Re: [c-nsp] DDOS Attacks Mitigation

Samir, You'll run your inbound traffic through the mitigation provider, generally by letting them preempt your announcements with their own (containing your IP space.) I find that tweaking communities and AS-paths on my announcements to try and accommodate this behavior to be a little bit tedious

[c-nsp] N1KV woes

Hi everyone, Not sure how many folks have experience with the Nexus 1000v, but wanted to throw this out to the group to see if anyone has conquered this before. I am fresh out of ideas, and the TAC rep I am talking with right now is scratching his head in confusion as well. Version is 4.0(4)SV1.2

Re: [c-nsp] Odd behavior: OSPF on a physical port of an SVI

Hi Rick, Was wondering if you did any ospf debugs (adj, packet)? Did it show anything interesting? Any output on the 7500 with sh ip ospf nei? How about the ones you say see it? What state is the relationship? On Thu, Mar 4, 2010 at 1:25 PM, Rick Ernst wrote: > I can't even think of what the m

[c-nsp] 6513 config register... scratching head a little.

Hi all, I'm in the process of migrating a 6513 from a Sup2 to a Sup32, and I've found myself in a bit of a funny situation where I'm questioning the boot config on a device for rollback planning. This is probably a very easy one, but I'm just a bit uneasy about this particular chassis. Basically

Re: [c-nsp] training classes

FWIW, for instructor-led classes, I have heard recommendations for Firefly and GlobalKnowledge. I can't personally vouch for either, so I'll maybe let someone follow up to this with their relevant testimony. :) As for which style, I think it's more of an individual preference as to which environme

Re: [c-nsp] SecureACS Appliance & AD Authentication

rom: cisco-nsp-boun...@puck.nether.net [mailto: > cisco-nsp-boun...@puck.nether.net] On Behalf Of Ryan Lambert > >Sent: lunedì 1 marzo 2010 17.48 > >To: Saxon Jones > Cc: cisco-nsp@puck.nether.net > >Subject: Re: [c-nsp] SecureACS Appliance & AD Authentication > > >

Re: [c-nsp] SecureACS Appliance & AD Authentication

ll-free: (866) 701-8022 x2 > United Kingdom: 0(1315)168664 > > > > On 1 March 2010 08:17, Ryan Lambert wrote: > >> We've only got a handful of folks accessing certain devices, and the >> permissions are relatively static. Nothing fancy going on here. >&

Re: [c-nsp] SecureACS Appliance & AD Authentication

We've only got a handful of folks accessing certain devices, and the permissions are relatively static. Nothing fancy going on here. After some tinkering I've been able to get them talking with ACS. The only issue I'm running up against is that if the external DB fails out, I'm unable to authentic

[c-nsp] SecureACS Appliance & AD Authentication

Hi everyone, Figure this is as good a place as any to reach out and see if anyone has some experience with this. I'm currently debating whether I use LDAP or a Remote Agent for Windows with my SecureACS Appliance to authenticate network users via AD. I've read through the documentation a bit, but

Re: [c-nsp] Renumbering serial interfaces

You can renumber serial links with one person. Standard disclaimer of paying attention to detail, being careful, etc. If you can tolerate a few minutes downtime worst-case (which, I'm making the assumption this is being done in a window that can), you can also use the 'reload in x' command, where

Re: [c-nsp] Interesting 7206 behavior

for discussion come Monday. Thanks again! -Ryan -Original Message- From: Arie Vayner (avayner) [mailto:[EMAIL PROTECTED] Sent: Saturday, August 23, 2008 10:40 AM To: Ryan Lambert; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Interesting 7206 behavior Ryan, It seems QOS support on multilin

Re: [c-nsp] Interesting 7206 behavior

the VIP crashes. If you do this while disabled, there is no issue. Conditions: Service policy must be applied to standalone T1s Workaround: First remove the service policy from the serial member links and then add the T1's to the multilink bundle Booo. -Ryan F

[c-nsp] Interesting 7206 behavior

Running a 7206XVR with NPE-300. Code 12.0(28)S6. For what it's worth, the two T1s land on a PA-MC-2T3+. Anyone seen anything similar to this before? I took a quick peek on Cisco's site for anything relevant, but I didn't come up with much. As per usual, browsing the list of bugs managed to

Re: [c-nsp] Unable to connect VLAN traffic

Johnny, I think the better solution if your provider can accommodate, is to do Q-in-Q instead of having to dictate what tags you can use. This allows you, as Justin mentioned, to use your own tags across the circuit instead of having to coordinate with them every time you need to add another VLAN,

Re: [c-nsp] Need some guidance for T1 / wireless ethernet handoff load balancing/failover setup

Hi Scott, Hopefully I am understanding your challenge correctly. It appears to me like you're having trouble chatting dynamic routing protocols directly with the wireless network, among some other various nitty-gritty that is not "just as simple" as the SE tries to make it sound. Looking at your