Re: [c-nsp] Firepower Threat Defense Geolocation DB

2024-03-27 Thread Justin Krejci via cisco-nsp
Also it doesn't hurt to otherwise advertise your 8805 geofeed as per: https://datatracker.ietf.org/doc/html/rfc9092 -Original Message- From: Hank Nussbacher via cisco-nsp mailto:hank%20nussbacher%20via%20cisco-nsp%20%3ccisco-...@puck.nether.net%3e>> Reply-To: Hank Nussbacher mailto:hank

Re: [c-nsp] two routing engines

2018-03-08 Thread Justin M. Streiner
On Thu, 8 Mar 2018, harbor235 wrote: In a HA configuration (dual rail) do I really need two route processors per chassis? What does the extra cost really get me? ISSU that does not always work? Less disruptive failover. Depending on the platform, connection state might be shared with the ba

Re: [c-nsp] Nexus 7k Upgrade Path

2018-02-23 Thread Justin M. Streiner
- load the system a kickstart files and reload the box? Ideally power cyclethere were fw bugs that needed hard reboot to fix... -pavel Dňa 23. 2. 2018 7:34 používateľ "Justin M. Streiner" < strei...@cluebyfour.org> napísal: On Fri, 23 Feb 2018, Bradley Ordner wrote: We hav

Re: [c-nsp] Nexus 7k Upgrade Path

2018-02-22 Thread Justin M. Streiner
On Fri, 23 Feb 2018, Bradley Ordner wrote: We have a Nexus 7K with two SUP2Es. We need to get to software version 8.1(2). It says that you can't double hop to a software version without an outage. Although I have found the following - ISSU from 7.2(0)D1(1) to 7.3(1)D1(1) then to 8.1(2). We cur

Re: [c-nsp] Multihomed OTV on CSR Lab - Mac Address Issue

2018-01-29 Thread Justin M. Streiner
On Mon, 29 Jan 2018, Aaron Gould wrote: I'm just trying to learn about OTV as I haven't heard much about it... is OTV an IETF standard ? OTV is a Cisco proprietary protocol with some important design considerations if you want to go in this direction. This includes things such as allocatin

Re: [c-nsp] Nexus 7700

2017-10-12 Thread Justin M. Streiner
On Wed, 11 Oct 2017, Scott Voll wrote: Anyone have a Nexus 7700? Can you (not do you choose to) install it in a standard 34" deep server cabinet? Yes, but: 1. you might need a pretty beefy 4-post shelf to sit it on if the mounting rail kit won't work in your cabinet 2. if your cabinet has d

Re: [c-nsp] nfSen / nfDump

2017-08-28 Thread Justin M. Streiner
Wouldn't the syntax be "-s 1000", rather than "-s -1000"? jms On Mon, 28 Aug 2017, Nick Cutting wrote: So as usual - my netflow routers are coming up with the correct size data in nfsen, but sFlow is about 2.5 times as much traffic. Does anyone have a cisco sflow config that works with nfse

Re: [c-nsp] Mixing power supply wattage in 6513

2017-05-05 Thread Justin M. Streiner
On Fri, 5 May 2017, Drew Weaver wrote: We had a PSU failure in a 6513 and we want to replace the failed one (which is a: WS-CAC-4000W) but currently what we have in stock is a whole lot of these: WS-CAC-6000W I know that it should be possible to run a switch with two different sized power su

Re: [c-nsp] Mixing power supply wattage in 6513

2017-05-05 Thread Justin M. Streiner
If you have enough linecards to draw more than whatever the actual total available power is from a 4000 watt power supply, you will not be able to run in redundant mode. The switch will likely complain loudly about this. I know it doesn't help you right now, but 6000 watt power supplies are av

Re: [c-nsp] Cisco 6509 / WS-CAC-6000W OUTPUT FAIL

2017-03-15 Thread Justin M. Streiner
On Tue, 14 Mar 2017, Laurent Dumont wrote: Could it be the "A @42V" value? What kind of circuits do you have for each PSU? The 6000W can either take two 120V-20A or a single 240V-20A if you need the full 6000W. I believe the 6500 uses power internally at 42V, so it makes sense that the pow

Re: [c-nsp] Ode to the old days

2016-12-08 Thread Justin M. Streiner
On Thu, 8 Dec 2016, Howard Jones wrote: The good old days of absolutely shocking software testing... e.g. the Ascend Max software build that never released IPs from the assigned client IP pool - 200 user connections later, the helpdesk goes crazy. Or the awesome Nortel Baystack bugs where pres

Re: [c-nsp] Ode to the old days

2016-12-08 Thread Justin M. Streiner
...and we had to route packets uphill through 5 feet of snow - both ways! :) jms ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] [c-nsp ]Router with legacy interfaces

2016-11-22 Thread Justin M. Streiner
On Tue, 22 Nov 2016, ?~\?~C?~@???~B ?~Z?? wrote: I need router with many types of legacy intergaces including STM-1, Channelized E1, Async (optionaly). Also I need switch module with 16 - 24 GE-T port and up to 8 SFP ports. Any suggestions? As others have mentioned, a 7206VXR with an

Re: [c-nsp] Cisco distribute-list configs

2016-10-28 Thread Justin Krejci
ht around zero experience implementing distribute-lists, I find this discussion informative. Thanks for the input everyone! From: Mark Tinka [mark.ti...@seacom.mu] Sent: Friday, October 28, 2016 2:17 AM To: Justin Krejci; Nick Cutting; Jared Mauch Cc: cisco-nsp@pu

[c-nsp] Cisco distribute-list configs

2016-10-27 Thread Justin Krejci
etworkworld.com/article/3128104/lan-wan/level-3-blames-huge-network-outage-on-unspecified-configuration-error.html Just curious and playing devils advocate :) From: Mark Tinka [mark.ti...@seacom.mu] Sent: Thursday, October 27, 2016 4:13 PM To: Justin Krejci; Nick Cut

Re: [c-nsp] Router memory problem

2016-10-27 Thread Justin Krejci
: Nick Cutting [ncutt...@edgetg.com] Sent: Thursday, October 27, 2016 1:54 PM To: Jared Mauch; Justin Krejci Cc: cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Router memory problem We had a case where we used distribute lists matching prefix lists, but some engineers were forgetting the keyword

Re: [c-nsp] Router memory problem

2016-10-27 Thread Justin Krejci
What is wrong with distribute-lists? From: cisco-nsp [cisco-nsp-boun...@puck.nether.net] on behalf of Mark Tinka [mark.ti...@seacom.mu] Sent: Thursday, October 27, 2016 12:42 AM To: Joseph Mays; Chris Boyd; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Ro

Re: [c-nsp] 7206VXR PA Install Error

2016-10-01 Thread Justin M. Streiner
Just a guess, but maybe the new PA is a newer revision that either the code or the processor blade doesn't recognize? Do you have another 7200VXR that you can try the new PA in to see if the PA itself is good? jms --- Begin Message --- can any one help  please Tried moving in different slots e

Re: [c-nsp] ASA for IPv6

2016-08-21 Thread Justin M. Streiner
On Sat, 20 Aug 2016, Michael Lee wrote: Currently I have ASA 5580 with IPv4 NAT setup (public IP outside and RFC 1918 inside), I am considering to run IPv6 with Public IPv6 outside and Public IPv6 inside (routing mode) Just wondering there is anything I would need to consider except CPU, memory

Re: [c-nsp] DHCP Snooping and tracking down rogue dhcp servers

2016-06-09 Thread Justin Krejci
I might guess it is the 3750's own DHCP server packet that is being looped back to itself, perhaps by one of the downstream customer connections, and thus identifies a "rogue" dhcp server that is actually itself. If it is actually a rogue DHCP server, is that a problem? Seems like that log mess

Re: [c-nsp] BGP default vs BGP full

2016-05-21 Thread Justin M. Streiner
On Sat, 21 May 2016, Mark Tinka wrote: The global IPv4 routing table is roughly 610,000 routes, and the global IPv6 routing table is about 30,000 routes. While I don't doubt we shall reach there, we are not yet seeing nearly that many routes, particularly for IPv4. 586,677 IPv4 + 28,881 route

Re: [c-nsp] BGP default vs BGP full

2016-05-21 Thread Justin M. Streiner
On Fri, 20 May 2016, Satish Patel wrote: Just wonder what would be the advantage and disadvantage of running BGP full vs default route. We have single ISP connection and ISP decided to just run default route over BGP instead full. If you have just a single connection, BGP doesn't gain you any

Re: [c-nsp] NCS-5001 - sweet...got one in the lab

2016-02-01 Thread Justin M. Streiner
On Mon, 1 Feb 2016, Aaron wrote: wow, check out the interface names at the bottom of the list, yeah the names that start with "H" !! Kind of surprising. Thinking of the Nexus world, all Ethernet interfaces are named "Ethernet." regardless of speed. It seems like other vendors are movin

Re: [c-nsp] cat 6800 performance mode

2015-12-31 Thread Justin Ream
As far as internal Cisco politics go: I've heard the situation has changed with the new CEO. Nexus 7000/7700 sits in the same BU as Cat6k. The Insieme/Nexus 9k guys operate in their own separate unit. -justin On Wed, Dec 16, 2015 at 11:18 AM Gert Doering wrote: > Hi, > > On Wed

Re: [c-nsp] Cisco Nexus as MetroE switch?

2015-10-17 Thread Justin M. Streiner
On Sat, 17 Oct 2015, Mark Walters wrote: The 5548/5596 fits that physical requirement, but those have a limited feature set with no actual E-line features. In small PoPs we¹ve used those as simple 1/10G layer2 aggregation switches fronted by PEs with E-line features, like ME3600s. One big cave

Re: [c-nsp] Cisco Nexus as MetroE switch?

2015-10-16 Thread Justin M. Streiner
On Fri, 16 Oct 2015, Youssef Bengelloun-Zahr wrote: From what I hear, many big Telcos are using them for heavy lifting, either as pur Ps and/or PEs. DE-CIX seems quite happy with it. Never had the chance myself to play with it, but it seems pretty straight forward from the user guides I was abl

Re: [c-nsp] unable to log in to web page and trying to share something !!!

2015-10-06 Thread Justin M. Streiner
This could be a hardware issue, if re-seating the card didn't clear the issue. If you plug a term like "CONST_DIAG-SP-4-ERROR_COUNTER_WARNING" into a Google search, you will usually get pretty good results. One of the first results I found was this: http://www.cisco.com/c/en/us/support/docs

Re: [c-nsp] SFP/Transceiver Issue

2015-09-08 Thread Justin M. Streiner
On Tue, 8 Sep 2015, Mohammad Khalil wrote: I am trying to connect a link between my 6509 box and N5K box The link was functioning well , but now it is never up I have tried to change the SFP with no luck What is the distance between the two devices? Can you confirm the type of optics (they l

Re: [c-nsp] Multihoming

2015-08-31 Thread Justin M. Streiner
On Mon, 31 Aug 2015, Jason Berenson wrote: Was interested in getting any pointers anyone might have about multihoming. I've got an ASN and am working on a /24 from ARIN now. I was thinking about a pair of Cisco 3560's one for each provider and I was going to take default routes from each, one

Re: [c-nsp] Utility to identify orphaned ACLs and such?

2015-08-16 Thread Justin M. Streiner
On Thu, 13 Aug 2015, Jared Mauch wrote: Cisco really needs to implement a 'show config dead' or similar type command that displays all these orphaned policies. I have a hard enough time with cisco parsing their own configs though I can't push on this now, perhaps someone else ca

Re: [c-nsp] Port Channel Speed

2015-05-11 Thread Justin M. Streiner
On Mon, 11 May 2015, sathish kumar Ippani wrote: Here when we checked the sh int portchannel 1. it shows following output. port-channel1 is up [...] Members in this channel: Eth1/1, Eth1/2 1 interface resets 30 seconds input rate 611861136 bits/sec, 64564 packets/sec 30 seconds output rat

Re: [c-nsp] Non Cisco SFP

2015-02-02 Thread Justin M. Streiner
On Mon, 2 Feb 2015, Warren Jackson wrote: Sure, no problem! 2) Cost. If you buy through a Cisco gold provider then you are going to get a good price on the optics, enough to where the difference pays off in support, as these can been wrapped in through your smartnet converage. If you have op

Re: [c-nsp] Cisco 10G gear

2015-01-17 Thread Justin M. Streiner
On Sat, 17 Jan 2015, Chris Knipe wrote: I have a 6500 that I want to equip with 10G. I am as confused as I can be in terms of what is / is not supported. There is also the question of what is or soon will be end-of-life. I don't know what kind of budget you have to work with, but the Sup720

Re: [c-nsp] Cisco 10G gear

2015-01-17 Thread Justin M. Streiner
On Sat, 17 Jan 2015, Chris Knipe wrote: Hi All, I have a 6500 that I want to equip with 10G. I am as confused as I can be in terms of what is / is not supported. I am looking at the WS-X6704-10G cards - Also, keep in mind that the 6704 blades use Xenpak form-factor optics, which are pretty

Re: [c-nsp] Fractional DS3, dsu bandwidth statement and circuit interruption

2014-12-08 Thread Justin M. Streiner
On Mon, 8 Dec 2014, Papi wrote: dsu bandwidth <...> statement at my end? Shouldn't that be always the entire DS3 (44210), with the provider "shaping" it accordingly, behind our CE-PE connection (this goes into an MPLS cloud)? Or is the expectation that both the provider and I are to set the dsu

Re: [c-nsp] Fractional DS3, dsu bandwidth statement and circuit interruption

2014-12-08 Thread Justin M. Streiner
On Mon, 8 Dec 2014, papaia wrote: Need to change the bandwidth statement in the DSU line item config (up-ing the available bandwidth for a fractional DS3), for a router placed remotely from my office. Lacking an off-band access to this router, I am wondering if that change would trigger a circui

Re: [c-nsp] Cisco 3750-X Stack

2014-12-03 Thread Justin M. Streiner
If you're not getting any log messages that will shed some light on the subject, you can try: 1. Enabling debugging for the specific feature/technology that's not working and then try your tests again. 2. Fire up wireshark on a machine and move it from one port to another on your 3750 stack an

Re: [c-nsp] End-of-Life

2014-11-21 Thread Justin M. Streiner
Go to Cisco's website and enter "[PART NUMBER] end of sale" in the search box. That always gets me pretty good results. jms On Thu, 20 Nov 2014, madu...@gmail.com wrote: Can you please point out the End-of-Sale and End-of-Life Products for the following items: N7K-C7010 B2S2-R N7K-C7009-B2S

Re: [c-nsp] ipv6 RA's for learning default gateway for end systems (hosts)

2014-11-06 Thread Justin M. Streiner
On Thu, 6 Nov 2014, Aaron wrote: RA's (router advertisements, aka, icmpv6 type 134).. Is the receipt of RA's the only dynamic/automatic way for IPv6 clients to learn about their default gateway? Does DHCPv6 allow for default router option? What are other ways to get default router into a ipv6

Re: [c-nsp] Out of Memory

2014-10-23 Thread Justin M. Streiner
On Thu, 23 Oct 2014, M K wrote: Hi allI have Cisco VXR 7204 NPE-G2 with 12.4 versionI have NAT statements and port forwarding configuration on the device , now when I try to add more statements i got the message out of memory , I reloaded the router and the same issue Any ideas ? What does

Re: [c-nsp] BGP route filtering question about upstreams

2014-10-07 Thread Justin M. Streiner
On Tue, 7 Oct 2014, Andrew (Andy) Ashley wrote: I¹m hoping someone can provide a bit of insight here with a BGP route filtering scenario: AS100 does not want AS300 to learn its routes from AS200, since that can cause redundancy issues (2 supposedly diverse upstreams effectively become 1). It'

Re: [c-nsp] (no subject)

2014-10-02 Thread Justin M. Streiner
On Thu, 2 Oct 2014, Paul Wozney wrote: Okay so I've got two BGP routers here, accepting partial routes - one carrier to each router. Each carrier advertises a default route. I use an as-path filter to limit learned routes to those of the carrier +1 ASn: ip as-path access-list 11 permit ^_[0

Re: [c-nsp] cisco password question

2014-10-02 Thread Justin M. Streiner
On Tue, 30 Sep 2014, Deric Kwok wrote: As I haven't configured console password, I can use console to conect AUX and I can reboot How can I get in the router? Sounds like you need to do a password recovery. Google "cisco [your model here] passwod recovery" jms ___

Re: [c-nsp] OT: Enterprise (Not ISP) Maintenance Windows

2014-09-26 Thread Justin M. Streiner
On Fri, 26 Sep 2014, Scott Voll wrote: For those of you working in an enterprise, company, agency, etc. Do you have a standard (network) maintenance windows? If so, when? How often? Can you schedule anything in it, or if it will cause an outage does it need to go through 3+ layers of meeting

Re: [c-nsp] Cisco Security Advisory: Cisco IOS Software RSVP Vulnerability

2014-09-25 Thread Justin M. Streiner
IOS Software Checker is a nice tool, do keep it. But for the "helicopter view" the comprehensive list is a really great help. And it's no problem that the list is a snapshot at publication time. The fast response to a serious vulnerability is the hours or days immediately after the advisory has be

Re: [c-nsp] Cisco Security Advisory: Cisco IOS Software RSVP Vulnerability

2014-09-25 Thread Justin M. Streiner
On Thu, 25 Sep 2014, Lukas Tribus wrote: IOS Software Checker is a nice tool, do keep it. But for the "helicopter view" the comprehensive list is a really great help. And it's no problem that the list is a snapshot at publication time. The fast response to a serious vulnerability is the hours or

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

2014-09-11 Thread Justin M. Streiner
On Thu, 11 Sep 2014, CiscoNSP List wrote: Just trying to conserve IPv4 addresses - Has anyone run into any issues with using /31's? (OSPF/BGPanything else?) We use /31s here in many places in a mixed Cisco/Juniper environment, and we have not had any problems with them. jms

Re: [c-nsp] Upgrade NPE-400 to NPE-G1

2014-09-03 Thread Justin M. Streiner
On Wed, 3 Sep 2014, Joseph Mays wrote: I have a cisco 7206 VXR with NPE-400 running c7200-ik9su2-mz.123-23.bin. I have an NPE-G1 card now that I would like to put in the router instead. Can I just swap the NPE-400 for the G1 card and expect it to work? I’m attaching the show ver on the NPE-400

Re: [c-nsp] Old Cisco VXR

2014-08-27 Thread Justin M. Streiner
On Wed, 27 Aug 2014, Mohammad Khalil wrote: I have old Cisco VXR I need to access with console , but it's not RJ45 console , it's like the computer ports is there a specific cable to use? What NPE does the VXR have? If it has an NPE-G1 or G2, there should be an RJ45 console port on the back

Re: [c-nsp] Old Cisco VXR

2014-08-27 Thread Justin M. Streiner
On Wed, 27 Aug 2014, Mohammad Khalil wrote: I have old Cisco VXR I need to access with console , but it's not RJ45 console , it's like the computer ports is there a specific cable to use? If you're connecting a PC to the console port, it sounds like you need a DB25 DCE to RJ45 connector for

Re: [c-nsp] ASR1001 RAM

2014-08-20 Thread Justin Ream
show cef memory | i "CEF: fib" will give you a better idea of where your max is. -justin On Wed, Aug 13, 2014 at 3:02 PM, Gabriel wrote: > On Wed, Aug 13, 2014 at 3:41 PM, Antonio Soares > wrote: > > These outputs are always relevant. Here you should see what i

Re: [c-nsp] Prioritize PING traffic to control plane

2014-08-07 Thread Justin M. Streiner
On Thu, 7 Aug 2014, Dumitru Ciobarcianu wrote: I know someone who at some point filtered icmp entirely from the customer's networks because of this and convinced the troublemakers that "they are more secure that way". The customer was happy because he was getting a consistent graph... That bec

Re: [c-nsp] icmpv6 through ASA

2014-07-25 Thread Justin M. Streiner
On Fri, 25 Jul 2014, Scott Voll wrote: How do you allow ICMPv6 into your network with a cisco ASA? Mane sure running a fairly recent version of ASA code / ASDM. There is be a protocol type for icmp6. Also, keep in mind that some ICMPv6 needs to be able to get in from anywhere (for path MTU

Re: [c-nsp] 6500 redundant supervisors and non-NFS aware RIP

2014-07-14 Thread Justin M. Streiner
On Mon, 14 Jul 2014, Jeffrey G. Fitzwater wrote: Q1 Since BGP is NFS aware but only after the second SUP is installed, will BGP peering stop and restart? We see that two of our ISP are currently sending GRACEFUL RESTART messages but our end is not yet because no secondary sup. We have been in

Re: [c-nsp] 7206 Gigabit Ethernet Card - Strange behavior

2014-07-08 Thread Justin M. Streiner
You might need to disable keepalive on that interface. It's been a long time, but I remember running into some funky behavior with the PA-1GEs. Also, keep in mind that on that card, particularly if that's a non-VXR chassis, you probably won't get anything close to line-rate through that inter

Re: [c-nsp] How to calculate transceiver power of SFP on 7200 series?

2014-07-08 Thread Justin M. Streiner
On Tue, 8 Jul 2014, Rob Seastrom wrote: "Justin M. Streiner" writes: On Tue, 8 Jul 2014, PlaWanSai RMUTT CPE IX wrote: TGN#sho int g0/1 tra TX power 300 nW / 5 dBm (+/- 3dBm) If that "/5 dBm" means the result from above should be divided b

Re: [c-nsp] How to calculate transceiver power of SFP on 7200 series?

2014-07-07 Thread Justin M. Streiner
On Tue, 8 Jul 2014, PlaWanSai RMUTT CPE IX wrote: TGN#sho int g0/1 tra TX power 300 nW / 5 dBm (+/- 3dBm) What is power in dBm? Assuming nW is nanowatts (1 billionth of a watt): 300 nW = .003 watts .003 watts = approx 5.898 dBm. If that "/5 dBm" means the re

Re: [c-nsp] Cisco 4900M and Layer2 Broadcasts

2014-06-28 Thread Justin Krejci
Is the layer 3 traffic multicast? Your indication of HA makes me suspect it is and perhaps you have a multicast snooping/filtering on the Cisco or some other related limiter setting. Just a total guess without any configs or other pertinent data. -Original Message- From: Ivan [cisco-.

Re: [c-nsp] Cisco to support flow spec?

2014-05-11 Thread Justin M. Streiner
On Sun, 4 May 2014, Oliver Boehmer (oboehmer) wrote: Any word on support in NX-OS? 7.3, last I heard.. Also, is this RFC 5575-compliant flowspec? yes, with some recent enhancements to the specs (v6 support, relaxed origin check, extra redirect options, and a few more) Sounds interesting

Re: [c-nsp] Cisco to support flow spec?

2014-05-04 Thread Justin M. Streiner
On Sun, 4 May 2014, Oliver Boehmer (oboehmer) wrote: To revive an old threadŠ Has anyone heard anything new on this topic in the past year? It now being the aforementioned 2014 and all? will ship in 5.2.0 soon and XE 3.14 later this year.. Any word on support in NX-OS? Also, is this RFC 5

Re: [c-nsp] Tracking state of non-directly connected link

2014-04-29 Thread Justin M. Streiner
On Tue, 29 Apr 2014, redscorpion69 wrote: What would be the best method of actively/passively keeping track of validity of static route over GPON interfaces for example? You could use IP SLAs and tracking. The tracker can be configured to do something like ping the far-end IP address every X

Re: [c-nsp] asr9001 4 x integrated 10 GE SFP+slots - does 1GE sfp work?

2014-04-28 Thread Justin M. Streiner
On Mon, 28 Apr 2014, Nick Hilliard wrote: On 28/04/2014 13:41, Vitkovský Adam wrote: Has anyone tried using 1GE sfp in the integrated 4 x 10 GE SFP+ slots please? yep, and it doesn't work :-( There isn't a "speed 1000" or similar interface command like there is on the Nexus gear? On the N

Re: [c-nsp] traffic not coming on ipsec tunnel for NAT IP

2014-04-24 Thread Justin M. Streiner
On Thu, 24 Apr 2014, Daljit Singh wrote: Actually I am trying to configure ipsec tunnel between two asa 5520 ver 8.0(3) and advertising static nat IP towards tunnel. But whenever my remote trying to initiate traffic then tunnel established but nothing is happening, I cant even see the logs o

Re: [c-nsp] X6708-10G-3C compatible with 7604 chassis?

2014-03-21 Thread Justin
It will power up and default to 3C if you insert the card and reboot the 7600. On Fri, Mar 21, 2014 at 8:15 AM, Lobo wrote: > Even though the cards are not completely compatible for totals # of routes > (3C vs 3CXL) the system should default to the lowest card but I would think > that it would

Re: [c-nsp] X6708-10G-3C compatible with 7604 chassis?

2014-03-20 Thread Justin
Could we get a show power and show environment output? On Thu, Mar 20, 2014 at 3:44 PM, Lobo wrote: > Hey everyone. Looking for some assistance or if anyone has had any > experience with the WS-X6708-10G-3C line card. We're trying to use this > particular card in our 7604 chassis which has th

Re: [c-nsp] Event Manager Script

2014-03-08 Thread Justin M. Streiner
On Sun, 2 Mar 2014, M K wrote: Hi allI am trying to do a event manager script that will do the below and need some assistanceI want to ping to a specific destination and if the ping request timed out for a period of for example 5 minutes , the router should be reloaded I would re-think this

Re: [c-nsp] Transparent WAN Encryption

2014-02-19 Thread Justin M. Streiner
On Sun, 2 Feb 2014, Jeff Orr wrote: If you are using a private MPLS (I.e. Not over Internet) & have Cisco CE routers consider GETVPN. For the reasons you mentioned, we as a customer went this direction. We needed to ensure our WAN (150 sites/multiple data centers)traveling across a variety of l

Re: [c-nsp] TAC hits a new record level of aggravation...

2014-02-02 Thread Justin M. Streiner
etc, why do we need that ? Regards, Antonio Soares, CCIE #18473 (R&S/SP) amsoa...@netcabo.pt http://www.ccie18473.net -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Justin M. Streiner Sent: domingo, 3 de Novembro de 2013 14:35 To: cisco-nsp@

Re: [c-nsp] DHCPv6

2014-01-05 Thread Justin M. Streiner
On Sun, 5 Jan 2014, Eugeniu Patrascu wrote: So? Nobody said "ipv6 address autoconfig" would use DHCPv6 for that. Clarifying that that DHCP in IPv6 works differently than DHCP in IPv4. I think that the OP and also another person were under the impression that they can get a default from the D

Re: [c-nsp] C6500 IPv6 redistribute with route-map?

2013-12-10 Thread Justin M. Streiner
On 10/Dec/2013 at 09:22:01 AM, Patrick M. Hausen wrote: I do have the knowledge and capacity to implement iBGP as my IGP *now*, except for the route reflectors suggested. Would you recommend that approach? I.e. going without the route reflectors and the communities first? It~Rs only 4-5 machines

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-04 Thread Justin M. Streiner
First of all, why are you allowing or disallowing split tunnel networks ? There is always the risk that he/she may get infected with some malware that your antivirus does not recognize and it spreads through the internet network when the user VPNs to the corporate network. From what I've seen,

Re: [c-nsp] Firewall/UTM

2013-11-30 Thread Justin M. Streiner
On Sat, 30 Nov 2013, madu...@gmail.com wrote: I am in the process to acquire and implement network infrastructure solution by upgrading the Firewall/UTM with a very high forwarding rate firewall at least 40Gbps, by using the following (TECHNICAL SPECIFICATION) Sounds like you really should con

Re: [c-nsp] Third party transceivers that fail only with new NX-OS 6.2.2a on sup-2E

2013-11-18 Thread Justin M. Streiner
On Mon, 18 Nov 2013, Jeffrey G. Fitzwater wrote: Since CISCO TECH will probably not touch this because its not CISCO, I see if anybody has solution. Backing out to 6.1.3 and all comes back to life. Has anybody else sent his issue with third party transceivers? I don't know if Cisco's stance

Re: [c-nsp] 6509 "switchport block unicast" wrongly filtering ARP broadcasts (RESOLVED)

2013-11-12 Thread Justin Krejci
t in the same way as "no switchport block unicast" does as well. Seems like a bizarre and unfortunate problem but at least there it can be made to work. Thanks again! From: Dale W. Carder [dwcar...@wisc.edu] Sent: Thursday, November 07, 201

Re: [c-nsp] 6509 "switchport block unicast" wrongly filtering ARP broadcasts

2013-11-07 Thread Justin Krejci
port block unicast" should only filter out unicast packets that it wants to flood, not broadcast packets that it wants to flood. -Original Message----- From: Justin Krejci [jkre...@usinternet.com] Received: Wednesday, 06 Nov 2013, 4:01pm To: cisco-nsp@puck.nether.net [cisco-nsp@

[c-nsp] 6509 "switchport block unicast" wrongly filtering ARP broadcasts

2013-11-06 Thread Justin Krejci
I have a relatively simple hardware configuration and topology 6509-E (tried on 2 different units) Sup720 (also tried Sup720-3B) WS-6548-GE-TX WS-6748-GE-TX IOS Version 12.2(33)SXI6 int g1/1 switchport switchport access vlan 900 switchport mode access switchport block multicast switchport

Re: [c-nsp] TAC hits a new record level of aggravation...

2013-11-04 Thread Justin M. Streiner
On Mon, 4 Nov 2013, Seth Mattinen wrote: Because you can't ever be "done" therefore it needs a rewrite into the cool new thing. Except Cisco's web team is somewhat behind; they're on Java applets right now. Give them another 5-10 years to discover jQuery. And the cool new thing will never be '

Re: [c-nsp] TAC hits a new record level of aggravation...

2013-11-03 Thread Justin M. Streiner
On Sun, 3 Nov 2013, Jeff Kell wrote: Customer support died a decade ago. For the front-end stuff, sure. To be fair, and to give credit where credit is due, I have dealt with some TAC engineers who have been incredibly helpful, professional, and responsive. For the things I generally reach

Re: [c-nsp] TAC hits a new record level of aggravation...

2013-11-03 Thread Justin M. Streiner
On Sun, 3 Nov 2013, Dobbins, Roland wrote: On Nov 3, 2013, at 7:29 AM, Justin M. Streiner wrote: It would be great if Cisco focus-group tested these 'enhancements' before rolling them out, and knock it off with the Java nonsense. They've been going in this direction for th

Re: [c-nsp] TAC hits a new record level of aggravation...

2013-11-02 Thread Justin M. Streiner
On Sat, 2 Nov 2013, Jeff Kell wrote: I had the "opportunity" to open a TAC case last week... and was greeted by the "new" website... Try many of these same tasks on a Mac, and you get to add the great Apple/Oracle Java pissing contest on top of it. Fun times... :( It would be great if Cis

Re: [c-nsp] Catalyst 6500: IPv6-enabled SVIs

2013-10-31 Thread Justin M. Streiner
On Thu, 31 Oct 2013, wrote: There is an issue on Cat6500 (SUP720-3B) with a lot of IPv6 SVIs: %FM-4-TCAM_LABEL: Hardware TCAM label capacity exceeded. I haven't seen this issue yet, but we haven't started rolling out IPv6 to our users yet. What version of code are you runn

Re: [c-nsp] 10GBase-LR and 10GBase-LRM compatibility

2013-10-21 Thread Justin M. Streiner
On Mon, 21 Oct 2013, Jeremy Bresley wrote: We've got some new routers (ASR-9001s) with 10GbaseLR optics in them. (Data sheet for these only mentions supporting SR/LR/ER/ZR optics.) We've got an existing pair of 4948E's with some available 10GBaseLRM optics in them. Can we connect these toge

Re: [c-nsp] 6500 IOS recommendation?

2013-10-21 Thread Justin M. Streiner
On Mon, 21 Oct 2013, Jon Lewis wrote: I noticed in email from cisco today: Are people actually upgrading to 15.1SSY, or just running late 12.2(33)SXI or SXJ until these boxes run out of resources? I have a 6500 in my lab running 15.x at the moment, and it seems to be fine. I know we will e

Re: [c-nsp] ASA 5585-X upgrade error

2013-09-20 Thread Justin M. Streiner
On Fri, 20 Sep 2013, Antonio Soares wrote: I was preparing a few 5585-X upgrades to 8.4.6.5 and I got this: ... Destination filename [asa846-5-smp-k8.bin]? ... No Cfg structure found in downloaded image file Perhaps your ASA image is corrupted? Did you compare the MD5 signature of the file y

Re: [c-nsp] ASA 8.4 to 9.1 question.

2013-08-06 Thread Justin M. Streiner
On Tue, 6 Aug 2013, Scott Voll wrote: OK, I'm slammed right now, but they are talking about upgrades of our ASA's to 9.1. we are currently on 8.4 train. Is there a big difference like 8.2 to 8.4 there was? or is this the "typical" type upgrade? I just need to let them know how much time it's

Re: [c-nsp] Router rebooting due to software crash.

2013-08-06 Thread Justin M. Streiner
On Mon, 5 Aug 2013, Joseph Mays wrote: We have a cisco 3600 that has rebooted twice in the last two hours, both times due to a software crash that shows the same memory address. I checked "show mem" and nothing is listed as operating that address, at least not right now. This router has been i

Re: [c-nsp] ASR9k IPv6 interface stats in 64bit

2013-07-22 Thread Justin M. Streiner
On Tue, 23 Jul 2013, Tassos Chatzithomaoglou wrote: ...which is indeed the case... achatz$ snmpwalk -v2c -c xxx router3 .1.3.6.1.2.1.4.31.3.1.6.2 ip.31.3.1.6.2.68 = Counter64: 40795287767 ip.31.3.1.6.2.69 = Counter64: 1638113009435 This OID tree appears to be in NX-OS 6.1 on the Nexus 7Ks as w

Re: [c-nsp] ASR9k IPv6 interface stats in 64bit

2013-07-22 Thread Justin M. Streiner
On Mon, 22 Jul 2013, Nick Hilliard wrote: On 22/07/2013 16:45, Robert Williams wrote: So I need to find the 64bit version of the counters at 1.3.6.1.2.1.4.31.3.1.X you need IF-MIB::ifHCInOctets / IF-MIB::ifHCOutOctets That will give you the counter for all octets on that interface. If you

Re: [c-nsp] Cisco 6500 mounting with cables

2013-07-21 Thread Justin M. Streiner
On Sun, 21 Jul 2013, Jon Lewis wrote: "This solution connects Cisco Catalyst 6800ia access switches to Cisco Catalyst 6500 or 6800 Series core switches. The entire configuration works as a single extended switch with a single management domain." That must be pissing off the Nexus unit. I

Re: [c-nsp] Cisco 6500 mounting with cables

2013-07-21 Thread Justin M. Streiner
On Tue, 9 Jul 2013, Chris Marget wrote: I'm curious whether folks here have found any benefit in using Cat5e or Cat6 over Cat5 for Ethernet. Is there any? Since about 2009, we've been wiring new buildings, or re-wiring old buildings when the opportunity presents itself with shielded Cat6A. T

Re: [c-nsp] pix 6.1(3)

2013-07-11 Thread Justin M. Streiner
On Thu, 11 Jul 2013, Richard Golodner wrote: On Thu, 2013-07-11 at 22:50 +0200, Gert Doering wrote: PIX "fixup" protocol helpers do their best to break whatever protocol they can lay their hands on. Now I finally understand that "feature"! Thanks Gert. It does do that for certain. I

Re: [c-nsp] New Catalyst 6k chassis

2013-06-26 Thread Justin M. Streiner
On Wed, 26 Jun 2013, Jeff Kell wrote: On 6/26/2013 11:10 PM, Justin M. Streiner wrote: It just seems like the new 6k is positioned to poach prospective customers from the (arguably) higher-margin Nexus 7k product line. Now that you mention the "N-word" I have to ask (as we're

Re: [c-nsp] New Catalyst 6k chassis

2013-06-26 Thread Justin M. Streiner
On Wed, 26 Jun 2013, Dobbins, Roland wrote: Cisco isn't really a unitary company, it's a loose confederation of semi-feudal fifedoms, each with its own P&L. Effectively, they're separate companies utilizing a common branding/marketing framework and shared administrative resources. This som

Re: [c-nsp] ASA SME

2013-06-11 Thread Justin M. Streiner
On Tue, 11 Jun 2013, Phil Fagan wrote: Any ASA SME's out there? It's helpful to know more about what you're looking for in particular. jms ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archi

Re: [c-nsp] New Catalyst 6k chassis

2013-06-10 Thread Justin M. Streiner
On Sun, 9 Jun 2013, Rinse Kloek wrote: Can someone confirm rumors about the new Catalyst 6k chassis ? The new Catalyst 6807-XL chassis will be able to scale up to 220-880Gbps per slot with feature linecards/sup. The chassis will be compatible with the current SUP2T supervisor. Also reading t

Re: [c-nsp] ipv6

2013-06-06 Thread Justin M. Streiner
On Thu, 6 Jun 2013, Jay Ford wrote: On Thu, 6 Jun 2013, Aaron wrote: Thanks Jay, can you issue a /56 via SLAAC ? ...DHCPv6 ? in otherwords, SLAAC deals strictly with individual addresses within /64 prefixes. SLAAC will also generally break on anything but a /64. jms

Re: [c-nsp] ipv6

2013-06-05 Thread Justin M. Streiner
On Wed, 5 Jun 2013, Aaron wrote: There seems to be so many ways to do ipv6..(I'm not clear on what to use and why to use it and when to use it..) What is the best way to migrate my customers to IPv6 with zero impact (meaning, all internet and services are still reachable when done moving to ipv

Re: [c-nsp] 6500 Supervisor redendancy

2013-05-28 Thread Justin M. Streiner
On Tue, 28 May 2013, Ben Hammadi, Kayssar (NSN - TN/Tunis) wrote: I have a 6509 with a standalone Sup720 and I am preparing to add a redundant one, I don't know the software on the new Supervisor and my final goal is to make both work on SSO mode. Can someone propose a procedure with happy e

Re: [c-nsp] Nexus 5548 Questions and experiences...

2013-05-16 Thread Justin M. Streiner
On Thu, 16 May 2013, Blake Pfankuch - Mailing List wrote: Within the next week I will be starting my first dive into Nexus. I have read the Cisco Press book for nexus, however its primarily focused on 4.x not 5.x and 6.x. I haven't run 6.x on my 5548s yet. It's still pretty new, and I'm onl

Re: [c-nsp] 10gig Link Bouncing Consistently (solved?)

2013-04-07 Thread Justin Krejci
illiard [n...@foobar.org] Received: Thursday, 04 Apr 2013, 8:41am To: cisco-nsp@puck.nether.net [cisco-nsp@puck.nether.net] Subject: Re: [c-nsp] 10gig Link Bouncing Consistently On 04/04/2013 00:03, Justin Krejci wrote: > Unfortunately SR/MMF transceivers have no DOM support. I'd better RMA

  1   2   3   4   5   6   7   8   9   10   >