[c-nsp] match multiple communities in route-map

2009-03-24 Thread Andy BIERLAIR
I have read that multiple match lines in a route-map are treated with AND logic. But this scenario here does not do AND, but OR: route-map IX-TEST-OUT permit 10 match community PREPEND-1-PEERING match community PEERING-OUT set as-path prepend 65001 route-map IX-TEST-OUT permit 20 match

Re: [c-nsp] match multiple communities in route-map

2009-03-24 Thread Andy BIERLAIR
, March 24, 2009 17:05 To: Andy BIERLAIR; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] match multiple communities in route-map Hello Andy: I don't think you want the two match-community statements in your first two route-map statements. So, that would be: route-map IX-TEST-OUT permit 10

[c-nsp] Changing SSH Port on IOS

2009-03-21 Thread Andy BIERLAIR
I'm running s72033-ipservicesk9-mz.122-18.SXF15a with SSH on Port 22. Due too many bots hammering that well-known port, I wanted to change it to something else, but somehow I can't: Router(config)#ip ssh port ^ % Invalid input detected at '^' marker. Router(config)#ip ssh ?

[c-nsp] Netflow on SUP720-3BXL

2009-03-15 Thread Andy BIERLAIR
I'm trying to run netflow on one of our Cisco core routers (SUP720-3BXL with SXF15a), but I think I am hitting some limitations because of this: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM threshold exceeded, TCAM Utilization [99%] The setup of netflow looks like this (globally): ip

Re: [c-nsp] Netflow on SUP720-3BXL

2009-03-15 Thread Andy BIERLAIR
that netflow is the key. - Andy -Original Message- From: Andreas Bourges [mailto:andy-li...@bourges.de] Sent: 15 March 2009 17:18 To: cisco-nsp@puck.nether.net Cc: Andy BIERLAIR Subject: Re: [c-nsp] Netflow on SUP720-3BXL -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, On Sunday 15