[c-nsp] New ACE-20 module is not synching in ANM after replacing with existing module

2011-06-03 Thread Farooq Razzaque
Hi All We replaced the Faulty ACE module with RMA module in cat 6500 chassis. ACE moudule is being managed by ANM. After replacing the module, while i am doing CLI synching option on this module, following error is displaying "Device Discovery failed: serial number mismatch, expected SAD

Re: [c-nsp] cat6500/fwsm performance

2011-06-03 Thread Tony Varriale
On 6/3/2011 3:30 PM, Jeff Bacon wrote: I am, however, left with one mystery. How can the Cisco docs on a FWSM claim a 30-usec latency when clearly it isn't capable of that, at least not in any configuration that I'm aware of? Granted that it's all lies, damn lies, and marketing material, but pu

Re: [c-nsp] cat6500/fwsm performance

2011-06-03 Thread Matlock, Kenneth L
Well, technically if you can have all your tables/lookups pre-populated 1Gb/sec = 125MB/sec Or 125KB/msec Or 125B/usec A 64 byte packet will then take about 0.5usec to send or receive. That means receiving the packet, and sending it takes 1usec of time. That leaves 29usec of time to process t

Re: [c-nsp] cat6500/fwsm performance

2011-06-03 Thread Jeff Bacon
I am, however, left with one mystery. How can the Cisco docs on a FWSM claim a 30-usec latency when clearly it isn't capable of that, at least not in any configuration that I'm aware of? Granted that it's all lies, damn lies, and marketing material, but putting that number in the main data sheet

Re: [c-nsp] Cisco N5548P with N2248TP Fex not found

2011-06-03 Thread Quinn Snyder
not seeing the vpc peer-link in th config, nor a layer-3 address for the keepalive link to communicate across. if you are planning to use vpc -- there are a number of things wrong. i guess a deeper understanding of your topology and what you are attempting to accomplish is in order. q. -= sent v

Re: [c-nsp] Cisco N5548P with N2248TP Fex not found

2011-06-03 Thread Chris Evans
Configuration looks right. You have vpc configured but are you using it with the fex or are they single homed? You also have a port channel configured but are only using one physical link? If the fex are attached cross 5k you need vpc commands on the port channels. Physical layout would help u

Re: [c-nsp] Cisco N5548P with N2248TP Fex not found

2011-06-03 Thread John Gill
Hi Renelson, Can you "show fex" and "show fex nnn detail" for a problematic fex? Configs look fine. Regards, John Gill cisco On 6/3/11 3:04 PM, Renelson Panosky wrote: First I want to thank everyone for their help yesterday but i am still having some issues with some of them. Some of my fex

[c-nsp] Cisco N5548P with N2248TP Fex not found

2011-06-03 Thread Renelson Panosky
First I want to thank everyone for their help yesterday but i am still having some issues with some of them. Some of my fex are not showing up even though all my configs are similar. I've posted the config below please any help would be appreciated. sho run !Command: show running-config !Time:

Re: [c-nsp] EoMPLS Remote Port Shutdown

2011-06-03 Thread Yuri Bank
I'm trying to achieve a function similar to LFP,link pass through (this is what its called on Alcalu Ethernet/MPLS switches). If one side of the psudowire is down, I would like the adjacent port to also go down to prevent black holing traffic. Obviously lowering hold timers, or using PFR with IP SL

Re: [c-nsp] cat6500/fwsm performance

2011-06-03 Thread Jeff Bacon
Not quite all, but very helpful nonetheless and a great reference - something like that should be in the standard "support" section for the FWSM. I also found another reference to performance issues in another doc around the same time that says a lot of useful stuff: http://www.sectao.com/redi

[c-nsp] 7600 VPLS and specific second-dot1q .. only ES+ can do it? or ASR9k i guess..

2011-06-03 Thread Daniel
I've been searching Cisco documentation ( and this archive ), and i want to confirm something with respect to 7600 VPLS The following example shows how to create a Q-in-Q AC, with IOS XR RP/0/RSP0/CPU0:router# configure RP/0/RSP0/CPU0:router(config)# interface GigabitEthernet 0/0/0/0.2 RP/0/RSP0/

[c-nsp] Strange Error on VPN rotuer (crypto_engine_ps_vec(): no subblock attached)

2011-06-03 Thread Muhammad Atif Jauhar
Hi, I am getting strange error on one of the VPN router. Error: crypto_engine_ps_vec(): no subblock attached Cisco Router: 2821 Cisco IOS: C2800NM-ADVIPSERVICESK9-M, Version 12.4(25b) Kindly advice how to check and troubleshoot this error. -- Regards, Muhammad Atif Jauhar (+60-10-2155076)

Re: [c-nsp] IPv6 Prefix inbound filter

2011-06-03 Thread Gert Doering
Hi, On Fri, Jun 03, 2011 at 08:34:38PM +0530, arulgobinath emmanuel wrote: > I thought the memory requirement might high but the total memory for /48 > range routes and couple of static routes [show memory summary | inc IPv6] > summing up only around ~4mb There's only a few thousand IPv6 routes

Re: [c-nsp] Memory leak on in latest 12.0S on GSR?

2011-06-03 Thread Sascha Pollok
Some more details below, sorry for the noise. Work around is periodic reloads and eliminating down/shutdown bgp sessions. I am sure there are other bugs but not sure what all of them are. So I guess I am more likely hitting one of those other bugs :-( I did some digging and found, that "sho

Re: [c-nsp] Tunneling MPLS on ME3400E

2011-06-03 Thread Pawlowski, Maciej
Hello, Sorry for the long signature from my previous post ... Just small update - I think matching by EXP on QoS won't work just because ME3400E doesn't support MPLS :) I think MPLS will be tunelled as other ethernet frames - just have doubts if ME doesn't allow 0x8847 or 0x8848 frame types

Re: [c-nsp] Memory leak on in latest 12.0S on GSR?

2011-06-03 Thread Sascha Pollok
Me again, These occur due to memory leaks in the BGP process. Disabled BGP sessions can cause memory leakage and the type of CPU issues you are seeing. there are currently none on this box. Solution is upgrade to latest 12.0(33)S train. The PRP-1 is on 12.0(33)S7. Quite new I guess. Wor

Re: [c-nsp] IPv6 Prefix inbound filter

2011-06-03 Thread arulgobinath emmanuel
I thought the memory requirement might high but the total memory for /48 range routes and couple of static routes [show memory summary | inc IPv6] summing up only around ~4mb On Fri, Jun 3, 2011 at 4:25 PM, Justin M. Streiner wrote: > On Fri, 3 Jun 2011, arulgobinath emmanuel wrote: > > what is

Re: [c-nsp] EoMPLS Remote Port Shutdown

2011-06-03 Thread Arie Vayner (avayner)
Yuri, 7600 support Remote Port Shutdown per the below documentation reference, but it does not actually shutdown the whole port, but actually used E-OAM to signal to the CPE that the PW is down... What are you trying to achieve? Thanks Arie -Original Message- From: cisco-nsp-boun...@pu

Re: [c-nsp] IPv6 Prefix inbound filter

2011-06-03 Thread Justin M. Streiner
On Fri, 3 Jun 2011, arulgobinath emmanuel wrote: what is the current industry practices in IPv6 inbound prefix filter is it /32 or /48 ? or it depends on the global IPv6 prefix growth vs memory ? As always, your experience may vary, but it seems like many operators are starting to settle on

[c-nsp] IPv6 Prefix inbound filter

2011-06-03 Thread arulgobinath emmanuel
Hi all, what is the current industry practices in IPv6 inbound prefix filter is it /32 or /48 ? or it depends on the global IPv6 prefix growth vs memory ? Regards, Gobinath. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/m

Re: [c-nsp] Routing Question

2011-06-03 Thread Joseph Hardeman
Hey Tony and Gert, Now this is getting interesting, I wasn't aware that you could run VRF's without MPLS, I have just recently gotten the Cisco routers and don't know everything about them or the Cisco configurations I can use. Once I get some time today, I will start looking into how to set it u

Re: [c-nsp] route-map null0

2011-06-03 Thread Sergey Nikitin
Hi, May be you could use something like this: ip route 192.168.0.1 255.255.255.255 Null0 route-map DROP permit 10 set ip next-hop 192.168.0.1 HTH Mohammad Khalil wrote: Hi all i am trying to simulate ICMP drops via PBR route-map DROP permit 10 match ip address ICMP match interface FastEt

[c-nsp] route-map null0

2011-06-03 Thread Mohammad Khalil
Hi all i am trying to simulate ICMP drops via PBR route-map DROP permit 10 match ip address ICMP match interface FastEthernet0/0.67 match length 100 100 set default interface Null0 Rack1R6(config)#route-map DROP Rack1R6(config-route-map)#set interface null 0 % route-map:can

Re: [c-nsp] FWSM Failover Issue

2011-06-03 Thread Antonio Soares
I was reading the document I mentioned more carefully and found one possible explanation: Unit Health Monitoring FWSM determines the health of the other unit by monitoring the failover link. When a unit does not receive hello messages on the failover link, th

[c-nsp] FWSM Failover Issue

2011-06-03 Thread Antonio Soares
Hello group, I'm troubleshooting a FSWM Failover issue. The scenario has the two FWSM in different chassis in Active/Active mode. One chassis went down and the FSWM in the other chassis didn't assume the control of the two failover groups. The only message that was possible to capture was: "FO_

[c-nsp] Tunneling MPLS on ME3400E

2011-06-03 Thread Pawlowski, Maciej
Hello, Our customer asked us for possibility for the following: 1. Tunneling MPLS through L2 VPN - the customer-facing device is ME3400E 2. Matching incoming MPLS traffic on ME3400E by EXP. I'm considering to create standard dot1Q tunnel or 802.1d s-uni interface but having doubts if this port

Re: [c-nsp] Routing Question

2011-06-03 Thread Gert Doering
Hi, On Thu, Jun 02, 2011 at 10:28:27PM -0400, Joseph Hardeman wrote: > Thanks for the reply, I was hoping there was some way to do it with > Local-Prefs or weights setting the BGP routes from peers into a group and > then selecting that group from the routing table for the internal IP Range I > wa