Re: [c-nsp] cisco ACL filter outbound only

It would probably help if you elaborated on what type of connections will be established through/from the device in question. Sent from my iPhone > On Sep 15, 2020, at 9:45 AM, Mike wrote: > > On 9/15/20 3:12 AM, Nick Hilliard wrote: >> Mike wrote on 15/09/2020 02:17: >>> I have some ge

[c-nsp] Cisco SDWAN Version 19.2

Looking for some recommendations on code version 19.2. We recently upgraded from 17.2.2 to 18.4 and it has been working well but we just picked up some new isr1100’s that require a version of 19.2. Anyone got any experience and feedback? Thanks all Sent from my iPhone ___

[c-nsp] Nexus 7700 sup2e Upgrade

Looking to upgrade some 7ks from 6.2.12 to something 7.2 or 7.3 to support the peering of layer 3 devices across vpc port channels. Looking to see what code versions others are using that have proven to be stable. Sent from my iPhone ___ cisco-nsp mai

[c-nsp] OT Solarwinds Alternatives

Sorry for the off-topic post. I'm looking for input on network management solutions other than solarwinds, unbiased opinions. We will need all things network related, monitoring, alerts, reporting, configuration management, and other tools that might be handy for a NOC. If this takes multiple tools

[c-nsp] ASR 9000 Upgrade Expectations

Hello, looking for some details in regards to an ASR9000 code upgrade. Currently running software version 5.1.1 with the following packages: Committed Packages: disk0:asr9k-mini-px-5.1.1 disk0:asr9k-k9sec-px-5.1.1 disk0:asr9k-mpls-px-5.1.1 disk0:asr9k-mgbl-px-5.1.1 disk0:asr9k-optic-px-5.1.1

[c-nsp] Failover Testing

e any good recommendations in the applications arena, preferably open source? Thanks in advance, Nick Griffin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Interworking Question

SP Gurus, I have a short term need to provide connectivity between a couple endpoints for a migration. Customer currently has a DS3 with PPP encap terminating in an edge 7200VXR, and will be migrating this service to ethernet and terminating in new router. Wondering if it's possible to use interwor

[c-nsp] Juniper Independent Domains

Anyone know of the cisco equivlant? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Cisco ASR 1006

ic side, but at this point will probably only receive a default route. It will also have somewhere in the neighborhood of 12-16 IPSec tunnels and be used solely for the tunnels. Overall I've had good luck with the ASR platform, but this is larger scale and wanted to pose th

Re: [c-nsp] Line Protocol going down

If they are both set for for auto speed and duplex, seems like it negotiated correctly. Looks like the cable is most likely bad. Nick Griffin CCIE 17381, S/P,R/S On Fri, May 11, 2012 at 9:46 AM, Scott Voll wrote: > I have a 2821(15.1(3)T2) connected to a 3560(12.2(55)SE3) and recentl

[c-nsp] "show stats" question

ching pathPkts In Chars In Pkts Out Chars Out Processor 143421650437 2492 166010 Route cache 534 55212 149 11166 Distributed cache7169590 60901486898831508 9040962158 Total7184466 60918543388834149 9041139334 Thanks, Nick Gr

Re: [c-nsp] Layer 2 VLAN advice..

AFAIK, SRP was implemented/available in 12K's and 7200's, I used it in a cmts environment. This was 5 years ago, not sure about the offering nowdays. On Wed, Feb 3, 2010 at 4:16 AM, Nick Hilliard wrote: > On 02/02/2010 18:13, Peter Kranz wrote: > > The network is composed of 6509-e chassis with

Re: [c-nsp] ASA IPsec Tunnel Failover

Do you have any routers/layer 3 devices on the inside of the firewalls, the weighted GRE tunnels always work well for this. On Mon, Jul 13, 2009 at 3:14 PM, Munoz, Jeff wrote: > Hey guys, I have two main sites (site A and site B) and one remote site > (site C). Sites A and B have a metroetherne

Re: [c-nsp] ASA ssh difficulties

sorry, location = local :) On Tue, Jul 14, 2009 at 9:15 AM, Nick Griffin wrote: > Make sure ssh is setup for location authentication and possibly regenerate > your ssh keys: > this is what I usually do: > > crypto key generate rsa general modul 2048 > > aaa authentication

Re: [c-nsp] ASA ssh difficulties

serial console LOCAL Nick Griffin, CCIE #17381 Systems Consultant Alexander Open Systems Direct 479.899.6830 ext 2609 AOS Scheduling - 417.888.2675 On Tue, Jul 14, 2009 at 9:05 AM, Jonathan Brashear < jonathan.brash...@hq.speakeasy.net> wrote: > I'm a bit stumped on an issue I&#

Re: [c-nsp] GSS and ACE

Thanks to everyone for responding. Very valuable information! Nick Griffin On Thu, Apr 23, 2009 at 9:02 AM, Tony Varriale wrote: > The GSS is definitely not that. > > If you use it with CNR, yes. Since CNR is that product, shazam. > > But as said in my previous post, GSS st

Re: [c-nsp] GSS and ACE

wrote: > > On Apr 22, 2009, at 11:10 PM, Nick Griffin wrote: > > Right, my question was does it require ACE appliance or modules to work? >> > > No, can work independently, no problem. > > Also, are there any ties to particular vendor DNS servers, ie CNR? >> &g

Re: [c-nsp] GSS and ACE

acias, Nick Griffin On Wed, Apr 22, 2009 at 9:52 AM, Roland Dobbins wrote: > > On Apr 22, 2009, at 10:45 PM, Nick Griffin wrote: > > Does that make sense? >> > > Sure - GSS does that. > > --- > Rol

Re: [c-nsp] GSS and ACE

+ACE can handle load > balancing across many access points with integrated service monitoring and > the like. Doing that without a device like the ACE is pretty complicated. > > Justin > > -cisco-nsp-boun...@puck.nether.net wrote: - > To: "cisco-nsp@puck.nether.net&q

[c-nsp] GSS and ACE

cular design I am working with is worth the cost. Thanks in advance. Nick Griffin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] cisco command to show 10GE module type?

can you use "show interface capabilities"? On Fri, Apr 17, 2009 at 11:41 PM, Engelhard Labiro wrote: > Use command "show int status" > > Sent from my iPhone > > > On 2009/04/18, at 11:04, Neil d wrote: > > Hi all, >> >> Is there any command to show what kind of Xenpak 10G module in the >> 6704-

[c-nsp] Cisco and Foundry and MST

y to the access layer (assuming the interoperability works just fine), and then the Foundry boxes. Just looking for any pro-pointers here to try to avoid baptism by fire! Thanks in advance. Nick Griffin Systems Consultant, CCIE R&S 17381 ___ cisco-nsp

Re: [c-nsp] ASA O/S version 8

Done a couple 8.0.4(16), be aware of sql bug, CSCsu44598 in 8.0.4. On Mon, Feb 2, 2009 at 10:47 AM, Justin M. Streiner wrote: > On Mon, 2 Feb 2009, John Aldrich wrote: > > Hi, we just installed a new ASA, and the folks who sold it to us and >> configured it for us (I don't know the first thin

Re: [c-nsp] BGP <-> OSPF default route failover

via the internal peering AND doing redistribution into an IGP ie OSPF then you must use the BGP redistribute internal, bgp process level command. This is in specific scenarios. HTH, Nick Griffin On Sat, Jan 31, 2009 at 12:50 PM, Pete S. wrote: > I'd imagine you aren't completely

Re: [c-nsp] 6500 and VSS

with a single VSS720 Sup in each chassis… > > > > *From:* Nick Griffin [mailto:nick.jon.grif...@gmail.com] > *Sent:* Friday, January 09, 2009 9:49 AM > *To:* Tim Durack > *Cc:* Murphy, William ; cisco-nsp > *Subject:* Re: [c-nsp] 6500 and VSS > > > > So, I'm buil

Re: [c-nsp] 6500 and VSS

ase? Is this other's experience, those of you using aip services and higher, do you all have redundant sup's in a single chassis? My hope was for aipservices and a single 10G sup in each chassis. Thanks! Nick Griffin On Mon, Dec 29, 2008 at 12:45 PM, Tim Durack wrote: > On Mon, Dec 29,

[c-nsp] 6500 and VSS

pro's and con's. Thanks in advance, Nick Griffin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Adding connected routes in a VRF

You have to manually add host routes as the next hop since you can't add the router itself, another solution I found that work was this: "BGP Support for ipv4 Prefix Import". This for me worked well, you just need to make sure that the prefixes you wish bring in from the Global Table exist in the

Re: [c-nsp] Default Route behaviour on PIX

In your lab, on your interface on your router facing your fix, fas 0/0 for example do "show ip int fas0/0 | i Proxy" and you'll see that proxy arp is enabled. The pix is trying to forward to 1.1.1.1 and the router is probably doing proxy arp, assuming your router thinks it knows how to get to 1.1.1

[c-nsp] Simple VRF ( I hope )

I have a scenario that I am trying to accomplish and I'm having some issues getting my head around it. In the simplest form I have a client on VRF 1 and a server in the global table and I want to enable communication between the 2 so I do 2 things: 2.2.2.0 is vrf 1 network and 1.1.1.0 is in the gl

Re: [c-nsp] VRF Lite Route Propagation

.3.3.0 1.1.111.2 141 0x8001 0x000A57 3489660929 5.5.5.0 1.1.111.2 141 0x8001 0x00C199 3489660929 R1# On Thu, Aug 14, 2008 at 10:39 AM, Jeff Kell <[EMAIL PROTECTED]> wrote: > Nick Griffin wrote: > >> I've figured out how to exchange

[c-nsp] VRF Lite Route Propagation

with. I get them to show up as B routes via the address family configuration, but I am able to pass this to the neighboring router. I hope this make sense. Thanks in advance, Nick Griffin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puc

Re: [c-nsp] C3750-24PS and VRF-Lite/Multi VRF

If anyone can confirm that the dotted subinterface configurations can be configured on the 3750ME's, that would be excellent. Nick Grififn On Wed, Jul 9, 2008 at 1:29 PM, Jeff Kell <[EMAIL PROTECTED]> wrote: > Marko Milivojevic wrote: > >> I think that you need to use SVI's (interface vlan xxx)

Re: [c-nsp] C3750-24PS and VRF-Lite/Multi VRF

ilivojevic <[EMAIL PROTECTED]> wrote: > I think that you need to use SVI's (interface vlan xxx) combined with > trunks on these boxes. They don't support subinterfaces, as far as I > recall. > > On Wed, Jul 9, 2008 at 15:35, Nick Griffin <[EMAIL PROTECTED]> >

[c-nsp] C3750-24PS and VRF-Lite/Multi VRF

unable to configure a subinterface. Am I missing something, does this require a 3750E? interface fas 1/0/1 no switch ip address 1.1.1.1 255.255.255.0 int fas 1/0/1.100, etc ip vrf VRF1 forwarding ip address 2.2.2.2 255.255.255.0 Hope this makes sense, thanks in advance, Ni

Re: [c-nsp] WLC and LWAPP Aps

first deployment I would recommend priming the access points as I mentioned above. You will also need to configure the ip address of the controller under the management, and probably the ap manager interface. HTH, Nick Griffin On Fri, Jul 4, 2008 at 8:42 AM, Dracul <[EMAIL PROTECTED]>

Re: [c-nsp] PBR noob question

You can source traces from any interface on the router, try "trace" "enter" for extended options. You won't be able to test this from the router itself unless you configure "ip local policy", to perform local policy routing. Nick Griffin On Thu, Jun 19, 2

Re: [c-nsp] Large GLBP installations

I have used it quite a bit, however not in that many groups. I have done this at at least 4 deployments, with somewhere in the neighborhood of 50 groups. Usually 12.2(18) and a couple with 12.2(33)SXH1. Nick Griffin On Tue, Jun 10, 2008 at 11:27 AM, Jerome Covini <[EMAIL PROTECTED]> wrote:

Re: [c-nsp] T1 configuration

Yes, they will display in the configuration after your time slots are provisioned. On Mon, Jun 9, 2008 at 11:15 AM, Paul Stewart <[EMAIL PROTECTED]> wrote: > Hi there.. > > We have a 6509 (sup2) installed and about to bring up some T1 interfaces on > it.. confused over the configuration and only

[c-nsp] Nexus 7000

I am curious to hear from those that have began to implement or are currently reviewing the Nexus 7000 platform. I have been doing some research and I like what I hear. Now I'm curious in receiving some feedback from the guys on the ground, good, bad or indifferent. Thanks in advance.

Re: [c-nsp] Cisco 2811

Well, how much of an increase in traffic did you add to this one FE interface by adding multiple vlans to it? Keep in mind the hairpinning of traffic in an back out the same interface. Could you offload this process to a L3 switch? On Thu, Mar 27, 2008 at 2:01 PM, Ravi Patwari <[EMAIL PROTECTED]>

Re: [c-nsp] QOS Configuration Help

t channel itself. If it will, I would apply them there too. Unless someone can tell this would actually hurt something. The 3560/750 won't let ya do it. HTH, Nick Griffin On Wed, Mar 5, 2008 at 11:42 PM, Mike Louis <[EMAIL PROTECTED]> wrote: > Is the stripping particular to the

Re: [c-nsp] QOS Configuration Help

k and see what It comes up with. > > Dan. > > On Wed, Mar 5, 2008 at 5:46 PM, Nick Griffin <[EMAIL PROTECTED]> > wrote: > > Well that depends, if your doing the trust dscp on the port facing the > video > > server, as well as your interconnects and your video application

Re: [c-nsp] QOS Configuration Help

and capture some packets, change some things and see how it works. Also, have a gander at End to End QoS network design. HTH, Nick Griffin On Wed, Mar 5, 2008 at 5:20 PM, Dan Letkeman <[EMAIL PROTECTED]> wrote: > Ok, that would explain some of my problems. But my main question is >

Re: [c-nsp] QOS Configuration Help

I'm pretty certain you will not get output on this information based on the qos works on these devices, specifically the 3560/3750. The best way to check this stuff out from what I've seen on the CLI is "show mls qos interface x/y statistics". This will give you an idea of the DSCP values coming in

Re: [c-nsp] Multiple Spanning Tree

>From what I've seen it also appears to cause some issues adding new vlans to instances. I try to make sure my vlan to mst mappings are as close to final as possible to avoid service disruption when needing to change vlan/instance mappings later. Btw, this is next to impossible ;) Nick

Re: [c-nsp] NBAR on 2800

8000 bps, bc 1000 bytes conformed 6086423 packets, 426638532 bytes; actions: transmit exceeded 1807 packets, 2368194 bytes; actions: drop conformed 0 bps, exceed 0 bps Nick Griffin, CCIE #17381 On Jan 10, 2008 8:31 AM, Justin Shore <[EMAIL PROTEC

Re: [c-nsp] 7600Sup720/6500Sup720

18)SXF software on both devices. > 12.2(33)SRA/SRB are the software trains that only run on the 7600 > platform, but I'm not sure you require the features those trains > provide. > > Phil > > > On May 29, 2007, at 4:26 PM, Nick Griffin wrote: > > > I'm looking

[c-nsp] 7600Sup720/6500Sup720

vity via provider managed MPLS. They will need to be able to provide bgp as well as a redundant FHRP preferably GLBP. I'm a little confused with all the talk of the product split and code changes, simply looking for recommendations. TIA, Nick Griffin

Re: [c-nsp] vlan configuration for video system

plugged in. Is there a way to do > this with acl's? Would specified address help? > > The quality across the wireless links has been taken care of. That is > not a concern to me. > > Thanks, > Dan. > > > Nick Griffin wrote: > > The only mechanism I know of

Re: [c-nsp] vlan configuration for video system

e to control quality across those wireless links if video will be running across them. HTH, Nick Griffin, CCIE #17381 On 4/12/07, Dan Letkeman <[EMAIL PROTECTED]> wrote: > > Thats what I was afraid of having to do. Its polycom vsx 6000's that we > are > using. They do have

[c-nsp] OT ACS 4.1

Does anyone have any experience installing ACS 4.1 on a drive other than the c: drive? I'm attempting to and getting ODBC errors before the installation finish. Perhaps someone has seen this. Thanks in advance, Nick Griffin ___ cisco-nsp mailing

Re: [c-nsp] 6509 / 3750 link problem

In the past I've had to do "speed nonegotiate" give that a shot. On 4/9/07, Brad Henshaw <[EMAIL PROTECTED]> wrote: > > Glenn, > > In addition to the other suggestions, I noticed the following in your > output: > > Your side: > Full-duplex, 1000Mb/s, media type is LH > > Their side: > Full-duplex,

Re: [c-nsp] 6500 WS-X6748-GE-TX and memory

Excellent, that is what i needed. Thanks On 3/27/07, Ian Cox <[EMAIL PROTECTED]> wrote: > > At 09:59 AM 3/27/2007 -0500, Nick Griffin wrote: > >I see there is an option for the 6748 gig modules for additional memory > for > >these cards, up to 1 GB. I'm trying t

Re: [c-nsp] 6500 WS-X6748-GE-TX and memory

s exclude VAT unless > otherwise stated. Quotations valid for seven days. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Nick Griffin > Sent: 27 March 2007 16:00 > To: nsp > Subject: [c-nsp] 6500 WS-X6748-GE-TX and memory > >

[c-nsp] 6500 WS-X6748-GE-TX and memory

I see there is an option for the 6748 gig modules for additional memory for these cards, up to 1 GB. I'm trying to justify this, does anyone have any thoughts on advantages of adding the additional memory that are not apparent for me? TIA, Nick Gr