Re: [c-nsp] BGP NSR without SSO

Hi adam  thanks for the response, but the bgp advertise-best-external can only work with VPNv4, VPNv6, IPv4 VRF, and IPv6 VRF address families. , and not all of the above is our scenario . thanks From: Adam Vitkovsky adam.vitkov...@swan.sk To: 'zaid'

Re: [c-nsp] 7200VXR G2 performance

On 08/11/2012 06:13, Ali Sumsam wrote: Any suggestion how can we lower the load or increase the power of the router. We need a temporary solution for a couple of weeks. Besides, I think removing ACLs and limiting the traffic coming from Aggregation(3560G) can help. Comments plz Remove:

Re: [c-nsp] Nexus 7K NX-OS Upgrade

Thanks, I don't know if you noticed but somewhere in the thread the bug was mentioned and it is resolved in 5.1.5 and later. Bug CSCtn61286 - Boot variables are not set up correctly on Sup-2 after ISSU So in my case, it should not give me problems (5.2.3a to 5.2.7). But since I also need to

Re: [c-nsp] Nexus 7K NX-OS Upgrade

Yes it is. But you can still use the ISSU method of doing things (install all) with just one SUP. It doesn't make too much sense, right ? Regards, Antonio Soares, CCIE #18473 (RS/SP) amsoa...@netcabo.pt http://www.ccie18473.net -Original Message- From: Alexander Lim

Re: [c-nsp] Nexus 7K NX-OS Upgrade

Hi Antonio, You should be able to do the memory-upgrade without rebooting the box. I've never done it on my I own but I know a few which did without any problem. I believe they first upgraded the memory and then did the update! Dirk Sent from my iPhone On 08.11.2012, at 13:42, Antonio Soares

Re: [c-nsp] Nexus 7K NX-OS Upgrade

I just have one SUP... You are talking about dual supervisors setup, right ? Regards, Antonio Soares, CCIE #18473 (RS/SP) amsoa...@netcabo.pt http://www.ccie18473.net -Original Message- From: Dirk Woellhaf [mailto:dirk.woell...@gmail.com] Sent: quinta-feira, 8 de Novembro de 2012

[c-nsp] route leaking from global to VRF on cisco 7401

Hi I'm having a problem leaking routes from the global routing table into a VRF on a Cisco 7401 and I'd appreciate an opinion on whether my config or the router is at fault. The IOS image is c7400-jk9s-mz.124-21a.bin, which is the most recent to which I have access. Let's say my local router is

Re: [c-nsp] Nexus 7K NX-OS Upgrade

At 04:37 AM 11/8/2012, Antonio Soares mused: Thanks, I don't know if you noticed but somewhere in the thread the bug was mentioned and it is resolved in 5.1.5 and later. Bug CSCtn61286 - Boot variables are not set up correctly on Sup-2 after ISSU So in my case, it should not give me problems

Re: [c-nsp] Nexus 7K NX-OS Upgrade

At 07:18 AM 11/8/2012, Antonio Soares mused: I just have one SUP... You are talking about dual supervisors setup, right ? Ah. In that case, clearly, the box is going to go offline when you upgrade. You might want to consider buying another sup. IMO, there is no huge benefit in using the

Re: [c-nsp] 7200VXR G2 performance

What features are enabled? NBAR, NetFlow, NAT, QoS, ACLs with logging (or even without), etc will all affect it. Chuck -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Ali Sumsam Sent: Thursday, November 08, 2012 1:14 AM

Re: [c-nsp] Nexus 7K NX-OS Upgrade

Any new CoPP best Practice configs update available in the new code is applied only when using install script. sukumar Thumb typed on my Smartphone. Excuse Typos. On Nov 8, 2012, at 7:54 AM, Tim Stevenson (tstevens) tstev...@cisco.com wrote: At 07:18 AM 11/8/2012, Antonio Soares mused: I

Re: [c-nsp] Nexus 7K NX-OS Upgrade

Thanks Tim, I will follow that procedure, it's the one that makes perfect sense. The documentation should be more clear about this kind of situations, don't you think ? There are important things that are omitted between steps 10 and 11:

Re: [c-nsp] Nexus 7K NX-OS Upgrade

At 09:36 AM 11/8/2012, Antonio Soares mused: Thanks Tim, I will follow that procedure, it's the one that makes perfect sense. The documentation should be more clear about this kind of situations, don't you think ? There are important things that are omitted between steps 10 and 11: You mean

Re: [c-nsp] 7200VXR G2 performance

Only today I was taking Nick's approach to eeking out 2 x 7204s w/ G2s for a few more weeks. I removed them from the DFZ and tore down around 120 direct peering BGP sessions. We now send them 8 prefixes each, including default. TBH, this has had a negligible impact so I await the arrival of ASR1ks

Re: [c-nsp] 7200VXR G2 performance

On 08/11/2012 20:17, David Farrell wrote: Only today I was taking Nick's approach to eeking out 2 x 7204s w/ G2s for a few more weeks. I removed them from the DFZ and tore down around 120 direct peering BGP sessions. We now send them 8 prefixes each, including default. TBH, this has had a

Re: [c-nsp] 7200VXR G2 performance

On Thu, Nov 8, 2012 at 8:32 PM, Nick Hilliard n...@foobar.org wrote: On 08/11/2012 20:17, David Farrell wrote: Only today I was taking Nick's approach to eeking out 2 x 7204s w/ G2s for a few more weeks. I removed them from the DFZ and tore down around 120 direct peering BGP sessions. We

[c-nsp] Cisco ASA 5505 VPN setup

Hello guys   I have two sites remote from one another but all connected to the internet by two seperate ISP s using the Cisco ASA 5505   I would want to set up a VPN tunnels bettwen the two sites and have internet access from a single site as compared of getting from two links all supplying

Re: [c-nsp] Cisco ASA 5505 VPN setup

So you have a VPN tunnel connecting them and you want all traffic to go through the tunnel to get to the Internet? I'm not following the part about removing the second link though, won't you still need that for the VPN? Sent from handheld. On Nov 8, 2012, at 4:32 PM, daniel Bahamombe

[c-nsp] NAT NVI traffic usage through SNMP?

Hello all, I would like to be able to retrieve traffic usage of a NVI interface through SNMP, does someone know if it's possible? My config is quite simple, I'm using vrf (without mpls) and NVI for vrf-to-internet. I can determine the traffic usage for my links in vrf (through subinterfaces) but

[c-nsp] Cisco VXR GW

Hi allCan a Cisco router VXR 7206 NPE-400 handle 2-STM1s traffic and a default route from an uplink provider? Thanks ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

Hi All, My question is how ACLs affect the processing of a Cisco 7200 NPE-G2. 1. Does it matter if I have a long list of ACL statements, or it is as CPU-consuming as 1 statement? 2. Is CPU processing is on a per-interface basis. For example, if I have one interface with ACL and another without

Re: [c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

On Nov 9, 2012, at 6:34 AM, Ali Sumsam wrote: 1. Does it matter if I have a long list of ACL statements, Yes. 2. Is CPU processing is on a per-interface basis. No. It's a 2mpps software-based box. There's one processor.

Re: [c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

On Fri, Nov 9, 2012 at 10:34 AM, Ali Sumsam ali+cisco...@eintellego.netwrote: Hi All, My question is how ACLs affect the processing of a Cisco 7200 NPE-G2. 1. Does it matter if I have a long list of ACL statements, or it is as CPU-consuming as 1 statement? 2. Is CPU processing is on a

Re: [c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

On Nov 9, 2012, at 9:08 AM, Andrew Miehs wrote: You said your box was at 60% CPU at peak. Where did he say this? I didn't see any reference to this in his previous message . . . --- Roland Dobbins rdobb...@arbor.net //

[c-nsp] Cisco Security Advisory: Cisco Ironport Appliances Sophos Anti-virus Vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Ironport Appliances Sophos Anti-virus Vulnerabilities Advisory ID: cisco-sa-20121108-sophos Revision 1.0 For Public Release 2012 November 9 03:00 UTC (GMT) - -- Summary