Re: [c-nsp] PVLAN and trunks (for redundancy and more bandwidth), any idea?

2010-01-31 Thread Matt Buford
On Tue, Jan 26, 2010 at 7:06 AM, Sven 'Darkman' Michels wrote: > > Now the problem: ping from 6509: > > c6509#ping ip xx.xx.xx.13 repeat 5 > > Type escape sequence to abort. > Sending 5, 100-byte ICMP Echos to xx.xx.xx.13, timeout is 2 seconds: > ..!.! > Your basic PVLAN configuration looks good.

Re: [c-nsp] Busting up VLANs and bridging

2010-01-31 Thread Matt Buford
On Thu, Jan 28, 2010 at 6:44 PM, Security Team wrote: > What is the "right" way to combine IP layer 3 traffic so that it can go to > multiple VLANs? I'm working with a Catalyst 65xx setup. > > For example, I am starting from a working setup that looks something like > this: > > interface GigabitE

Re: [c-nsp] Card Throughput - 6148A-GE-TX

2010-01-31 Thread Matt Buford
On Fri, Jan 29, 2010 at 11:01 AM, Paul Stewart wrote: > We are aware of what the entire card is capable of (2 Gb/s), but is there > any way to see how much is being utilized from within IOS itself? We can > start counting up all the ports but is there an easier way? ;) > > Relating to this, is t

Re: [c-nsp] 7600 Rate Limiting Output

2010-01-31 Thread Rob Shakir
On 31 Jan 2010, at 03:18, Kevin Warwashana wrote: > I was able to use the below configuration and it appears to max out the > connection pretty close to 26mb. I did have to tinker with the queue size > since the default (3300+) would allow traffic to exceed and a size of 5 > didn't seem to work

Re: [c-nsp] Card Throughput - 6148A-GE-TX

2010-01-31 Thread Pete Templin
Matt Buford wrote: Each range of 8 ports (1-8, 9-16, 17-24, 25-32, 33-40, 41-48) has an ASIC. Each ASIC can do a max of 1 Gb in each direction. If all ports on a group of 8 were to upload and download, their combined throughput would be 1 Gb upload and 1 Gb download. If all ports on the card

Re: [c-nsp] Card Throughput - 6148A-GE-TX

2010-01-31 Thread Paul Stewart
Thanks to everyone for the on-list/off-list replies. We were of the understanding it was 2Gb/s which I was obviously wrong on - this keeps us "out of trouble" for the time being thankfully. No etherchannel on these cards neither ;) Cheers, Paul -Original Message- From: Pete Templin [m

Re: [c-nsp] 7600 Rate Limiting Output

2010-01-31 Thread Kevin Warwashana
I have the same config as your example, but created the additional policy-map first in order to apply it. It didn't take so it was missing from policy-map 26MB-OUTPUT. Looks to be a feature limitation of the SIP-600. I am running 12.2.33 SRD3. Looks like my only option is to shape and not polic

Re: [c-nsp] Policer on c4503

2010-01-31 Thread Doug McIntyre
On Fri, Jan 29, 2010 at 10:42:27AM +0300, Mikisa Richard wrote: > Hi all, > > Any ideas why the Policer policy below does not work. Intention is for > me to lock down traffic to 3Mbps both ways on interface g3/11. > > !! > class-map match-all ROKE-LIMIT >match access-group name ROKE-SLAP > !

[c-nsp] QoS for MetroEthernet

2010-01-31 Thread omar parihuana
Hello, I'm facing a strange problem I think that is a QoS configuration, I've tried some conf without success. The situation is as follows: Actually I have a 1Mbps Serial link between two remote branchs and one application in particular: a SQL client/server application that works fine. (there are

Re: [c-nsp] QoS for MetroEthernet

2010-01-31 Thread Pavel Skovajsa
Hi Omar, No you definively should not take any special considerations for Metro link - you are the end customer the service is transparent to you - it moves packets back and forth. Therefore it is hard to tell what is the actual problem. It is easy to troubleshoot though - sniff it: a) sniff the

Re: [c-nsp] QoS for MetroEthernet

2010-01-31 Thread omar parihuana
Hi Pavel, Unfortunately I'm in a remote location but I'm thinking about install a WireShark in a client PC. Rgds. & Thanks. On Sun, Jan 31, 2010 at 12:34 PM, Pavel Skovajsa wrote: > Hi Omar, > > No you definively should not take any special considerations for Metro > link - you are the end cust

Re: [c-nsp] Nexus 2000 vs Catalyst 4948 for access layer

2010-01-31 Thread David Hughes
On 29/01/2010, at 6:54 AM, Livio Zanol Puppim wrote: > Can anyone please tell me the advantages of using Nexus 2000 over Catalyst > 4948 as access layers switches? > Using Nexus 2000, I have to use at least 2 ports at my Nexus 5000, that > could be used by servers with 10GbE/FCoE servers. The N2

Re: [c-nsp] Policer on c4503

2010-01-31 Thread Mikisa Richard
Hi all, UPDATE: Turned out the policer was fine. Just a small tweak on the ACL got it to work. Otherwise grateful for all the help Richard On 1/31/2010 6:39 PM, Doug McIntyre wrote: On Fri, Jan 29, 2010 at 10:42:27AM +0300, Mikisa Richard wrote: Hi all, Any ideas why the Policer policy