Re: [c-nsp] 3750G vs. Nexus for a SAN

2009-11-11 Thread arne . svennevik
- Nick Hilliard n...@inex.ie wrote: Incidentally, if you're planning to use the N5K as a fancy 1G switch, note that the system will change the switching mode from cut-through to store-n-forward for GE ports; cut-through is only supported for 10G transceivers. This may matter for iSCSI.

Re: [c-nsp] RSA and rancid

2009-11-11 Thread Alexander Clouter
Dirk-Jan van Helmond c-...@djvh.nl wrote: Don't use RSA authentication for automated processes? Use local accounts, or if your devices support it SSH public keys are a handy option. To be honest you would be crazy to rely just on RSA authentication as if your RADIUS server is dead you will

Re: [c-nsp] RSA and rancid

2009-11-11 Thread Jens Link
Mark Meijerink mark.meijer...@sara.nl writes: Is anyone of you using RSA tokens and rancid? If so, please explain how you make this work. Thanks in advance for your comments. Friend of mine told me that a combination of a web cam, fuzzyOCR and some Perl code is working fine for token based

Re: [c-nsp] uRPF bug on C6k SXI1?

2009-11-11 Thread Phil Mayers
Peter Rathlev wrote: Hi Phil, Thanks for the input. On Tue, 2009-11-10 at 13:23 +, Phil Mayers wrote: Do you have CoPP or MLS rate limiters? Is the traffic being CPU punted (use a SPAN session to find out) and this rate-limiting what's causing the drops? No CoPP or rate-limiters

[c-nsp] VPLS and SSTP or STP

2009-11-11 Thread samuel vuillaume
HI guys, Just a quick question. Here's my context --- CPE1--*QinQ + L2PT port* (7600)--VPLS---(7600) *Trunk port* --NNI-CPE2 CPE1 and CPE2 run PVST+ and both 7600 don't run any STP On QinQ + L2PT port (7600), i ran

Re: [c-nsp] Different CPU load on two 7206VXR-NPEG2

2009-11-11 Thread Ben White
Packet fragmentation and re-assembly on one path to one of the sites could explain it. Maybe 'show ip traffic' could glean some useful information. -- Ben ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-11 Thread Thomas Habets
On Tue, 10 Nov 2009, Gert Doering wrote: No. Routers will never reassemble transit traffic. Never is a strong word. It seems ip virtual-reassembly do it. It looks like it at least reassembles them in memory and delays them before forwarding them (as fragments) from the debug and counters.

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-11 Thread Ɓukasz Bromirski
On 2009-11-11 12:00, Thomas Habets wrote: On Tue, 10 Nov 2009, Gert Doering wrote: No. Routers will never reassemble transit traffic. Never is a strong word. It seems ip virtual-reassembly do it. It looks like it at least reassembles them in memory and delays them before forwarding them (as

[c-nsp] Cisco 12000 Series Packet over SONET/SDH (POS) Line Cards (2-Port OC-192c POS )

2009-11-11 Thread Pratap Reddy
Hi, I am planing to use Cisco 12000 series Two port OC-192 line card. I would like to have some feedback on this line card. This line card supports Synchronous Digital Hierarchy (SDH). Does any one configured it as Gig enabling WAN. I used SPA-1x10GE-WL-V2 on 12000-SIP-600 as 10Gig enabling

Re: [c-nsp] What's the value of ASA/FWSM TCP state bypass?

2009-11-11 Thread Greg Wendel
Roland, iatrogenic. induced inadvertently ... http://www.merriam-webster.com/dictionary/IATROGENIC It is not often I have to look up a word on this board. Well played sir. On Tue, Nov 10, 2009 at 6:31 PM, Dobbins, Roland rdobb...@arbor.net wrote: On Nov 11, 2009, at 4:26 AM, Peter Rathlev

Re: [c-nsp] RSA and rancid

2009-11-11 Thread Michael K. Smith
On 11/11/09 6:03 AM, Jens Link li...@quux.de wrote: Mark Meijerink mark.meijer...@sara.nl writes: Is anyone of you using RSA tokens and rancid? If so, please explain how you make this work. Thanks in advance for your comments. Friend of mine told me that a combination of a web cam,

Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-11 Thread Rubens Kuhl
There is nothing special about *forwarding* fragmented packets - unless you have an ACL or anything else that wants to look at Layer 4 info. That would be Netflow or some QoS policy attached to the interface, for instance? I guess the router should reassembly the fragmented packets before

Re: [c-nsp] Cisco 12000 Series Packet over SONET/SDH (POS) Line Cards (2-Port OC-192c POS )

2009-11-11 Thread Mikael Abrahamsson
On Thu, 12 Nov 2009, Pratap Reddy wrote: Hi, I am planing to use Cisco 12000 series Two port OC-192 line card. I would like to have some feedback on this line card. This line card supports Synchronous Digital Hierarchy (SDH). Does any one configured it as Gig enabling WAN. I used