Re: [c-nsp] Load-sharing with two links to the same ISP

hi Matthew, Keeping the current internet full feed in view its around 300k routes and sup720-3BXL should support 1million routes (its cisco though :p). So even if you terminate the links on 2 different edges coming from the same AS it should work fine. If you are trying "bgp bestpath as-path mult

Re: [c-nsp] Using switchport 802.1q for a point-to-point instead of routed /30

Rick Kunkel wrote: Hello all... The connection between the two location is ethnernet, and the hardware is (well, will be as soon as we upgrade out of a 7200) a 6509 on either side, and I think it'd be pretty cool to run an 802.1q trunk between them using 6509 switchports instead of routed po

[c-nsp] 3560G as WAN-aggregation-layer

Greetings. I know this is going to sound pretty, well, lame. But... I currently have a couple of routers (a 7204/NPE-G1 and a 3845) front-ending my WAN connections, which are all metro Ethernet, mostly gig ports which are policed at some CIR, or 100Mbit. The routers are big, expensive, and real

Re: [c-nsp] Routing between site to site VPNs

You will have to supply more information on what exactly you are trying to do here. The "Physical" interface is transparent to the routing process except for linking the tunnel to it. You may require some *route maps* if you are trying to achieve something non basic. _

Re: [c-nsp] Using switchport 802.1q for a point-to-point instead of routed /30

I'd go with the 802.1q Trunked backbone. It gives you the flexibility of spanning vlans across a network. As for point 3 how about a virtual vlan interface on one of the 6509. If you have ample capacity over your backbones I don't see a problem on where the virtual vlan is to be terminated also wit

[c-nsp] Using switchport 802.1q for a point-to-point instead of routed /30

Hello all... Right now, I've got a bunch of customers connected to a bunch of switchports using different VLANs. I've got 802.1q running between the switches, and then a router attached with a bunch of subinterfaces, one for each VLAN. Assigned to each of these subinterfaces is the customer'

Re: [c-nsp] Load-sharing with two links to the same ISP

Thanks for the pointers towards eBGP Multipath. Can I check that this still works if two links are terminated on different edge routers (though with iBGP between the edge routers). I assume this will use additional TCAM resources (Sup720-3BXL) in maintaining two routes per prefix, which could be si

Re: [c-nsp] ISR IPS module

On 2010-02-08 18:55, Jay Nakamura wrote: > Any opinions? How effective is it? Is it worth using? It is a appliance on a card, so it is as effective as the real box, however with less performance due to slower CPU. > Also, what is your opinion on doing IPS without the hardware card on > an ISR?

Re: [c-nsp] weird issue with IBM blade cente switch 3012

Matt,   I'll need to ask the IBM guys if they did so. I received the switches in their current positions.   Thanks, Alejandro Wainshtok --- On Mon, 2/8/10, Matt Bennett wrote: From: Matt Bennett Subject: Re: [c-nsp] weird issue with IBM blade cente switch 3012 To: "Alex Wa" Cc: cisco-nsp@puc

Re: [c-nsp] weird issue with IBM blade cente switch 3012

Have you moved the switch modules within the IBM chassis? If so you could try putting them back in the original locations. We've had similar connectivity issues when we'd swapped modules around in the chassis, I think it was related to the MM not liking that serial number appearing on a different

Re: [c-nsp] Routing between site to site VPNs

If you use a Cisco Router you can have a site-to-site VPN with multiple 'tunnel' interfaces on the router, which might all make use of the same physical interface. These work just like regular interfaces as far as routing is concerned and you can easily route between them. Regards, Andrew Gabriel.

[c-nsp] "show stats" question

Can anyone confirm the command below, the Chars/in/out reference, are the results listed in bytes? I'm unable to find this command documented anywhere on CCO to get a better description of the command and its output. The 6509 “show stats” command gives the following information: Vlan2 Switching

[c-nsp] ISR IPS module

Has anyone used these cards on ISRs? https://www.cisco.com/en/US/prod/collateral/routers/ps5853/ps5875/product_data_sheet0900aecd806c4e2a_ps2641_Products_Data_Sheet.html Any opinions? How effective is it? Is it worth using? Also, what is your opinion on doing IPS without the hardware card on a

Re: [c-nsp] Routing between site to site VPNs

Hello Jonathan: That should be possible. See http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080734db7.shtml about Intra-interface communications for the PIX/ASA. I'm not sure if the same exists for routers, however. Mike -- Michael K. Smith - CISSP, GSEC, GISP Chief Te

[c-nsp] Routing between site to site VPNs

Hello, We would like to know if it is possible to forward traffic between site-to-site VPNs that are established in the same physical interface of a router? ¿And in a firewall? Jonathan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net http

[c-nsp] weird issue with IBM blade cente switch 3012

Hi guys,   I have to configure several Cisco 3012 switches for a project and i'm kind of stuck with an issue I can't really figure out.   This is the situation. I have a two 6509s core to which i'm connecting 12 3012s. most of them work fine but with 3 of them i'm not able to ping each other (t

Re: [c-nsp] eBGP multihop, CE default route, using PBR instead of dynamic routing?

What kind of devices are you using? The device will probably make more difference than anything else with regards to PBR. I would say generally having the two BGP peering connections is one solution to the ebgp multihop problem. Another solution would be to use a tunnel (prob GRE) between the

[c-nsp] 2811 login issues

I have a 2811 that stopped accepting logins from its FastEthernet interface last week out of the blue. When this happened there were no config changes, router reboots, etc. It has a Multilink bundle unnumbered via that FastEthernet interface and it *does* accept logins from this direction. Config i

[c-nsp] eBGP multihop, CE default route, using PBR instead of dynamic routing?

Hi We have an MPLS customer who is running IS-IS on their LAN, and then redistributing that into BGP to our core. This was the original standard setup: PEebgp-CEebgp-CUSOMERISIS So that worked just fine, but the customer wanted the IS-IS metric to be injected into BGP MED. Th

Re: [c-nsp] Cisco 6506 ACL problem

On Mon, 8 Feb 2010, Muhammad Jawwad Paracha wrote: Dear All, We are facing problem in Cisco 6506 equipment regarding ACL's. It has occured 3 times that ACL's that are being implement on device stops working for 1,2 minute. Hello, I think that I recently saw somewhere to prefer named ACLs in

[c-nsp] PGM and multicast

Is there anyone here using multicast and PGM? We have several multicast services -video and audio streams- and sometimes we use to have incidents because the service is not ok, and we would like to deploy PGM to have more control. So, my questions are... Is possible to manage the rx buffer of the

[c-nsp] Cisco 6506 ACL problem

Dear All, We are facing problem in Cisco 6506 equipment regarding ACL's. It has occured 3 times that ACL's that are being implement on device stops working for 1,2 minute. Appreciate if you can suggest any solution to this problem. Thank you ___ cisco-

[c-nsp] Tarig Hamdi is out of the office.

I will be out of the office starting 02/08/2010 and will not return until 02/15/2010. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ASR etherchannel

roddy.strac...@staff.netspace.net.au (Roddy Strachan) wrote: > Currently we run two ASR 1004¹s in an LNS environment, we are about to reach > the maximum of 1GB on the port into our core network, so I¹m thinking of > ways to give us more bandwidth. One way that came to mind was using > etherchann