thread Gustaf Hyllested Serve
> I'm looking for utilities which allow to have ASN statistics, the netflow > tools I tried doesn't do that, any idea? take a look at NetQos ReportAnalyzer -- Gustaf Hyllested Serve ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.net

Re: [c-nsp] ibgp TTL

2009-10-14 Thread Manu Chao
AFAIK this command is for eBGP only, no? On Tue, Oct 13, 2009 at 10:07 PM, Matlock, Kenneth L wrote: > Router bgp > Neighbor ttl-security hops > > ? > > Ken Matlock > Network Analyst > Exempla Healthcare > (303) 467-4671 > matlo...@exempla.org > > > > -Original Message- > From: cisco-n

Re: [c-nsp] file transfer

2009-10-14 Thread Garry
vijay gore wrote: > dear team, > i want to check my bandwidth using file transfer please help how to do that+ Using file transfer for performance measurement is unreliable ... google iperf/jperf for decent point-2-point throughput measurement ... please note that it requires access to both the loca

Re: [c-nsp] ASN statistic tools

2009-10-14 Thread Gideon Popol
Hello , Did you tried NetFlow Analyzer http://www.manageengine.com/products/netflow/index.html they have ASN statistics Best Regards Gideon Popol gid...@gilat.net Office:   +972.3.9255039 MSN:     gidi_...@hotmail.com www.gilat.net The Winner of the “Best Satellite Service Provider 2007”

[c-nsp] file transfer

2009-10-14 Thread vijay gore
dear team, i want to check my bandwidth using file transfer please help how to do that. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] 3560 buffering

2009-10-14 Thread Marian Ďurkovič
On Wed, 14 Oct 2009 08:44:24 +0200, Gert Doering wrote > Hi, > > On Tue, Oct 13, 2009 at 07:10:24AM -0500, Jeff Bacon wrote: > > What's an output drop mean, in a 3560 context? > > Traffic too bursty, output buffers too tiny. > > > Is there a way to tell the 3560 to buffer more aggressively? The

Re: [c-nsp] ASN statistic tools

2009-10-14 Thread christian
take a look at: https://neon1.net/as-stats/as-stats-presentation-swinog16.pdf On Tue, Oct 13, 2009 at 10:52 PM, RAZAFINDRATSIFA Rivo Tahina wrote: > Daer All, > > I'm looking for utilities which allow to have ASN statistics, the netflow > tools I tried doesn't do that, any idea? > > BR > ___

[c-nsp] ASN statistic tools

2009-10-14 Thread RAZAFINDRATSIFA Rivo Tahina
Daer All, I'm looking for utilities which allow to have ASN statistics, the netflow tools I tried doesn't do that, any idea? BR ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http:/