Re: [c-nsp] Add Path IOS

On 2012-03-19 21:41, Nick Hilliard wrote: It's already available on SR (i.e. 7200 / 7600). Good to know, I should consider upgrading then. What about SX and 15.x train? Any chance that it will be available soon? Incidentally if you're starting a new thread, please start a new thread and

Re: [c-nsp] IP helper-address source from loopback?

Jay, Take a look here... I think this should do the trick. http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iad_dhcps ervidlink_mcp.html#wp1058967 Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jay

Re: [c-nsp] Firewall/IPS Load Balancing

On Tue, Mar 20, 2012 at 00:50, Murphy, William william.mur...@uth.tmc.edu wrote: I thought I would poll the list to solicit recommendations on how to do firewall/IPS load balancing.  I am considering a traffic distribution switch from GigaMon but I am curious what other products might be out

Re: [c-nsp] Firewall/IPS Load Balancing

On 03/20/2012 09:31 AM, Eugeniu Patrascu wrote: I think you are a bit confused: GigaMon does not produce/sell load balancing switches. What they do sniffing equipment that has the Maybe he means this? http://www.gigamon.com/g-secure-0216 I think you need to better describe what are your

Re: [c-nsp] Add Path IOS

On 20/03/2012 06:46, Christian Meutes wrote: Good to know, I should consider upgrading then. What about SX and 15.x train? Any chance that it will be available soon? You'll have to ask your SE about this. Note that this is ibgp add-path support only. There is no support for ebgp add-path on

[c-nsp] About Cisco ASR 1006 Router performance

Dear honorable member: Wishes all are fine. i need   suggestion from you about CISCO ASR 1006 router performance. i want to buy  this router for IP Transit provider where i received  all global routes . it would be nice please put your valued suggestion about this issue. thanks

Re: [c-nsp] About Cisco ASR 1006 Router performance

Stable product. Not sure about full internet feed but I am using 7609 for the same purpose it is perfectly running. ASR is the high end series should work. -FJ On Tue, Mar 20, 2012 at 4:19 PM, Md. Jahangir Hossain jrjahan...@yahoo.comwrote: Dear honorable member: Wishes all are fine. i

Re: [c-nsp] About Cisco ASR 1006 Router performance

On 20/03/2012 11:19, Md. Jahangir Hossain wrote: i need suggestion from you about CISCO ASR 1006 router performance. i want to buy this router for IP Transit provider where i received all global routes . ASR1k performance depends completely on the ESP card used. ESP cards come with a

Re: [c-nsp] About Cisco ASR 1006 Router performance

Hi, On 2012-03-20 13:19, Md. Jahangir Hossain wrote: i need   suggestion from you about CISCO ASR 1006 router performance. i want to buy  this router for IP Transit provider where i received  all global routes . it would be nice please put your valued suggestion about this issue. regarding

[c-nsp] PPPOE pass through Cisco Routers

As an environment as Wireless ISP, we are trying to deliver PPPOE connections to our clients, in a routed network. So, our first problem is to pass through PPPoE protocol over one or several cisco routers. Could somebody help us with this task? Thanks very much in advance. Gracias y

Re: [c-nsp] PPPOE pass through Cisco Routers

Hi, You most likely need to look into Layer 2 VPN options... Either over MPLS (EoMPLS/ATOM/VPLS) or over IP using L2TPv3. Be careful with MTU... Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Cipriano Montero,

Re: [c-nsp] PPPOE pass through Cisco Routers

On 03/20/2012 05:07 AM, Cipriano Montero, Infostock wrote: As an environment as Wireless ISP, we are trying to deliver PPPOE connections to our clients, in a routed network. So, our first problem is to pass through PPPoE protocol over one or several cisco routers. Could somebody help us with

Re: [c-nsp] Firewall/IPS Load Balancing

Thanks for your feedback, but I don't think I am confused. GigaMon produces a G-Secure-0216 device which allows you to take a 10G link and split the flows/conversations across up to 8 1G links. They basically call it a security device load balancer. The device operates at close to line rate

Re: [c-nsp] IP helper-address source from loopback?

On 3/19/12 11:56 PM, Arie Vayner (avayner) wrote: Jay, Take a look here... I think this should do the trick. http://www.cisco.com/en/US/docs/ios/ipaddr/configuration/guide/iad_dhcps ervidlink_mcp.html#wp1058967 Arie It indeed does! It's only in the SE train, so now I need to analyze how

Re: [c-nsp] PPPOE pass through Cisco Routers

Congruent with your last suggestion, what about using L2TPv3 in a LAC/LNS sort of configuration? It's very easy to setup if you don't already have an MPLS enabled network deployed. -Vinny -Original Message- From: cisco-nsp-boun...@puck.nether.net

[c-nsp] Cisco ASA IPSec VPN Problem

Hello, We have the following problem with IPSec Site-to-Site VPN between Cisco ASA. The VPN establishes (IKE and IPSec phases are passed), but on my end I have only TX traffic, no RX. We've checked NAT (Exempt), ACL, routing. We've recreated the VPN from scratch. But, without success. And this

Re: [c-nsp] Cisco ASA IPSec VPN Problem

On Tue, 20 Mar 2012, Covalciuc Piotr wrote: We have the following problem with IPSec Site-to-Site VPN between Cisco ASA. The VPN establishes (IKE and IPSec phases are passed), but on my end I have only TX traffic, no RX. Who controls the other end? So you're sending traffic via the VPN, but

Re: [c-nsp] N7k CoPP versus rate-limiters

Hi Phil, There are certain exceptions for packets being forwarded which are not handled by CoPP, these are covered by the HW Rate Limiters. Hardware rate-limiters protect the supervisor CPU from excessive inbound traffic. The traffic rate allowed by the hardware rate-limiters is configured

[c-nsp] 2960S IOS

Hi Guys, Have a pair of new 2960S's that are running 12.2(55)SE3 - Just after a recommendation on whether to upgrade to 12.2.58-SE2 or go to 15.0.1-SE2 ? Cheers. ___ cisco-nsp mailing list

Re: [c-nsp] 2960S IOS

Hi John, I just upgrade our branch fleet of 2960s' to 15.0.1-SE2 if that helps. Thanks Simon - No issues as yet I assume? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] 2960S IOS

12.2.58 is not going anywhere, we're halfway through upgrading to 15.0 (first versions had some show stoppers but latest version okay..so far! ;) ) alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Filtering Routes with Private AS Numbers in the AS Path

Hi, For filtering private as numbers (64512-65535) using an as-path access-list there are a few options I have seen: 1). All in one line ip as-path access-list 66 permit _(6451[2-9]|645[2-9][0-9]|64[6-9][0-9][0-9]|65[0-4][0-9][0-9]|655[0-2][0-9]|6553[0-5])_ 2). The above modified hopefully to

Re: [c-nsp] 2960S IOS

Hi John, I just upgrade our branch fleet of 2960s' to 15.0.1-SE2 if that helps. Cheers, Simon. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Elliot Sent: Wednesday, 21 March 2012 9:13 AM To: cisco-nsp Subject:

Re: [c-nsp] 2960S IOS

Not certain if anyone is looking into smart install or vstack but when you go to 15 train you get a few nicer features which is one of the reasons we have gone into the 15 train where we can. -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] 2960S IOS

John, we're using 15.0.1-SE2 (and 15.0.1-SE1) on aproximately 20 2960S's for a while and we have no problem so far. Regards, Jiri Dne 21.3.2012 0:13, John Elliot napsal(a): Hi Guys, Have a pair of new 2960S's that are running 12.2(55)SE3 - Just after a recommendation on whether to

Re: [c-nsp] 2960S IOS

John, we're using 15.0.1-SE2 (and 15.0.1-SE1) on aproximately 20 2960S's for a while and we have no problem so far. Thanks to all who responded - have upgraded to 15.0(1)SE2...fingers crossed we encounter no issues :)