Re: [c-nsp] Router 7200 + GE-PE module

2012-01-30 Thread bha Qaqish
Hi Oki But is there any limitation hardware between 7200 and PA-GE We are trying to redirect 600Mbps traffic to PA-ge BUT THERE IS A LIMITATION 200Mbps plus we faced a disconnected in the ping . BR -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de]

Re: [c-nsp] Router 7200 + GE-PE module

2012-01-30 Thread Mark Tinka
On Monday, January 30, 2012 04:14:56 PM bha Qaqish wrote: But is there any limitation hardware between 7200 and PA-GE We are trying to redirect 600Mbps traffic to PA-ge BUT THERE IS A LIMITATION 200Mbps plus we faced a disconnected in the ping . BR The PA-GE will never do 600Mbps. The most

Re: [c-nsp] Router 7200 + GE-PE module

2012-01-30 Thread Gert Doering
Hi, On Mon, Jan 30, 2012 at 10:14:56AM +0200, bha Qaqish wrote: But is there any limitation hardware between 7200 and PA-GE Yes, it's called PCI BUS and OLD HARDWARE. Please go to Wikipedia and read up what a PCI bus is, and what it can do. gert -- USENET is *not* the non-clickable part of

Re: [c-nsp] Router 7200 + GE-PE module

2012-01-30 Thread Gert Doering
Hi, On Mon, Jan 30, 2012 at 12:50:04AM +, Ahmad Farisy wrote: Is there any big difference for module card in 7200 when we use npe-g1 or npe-g2 comparing to the ole npes for 7200. In my though the chassis was remain the same, so it use the same bus data and will make the transfer data

Re: [c-nsp] Router 7200 + GE-PE module

2012-01-30 Thread Justin M. Streiner
On Mon, 30 Jan 2012, bha Qaqish wrote: But is there any limitation hardware between 7200 and PA-GE We are trying to redirect 600Mbps traffic to PA-ge BUT THERE IS A LIMITATION 200Mbps plus we faced a disconnected in the ping . You're unlikely to see 600 Mb/s through a PA-GE, as other posters

Re: [c-nsp] Router 7200 + GE-PE module

2012-01-30 Thread Werner Detter
Hi, as I've experienced the same, here's a short comment. You're unlikely to see 600 Mb/s through a PA-GE, as other posters have mentioned. 600 Mb/s would completely saturate whichever PCI bus in which the PA-GE is installed. One of our 7206VXR crashed probably due to overloading a

Re: [c-nsp] Cisco ASA and ipads

2012-01-30 Thread Mick O'Rourke
Had a look 6-12 months ago. At the time there were some good MDM options externally or internally managed that could be combined with AnyConnect always on VPN for Ipads Iphones etc. All combined well with any potential BYOD corp policy. It's an interesting space. Well worth having a chat to your

Re: [c-nsp] ASR1002 + ASR 1004

2012-01-30 Thread Ian Hiddleston
We're running some of the ASR1002 modular units in our network at the moment and are quite happy with them so far. I'm more tempted to run pairs of 1002's than 1006's with dual RP, but that's just me. I'd stay away from the fixed configuration 1002-F though, as it's had an EOL notice already.

Re: [c-nsp] ASR1002 + ASR 1004

2012-01-30 Thread Mark Tinka
On Monday, January 30, 2012 11:15:19 PM Ian Hiddleston wrote: We're running some of the ASR1002 modular units in our network at the moment and are quite happy with them so far. I'm more tempted to run pairs of 1002's than 1006's with dual RP, but that's just me. In peering/transit roles,

Re: [c-nsp] Cisco ASA and ipads

2012-01-30 Thread Ryan West
On Sun, Jan 29, 2012 at 21:54:59, Thomason, Simon wrote: Subject: [c-nsp] Cisco ASA and ipads I am looking at allowing IPADS to from a VPN with our ASA to provide limited access. I would like to ideally have the IPAD connect with a cert and username password but have the ASA aware that

Re: [c-nsp] Outbound drops on ME-3600X-24FS-M microbursts

2012-01-30 Thread Waris Sagheer (waris)
Microburst is the culprit as it has been suggested in the first email. Default queue-limit is 100 us which is not sufficient to accommodate 10Gig burst. However you can increase the queue-limit up to maximum queue-limit of 492 KB or 3932 us. The reason it does not allow queue-limit policy on the

[c-nsp] Quick (?) ASA VPN w/AD question...

2012-01-30 Thread Jeff Kell
Trying to break some new ground on ASA 8.4(2) VPN configuration (quite a number of changes) Need to map AD group membership onto a group policy selection. (1) Previous examples are using the Cisco name IETF-Radius-Class to map into the policy name, while 8.4(2) seems to want Group Policy

Re: [c-nsp] Quick (?) ASA VPN w/AD question...

2012-01-30 Thread Ryan West
Jeff, On Mon, Jan 30, 2012 at 16:41:00, Jeff Kell wrote: Subject: [c-nsp] Quick (?) ASA VPN w/AD question... Trying to break some new ground on ASA 8.4(2) VPN configuration (quite a number of changes) Need to map AD group membership onto a group policy selection. (1) Previous

Re: [c-nsp] Outbound drops on ME-3600X-24FS-M microbursts

2012-01-30 Thread Abel Alejandro
On Sun, Jan 29, 2012 at 2:15 AM, Steve Dodd sd...@syringanetworks.net wrote: The only reliable method we've found to mitigate OutDiscards on the ME36/3800 platform when coming from the 10G to the 1G interfaces has been to set a queue-limit per class. This fixed the issue. Thank you and also

Re: [c-nsp] Nexus 5596 architecture

2012-01-30 Thread John Gill
Hi Jiri, This sounds pretty straightfoward, the thing you need to look at most closely now is the traffic flows. Being all 10G is good because you will be cut-through switching unless there is congestion, which causes you to queue (store and forward). Do you expect multiple ports to be

[c-nsp] disabling ATM F5 OAM Loopback / Continuity cells

2012-01-30 Thread John Elliot
Hi Guys - We have a number of atm pvcs to carrier (For client tails) and we have a small number that experience outages(weekly) - The carrier has been investigating for months, and they have requested we disable ATM F5 OAM Loopback / Continuity cells on the PVC's on our core(Apparently in

Re: [c-nsp] disabling ATM F5 OAM Loopback / Continuity cells

2012-01-30 Thread Tony
Hi John, Try no oam-pvc manage cc under the PVC to stop sending of CC. regards, Tony. From: John Elliot johnellio...@hotmail.com To: cisco-nsp cisco-nsp@puck.nether.net Sent: Tuesday, 31 January 2012 1:49 PM Subject: [c-nsp] disabling ATM F5 OAM Loopback /

Re: [c-nsp] disabling ATM F5 OAM Loopback / Continuity cells

2012-01-30 Thread John Elliot
Cheers Tony - I only have(i.e. no cc): (config-if-atm-vc)#no oam-pvc manage ? 0-600 OAM loopback frequency(seconds) keep-vc-up OAM loopback cells failure action cr Date: Mon, 30 Jan 2012 19:58:46 -0800 From: td_mi...@yahoo.com Subject: Re: [c-nsp] disabling ATM F5 OAM Loopback /

Re: [c-nsp] disabling ATM F5 OAM Loopback / Continuity cells

2012-01-30 Thread Tony
John, Just no oam-pvc manage then to disable all OAM management. Have a look at this for other possible options: http://www.cisco.com/en/US/tech/tk39/tk48/technologies_configuration_example09186a0080094570.shtml#summary It would appear that by using oam-pvc 0-600 configured without the manage

Re: [c-nsp] disabling ATM F5 OAM Loopback / Continuity cells

2012-01-30 Thread John Elliot
Much appreciated Tony! - Assume that the oam-pvc 0 is normal (based on http://www.cisco.com/en/US/tech/tk39/tk51/technologies_q_and_a_item09186a008054.shtml) ... vbr-nrt 2048 2048 256 tx-ring-limit 16 oam-pvc 0 encapsulation aal5snap vs ... vbr-nrt 2048 2048 256 tx-ring-limit