[c-nsp] Cisco Infra DDOS Protection

2012-09-20 Thread ar
Hi Guys. What's your DDOS protection for your Cisco SP infra. I believe Cisco offers Clean Pipes 2.0 solution using Arbor. What's the accuracy and response time of netflow in ddos detection? what bout checkpoint for large service providers? ___ cisco-ns

[c-nsp] ME3600 switch interface showing Packet drops on Trunk Port.

2012-09-20 Thread Muthukumar Rajagopalan
Hi.. We have implemented ME3600 switch recently and observing random packet drops on the trunk link. On the access side, we have multi-services running, Normal Server Data traffic, Video + Voice. Below is the config on the trunk port and Q-in-Q enabled on the access. Different Pattern of traffic h

Re: [c-nsp] 2900 -> 2960 config question

2012-09-20 Thread Seth Mattinen
On 9/20/12 1:52 PM, Joseph Mays wrote: > I'm replacing a Cisco 2900XL running 12.0(5)WC13 with a Cisco 2960 running > 12.2(25r)FX. I just cut and pasted the config from the 2900 into the 2960, > and it all seemed to work fine, except the new IOS on the 2960 does not > accept one command -- > >

[c-nsp] 2900 -> 2960 config question

2012-09-20 Thread Joseph Mays
I'm replacing a Cisco 2900XL running 12.0(5)WC13 with a Cisco 2960 running 12.2(25r)FX. I just cut and pasted the config from the 2900 into the 2960, and it all seemed to work fine, except the new IOS on the 2960 does not accept one command -- Enter configuration commands, one per line. End

Re: [c-nsp] Are Nexus and per-interface or FEX MTU settings possible?

2012-09-20 Thread John Gill
That is correct, FCoE is the main driver for class-based MTU setting. It is actually a requirement in FCoE. Regards, John Gill cisco On 9/20/12 1:04 PM, Lars Christensen wrote: Hi Phil The rationale behind doing the L2 MTU on the whole platform is related to the whole QoS architecture and th

Re: [c-nsp] Are Nexus and per-interface or FEX MTU settings possible?

2012-09-20 Thread Lars Christensen
Hi Phil The rationale behind doing the L2 MTU on the whole platform is related to the whole QoS architecture and the Data Center Ethernet setup with FCoE and stuff. Remember, when you use FCoE, you are using a dedicated CoS class (or queue) for the FCoE traffic. As FCoE is requiring a MTU of ro

[c-nsp] MAC conflict with two 7609S using each one a NAM2

2012-09-20 Thread Aliet Santiesteban Sifontes
Hi list, I'm having and annoying problem with this configuration: Cisco 7609S using sup RSP720 1G Cisco IOS 12.2(33) SRE6 and NAM WS-SVC-NAM-2-250S Mod Ports Card Type Model Serial No. --- - -- -- --

[c-nsp] ASR 9K Broadband Licence??

2012-09-20 Thread Frank Norman
Dear friends, I need some clarification regarding running of broadband services on Cisco ASR 9006 router. As i understand ASR 9K can support maximum of 64k subscribers (although i don't see it any official datasheets, ASR 1K datasheet do mention limit of 64k). Document says that i need A9K-BNG-L

Re: [c-nsp] Are Nexus and per-interface or FEX MTU settings possible?

2012-09-20 Thread Phil Mayers
On 09/20/2012 07:20 AM, Reuben Farrelly wrote: policy-map type network-qos enable-jumbo-frames class type network-qos class-default mtu 9216 system qos service-policy type network-qos enable-jumbo-frames Interesting. Does anyone know the rationale behind this way of setting the M

Re: [c-nsp] Any experience with DMVPN on ASR1K?

2012-09-20 Thread Nasir Shaikh
Thank you all for the valuable input. I have now ordered 2 asr1001 to replace my 7206vxr NPE-G2s. I only expect to service ~400 spokes per router so these routers with ESP 2.5 should be OK, I think. I am sticking to phase 2. I have split our global network into 4 regional (dual) DMVPNs with dual hu

Re: [c-nsp] VMware teaming Nic's and multiple switches

2012-09-20 Thread Peter Rathlev
On Thu, 2012-09-20 at 10:20 +0200, Gert Doering wrote: > It's easy if one of the physical links goes down ("do not use that!"), > but I'm thinking more about the uplink network getting partitioned, or > one of the uplink switches failing in interesting ways (link still up, > but no packets get for

Re: [c-nsp] VMware teaming Nic's and multiple switches

2012-09-20 Thread Gert Doering
Hi, On Thu, Sep 20, 2012 at 12:13:22AM +0200, Peter Rathlev wrote: > You might not need MLAGs though. We run many stand-alone trunks from > 3750 and 3560 switches to VMware ESX hosts and let the vSwitch on the > host spread out the guests between these links and take care of > failover. Since th

Re: [c-nsp] ip local pool persistent binding

2012-09-20 Thread Matteo Sgalaberni
- Original Message - > Try this to reset the recycle delay: > > ip local poolrecycle delay 0 > > It at least seems to remove the "recycle delay" part from config on a > 1900 running 15.1(3)T1. Hi Peter, your hint worked great on my 7200 running 12.4(24)T6 and no IOS crash happened!

Re: [c-nsp] Giants and input errors but no MTU mismatch 7600-to-4948

2012-09-20 Thread Brian Turnbow
Hi, > -Original Message- > From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of John Neiberger > Sent: mercoledì 19 settembre 2012 21:07 > To: Aaron > Cc: cisco-nsp@puck.nether.net > Subject: Re: [c-nsp] Giants and input errors but no MTU mism