Re: [c-nsp] Has there been a Cisco network device with GE management port while other ports are FE or lower?

2018-10-24 Thread Howard Jones
On 24/10/2018 17:26, Martin T wrote: Hi, I need to know, if GigabitEthernet0(returned by SNMP ifDescr)/Gi0(returned by ifName) is a Management Ethernet interface or not. My assumption is that Cisco has never made a network device, where Management Ethernet is a 1GigE port while non-management po

Re: [c-nsp] Ode to the old days

2016-12-08 Thread Howard Jones
On 08/12/2016 22:04, Marco van den Bovenkamp wrote: I had the same reaction when I first saw a Lannet 3LS some twenty years ago, back when the 7500s were king. '1.28 Gbps of routing performance? WHAT!?' The good old days of absolutely shocking software testing... e.g. the Ascend Max softwar

Re: [c-nsp] Stop IP Fragmentation attck

2016-04-26 Thread Howard Jones
On 26/04/2016 19:24, Job Snijders wrote: FastNetMon: https://github.com/pavel-odintsov/fastnetmon Here is a presentation about one deployment: https://www.youtube.com/watch?v=0ahdxp_btHY Nice presentation! :-) Does your upstream transit care about you announcing and withdrawing every 57 secon

Re: [c-nsp] csr1000v - GNS3 - i only see aux port console

2016-04-21 Thread Howard Jones
You need to redirect the serial port (the console of the router is on the serial port). http://lesser-evil.com/2014/08/ios-xrv-serial-port/ On 21/04/2016 01:44, Aaron wrote: I seem to almost have csr1000v working in GNS3. but I only have aux port on console. any idea how to get the serial po

Re: [c-nsp] lack of snmp parity with cli

2016-01-07 Thread Howard Jones
On 07/01/2016 11:13, Mike wrote: This seems silly that there would be something important like these tags that can only be seen from the cli and not from snmp. I've went thru cisco's snmp object navigator quite a bit and I came up empty. I've also spent lots of time doing some pretty deep walks

Re: [c-nsp] Advanced use of mrtg

2015-10-21 Thread Howard Jones
On 21/10/2015 15:57, Victor Sudakov wrote: Mike - st257 wrote: From what I've seen you'll find a more active community surrounding Cacti. MRTG has its niche in interface statistic graphing, I'll give it that. Cacti has so many dependencies including PHP, MySQL, cairo, pango, some X libraries a

Re: [c-nsp] 1 or 2 port Console/Ethernet server

2015-09-24 Thread Howard Jones
Maybe a raspberry pi? I wrote this up a while ago. With newer Pi's you should be able to get up to 4 serial ports... http://lesser-evil.com/2013/04/raspberry-pi-ser2net-cheap-nm16a-serial-console-server/#comment-24587 On 24/09/2015 15:47, f287c...@opayq.com wrote: Hello I need to connect to th

Re: [c-nsp] SNMP ifLastChange > 30 days

2015-09-02 Thread Howard Jones
On 02/09/2015 18:11, Drew Weaver wrote: Hey all, I've been dealing with an issue in SNMP (6500) where I need to know whether an interface has changed its operational status within the last 30 days. I came across the oid ifLastChange which tracks against the 32 bit counter sysUptime.0, the pro

Re: [c-nsp] Remote management console servers?

2015-07-15 Thread Howard Jones
On 15/07/15 09:00, Saku Ytti wrote: Now this is my favourite way to build OOB. Because with the Cisco CPE I have comprehensive WAN options, which organization already knows how to provision and support. All existing tooling/automation works. Our WAN of choice was either own E1 or 4G, if we ru

Re: [c-nsp] Cisco Blackhole ?

2015-05-11 Thread Howard Jones
Usually it is done on the same session, and the customer adds a special community for blackhole routes. The method I saw was: 1) add a null route for a private or test address (e.g. 192.0.2.1/32) on each router. 2) enable 'ip verify unicast source reachable-via any' on edge interfaces so that

Re: [c-nsp] Alternate to TOR (4948)

2015-04-15 Thread Howard Jones
On 15/04/2015 01:58, Bill Woodcock wrote: Yes, entirely, as of about two years ago. Very happy with them. Hi Bill, What L3 features do you use on them? Last time I looked, I got the impression that L3 on the smaller Nexus devices (i.e. non-7K) was a bit patchy... Thanks, Howie __

Re: [c-nsp] Fiber Cable Guide

2014-09-06 Thread Howard Jones
On 06/09/2014 03:13, Ivan wrote: I am looking for some fiber cable guides like the Cisco ones here http://www.cisco.com/c/dam/en/us/td/i/31-40/360001-37/363001-364000/363563.eps/_jcr_content/renditions/363563.jpg (These ones are for Cisco ONS. http://www.cisco.com/c/en/us/td/docs/o

Re: [c-nsp] Galvanic isolation for Ethernet?

2014-08-18 Thread Howard Jones
On 18/08/2014 09:54, Victor Sudakov wrote: Colleagues, Do you know any devices to provide galvanic isolation for twisted pair Ethernet? We have regular Ethernet surge protection devices (AFAIK APC) between the switch and the attached equipment but they don't help. This is the second Catalyst al

[c-nsp] What does L2PT actually do on the wire?

2010-05-19 Thread Howard Jones
We have a metro-ethernet link between two sites, where our CE are a pair of 3750G switches. We run q-in-q for a couple of internal things, with all the L2PT options enabled (cdp, vtp, stp, lacp etc etc). We've found that even with all that enabled, CDP (for example) doesn't get to the far end,

[c-nsp] bpduguard and trunks?

2009-12-03 Thread Howard Jones
I've just run into an odd problem, and was wondering if anyone else could clarify this for me. [c1]---[Sw1]--[Sw2]---[c2] c1 and c2 are client devices. Sw1 and Sw2 are 3750Gs with a trunk between them. c1 has a trunk to Sw1. One of the vlans in that trunk as passed along the sw1-sw2 trunk

Re: [c-nsp] snmpwalk for switch port status

2009-11-18 Thread Howard Jones
Matlock, Kenneth L wrote: > Seeing this script reminded me of a pet peeve I have with Cisco. Why oh > why did they use a 32-bit int for the uptime of the switch and port, and > use 1/100th second resolution, so after 497 days the counter rolls over > back to 0? Was a 64 bit int (or 1/10 a second re

[c-nsp] 32-bit ASN for 7200 G2?

2009-11-18 Thread Howard Jones
I'm researching IOS versions for upgrading our transit routers to support 32-bit ASNs, and it seems that I need to use basically the absolute latest 12.4T release (12.4.24T) to get that support. I can't get it in 12.2S or 12.4 mainline at all. Is that really the case? What does everyone else use

Re: [c-nsp] cisco 7206 VXR router

2009-09-29 Thread Howard Jones
On 29/09/2009 13:03, Antonio Soares wrote: > Here's the document you need: > > Cisco 7200 Bandwidth Points > > http://www.cisco.com/en/US/products/hw/routers/ps341/prod_presentation_list.html > > To add 8 FastEthernet Ports, you will need 4 * PA-2FE-TX. The NPE-G1 has 3 > built-in GE interfaces. >

Re: [c-nsp] Which IP's belong to AS1234?

2009-09-25 Thread Howard Jones
Andy Saykao wrote: This might be a silly question but is there a tool somewhere that will give me a list of IP's that are owned by a particular AS. As an example, I might want to know which IP blocks belong to AS1234? The RIPE IRR does this for europe at least, and I believe RIPE and ARIN co

Re: [c-nsp] Open Source solution to deploy a radius server against Cisco devices?

2009-03-10 Thread Howard Jones
Jon Lewis wrote: > Another option is Cistron Radius http://www.radius.cistron.nl/ which > is probably going to be pretty similar to Freeradius, since the latter > is apparently a fork of the former. > > Radiator is perl, so you get the 'source code', but it's not open > source and you do need to bu

[c-nsp] L2TPv3 sizing?

2009-03-10 Thread Howard Jones
Can anyone point me to any documentation/whitepaper regarding router sizing for L2TPv3 throughput? We're trying to understand what the startup cost would be for a couple of ~100Mbit/sec L2TPv3 ethernet-to-ethernet tunnels as an alternative to a full MPLS solution. Is there any Cisco (or 3rd party)

[c-nsp] Message Types/Classes? (%PLATFORM_RPC-3-MSG_THROTTLED)

2008-11-04 Thread Howard Jones
I'm seeing a lot of this in the logs of a 3750: %PLATFORM_RPC-3-MSG_THROTTLED: RPC Msg Dropped by throttle mechanism: type 37, class 14, max_msg 32, total throttled 24852 Thing is, where do I find out what message type 37 class 14 is? the Output Interpreter just gives a generic message for %PLATF

Re: [c-nsp] 3750, QinQ & Jumbo Frames?

2008-10-15 Thread Howard Jones
Howard Jones wrote: We're just looking at running QinQ over a network of 3750G switches, and while I was investigating enabling jumbo frames, I came across this document: http://www.cisco.com/en/US/products/hw/switches/ps700/products_configuration_example09186a008010edab.shtml#c3

[c-nsp] 3750, QinQ & Jumbo Frames?

2008-10-15 Thread Howard Jones
We're just looking at running QinQ over a network of 3750G switches, and while I was investigating enabling jumbo frames, I came across this document: http://www.cisco.com/en/US/products/hw/switches/ps700/products_configuration_example09186a008010edab.shtml#c3 which contains: "*Note: *If Gigabit

Re: [c-nsp] command or third party software about switch port

2008-10-09 Thread Howard Jones
kcc wrote: Hi all ls any software / command to find out the ip address of the computer which is connecting to switch portxx I want to check this ip of server when the switch portxx is using high bandwidth? I believe nedi (nedi.ch) will do this for you. Howie ___

Re: [c-nsp] Recommend IOS for 7200?

2008-10-08 Thread Howard Jones
Peter Nyamukusa wrote: > Hi Howard, > > Why do you have a look at the Software Advisor tool > http://tools.cisco.com/Support/Fusion/FusionHome.do > Because that doesn't have a column for "does what you want, but crashes mysteriously". 12.2(25)S15 is the latest 12.2S release. It has the features

[c-nsp] Recommend IOS for 7200?

2008-10-08 Thread Howard Jones
Oh fount of hard-won experience, For a general dogsbody (LNS, BGP, OSPF) SP router, what is the current recommended IOS version for stability? I am looking to upgrade a couple of ancient NPE-225 routers to a current IOS. Should it be 12.2(25)S15? or is there something else I should look at. Aside

Re: [c-nsp] SNMP Monitoring VPN Traffic

2008-09-26 Thread Howard Jones
Aaron Riemer wrote: Hey guys, I am taking a bit of a leap here. But I would like to know if it's possible to actually monitor or graph bandwidth that each of our VPN tunnels are utilising terminating at our ASA firewall. We have implemented Cacti and weathermap monitoring. It would be great

Re: [c-nsp] Dashboard Network Monitoring Software

2008-09-07 Thread Howard Jones
aaron wrote: Yep weathermap looks awesome. Do you know if its possible for the map to change the icon of a site if it is down or unreachable? That would be awesome :) This is definitely possible on network-weathermap.com weathermap, assuming you have either some exisiting monitoring tool that

Re: [c-nsp] IOS for Multi-vrf

2008-06-13 Thread Howard Jones
Gary Roberton wrote: Anyone know the IOS image required (e.g. Enterprise Base) for Multi-VRF (VRF-Lite) on a 2811 router. Feature Navigator is your friend. According to that, it's in IP Base for 12.4(19). ___ cisco-nsp mailing list cisco-nsp@puck

Re: [c-nsp] ASA SSL VPN License

2008-05-23 Thread Howard Jones
aaron wrote: > Hey Guys, > > > > Is there a Cisco feature such as the feature navigator for the Cisco ASA > series appliances? > show version will tell you what you already have. A related question though: how do you find out which licenses add what? I recently wanted an unrestricted DMZ (bu

Re: [c-nsp] PIX questions

2008-05-13 Thread Howard Jones
Ziv Leyes wrote: > You must understand that the NAT is being performed on a "from-->to" basis, > that is why the command is "static (inside,outside)" so if the NAT is between > inside and outside you can't hit it when coming from the dmz, for this to be > achieved you should use a "static (insid

[c-nsp] Redundant Power Supplies (was: Cisco 7206VXR)

2008-04-25 Thread Howard Jones
Gert Doering wrote: > Those are a bit funny indeed - 3660s actually support hot-swap, but > *only* "remove defective module, replace with same type", not "insert > something that wasn't present at boot time". > This has reminded me of something that's bothered me the few times I've run into it.

Re: [c-nsp] ETH spikes

2008-04-21 Thread Howard Jones
Dracul wrote: > Hi All, > > Anybody experienced sudden big spikes with their eth interfaces in their > routers? WAN bandwidth is just 2MB but suddenly the MRTG graphs > registered a 100MB bandwidth on the eth0 going to the Proxy server. although > on the proxy server eth1 (going to customer network

Re: [c-nsp] vs scanning tool for uknown network units

2008-04-18 Thread Howard Jones
Matlock, Kenneth L wrote: > Yeah, if you know a bit of perl, you can whip something up that goes > through the IP space, does an snmp get on system.sysName.0, and if it > responds write that data out to a .csv > > That would get you the hostname to IP mappings. > If you know about the switches

[c-nsp] Cisco ISP Essentials?

2008-04-17 Thread Howard Jones
Hi, I've just been looking through Cisco ISP Essentials, which seems like an interesting, if dated (2001), read. There doesn't seem to be a second edition, so can anyone recommend a more modern equivalent, perhaps that includes MPLS? (In case you haven't seen it, it's a collection of best prac

[c-nsp] 'small' MPLS?

2008-03-19 Thread Howard Jones
(Troy Beisigl question prompted me to ask mine about smaller MPLS) We have an existing network of (mostly) 7206VXRs which I'd like to run MPLS over if I can. Thing is, for historical reasons, there's isn't really a core as such - each router is an edge to something. From my reading, almost ever

[c-nsp] Can "power-on" mean anything other than power on?

2008-03-11 Thread Howard Jones
Hi, Please could I get the confirmation of your collective experience? We have a group of three older Catalysts at a customer site that apparently reboot all together (within a second) and for no reason every 10-15 days or so. On each switch, for show version it shows: System returned to R

Re: [c-nsp] SNMP traffic monitoring / alerting

2008-02-14 Thread Howard Jones
Aaron R wrote: > Hey Guys, > > > > Has anyone come across a good app (open source or not) that will monitor the > amount of traffic flowing in/out a particular interface and alert you once a > certain threshold has been reached? Alerting via email would be preferable. > I don't really have the ti

Re: [c-nsp] OT: SNMP trap receiver/alerter.

2008-02-13 Thread Howard Jones
Stephen Fulton wrote: > Hi all, > > Can anyone recommend a decent open-source SNMP trap receiver that can > also e-mail/sms/whatever alerts based on filtered criteria? I don't > need an NMS, just something to receive the traps (or uses net-snmpd to > do so), process them and then send an alert

Re: [c-nsp] Router uptime, can you beat it?

2008-01-30 Thread Howard Jones
Jeff Wolfe wrote: > The real question is, can you produce a working version of SiteManager > to manage it? Or is it new enough to have a working BCC? > > ;) That's a trick question. There isn't a working version of Site Manager :-) It does have usable BCC though. It has one last customer on it wh

Re: [c-nsp] Router uptime, can you beat it?

2008-01-29 Thread Howard Jones
Ben Steele wrote: > Anyone got anything currently running longer? > > router uptime is 4 years, 10 weeks, 5 days, 9 hours, 13 minutes > System returned to ROM by power-on > System restarted at 14:27:52 ACDT Fri Nov 14 2003 > System image file is "flash:c2600-js-mz.122-17a.bin" > > cisco 2620 (MPC86

Re: [c-nsp] MAC address from cisco IOS switches

2008-01-28 Thread Howard Jones
Prabhu Gurumurthy wrote: > All, > > We have close to 15 2960 switches connected to twin 3750's with 15+ VLANs in > the > domain. 3750's are stacked and it is the VTP server with 2960's being client. > There are no switches acting in transparent mode. > > I want to get the MAC addresses from 3750's

Re: [c-nsp] Looking for visually impressive server racks

2008-01-10 Thread Howard Jones
Skeeve Stevens wrote: > Hey all, > Got a customer who is building a server room and it will have glass walls. > They are into things like animation and so on, and want to have a VERY > impressive looking comms room on display. > > What I am looking for is some rack brand or company that make amazi