Re: [c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Christopher J. Pilkington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Feb 02, 2012 at 10:28:44PM +, Nick Hilliard wrote: > On 02/02/2012 22:03, Christopher J. Pilkington wrote: > > I have seen this statement also on multiple occasions, but I > > have not found the document showing this 500k

Re: [c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Christopher J. Pilkington
On Thu, Feb 02, 2012 at 03:01:35PM -0600, Blake Dunlap wrote: > You should note that lit is incorrect in regards to the FIB as was pointed > out on the list a few days ago. Look lower in the document for the accurate > numbers based on the included ESP. I believe it is only 500k ipv4. I have seen

[c-nsp] ASR100x route tables sanity check

2012-02-02 Thread Christopher J. Pilkington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm looking at the new ASR100x series boxes. We'll have 6 routers, each with a eBGP upstream and full iBGP mesh. So, worst case, 6 full tables. ASR1001 literature claims 1M IPv4 routes in the ESP documentation, which I'm assuming refers to the FIB.

Re: [c-nsp] Cisco ASA and ipads

2012-01-29 Thread Christopher J. Pilkington
unctionality could be use such as > for wireless with the vpn client. > > Just trying to find out what can be done right now. > > > -Original Message- > From: Christopher J. Pilkington [mailto:c...@0x1.net] > Sent: Monday, 30 January 2012 3:16 PM > To: Thomason, Simo

Re: [c-nsp] Cisco ASA and ipads

2012-01-29 Thread Christopher J. Pilkington
On Jan 29, 2012, at 22:28, "Thomason, Simon" wrote: > Just did a quick search to see if the ASA would support Dot1x and does not > look like they do as this might have been a different option. Perhaps I'm misunderstanding your topology here... are these laptops entering your network with a soft

Re: [c-nsp] Cisco ASA and ipads

2012-01-29 Thread Christopher J. Pilkington
On Jan 29, 2012, at 22:49, "Dobbins, Roland" wrote: > It can be argued that the iPad is at least superficially more secure than > general-purpose computers. If I were to differentiate access policies > between iPads and general-purpose computers (which I can't imagine having a > need to do),

[c-nsp] Considerations for future IPv6 with vrf-lite on ME3400E

2012-01-10 Thread Christopher J. Pilkington
We are rolling out a small network utilizing ME3400E in REP "ring" topology, providing L3 "VPNs" using VRF-lite and OSPF. Are there any particular pitfalls we should watch for with this configuration w.r.t. rolling out IPv6 in the future? ___ cisco-nsp m

Re: [c-nsp] DSCP

2011-11-16 Thread Christopher J. Pilkington
On Wed, Nov 16, 2011 at 10:44 AM, Mohammad Khalil wrote: > > DSCP 41 means CS4 or AF41 ? A handy guide: http://www.cisco.com/en/US/docs/switches/datacenter/nexus1000/sw/4_0/qos/configuration/guide/qos_6dscp_val.html -cjp ___ cisco-nsp mailing list ci

Re: [c-nsp] understanding interface traffic counters of Cisco router and Cisco switch

2011-11-10 Thread Christopher J. Pilkington
Fa0/1 is an access port, not a 802.1q trunk, the traffic on that interface is not tagged, so the monitor destination will "see" untagged traffic. On Nov 10, 2011, at 19:38, Martin T wrote: > Sergey, > I modified the setup a little: > > http://img64.imageshack.us/img64/5736/interfacestrafficcou