Re: [c-nsp] Cisco TAC issues - can someone from Cisco enlighten meon this?

2009-09-21 Thread Raul Lopez Nevot
Oh, you are not alone! Greg Ferro has defined it: http://etherealmind.com/network-dictionary-tacrathon/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/c

Re: [c-nsp] Performance Of www.cisco.com

2008-09-25 Thread Raul Lopez Nevot
Suspicious... I can't believe that... maybe 'defaced' ? 2008/9/25 Irena Nikolova <[EMAIL PROTECTED]> > And also without "t"s for some reason :) > > Irena > > > 2008/9/25 Tassos Chatzithomaoglou <[EMAIL PROTECTED]> > > > Someone heard all of you and made www.cisco.com extra-light! > > > > -- > > T

Re: [c-nsp] can cisco pix "boomerang" mail traffic?

2008-09-09 Thread Raul Lopez Nevot
Hello, On Tue, Sep 9, 2008 at 9:03 PM, Rogelio <[EMAIL PROTECTED]> wrote: > Can a Cisco PIX "boomerang" a packet--i.e. route a packet coming from the > internal network that is destined for an Internet host back into > the internal network via NAT? > > I ask because I have have email clients poin

[c-nsp] configurations

2008-07-16 Thread Raul Lopez Nevot
Hello, anybody having a AS5350 with PRI(s) and asterisk running for incoming/outgoing calls between SIP and ISDN/Analog is willing to post as5350 config and asterisk config? just to get straight to the core... ___ cisco-nsp mailing list cisco-nsp@puck.n

Re: [c-nsp] ASA or FRSW in transparent mode over qinq

2008-07-11 Thread Raul Lopez Nevot
> > Some people told me about cisco expectation for the future release... this > speeds are achieved by authorizing only the connection on FWSM, and once > authorized, passing connections to the supervisor and not on the > etherchannel (to the supervisor forwarding engine). That's how they will > m

Re: [c-nsp] ASA or FRSW in transparent mode over qinq

2008-07-11 Thread Raul Lopez Nevot
> > > As far as I heard, now a single FWSM can scale to 50Gbps if you have a > > Supervisor 720-10G-3C and don't want stateful inspection... > > The FWSM has a 6x1GB Etherchannel connection to the switch, so 50 Gbps > seems a little much. Even then, a FWSM without stateful inspection would > be a l

Re: [c-nsp] ASA or FRSW in transparent mode over qinq

2008-07-11 Thread Raul Lopez Nevot
On Thu, Jul 10, 2008 at 6:18 PM, Christian Koch <[EMAIL PROTECTED]> wrote: > but FWSM scales to 4 per chassis, which is 2000 contexts, 20gbps throughput > ..'on paper'... > As far as I heard, now a single FWSM can scale to 50Gbps if you have a Supervisor 720-10G-3C and don't want stateful inspect

Re: [c-nsp] PIX questions

2008-05-14 Thread Raul Lopez Nevot
I'm sure you can have identity nat for two machines and PAT for others. You must combine static commands with alias commands: static (dmz,outside) publicip privateip netmask 255.255.255.255 alias (outside) privateip publicip 255.255.255.255 and then you can goal PAT for other addresses with nat a

Re: [c-nsp] PIX questions

2008-05-12 Thread Raul Lopez Nevot
Hi On Mon, May 12, 2008 at 7:34 PM, Gregori Parker <[EMAIL PROTECTED]> wrote: > to enable a host on the inside to communicate with an identity NAT on > the outside...essentially the ASA would be doubling up on translations, In the past, with pix 6.3 and earlier, you achieved it with alias comma

Re: [c-nsp] FWSM - No Traceroute

2008-03-25 Thread Raul Lopez Nevot
On Tue, Mar 25, 2008 at 8:17 PM, Christian <[EMAIL PROTECTED]> wrote: > yeah why is there no traceroute command, sorrry not being clearer This question only can be answered by cisco people, but I live with cisco PIX (so then ASA and FWSM, we have a few) since version 4.4 and never was this comm

Re: [c-nsp] FWSM - No Traceroute

2008-03-25 Thread Raul Lopez Nevot
what are you meaning? why is not this command on the cli, o why they don't answer to traceroute? On Tue, Mar 25, 2008 at 7:45 PM, Christian <[EMAIL PROTECTED]> wrote: > > > why is there no traceroute on the fwsm;s? > > ___ > > cisco-nsp mailing list cis

Re: [c-nsp] Proxy ARP -- To disable, or not to disable..

2008-03-22 Thread Raul Lopez Nevot
> > Turn it off. > > To borrow off Team Cymru's secure IOS template, "Don't > pretend to be something you're not. :-)". > Disable it now. Last week we changed some networks behind a nortel contivity to be behind a FWSM / CAT6500. One of these networks is a mixture of routers and servers spreading

Re: [c-nsp] Etherchannel bundles on CAT6509 switches spanning multiple linecards

2008-02-28 Thread Raul Lopez Nevot
I think the requisite is to have X67xx cards in both linecards to group ports on them. Anyone have any experience configuring etherchannel bundles across > multiple, different linecards on a Cisco 6509 IOS based switch? For > example we have a client who would like to have 3 x 1GE copper ports on

Re: [c-nsp] FWSM, Contexts and ASA's

2008-02-13 Thread Raul Lopez Nevot
we are deploying fwsm, and that's a great environment for virtualizing fws, but beware the limitations (no routing protocols when virtualized, ...) before your purchase. I received some comments about bandwidth, now they are supporting 5.5 Gbps per blade, but cisco people says they will support up

Re: [c-nsp] pix question

2008-02-10 Thread Raul Lopez Nevot
Yes, you have to reach the console port and do show ver from console. It's always a good thing having console servers when your equipment is far from you. regards On Feb 9, 2008 5:27 PM, Afsheen Bigdeli <[EMAIL PROTECTED]> wrote: > Hmm, this happened to me a few years ago. If I recall correctly,