[c-nsp] Cisco Security Advisory: Cisco Unified Computing System Performance Manager Input Validation Vulnerability

2016-07-20 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Cisco Security Advisory: Cisco Unified Computing System Performance Manager Input Validation Vulnerability Advisory ID: cisco-sa-20160720-ucsperf Revision 1.0 For Public Release 2016 July 20 16:00 GMT (UTC

[c-nsp] Router ASR1k ACL count question

2016-07-20 Thread Satish Patel
I have C3850 (L3) switch and Cisco ASR1006 Router, I am running ACL on both device but if i rung "show ip access-lists" on both then i can see c3850 hit counter not increasing but on ASR1006 router it is increasing. What does that mean? I heard from people C3850 using hardware ACL because of that

Re: [c-nsp] Classic IOS shared policy instance

2016-07-20 Thread Antoine Monnier
Yes all packets going out of that physical interface will be processed according to that one policy-map On Wed, Jul 20, 2016 at 5:12 PM, Curtis Piehler wrote: > Ok so that means when if you apply a policy-map ingress or egress to a > physical interface all of the associated sub-interfaces will u

Re: [c-nsp] Classic IOS shared policy instance

2016-07-20 Thread Curtis Piehler
Ok so that means when if you apply a policy-map ingress or egress to a physical interface all of the associated sub-interfaces will use the same policy-map (same token bucket)? Instead of applying the same policy-map to different sub-interfaces which uses a different token bucket (IE: 2 100M polic

Re: [c-nsp] Classic IOS shared policy instance

2016-07-20 Thread Antoine Monnier
not sure that s what you are looking for: if you apply the policy-map at the physical interface level, it will apply for all traffic in the sub interfaces. On Wed, Jul 20, 2016 at 4:45 PM, Curtis Piehler wrote: > In simpler terms I am looking for a shared token bucket configuration > across mult

Re: [c-nsp] Classic IOS shared policy instance

2016-07-20 Thread Curtis Piehler
In simpler terms I am looking for a shared token bucket configuration across multiple sub-interfaces on the classic IOS platform On Wed, Jul 20, 2016 at 1:08 AM, Curtis Piehler wrote: > I have a particular scenario doing some QoS on classic IOS devices. > > I have two WAN sub-interfaces part of