[c-nsp] Symmetrical Routing

2013-03-21 Thread M K
Hi I have many international links active and each link is exported with certain prefixMy question is should the outbound traffic go through the same link as well , symmetrical ? or it's not an issue to have the export from a link and the import for the same prefix from another one ? Thanks

[c-nsp] Fabricpath and L3 on the same line card

2013-03-21 Thread Chris Evans
Can anyone tell me if Cisco F2/F2e line modules can run Fabricpath and L3 (SVI's) on the same line module. Is it line rate as well or does it proxy through an ASIC burning ports, etc. Is an M1 module required? Someone has told me it cannot, but I believe it can. Are there any limitations with it?

Re: [c-nsp] Fabricpath and L3 on the same line card

2013-03-21 Thread Lustgraaf, Paul J [ITNET]
Well, I'm doing it, so I guess it can. And F2 modules must be in a VDC by themselves, so no M1 could possibly be involved. Paul Lustgraafgr...@iastate.edu Change is inevitable. Progress is not. Network Engineer, Iowa State University IT Services

Re: [c-nsp] Fabricpath and L3 on the same line card

2013-03-21 Thread Chris Evans
Okay great, that is what I thought.. Seems like a simple feature to miss. Do you know if there are any performance limitations with it? Like could internal ports be burned for routing efforts? It seems that many companies have problems with the TRILL header and can't do SVI natively like we can

Re: [c-nsp] Fabricpath and L3 on the same line card

2013-03-21 Thread Tim Stevenson
At 10:12 AM 3/21/2013 Thursday, Chris Evans announced: Okay great, that is what I thought.. Seems like a simple feature to miss. Do you know if there are any performance limitations with it? F2/E can generally do L2 L3 at equal rate. Like could internal ports be burned for routing

[c-nsp] when is an acl entry created? router ios

2013-03-21 Thread false
Hello, I need to know what exactly constitutes a hit on an access-list. I was doing some troubleshooting and I did not get the expected results. I thought the first packet to match would be equal but it looks like it may require a 3-way handshake. I have an extended access-list in place

Re: [c-nsp] when is an acl entry created? router ios

2013-03-21 Thread Pete Lumbis
My guess is it is default ACL logging rate limiting. I'd suggest taking off the log keyword and looking at the counts in show access-list On Thu, Mar 21, 2013 at 6:57 PM, false jct...@yahoo.com wrote: Hello, I need to know what exactly constitutes a hit on an access-list. I was doing

[c-nsp] Swap hsrp with vrrp in mixed physical/vmware environment?

2013-03-21 Thread David Hubbard
So this should be fun; I need to swich from HSRP to VRRP to facilitate bringing in a second vendor's hardware to interoperate. We run ipv4 and ipv6 (static assignments) and the VLANs are a mix of physical servers along with vmware guests on Cisco UCS with the fabric interconnects in end-host

[c-nsp] ipv6 on esr 10k

2013-03-21 Thread Brian Turnbow
Hello Everyone, We are rolling out IPV6 services to our xdsl users and I am looking for an answer regarding esr 10ks and ipv6( Pre2s running 12.2(33)SB13). It works :-) , but we have been unable to find a way to activate ipv6 without creating a full virtual access interface. I've been looking

[c-nsp] Per Vlan Bandwidth Policing

2013-03-21 Thread Joseph Hardeman
Hi Everyone, I have been asked to look into setting up per vlan bandwidth limiting with burst. I was sent this link and was wondering about what everyone else does. http://ccietobe.blogspot.com/2009/02/3560-qos-per-port-per-vlan-policing.html Basically we want to limit a vlan network for

[c-nsp] Cisco to support flow spec?

2013-03-21 Thread Scott Granados
Just a general question for the group. Has there been announcements of Cisco supporting BGP Flowspec in IPV4 and IPV6 on any of their platforms? My understanding is that it is not yet supported but wondered if there was any update to this. Thanks Scott

Re: [c-nsp] Cisco to support flow spec?

2013-03-21 Thread Justin M. Streiner
On Thu, 21 Mar 2013, Scott Granados wrote: Just a general question for the group. Has there been announcements of Cisco supporting BGP Flowspec in IPV4 and IPV6 on any of their platforms? My understanding is that it is not yet supported but wondered if there was any update to this. The

[c-nsp] VPLS PE Redundancy with Supervisor Engine 2T

2013-03-21 Thread Sander Steffann
Hi, We're trying to implement VPLS PE Redundancy with Supervisor Engine 2T (VSS) as described in http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-663645.html#wp9000139 and constantly failing. It seems so simple: set up a VSS, use LACP or PAgP port-channels to

Re: [c-nsp] Fabricpath and L3 on the same line card

2013-03-21 Thread Murphy, William
I have 7K with fabricpath, SVI's, and routed interfaces... The box is purely F2 linecards... I'm not aware of limitations and I have not had any problems with it thus far... -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On

Re: [c-nsp] VPLS PE Redundancy with Supervisor Engine 2T

2013-03-21 Thread Sander Steffann
Hi, Sorry - too early in the morning - ignore my last post - thought you were referring to VSS on Sup2T - didnt see the VPLS. :( Yeah, the VSS is no problem. VSL links on the Sup2t and it was up and running in minutes. The VPLS code is the buggy part it seems :-( Cheers, Sander

Re: [c-nsp] Swap hsrp with vrrp in mixed physical/vmware environment?

2013-03-21 Thread Nick Hilliard
On 21/03/2013 18:14, David Hubbard wrote: So this should be fun; I need to swich from HSRP to VRRP to facilitate bringing in a second vendor's hardware to interoperate. We run ipv4 and ipv6 (static assignments) and the VLANs are a mix of physical servers along with vmware guests on Cisco

Re: [c-nsp] VPLS PE Redundancy with Supervisor Engine 2T

2013-03-21 Thread Arie Vayner (avayner)
Steffann, What pay of VPLS doesn't work? Do you see the PW's coming up? LDP? MAC learning? If you share some configs and show command outputs, maybe we can figure it out... Arie Original message From: Sander Steffann san...@steffann.nl Date: To: Andrew Miehs

Re: [c-nsp] VPLS PE Redundancy with Supervisor Engine 2T

2013-03-21 Thread Andrew Miehs
Sorry - too early in the morning - ignore my last post - thought you were referring to VSS on Sup2T - didnt see the VPLS. :( On Fri, Mar 22, 2013 at 8:20 AM, Andrew Miehs and...@2sheds.de wrote: Hi Sander, It definitely works. A colleague of mine installed one two weeks ago. I would

Re: [c-nsp] Symmetrical Routing

2013-03-21 Thread Nick Hilliard
On 21/03/2013 09:41, M K wrote: Hi I have many international links active and each link is exported with certain prefixMy question is should the outbound traffic go through the same link as well , symmetrical ? or it's not an issue to have the export from a link and the import for the same

Re: [c-nsp] VPLS PE Redundancy with Supervisor Engine 2T

2013-03-21 Thread Sander Steffann
Hi Arie, What pay of VPLS doesn't work? Do you see the PW's coming up? LDP? MAC learning? MAC learning was broken on X6704 but seems to work with X6908. Forwarding seems to break everywhere when the traffic has to go over the VSL. If you share some configs and show command outputs, maybe

Re: [c-nsp] Swap hsrp with vrrp in mixed physical/vmware environment?

2013-03-21 Thread Alex Pressé
I perhaps didn't do as much reading regarding swapping HSRP for VRRP. Nothing broke, Server 2008 and 2003 environment with some Novell. And a few hundred XP/Win7 users. That was on an all IPv4 network though. On Thu, Mar 21, 2013 at 12:14 PM, David Hubbard dhubb...@dino.hostasaurus.com wrote:

Re: [c-nsp] Swap hsrp with vrrp in mixed physical/vmware environment?

2013-03-21 Thread Nick Hilliard
On 21/03/2013 20:13, Alex Pressé wrote: Nothing broke, Server 2008 and 2003 environment with some Novell. And a few hundred XP/Win7 users. it won't break; there will just be a changeover period where some of the client boxes will not know about the new VRRP mac address of the default gateway,

Re: [c-nsp] VPLS PE Redundancy with Supervisor Engine 2T

2013-03-21 Thread Andrew Miehs
Hi Sander, It definitely works. A colleague of mine installed one two weeks ago. I would recommend that you use both ports on the supervisor rather than on a line card for the VSL (Link). The 6908 should work for VSL, the 6704 won't - but it can be used for other traffic. Regards Andrew On

Re: [c-nsp] 4500-X VSS %EC-5-CANNOT_BUNDLE2

2013-03-21 Thread CiscoNSP List
Hi, Just thought Id provide an update to this - Have been dealing with TAC, and the %EC-5-CANNOT_BUNDLE2 error appears to be a cosmetic bug, and the portchan + member Ints being down is expected until you issue switch convert mode virtual on both switches, then once the switches reboot, the