Re: [c-nsp] DHCP Snooping on Cat3850

2016-09-27 Thread Lukas Tribus
Hi, the IOS thread for DHCP snooping is hogging CPU, either it is swamped by incoming DHCP traffic (although this should be rate-limited, not causing 50% CPU load) or the thread got into a infinite loop because of a bug. Disabling/Enabling DHCP snooping may close the thread and restart it, may

Re: [c-nsp] DHCP Snooping on Cat3850

2016-09-27 Thread Antoine Monnier
CSCva40478 ? "ip dhcp snooping trust on port-channel does not reflect on member link" On Tue, Sep 27, 2016 at 9:26 AM, Lukas Tribus wrote: > Hi, > > > the IOS thread for DHCP snooping is hogging CPU, either it is swamped by > incoming DHCP traffic (although this should be rate-limited, not causi

[c-nsp] WS-X6848-SFP vs C6800-48P-SFP

2016-09-27 Thread Antoine Monnier
Hello, does someone know the difference between those two cards? WS-X6848-SFP vs C6800-48P-SFP Data sheets seem to be the same: http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6800-series-switches/datasheet-c78-733663.html http://www.cisco.com/c/en/us/products/collateral/swit

[c-nsp] Hub and Spoke Q-in-Q

2016-09-27 Thread Steven Saner
I am getting ready to turn up some new ethernet based WAN service (AT&T ASE) that is set up in a hub and spoke arrangement. Each spoke has a VLAN ID assigned to it and I should be able to pass multiple VLANs to each spoke using Q-in-Q tagging. What I would *like* to do is use a switch on the hub e

Re: [c-nsp] Hub and Spoke Q-in-Q

2016-09-27 Thread Arie Vayner
Should be possible, and would most likely be easier to implement with some of the "Metro Ethernet" type of devices. Maybe take a look at the ME3600... Take a look at this config guide for some capabilities and ideas: http://www.cisco.com/c/en/us/td/docs/switches/metro/me3600x_3800x/software/releas

Re: [c-nsp] DHCP Snooping on Cat3850

2016-09-27 Thread Crist J. Clark
On Tue, Sep 27, 2016 at 10:18:30AM +0200, Antoine Monnier wrote: >CSCva40478 ? >"ip dhcp snooping trust on port-channel does not reflect on member link" "Insufficient Permission to View Bug This bug contains proprietary information and is not yet publicly available." An I

Re: [c-nsp] WS-X6848-SFP vs C6800-48P-SFP

2016-09-27 Thread Yang Yu
On Tue, Sep 27, 2016 at 10:11 AM, Antoine Monnier wrote: > Hello, > > does someone know the difference between those two cards? WS-X6848-SFP vs > C6800-48P-SFP > > Data sheets seem to be the same: > > http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6800-series-switches/datasheet

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016

2016-09-27 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: September 2016 Advisory ID: cisco-sa-20160927-openssl Revision: 1.0 For Public Release 2016 September 27 22:40 UTC (GMT