Re: [c-nsp] OpenSource Cisco Monitoring Tool

2010-08-03 Thread Jimmy Stewpot
Check out zenoss http://www.zenoss.com/ - Original Message - From: "ar" To: cisco-nsp@puck.nether.net Sent: Wednesday, 4 August, 2010 1:01:05 PM Subject: [c-nsp] OpenSource Cisco Monitoring Tool Hi. Aside from Nagios, any other opensource monitoring tool you are using that greatly works

Re: [c-nsp] OpenSource Cisco Monitoring Tool

2010-08-03 Thread Roy
On 8/3/2010 8:01 PM, ar wrote: Hi. Aside from Nagios, any other opensource monitoring tool you are using that greatly works for cisco especially 7600 series? thanks If you like Nagios but hate its UI, take a look at Opsview Community version. Its nagios under the covers but with a real

[c-nsp] OpenSource Cisco Monitoring Tool

2010-08-03 Thread ar
Hi. Aside from Nagios, any other opensource monitoring tool you are using that greatly works for cisco especially 7600 series? thanks ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp arch

Re: [c-nsp] 6PE: was: mpls over native ipv6?

2010-08-03 Thread Christian MacNevin
Hi I just revisited this,and yeah the only 6PE doc I've seen (here: http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_data_sheet09186a008052edd3.html ) seems to be totally out of date. Note that this is using 12.2(33)SRD4 on a 7200 platform (Dynamips actually). The basic syntax t

Re: [c-nsp] DOS attack

2010-08-03 Thread Heath Jones
the way i'm reading that is that source mac 0018.742f.b380 is passing icmp ttl expired frames. sending ttl expired icmp messages is a known dos attack. On 3 August 2010 23:16, sherif mostafa wrote: > > Dears, > > Could anyone help please as I've faced an error message "DOS" below that > caused

[c-nsp] DOS attack

2010-08-03 Thread sherif mostafa
Dears, Could anyone help please as I've faced an error message "DOS" below that caused high CPU usage: ERROR 08/02/2010 16:22:46 CAI dosProtection: Flow is suspicious: GigabitEthernet11/0.410 for control protocol: IP TTL Expired source MAC 0018.742f.b380 with rate 241 pps ERROR 08/02/2010

Re: [c-nsp] Cisco 7204 VXR Telnet login timeout bug?

2010-08-03 Thread Andy Ashley
On 03/08/2010 17:42, aniel wrote: Hello, I'm running into an issue where I have a 7204 that is timing out the vty login page on the client side but not closing the line on router side. Has anybody run into this issue before? Any ideas where I can start looking? I've checked the Cisco site.

Re: [c-nsp] routing between VRF and global

2010-08-03 Thread Daniska Tomas
Chris, Jeff, * have you managed this to work being CEF switched? Couldn't get past process path when I tried lately -- deejay > -Original Message- > From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of Chris Mason > Sent: Wednesday, July 2

Re: [c-nsp] 7606 with 10G optic activation

2010-08-03 Thread Mack McBride
I have seen this issue on the WS-X6704 blades. When the fiber is first connected, link flaps can cause the interface to lock up. Sometimes the blade has to be rebooted to correct the issue. Mack -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.ne

Re: [c-nsp] process-max-time on a 6500 w/ SUP-720-3BXL

2010-08-03 Thread Benjamin Lovell
I am not sure what the priority of BGP versus SNMP is, plus there is more than one process involved for the whole task to be done. If SNMP is "eligible" to take the CPU from BGP and the scheduler is not getting around to it quick enough then process-max-time could help. If SNMP is not eligible t

[c-nsp] Cisco 7204 VXR Telnet login timeout bug?

2010-08-03 Thread aniel
Hello, I'm running into an issue where I have a 7204 that is timing out the vty login page on the client side but not closing the line on router side. Has anybody run into this issue before? Any ideas where I can start looking? I've checked the Cisco site. -- Aniel Wittig Network Operations Te

[c-nsp] process-max-time on a 6500 w/ SUP-720-3BXL

2010-08-03 Thread James Kelty
Hello all, I have a 6509 w/ SUP-720-3BXL. There is nothing truly crazy going on here, just 4 transit provider BGP sessions over 10 gig links w/ full routing tables. I have policing in place to allow for the BGP convergence when a provider comes up or needs to re-converge for whatever reason. I've

[c-nsp] 7606 with 10G optic activation

2010-08-03 Thread Matthew Melbourne
Hi, We are attempting to turn up some 10G links between our Nexus 7k core and 7606 edge routers. The Nexus 7k uses -SR SFP+, and X2 -SR optics are present in the WS-X6708 line card. These links did not come up until the optics in the 7606 were removed and re-inserted. The optics were in place and

[c-nsp] RES: Odd error after Interface flap [GSR/Engine 5]

2010-08-03 Thread Leonardo Gama Souza
I have seen the same messages recently on several slots after TE tunnels flap, but they caused a lot of issues (FIA errors, CEF disable and so on). %EE48-3-QM_SANITY_WARNING: Few free buffers(0) are available in ToFab FreeQ pool# 3 %EE48-3-QM_SANITY_WARNING: Few free buffers(0) are available in

Re: [c-nsp] vPC Object Tracking (used when vPC Peer Link with Single 10G Module)

2010-08-03 Thread Guillermo Ruiz
Hi, The following configuration will track uplinks and the vPC Peer Link ! Track the vpc peer link track 1 interface port-channel11 line-protocol ! Track the uplinks to the core track 2 interface Ethernet1/1 line-protocol track 3 interface Ethernet1/2 line-protocol ! Combine all tracked objects

Re: [c-nsp] Match-in-VRF

2010-08-03 Thread Arie Vayner (avayner)
David, Take a look here: http://docwiki.cisco.com/wiki/Category:NAT http://www.cisco.com/en/US/docs/ios/ipaddr/command/reference/iad_nat.htm l (search for match-in-vrf) Hope this helps. Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nethe

Re: [c-nsp] Ping Script

2010-08-03 Thread Arie Vayner (avayner)
One other way to accomplish complex things (such as router reconfiguration) could be to use EEM: http://www.cisco.com/go/eem Also, PfR could help here: http://www.cisco.com/go/pfr Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net]

Re: [c-nsp] Ping Script

2010-08-03 Thread Sebastian
yes http://www.firstdigest.com/2010/05/cisco-policy-routing-with-ip-sla/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+firstdigest+%28FirstDigest%29 On 03.08.2010 11:45, Elmar K. Bins wrote: Re Rodney and folks on-da-list, rod...@cisco.com (Rodney Dunn) wrote: Set up IP SLA ICMP

Re: [c-nsp] Ping Script

2010-08-03 Thread Elmar K. Bins
Re Rodney and folks on-da-list, rod...@cisco.com (Rodney Dunn) wrote: > Set up IP SLA ICMP probes? > http://www.cisco.com/en/US/docs/ios/12_4/ip_sla/configuration/guide/hsicmp.html Since I am stupid and you, Rodney, are wise - and all the others will have to show their hands ;-) - my question:

Re: [c-nsp] Cisco ASR BGP within the box question

2010-08-03 Thread Steven.Glogger
thanks oliver, will try and keep you (and the list) updated. -steven -Original Message- From: Oliver Boehmer (oboehmer) [mailto:oboeh...@cisco.com] Sent: Tuesday, August 03, 2010 8:06 AM To: Glogger Steven, SCS-NIT-NIO-PIO-DNW-NEO; cisco-nsp@puck.nether.net; na...@nanog.org Subject: R

[c-nsp] Match-in-VRF

2010-08-03 Thread David Warner
Hi, Was hoping someone could advise with regards to what the NAT keywords "match-in-vrf" achieves? We typically use this in production. However, Ive just been labbing NAT config using VRF lite and it doesnt appear to change behaviour and Cisco literature is unclear. With or without it, translat