Re: [c-nsp] STP and PVST..

2017-04-20 Thread Sebastian Wiesinger
* Gert Doering [2017-04-20 16:19]: > Hi, > > On Thu, Apr 20, 2017 at 12:10:21PM +, Scott Granados wrote: > > Oh boy, I???ve seen that 253 VLAN thing bite a big customer in the > > back side. You add number 254 and whammo! > > What exactly happens then? (We currently only use juniper at

Re: [c-nsp] STP and PVST..

2017-04-20 Thread Sebastian Wiesinger
* Gert Doering [2017-04-20 11:03]: > Hi, > > On Wed, Apr 19, 2017 at 07:20:58AM -0400, Catalin Dominte wrote: > > Yes, until you realise that Cisco MSTP does not talk to Juniper MSTP for > > some odd reason! :) > > Fortunately Juniper does RPVSTP :-) - much less annoying than MST. (unless you h

Re: [c-nsp] having a one-way vlan 1 stp issue....

2012-09-07 Thread Sebastian Wiesinger
* Aaron [2012-09-04 23:39]: > ce2 can't see ce1's stp config bpdu's. > > > > vtp and cdp are working however. > > > > ce2 and ce1 are connected via a mpls l2vpn (vpws)via me3600x and asr9k. Hi, is your native VLAN tagged on the link? You might be suffering from CSCta17209. Try turni

Re: [c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-23 Thread Sebastian Wiesinger
Hello List, sorry for the long delay but here is the solution to this riddle. It turns out this problem was caused by a faulty supervisor engine. As soon as we switched to another SUP720 the problems all went away. We then ran a full diagnostic on the faulty SUP720 which lasted 5 hours and showed

Re: [c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-09 Thread Sebastian Wiesinger
* Christian Meutes [2012-08-09 16:49]: > Hi Sebastian, > > maybe due to load-sharing 10.1.66.51 takes other path back than 10.1.66.84? > So maybe one hop is missing a route or has a wrong one? > Just tapping in the dark because I didn't saw working traceroute forward and > backward. Hello, th

Re: [c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-09 Thread Sebastian Wiesinger
* Phil Mayers [2012-08-09 11:28]: > On 08/08/2012 08:07 PM, Sebastian Wiesinger wrote: > >* Xu Hu [2012-08-08 18:30]: > >>Are this routes all running in the ospf and bgp at the same time? If yes, > >>it is a normal behaviour. > > > >Hello, > > >

Re: [c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-09 Thread Sebastian Wiesinger
* Randy [2012-08-08 21:35]: > ...also curious: > > If there is a discrepancy between "sh ip cef " and "sh ip > cef internal" for prefixes in question. Here is the working prefix: $ ping 10.1.66.51 PING 10.1.66.51 (10.1.66.51) 56(84) bytes of data. 64 bytes from 10.1.66.51: icmp_req=1 ttl=60 ti

Re: [c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-09 Thread Sebastian Wiesinger
* Xu Hu [2012-08-09 07:56]: > How often is the flapping? 60s? No, random. Sometimes it takes hours for it to flap. Then it stays up for hours again.. Regards Sebastian -- GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? P

Re: [c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-08 Thread Sebastian Wiesinger
* Xu Hu [2012-08-08 18:30]: > Are this routes all running in the ospf and bgp at the same time? If yes, it > is a normal behaviour. Hello, as Gert pointed out, the networks are connected (I also have another network, which is a static route (redistributed into OSPF), which is showing the same b

[c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-08 Thread Sebastian Wiesinger
Hello, I'm having a strange problem with a Cisco 6500/SUP720 running 12.2(33)SXJ3. Currently we're testing this router in the lab. We have one OSPF connection to the outside and iBGP enabled. As soon as I enable the iBGP i get really strange effects: I have 10.1.66.0/25 connected to a SVI (Vlan

Re: [c-nsp] Filtering Layer 2 Multicasts on 6509

2011-02-01 Thread Sebastian Wiesinger
* Tóth András [2011-01-28 00:13]: > Hi Sebastian, > > Unfortunately the Command Reference was showing an old information. > There was an enhancement fix in 12.2(46)SG to enable the 'access-list > hardware capture mode' command on Sup6 as well, so you can enable it > vlan capture mode. > > By the

Re: [c-nsp] Filtering Layer 2 Multicasts on 6509

2011-01-24 Thread Sebastian Wiesinger
* Tóth András [2011-01-22 00:04]: > Hi Sebastian, > > There is a solution for your problem for 4500 switches which is called > per-vlan capture mode. You can enable it with the 'access-list > hardware capture mode vlan' command. This will make sure special > multicast traffic is punted to CPU onl

Re: [c-nsp] Filtering Layer 2 Multicasts on 6509

2011-01-20 Thread Sebastian Wiesinger
* Pete Lumbis [2011-01-20 22:26]: > Devin, > > I did a bunch of testing and checking in the lab and here is the scoop: > Any multicast mac that is received on an SVI will be punted. The short > reason is because we only look for the "01" in the MAC to indicate > that this is multicast then we flo

[c-nsp] Catalyst 4500-E ROMMON Upgrade Caveat

2011-01-17 Thread Sebastian Wiesinger
Just a quick warning for people trying to upgrade a Cat4500-E with SUP6-E to 12.2(54)SG. The release notes for Cat4500 http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/release/note/OL_5184.html state that you need a new ROMMON (12.2(44r)SG5) when installing the new IOS on a SUP6-E. There

Re: [c-nsp] BGP default route only

2010-07-23 Thread Sebastian Wiesinger
Hi Stephane, * Stephane MAGAND [2010-07-23 12:07]: > I want create a BGP session from the second to the first > but i want sent only the defaut route, not the full table. > > On the big, i have: > > > router bgp XXX > neighbor 78.xx.xx.xx remote-as 3xxx > neighbor 78.xx.xx.xx update-source G

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Sebastian Wiesinger
* Drew Weaver [2009-11-24 17:34]: > I've been having some issues with queue drops/CLI sluggishness on a > 6500 and I wanted to check what kind of volume of traffic I was > getting punted to the RP. > > I made a span session and began checking out the traffic with > tethereal. > > It seems like a

Re: [c-nsp] is L2TPv3 right for me?

2009-11-01 Thread Sebastian Wiesinger
* Church, Charles [2009-10-31 18:59]: > Hey all, > > destinations are sent across, etc)... The link provided will > be gigabit, but with encryption overhead, probably need at > most 900 mbit throughput, mostly using full-size frames as > traffic will be mostly migration d

Re: [c-nsp] In Service Software Upgrade

2009-10-08 Thread Sebastian Wiesinger
* Manu Chao [2009-10-08 15:32]: > ISSU not possible on 7600 platform (possible on CRS-1, ASR 9000, Nexus 7000) It certainly is, I used it on an 7606/3B-XL to upgrade from SRB5 to SRB5a. Didn't work very good but it worked. Regards, Sebastian -- New GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450

Re: [c-nsp] Same VLAN in more than one MST Region

2009-08-15 Thread Sebastian Wiesinger
* Lawrence Wong [2009-08-15 10:09]: > While the docs stated that a VLAN can only exist in one instance in > a region, I've not come across a doc which says that the same VLAN > cannot exist in more than one region. > > i.e. > > Region A, instance 0: Vlans 1 - 4094 > Region B, instance 0: Vlans 10

Re: [c-nsp] Non-Cisco SFPs (i.e. Finisar) in TwinGig modules on a 4900M?

2009-06-09 Thread Sebastian Wiesinger
* Mark Zipp [2009-06-09 09:33]: > Hi, > > Does anybody know if the 'service unsupported-transceiver' command is > supported on the 4900Ms? We're intending to use Finisar 1000BaseLX > SFPs. I can confirm this: NAME: "Converter 3/2", DESCR: "Converter Module" PID: CVR-X2-SFP, VID: V01 ,

Re: [c-nsp] Cisco 4900M and QinQ

2009-02-10 Thread Sebastian Wiesinger
* Łukasz Bromirski [2009-02-10 00:16]: > On 2009-02-09 13:45, Sebastian Wiesinger wrote: > >Hi, > > > >has anyone a working QinQ tunnel on a Cisco 4900M? I tried it in the > >lab with 12.2(50)SG Enterprise Services SSH and it didn't work. > > QinQ on 4900M a

[c-nsp] Cisco 4900M and QinQ

2009-02-09 Thread Sebastian Wiesinger
Hi, has anyone a working QinQ tunnel on a Cisco 4900M? I tried it in the lab with 12.2(50)SG Enterprise Services SSH and it didn't work. Setup like this: [Node 1]---trunk---[4900M]===dot1q-tunnel===[3550]---trunk---[Node 2] l2protocol-tunnel enabled for cdp/stp/vtp The symptoms were: Node 1 h

[c-nsp] 4500E/SUP6-E uRPF counters

2008-10-08 Thread Sebastian Wiesinger
Hello, I activated and tested the uRPF feature on a Catalyst 4500E with SUP6-E. It works fine but the RPF drop counters don't work and stay at 0 packets. IOS is 12.2(46)SG. Drop: 13800605 encapsulation failed, 0 unresolved, 0 no adjacency 1012 no route, 0 unicast RPF, 0 forced drop

[c-nsp] High CPU on Cisco 4500-E / SUP6-E, K5L3* processes

2008-09-24 Thread Sebastian Wiesinger
Hello, we installed a few Cisco 4500-E with SUP6-E supervisors. Now one of them is showing a high CPU load, around 60-70%. I'm unable to find the reason for this. It's running 12.2(46)SG Enterprise Services. sh proc cpu shows that the "Cat4k Mgmt LoPri" process is taking most of the CPU time: 49

Re: [c-nsp] CoPP Hardware Counters on RSP720/7600

2008-09-22 Thread Sebastian Wiesinger
* Ozgur Guler <[EMAIL PROTECTED]> [2008-09-22 14:31]: > Hi Sebastian, > > Have you confirmed that mls qos is enabled globally? > CoPP needs mls qos in order to work in HW. Yes, "mls qos" is enabled. I tried doing a flood-ping with hping3 and have around 30-40% of CPU usage. This seems a little b

[c-nsp] CoPP Hardware Counters on RSP720/7600

2008-09-20 Thread Sebastian Wiesinger
Hello, I'm implementing a control plane policy for a 7600/RSP720 box. In this policy I have a class-map which matches icmp packets and polices them. That works fine, when I flood-ping the box there are icmp packets lost when the policer drops packets. The only thing that bothers me is that the har

[c-nsp] Why do I have to specify "allow-default" uRPF option on 4500-E?

2008-09-08 Thread Sebastian Wiesinger
Hello, I have a Cisco 4500-E / SUP6-E switch on which I want to configure uRPF. I tried to enable it and got the following message: re1-new(config-if)#ip verify unicast source reachable-via rx % ip verify configuration not supported on interface Vl13 - must specify allow-default With the all

[c-nsp] Netflow + Subinterfaces 7200 -> 7600

2008-08-27 Thread Sebastian Wiesinger
Hi, I'm replacing a few 7200(NPE-G1) with 7600(RSP720) and I'm wondering what would be the best way to do netflow accounting with Vlans on the new platform.'m replacing a few 7200(NPE-G1) with 7600(RSP720) and I'm wondering what would be the best way to do netflow accounting with Vlans on the new

Re: [c-nsp] WS-X4506-GB-T Ports not connected

2008-08-26 Thread Sebastian Wiesinger
* Sebastian Wiesinger <[EMAIL PROTECTED]> [2008-08-26 12:30]: > Hello, > > I'm having a little problem here with a new Cisco 4510R-E. It's > running the following configuration: Problem solved. Someone hinted that I should not assume that the linecard does have

[c-nsp] WS-X4506-GB-T Ports not connected

2008-08-26 Thread Sebastian Wiesinger
Hello, I'm having a little problem here with a new Cisco 4510R-E. It's running the following configuration: Mod Ports Card Type Model ---+-+--+- 5 6 Sup 6-E 10GE (X2), 1000BaseX (SFP) WS-X45-SUP6-E

Re: [c-nsp] Differences between cisco 7606 and 7606-s

2008-01-21 Thread Sebastian Wiesinger
* Ultra <[EMAIL PROTECTED]> [2008-01-21 16:39]: > Can anyone explain me the differences between the Cisco 7606 and the > Cisco 7606-s? > > I can¡t see it in the documentation I downloaded from cisco.com http://www.cisco.com/en/US/prod/collateral/routers/ps368/ps371/product_data_sheet0900aecd8057f

[c-nsp] Heads up: "sh ip bgp regexp" crashing router

2007-08-17 Thread Sebastian Wiesinger
It seems that there is a regexp which will crash routers running IOS when executed. For details see: http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=WAN%2C%20Routing%20and%20Switching&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1ddf7bc9 (germa