Re: [c-nsp] how codec transparent works?

2015-05-09 Thread Roger Wiklund
You probably want to post this in cisco-voip instead of nsp. Why are you using H323 instead of SIP? Is the 2800 a CUBE or voice gateway with TDM? Please explain the setup/call flow? Q. What is a transparent codec, and what does it do? A. The Cisco Unified Border Element transparently passes capab

Re: [c-nsp] ME3600 traffic shaping

2015-03-16 Thread Roger Wiklund
Try adjusting the buffer size: class class-default queue-limit x shape average 55000 http://www.cisco.com/c/en/us/td/docs/switches/metro/me3600x_3800x/software/release/15-3_1_S/configuration/guide/3800x3600xscg/swqos.html On Mon, Mar 16, 2015 at 9:31 PM, Aaron wrote: > I'm only seeing a

[c-nsp] Best practice WLC 5508 public guest network?

2013-10-21 Thread Roger Wiklund
Hi. I'm setting up a wireless guest network with dual stack. My concern is security, I want to protect the network as much as possible. My exp. with Cisco WLC is rather limited, but it looks like most of the security features are enabled out of the box. - Dynamic ARP Inspection - DHCP Snooping -

Re: [c-nsp] traceroute shows mpls labels...how?

2012-08-22 Thread Roger Wiklund
MPLS TTL By default mpls ip propagation-ttl is enabled in global configuration mode. This enabled user to trace the hops of the mpls router with labels as shown in above traceroute. This is because MPLS TTL field is copied from IP TTL field, on each MPLS LSR hop a TTL will be decremented. To “hid

[c-nsp] 50% intermittent packet loss on Cisco IP Phone connected to Cat4500

2012-04-05 Thread Roger Wiklund
Scenario, Cisco 6921 IP phone connected to Cat4500 with IOS 12.2(54)SG1 Port has CDP, dot1x, QoS trust enabled etc. When I ping from another subnet I get about 50% packetloss with no obvious pattern. Phone drops registration to the callmanger, releases IP and restarts, and cycles through it over an

Re: [c-nsp] Automatic response - CUCM

2012-01-29 Thread Roger Wiklund
On Sun, Jan 29, 2012 at 2:09 PM, Dario Quiroz wrote: > Hi! We need to play an audio (vacation response) when the customers call a > specific number. > How can do this? > Thanks in advance!! You probably want to sent this to the cisco-voip list. Anyway in terms of Cisco equpiment you need either

Re: [c-nsp] ASR 1002 gigethernet with subinterface config question(stupid/simple?)

2011-12-19 Thread Roger Wiklund
On Mon, Dec 19, 2011 at 4:59 PM, Iftikhar Mehar wrote: > Correct, you need an ESP mate. > > Regards, > Ifti Hehe, thanks! Makes sense! /Roger ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archi

Re: [c-nsp] ASR 1002 gigethernet with subinterface config question (stupid/simple?)

2011-12-19 Thread Roger Wiklund
On Mon, Dec 19, 2011 at 4:49 PM, Roger Wiklund wrote: > On Mon, Dec 19, 2011 at 4:44 PM, Andrew Miehs wrote: >> >> On 19/12/2011, at 4:23 PM, Roger Wiklund wrote: >> >>> Hi, >>> >>> First time configuring an ASR. WAN link is GigE with 3 tagget VL

Re: [c-nsp] ASR 1002 gigethernet with subinterface config question (stupid/simple?)

2011-12-19 Thread Roger Wiklund
On Mon, Dec 19, 2011 at 4:44 PM, Andrew Miehs wrote: > > On 19/12/2011, at 4:23 PM, Roger Wiklund wrote: > >> Hi, >> >> First time configuring an ASR. WAN link is GigE with 3 tagget VLANs. >> >> Port is UP/UP 1000-full with LX SFP. I know the link works bec

[c-nsp] ASR 1002 gigethernet with subinterface config question (stupid/simple?)

2011-12-19 Thread Roger Wiklund
Hi, First time configuring an ASR. WAN link is GigE with 3 tagget VLANs. Port is UP/UP 1000-full with LX SFP. I know the link works because we moved it from a 6500 to this new router. I cannot ping myself, I cannot ping the other end, I see no attempts of ARP etc. I have tried moving config to ma

Re: [c-nsp] traffic engineering tunnels and vrf

2011-02-14 Thread Roger Wiklund
Do you not see them if you do "show ip cef vrf x detail" Look at your prefix and then you should see next hop and MPLS labels, no indication of tunnels there? On Sat, Feb 12, 2011 at 4:17 PM, ghanem ghourme wrote: > hi, > > I have a little bit confused.we have a network of mpls traffic engineer

Re: [c-nsp] L2 Ethernet bridging over GRE issues

2011-01-28 Thread Roger Wiklund
> Do you have any nice sample config of back-to-back L2TP on Ethernet > with and without VLANs. Nevermind, I got it working. Sample config is someone else is interrested: Router A: pseudowire-class test encapsulation l2tpv3 protocol none ip local interface Loopback0 ! interface Loopback0 ip

Re: [c-nsp] L2 Ethernet bridging over GRE issues

2011-01-28 Thread Roger Wiklund
> And L2TPv3 is supported. Recent code doesn't allow a  bridge-group to be > defined on a tunnel. >> While this is possible, its ten times easier and more reliable to use >> L2TPv3. Thanks, I've never tested L2TP, but I'm familiar with GRE. Is L2TP server-client or can it be used as always up bac

[c-nsp] L2 Ethernet bridging over GRE issues

2011-01-27 Thread Roger Wiklund
I'm trying to accomplish the following: Host A - 10.10.10.10/24 | Router A | "Internet" | Router B | Host B - 10.10.10.20/24 I've setup a GRE tunnel from Router A to Router B. I've configured bridgin

Re: [c-nsp] help cisco product

2011-01-25 Thread Roger Wiklund
If you have bought the wrong equpiment due to lack of knowledge, or the reseller did not send you the correct equpiment, thats something you have to work out with the reseller. I doubt very much that Cisco will help you here. http://www.cisco.com/en/US/products/ps6120/prod_models_comparison.html#~

Re: [c-nsp] Outbound Load balancing using eBGP

2010-12-21 Thread Roger Wiklund
On Mon, Dec 20, 2010 at 10:30 PM, RAZ MUHAMMAD wrote: > Hi all, > > I would like to find out how one can use BGP to load balance outbound > traffic, while multi homed to 2 transit providers or ISPs and getting full > routing tables, no default routes? The BGP peer at the client end is a non > Cisc

[c-nsp] Cisco IOS Embedded Packet Capture

2010-12-17 Thread Roger Wiklund
I guess this may be .old but I think there may be some of you out there who might find this useful/new. Many times when troubleshooting remote locations I've said to myself that I only had a PC with wireshark and a SPAN switchport I would solve this problem. With the Cisco IOS EPC you can capture

Re: [c-nsp] BFD and no ip redirects ?

2010-12-07 Thread Roger Wiklund
On Tue, Dec 7, 2010 at 12:53 PM, selamat pagi wrote: > According to Ciscos config guide, *no ip redirects* need to be configured > for BFD > > I'm trying to understand why this is required. > > thanks, keti > ___ Before using BFD echo mode, you must di

[c-nsp] Q regarding QoS on 6500

2010-12-07 Thread Roger Wiklund
I have a simple question regarding QoS on 6500. My question is: how do I know what type of cards/interfaces I'm using (Flex WAN, OCM-WAN, LAN), and what type of QoS they support. I want to be able to determine just by looking at the card specs, like thats done in hardware and you can only use mls

Re: [c-nsp] Adjusting MTU on 802.1q links

2010-12-03 Thread Roger Wiklund
On Fri, Dec 3, 2010 at 2:49 PM, Matthew Huff wrote: > I don't know why it never occurred to me, but on 802.1q trunk links, > non-native vlans are encapsulated within 802.1q headers, therefore max > packets would have to be fragmented. On trunks that support it, should > standard practice to bum

Re: [c-nsp] SIP to ISDN Call Progress

2010-11-15 Thread Roger Wiklund
Exactly what problems are you experiencing? One way audio? No ringback? DTMF issues etc? Have you tried voice rtp send-recv? This is used for cut Through Two-Way Audio Early. Not sure it will help though. http://www.cisco.com/en/US/docs/ios/12_2/voice/command/reference/vrf_t.html#wp1076026 /Roge

Re: [c-nsp] to shape or not to shape

2010-10-11 Thread Roger Wiklund
Thanks all for your answers, My initial question may now have been that well formulated/clear. I was not asking why you need to shape on a sub-rate. I.E my first example 5meg on a 10meg link. I was asking if you benefit from shaping a 1984 to 1984, to utilize more buffers etc, to delay instead o

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
> I don't get it. Tail dropping is what you do when the queue is full, you're > delaying a lot of packets and you don't want to fill the queue any more. > Saying "we should delay packets instead of tail dropping" just doesn't make > any sense to me. Exactly, this was basically my initial response

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
> I don't get it. Tail dropping is what you do when the queue is full, you're > delaying a lot of packets and you don't want to fill the queue any more. > Saying "we should delay packets instead of tail dropping" just doesn't make > any sense to me. Exactly, this was basically my initial response

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
> In that perspective shaping to the > interface speed is rather pointless. Yeah that's what I belive also. This whole thing started with a person at my work telling me that we should shape a 1984 to 1984 just to delay packets instead of tail dropping. I just wanted to get my head around this. T

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
> Buffers are not infinite, so you might still see tail drops. Indeed, but I'm thinking if I only apply the "qos" policy-map, I switch from fifo to CBWFQ with multiple software queues, and buffers. If I on top of that do shaping, would I not utilize yet another buffer? I.E. the shaping buffer. >

[c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
I have a question I have been thinking about. Let's say we purchased a 5Mbit Ethernet Link. The physical speed of the link is 10Mbit, so we shape outbound traffic to 5Mbit, like such: class-map ef match ip dscp ef class-map af4 match ip dscp af41, af42, af43 class-map af3 match ip dscp af31, af32

Re: [c-nsp] dhcp problems with ip phones

2010-10-06 Thread Roger Wiklund
I doubt its a bug, but you can check the bugtool. Are these two Siemens IP-Phones running some other newer/older software? Do they have a fallback mode if they dont get an IP via DHCP they default to and IP, that just happens to be same range that you are providing? Have you tried factory reset on

Re: [c-nsp] neighbor remove-private-as don't work on PE-CE

2010-10-06 Thread Roger Wiklund
and make it replaced with local > ASN > but i can't do the reverse and that is what i want > > > any ideas ? > > > > On Wed, Oct 6, 2010 at 7:08 PM, Roger Wiklund wrote: > >> Have you tried local-as no-prepend replace-as. That should only show >> the lo

Re: [c-nsp] neighbor remove-private-as don't work on PE-CE

2010-10-06 Thread Roger Wiklund
Have you tried local-as no-prepend replace-as. That should only show the local-as in the path, and thus you can manipulate it that way. Regards Roger On Wed, Oct 6, 2010 at 6:23 PM, Ibrahim Abo Zaid wrote: > sorry guys , but i already tried as-override and remove private before > posting :) > >

Re: [c-nsp] Limiting Interface Traffic

2010-10-06 Thread Roger Wiklund
When we ran 3750 switches we did srr queue bandwith for egress, and policing on ingress, as mentioned earlier, you may need to increase the Bc (Burst) in order to cope with TCP sawtooth. A quick and dirty workaround if you have plenty of ports would be to create a dummy vlan, put 2 of the ports in

Re: [c-nsp] SIP not working behind NAT

2010-09-30 Thread Roger Wiklund
Good to hear, On Cisco routers, we always have to turn the sip nat OFF. But on Cisco PIX:es it must be on, don't know about the ASAs, It's a bit of trial and error on the different platforms. Regards Roger On Thu, Sep 30, 2010 at 8:55 AM, Bikash Bhattarai wrote: > After issuing no ip nat servic

Re: [c-nsp] QoS on the 2960

2010-09-23 Thread Roger Wiklund
This should work. This is the way I did bandwith management on a 3750, policing on ingress and srr-queue bandwith limit on egress. The problem with Internet users and TCP is policing. As soon as a packet exceeds the limit it drops it. And TCP has to resend, and then you have the TCP sliding windo

Re: [c-nsp] Weird Traceroute Issue to Specific Destination

2010-09-22 Thread Roger Wiklund
Have you checked the Cisco bugtool for your hardware/IOS? Regards Roger On Wed, Sep 22, 2010 at 11:20 AM, Paul Stewart wrote: > We did reboot the equipment and no difference - it's also older sup2 based > 6500 there;) > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net >

Re: [c-nsp] Weird Traceroute Issue to Specific Destination

2010-09-21 Thread Roger Wiklund
Strange indeed. I have seen a similar problem with the default route + CEF bug. But that was on C10K. You could try to add a static /32 route to the BADIP on the xx.xx.120.25 box, just to exclude some default route issue. Also to create a specific CEF entry. Have you done some ip packet debuggin

Re: [c-nsp] Two mpls provider with the same core AS# workaround

2010-09-20 Thread Roger Wiklund
No Inter-AS L3VPN. Two totally different providers, with no MPLS connection between, them. Only us in the middle via our HUB site. On Mon, Sep 20, 2010 at 2:45 PM, Roger Wiklund wrote: > 1. The providers are running L3VPN in their MPLS. We have CE sites > that run BGP to the PEs. > &g

Re: [c-nsp] Two mpls provider with the same core AS# workaround

2010-09-20 Thread Roger Wiklund
etc)? > > Arie > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Roger Wiklund > Sent: Monday, September 20, 2010 12:37 > To: Cisco-nsp > Subject: [c-nsp] Two mpls provider with the same core AS# workaroun

[c-nsp] Two mpls provider with the same core AS# workaround

2010-09-20 Thread Roger Wiklund
Hi. Scenario: Two MPLS providers, one major with bulk of the sites. one minor with ~10 sites. Both providers have the same AS# in the core, and I want to exchange routes between these providers (via our network, not directly betweent the providers). to overcome this, I thinking about some differe

Re: [c-nsp] Multiple NAT & Rerouting Web Traffic

2010-09-07 Thread Roger Wiklund
Check this link out, http://forums.whirlpool.net.au/archive/1498451 On Tue, Sep 7, 2010 at 6:57 PM, Ray Davis wrote: > Thanks for the help! > > I tried my previous test config again except with this difference... > >    ip access-list extended NAT_Exempt >    deny tcp any any eq www >    deny tc

Re: [c-nsp] Multiple NAT & Rerouting Web Traffic

2010-08-31 Thread Roger Wiklund
Which means that SNMP will never be NAT:ed on Fa0/1. Typo :) Should of course be ICMP. On Tue, Aug 31, 2010 at 4:01 PM, Roger Wiklund wrote: > Here is the NAT order of operations in a Cisco router: > > http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133

Re: [c-nsp] Multiple NAT & Rerouting Web Traffic

2010-08-31 Thread Roger Wiklund
Here is the NAT order of operations in a Cisco router: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml#topic1 I just put something together in the lab, not sure if this is what you want to accomplish, but it works like this: interface FastEthernet0/0 INS

Re: [c-nsp] Multiple NAT & Rerouting Web Traffic

2010-08-31 Thread Roger Wiklund
Here is the NAT order of operations in a Cisco router: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml#topic1 I just put something together in the lab, not sure if this is what you want to accomplish, but it works like this: interface FastEthernet0/0 INS

[c-nsp] Slight OT, IPv6 books recommendation.

2010-08-26 Thread Roger Wiklund
I know this is a bit OT but I was wondering if someone can recommend a good IPv6 book. I have a basic knowledge, running IPv6 at home on my OpenBSD computer using Hurricane Electric as a tunnel broker. So I have a /64 for my clients, pointers with reverse DNS and that works just fine and dand

Re: [c-nsp] 0/0 into an ipv4 vrf

2010-08-26 Thread Roger Wiklund
You should be able to advertise a default route in both global- and VRF table. As Phil said with the default-information originate/redist static or if you want to unconditionally advertise a default route use the "neighbor a.b.c.d default-originate" With this command you don't need to have a defau

Re: [c-nsp] problems with NAT

2010-08-23 Thread Roger Wiklund
Strange, I would start by simplifying the NAT to a very basic level. Skip the pool and just to overload directly to fa0/0. something like: ip nat inside source list 10 interface fa0/0 overload access-list 10 permit 10.0.0.0 0.255.255.255 access-list 10 permit 172.20.1.0 0.0.0.255 if that works

Re: [c-nsp] Voice and nat

2010-08-21 Thread Roger Wiklund
I would mirror desired ports in the switch(LAN, WAN)hook up a PC and run wireshark. Make a call from/to the wireless clients and capture the data, in the SIP Invite scroll down to the SDP, you will see the IP address used for the RTP stream, also you should see you will see the flow there. Ensure

Re: [c-nsp] bandwidth statement on interface to match shaped value?

2010-07-01 Thread Roger Wiklund
-any) >> 2743948 packets, 368861980 bytes >> 5 minute offered rate 0 bps, drop rate 0 bps >> Match: ip dscp ef (46) >>2743948 packets, 368861980 bytes >>5 minute rate 0 bps >> Queueing >>Strict Priority >>

Re: [c-nsp] bandwidth statement on interface to match shaped value?

2010-07-01 Thread Roger Wiklund
you > are using EIGRP and want it to reflect the true bandwidth of the link, then > yes. Else it does not matter. > > -Ben > > > On Jul 1, 2010, at 10:43 AM, Roger Wiklund wrote: > > Hi >> >> When using a physical interface of 100meg with an outbound policy-map

[c-nsp] ISDN PRI to SIP in 2811, RTP fails one way AFTER first DTMF is sent?

2010-07-01 Thread Roger Wiklund
Hi I have a very strange issue. Using a Cisco 2811 router with PRI connecting to customers PBX. SIP trunk towards Verizon. Incoming and outgoing calls are working just fine, using G.729 codec. DTMF RFC288 configured, and I can see in the SIP invites and 200ok messages that it is indeed using RFC2

[c-nsp] bandwidth statement on interface to match shaped value?

2010-07-01 Thread Roger Wiklund
Hi When using a physical interface of 100meg with an outbound policy-map that shapes all traffic to 30meg, should the bandwidth of the physical interface reflect the shaped value? The policy-map is also using remaining bandwidth percentage x for different classes. I would assume you want the per

[c-nsp] eBGP multihop, CE default route, using PBR instead of dynamic routing?

2010-02-08 Thread Roger Wiklund
Hi We have an MPLS customer who is running IS-IS on their LAN, and then redistributing that into BGP to our core. This was the original standard setup: PEebgp-CEebgp-CUSOMERISIS So that worked just fine, but the customer wanted the IS-IS metric to be injected into BGP MED. Th

[c-nsp] c7200, only one IP configured, seeing 2 as connected

2009-11-16 Thread Roger Wiklund
Hi I have a strange problem. I have a Serial interface with one /30 IP configure as a link network between PE and CE. interface Serial1/0 description MPLS Circuit bandwidth 34368 ip address 206.115.103.122 255.255.255.252 ip nbar protocol-discovery encapsulation ppp framing g751 dsu bandwi

[c-nsp] telnet session hangs on 6503-E

2009-10-23 Thread Roger Wiklund
Hi Im having a weird problem with telnet to a C6503-E. When telneting from the the router connected to its WAN, There is no problem at all. However, when Im telneting from my jumphost telnet session hangs after 30seconds if im lucky. Usually it hangs before I get to enter the password When debug

Re: [c-nsp] MPLS 2 Hub sites with loadsharing, same or separate AS numbers?

2009-09-02 Thread Roger Wiklund
t see that benefit. Thanks! Roger On Wed, Sep 2, 2009 at 7:01 PM, Roger Wiklund wrote: > Hi > > I have a question regarding AS numbers, whats the best solution, and > pros/cons with the different setups? > > Let say there is an MPLS provider, and one customer has a HUB-site with &g

[c-nsp] MPLS 2 Hub sites with loadsharing, same or separate AS numbers?

2009-09-02 Thread Roger Wiklund
Hi I have a question regarding AS numbers, whats the best solution, and pros/cons with the different setups? Let say there is an MPLS provider, and one customer has a HUB-site with dual CPE in the VPN. Each CE router is connected to 2 different PE routers. Behind each CE router the customer has a

Re: [c-nsp] Cisco 3560 LAN QoS egress queing shaping/sharing questions

2009-08-17 Thread Roger Wiklund
Correction! It should be 1/25th of 100meg = 4 meg. Thats really strange to have such a small limit. Found this also: http://www.gossamer-threads.com/lists/cisco/nsp/113754 Regards Roger On Mon, Aug 17, 2009 at 4:27 PM, Roger Wiklund wrote: > Hi > > Im a bit confused regarding 3560 e

[c-nsp] Cisco 3560 LAN QoS egress queing shaping/sharing questions

2009-08-17 Thread Roger Wiklund
Hi Im a bit confused regarding 3560 egress QoS. This is the default setting on a 3560, only "mls qos" is enabled globally. FastEthernet0/4 Egress Priority Queue : disabled Shaped queue weights (absolute) : 25 0 0 0 Shared queue weights : 25 25 25 25 The port bandwidth limit : 100 (Operationa

Re: [c-nsp] BGP Load balance for the uplink

2009-06-20 Thread Roger Wiklund
disable-connected-check, but it probably wont work with dmzlink-bw Regards Roger On Sat, Jun 20, 2009 at 10:42 PM, Roger Wiklund wrote: > How about just using > maximum-path x, and then do some route maps forcing only > some traffic to only use the faster link unless its down. The

Re: [c-nsp] BGP Load balance for the uplink

2009-06-20 Thread Roger Wiklund
How about just using maximum-path x, and then do some route maps forcing only some traffic to only use the faster link unless its down. Then you can loadbalance on evetyhing else but the specific traffic. Then you might get a more even utilization of the links. Or perhaps if you can try the disabl

Re: [c-nsp] 3560 cpu load question

2009-05-22 Thread Roger Wiklund
Could be broadcast storms, configure a filter on desired interface with the storm-control command. You can set thresholds for unicast, multicast and broadcast. Regards On Fri, May 22, 2009 at 11:49 AM, Peter Rathlev wrote: > On Thu, 2009-05-21 at 16:20 -0700, Cord MacLeod wrote: > > It sits in