Re: [c-nsp] ASA5585-X IPS Upgrade causes ASA failover

2012-11-09 Thread Antonio Soares
Thanks, it seems another enhancement that won't see the light of day... Found in 8.0.3... Code that has almost 5 years... Regards, Antonio Soares, CCIE #18473 (R&S/SP) amsoa...@netcabo.pt http://www.ccie18473.net -Original Message- From: Pete Lumbis [mailto:alum...@gmail.com] Sent: s

Re: [c-nsp] ASA5585-X IPS Upgrade causes ASA failover

2012-11-09 Thread Pete Lumbis
CSCsm81086 - Allow user to exclude the status of the SSM or SSP from failover checks Still in the New state :( On Fri, Nov 9, 2012 at 3:08 PM, Antonio Soares wrote: > Hello group, > > I had a bad surprise today, I was updating the IPS software of two > ASA5585-SSP-IPS10 modules and found that it

[c-nsp] ASA5585-X IPS Upgrade causes ASA failover

2012-11-09 Thread Antonio Soares
Hello group, I had a bad surprise today, I was updating the IPS software of two ASA5585-SSP-IPS10 modules and found that it caused the Failover of the parent ASA5585-SSP-10. It seems this is the normal behavior (https://supportforums.cisco.com/thread/2035549) but I was not expecting this at all. I

Re: [c-nsp] Working Verizon ADSL Config?

2012-11-09 Thread Brielle Bruns
On 11/9/2012 11:32 AM, chris wrote: Hi, I was just wondering if anyone has a working config for VZ ADSL. Mostly just need to know what pvc to use and any particulars for the ppp Also, is there a easy way to get the ppp info without having to call VZ and get rerouted to 20 different departments a

[c-nsp] Working Verizon ADSL Config?

2012-11-09 Thread chris
Hi, I was just wondering if anyone has a working config for VZ ADSL. Mostly just need to know what pvc to use and any particulars for the ppp Also, is there a easy way to get the ppp info without having to call VZ and get rerouted to 20 different departments and/or routed to india? :) Thanks chri

Re: [c-nsp] leaking only a couple routes between 2 vrf's

2012-11-09 Thread Paul Wells
Hi Aaron, If you're doing this in the context of a BGP/MPLS VPN, then you already have BGP in the picture and I think it would be better/simpler to use an import or export map as others have suggested. FWIW, replicated routes can be redistributed by IGPs (but not BGP) by using a command like

Re: [c-nsp] 4900M arp cache size?

2012-11-09 Thread Phil Mayers
On 09/11/12 15:51, David Hubbard wrote: Does anyone have handy a reference for the 4900M's arp cache table size? I can only find max routes and max MAC's on the Cisco site. As a bonus, ipv6 neighbor cache would be useful to know too. On most devices, the adjacency table (ARP, IPv6 neighbours)

[c-nsp] 4900M arp cache size?

2012-11-09 Thread David Hubbard
Does anyone have handy a reference for the 4900M's arp cache table size? I can only find max routes and max MAC's on the Cisco site. As a bonus, ipv6 neighbor cache would be useful to know too. Thanks! David ___ cisco-nsp mailing list cisco-nsp@puck

Re: [c-nsp] Reliable syslog delivery

2012-11-09 Thread Nick Hilliard
On 09/11/2012 12:44, Jason Lixfeld wrote: > I've got a fleet of ME3400s, ME3600s, 7600s and ASR9ks whose logging > data I'm trying to ensure will always reach the syslog servers. The > specific case is if a device ever loses network connectivity for > whatever reason, it will spool up new logs in

Re: [c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

2012-11-09 Thread Dobbins, Roland
On Nov 9, 2012, at 7:30 PM, Steve McCrory wrote: > The concept I was working with is true (adding more statements does not > impact performance) but perhaps my exact figures where slightly out, Apologies for being unclear - when the tables are built and populated with bitmaps, the *packet clas

[c-nsp] Reliable syslog delivery

2012-11-09 Thread Jason Lixfeld
I've got a fleet of ME3400s, ME3600s, 7600s and ASR9ks whose logging data I'm trying to ensure will always reach the syslog servers. The specific case is if a device ever loses network connectivity for whatever reason, it will spool up new logs in it's buffer, then spit the spool out at the sys

Re: [c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

2012-11-09 Thread Steve McCrory
The concept I was working with is true (adding more statements does not impact performance) but perhaps my exact figures where slightly out, based on the excerpt from Cisco: " For ACLs larger than 3 entries, the CPU load required to match the packet to the pre-determined packet-matching rule is le

Re: [c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

2012-11-09 Thread Dobbins, Roland
On Nov 9, 2012, at 5:48 PM, Steve McCrory wrote: > This features compiles the ACLs and once enabled the performance impact of a > long list is the same as for 1 statement. That isn't exactly the case, but it does make ACL processing much more efficient. -

Re: [c-nsp] how ACLs affect the processing of a Cisco 7200 NPE-G2

2012-11-09 Thread Steve McCrory
Ali, Have you enable Turbo ACLs? This features compiles the ACLs and once enabled the performance impact of a long list is the same as for 1 statement. It can be enabled with the global 'access-list compiled' command Steven -Original Message- From: cisco-nsp-boun...@puck.nether.net [m