[c-nsp] ASR 9K + source based routing

Hi All, I have a ASR9K1 with IOS XR 4.3.2 . Yes i know it is an old image, but rock stable in our environment. Today a made a source based routing: if the source packet is comming from 1.1.1.0/24 range the nexthop have to be 2.2.2.2 The config is this: RP/0/RSP0/CPU0:asr01#sh run interface

Re: [c-nsp] XRIOS commit tp TFTP

On 27 June 2016 at 12:17, Nemeth Laszlo wrote: Hi We have some ASR9K1 with 4.3.1 OS. We would like to send TFTP every commit content if somebody make a "commit". I would like to put the Commit ID to the saved filename for the better search. I played with an alias c "commit ; sho

[c-nsp] XRIOS commit tp TFTP

Hi We have some ASR9K1 with 4.3.1 OS. We would like to send TFTP every commit content if somebody make a "commit". I would like to put the Commit ID to the saved filename for the better search. I played with an alias c "commit ; show configuration commit changes last 1 | file tftp:" but in

Re: [c-nsp] netflow real AS instead of uplink provider?

Hello Yes, it is in my BGP session. Laszlo 2016-06-15 15:04 időpontban Christian Kildau ezt írta: > Do you have "bgp attribute-download" under router bgp ? > > Best regards, > Chris > > On Wed, Jun 15, 2016 at 2:57 PM, Nemeth Laszlo wrote: > >> H

[c-nsp] netflow real AS instead of uplink provider?

Hello I tried to get the source or destianton AS of a flow from our ASR9001 (iosxr 4.3.1) router. But i got this: RP/0/RSP0/CPU0:asr0#sh flow monitor netflow-monitor cache location 0/0/CPU IPV4SrcAddr IPV4DstAddr L4SrcPort L4DestPort BGPDstPeerAS BGPSrcPeerAS BGPNextHopV4 I

Re: [c-nsp] RES: Load Configuration From Flash

Hi, Do a "sh ver" What is the Configuration register value? Regards, laci 2010-06-01 16:55 keltezéssel, Mohammad Khalil írta: The issue is that i can start the router and the IOS is loaded successfully when i type anything and save it such as a hostname or interface description and reload

Re: [c-nsp] 4948 management port VS vty access-group

le on the 4500, but it works on all the gear I have. -saxon On 20 May 2010 07:51, Nemeth Laszlo wrote: Hi All, I use a C4948 switch with cat4500-entservicesk9-mz.122-53.SG1 IOS. I try to use the MGMT ethernet port. The config is: interface FastEthernet1 ip vrf forwarding mgmtVrf ip ad

[c-nsp] 4948 management port VS vty access-group

Hi All, I use a C4948 switch with cat4500-entservicesk9-mz.122-53.SG1 IOS. I try to use the MGMT ethernet port. The config is: interface FastEthernet1 ip vrf forwarding mgmtVrf ip address 192.168.2.10 255.255.255.0 speed auto duplex auto If I telnet to the switch from 192.168.2.1 via

Re: [c-nsp] Etherchannel guard vs. mstp]

Hi I make a mistake in the Routers name. This is the good version: I have a 7600/RSP720-3CXL with advipservicesk9-mz.122-33.SRC3.bin (this is Router A), 6500/SUP720-3BXL with ipservicesk9-mz.122-18.SXF13.bin (this is Router B) and a C 6500/3BXL with ipservicesk9-mz.122-18.SXF6.bin (Router C)

[c-nsp] Etherchannel guard vs. mstp

Dear List, I have 6500/SUP720-3BXL with ipservicesk9-mz.122-18.SXF13.bin (this is Router A) , a 7600/RSP720-3CXL with advipservicesk9-mz.122-33.SRC3.bin (this is Router B), and a Router C 6500/3BXL with ipservicesk9-mz.122-18.SXF6.bin. The topology is: Router A == 4x10G (lacp) == Router B

[c-nsp] 6500/Sup720 3BXL and ACK/RST

Hi list, I would like to set a limit in my 6500/Sup720 3BXL RP card to how many ACK/RST packets send back to source if this RP get lot of SYN packets (flood) to random ports. I think to a magic mls rate-limit command :) The CoPP not a good idea, because if i use it the CPU make a 100% load e

[c-nsp] vpn_hw-1-packet_error / 7201

Hi all, I have 2 Cisco 7201 routers (c7200p-advipservicesk9-mz.124-15.T3.bin) with SA-VAM2+ VPN modul. Between this routers i use a crypted GRE tunnel: interface Tunnel0 description TUNNEL ip address 192.168.1.1 255.255.255.252 ip mtu 1418 ip tcp adjust-mss 1300 ip ospf cost 100 load-in

Re: [c-nsp] service policy + SYN flood vs. periodic high cpu load

but i see it only under SYN flood. If i sent only ICMP (size 1400) flood, i didn't see this wawes. Laszlo Nemeth Laszlo wrote: Hi all, I'm testing the control plane policy in my lab. Now i found a very interesting event. I have a 6500/sup720 whit different IOS (SXF6, SXF10a, SXH3a).

[c-nsp] service policy + SYN flood vs. periodic high cpu load

Hi all, I'm testing the control plane policy in my lab. Now i found a very interesting event. I have a 6500/sup720 whit different IOS (SXF6, SXF10a, SXH3a). I send a very big SYN flood to this router. I'm doing this test in clear config. (erase startup, reload :) ) I made a policy: class-

Re: [c-nsp] ACK/RST rate-limit?

Nemeth Laszlo wrote: If I set the CIR from 128000 to 32000 in cp-default-in class, i see a very litle cpu load between the 100%, but this wave is on every 4 minutes... So i thing the 4 minutes wave caused by CPP settings. But why?? Sorry, i see the small (10-20%) cpu load INSTEAD 100% in

Re: [c-nsp] ACK/RST rate-limit?

Hi, Gert Doering wrote: It needs a bit of consideration what sort of packets the router is meant to receive ("routing protocols", anyone?) and you should lab-test it before rolling out on production routers. It's a border test router with BGP and OSPF. I made a config from this page: http://

[c-nsp] ACK/RST rate-limit?

Hi List, I have a Cisco 7600 / Sup720-3BXL (12.2.18SXF6). Only the telnet port (23/tcp) is open. If i try to open a session to a random port, i get back a TCP ACK/RST packet from the CPU. I think it is normal. :) But if I send lot of SYN packets to random ports, i get back lot of ACK/RST bu

[c-nsp] SUP720-3BXL gigabit uplink port limit?

Hi All, On the Sup720-3BXL card has 2 gigabit uplink port. Does speed or any limit on this ports? I use 2 CPU card in my 6500 switch and 2+1 uplink ports in use. Yesterday I reached the 950Mbit/sec on this ports (summarized data, 300Mbit, 300Mbit and 350Mbit was the traffic). But this 950Mbi

Re: [c-nsp] SA-VAM2+ usage problem?

Hello, On my GRE/IPSEC tunnels i have ip mtu 1418 ip tcp adjust-mss 1300 I configured this settings on my tunnel interface. And now: 30 second input rate 1635 bits/sec, 12387 packets/sec 30 second output rate 229516000 bits/sec, 23053 packets/sec 234 Mbit/sec aggregated traffic wit

[c-nsp] SA-VAM2+ usage problem?

Hello, I have two 7201 (c7200p-advipservicesk9-mz.124-15.T3.bin) routers with SA-VAM2+ modules. I have a tunnel interface between this routers. If I make a ~24Mbit/sec traffic into this tunnel, the routers CPU's goes to 90%. It was the performance without VAM2+ too. So the VAM2+ modul doesn'

[c-nsp] C4948 total output drops / bit error problem

Hello I have lot of C4948 switches in our network. All switch have 2x1 gb/s uplink (etherchannel) to a 6509 switch. The problem is, if the traffic "big" on the etherchannel ( ~2x700mbit/s) the "total output drops" counter increase. Yesterday the counter was: Input queue: 0/2000/0/0 (size

[c-nsp] Cat4948 free list memory parity error

Hi I got this messages but i did not found any info at cisco.com: Log: Aug 5 11:31:27 MET-DST: %C4K_SWITCHINGENGINEMAN-3-FREELISTMEMORYPARITY: Parity mismatch in freelist memory, flm addr=E425, reg bits=8000E425, total=2 System image file is "bootflash:cat4000-i9s-mz.122-25.EWA8.bin" cis

Re: [c-nsp] TCP-2-INVALIDTCB

Hello, Phil Mayers írta: I got this messagos in this morning. All of traffic is normal, just logged this (BGP I/O) messages 69 times under 2 seconds. It is a 6506 device with sup720-3bxl card and i use the s72033-ipservicesk9-mz.122-18.SXF6.bin IOS. Sounds like memory corruption. we had problem

[c-nsp] TCP-2-INVALIDTCB

Hello, I got this messagos in this morning. All of traffic is normal, just logged this (BGP I/O) messages 69 times under 2 seconds. It is a 6506 device with sup720-3bxl card and i use the s72033-ipservicesk9-mz.122-18.SXF6.bin IOS. Any idea? Best regards, Laci Jun 26 10:41:45 MET-DST: %

Re: [c-nsp] SIBYTE-CFC3-3-CORRECTABLE_ECC_ERR

ge was found. TRY THIS: Ensure that the error message has the following format: %FACILITY-SEVERITY-MNEMONIC: Some examples would be: %SYS-2-MALLOCFAIL: %PIX-1-103001: Resubmit the output as necessary. Vijay Ramcharan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTEC

[c-nsp] SIBYTE-CFC3-3-CORRECTABLE_ECC_ERR

Hello, I received this messages on my 6500: *May 26 12:44:26 MET-DST: %SIBYTE-CFC3-3-CORRECTABLE_ECC_ERR: A correctable ECC error has occurred, A_BUS_L2_ERRORS: 0x0, A_BUS_MEMIO_ERRORS: 0xFF, A_SCD_BUS_ERR_STATUS: 0xC0DC3000 *Jun 10 14:12:48 MET-DST: %SIBYTE-CFC3-3-CORRECTABLE_ECC_ERR: A co

Re: [c-nsp] RES: activ/standby cpu card status changed]

rience the same problem after upgrading to > a Cisco IOS software image that contains the fix for this caveat. > > > > > > On Fri, Feb 29, 2008 at 1:24 AM, Nemeth Laszlo <[EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>> wrote: > > Hi! > >

Re: [c-nsp] RES: activ/standby cpu card status changed

> It sounds like your MSFC crashed. > You ought to look into the crashinfo file in order to figure out why. > > cheers, > Leonardo Gama. > > > *De:* [EMAIL PROTECTED] em nome de Nemeth Laszlo > *En

[c-nsp] activ/standby cpu card status changed

Hi! My 7604 router has 2 WS-SUP32-10GE-3B cpu card in RRP-PLUS mode. System image file is "sup-bootdisk:s3223-ipservices_wan-mz.122-18.SXF9.bin" I got this syslog messages and after it the cpu card changed the standby mode to active and active to standby. The cpu went at 100% through 15 minute

Re: [c-nsp] Invalid packet (too small) length=0

Dear Oli! Oliver Boehmer (oboehmer) i'rta: > Nemeth Laszlo <> wrote on Saturday, November 17, 2007 9:47 PM: >> I received this messages yesterday: >> Nov 16 21:57:23: Invalid packet (too small) length=0 >> The router is a 7606 with Sup720-3BXL, ios: >>

Re: [c-nsp] Invalid packet (too small) length=0

Dear Oli! Oliver Boehmer (oboehmer) i'rta: > Nemeth Laszlo <> wrote on Saturday, November 17, 2007 9:47 PM: >> I received this messages yesterday: >> Nov 16 21:57:23: Invalid packet (too small) length=0 >> The router is a 7606 with Sup720-3BXL, ios: >> s72

[c-nsp] Invalid packet (too small) length=0

Hi! I received this messages yesterday: Nov 16 21:57:23: Invalid packet (too small) length=0 Nov 16 21:57:35: Invalid packet (too small) length=0 Nov 16 21:57:48: Invalid packet (too small) length=0 Nov 16 21:57:49: Invalid packet (too small) length=0 Nov 16 21:57:57: Invalid packet (too small) l