[c-nsp] Buried alive in switzerland - swiss intel hiccup in the telecom field

We've got the swiss abusing IME/TrustZone features for "écrase d'affaire", "étouffe d'affaire". Google translate is your friend. -- Version html disponible sur: http://www.strauss-engineering.ch/posts/sevices.html A noter que je n'ai, matériellement parlant, plus rien. Je vis désormais dans u

[c-nsp] c7604 "starter kit"

ailable and not anymore. will the 8 port fixed GigE (not 10/100 but only 1000) of the cat6500 line work in a c7600? We don't need 20 ports and that's a bit expensive. All port must do layer3, of course. Full BGP table, many times (3 full peer plus 100 local peerings w few prefixes). T

Re: [c-nsp] 7201 cpu (revisited)

pps it's a relatively steep slope, reaching ~40-45% CPU, and from then to 1.5Mpps, it's a much smoother slope. On GigE at least. It seems another stories on serial/POS, eating much more CPU. Don not know about the -G1 or 7301. regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausa

[c-nsp] NPE-G2: mixed interrupt/polling packet processing on POS interface

affic, has some rational behind it. But we're using it only to switch data/ip, and I'm wondering if there's a way to lower the CPU usage despite using POS? like a switch to enable mixed interrupt/polling driver on the POS? would be highly helpfull. regards. -- Philippe Strauss av

[c-nsp] ASA 8.x SSL Certificate based authentication (ala Belgian eID Card)

Group authentication to "both" rather than "certificate", I get a username/password on the portal, but entering the serial number does not help, I get rejected. Anyone on this list been there before? Regards. -- Philippe Strauss av. de Beaulieu 25 1004

[c-nsp] L2TPv3 for simple static ethernet xconnect on small platform

Is someone on this list using L2TPv3 in a simple, static setup, plain ethernet Xconnect, running on c1841? What is the smallest platform available for such a setup? Thanks! -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch

[c-nsp] L2TPv3 across an ADSL network: MTU

rk, ending up in your LNS. regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] ASA 5520 7.2.2 context: strange memory usage

e "caveats" list still open for 7.2.2 and 7.2.3 is rather long, but this one is really curious. Note: two such box run in active/active failover with HTTP state replication. Anybody having observed it? -- Philippe Strauss av. de Beaulieu 25 1004 Lausa

[c-nsp] cisco ASA using many time the same MAC and HP switches

by deduction I guess catalyst have one forwarding database per VLAN. Anybody came to the same conclusion -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.

[c-nsp] cisco-avpair for ifc delay

Hello, Does anyone have handy the cisco-avpair for tuning an interface delay via Radius? Like: Cisco-AVPair: "lcp:interface-config=bandwidth 5632" (It it exist at all). (tried "lcp:interface-config=delay 2000" with no luke) TIA. -- Philippe Strauss av. de Beaulieu 2

Re: [c-nsp] Soft Reconfiguration In?

ou're really scarce on bandwidth (I1 = T1??). regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Soft Reconfiguration In?

That's "route refresh capability" and it needs support of the BGP implementation of your *PEER* router, not "yours". But it's supported since quite a while, you can check with: sh ip bgp neigh regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch _

Re: [c-nsp] cpu usage of a 7200 npe-g2: disapointed

On Mon, Sep 03, 2007 at 01:15:45PM +0200, Christophe Fillot wrote: > Philippe Strauss a écrit : > > Hello, > > >We replaced a 7200 NPE400 with a NPE-G2 recently and are disapointed > >by the CPU usage: this router switches ~80kPPS in+out (~180Mbps), it > >was peak

[c-nsp] cpu usage of a 7200 npe-g2: disapointed

12.2.16-is any comment on this? -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail

[c-nsp] lots of input errors & ignored

, 0 CRC, 0 frame, 0 overrun, 27965 ignored <--- !!! 0 watchdog 0 input packets with dribble condition detected 2751492 packets output, 909061474 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost ca

Re: [c-nsp] cisco VPN client to an IOS router: sending ALL traffic thru the VPN

oops forgot IOS version: c870-adventerprisek9-mz.124-11.T2 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] cisco VPN client to an IOS router: sending ALL traffic thru the VPN

ip any any log access-list 106 remark VPN POOL (for pol routing) access-list 106 permit ip 192.168.2.0 0.0.0.255 any dialer-list 1 protocol ip permit ! route-map VPN-OUT-NAT permit 10 match ip address 106 set interface Loopback0 ! tried with no luck: ! set ip next-hop 192.168.254.1 ! --

Re: [c-nsp] Configure two AS on one BGP router

wo ASes on one BGP router? If > > it's possible, > > how many feeds we are going to receive from an ISP peer? One or Two? > > > > Thanks, > > > > Alex I recall seeing a new feature, if my memory serves well in 12.4, named something like BGP AS migration. Don&

[c-nsp] cisco MST pre-standard

pre-standard" seemed necessary on the 2960g ports towards the 2950's. What's the difference between cisco pre-standard implementation and the standardized one? regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch __

[c-nsp] enabling ICMP inspection on ASA

LICY global -- Anyone more experienced can confirm or modify my config? Thanks! -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp arch

Re: [c-nsp] OSPF Problem

There is no problem pinging across both interfaces etc. but OSPF will > not come up at all multicast filtered out by the DSL modems? Have you tried to bring up OSPF adjacencies with "neighbor" statements? regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] 7200s and fastethernet aggregator ?

l CPU design, but we never know. Also, the bottleneck in the 7200 seems to be the PCI bus latency for small packets. How about the 7304? What is the bus used on those beast? regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___

[c-nsp] netsol https login problem thru a pix

ntered and try again." (I hate network "solutions" :) regards. -- Philippe Strauss av. de Beaulieu 25 1004 Lausanne http://philou.ch ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cis