Re: [c-nsp] uRPF lacking on ME3600X?

2011-06-16 Thread LM
Is the same in 7600 El 15/06/11 18:46, vinny_abe...@dell.com escribió: Oh yuck, really?? Is this a limitation of the platform? -Vinny -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Nick Hilliard Sent: Wednesday, June

Re: [c-nsp] uRPF lacking on ME3600X?

2011-06-16 Thread Gert Doering
Hi, On Thu, Jun 16, 2011 at 08:25:39AM +0200, LM wrote: Is the same in 7600 Except that PFC4 is not even on the roadmap there. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany

Re: [c-nsp] Latest Nexus 5k NX-OS?

2011-06-16 Thread Thomason, Simon
I just saw this email going over the release notes now. I did not see that CSCtn94753 was fixed but only skimming over right now. Flex links looks pretty interesting along with Orphan port shutdown. -Original Message- From: cisco-nsp-boun...@puck.nether.net

[c-nsp] ASR9k A9K-8T-L LC crash and reload

2011-06-16 Thread Wyatt Mattias Gyllenvarg
Hi All We are having an issue with a ring of 3 ASR9010 and one 7606 Sup7203BXL with 6704-DFC3BLX. The LCs facing the 7606 crash and reload randomly (once they have reloaded at the same time). Both cards are in slot 0/2 and have if Te0/2/0/0 facing the 7606. All the ASR machines have the same

[c-nsp] Newb Question about site to site vpn....

2011-06-16 Thread Scott Voll
I have setup a couple 881's to do a Dynamic site to site vpn tunnel back to my ASA at the head end. All traffic ends up stopping even thou the tunnel is still up. If I start some traffic from the 881 than the traffic starts working from the head end (ASA side). What have I missed to get traffic

Re: [c-nsp] modify cisco router config with scripting?

2011-06-16 Thread d tbsky
Hi: thanks for all the information about the scripting problem. I find now basically there are two kind of method to do the work. 1.interactive CLI, with 3rd party tools or expect-like perl modules. 2. snmpset. but it can not be done directly, snmpset just trigger the tftp procedure. I

Re: [c-nsp] Newb Question about site to site vpn....

2011-06-16 Thread Ryan West
On Thu, Jun 16, 2011 at 10:45:56, Scott Voll wrote: Subject: [c-nsp] Newb Question about site to site vpn I have setup a couple 881's to do a Dynamic site to site vpn tunnel back to my ASA at the head end. All traffic ends up stopping even thou the tunnel is still up. If I start

Re: [c-nsp] modify cisco router config with scripting?

2011-06-16 Thread chip
One way we've done things like this is to generate all the config changes required and throw it in a plain text file. Then you use another script to log into the router and copy the file up to the router via tftp. This allows you to make almost any kind of changes you need while only having to

[c-nsp] IPv6 Support in Cisco IOS AnyConnect?

2011-06-16 Thread Chris Mason
Hi, Is anyone from Cisco able to confirm if IPv6 is supported when using the IOS based SSL VPN feature (inside the VPN)? The AnyConnect VPN client has a field for Client Address (IPv6) but I can't see how to enable it on the router. Using 15.0(1)M6 on the router and AnyConnect 2.5 on the client.

[c-nsp] Newb Question about site to site vpn.

2011-06-16 Thread manderson
-- next part -- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 305 bytes Desc: not available URL: https://puck.nether.net/pipermail/cisco-nsp/attachments/20110616/84e5172b/attachment-0001.pgp

Re: [c-nsp] ASR9k A9K-8T-L LC crash and reload

2011-06-16 Thread Piotr Wojciechowski
On 6/16/11 14:25 , Wyatt Mattias Gyllenvarg wrote: Hi All We are having an issue with a ring of 3 ASR9010 and one 7606 Sup7203BXL with 6704-DFC3BLX. Hi, Because problem occurs on multiple chassis I would guess hardware problems are unlikely. Have you performed software upgrade after you

Re: [c-nsp] Newb Question about site to site vpn.

2011-06-16 Thread Gert Doering
Hi, On Thu, Jun 16, 2011 at 10:00:19AM -0700, manderson wrote: Sounds like you maybe have it set up in client mode vs. network mode That was a particularily nice example of a completely useless mail. Full-Quoting a *Digest* with 8 individual mails in there, two different threads, and nothing

Re: [c-nsp] Newb Question about site to site vpn.

2011-06-16 Thread Scott Voll
What is the configuration difference? --scott On Thu, Jun 16, 2011 at 10:00 AM, manderson chief...@gmail.com wrote: Sounds like you maybe have it set up in client mode vs. network mode On Thu, Jun 16, 2011 at 8:26 AM, cisco-nsp-requ...@puck.nether.net wrote: Date: Thu, 16 Jun 2011

Re: [c-nsp] IPv6 Support in Cisco IOS AnyConnect?

2011-06-16 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Mason wrote: Hi, Is anyone from Cisco able to confirm if IPv6 is supported when using the IOS based SSL VPN feature (inside the VPN)? The AnyConnect VPN client has a field for Client Address (IPv6) but I can't see how to enable it on the

Re: [c-nsp] IPv6 Support in Cisco IOS AnyConnect?

2011-06-16 Thread Kaj Niemi
Hi, IOS SSL VPN doesn¹t currently support IPv6 for SVC. See Features Not Supported on the Cisco IOS SSL VPN http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/ guide/sec_ssl_vpn_ps10591_TSD_Products_Configuration_Guide_Chapter.html#wp1 502587 It works quite well on ASA

[c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Mike G
Hey all, We're looking at implementing VSS between our distribution/core switches, which are currently in a high-availability configuration using HSRP. From my research so far, the system is straight-forward and the limitations and requirements are fairly well documented. Has anyone had

[c-nsp] improving last-mile VDSL2 circuit between two Cisco routers

2011-06-16 Thread Martin T
I have connected two Cisco 1841 routers over poor quality POTS cabling using the Ethernet over VDSL2(profile 17a) converters. SNR is rather low and distance is long. Currently I have two POTS wires in use, but I could use another pair as well if this would help. I was wondering maybe it would help

Re: [c-nsp] IPv6 Support in Cisco IOS AnyConnect?

2011-06-16 Thread Chris Mason
IOS SSL VPN doesn¹t currently support IPv6 for SVC. See Features Not Supported on the Cisco IOS SSL VPN http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/ guide/sec_ssl_vpn_ps10591_TSD_Products_Configuration_Guide_Chapter.html#wp1 502587 Does anyone (Cisco people?)

Re: [c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Andrew Miehs
On Friday, June 17, 2011, Mike G gee...@gmail.com wrote: Has anyone had personal experience with a VSS deployment?  If so, do you have any horror stories, caveats, and/or recommendations?  I'm also interested in people's experience with IPv6 implementation in a VSS environment. We have 5 VSS

Re: [c-nsp] uRPF lacking on ME3600X?

2011-06-16 Thread Vinny Abello
I consider that the same platform. ;) -Vinny On Jun 16, 2011, at 2:25 AM, LM asturlui...@gmail.com wrote: Is the same in 7600 El 15/06/11 18:46, vinny_abe...@dell.com escribió: Oh yuck, really?? Is this a limitation of the platform? -Vinny -Original Message- From:

Re: [c-nsp] improving last-mile VDSL2 circuit between two Cisco routers

2011-06-16 Thread Walter Keen
Because you are essential increasing the gauge of wire, and therefore decreasing the resistance, you *should* have less loss. Telco's have used this in the past to extend DSL beyond the distance limitations before, (although not common, each pair in the ground is not a cheap commodity) If

Re: [c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Mike G
Thanks for the great feedback Andrew! Did you ever discover the cause of the crash? Also, was the 20 second outage due to the delay in the active-hot sup taking over or was it something else? On Jun 16, 2011 4:15 PM, Andrew Miehs and...@2sheds.de wrote: On Friday, June 17, 2011, Mike G

Re: [c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Andrew Miehs
On Friday, June 17, 2011, Mike G gee...@gmail.com wrote: Thanks for the great feedback Andrew!  Did you ever discover the cause of the crash?  Also, was the 20 second outage due to the delay in the active-hot sup taking over or was it something else? Iirc - the crash logs reported a cache

Re: [c-nsp] uRPF lacking on ME3600X?

2011-06-16 Thread Tim Durack
On Wed, Jun 15, 2011 at 9:08 PM, vinny_abe...@dell.com wrote: I was afraid of that. Thanks for the info... Is the Sup2T available yet or is that still forthcoming? Forthcoming. Don't bet your career on it though. Of course, Duke Nukem Forever just got released... -- Tim:

Re: [c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Mike G
Thank you again Andrew, I appreciate the info! Has anyone else run into problems? Have you heard of others having problems? Or, have you had a really successful VSS implementation and have no complaints? I would love to hear some more opinions on VSS. -MikeG On Thu, Jun 16, 2011 at 5:25 PM,

Re: [c-nsp] IPv6 Support in Cisco IOS AnyConnect?

2011-06-16 Thread Frank Bulk
The missing IPv6 nameservers issue is described in BugID CSCtg92043. Frank -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Kaj Niemi Sent: Thursday, June 16, 2011 2:43 PM To: Chris Mason Cc: cisco-nsp@puck.nether.net