Re: [c-nsp] PVLAN Question

2011-01-11 Thread schilling
promisc port has to be access port. So you need a loopback cable on your access switch with two vlan numbers for your primary vlan. For example vlan 140 and vlan 141, then your link to distribution will still be vlan 140, 252 trunk, but one end of loopback cable would be access vlan 140, the other

[c-nsp] PVLAN Question

2011-01-11 Thread Sam Evans
All, I am trying to do a PVLAN implementation on one switch in a distribution / access switch environment. Ideally, I'd like to just be able to use the 'isolated' command but we have a few devices that will need to talk to port neighbors, so the PVLAN community would work well. My challenge here

[c-nsp] GSR 12k downgrade IOX to IOS

2011-01-11 Thread Judah Scott
Can someone direct me to a document explaining how to downgrade a gsr12k from IOX back to IOS? Or does anyone have experience with this? This is a lab box so any way it works, works for us. Since we have multiple PCCARDs and CFs we would be most interested in a way to switch back and forth with

Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de facto for you?

2011-01-11 Thread Pete Lumbis
You could connect a console and just leave it logging until the next reload. I haven't seen it on switches, but I've see other boxes crash without writing a crashinfo file. If it crashes or reloads for any software related reason it will probably show something in the console. -Pete On Tue, Jan 1

[c-nsp] local privilege level question

2011-01-11 Thread Greg Whynott
hello, on an ASR1004 we have local accounts where the privilege level is set to 15. when I type 'en' it still asks for the enable password. is there away to prevent this behavior so that persons with local accounts/15 priv can execute level 15 commands without being prompted? we are not u

Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de facto for?you?

2011-01-11 Thread Alexander Clouter
Jeff Kell wrote: > > On 1/11/2011 11:29 AM, Seth Mattinen wrote: >> The cisco-nsp mailing list is often much more helpful than TAC. > > On that note... does this ring any bells? > > Have a 3750E that has had spurious reloads (4 since Friday), was > switch-1 of a 3-member stack, initially was the

Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de facto for you?

2011-01-11 Thread Keegan Holley
Are your PDU's metered? Are you near capacity? Did anything else in the rack lose power? Usually the whole circuit drops if something like that happens or a breaker is tripped. Is it possible it's a bad power supply? Cisco said the outage was cause by power, but they didn't say the switch wasn'

Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de facto for you?

2011-01-11 Thread David Rothera
That, if nothing else should shut TAC up and get them into looking at another possible source? On 11 Jan 2011, at 20:13, Edward Beheler wrote: > Swap power between the failing switch and another one in the stack, see if > the problem moves? > > -Original Message- > From: cisco-nsp-bou

Re: [c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de facto for you?

2011-01-11 Thread Edward Beheler
Swap power between the failing switch and another one in the stack, see if the problem moves? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jeff Kell Sent: Tuesday, January 11, 2011 2:25 PM To: cisco-nsp Subject: [c-nsp

Re: [c-nsp] ARP strangeness

2011-01-11 Thread Keegan Holley
On Tue, Jan 11, 2011 at 2:50 PM, Rodney Dunn wrote: > > > On 1/11/11 11:49 AM, Keegan Holley wrote: > >> Possibly a stupid question, but I thought ARP had to be broadcast >> because the mac address of the destination was unknown. >> > > That is true for the first request. For subsequent arp refre

Re: [c-nsp] ARP strangeness

2011-01-11 Thread Rodney Dunn
On 1/11/11 11:49 AM, Keegan Holley wrote: Possibly a stupid question, but I thought ARP had to be broadcast because the mac address of the destination was unknown. That is true for the first request. For subsequent arp refreshes the most efficient way is to unicast it. If the CPE has th

[c-nsp] Catalyst reloads (was Re: Is Cisco equpiment de facto for you?

2011-01-11 Thread Jeff Kell
On 1/11/2011 11:29 AM, Seth Mattinen wrote: > The cisco-nsp mailing list is often much more helpful than TAC. On that note... does this ring any bells? Have a 3750E that has had spurious reloads (4 since Friday), was switch-1 of a 3-member stack, initially was the master, now switch-2 has taken

[c-nsp] Port-Channel Limits

2011-01-11 Thread Jose Madrid
I need to configure a port-channel with multiple 10Gb interrfaces and am wondering if anyone knew the limit of ports I could have in the same port-channel? From what I have been able to find it appears to be 8, but I wanted to know if anyone knew of a real-life answer. Here is the document i found

Re: [c-nsp] ARP strangeness

2011-01-11 Thread Keegan Holley
Possibly a stupid question, but I thought ARP had to be broadcast because the mac address of the destination was unknown. If the CPE has the correct mac address to unicast an ARP request, why would it need to arp in the first place? I suppose I can understand renewing the entry via unicast, but t

Re: [c-nsp] PA-2FE-TX in 7206VXR

2011-01-11 Thread Chris Stone
Nick, On Tue, Jan 11, 2011 at 3:03 AM, Nick Hilliard wrote: > On 10/01/2011 23:47, Chris Stone wrote: >> >> Any suggestions? Bad interface card maybe? > > This card is supported by that version of software and with that npe card. >  Did you try reseating it / checking out the pinouts / inserting

Re: [c-nsp] PA-2FE-TX in 7206VXR

2011-01-11 Thread Chris Stone
Oliver, On Tue, Jan 11, 2011 at 1:04 AM, Oliver Eyre wrote: > I believe you may be exceeding the availble bandwidth points for the > chassis. > > First result in google for "7200 bandwidth points" should have a PDF where > you can check how many points each interface needs. According to the outp

Re: [c-nsp] cpu spike every minute

2011-01-11 Thread Matlock, Kenneth L
We had the same thing with the same version of Modular code. (Which is the reason why we no longer run Modular) I'll have to dig up the bug ID, but basically it's a small memory leak that's triggered by 'show run' or 'write term'. If you have dual supervisors then swap to the other one and th

Re: [c-nsp] cpu spike every minute

2011-01-11 Thread Matlock, Kenneth L
Ok, found the bug ID: CSCsr12976 Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org From: Matlock, Kenneth L Sent: Tuesday, January 11, 2011 6:43 AM To: Holemans Wim; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] cpu spike

Re: [c-nsp] Bandwidth/capacity per demand

2011-01-11 Thread Alex
Juniper sells MX5, MX20 and MX40 bundles, all based on MX80 hardware but with 10G ports restricted. Talk to your nearest Juniper rep if you need more details. Rgds Alex -- From: "Jeferson Guardia" Sent: Tuesday, January 11, 2011 1:23 PM To: Subje

Re: [c-nsp] Bandwidth/capacity per demand

2011-01-11 Thread Peter Rathlev
On Tue, 2011-01-11 at 11:23 -0200, Jeferson Guardia wrote: > They sell the powerful hardware with a good throughput and etc, but limited > to what he paid. If one day he needs more capacity, he would > pay an additional and get a new "license" and be able to have more capacity > in terms of perform

Re: [c-nsp] Bandwidth/capacity per demand

2011-01-11 Thread Jeferson Guardia
Could you please provide more information about it? I am very interested on getting to know about those things. Thank you!! 2011/1/11 Jared Mauch > > On Jan 11, 2011, at 8:23 AM, Jeferson Guardia wrote: > > > Hi, > > > > I work with other telecom geat and Ive been seeing very often the concept

Re: [c-nsp] Bandwidth/capacity per demand

2011-01-11 Thread Jared Mauch
On Jan 11, 2011, at 8:23 AM, Jeferson Guardia wrote: > Hi, > > I work with other telecom geat and Ive been seeing very often the concept of > capacity per demand. > > For example: > > A customer buys a powerful hardware but doesnt want to pay for it, but > someday he might need it, so what hap

[c-nsp] Bandwidth/capacity per demand

2011-01-11 Thread Jeferson Guardia
Hi, I work with other telecom geat and Ive been seeing very often the concept of capacity per demand. For example: A customer buys a powerful hardware but doesnt want to pay for it, but someday he might need it, so what happens is: They sell the powerful hardware with a good throughput and etc,

Re: [c-nsp] ASA ssl webvpn question

2011-01-11 Thread jkrejci
With local user auth you can also define users to exclude them from access to the vpn or to ssh on the asa itself. Sent via BlackBerry from T-Mobile -Original Message- From: Ryan West Sender: cisco-nsp-boun...@puck.nether.net Date: Tue, 11 Jan 2011 12:34:54 To: dalton; cisco-nsp@puck.

[c-nsp] cpu spike every minute

2011-01-11 Thread Holemans Wim
We are seeing a cpu spike (and corresponding icmp respons latency) every minute on one of our 65XX. It is a 6506-E with Sup32-8G running IOS version ipbasek9-vz.122-18.SXF6. I checked al our mgmt processes (snmp requests, arp table copies,...) but found nothing that could lead to this behavior.

Re: [c-nsp] ARP strangeness

2011-01-11 Thread Rodney Dunn
Frank, Maybe you could put it in a timeline for me as i think I'm still missing what exactly is failing. Sorry, a bit slow the last few days. The 7600 should send a *unicast* arp to every entry in it's arp cache 60 seconds prior to what you have the arp timer set to. It will then send another

Re: [c-nsp] ASA ssl webvpn question

2011-01-11 Thread Ryan West
dalton wrote: > Hi all, > I am in the process of reading through docs etc on this, but was > hoping someone maybe has done this before and can give me a quick answer. > > I have an ASA running ssl vpn as well as normal remote access (cisco client > based). > What I am trying to do is exclude 1 p

Re: [c-nsp] Backup edge port

2011-01-11 Thread Ronan Mullally
On Mon, 10 Jan 2011, Peter Rathlev wrote: > On Mon, 2011-01-10 at 19:44 +0100, Gert Doering wrote: > > On Mon, Jan 10, 2011 at 07:56:51PM +0200, Ibrahim Abo Zaid wrote: > > > I have a server connected to 2 switches and need to implement > > +1 > > For Linux servers, just use bonding with the modpr

Re: [c-nsp] PA-2FE-TX in 7206VXR

2011-01-11 Thread Carlos Friacas
Hi Chris, On Mon, 10 Jan 2011, Chris Stone wrote: (...) I have 2 other FastEthernet interfaces in this router as well as an ATM DS3 - running along without issue - til now with this new interface card anyway. Total of 4 FastEthernet interfaces - even though the 'sh ver' above says 3. I have 2

Re: [c-nsp] PA-2FE-TX in 7206VXR

2011-01-11 Thread Nick Hilliard
On 10/01/2011 23:47, Chris Stone wrote: Any suggestions? Bad interface card maybe? This card is supported by that version of software and with that npe card. Did you try reseating it / checking out the pinouts / inserting it into a different slot? If that doesn't work, then I'd return to th

Re: [c-nsp] ASA ssl webvpn question

2011-01-11 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dalton wrote: > Hi all, > I am in the process of reading through docs etc on this, but was hoping > someone maybe has done this before and > can give me a quick answer. > > I have an ASA running ssl vpn as well as normal remote access (cisco client

Re: [c-nsp] GRP vs. PRP-1

2011-01-11 Thread Sascha Pollok
Hola, The PRP-1 has much more room to put stuff in (1GB Ram) and is much faster. It still shows high CPU though when it comes to a high number of peers etc. You might consider PRP-2 in that case. But in your case PRP-1 should be perfectly fine. The GRB-P is also out of support and gets no ne

Re: [c-nsp] PA-2FE-TX in 7206VXR

2011-01-11 Thread Gert Doering
Hi, On Tue, Jan 11, 2011 at 07:04:50PM +1100, Oliver Eyre wrote: > I believe you may be exceeding the availble bandwidth points for the > chassis. This will not result in the observed behaviour. It will just lead to a warning, and potentially to packet loss (if too many interfaces are bursting

Re: [c-nsp] PA-2FE-TX in 7206VXR

2011-01-11 Thread Oliver Eyre
I believe you may be exceeding the availble bandwidth points for the chassis. First result in google for "7200 bandwidth points" should have a PDF where you can check how many points each interface needs. Oliver ___ cisco-nsp mailing list cisco-nsp@pu