Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread quinn snyder
isn't most of that a by-product of using trident/trident+? i know that trident ii fixes some of that -- but i think that comes down to the (some say unwise) decision of using ots components, no? q. -- quinn snyder snyd...@gmail.com On 12-Sep-13, at 20:15 , Pete Templin wrote: > On 9/12/13 11

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Pete Templin
On 9/12/13 11:30 AM, Gert Doering wrote: To be fair, one would need to compare software features - so what does the N3K do? L2 only? L3, with how many routes? IPv6, MPLS? Gert, you don't want to explore the N3K, you'll have 6500 heartburn all over again. URPF halves the route table size,

[c-nsp] Cisco IPSec VPN's (Tunnel Interfaces) migrating from 12.2.25 to 15.1.4

2013-09-12 Thread Blake Pfankuch - Mailing List
Working with a vendor who is saying that when we "upgrade" from 12.2.25 to 15.1.4 on a couple of 2800 series routers holding about 15 IPSec vpn's and tunnel interfaces with EIGRP across them we are going to have to rewrite all of the config due to completely new command syntax on 15.1.4 compared

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Peter Rathlev
On Thu, 2013-09-12 at 15:28 -0400, Chris Evans wrote: > Have you guys ever looked at the HP 5900 series?? We're evaluating some 5900AF now. Hardware wise we have nothing to criticise them for, but we have mostly tested software for now. HP Comware 7 (the OS) is IMHO quite "special" even compared t

Re: [c-nsp] MPLS-TE on ME3600

2013-09-12 Thread Pshem Kowalczyk
Hi, On 13 September 2013 03:10, Eric Van Tol wrote: > > Thanks for the insight. I've confirmed in the lab that explicit paths allow > LSP setup across areas. > > And just to confirm, if our switches have no routed ports on the core-facing > side, where MPLS and EFPs are configured, enabling FR

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Nick Hilliard
On 12/09/2013 20:28, Chris Evans wrote: > Have you guys ever looked at the HP 5900 series?? > > HP's 5900, Arista and Cisco 3K's all use the same broadcom trident+ no. The N3064 series uses either trident or trident+; the N3500 series uses cisco's own silicon. Nick

[c-nsp] CoPP - matching protocol ARP plus an input-interface

2013-09-12 Thread Chuck Church
All,     Working on 871 router at a customer site.  Unknown ARP flood coming from customer LAN was crushing router CPU, guessing about 2800 pkt/sec.  A service policy applied to control plane just matching ARP does what expected, but when I tried to limit it to just customer-side ARP b

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Nick Hilliard
On 12/09/2013 20:31, Phil Mayers wrote: > Oh yes... the x670 really is a phenomenally cheap box. It has a few caveats > - tiny tiny tiny buffers, for one - and it's L3 capabilites (neighbour > table & route table size) are very small, but at layer2, it's very cost > effective. buffer table, mac ad

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Chris Evans
Have you guys ever looked at the HP 5900 series?? HP's 5900, Arista and Cisco 3K's all use the same broadcom trident+ chipsets. HP 5900 comes in a few models, one which is a 48 port SFP+ with 4xQSFP+ that is 21K list. They also have a 48 port Copper 10gig version with 4QSFP+ that lists at 21K too.

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Aled Morris
Well, when I said I thought the switches were equal, I wasn't referring to the price! Cisco, always "reassuringly expensive" :-) Aled On 12 September 2013 17:57, Mark Mason wrote: > Yea, the Nexus 6k lineup is quite a bit more expensive than the 3k > lineup. The pricing and builds for the 3k

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Gert Doering
Hi, On Thu, Sep 12, 2013 at 06:50:41PM +0100, Nick Hilliard wrote: > On 12/09/2013 18:30, Mark Mason wrote: > > I think the ticket is the N3K-C3064TQ-10GT [Nexus 3064-T, 48 10GBase-T and > > 4 QSFP+ ports]. Looks like it's still new and isn't quite available to be > > configured in the system an

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Mark Mason
o48 SFP ports support 1 and 10 Gigabit Ethernet That is the killer...GLC-T required out for any copper connectivity. From: aled.w.mor...@googlemail.com [mailto:aled.w.mor...@googlemail.com] On Behalf Of Aled Morris Sent: Thursday, September 12, 2013 11:30 AM To: Mark Mason Cc: cisco-nsp@puck.

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Oliver Garraux
N3K's can do L3. No MPLS. Not sure about IPv6 or table sizes. They can do VPC though and have low latency. The price someone listed above might be the older price. The price I see on CCW is much more "delicious". :) Oliver - Oliver Garraux Check out my b

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Aled Morris
If you are brand-loyal to Cisco you might want to look at the Nexus 3000 or Nexus 6000 ranges. Aled On 12 September 2013 15:56, Mark Mason wrote: > The Cisco product line seems to be missing an equivalent of the Arista > 7050 100Mb/1Gb/10GBase-T. Maybe taking the 4500x platform converting the

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Aled Morris
I don't have hands-on experience with them but I assumed that Cisco 6001T = Arista 7050T and Cisco 6001P = Arista 7050S Aled On 12 September 2013 17:46, Mark Mason wrote: > Yea, actually just seeing that now! Might have a winner! > > ** ** > > ** ** > > *From:* Oliver Garraux [mailto:oli.

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Oliver Garraux
How is the Arista 7050 different than the Nexus 3064? Cisco recently slashed the pricing on several of the 3064 models by quite a bit. I'm not intimately familiar with Arista pricing, but the 3064's current list price isn't widely different than what I see for the Arista 7050 on a few sites. Oli

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Mark Mason
Yea, the Nexus 6k lineup is quite a bit more expensive than the 3k lineup. The pricing and builds for the 3k's aren't too bad. Great input guys! From: aled.w.mor...@googlemail.com [mailto:aled.w.mor...@googlemail.com] On Behalf Of Aled Morris Sent: Thursday, September 12, 2013 11:49 AM To: Mark

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Phil Mayers
On 09/12/2013 07:30 PM, Gert Doering wrote: Bought a couple of Extreme X670 recently. *That* is a delicious price for 48 10GbaseT (or SFP+, depending on model) + 4 QSFP+... Oh yes... the x670 really is a phenomenally cheap box. It has a few caveats - tiny tiny tiny buffers, for one - and it'

Re: [c-nsp] Vlan Mapping

2013-09-12 Thread quinn snyder
mike -- the vlan mapping configuration will exist on all ports in the port group -- much like port-based qos bits on a per linecard basis. int gi 1/1 vlan 1 map 11 vlan 2 map 12 int gi 1/2 vlan 1 map 11 vlan 2 map 12 if you activate vlan mapping on an interface, it inherits all maps

[c-nsp] CoPP - matching protocol ARP plus an input-interface

2013-09-12 Thread Chuck Church
All, Working on 871 router at a customer site. Unknown ARP flood coming from customer LAN was crushing router CPU, guessing about 2800 pkt/sec. A service policy applied to control plane just matching ARP does what expected, but when I tried to limit it to just customer-side AR

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Nick Hilliard
On 12/09/2013 18:30, Mark Mason wrote: > I think the ticket is the N3K-C3064TQ-10GT [Nexus 3064-T, 48 10GBase-T and 4 > QSFP+ ports]. Looks like it's still new and isn't quite available to be > configured in the system and the price is pretty delicious. $53,400 GPL, according to teh interwebs.

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Mark Mason
Yea, actually just seeing that now! Might have a winner! From: Oliver Garraux [mailto:oli...@g.garraux.net] Sent: Thursday, September 12, 2013 11:46 AM To: Aled Morris Cc: Mark Mason; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Cisco Switch Portfolio Miss How is the Arista 7050 different than

Re: [c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Mark Mason
I think the ticket is the N3K-C3064TQ-10GT [Nexus 3064-T, 48 10GBase-T and 4 QSFP+ ports]. Looks like it's still new and isn't quite available to be configured in the system and the price is pretty delicious. From: aled.w.mor...@googlemail.com [mailto:aled.w.mor...@googlemail.com] On Behalf Of

[c-nsp] Cisco Switch Portfolio Miss

2013-09-12 Thread Mark Mason
The Cisco product line seems to be missing an equivalent of the Arista 7050 100Mb/1Gb/10GBase-T. Maybe taking the 4500x platform converting the 32 SFP ports to copper, and then expansion slot 4x40Gb ports then drop the price 10k+ we might have a match. Thoughts NSP community? NOTICE: This electr

Re: [c-nsp] MPLS-TE on ME3600

2013-09-12 Thread Eric Van Tol
> -Original Message- > From: Pshem Kowalczyk [mailto:pshe...@gmail.com] > Sent: Wednesday, September 11, 2013 3:36 PM > To: Eric Van Tol > Cc: cisco-nsp@puck.nether.net > Subject: Re: [c-nsp] MPLS-TE on ME3600 > > Hi, > > We use ME3600x with MPLS TE. I can't comment on the first point (we

Re: [c-nsp] PRTG OR ZABBIX MONITORING TOOL what is your opinion

2013-09-12 Thread Nick Hilliard
On 11/09/2013 14:27, mohamed nagy wrote: > okay who is working with zabbix for network device ??? I spent a day or two looking at it last year, but gave up. The zabbix monitoring core (i.e. event dispatch engine, etc) is interesting; the gui is terrible and the back-end data store layout is bizar

Re: [c-nsp] Vlan Mapping

2013-09-12 Thread harbor235
Thank you for the reply Quinn, can I perform unique vlan mappings per interface as well? e.g. port 1 ---> map vlan 1 to 11, port 2 ---> map vlan 2 to vlan 12 both ports are on the same port group ASIC. Mike On Wed, Sep 11, 2013 at 3:05 PM, quinn snyder wrote: > configuration is applie

Re: [c-nsp] Input Errors And CRC Errors

2013-09-12 Thread Armin Kneip
Hi, then are all on the same ASIC. As a example output for WS-X6516A-GBIC and WS-X6724-SFP Regards, Armin Kneip nc#sh int gi 1/1 cap GigabitEthernet1/1 Model: WS-X6516A-GBIC Type: 1000BaseSX Speed: 1000 Duplex:full Tru

Re: [c-nsp] Input Errors And CRC Errors

2013-09-12 Thread Armin Kneip
Hi Harry, show interfaces gi 7/1 capabilities shows the ASIC. Regards, Armin Kneip On 12.09.2013 12:51, Harry Hambi wrote: > Hi All, > Trying to diagnose a problem on a 6509 chasis, port showing input and CRC > errors on one end of the link. The link is a Tengigabit > I'me going to try the

Re: [c-nsp] Input Errors And CRC Errors

2013-09-12 Thread Harry Hambi
Thanks.does anyoane know how I would find the Port?Asics mappings?. Rgds Harry Harry Hambi BEng(Hons) MIET Rsgb -Original Message- From: a.l.m.bu...@lboro.ac.uk [mailto:a.l.m.bu...@lboro.ac.uk] Sent: 12 September 2013 11:57 To: Harry Hambi Cc: 'cisco-nsp@puck.nether.net' Subject:

Re: [c-nsp] Input Errors And CRC Errors

2013-09-12 Thread A . L . M . Buxey
Hi, > Trying to diagnose a problem on a 6509 chasis, port showing input and CRC > errors on one end of the link. The link is a Tengigabit > I'me going to try the follwing: > Change fibre clean/check fibre first. ensure its the right type of fibre for the link length and media converter type >

[c-nsp] Input Errors And CRC Errors

2013-09-12 Thread Harry Hambi
Hi All, Trying to diagnose a problem on a 6509 chasis, port showing input and CRC errors on one end of the link. The link is a Tengigabit I'me going to try the follwing: Change fibre Change Gbic, if errors are still showing try changing port. Change to a different port on the switch…..how do I mak

[c-nsp] Vulnerabilities

2013-09-12 Thread M K
Hi allCan i block the below two from a Cisco router ?UDP Constant IP Identification Field Fingerprintingntp information disclosure vulnerabilityThanks ___ cisco-nsp mailing list cisco-nsp@puck.nether.net http

Re: [c-nsp] VLAN Trunking Question

2013-09-12 Thread Armir Goxhabelliu
Hi. I'd suggest(it is try and fail method) to use a wider range of IP(just for testing a /29 range will be OK at the end roll back to desired IP) and use a laptop in each SW to see communication with each Router from SW to SW. -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun..