Re: [c-nsp] Strange SSH lag with ACL applied

2010-01-07 Thread Mikael Abrahamsson
On Thu, 7 Jan 2010, Steve Bertrand wrote: What SSH server software does this? I don't know, but it seemed to fit the profile. I checked and at least my OpenSSH doesn't use this. UseDNS no In this case I think your DNS proposal is the more probable diagnosis, it didn't occur to me that

[c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread ambedkar
Hi, please help me. I am having approximately hundreds of cisco routers and switches. i want to find out the serial numbers for AMC. can anybody help me how to find out in a single stretch. Thanks, bye. ___ cisco-nsp mailing list

Re: [c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread Nick Hilliard
On 07/01/2010 09:07, ambedkar wrote: Hi, please help me. I am having approximately hundreds of cisco routers and switches. i want to find out the serial numbers for AMC. can anybody help me how to find out in a single stretch. install RANCID, then grep the configuration files. Or manually /

Re: [c-nsp] Cisco 3620 and WIC-1ADSL

2010-01-07 Thread Jauhen Viadzishchau
Hello, you are running IP feature set (I-M), but according FN you need IP PLUS (IS-M) minimum feature set to support ADSL cards. IP PLUS will also require 64MB dram and 16MB flash memory. Also, your ios recognize wic-adsl as pa-1c-p which is strange. Jauhen. Chris Knipe wrote: Hi, I

Re: [c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread Asbjorn Hojmark - Lists
On 7 Jan 2010 09:07:23 -, you wrote: Hi, please help me. I am having approximately hundreds of cisco routers and switches. i want to find out the serial numbers for AMC. can anybody help me how to find out in a single stretch. Look at Pari Network Assessment Tool (PNAT)

Re: [c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread Amol Sapkal
If you have a linux box that has SNMP access to all devices, this task would become very easy and fast with a simple Perl script and SNMP. I had written a similar script few years back; let me know if you need it! On Thu, Jan 7, 2010 at 2:26 PM, Nick Hilliard n...@inex.ie wrote: On 07/01/2010

Re: [c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread Garry
ambedkar wrote: Hi, please help me. I am having approximately hundreds of cisco routers and switches. i want to find out the serial numbers for AMC. can anybody help me how to find out in a single stretch. If you are doing SNMP management, and have a DB of all IPs and SNMP-Communities,

Re: [c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread Alan Buxey
hi, use eg RANCID, hiome scripts (with SNMP, telnet/ssh etc) or a package such as NetDISCO alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread David Barak
Hi, please help me. I am having approximately hundreds of cisco routers and switches. i want to find out the serial numbers for AMC. can anybody help me how to find out in a single stretch. +1 for using an SNMP tool to automatically gather this.  Rancid, Netbrain, or the other tool of your

Re: [c-nsp] BGP - Announcing routes to Internet providers.

2010-01-07 Thread David Freedman
Prior to MPLS We null routed *all* our supernets (public aggregated announcements) on *all* core routers such that unknown traffic only made it as far as the nearest core (of which there are at least two in each PoP), of course if your ASN becomes partitioned then you have to be prepared to deal

[c-nsp] Data Center cooling

2010-01-07 Thread scott owens
Hello, Has anyone looked at using outside air to provide data center cooling during the winter season ? I am aware of Google and Intel research into this area but how about on a smaller scale ? How about raising ambient temperatures as well - do you keep your data centers at 65 or 80 ?

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Gert Doering
Hi, On Thu, Jan 07, 2010 at 09:15:30AM -0600, scott owens wrote: temperatures as well - do you keep your data centers at 65 or 80 ? We try to stay below 22. But 80 is good for green tea. gert -- USENET is *not* the non-clickable part of WWW!

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Jason Shearer
I am hoping you mean 22C? :) -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert Doering Sent: Thursday, January 07, 2010 9:52 AM To: scott owens Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Data Center cooling

[c-nsp] ACLs and 2948G-L3

2010-01-07 Thread Jens Neu
Dear all, I've come across a lot of people complaining about the 2948G-L3 and access-lists. I defined two extended access-lists which are bound to FastEthernet35 (in and out). The switch complains nowhere, but when the ACLs should trigger, this appears in the log: Jan 6 16:03:57

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Justin Shore
scott owens wrote: Hello, Has anyone looked at using outside air to provide data center cooling during the winter season ? I am aware of Google and Intel research into this area but how about on a smaller scale ? How about raising ambient temperatures as well - do you keep your data

Re: [c-nsp] Finding the serial numbers of cisco devices

2010-01-07 Thread chip
On Thu, Jan 7, 2010 at 4:07 AM, ambedkar p_ambed...@rediffmail.com wrote: Hi, please help me. I am having approximately hundreds of cisco routers and switches. i want to find out the serial numbers for AMC. can anybody help me how to find out in a single stretch. Thanks, bye.

Re: [c-nsp] Bug ID CSCsv50653

2010-01-07 Thread Jason LeBlanc
Is 12.2(46)SE6 the recommended most stable version then since it was the last supported version? On Jan 6, 2010, at 3:47 PM, Hector Herrera wrote: On Wed, Jan 6, 2010 at 2:03 PM, Jeff Kell jeff-k...@utc.edu wrote: On 1/6/2010 4:55 PM, Jason Shearer wrote: After reload, 3550 does not load

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Gert Doering
Hi, On Thu, Jan 07, 2010 at 10:05:16AM -0600, Jason Shearer wrote: I am hoping you mean 22C? :) Yes. 22K would be a bit too cold, indeed. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering -

Re: [c-nsp] Data Center cooling

2010-01-07 Thread bmanning
better than 22K --bill On Thu, Jan 07, 2010 at 10:05:16AM -0600, Jason Shearer wrote: I am hoping you mean 22C? :) -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert Doering Sent: Thursday, January 07, 2010

Re: [c-nsp] ACLs and 2948G-L3

2010-01-07 Thread Asbjorn Hojmark - Lists
On Thu, 7 Jan 2010 16:37:29 +0100, you wrote: I've come across a lot of people complaining about the 2948G-L3 and access-lists. I defined two extended access-lists which are bound to FastEthernet35 (in and out). The switch complains nowhere, but when the ACLs should trigger, this appears

[c-nsp] IRB and channel-group help needed

2010-01-07 Thread Steven Pfister
I've got a 8540 switch running 12.1(20)E set up with IRB and I've got two interfaces I'm looking at: interface GigabitEthernet0/0/3 no ip address no ip redirects ! interface GigabitEthernet0/0/3.1 description Native VLAN encapsulation dot1Q 1 native no ip redirects ! interface

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Robert Mengert
Has the Fahrenheit scale been eradicated? If so, this is an odd place to first be hearing about it :) -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert Doering Sent: Thursday, January 07, 2010 11:20 AM To: Jason

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Scott Granados
Well, in the rest of the world outside the US definitely, remember there is a larger world out there. We're the last (I think) not to go metric. - Original Message - From: Robert Mengert rob.meng...@pipelinefinancial.com To: Gert Doering g...@greenie.muc.de; Jason Shearer

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Michael K. Smith - Adhost
Hello Scott: -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of scott owens Sent: Thursday, January 07, 2010 7:16 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Data Center cooling Hello, Has anyone looked

Re: [c-nsp] ACLs and 2948G-L3

2010-01-07 Thread Gert Doering
Hi, On Thu, Jan 07, 2010 at 05:43:59PM +0100, Asbjorn Hojmark - Lists wrote: I've come across a lot of people complaining about the 2948G-L3 and ACLs are only supported on the GE interfaces, not FE. And even there, there are nasty surprises lurking if the ACLs get too long (they won't be

Re: [c-nsp] Data Center cooling

2010-01-07 Thread oles
I would imagine, however, that we will see increasing data center temperatures more and more in the coming years. In 2004 2007 we developped the EcoDatacenter. 12 months per year, we use only the water outside air for the cooling on our 70 000 dedicated servers that we host. We are #1 in

Re: [c-nsp] ACLs and 2948G-L3

2010-01-07 Thread sthaug
I've come across a lot of people complaining about the 2948G-L3 and ACLs are only supported on the GE interfaces, not FE. And even there, there are nasty surprises lurking if the ACLs get too long (they won't be installed, and the accompanying error message is ONLY logged to the

Re: [c-nsp] IOS Code Recommendations

2010-01-07 Thread Peter Rathlev
Hi Jason, On Sat, 2010-01-02 at 23:11 -0700, Jason LeBlanc wrote: Cisco only does safe harbor on a few select devices. Being as how this group is made up of a lot of service providers and enterprise networks, does anyone know the latest stable version of code for any or all of the following:

Re: [c-nsp] CIsco 6509-E issues

2010-01-07 Thread Renelson Panosky
Thank you for all the responses i've received on this issue but i figured it out. It was a native vlan issue, i kind have the wrong native vlan number once i fixed everything went back to normal On Sat, Jan 2, 2010 at 12:09 PM, C and C Dominte domintefam...@yahoo.co.ukwrote: Hi, Is there any

Re: [c-nsp] Data Center cooling

2010-01-07 Thread Joel Snyder
Has anyone looked at using outside air to provide data center cooling during the winter season ? I am aware of Google and Intel research into this area but how about on a smaller scale ? How about raising ambient temperatures as well - do you keep your data centers at 65 or 80 ? We do

Re: [c-nsp] IRB and channel-group help needed

2010-01-07 Thread Michael Ulitskiy
I have it working exactly this way. my IOS is 12.1(26)E7 the only special thing I remember about it is that if you want to spread port-channels across the different cards then those cards must be the same (or compatible). For example you can't have port-channel over ports on GE card and Enhanced

Re: [c-nsp] IOS Code Recommendations

2010-01-07 Thread Jason LeBlanc
Peter, I understand the hesitation. I wont hold anyone accountable. We generally max out memory when we purchase devices so the XMs are stacked. I cannot find a lot of definitive answers online so I figured I would ping the community in hopes to find caveats like the OuDiscards not working.

[c-nsp] Adding vlan to port-channel trunk causes port-channel to flap

2010-01-07 Thread Jared Gillis
Hi all, I just ran into a strange problem on a 3750ME. I've got two gig ports in an active LACP port-channel looking like this: interface GigabitEthernet1/0/1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 101,102,400,664,1000-2999 switchport mode trunk speed 1000

Re: [c-nsp] Adding vlan to port-channel trunk causes port-channel to flap

2010-01-07 Thread Harold 'Buz' Dale
Check the other end to make the the LACP config is correct and maybe a sh etherchannel variation to look at what is going on. If the LACP is wrong maybe the trunk was carried over gi1/0/1. Luck, Buz -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Adding vlan to port-channel trunk causes port-channel toflap

2010-01-07 Thread Tony Varriale
What was the command and where did you add it? tv - Original Message - From: Jared Gillis jared.a.gil...@gmail.com To: cisco-nsp@puck.nether.net Sent: Thursday, January 07, 2010 2:23 PM Subject: [c-nsp] Adding vlan to port-channel trunk causes port-channel toflap Hi all, I just

Re: [c-nsp] ACLs and 2948G-L3

2010-01-07 Thread Tony Varriale
Yup. One of the worst C mistakes (top 5?). tv - Original Message - From: Gert Doering g...@greenie.muc.de To: Asbjorn Hojmark - Lists li...@hojmark.org Cc: cisco-nsp@puck.nether.net Sent: Thursday, January 07, 2010 12:32 PM Subject: Re: [c-nsp] ACLs and 2948G-L3

Re: [c-nsp] Adding vlan to port-channel trunk causes port-channel toflap

2010-01-07 Thread Jared Gillis
switchport trunk allowed vlan add 400 and I ran it under interface Port-Channel1. Tony Varriale wrote: What was the command and where did you add it? tv - Original Message - From: Jared Gillis jared.a.gil...@gmail.com To: cisco-nsp@puck.nether.net Sent: Thursday, January 07, 2010

Re: [c-nsp] Adding vlan to port-channel trunk causes port-channel to flap

2010-01-07 Thread Jared Gillis
I see what you're thinking here, but I'm still not sure why adding a vlan to an existing trunk should ever cause a physical link to flap, or affect the underlying LACP session. Harold 'Buz' Dale wrote: Check the other end to make the the LACP config is correct and maybe a sh etherchannel

[c-nsp] am I being bitten by this bug .CSCsw3741 9 (can't connect using certificates with VPN cl ient)

2010-01-07 Thread Scott Granados
Hi, I am using a pair of ASA5520s and the Cisco VPN client (latest release 5.x.160) When I connect on the client side I see the following log entries. 25 14:25:48.843 01/07/10 Sev=Info/6 CERT/0x63600034 Attempting to sign the hash for Windows XP or higher. 26 14:25:49.187 01/07/10

Re: [c-nsp] am I being bitten by this bug .CSCsw37419 (can't connect using certificates with VPN client)

2010-01-07 Thread Scott Granados
The version I'm using is 5.0.06.0160-k9 which is the most recent version available in the download manager. Thanks Scott - Original Message - From: David Prall d...@dcptech.com To: 'Scott Granados' gsgrana...@comcast.net; cisco-nsp@puck.nether.net Sent: Thursday, January 07, 2010 4:01

Re: [c-nsp] Adding vlan to port-channel trunk causes port-channel to flap

2010-01-07 Thread Tom Lanyon
On 08/01/2010, at 6:53 AM, Jared Gillis wrote: Hi all, I just ran into a strange problem on a 3750ME. I've got two gig ports in an active LACP port-channel looking like this: snip When I added vlan 400 to the trunk allowed vlan list, one of the underlying gig ports flapped, which

[c-nsp] customizing snmp-traps (interface description as well as physical name)

2010-01-07 Thread Walter Keen
Is customizing snmp-traps possible through rmon or some other means so that the delivered message not only has the physical name (gi0/1, etc) but also the description of that port as named in the interface config? Dealing mostly with 2960's and 7600's, and trying to figure out if this is

Re: [c-nsp] am I being bitten by this bug .CSCsw37419 (can't connect using certificates with VPN client)

2010-01-07 Thread David Prall
Both bugs show as Verified. The ASA bug shows as Integrated. The Client does not. Open a TAC case and have them link it to the bug, and verify if it is in the release you have. Per the bug it should be since they verified with 5.0.6.110. -- http://dcp.dcptech.com -Original Message-

Re: [c-nsp] am I being bitten by this bug .CSCsw37419 (can't connect using certificates with VPN client)

2010-01-07 Thread David Prall
CSCei52413 is the ASA/PIX issue. Should be in 7.0(4) and beyond. CSCsw37419 is the client issue. It is fixed in code beyond 5.0.6.110, don't know exactly what you are running with 5.x.160 -- http://dcp.dcptech.com -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] customizing snmp-traps (interface description as well as physical name)

2010-01-07 Thread Seth Mattinen
Walter Keen wrote: Is customizing snmp-traps possible through rmon or some other means so that the delivered message not only has the physical name (gi0/1, etc) but also the description of that port as named in the interface config? Dealing mostly with 2960's and 7600's, and trying to figure

[c-nsp] spanning-tree bpdufilter leaks

2010-01-07 Thread Joe Maimon
Apparently, bpdufilter leaks sometimes on some switches, and I have the packet traces to prove it. The switches are probably not supported, so replacements are likely in order. Anyone have an opinion of which cisco switches/IOS are guaranteed not to leak through bpdufilter?

Re: [c-nsp] spanning-tree bpdufilter leaks

2010-01-07 Thread Bill Blackford
Do you have any details? Models? Code vers? -b -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joe Maimon Sent: Thursday, January 07, 2010 7:00 PM To: 'Cisco-nsp' Subject: [c-nsp] spanning-tree bpdufilter leaks

Re: [c-nsp] spanning-tree bpdufilter leaks

2010-01-07 Thread Marko Milivojevic
On Fri, Jan 8, 2010 at 04:00, Joe Maimon jmai...@ttec.com wrote: Apparently, bpdufilter leaks sometimes on some switches, and I have the packet traces to prove it. The switches are probably not supported, so replacements are likely in order. Did you have it enabled globally for portfast