Re: [c-nsp] general nat issue (not cisco)

2011-06-25 Thread Mick O'Rourke
Is proxy arp is disabled on the ASA? On 26/06/2011, Pete Lumbis wrote: > On Sat, Jun 25, 2011 at 8:49 PM, Aaron Riemer wrote: > >> How does the cisco ASAs take care of this problem? >> >> >> >> > The ASAs "own" the address so they will respond to any ARP requests for NAT > addresses. > _

Re: [c-nsp] general nat issue (not cisco)

2011-06-25 Thread Pete Lumbis
On Sat, Jun 25, 2011 at 8:49 PM, Aaron Riemer wrote: > How does the cisco ASAs take care of this problem? > > > > The ASAs "own" the address so they will respond to any ARP requests for NAT addresses. ___ cisco-nsp mailing list cisco-nsp@puck.nether.ne

Re: [c-nsp] Content filters configured as transparent bridges and spanning tree

2011-06-25 Thread Pete Lumbis
What do you mean by "weren't agreeing"? My only experience is with transparent firewalls which don't pass BPDUs, but act in actual active/standby. The standby doesn't pass any traffic so there is no mac learning over those ports. When there is a firewall failover BPDUs are suddenly received on a

Re: [c-nsp] Content filters configured as transparent bridges and spanning tree

2011-06-25 Thread Christopher J. Wargaski
Steven-- How about increasing the STP cost of the switch ports connecting to the secondary content filter? That should force STP to prefer the primary. cjw Date: Fri, 24 Jun 2011 10:58:50 -0400 > From: "Steven Pfister" > To: > Subject: [c-nsp] Content filters configured as transparent brid

[c-nsp] general nat issue (not cisco)

2011-06-25 Thread Aaron Riemer
Hey guys, I have a bit of an oddball query for you all. Lets say I have a linux box that is acting as a router / fw. there is two segments or LANs. One of the segments (172.16.0.0/24) has inside hosts while the other connects to a single cisco router on 10.0.0.0/24. Now here is the weird p

Re: [c-nsp] How I can do IOS recovery for ASR 1002 from ROMMON?

2011-06-25 Thread Tassos Chatzithomaoglou
You can try to boot from a usb stick, where you have the image. -- Tassos ccie wrote on 25/06/2011 14:30: Hi expers, How I can do IOS recovery for ASR 1002 from ROMMON? Regards, Amin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net htt

Re: [c-nsp] How to effect a totally stubby area in IS-IS

2011-06-25 Thread Vitkovsky, Adam
Oh crap I ran into the same issue when I tried to reproduce the old lab I have used the 122-33.SRE on 7200s and got the same error: %CLNS: Duplicate system ID configured in ip vrf with router isis 1 It's working though on the ancient 124-24 (old lab from which I took the config) If the same sys

[c-nsp] Layer connection

2011-06-25 Thread harbor235
So here is my scenario, I have a primary Internet gateway service at location X and a backup gateway service at location Y. To add resiliency to my design I am thinking about adding a layer 2 device into the mix at location X that uses a large SP layer 2 service connecting the two sites at layer2.

[c-nsp] How I can do IOS recovery for ASR 1002 from ROMMON?

2011-06-25 Thread ccie
Hi expers, How I can do IOS recovery for ASR 1002 from ROMMON? Regards, Amin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/