Re: [c-nsp] [j-nsp] juniper trinity

2009-10-30 Thread Marlon Duksa
It looks like you're right. This Trio chipset is a 30G chipset (full duplex) and they have 4 of them per a 120G line card. It makes sense, they have a 50G (full duplex) chipset on the T1600 core box and then the 30G one for the MX. Of course they are totally different chipsets, the former being no

Re: [c-nsp] ubr npe-g2 vs 7200 npe-g2

2009-10-30 Thread Ɓukasz Bromirski
On 2009-10-30 23:07, Gert Doering wrote: I'm not sure if I find "have different labels" a compelling reason for not being interchangeable (or having different PPS specs). Boot helper is one of the most misunderstood parts of the 7200 series anyway... (*and* it can be changed). They can be cha

Re: [c-nsp] Stop SYN Attack

2009-10-30 Thread Roland Dobbins
On Oct 31, 2009, at 5:07 AM, Jason Alex wrote: Does anyone knows how to block this kind of TCP SYN attack ? You need to contract your peer(s)/upstream(s) and report the attack, so your peer(s)/upstream(s) can mitigate on their side. You should also replace the 7200 with a hardware-based

Re: [c-nsp] ubr npe-g2 vs 7200 npe-g2

2009-10-30 Thread Gert Doering
Hi, On Fri, Oct 30, 2009 at 02:40:15PM -0500, Jaquish, Bret wrote: > The NPE-G1 cards have a more detailed explanation: > > "The Cisco 7200 VXR routers and Cisco uBR7200 series routers use different > models of the NPE-G1 processor. For the Cisco 7200 VXR routers , order the > NPE-G1 or NPE-G1=

[c-nsp] Stop SYN Attack

2009-10-30 Thread Jason Alex
Dear All, I have a TCP SYN attack on one of my routers (Cisco 7206), which causes the traffic to increase 100 Mbps on the Uplink interface This router is a PE router in a MPLS environment when i configured access-list to block the attack source , this causes the CPU utilization of the

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Jay Hennigan
christian koch wrote: looks as if its working based on the activity in this thread... Or not. The concept is to build suspense and get the vict^H^H^H^Hreaders to think it's something cool. If two weeks ahead of time the grassroots is revealed to be Astroturf spun by a marketing outfit and

Re: [c-nsp] Will this work?

2009-10-30 Thread Jay Hennigan
Richey wrote: I've been asked if this will work. I would think that it would but I would like a second opinion. 7206 VXR with an NPE-400, 512Mb ram, C7200 I/O 2FE/E card and two PA-MC-T3s. The PA-MC-T3s are 90 Bandwidth points each and the I/O controller counts as 400. There would be s

Re: [c-nsp] 802.1w vs EoMPLS failover time

2009-10-30 Thread Walter Keen
Sorry, yes. There is a jitter buffer however only configurable between 3 and 29 ms. When we tested it a 29ms, we noted a severe failure of all modem and most fax calls through this box. Phil Bedard wrote: Is there a jitter buffer on the RAD boxes you can adjust? Generally plain voice can de

Re: [c-nsp] 802.1w vs EoMPLS failover time

2009-10-30 Thread Phil Bedard
Is there a jitter buffer on the RAD boxes you can adjust? Generally plain voice can deal with a decent amount of latency. If you can do a 50ms or higher jitter buffer, FRR may allow you to not underrun. Phil On Oct 30, 2009, at 10:55 AM, Walter Keen wrote: Sorry, our current situation is

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread christian koch
looks as if its working based on the activity in this thread... ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Scott Granados
And I'd say it's working since it's being talked about pretty heavily.;) - Original Message - From: "Omachonu Ogali" To: "Drew Weaver" Cc: ; "Cisco NSP" Sent: Friday, October 30, 2009 1:50 PM Subject: Re: [c-nsp] Network Liberation Movement??? It's a marketing campaign. A so-calle

[c-nsp] Will this work?

2009-10-30 Thread Richey
I've been asked if this will work. I would think that it would but I would like a second opinion. 7206 VXR with an NPE-400, 512Mb ram, C7200 I/O 2FE/E card and two PA-MC-T3s. The PA-MC-T3s are 90 Bandwidth points each and the I/O controller counts as 400. There would be some MLPPP Bundles

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Omachonu Ogali
It's a marketing campaign. A so-called viral campaign (according to their blog -- http://opinion.rapp.com/). The IP is hosted by Rapp Collins Worldwide, who's a marketing firm. Don't know the actual client is. oo On Fri, Oct 30, 2009 at 2:39 PM, Drew Weaver wrote: > On Halloween, no less. > >

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Mark Boolootian
> On Halloween, no less. It's fifteen days, not hours. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Robert VanOrmer
This may be out of your budget, but the Cisco WLCs + WCS do a great job of this. WCS will identify rogue access points and also identify if the AP is "on-net" or just rogue. It also has a containment feature that works very effectively in quarantining APs and making them difficult / impossible to

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Dodd, Steven
Span your outbound traffic and look for IPs with a TTL that is off by one. -Steve -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of quinn snyder Sent: Friday, October 30, 2009 12:37 PM To: Marcelo Zilio Cc: cisco-nsp@puck.n

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Ryan West
The guys at Cacti have a plugin called Mactrack that will do this as well. It also has a MAC db download function that will do the lookup for you. -ryan -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott Granados Sen

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Marcelo Zilio
inline On Fri, Oct 30, 2009 at 5:37 PM, quinn snyder wrote: > inline comments > > On Friday, October 30, 2009, Marcelo Zilio wrote: > > > > A third option (if your switches support it) is enable port security and > > maximum mac address numbers on each switchport. > > > > depending on if the de

Re: [c-nsp] ubr npe-g2 vs 7200 npe-g2

2009-10-30 Thread Jaquish, Bret
Possibly. Are there differences in the I/O ports on the UBR-NPE-G2 and the "non-UBR" NPE-G2? I really haven't had any experience with the UBR models of routers. Bret -Original Message- From: Joe Pruett [mailto:j...@clean.q7.com] Sent: Friday, October 30, 2009 2:45 PM To: Jaquish, Bre

Re: [c-nsp] ubr npe-g2 vs 7200 npe-g2

2009-10-30 Thread Joe Pruett
"The Cisco 7200 VXR routers and Cisco uBR7200 series routers use different models of the NPE-G1 processor. For the Cisco 7200 VXR routers , order the NPE-G1 or NPE-G1= product. For the Cisco uBR7200 series router, order the UBR7200-NPE-G1 or UBR7200-NPE-G1= product. The two models of NPE-G1 hav

Re: [c-nsp] ubr npe-g2 vs 7200 npe-g2

2009-10-30 Thread Jaquish, Bret
I think this will answer your question: For NPE-G2: "The Cisco 7200 VXR routers and Cisco uBR7200 series routers use different models of the NPE-G1 and the NPE-G2 processors. For the Cisco 7200 VXR routers, order the NPE-G1 or NPE-G1= product. For the Cisco uBR7200 series routers, order the UB

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread quinn snyder
inline comments On Friday, October 30, 2009, Marcelo Zilio wrote: > > A third option (if your switches support it) is enable port security and > maximum mac address numbers on each switchport. > depending on if the device is being used as layer3 and how his topology is set up, a single mac addre

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Craig Allen
Have a look at switchmap: http://sourceforge.net/projects/switchmap/ -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott Granados Sent: 30 October 2009 18:09 To: cisco-nsp@puck.nether.net Subject: [c-nsp] Good way of find

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Scott Granados
Hi Mike, these are great ideas. Unfortunately, my biggest problem is the folks who had my job before me didn't believe in things like best practices or researching something before they set it up so I am spending a good deal of time trying to undo the work done before me. I plan on having our

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Drew Weaver
On Halloween, no less. My first thought was we're all going to be spammed by network resalers in the next few days when I looked at that, but I then just thought wow this is incomprehensible jibberish. -Drew -Original Message- From: Lynch, Tomas [mailto:tomas.ly...@globalcrossing.com]

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Seth Mattinen
Scott Granados wrote: > Hi all > I have a general question. I have a network consisting of about 20 > access switches and 2 core switches. We have 3 access points that we > manage but think someone might have brought in a linksys or DLink > consumer device and plugged in. (users, can't live with

Re: [c-nsp] FWSM traffic distribution across internal etherchannel

2009-10-30 Thread jack b
First, I wanted to give thanks to David for helping me track down this issue and for providing insight into the workings of the FWSM. To recap the issue I was seeing the majority of outbound traffic from the FWSM was exiting on the 3rd and 6th port of the ether-channel while the inbound traffic to

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Marcelo Zilio
Hi Scott, I think Wireless LAN Controllers are the best tool to do that. A cheaper option is use Netstumbler. I don't have it right now but as long I recall it finds manufacturer ID. A third option (if your switches support it) is enable port security and maximum mac address numbers on each swit

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Lynch, Tomas
Only an idiot will make an important announcement on a Saturday. > -Original Message- > From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of Matlock, Kenneth L > Sent: Friday, October 30, 2009 1:15 PM > To: Drew Weaver; Derick Winkworth; Cisco

Re: [c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread NMaio
Try Netdisco. http://netdisco.org/ Nick -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott Granados Sent: Friday, October 30, 2009 2:09 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Good way of finding unauthorized

Re: [c-nsp] ISR G2 "multicore"?

2009-10-30 Thread Judah Scott
Yeah the software forwarding idea just ends up crashing large boxes like the 7609. If you suddenly enable a feature that causes software forwarding or you run out of TCAM and software starts to make up for that, say goodbye to either performance or your SUP/RSP. On Fri, Oct 30, 2009 at 8:45 AM,

[c-nsp] Good way of finding unauthorized network elements/

2009-10-30 Thread Scott Granados
Hi all I have a general question. I have a network consisting of about 20 access switches and 2 core switches. We have 3 access points that we manage but think someone might have brought in a linksys or DLink consumer device and plugged in. (users, can't live with em, can't shoot em) Is ther

Re: [c-nsp] Basic RSTP question

2009-10-30 Thread Judah Scott
I've seen CPU spikes which have caused a switchover. These were caused by software switching and spikes in traffic. Specifically it was a very large number of MPLS tunnels in a lab configuration and we ran out of ACL_TCAM ... On Thu, Oct 29, 2009 at 6:47 PM, samuel vuillaume wrote: > Hi Guys,

Re: [c-nsp] 7204VXR crashing when trying to load 12.2(33)SRC4

2009-10-30 Thread Jared Gillis
Chris Wopat wrote: >> Hello all, >> >> I'm trying to get a lab 7204VXR (NPE-400) up and running on SRC code, and am >> having no luck. >> I've loaded it up with 12.2(33)SRC4 ipbase, and 12.2(33)SRD3 ipbase, and the >> router locks or crashes on boot each >> time: >> >> Cisco IOS Software, 7200 So

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Randy McAnally
Maybe some new kind of transport. Ether anyone? -- Randy -- Original Message --- From: "Matlock, Kenneth L" To: "Drew Weaver" , "Derick Winkworth" , "Cisco NSP" , Sent: Fri, 30 Oct 2009 10:15:19 -0600 Subject: Re: [c-nsp] Network Liberation Movement??? > Gibberish, and market

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Matlock, Kenneth L
Gibberish, and marketing speak. My guess is a linux-based 'router' they're trying to sell to unsuspecting mom-and-pop businesses. Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-n

Re: [c-nsp] ISR G2 "multicore"?

2009-10-30 Thread sthaug
> > Some might not see that as necessarily a bad thing, provided > > the ASIC is robust enough to handle all of the user's > > required features in the hardware path (being the only path) > > :-). > > This is one of the things we like about vendor J - packets are either > forwarded in software

Re: [c-nsp] Network Liberation Movement???

2009-10-30 Thread Drew Weaver
Just looks like a bunch of gibberish to me. -Drew -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Derick Winkworth Sent: Friday, October 30, 2009 10:23 AM To: Cisco NSP; juniper-...@puck.nether.net Subject: [c-nsp] Netwo

Re: [c-nsp] BGP Add path capbility

2009-10-30 Thread Chintan Shah
> > Hi, > > I've been looking one of the feature of BGP called - Add path that allows > the advertisement of multiple paths for the same address prefix and was > reading this RFC > > http://potaroo.net/ietf/all-ids/draft-ietf-idr-add-paths-00.txt. > > So if in service provider scneario where we u

[c-nsp] Network Liberation Movement???

2009-10-30 Thread Derick Winkworth
http://networkliberationmovement.net/ 15 hours some big announcement? Anyone know what this is? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-

Re: [c-nsp] ubr npe-g2 vs 7200 npe-g2

2009-10-30 Thread Walter Keen
I've used a npe-g2 card in a ubr before, but haven't tried the other way around. Joe Pruett wrote: Cisco "UBR" routers are used as cable CMTS devices... http://www.cisco.com/en/US/products/hw/cable/ps2217/index.html i understand the difference between the ubr and the regular 7200 series. i'm

Re: [c-nsp] 802.1w vs EoMPLS failover time

2009-10-30 Thread Walter Keen
Sorry, our current situation is that during a spanning tree switchover, it encounters a buffer underrun error on the RAD box, and we are looking to see if perhaps a mpls TE tunnel with explicit paths (2 explicit paths plus a dynamic path) would help matters any as opposed to just layer 2 vlans.

Re: [c-nsp] ISR G2 "multicore"?

2009-10-30 Thread sthaug
> > one of the luxuries we have with NX-OS is since we have > > complete separation of control-plane and data-plane there > > really isn't anything that drops you into software > > forwarding. > > that in itself is a major benefit - but it does come with > > the cost that the platform is only capab

[c-nsp] 7204VXR crashing when trying to load 12.2(33)SRC4

2009-10-30 Thread Chris Wopat
> Hello all, > > I'm trying to get a lab 7204VXR (NPE-400) up and running on SRC code, and am > having no luck. > I've loaded it up with 12.2(33)SRC4 ipbase, and 12.2(33)SRD3 ipbase, and the > router locks or crashes on boot each > time: > > Cisco IOS Software, 7200 Software (C7200-IPBASE-M), Ver

Re: [c-nsp] ubr npe-g2 vs 7200 npe-g2

2009-10-30 Thread Joe Pruett
Cisco "UBR" routers are used as cable CMTS devices... http://www.cisco.com/en/US/products/hw/cable/ps2217/index.html i understand the difference between the ubr and the regular 7200 series. i'm wondering about just the npe-g2 card. is there any difference between the npe version for ubr and t

Re: [c-nsp] ISR G2 "multicore"?

2009-10-30 Thread Mark Tinka
On Friday 30 October 2009 04:13:01 pm Lincoln Dale wrote: > one of the luxuries we have with NX-OS is since we have > complete separation of control-plane and data-plane there > really isn't anything that drops you into software > forwarding. > that in itself is a major benefit - but it does come

Re: [c-nsp] 7204VXR crashing when trying to load 12.2(33)SRC4

2009-10-30 Thread Mark Tinka
On Friday 30 October 2009 08:42:31 am Jared Gillis wrote: > Hello all, > > I'm trying to get a lab 7204VXR (NPE-400) up and running > on SRC code, and am having no luck. I've loaded it up > with 12.2(33)SRC4 ipbase, and 12.2(33)SRD3 ipbase, and > the router locks or crashes on boot each time: > > C

Re: [c-nsp] 7204VXR crashing when trying to load 12.2(33)SRC4

2009-10-30 Thread Mark Tinka
On Friday 30 October 2009 08:42:31 am Jared Gillis wrote: > None of the docs I can find say anything more than 7200 > is supported (no breakdown on required NPE or IO > modules). Has anyone had any luck getting 12.2SR code of > any kind running on a 7204VXR? If so, any advice? Thanks! You might w

Re: [c-nsp] ISR G2 "multicore"?

2009-10-30 Thread Lincoln Dale
On 29/10/2009, at 9:58 AM, David Hughes wrote: On 28/10/2009, at 11:18 PM, Roland Dobbins wrote: The smartest/sanest thing to do, IMHO, would be to work at migrating to NX-OS, feature-set by feature-set. It's by far the cleanest and best-designed OS platform Cisco have come out with to

Re: [c-nsp] SPA V1 vs V2

2009-10-30 Thread Rob Shakir
On 28 Oct 2009, at 14:47, Benny Amorsen wrote: Also, to some it might be surprising that the SIP-600 in a 7600 will not do QinQ no matter the SPA version, whereas the SIP-400 supposedly will with a v2 SPA (I haven't had the chance to actually try, and some documentation says that it won't wor