[c-nsp] Cisco Client VPN and Downloadable Access List

2009-12-03 Thread Satyam Mathura
Guys, I currently have FreeRadius working with a MySQL back-end to authenticate VPN users on my 2811 Cisco router. I have been trying to get the download-able access list feature working but am hitting a brick wall. If i enable cisco-avpair:=ipsec:inacl=185 i can see the radius server responding wi

Re: [c-nsp] bpduguard and trunks?

2009-12-03 Thread Lincoln Dale
On 04/12/2009, at 1:29 AM, Howard Jones wrote: > I've just run into an odd problem, and was wondering if anyone else > could clarify this for me. > > [c1]---[Sw1]--[Sw2]---[c2] > > c1 and c2 are client devices. Sw1 and Sw2 are 3750Gs with a trunk > between them. c1 has a trunk to Sw1. On

Re: [c-nsp] 6504-E crash after bringing up lots of BGP sessions

2009-12-03 Thread Andy B.
Just to be complete, here is what's in the box: cisco WS-C6504-E (R7000) processor (revision 2.0) with 983008K/65536K bytes of memory. Processor board ID FOX11460P4W SR71000 CPU at 600Mhz, Implementation 0x504, Rev 1.2, 512KB L2 Cache Last reset from s/w reset SuperLAT software (copyright 1990 by

Re: [c-nsp] 6504-E crash after bringing up lots of BGP sessions

2009-12-03 Thread Andy B.
On Thu, Dec 3, 2009 at 11:54 PM, Eninja wrote: > Andy, > > Your snipped 'sh ver' post is inadequate to understand the root cause of > this problem. > > Unicast or broadcast a full 'sh ver' (prior to a reload), 'sh stack', and > crashinfo files from both SP and RP if available. > > eninja > Unfort

Re: [c-nsp] 6504-E crash after bringing up lots of BGP sessions

2009-12-03 Thread Eninja
Andy, Your snipped 'sh ver' post is inadequate to understand the root cause of this problem. Unicast or broadcast a full 'sh ver' (prior to a reload), 'sh stack', and crashinfo files from both SP and RP if available. eninja On Dec 3, 2009, at 10:31 PM, "Andy B." wrote: Hi, I am fac

[c-nsp] DSL Aggregation equipment and sizing questions/recommendations?

2009-12-03 Thread P C
I need to terminate 2,000 DSL circuits delievered to me from a telco over a an ATM DS3. I was hoping someone here could offer some equipment recommendations that they feel are suitable for terminating this traffic, as I'm having trouble understanding all the IDB and PVC limits offered by the diffe

[c-nsp] 6504-E crash after bringing up lots of BGP sessions

2009-12-03 Thread Andy B.
Hi, I am facing semi-random reloads of one of my routers when it is under heavy load while receiving lots of routes from its BGP peers. I run several 6504-E in my backbone, all with the very same IOS and all interconnected for the same purpose: Edge Routers for BGP peering / customers and transit

Re: [c-nsp] Quick 6500/Sup2/MSFC2 question...

2009-12-03 Thread Chris Scott
2009/12/3 Jeff Kell : > Both of your remote command examples tell me 256M.  The active > supervisor 'show ver' has 512M.  And as someone else pointed out, I > don't think it would be running redundancy if the two didn't match up. > But it is... > >> #sho redundancy states >>        my state = 13 -A

Re: [c-nsp] 2821 spurious reload

2009-12-03 Thread Rodney Dunn
I looked at it again and noticed it's a combination of Netflow being enabled and ACL Based RBSCP. It's hard for me to tell without more data if it's an exact match or if the fix is more generic. The general recommendation for code direction in regards to 12.4T/15.0 is: 12.4(15)T as it will l

Re: [c-nsp] Quick 6500/Sup2/MSFC2 question...

2009-12-03 Thread Jeff Kell
Chris Scott wrote: > Definitely. Failover to satisfy curiosity on a production system is a > bit far. The fact they're running in failover suggests their spec > can't be too different or IOS *hopefully* would have moaned :) Both of your remote command examples tell me 256M. The active superviso

Re: [c-nsp] Quick 6500/Sup2/MSFC2 question...

2009-12-03 Thread Chris Scott
Hi Jeff 2009/12/3 Jeff Kell : > Can you determine the MSFC2 RAM size in a standby supervisor? On my mix of Sup2/MSFC2s running 12.2(18)SXD7b and 12.2(18)SXF15a I have "remote command standby-rp sho ver" that does the trick. > All of the "remote command" options I've tried seem to be giving me th

Re: [c-nsp] CompactFlash card compatibility

2009-12-03 Thread Chris Scott
2009/12/3 Scott McGrath : > For a LONG time there was a 512MB limitation on filesystem size i.e. the > Sup720's would recognize a 512MB CF card but not a 1Gb > card.    Until this thread we were not aware that the limitation had been > lifted on newer code. > This is helpful as we have been scourin

Re: [c-nsp] bpduguard and trunks?

2009-12-03 Thread Dale W. Carder
Hi Howie, Check out the command "errdisable detect cause bpduguard shutdown vlan" Dale On Dec 3, 2009, at 8:29 AM, Howard Jones wrote: > I've just run into an odd problem, and was wondering if anyone else > could clarify this for me. > > [c1]---[Sw1]--[Sw2]---[c2] > > c1 and c2 are c

Re: [c-nsp] Bandwidth Statement - Tunnel Interface

2009-12-03 Thread sky vader
see in-line: Jay Hennigan wrote: > sky vader wrote: >> Hi, >> >> Just curious, since the default bandwidth for tunnel interface is 9k >> (cisco platform), does that mean the maximum bandwidth I can have is 9k? > > No. - So what does tunnel "bandwidth transmit / receive" s

[c-nsp] Quick 6500/Sup2/MSFC2 question...

2009-12-03 Thread Jeff Kell
Can you determine the MSFC2 RAM size in a standby supervisor? All of the "remote command" options I've tried seem to be giving me the PFC, not MSFC2; and any typical session/console to the standby sup of course gives me the 'standby console disabled' message. The active Sup2 was replaced awhile b

Re: [c-nsp] Ethernet WAN Links question

2009-12-03 Thread Marcelo Zilio
By security issues I was thinking something like a MAC flooding or any kind of denial of service which could compromise the switch access so I would have the internal LAN exposed. Is this make sense? On Thu, Dec 3, 2009 at 11:02 AM, Mikael Abrahamsson wrote: > On Thu, 3 Dec 2009, Marcelo Zilio

Re: [c-nsp] Ethernet WAN Links question

2009-12-03 Thread Gert Doering
Hi, On Thu, Dec 03, 2009 at 02:02:27PM +0100, Mikael Abrahamsson wrote: > >There is an option they supply the switch too. > >The first thing that came to mind is security issues since we are > >connecting > >Internet and Local Network to the same switch inside the network. [..] > Usually I'd say

Re: [c-nsp] 3750 High cpu

2009-12-03 Thread Ivan Gasparik
The 'Adjust Regions' process is not an issue here. The real problem is the interrupt part of the load (49%). That means your switch handles large amount of traffic in software. Do you use IPv6 or other features that are not supported by hardware in you current SDM profile? Ivan On Monday 16 N

[c-nsp] bpduguard and trunks?

2009-12-03 Thread Howard Jones
I've just run into an odd problem, and was wondering if anyone else could clarify this for me. [c1]---[Sw1]--[Sw2]---[c2] c1 and c2 are client devices. Sw1 and Sw2 are 3750Gs with a trunk between them. c1 has a trunk to Sw1. One of the vlans in that trunk as passed along the sw1-sw2 trunk

Re: [c-nsp] CompactFlash card compatibility

2009-12-03 Thread Scott McGrath
For a LONG time there was a 512MB limitation on filesystem size i.e. the Sup720's would recognize a 512MB CF card but not a 1Gb card.Until this thread we were not aware that the limitation had been lifted on newer code. This is helpful as we have been scouring the universe for old 512Mb C

Re: [c-nsp] CompactFlash card compatibility

2009-12-03 Thread Randy McAnally
Definitely upgrade your software before anything else. -- Randy -- Original Message --- From: Chris Scott To: nm...@guesswho.com, cisco-nsp@puck.nether.net Sent: Thu, 3 Dec 2009 13:57:08 + Subject: Re: [c-nsp] CompactFlash card compatibility > 2009/12/3 : > > Chris, > > Is

Re: [c-nsp] CompactFlash card compatibility

2009-12-03 Thread Chris Scott
2009/12/3 : > Chris, > Is it possible that you need the WS-CF-UPG aka CF-ADAPTER-SP for your older > SUP.  I think it is included in the newer 720s > Nick > > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Chris Sc

Re: [c-nsp] CompactFlash card compatibility

2009-12-03 Thread NMaio
Chris, Is it possible that you need the WS-CF-UPG aka CF-ADAPTER-SP for your older SUP. I think it is included in the newer 720s Nick -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Chris Scott Sent: Thursday, December

Re: [c-nsp] CompactFlash card compatibility

2009-12-03 Thread Chris Scott
2009/12/2 Brian Fitzgerald : > We have been using the Kingston CF/4GB Type I - they work fine, with same > caveat as Randy posted - format them in the Sup first. I have a 2-week old Sup720-3B running 12.2(33)SXI3 that formats and can use a Kingston CF/1GB no probs. My other Sup720-3B is 4 years o

Re: [c-nsp] Ethernet WAN Links question

2009-12-03 Thread Mikael Abrahamsson
On Thu, 3 Dec 2009, Marcelo Zilio wrote: There is an option they supply the switch too. The first thing that came to mind is security issues since we are connecting Internet and Local Network to the same switch inside the network. That's like saying there is a security risk in running two phon

[c-nsp] Ethernet WAN Links question

2009-12-03 Thread Marcelo Zilio
Hi, I'm facing a new situation. We are exchanging our Service Provider for MPLS and Internet links. We have requested them redundant MPLS and Internet connections. At the HQ site they gave us Ethernet interfaces as media access. So far so good. The problem is that this Service Provider gave us tw

[c-nsp] Centralized OOB Server / Appliance

2009-12-03 Thread Eric Cables
Hi all, I am researching ideas/solutions for building a centralized/redundant OOB management/dialer system. The purpose will be to provide a couple of geographically distributed systems with a modem (or more) attached (preferably logically attached) for connecting to remote offices when their pri