[c-nsp] Delivery reports about your e-mail

2012-10-02 Thread oles
¢¤»i݇4%»² O-#µj©<ýéCïÞù/ªF I?£Zjë²¢Öë¹Ì–Zëì³®ÍA7´(4Jʏžûl«¢ª“ðXJfDó`: 5çñ݊‹W%b&±#½² ånh,a‰ïSÞÎ$»Ä Bíî]XL–øhïh­ÓR/NÐlâTu7ېª?bì.Ì^S¢NÍÈØ**§Fó.O„¤>…q,0ã{L"ÛZŠÎ|ÊøÃ/å×åՒ’8j´°‘óp„Ç¥rAm~.•Í„Z½ ¸¤p² -ZO©ðŒ(ñ5½QWK}Tu"zvÞØþ!"ƒ¤ÉUàãࣨæG3궝ù•ëDºr‹nH‘X´¡Ü{LL±YÛ6V0&øZ2ÆfTö›T³qGyë½°ñö—‚»Ñá«<û ݺù) œ>„æ

Re: [c-nsp] BGP Router process - high cpu

2012-10-02 Thread Pete Lumbis
Take a look at this http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a00809d16f0.shtml This is almost always due to route churn. Take a look at your routing table (global and/or VRF) for routes that recently updated (show ip route | i 0:00) and that might give you some clues as to

[c-nsp] BGP Router process - high cpu

2012-10-02 Thread CiscoNSP_list CiscoNSP_list
Hi Guys, High cpu from BGP router process started ~48 hours ago - Happens every 30 seconds (Cisco 7200, NPE-G2"normal" load is 45->50% cpu) #sh processes cpu sorted CPU utilization for five seconds: 86%/44%; one minute: 53%; five minutes: 50% PID Runtime(ms) Invoked uSecs 5Se

Re: [c-nsp] IOS XR BVI

2012-10-02 Thread chip
There was a thread on this topic a few months back. Unless my testing was really messed up, ACL's do work. https://puck.nether.net/pipermail/cisco-nsp/2012-July/086171.html Looks like it depends on what line cards you are using as well. Good luck! --chip On Tue, Oct 2, 2012 at 6:00 PM, Natamb

[c-nsp] data MDT ACL mapping

2012-10-02 Thread Jeff Bacon
So there's these enhancements that allow you to "deterministically map MVPN groups to specific MDT groups". I gather the following, from playing with it: - you still only get one "mdt data ", only now you get to say "list " - otherwise it falls through to the default - to the extent it's poss

[c-nsp] IOS XR BVI

2012-10-02 Thread Natambu Obleton
Anyone using BVIs and l2vpn on IOS XR for routing interfaces? I am running into some strange issue in an attempt to put 4 ASR9k's into production on my network, but only on ipv4. I am having no issues with Ipv6 and OSPFv3, yet..The last reference I can find to BVI in a IOS XR 4.0.1 and it says,

Re: [c-nsp] cisco 2960 snmp interface description

2012-10-02 Thread Nikolay Shopik
If you talk about traps, they don't send ifAlias. We write script which do additional snmpwalk based on ifIndex to findout ifAlias and then send trap with this info. On 03.10.2012 0:15, Michael Sprouffske wrote: > this is what I get > > snmpTrapOID.0 = snmpTraps.3 > ifIndex.10005 = 10005 > ifDe

Re: [c-nsp] cisco 2960 snmp interface description

2012-10-02 Thread Nikolay Shopik
If you have default snmp config on 2960, there nothing additional need to pass interface names. Its in ifAlias not in ifDescr On 02.10.2012 23:46, Michael Sprouffske wrote: > What needs to be done in order for the switch to pass the descriptions of the > interfaces. I looked at a debug and the s

[c-nsp] cisco 2960 snmp interface description

2012-10-02 Thread Michael Sprouffske
What needs to be done in order for the switch to pass the descriptions of the interfaces.  I looked at a debug and the switch is only sending the physical interface name and not the description.  I did a walk on the device and was able to pull this information. __

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Nick Hilliard
On 02/10/2012 15:22, Adam Vitkovsky wrote: > I thought this is on by default but apparently it's not > > Try > neighbor x.x.x.x transport multi-session In general you don't want to enable multisession bgp unless you know why you need it and you understand all the consequences of doing so. I rea

Re: [c-nsp] Problem with a nat configuration.

2012-10-02 Thread Samuel Catheline
Hi, Thanks for your answer, I solve my problem with a route-map. regards. Cordialement, Samuel CATHELINE Service DELIVERY Direction Technique Tél. 02 72 73 58 25 scatheline @afone.com AFONE - 11, place François Mitterrand - CS 11024 - 49055 ANGERS cedex 02 [ t ] 0825 168

Re: [c-nsp] asymmetrical performance inside core

2012-10-02 Thread Andy Ellsworth
In the spirit of conjecturing, another key point to consider is that if it's a wireless link then the radio interface is almost certainly half-duplex, regardless of what the ethernet interface is. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net http

Re: [c-nsp] Problem with a nat configuration.

2012-10-02 Thread Ross Halliday
> From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of Samuel Catheline > Sent: Tuesday, October 02, 2012 3:05 AM > To: cisco-nsp@puck.nether.net > Subject: [c-nsp] Problem with a nat configuration. > > Hello, > > I have a nat configuration problem, w

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Aaron
Thanks all. Also, since ipv6 seems inevitable, it would seem like a nice way to future proof your network by simply enabling v6 af in the vrf definition (also on me's create vrf using the definition mode for v6), the vpnv6 af under bgp and the v6 af within the vrf specific bgp contextthat way,

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Adam Vitkovsky
I should have mentioned that this has some serious implications to it especially in large BGP environments So please consider the number of TCP sessions you'll end up with on RRs as well as on PEs adam -Original Message- From: Adam Vitkovsky [mailto:adam.vitkov...@swan.sk] Sent: Tuesday,

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Adam Vitkovsky
I thought this is on by default but apparently it's not Try neighbor x.x.x.x transport multi-session adam -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Aaron Sent: Tuesday, October 02, 2012 4:02 PM To: cisco-nsp@puck.ne

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Blake Dunlap
No you can't keep it from resetting the neighbor if you are changing the capabilities of a neighbor relationship. That portion is negotiated at open state, and not on the fly. -Blake On Tue, Oct 2, 2012 at 9:01 AM, Aaron wrote: > (resending due to ugly formatting) > > When I enabled vpnv6 on my

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Oliver Boehmer (oboehmer)
On 02/10/2012 16:01, "Aaron" wrote: >(resending due to ugly formatting) > >When I enabled vpnv6 on my pre-existing vpnv4 neighbor session I saw it >bounceIs there any way around this ? ...i'm concerned about the >interruption (for operational environment) on the underlying vpnv4 l3vpn. >Woul

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Aaron
(resending due to ugly formatting) When I enabled vpnv6 on my pre-existing vpnv4 neighbor session I saw it bounceIs there any way around this ? ...i'm concerned about the interruption (for operational environment) on the underlying vpnv4 l3vpn. Would be only momentary though right?... looks l

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Jason Lixfeld
I've relegated it to a maintenance window. On 2012-10-02, at 9:53 AM, "Aaron" wrote: > When I enabled vpnv6 on my pre-existing vpnv4 neighbor session I saw it > bounceIs there any way around this ? ...i'm concerned about the > interruption (for operational environment) on the underlying vpn

Re: [c-nsp] 6vpe - me3600x

2012-10-02 Thread Aaron
When I enabled vpnv6 on my pre-existing vpnv4 neighbor session I saw it bounceIs there any way around this ? ...i'm concerned about the interruption (for operational environment) on the underlying vpnv4 l3vpn. Would be only momentary though right?... looks like 10 seconds from "nbr_reset" to "

Re: [c-nsp] questions regarding RSPAN on Catalyst 2950, 3550, 3560, 3750 and 4500 platforms

2012-10-02 Thread Saku Ytti
On 2 October 2012 15:28, Martin T wrote: > Why is only IPv6 traffic sent to "monitor" port(Gi0/11) when RSPAN on > "WS-C3560G-24TS" is enabled? It seems to catch flooded traffic only, why, I cannot answer. Typical answer is server not in promisc mode. I've had laptop where dmesg/ifconfig would re

Re: [c-nsp] questions regarding RSPAN on Catalyst 2950, 3550, 3560, 3750 and 4500 platforms

2012-10-02 Thread Martin T
If I execute "no monitor session 2" in "WS-C3560G-24TS" port Gi0/11 changes from "monitoring" status to "inactive" and I can see only CDPv2 messages in "PE860". This is expected as Gi0/11 is in "remote-span" VLAN. If I change Gi0/11 to trunk I can see the very same IPv6 traffic in "PE860" + other p

Re: [c-nsp] Problem with a nat configuration.

2012-10-02 Thread Curtis LaMasters
On Tue, Oct 2, 2012 at 2:04 AM, Samuel Catheline wrote: > Hello, > > I have a nat configuration problem, with a static NAT, I want exlude to > the static nat(192.168.10.1<->217.112.66.70) the trafic to the subnet > 10.0.13.0/24 and nat this trafic with the loopback1. > Is there an issue? > > I hav

Re: [c-nsp] asymmetrical performance inside core

2012-10-02 Thread Tim Densmore
On 10/01/2012 10:31 PM, Mikael Abrahamsson wrote: On Mon, 1 Oct 2012, Tim Densmore wrote: Stab in the dark, but have you verified you don't have a duplex mismatch anywhere? IME, they can look exactly like that. I seriously doubt you'd be able to get 30 megabit/s over somewhere with a duplex

Re: [c-nsp] L2 payload encryption -not p2p

2012-10-02 Thread Adam Vitkovsky
Yes there's a lack of trust or control of the switched network adam -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Andy Ellsworth Sent: Tuesday, October 02, 2012 1:36 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] L

Re: [c-nsp] L2 payload encryption -not p2p

2012-10-02 Thread Andy Ellsworth
On Tue, Oct 2, 2012 at 6:07 AM, Adam Vitkovsky wrote: > Can anyone recommend a device than could be placed inline between a server > and a switched infrastructure that would encrypt L2 payload for > communication between two such servers (round 100mbps) > I imagine one would need two such devices

[c-nsp] L2 payload encryption -not p2p

2012-10-02 Thread Adam Vitkovsky
Hi Can anyone recommend a device than could be placed inline between a server and a switched infrastructure that would encrypt L2 payload for communication between two such servers (round 100mbps) I imagine one would need two such devices one at each end (or maybe a NIC in a server) Or is ASA capab

Re: [c-nsp] questions regarding RSPAN on Catalyst 2950, 3550, 3560, 3750 and 4500 platforms

2012-10-02 Thread Saku Ytti
On 2 October 2012 10:25, Martin T wrote: > Any other ideas? Not really, seems like your SPAN might not be doing anything at all. Can you confirm this by removing SPAN config, leaving port just as trunk, and see if you capture same set of packets? -- ++ytti ___

[c-nsp] Problem with a nat configuration.

2012-10-02 Thread Samuel Catheline
Hello, I have a nat configuration problem, with a static NAT, I want exlude to the static nat(192.168.10.1<->217.112.66.70) the trafic to the subnet 10.0.13.0/24 and nat this trafic with the loopback1. Is there an issue? I have the following NAT configuration: interface Loopback1 descript

Re: [c-nsp] questions regarding RSPAN on Catalyst 2950, 3550, 3560, 3750 and 4500 platforms

2012-10-02 Thread Martin T
Saku, thank you for reply! According to /var/log/messages and kernel ring buffer, eth0 enters to promiscuous mode: Oct 2 02:55:39 PE860 kernel: [7745928.328025] device eth0 entered promiscuous mode Oct 2 02:55:43 PE860 kernel: [7745931.459236] device eth0 left promiscuous mode In addition, if