[c-nsp] MPLS traffic not taking LSP tunnels

2016-10-03 Thread Joe Freeman
Greetings all- I have some 7301's setup with MP-BGP, ISIS/te, and LDP. All of that works. I'm trying to setup a L3VPN across this network (this is all lab). All my routes show up on each side of the L3VPN. My tunnels come up between endpoints. The problem I'm having is that traffic from the CE r

[c-nsp] Arp cache timeout on 6513 running 15.1

2013-10-30 Thread Joe Freeman
Can anyone tell me how to set the arp cache timeout value in ios15.1 on a 6513. It looks the command we used to use has been deprecated out in 15.1. Thanks- Joe ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinf

Re: [c-nsp] Site to site vpn Cisco Router to Fortinet

2012-12-12 Thread Joe Freeman
ype=kc&externalId=FD32864&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=40856996&stateId=0%200%2040858146 > > > > Regards > > > > Alberto > > > > -Original Message- > > From: cisco-nsp-boun...@puck.nether.net [mailto: > cis

[c-nsp] Site to site vpn Cisco Router to Fortinet

2012-12-11 Thread Joe Freeman
Greetings- I am trying to get an ipsec tunnel up between a cisco router and a Fortinet 200B for a customer. I've got IKE phase 1 completing, but phase 2 won't complete because the router's proposal isn't matching the firewall's- 2012-12-11 09:29:50 ike 1:SJCGW:324472:144706408: specified selecto

Re: [c-nsp] Current SP Cloud Security models

2012-03-13 Thread Joe Freeman
That's exactly my argument at the moment, but I thought I'd reach out to minds brighter than mine to see if I've missed something somewhere. Sent from my iPhone On Mar 13, 2012, at 9:12 AM, Nick Hilliard wrote: > On 13/03/2012 12:59, Joe Freeman wrote: >> I'm wor

[c-nsp] Current SP Cloud Security models

2012-03-13 Thread Joe Freeman
Does anyone have any info (or even links) they'd care to share on the current state of cloud security models with regards to the managed service provider perspective of a public cloud offering? I'm working on a design for a public cloud offering and the security guys are screaming that I need to i

[c-nsp] 3750 with IP-BASE, QoS

2011-12-08 Thread Joe Freeman
I've inherited a site that's a mix of a 3750 stack and Force 10 gear. the 3750 stack is where the layer 3 is happening between vlans in that site. I have a need to implement QoS for some voice traffic. Since the 3750 doesn't do QoS the way the routers do, I'm sort of at a standstill.. ip access-l

Re: [c-nsp] Thousands of tcp sessions stuck in TIMEWAIT

2011-05-15 Thread Joe Freeman
login max-failure? (guessing somewhat blindly >> without visibility into what the active tcb's were) >> >> [sent from my mobile] >> >> On May 11, 2011, at 7:47 AM, Joe Freeman wrote: >> >> > I have a customer with an 1841 doing webvpn, running &g

[c-nsp] Thousands of tcp sessions stuck in TIMEWAIT

2011-05-11 Thread Joe Freeman
I have a customer with an 1841 doing webvpn, running advsecurity-12.4-24.T5. They have been randomly loosing the ability to connect to resources through this unit. A show tcp brief reveals that there are thousands of sockets stuck in TIMEWAIT. In fact it took almost six minutes for the show tcp br

[c-nsp] Bridging ethernet to MLPPP

2010-12-27 Thread Joe Freeman
I've got a situation where a customer is having to relocate from one facility to another a few miles away. This customer has a 100Mb metro ethernet connection at the old location, and can't get it moved for several months. To help them out, we're trying to setup a pair of 3620's that we had with

[c-nsp] MLPPP on dsl

2009-08-31 Thread Joe Freeman
What's the best IOS to use on a 7206vxr NPE-G1 with 1G Ram, to terminate PPPoE on LT2tpv3 tunnels into MLPPP bundles? We're currently running 12.2(16)B on this box, and terminating sessions just fine. MLPPP performance on DSL/PPPoE sessions is horrible, however. I suspect it's related to a log mes

Re: [c-nsp] Aggregation for multiple ISDN customers

2008-06-09 Thread Joe Freeman
It depends on how many customers you have that you'll use ISDN for. Since you stated a T1 is too expensive for the customer loop, I'm going to assume you're refering to a BRI at the customer premise. Since ISDN is a switched solution, the customer's equipment will need to be configured to 'call' y

Re: [c-nsp] Solution to %SPANTREE-2-RECV_PVID_ERR, except disable spanning tree?

2008-06-04 Thread Joe Freeman
The provider doesn't have to support it. In fact, from what the OP said, it sounds like the provider has enabled control protocol tunneling across his metro-e cloud. It also sounds like they are using a solution that requires some form of cross-connect config in the cloud and have cross connected o

Re: [c-nsp] Recommended OOB & power management gear?

2008-06-02 Thread Joe Freeman
Avocent (formerly the Cyclades product line) has the Alterpath series of remote console servers that should work for you. They also have a power management add on that plugs into one of the serial ports on the term server and allows you to do remote reboots from the web gui on the term server. Joe

Re: [c-nsp] Bridging Ethernet VLANs over T1

2008-05-30 Thread Joe Freeman
If it were me, I'd look at using frame encaps on the T1, then use a seperate dlci for each vlan. On Fri, May 30, 2008 at 12:45 PM, Fred Reimer <[EMAIL PROTECTED]> wrote: > By using the same bridge group number for both VLANs would you not be > merging the two VLANs into one bridge group? That's

Re: [c-nsp] Need help with L2TPv3

2008-05-22 Thread Joe Freeman
Can you ping the loopbacks from the opposite router? There's nothing in either config that indicates how traffic flows from one router to the other. You said you're using an ethernet x-over to connect them, but surely it's not on the ports on which you've setup xconn statements. Each router must

Re: [c-nsp] Any to terminate a DSL loop on a 72xx or 75xx?

2008-05-12 Thread Joe Freeman
Most of the ones I've worked with in the last couple of years will. This includes Westell and Zyxel (try the 650 or 660 units). Joe On Mon, May 12, 2008 at 12:28 PM, Sridhar Ayengar <[EMAIL PROTECTED]> wrote: > David Coulson wrote: > > You have to use an fast ethernet port with a external dsl mo

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Joe Freeman
If OSPF is flapping, you should see it on the neighbor attached to that interface as well, so you might look there for issues. Joe On 3/12/08, Jason Berenson <[EMAIL PROTECTED]> wrote: > > Rodney, > > The interface is clean. No errors/drops at all. I think I'll have to > snoop that segment like

Re: [c-nsp] 2811 performance on an Ethernet over SONET connection??

2008-02-16 Thread Joe Freeman
low control, which I would think really help here. If I use traffic shaping instead of policing, can I simply set the CIR, and not set Be? Joe On 2/16/08, Brad Henshaw <[EMAIL PROTECTED]> wrote: > > Joe Freeman wrote: > > > I tried both straight rate-limiting and traffic

Re: [c-nsp] 2811 performance on an Ethernet over SONET connection??

2008-02-15 Thread Joe Freeman
between the access rate (100Mbps) and > the > CIR (15Mbps). This could explain why degraded throughput is experienced > only > upstream. I can't really imagine it could be a CPU-related issue, but all > in > all it's worth checking it. > > Cheers, > > Paolo >

Re: [c-nsp] CAB-OCTAL-ASYNC alternative

2008-02-15 Thread Joe Freeman
Try a Cyclades ACS box from Avocent. They come in up to 48 port variants with ac or dc single or dual power supplies. On 2/15/08, Eric Helm <[EMAIL PROTECTED]> wrote: > > Hello, > > Can anyone recommend a good solution for a 2610XM + NM-32A terminal > server that will be connecting mostly to equ

[c-nsp] 2811 performance on an Ethernet over SONET connection??

2008-02-15 Thread Joe Freeman
Folks- I have a situation in which a customer has a 2811 router connected to an Ethernet over SONET pipe from me onto which he subscribes 15M of Internet. The SONET portion of the pipe currently has 11 VT1.5's cross-connected. This customer is seeing asymmetric performance on the link in that his

Re: [c-nsp] How to measuse the throughput on Internet Links

2008-01-10 Thread Joe Freeman
Having spent a fair amount of time on this type of thing recently, let me offer a few thoughts- With any type of speed testing, you must define the testing domain before you start, or the numbers won't mean a thing. The reason for this is that delay between the endpoints affects max throughput, es

Re: [c-nsp] Advice on Terminating T1s

2007-09-20 Thread Joe Freeman
I'm using as many as 8 ch DS3's today in the 7206 platform, with an NPE-G1. It's usually a mix of PA-MC-T3 and PA-MC-2T3 cards depending on availability. I've been trying to find out if there's a channelized OC (3/12??) card that can be used for this to increase capacity. So far, all I've been abl

Re: [c-nsp] MLPPP/T1 problems

2007-09-19 Thread Joe Freeman
Generally any circuit that passes through the telco will be muxed or DACS'd somewhere. This is generally where the telco applies timing they derive from either a CDMA or - more likely these days - a gps clock. I always start with line timing on my circuits, and roll one end back to internal clock

[c-nsp] Frame-relay to Ethernet Internetworking

2007-09-06 Thread Joe Freeman
Does anyone have a sample config or info as to how to internetwork frame-relay connected remote sites to an ethernet connected host? I'd like to see a point-to-point configuration where the dlci is mapped to a specific dot1q tag, and if possible a point-to-multipoint configuration where all the fra

Re: [c-nsp] Multiple T1 IMA / Channelized DS3

2007-08-28 Thread Joe Freeman
t; from the IMA and send to a cross connect and then to the PA-A3-8T1IMA > cardCan anyone shed some light here? Any help is appreciated! > > Otis > > Joe Freeman wrote: > > PA-MC-T3 cards won't do IMA. > > > > That said... Does anyone have any suggestion

Re: [c-nsp] Multiple T1 IMA / Channelized DS3

2007-08-28 Thread Joe Freeman
PA-MC-T3 cards won't do IMA. That said... Does anyone have any suggestions for scaling NxDS0 circuits muxed to ChDS3 in a 7206 chassis beyond 12 DS3's? Joe On 8/28/07, OCOSA ListAcct <[EMAIL PROTECTED]> wrote: > > Has anyone took a channelized DS3 circuit using a (PA-MC-T3) and place a > T1 IMA

Re: [c-nsp] Small 1U-2U DC powered fixed configuration switch

2007-08-21 Thread Joe Freeman
I believe the 2950C-DC is still orderable. Joe On 8/21/07, William Jackson <[EMAIL PROTECTED]> wrote: > > I am having a hard time finding a low end cisco DC powered switch, 24 > port 10/100. > > > > I can see that the Cisco ME 2400 Series has this power option. But can > it be used a standard la

Re: [c-nsp] Possible Stupid Questions Alert - Combining VLAN's

2007-06-25 Thread Joe Freeman
You're looking for 802.1q tag rewrite. That said, it appears Cisco only does it in routers or on EoMPLS. http://www.cisco.com/en/US/products/sw/iosswrel/ps1829/products_feature_guide09186a008016102a.html#wp1279134 I checked the feature navigator as well, and as a feature, it's only in a couple of

Re: [c-nsp] Serial-server with modem.

2007-06-04 Thread Joe Freeman
I use the Cyclades stuff myself. I like it so much I wrote a review about it last year. Joe On 6/4/07, MKS <[EMAIL PROTECTED]> wrote: > > Hello List > > I'm looking for a device to do out-of-band management via PSTN/ISDN to the > cisco boxes in our pops. > > I'm looking for e.g. a serial-server w

Re: [c-nsp] APC Cabinets with SIde Air Distribution

2007-06-01 Thread Joe Freeman
Down here in Louisiana, I've had great success with the Might Mo racks from Ortronics. I use the one with the 16.25" deep channel on each side. What's really neat about these is that the rack mount shelves that ship with the 6500's exactly fit these racks, so that you can screw down all four corner

[c-nsp] Troubleshooting dropped packets in a PPPoE session via L2TP tunnel

2007-05-31 Thread Joe Freeman
Greetings all- I have a customer for whom we've built a Remote Access DSL network. We recieve the PPPoE sessions from Bell, and using the authenticate before forward feature, have radius setup to return attributes that cause our LNS to forward that customer's session to them via another L2TP tunne

Re: [c-nsp] 7200 LNS problems from Redback? or Radius?

2007-05-30 Thread Joe Freeman
Make sure your radius host(s) is(are) defined with a block similiar to this (and are reachable)- radius-server host xx.xx.xx.xx auth-port 1645 acct-port 1646 non-standard radius-server host xx.xx.xx.xx auth-port 1645 acct-port 1646 non-standard radius-server deadtime 60 radius-server key 7 someen

Re: [c-nsp] MSFC2 can't see Sup2 sup-slot0:

2007-04-25 Thread Joe Freeman
How big is your pcmcia flash card? As I recall, anything over 40M is considered a flash-disk, which is why it shows up as disk0: instead of slot0: Joe On 4/25/07, Rick Kunkel <[EMAIL PROTECTED]> wrote: > > Have people run into this before? Either I'm doing something really > stoopid, or my Googl