Re: [c-nsp] Traceroute results masking path to destination

2012-02-02 Thread Christopher.Marget
I am having some difficulty understanding some trace route results that I am receiving from the network I am on. If I tracert from my location (France), the results are all masked with the destination address (Google's public DNS). I understand that something in the network is substituting

Re: [c-nsp] channel fails when using sup 10g port ?

2012-01-05 Thread Christopher.Marget
There's a 10g-only mode for the supervisor ports on the Sup720-10GE. mls qos 10g-only This mode disables the 1Gb/s ports, and enables 8q4t ingress and 1p7q4t egress queueing on the 10Gb/s ports, which is the same as the ports on the 6708 card. If queueing is the only failed consistency

[c-nsp] BFD with multiple neighbors on a broadcast segment

2011-09-14 Thread Christopher.Marget
I had a problem with BFD while doing some Nexus 7000 testing recently, and wonder if what I'm trying to do isn't expected to work: - 3 OSPF routers (all Nexus 7000) sharing a common broadcast domain with a /29 subnet mask. - The OSPF interfaces are SVIs. - The VLAN is forwarding only on a

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Christopher.Marget
There is no part of this path with parallel, load-balanced connections, which could be a obvious cause. What else could I check? The packets do arrive, so they are not being dropped on the way, but they arrive out of sequence, being useless to the application. I've seen UDP packets (also

Re: [c-nsp] A bit of 6513-E confusion

2011-08-17 Thread Christopher.Marget
Drew said: With a 6513-E would you be able run it with: 2xSUP720-3BXLs 10xWS-6748(/w DFCs) 1x WS-6708? I don't think so. The fabric limitation with Sup720 in a 13-slot chassis isn't so much a chassis problem as it is a supervisor fabric problem. The Sup720 just doesn't have enough fabric

Re: [c-nsp] cisco 3110g blade switch consle to as2511-rj

2011-08-03 Thread Christopher.Marget
Erik Nelson said: No, the console cable on a 3110G ends in a serial DB9 female connector. Indeed: http://www.cisco.com/en/US/docs/switches/blades/3110/hardware/installation/guide/HIGCABLE.html#wp1051039 The console port uses a USB connector. The supplied USB-to-DB-9 adapter cable is used to

Re: [c-nsp] Two Cisco 8xx, point to point multicast??

2011-05-26 Thread Christopher.Marget
I have a friend who has been gifted with two new Cisco 881s and strict orders to get multicast flowing between two locations using a GRE tunnel. We're happy with our IP routing, tunnel protection won't be a problem, but it's been forever since I touched multicast and these things show no

Re: [c-nsp] TFTPServer loadbalancing in one leg ace

2011-05-06 Thread Christopher.Marget
I'm trying to loadbalance between two tftp-servers in an ace4700. I only have one service Vlan connected to the context. I'm having problems with the nat on the udp in the response. I can't get the src-nat to work on the response from the servers. Most TFTP servers send their reply traffic

Re: [c-nsp] Etherchannel between 3560G and IBM power 750

2011-04-21 Thread Christopher.Marget
mode desirable in your interface configurations is almost certainly wrong. That mode enables the Cisco-proprietary PaGP link aggregation mechanism, which IBM probably doesn't support. mode active enables standards-compliant LACP. mode on forces aggregation without any negotiation. You'll need

Re: [c-nsp] 2950 and multicast, a cpu issue?

2011-04-12 Thread Christopher.Marget
sw2950 running c2950-i6q4l2-mz.121-22.EA13 Is normal the cpu behaviour? I attached an image, I hope it wont be removed switch is just managing multicast traffic http://postimage.org/image/2hp8nccw4/ You should try show proc cpu during peak periods to see what processes are active.

Re: [c-nsp] Serial lead

2011-03-29 Thread Christopher.Marget
but when connected to a FreeBSD laptop it does send break so it must be a driver limitation It's a while since I've looked to be honest, so it's probably my shonky memory there. Certainly, I've not found a way using the PL2303 and driver that I am (which is a kext file downloaded of them

Re: [c-nsp] ICMP Mask Requests on 6500

2011-01-07 Thread Christopher.Marget
Solaris 8 used ICMP mask requests as a part of the jumpstart process. Newer versions might also. But they didn't send requests to a router, they sent directed requests to the jumpstart server IIRC. /chris -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-

[c-nsp] Upgrading IOS to crypto image

2011-01-03 Thread Christopher.Marget
Greetings, Let's say that I've got some Catalysts that were ordered without a k9 (crypto) software image. These switches are under SmartNet support, and are installed in a crypto-okay country. I'm happy with the current feature set and version, except that I want to enable SSH. If the

Re: [c-nsp] terminal server suggestions?

2011-01-03 Thread Christopher.Marget
I was wondering if anyone had a good suggestion for extremely cheap terminal servers (Avocent, Xyplex, Cisco, etc). I've purchased Xyplex MX-1620 terminal servers on ebay for $1 per port, including shipping. Cisco pinout (use rollover) TCP port is 2000+(100*port-number) Requires a TFTP

Re: [c-nsp] Console server

2010-12-30 Thread Christopher.Marget
On Thu, Dec 30, 2010 at 10:02 PM, Jay Nakamura zeusda...@gmail.com wrote: Do anyone have recommendation on console server? I've been mostly happy with Lantronix SLC gear. They've had a recent supplier issue, which forced PCMCIA slots to turn into USB, and upset the applecarts of people who

Re: [c-nsp] Question about manually configuring 1000/Full on Cisco switches

2010-10-31 Thread Christopher.Marget
On Sun, Oct 31, 2010 at 6:18 PM, christopher.mar...@usc-bt.com wrote: speed 1000 on a copper port capable of 10/100/1000 disables 10 and 100 Mb/s operation by removing those modes from the list of those advertised to the link partner. This may be useful if you would prefer a cable

Re: [c-nsp] Question about manually configuring 1000/Full on Cisco switches

2010-10-31 Thread Christopher.Marget
speed 1000 on a copper port capable of 10/100/1000 disables 10 and 100 Mb/s operation by removing those modes from the list of those advertised to the link partner. This may be useful if you would prefer a cable failure on pins 4, 5, 7 or 8 to drop the link and keep it down, rather than

Re: [c-nsp] OSPF design

2010-10-22 Thread Christopher.Marget
I reckon separating the network into different OSPF areas without summarization at ABR cannot minimize OSPF database, all routers still receive routes advertises by other routers. Not true. All /prefixes/ will still be visible in all areas without summarization, but you'll still minimize the

Re: [c-nsp] Are multicast MAC addresses allowed in the source field?

2010-10-15 Thread Christopher.Marget
The I/G bit must be cleared in the source address of an Ethernet frame. Ref: IEEE 802.3-2002, Section 3.2.3(b) ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Are multicast MAC addresses allowed in the source field?

2010-10-15 Thread Christopher.Marget
jneiber...@gmail.com wrote: On Fri, Oct 15, 2010 at 2:47 PM, Lee ler...@gmail.com wrote: On 10/15/10, John Neiberger jneiber...@gmail.com wrote: We have an application involving a firewall cluster where the cluster has a VIP associated with it, but the VIP apparently replies to ARP

Re: [c-nsp] Need help with setting up ip multicastrouting

2010-10-13 Thread Christopher.Marget
Peter said: On Wed, 2010-10-13 at 06:08 -0700, David Barak wrote: There is a document on cisco#39;s site regarding how IGMP snooping breaks multicast in typical LAN environments. I don#39;t have the link handy, but it should be googleable. Effectively, the issue is that the switches do

Re: [c-nsp] OSPF Convergence time on Dynamips

2010-10-13 Thread Christopher.Marget
Why ospf takes so long to load when labbing on dynamips? Particulary in lan segments it almost takes forever ,if anyone has any method to improve the convergence time, I would love to hear it! The performance bottlenecks in my dynamips environment have been: 1) idlepc (already mentioned) 2)

Re: [c-nsp] OSPF Convergence time on Dynamips

2010-10-13 Thread Christopher.Marget
I got a huge performance boost when I moved the dynamips directory to a reasonably fast disk subsystem. uh, why was this? Surely you weren't paging your inbound packets to disk before forwarding them? Or was this purely for startup / shutdown? I never investigated it very far, but I

Re: [c-nsp] Books for Nexus Arch

2010-10-13 Thread Christopher.Marget
Nikhil said: Take a look: NX-OS Book: http://www.ciscopress.com/bookstore/product.asp?isbn=1587058928 do you mention this book because it has Nexus in the title, or because you read it and found it valuable? /chris ___ cisco-nsp mailing list

Re: [c-nsp] Need help with setting up ip multicastrouting

2010-10-12 Thread Christopher.Marget
Gert Doering said: On Tue, Oct 12, 2010 at 07:45:10PM +0200, Peter Rathlev wrote: I'm just guessing here, but I don't see why routed multicast traffic would need to have the L2 group bit set. Well, if you only ever have two routers in a subnet, it doesn't need to... But what if you

Re: [c-nsp] General switching question regarding load balancing

2010-09-18 Thread Christopher.Marget
If a host has two NICs connected to two switches,(the two switches are connected together) and load balancing between them, switch will see the same source MAC from two ports. How does a switch decide which ports to put in the forwarding table? Would it switch back and forth every

Re: [c-nsp] Cisco 7609, LR Transceiver for Short Distance Connection

2010-09-10 Thread Christopher.Marget
*Maximum* transmit power is 4 dBm and max receive is -1 dBm, so an attenuator is certainly highly recommended for short distances. Minimum cabling distance for -LR, -SR, -LX4, -ER modules is 2m, according to the IEEE 802.3ae standard And? The linked document (which you trimmed)

Re: [c-nsp] Cisco 7609, LR Transceiver for Short Distance Connection

2010-09-10 Thread Christopher.Marget
Nick: The patch cable length really doesn't matter. What matters is the attenuation and ensuring that your received light level at each end is within the threshold of what's acceptable to the transceiver receiver port. So, where does that leave the OP's LR links? Does it boil down to get

Re: [c-nsp] Cisco 7609, LR Transceiver for Short Distance Connection

2010-09-09 Thread Christopher.Marget
He should actually be ok even with ER and no attenuators as minimum transmit power is -4.7 dBm and max receive power is -1 dBm (per cisco site). Just check optical power levels and see if they are in limits. Uhm, no. *Maximum* transmit power is 4 dBm and max receive is -1 dBm, so an

Re: [c-nsp] full duplex mismatch speed - dynamips

2010-08-21 Thread Christopher.Marget
Please elaborate. How do you manually configure which end of the link is master for clocking purposes? Sorry for top-posting. Sent from my clunky phone interface. /chris Nick Hilliard n...@foobar.org wrote: On 20 Aug 2010, at 17:57, christopher.mar...@usc-bt.com wrote: Regardless of what

Re: [c-nsp] full duplex mismatch speed - dynamips

2010-08-21 Thread Christopher.Marget
Andrew said: On 20/08/2010, at 5:57 PM, christopher.mar...@usc-bt.com wrote: Two mentions of problems with manually configured gigabit operation. Is there really a problem in that scenario? Shouldn't be. Regardless of what the UI appears to be doing, you can't do gigabit without

Re: [c-nsp] full duplex mismatch speed - dynamips

2010-08-20 Thread Christopher.Marget
My favorite is when the sys-admin sets 10-12 prod servers to 100/1000 - full doesn't tell anyone and then comes back in a panic because the network blew up. I have had so many problems because someone forced 100/Full, 1000/Full on a switch and the servers could A) Not set duplex

[c-nsp] Nexus 7000 MSDP peering policy woes

2010-08-11 Thread Christopher.Marget
I'm trying to implement PBR-filtering of MSDP messages from a Nexus 7000 running 5.0(2a), and I'm starting to think that the route-map is being interpreted wrong. The relevant parts of the configuration are: feature msdp feature pbr ip msdp originator-id loopback0 ip msdp peer W.X.Y.Z

[c-nsp] Nexus 7000 MSDP peering policy woes

2010-08-11 Thread Christopher.Marget
Huh. The copy of this note in my outbox is formatted nicely, but the one forwarded back to me by the list is a mess. I'm not sure what happened to the newlines. Thank you, Outlook. Trying again, sorry for the noise. I'm trying to implement PBR-filtering of MSDP messages from a Nexus 7000

Re: [c-nsp] Nexus 7000 MSDP peering policy woes

2010-08-11 Thread Christopher.Marget
while there are clueful folks on this list that know N7K and NX-OS, i don't think cisco-nsp is an appropriate replacement for talking to the TAC. Perhaps not. I appreciate your reply, and hope my query isn't widely considered as inappropriate. but regardless, i _think_ what you're likely

Re: [c-nsp] NX-OS - Fabric Path

2010-07-25 Thread Christopher.Marget
I've seen the same as well. In my case, I noticed 'ip host' commands and a default route in the management vrf that I hadn't created. Both referenced 10.x addresses. I didn't notice any nasty traffic on the management network. After seeing Chuck Church's note, I pulled a fresh 5020 from its

Re: [c-nsp] Ethernet Interfaces Speed and Duplex - Force or Auto

2010-05-20 Thread Christopher.Marget
Said Jeff Wojciechowski: FastEthernet0/3 is up, line protocol is up (connected) snip Full-duplex, 100Mb/s, media type is 10/100BaseTX snip 5 minute input rate 2000 bits/sec, 3 packets/sec 5 minute output rate 3000 bits/sec, 4 packets/sec 0 runts, 0 giants, 0 throttles It's

Re: [c-nsp] Multiple inline devices

2010-05-20 Thread Christopher.Marget
Multiple inline devices gets sketchy very quickly. During device failure, some boxes turn into crossover cables, others into straight cables. If you've got a 100Mb/s device that doesn't do MDI/MDI-X, how do you cable it up correctly so that link can be established regardless of which devices

Re: [c-nsp] nexus 5xx vpc peer keepalives

2010-05-01 Thread Christopher.Marget
T.V. said: If you have an OOB network that requires the 5k mgmt0 ports to be used there, burn one of 1-8 on a 5010 or one of 1-16 on a 5020 as a gig port and do another VRF specially for the peer link. Done. You could certainly send the keepalive traffic on that OOB network, but many OOB

Re: [c-nsp] USB to Serial Converter recommendation

2010-04-21 Thread Christopher.Marget
- is compatible Mac OS X, *- knows how to send breaks (the must have feature),* On OSX there's a great terminal emulator called ZTerm, written by Dave Alverson. It supports a nifty feature to send BREAK even when your hardware or drivers don't support it. BREAK amounts to holding the TX

Re: [c-nsp] IGMP differences between c3560 c4948

2010-04-11 Thread Christopher.Marget
Said Vince: On the C3560, with default config, i believe igmp snooping is enabled by default. A multicast source floods all traffic to all ports in the vlan, until I configure 'ip igmp snooping querier' at which point the flooding stops. I would have expected igmp snooping to figure out that

Re: [c-nsp] Question - VLAN tagging Catalyst 6500 to Linux Host

2010-04-05 Thread Christopher.Marget
It sounds like you intend for the 10.1.1.0/24 subnet to be UNtagged? interface Vlan309 description Linux Host ip address 10.1.1.1 255.255.255.0 ! interface Port-channel32 desc LACP bonded 3 GigE interfaces switchport switchport access vlan 309 With a tagging (trunk) interface,

Re: [c-nsp] Question - VLAN tagging Catalyst 6500 to Linux Host

2010-04-05 Thread Christopher.Marget
Nick Hilliard: Just avoid using tags 1002-1005, as Cisco has made claims to these particular vlans. According to Cisco Press, the problem is bigger than just VLANs 1002-1005: Numbers 1001 to 1024 are reserved by Cisco and cannot be configured.

Re: [c-nsp] Multicast Core

2010-03-17 Thread Christopher.Marget
We are currently using 2960Gs with IGMP querier enabled I'm thinking a 4948 or 3750G would work. It sounds like you're using the L2 'ip igmp snooping querier' function in your 2960. I don't think that feature is available in the 4948. IGMP snooping as a function of enabling multicast

Re: [c-nsp] Same MAC addresses from two ports on different VLAN

2010-03-14 Thread Christopher.Marget
Phil Mayers: Nope. All 3Com devices from superstack II onwards have per-VLAN FDBs, and all the Extreme's I've ever seen do too. Tempting though it is to rag on the cheaper switches, they do usually manage the basics ;o) 3com's CoreBuilder 3500 was not endowed with this basic feature when it

Re: [c-nsp] Cheap 10G between 7600 and Procurve 5406zl

2010-03-14 Thread Christopher.Marget
These days you can get cheap twinax 10G cables with SFP+ at the ends to connect two Cisco switches or two Procurves. Short distance only of course, but very cheap. They're also useful for connecting servers to top-of-rack 10G switches. But curiously, they're currently unsupported by Cisco

Re: [c-nsp] Cheap 10G between 7600 and Procurve 5406zl

2010-03-14 Thread Christopher.Marget
These days you can get cheap twinax 10G cables with SFP they are currently unsupported on N7K for good reasons that are technical. strongly suggest that you don't use it for a production environment. They seem to work fine in this application, however. suggest you do shut on one side