[c-nsp] Possible to talk ospfv3 with auth or encryption to Brocade?

2013-04-17 Thread David Hubbard
I'm wondering if anyone has a working ospfv3 setup between a Cisco and Brocade device? As best I can tell, Brocade's only possible setup is either no auth and no encryption, or, sha1 auth, sha1 encryption, esp packets. On the Cisco side, the only option that gives you esp packets is "ipv6 ospf en

Re: [c-nsp] Most Stable IOS-XR Version for ASR9K

2013-04-17 Thread judy teng
Do you have a choice? 4.0.3 was stable for while then more issues came out. It has reached engineering support. You have to upgrade to 4.2.3 or 4.3.0. Version 4.3.0 has more feature for BNG. If you do not need it, you can stay with 4.2.3 but you have to install mandatory SMUs. -Judy __

Re: [c-nsp] Most Stable IOS-XR Version for ASR9K

2013-04-17 Thread Mohamed A. Monsef Abbas
Use the one in the CCIE-SP exam at least you can practise on it while using it ;) On Thu, Apr 18, 2013 at 4:55 AM, Xu Hu wrote: > Hi Folks, > > Any idea which version is the most stable one currently, need to deploy new > ASR9K inside the network, am considering to use which version. > > No nee

[c-nsp] Most Stable IOS-XR Version for ASR9K

2013-04-17 Thread Xu Hu
Hi Folks, Any idea which version is the most stable one currently, need to deploy new ASR9K inside the network, am considering to use which version. No need additional features, just normal OSPF, BGP, MPLS, MPLS/TE, MPLS/VPN. Thanks in advance. Regards, Hu Xu ___

Re: [c-nsp] 4500x - SFP-GE-T

2013-04-17 Thread CiscoNSP List
Just an update to this - I have found some third party SFP's(Copper) that work without issue from NHR - They are specifically designed for the 4500x's (But also work fine in ASR's/4948's etc etc) SFP-GE-T-WIRE-NHR - 1000BASE-T SFP with wire clip (mainly for 4500X) > From: cisconsp_l...@hotmail

Re: [c-nsp] Switchport trunk allowed issues

2013-04-17 Thread Arie Vayner (avayner)
Something like this should do the trick: event manager applet ALLOWED-VLAN event cli pattern "switchport trunk allowed vlan +[0-9]+.*" mode "interface" enter action 001 puts "ERROR: "switchport trunk allowed vlan" is not allowed. Use Add/Remove" action 002 set _exit_status "0" The regex on

Re: [c-nsp] BGP Filter - Best Practice

2013-04-17 Thread Ahmed Hilmy
Hello Nick, Thanks for your reply, i am totally agree with you. Regards, Ahmed On Tue, Apr 16, 2013 at 9:12 PM, Nick Hilliard wrote: > On 15/04/2013 21:44, Ahmed Hilmy wrote: > > I am using Prefix-list and as-path for BGP filter. > > But if i apply Prefix-list as inbound filter at PE, then f

Re: [c-nsp] Terminating lots of double-tagged vlans

2013-04-17 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Simon Lockhart wrote: > All, > > I'm working on a project which uses GPON to connect tens of thousands > of properties in a fibre-to-the-home environment. Each property will > be handed off to me as a double-tagged vlan, one per property. > Obviously

Re: [c-nsp] Terminating lots of double-tagged vlans

2013-04-17 Thread Simon Lockhart
On Wed Apr 17, 2013 at 12:57:05PM -0700, Bruce Pinsky wrote: > Simon Lockhart wrote: > > What I'd come up with is that I'd "ignore" the inner tags, and just > > use the outer S-Tag to put the properties into subnets (one per > > S-Tag), and then just do DHCP. However, I'm not quite sure how I'd > >

[c-nsp] Terminating lots of double-tagged vlans

2013-04-17 Thread Simon Lockhart
All, I'm working on a project which uses GPON to connect tens of thousands of properties in a fibre-to-the-home environment. Each property will be handed off to me as a double-tagged vlan, one per property. Obviously I don't want to manually create tens of thousands of subinterfaces on a router,

Re: [c-nsp] Slow Inter-Vlan traffic

2013-04-17 Thread Andrew Miehs
On 17/04/2013, at 21:21, Sébastien MALHEIRO wrote: > > We’re having some issues with inter-vlan traffic going pretty slow on > 6504-E chassis working in VSS (VS-S720-10G / WS-X6748-GE-TX), running IOS > version 12.2(33)SXH5. This seems like a very old version - especially if you are running VSS.

[c-nsp] Cisco Security Advisory: Cisco TelePresence Infrastructure Denial of Service Vulnerability

2013-04-17 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Cisco TelePresence Infrastructure Denial of Service Vulnerability Advisory ID: cisco-sa-20130417-tpi Revision 1.0 For Public Release 2013 April 17 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco Network Admission Control Manager SQL Injection Vulnerability

2013-04-17 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Cisco Network Admission Control Manager SQL Injection Vulnerability Advisory ID: cisco-sa-20130417-nac Revision 1.0 For Public Release 2013 April 17 16:00 UTC (GMT

Re: [c-nsp] EEM applet for Vlan for switches

2013-04-17 Thread A . L . M . Buxey
Hi, > Does anyone has idea or suggestion that which command is used on Switches to > write EEM applet through Cisco IOS Cli as the above mentioned command is not > working on switches. What is the syntax?? WHAT switches are you dealing with as many dont have any EEM ability alan __

Re: [c-nsp] Switchport trunk allowed issues

2013-04-17 Thread Saku Ytti
On 17 April 2013 14:08, amir agha wrote: Hi Ami, > However, if one forgets to include the keyword, > the command defaults to replace: > > switchport trunk allowed vlan > > the VLAN that has already been placed on vlan deleted and result in downtime Many have solved same problem in TACACS.

[c-nsp] EEM applet for Vlan for switches

2013-04-17 Thread amir agha
Hi In routers for writing EEM applet through Cisco IOS Cli we normally use following command event manager applet (name) trap   Does anyone has idea or suggestion that which command is used on Switches to write EEM applet through Cisco IOS Cli as the above mentioned command is not working on sw

Re: [c-nsp] Slow Inter-Vlan traffic

2013-04-17 Thread Phil Mayers
On 17/04/13 12:21, Sébastien MALHEIRO wrote: #sh interfaces Vlan41 stats #sh cef interface Vlan 41 You have to be a bit careful with these types of commands on 6500. Some of them show software state, some of them hardware state, and it requires some experience to know which. It sounds like

Re: [c-nsp] Switchport trunk allowed issues

2013-04-17 Thread Phil Mayers
On 17/04/13 12:08, amir agha wrote: Hi I am writing a EEM using Cisco ios cli, can anyone have valuable suggestion about how to materialize it. Following is the topic Using following command on switch i.e switchport trunk allowed vlan However, if one forgets to include the keyword, the c

[c-nsp] Slow Inter-Vlan traffic

2013-04-17 Thread Sébastien MALHEIRO
HHi, We’re having some issues with inter-vlan traffic going pretty slow on 6504-E chassis working in VSS (VS-S720-10G / WS-X6748-GE-TX), running IOS version 12.2(33)SXH5. Here’s the thing : We have added 2 new Vlans on the swtichs (Vlan 41 : Production / Vlan 95 : Admin). Our customer told

[c-nsp] Switchport trunk allowed issues

2013-04-17 Thread amir agha
Hi I am writing a EEM using Cisco ios cli, can anyone have valuable suggestion  about how to materialize it. Following is the topic Using following command on switch i.e    switchport trunk allowed vlan However, if one forgets to include the keyword, the command defaults to replace: switchpor

Re: [c-nsp] Config template utility?

2013-04-17 Thread Andrew Miehs
I use the template toolkit perl module. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Config template utility?

2013-04-17 Thread Jimbo Jones
Hi, Looking for any recommendations for a template utility - i.e., for adding new vrf's, interfaces, vlans to switches etc? Where you just enter in variables (eg, vrf name, rd), and a pre-defined template is generated with the variables entered. Has anyone used Solarwinds network config manag

Re: [c-nsp] IPv6 Transition - IP/MPLS Backbone

2013-04-17 Thread Mattias Gyllenvarg
Beware of one thing 6PE can not do. BGPv6 over multi-hop will not work as there is no recursive lookup from v6 too v4 in your BGP speaker. This is a feature, not a bug... so it will not be fixed. Otherwise 6PE is a breeze. On 14 April 2013 21:56, Ahmed Hilmy wrote: > Hello Expert, > > We are

Re: [c-nsp] Multicast

2013-04-17 Thread M K
Hi allI have found out why this was happening , I already configured MPLS TE in my network and that's why the RPF check failure occured ! BR, > CC: cisco-nsp@puck.nether.net > From: thegame...@yahoo.com > Subject: Re: [c-nsp] Multicast > Date: Mon, 15 Apr 2013 07:03:13 -0400 > To: gunner_...@live