Re: [c-nsp] sup2T software release notes have hit

2011-07-12 Thread Florian Weimer
documentation no longer publicly available? -- Florian Weimerfwei...@bfk.de BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 ___ cisco

Re: [c-nsp] Best practice for CAM and ARP aging timers

2011-06-02 Thread Florian Weimer
have others observed unicast flooding in topologies without asymmetric traffic flows but with mismatched ARP/CAM timers? I've seen them with default timers. I don't know if they were mismatched. There is a feature called unknown unicast flood blocking (UUFB). It might be available for your

Re: [c-nsp] Cogent IOS upgrade == BGP-3, update malformed

2010-08-23 Thread Florian Weimer
Community: 3320:1276 3320:2010 3320:9020 Last update: Thu Aug 19 19:30:07 2010 -- Florian Weimerfwei...@bfk.de BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99

Re: [c-nsp] Which IP's belong to AS1234?

2009-09-25 Thread Florian Weimer
a single prefix, 193.110.32.0/21, right now.) -- Florian Weimerfwei...@bfk.de BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99 ___ cisco

Re: [c-nsp] BGP Cease - Connection collision resolution

2009-04-03 Thread Florian Weimer
not indicate a problem. (Or do you mean what it means for this specific IOS version? Sorry, in this case I have to pass.) -- Florian Weimerfwei...@bfk.de BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax

Re: [c-nsp] IPv6 Subnetting - Service Provider

2008-09-12 Thread Florian Weimer
addresses are not allowed per the IPv6 addressing architecture RFC. So it's just another case of vendors got bitten by RFCs that don't match customer requirements. 8-/ -- Florian Weimer[EMAIL PROTECTED] BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel

Re: [c-nsp] Dreaded FIB Exception on Sup2

2008-09-04 Thread Florian Weimer
based on RIR minimum allocations? From time to time, someone who should now better announces something smaller without the covering aggregate, so this requires some maintenance. -- Florian Weimer[EMAIL PROTECTED] BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100

Re: [c-nsp] Dreaded FIB Exception on Sup2

2008-09-04 Thread Florian Weimer
* Gert Doering: On Thu, Sep 04, 2008 at 02:05:54PM +0200, Florian Weimer wrote: Do you mean the filters based on RIR minimum allocations? From time to time, someone who should now better announces something smaller without the covering aggregate, So what? They do not want your traffic

Re: [c-nsp] Dreaded FIB Exception on Sup2

2008-09-04 Thread Florian Weimer
temporarily alleviate the TCAM memory being exhausted On a MSFC2/PFC2, enabling uRPF cuts the number of available routes in half, so it makes things only worse. Don't know about more modern MSFCs, sorry. -- Florian Weimer[EMAIL PROTECTED] BFK edv-consulting GmbH http

Re: [c-nsp] 3560 ACL performance?

2008-08-25 Thread Florian Weimer
) command to dump the TCAM contents, so you can check how your ACLs are compiled and project TCAM utilization according to that. -- Florian Weimer[EMAIL PROTECTED] BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe

Re: [c-nsp] IOSW vs JunOS

2008-04-20 Thread Florian Weimer
* Tom Storey: I notice Cisco poked at Junipers ScreenOS... Cisco has/had CatOS, and has PIX and ASA operating systems, which look and feel completely different to IOS, so they dont neccessarily get off the hook that easily. :-) And the VPN Concentrators had their own software line. I

Re: [c-nsp] Wanting to learn Juniper...

2008-04-11 Thread Florian Weimer
be an error that prevents you from committing the change). If you want to shut down an interface (while keeping it in the configuration), you need to disable it, and the equivalent of no shutdown in that sense is delete disable. Talk about intuitive... -- Florian Weimer[EMAIL

Re: [c-nsp] OT: Check Point v Cisco PIX (ASA 5500 Series)

2008-04-07 Thread Florian Weimer
that some people do not want to leak that data, but it's absence makes debugging quite hard. -- Florian Weimer[EMAIL PROTECTED] BFK edv-consulting GmbH http://www.bfk.de/ Kriegsstraße 100 tel: +49-721-96201-1 D-76133 Karlsruhe fax: +49-721-96201-99

Re: [c-nsp] Prepare for router Wednesday

2008-03-17 Thread Florian Weimer
* Gert Doering: What they are *not* doing is post security advisories every few weeks for things that are not (yet) known out in the wild. Because when they do that, people *will* go out trying to find the exploit, and then everybody has to scramble to upgrade, multiple times a year. This