[c-nsp] Blocking SNMPv3 engine-id discovery [was: Re: How to disable ILMI/SNMP CSCvs33325]

2022-09-21 Thread Simon Leinen via cisco-nsp
to also address this on SNMP level. But I'm starting to have doubts that CoPP is practical for doing this. It would require users to be able to specify specific ACLs to define/refine CoPP "classes". Is that possible at all? -- Simon. signature.asc Description: PGP signature

Re: [c-nsp] How to disable ILMI/SNMP CSCvs33325

2022-09-20 Thread Simon Leinen via cisco-nsp
TM, sigh) and SNMPv3. One of SNMPv3's distinguishing features is that it DOESN'T use community strings anymore. So I'm a bit confused as to what the problem is. Is there some implicit mapping from SNMPv1/2c communities to SNMPv3 usernames/passwords? Or are the

Re: [c-nsp] v6 vrrp

2022-07-09 Thread Simon Leinen
2F0::254/64 exit-vrrp I don't claim to understand this (or the reason why the prefix length is required for non-link-local addresses. I'm sure my teammates know! Can ask them on Monday... Cheers, -- Simon. ___ cisco-nsp mailing list cisco-nsp@puc

Re: [c-nsp] 3750G Switch

2018-12-08 Thread Simon Lockhart
salk9-mz.152-4.E7.bin Is it definitely a 3750G? If so you're using the wrong image. 3750G images start c3750-, and come in ipbase/ipservices variants. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/

Re: [c-nsp] NCS-5501/NCS-5502 as border/core routers

2017-08-24 Thread Simon Lockhart
sive than the list price for the 5502SE - although I'm told by my Cisco AM that there are some 'amazing' deals to be had on the NCS-5500 range. I'll have to talk to my friendly Arista reseller again. Many thanks for the insight, Simon ___ cisco-nsp mailin

[c-nsp] NCS-5501/NCS-5502 as border/core routers

2017-08-23 Thread Simon Lockhart
, recommendations, scare stories? Does anyone understand the licensing on them? I've struggled to find any Cisco published information about what is/isn't included in each of the license options... Many thanks, Simon ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] 4x10G Etherchannel overruns

2017-03-06 Thread Simon Lockhart
ng a similar(ish) issue with a couple of WS-X6908-10G cards in a 6504 chassis with SUP2T where we're seeing fabric drops now we're pushing about 50Gbps over a 6x10G etherchannel split over the two cards. Simon ___ cisco-nsp mailing list cisco-nsp@puck.

Re: [c-nsp] Tabo Topic? Third party Maintenance

2017-01-24 Thread Simon Lockhart
ffected by any known bugs, then they offer this as a seperately chargeable service. Yes, really, they want us to pay them more money to find out how buggy their code releases are... Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/

Re: [c-nsp] Catalyst 6504-E memory reallocation

2017-01-08 Thread Simon Lockhart
is shut down, then reallocate memory to the new copy of the > Internet routing table from the new ISP? Yes, it will. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nethe

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-12-02 Thread Simon Lockhart
92160 is based on Cisco silicon (ASE3, I think). So they can't even blame Broadcom :) Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-12-02 Thread Simon Lockhart
ation MAC (i.e. after the two MPLS labels) starts with 4 or 6, yes. The Nexus 92160 is being used as purely a L2 switch. It doesn't even support MPLS... Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listi

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-12-02 Thread Simon Lockhart
On Fri Dec 02, 2016 at 03:16:17PM +0200, Mark Tinka wrote: > Remind me - are you running the Nexus 9000 as a PE router, or as a basic > Layer 2 Ethernet switch? Basic Layer 2 Ethernet switch, sat between two of my MPLS P routers. The Nexus 9000 does not support MPLS.

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-12-02 Thread Simon Lockhart
On Wed Nov 23, 2016 at 12:01:20PM +, Simon Lockhart wrote: > On Fri Nov 04, 2016 at 03:40:05PM +0000, Simon Lockhart wrote: > > To me, everything *looks* right, it's just that some VPLS traffic traversing > > the new link gets lost. > > For those who are interested... >

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-11-23 Thread Simon Lockhart
On Wed Nov 23, 2016 at 12:07:26PM +, James Bensley wrote: > Yep. This is why I always use the control word. Turn it on and your > problem will probably go away. If only. Extreme EXOS doesn't support control word :( (Or, at least, I've not found the right knob to turn yet)

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-11-23 Thread Simon Lockhart
On Fri Nov 04, 2016 at 03:40:05PM +, Simon Lockhart wrote: > To me, everything *looks* right, it's just that some VPLS traffic traversing > the new link gets lost. For those who are interested... Well, I finally got to the bottom of this, and have pushed it to Cisco TAC for

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-11-11 Thread Simon Lockhart
On Fri Nov 04, 2016 at 03:40:05PM +, Simon Lockhart wrote: > Anyone got any suggestions on what I should look for whilst troubleshooting > this? Well, having got myself to a point where I could reliably reproduce the problem, I think I've narrowed down the issue... On the 100G on the

[c-nsp] Wierd MPLS/VPLS issue

2016-11-04 Thread Simon Lockhart
he impact to traffic, I have to make any changes within a maintenance window, but I've run out of ideas of things to try or look for. Many thanks, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cis

Re: [c-nsp] Router 6504E - SUP 720 3B XL

2016-07-18 Thread Simon Lockhart
ter to import. If you're doing full BGP, you will find the SUP720-3BXL slow, but if you can cope with that, and are careful with your RAM usage, then it'll work. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mail

Re: [c-nsp] Can you upgrade WS-X6908-10G-2T to -2TXL?

2016-05-04 Thread Simon Lockhart
it's fine, I'd not accept the same from the 3rd party partner, as when we move onto another support partner in the future, they'd be under no obligation to honour the agreement. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.n

[c-nsp] Can you upgrade WS-X6908-10G-2T to -2TXL?

2016-05-04 Thread Simon Lockhart
his is just cosmetic and because the DFC4-EXL isn't what was shipped with the original card, but I'm not happy, so pushing for them to supply a card which doesn't have this warning. Has anyone done this before? Anyone seen this before? Simon ___ cisco-nsp mai

Re: [c-nsp] C6509 Fabric Switch Capacity

2016-01-13 Thread Simon Lockhart
isco camp of performance testing :) Yes, under ideal conditions you can probably get close to linerate on them, but stick general Internet traffic through them, and you won't. I believe it's a limitation on PPS, so jumbo frames are what let you fill the port

Re: [c-nsp] C6509 Fabric Switch Capacity

2016-01-13 Thread Simon Lockhart
ports on each, so on paper it's not oversubscribed. However, you'll be lucky to get more than about 25Gbps aggregate throughput through the blade. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cis

Re: [c-nsp] Cisco 10G gear

2015-01-17 Thread Simon Lockhart
that I get the correct kit from the start. These toys aren't cheap :-( Wait until you want 40G or 100G - then you'll realise that 10G stuff is cheap :) Simon -- Simon Lockhart | * Server Co-location * ADSL * Domain Registration * Director| * Domain Web Hosting * Connectivity

Re: [c-nsp] Cisco 10G gear

2015-01-17 Thread Simon Lockhart
two or three 4-Port 10GE cards would do. That's per 6704 card. In aggregate, we were probably doing close to 100Gbps of traffic through a 6509 chassis, but only because traffic was flowing over it several times. Simon ___ cisco-nsp mailing list cisco

Re: [c-nsp] ASR vs 6807

2014-11-27 Thread Simon Lockhart
). Simon On Thu Nov 27, 2014 at 11:05:18AM +, R LAS wrote: Hi Simon can you detail more ASR9k can be more flexible on EoMPLS (VPLS) than 6807 ? Regards Date: Thu, 27 Nov 2014 10:26:55 + From: si...@slimey.org To: dim0...@hotmail.com CC: cisco-nsp@puck.nether.net Subject

Re: [c-nsp] ASR vs 6807

2014-11-27 Thread Simon Lockhart
or Linecards that are available today (current limit is 80G/slot). Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Exactly how bad is the 6704-10GE?

2014-10-08 Thread Simon Lockhart
more capable card. Many thanks in advance, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Understanding ASR1k / ESP40 capacity

2014-10-06 Thread Simon Lockhart
)? Many thanks, Simon On Sat Oct 04, 2014 at 11:56:45AM -0400, Pete Lumbis wrote: It would be a single pass through the QFP. The SIP could also be a limiting factor, but since you are split between SIPs that shouldn't be an issue. The SIP 40 has 2x 40Gig lanes on the backplane. Are you doing

[c-nsp] Understanding ASR1k / ESP40 capacity

2014-10-04 Thread Simon Lockhart
above. If I poll ceqfpUtilProcessingLoad by SNMP, I see peaks of around 65%, which would correlate with this level of throughput. I'm assuming there are others of you using this platform. What sort of throughput are you seeing? Am I right, or is the Cisco TAC engineer? TIA, Simon

[c-nsp] Cisco 9k TenGig interface Output drops

2014-06-08 Thread Simon Allard
packets 0 output errors, 0 underruns, 0 applique, 0 resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Cheers, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [c-nsp] Cisco 9k TenGig interface Output drops

2014-06-08 Thread Simon Allard
Thank you for that. Pointed at this counter incrementing. RESOLVE_L2L3_QOS_C_DROP_CNT Now to find out why! From: Darin Herteen [mailto:syn...@live.com] Sent: Monday, 9 June 2014 1:46 p.m. To: Simon Allard; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Cisco 9k TenGig interface Output

Re: [c-nsp] Determining ASR1k ESP/SIP utilisation

2014-03-17 Thread Simon Lockhart
ESP-40, how close I am to the 40Gbps aggregate switching limit. Do you know if this information is obtainable by SNMP? Can I find similar information for the SIPs? Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net

[c-nsp] Determining ASR1k ESP/SIP utilisation

2014-03-16 Thread Simon Lockhart
are running at at least 80% line speed at peak time. Is there any way to determine the utilisation levels of the SIP's and the ESP? Could I put more 10G ports in these ASR's, or will I just be oversubscribing the SIP or ESP? Many thanks, Simon

Re: [c-nsp] ASR9k/IOS-XR BNG for IPoE (DHCP) help

2013-06-07 Thread Simon Lockhart
. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] ASR9k/IOS-XR BNG for IPoE (DHCP) help

2013-06-06 Thread Simon Lockhart
, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Terminating lots of double-tagged vlans

2013-05-29 Thread Simon Lockhart
is apparently the first platform which properly supports termination of broadband users, using DHCP, as IPoEoQinQ. I'm just waiting for the loan box to arrive to prove it in the lab. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https

Re: [c-nsp] Sup2T / EARL8 Netflow oddities

2013-05-05 Thread Simon Leinen
seconds] [Duration: -4194.1 seconds] [Duration: -4194.05000 seconds] [Duration: -4194.05000 seconds] [Duration: -4194.05000 seconds] [...] -- Simon. ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] Cisco AnyConnect VPN Client

2013-05-01 Thread Thomason, Simon
Where are you getting this information from? As of 8.4 they redid the licensing for anyconnect and also added ikev2 ipsec to the anyconnect suite unless I missed something. If you can get pics [cid:image001.png@01CC9AD5.10537C00] -Original Message- From:

Re: [c-nsp] Latest Nexus 5k NX-OS?

2013-05-01 Thread Thomason, Simon
Thanks Simon Thomason Network Engineer 2649 Logan Road Eight Mile Plains, QLD, 4113 PO Box 4 Springwood, QLD 4127 T +61 7 3361 2359 F +61 7 3841 1048 E simon.thoma...@racq.com.aumailto:simon.thoma...@racq.com.au W racq.com http://www.racq.com.au[cid:image001.jpg@01CC2B42.71ED1320]http

[c-nsp] Terminating lots of double-tagged vlans

2013-04-17 Thread Simon Lockhart
for people to solve, so how do others sort it out? The devices I'd typically use include Cisco 6500/SUP720, ME3600, ASR1k, and smaller stuff like the 3750/3560. Any suggestions? Many thanks, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Terminating lots of double-tagged vlans

2013-04-17 Thread Simon Lockhart
On Wed Apr 17, 2013 at 12:57:05PM -0700, Bruce Pinsky wrote: Simon Lockhart wrote: What I'd come up with is that I'd ignore the inner tags, and just use the outer S-Tag to put the properties into subnets (one per S-Tag), and then just do DHCP. However, I'm not quite sure how I'd achieve

Re: [c-nsp] High CPU utilization on sup720 with GRE

2013-03-24 Thread Simon Lockhart
is running at around 30%. I'd probably start by looking at MTU - is this box having to do a lot of fragmentation? That will kill the CPU very quickly. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

[c-nsp] Linecard issue after upgrading Sup720 to 15.1(1)SY

2013-03-23 Thread Simon Lockhart
about this in the release notes, or via google. Given that it works fine on 12.2, I don't think it's failing hardware. Could it be a hardware revision issue? (Other cards in this chassis are 2.4+) Thanks in advance, Simon ___ cisco-nsp mailing list

Re: [c-nsp] Linecard issue after upgrading Sup720 to 15.1(1)SY

2013-03-23 Thread Simon Lockhart
this one is going to have to go for a potential RMA on the card. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] ASR1004 and NAT limitation?

2013-03-22 Thread Simon Lockhart
seem to see CSCtz33305, but it'd be good to know if there's any workaround to avoid hitting this issue... Many thanks, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http

Re: [c-nsp] ASR1004 and NAT limitation?

2013-03-22 Thread Simon Lockhart
trying to source one to be able to carry out some further testing. Many thanks, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Making SUP720 cope better under BGP load

2012-12-07 Thread Simon Lockhart
for BGP performance? Many thanks in advance, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Making SUP720 cope better under BGP load

2012-12-07 Thread Simon Lockhart
. Are there any cookbooks / cribsheets for using CoPP to rate limit BGP? Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Understanding ASR1k variants

2012-10-30 Thread Simon Lockhart
for the RP, and 2 * 10GE SPAs? Many thanks, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Nexus 5596 b22hp with HP G8 issues.

2012-07-25 Thread simon thomason
Just adding to my last questions about hp and FCOE Has anyone seen anything like this? Can only get maximum 2 fabric logins per fabric from FCOE devices using Emulex 554 CNAs (have 4 servers/8 CNAs) Results from starting each server in order, 30 secs apart: Boot server 1 only – both CNAs

[c-nsp] Nexus 5596 - B22HP FCOE question

2012-07-18 Thread simon thomason
but anyone run into something like this before? Good with the LAN side not so good with the SAN. Cheers, Simon. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail

Re: [c-nsp] Nexus 5596 - B22HP FCOE question

2012-07-18 Thread simon thomason
worry) and they you get additional BIOS settings to config FCOE and then you can see the ports in DCNM. Interesting on that is not documented anywhere. If anyone is interested will do a proper write of it at some point. Cheers, Simon. On Thu, Jul 19, 2012 at 5:45 AM, John Gill johg...@cisco.com

Re: [c-nsp] Local printer will not print when connected to Cisco VPN client or checkpoint..Please help

2012-03-28 Thread Thomason, Simon
Does the printer have a default gateway as in able to see outside its own subnet? Can you ping/tracroute to it? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Quinn Kuzmich Sent: Wednesday, 28 March 2012 12:04 PM To:

Re: [c-nsp] Local printer will not print when connected to Cisco VPN client or checkpoint..Please help

2012-03-28 Thread Thomason, Simon
Sorry I am pretty certain I total miss read this one. Split tunnelling will only work if you specify what is and is not interesting traffic for the VPN and local network. Depending on what client you are using you can enable local lan access in anyconnect (not certain if there is an option for

Re: [c-nsp] 2960S IOS

2012-03-21 Thread Thomason, Simon
Always a good idea to read the field notice and current / fixed bugs in your new IOS. There might be a bug but it might not be relevant to your situation. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Elliot

Re: [c-nsp] 2960S IOS

2012-03-20 Thread Thomason, Simon
Hi John, I just upgrade our branch fleet of 2960s' to 15.0.1-SE2 if that helps. Cheers, Simon. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Elliot Sent: Wednesday, 21 March 2012 9:13 AM To: cisco-nsp Subject

Re: [c-nsp] 2960S IOS

2012-03-20 Thread Thomason, Simon
...@puck.nether.net] On Behalf Of Thomason, Simon Sent: Wednesday, 21 March 2012 9:16 AM To: 'John Elliot'; cisco-nsp Subject: Re: [c-nsp] 2960S IOS Hi John, I just upgrade our branch fleet of 2960s' to 15.0.1-SE2 if that helps. Cheers, Simon. -Original Message- From: cisco-nsp-boun

Re: [c-nsp] ASN32 in Netflow (6500 / 12.2SX)

2012-03-13 Thread Simon Leinen
they intend to backport this to older Supervisors - I suspect that these Netflow implementations are quite different internally. -- Simon. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http

Re: [c-nsp] Cisco's new 4500-X 10G Aggregation Switches

2012-02-10 Thread Simon Lockhart
forwarding-table allocations for ease of IPv4-to-IPv6 migration 122 Mpps routing for IPv6 compared to double that for IPv4. Simon On Fri Feb 10, 2012 at 03:07:43PM -0500, harbor235 wrote: I am sure it will do V6, but is the hardware optimized for V6? V6 hardware forwarding and TCAMs able

Re: [c-nsp] Cisco's new 4500-X 10G Aggregation Switches

2012-02-10 Thread Simon Lockhart
) for your openness and willingness to answer questions on this list. I find it very helpful and greatly appreciate it. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http

[c-nsp] Cisco ASA and ipads

2012-01-29 Thread Thomason, Simon
to see if the ASA would support Dot1x and does not look like they do as this might have been a different option. Cheers, Simon T Renew your membership online, simply visit http://www.racq.com.au/my_racq/make_a_payment today. Please Note: If you are not the intended recipient, please delete

Re: [c-nsp] Cisco ASA and ipads

2012-01-29 Thread Thomason, Simon
30, 2012, at 9:54 AM, Thomason, Simon wrote: have the ASA aware that the device connecting is an IPAD and heavily restrict its access. Why does being an iPad make a device somehow undesirable and deserving of heavy restrictions? It can be argued that the iPad is at least superficially more

Re: [c-nsp] Cisco ASA and ipads

2012-01-29 Thread Thomason, Simon
be done right now. -Original Message- From: Christopher J. Pilkington [mailto:c...@0x1.net] Sent: Monday, 30 January 2012 3:16 PM To: Thomason, Simon Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Cisco ASA and ipads On Jan 29, 2012, at 22:28, Thomason, Simon simon.thoma

Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-15 Thread Thomason, Simon
Do you know what the limit to vlans on flexfabric is? As we seem to be running into an issues with Vlan limits right now and depending on which person/website I ask depends on the limit. -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Cisco 5k with HP flex Fabric

2011-12-13 Thread Thomason, Simon
Tried all of these things kind of lost on this one. Waiting to hear back from HP. -Original Message- From: Håvard Staub Nyhus [mailto:hny...@gmail.com] Sent: Tuesday, 13 December 2011 11:16 PM To: Thomason, Simon Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Cisco 5k with HP flex

[c-nsp] Cisco 5k with HP flex Fabric

2011-12-12 Thread Thomason, Simon
Hi All, Has anyone run into issues with adding new vlans to a VPC for HP blades? I have just provisioned a new network to pump down to my HP blades but have run into issues on the HP farm. Currently have 12 chassis spread over 2 sites with 2 new networks (1 per site) not working at all at one

[c-nsp] Cisco Branch router needs a reboot after updating MOH

2011-12-05 Thread Thomason, Simon
8 -rw- 600 Mar 8 2010 12:46:20 +10:00 vlan.dat 9 -rw- 2795232 Dec 5 2011 18:26:24 +10:00 SampleAudioSource.ulaw.wav 10 -rw- 18294 Jan 18 2011 12:23:56 +10:00 CRN11R01-18012011.CONF 260153344 bytes total (189607936 bytes free) log Simon Thomason

Re: [c-nsp] Cisco ASR1k Slow response for show ip cache flow

2011-11-09 Thread Simon Leinen
and then filtering 99.9% of the text away by regexp. Does the ASR1k software have these kinds of options? Best regards, -- Simon. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http

Re: [c-nsp] Cisco AnyConnect VPN Client

2011-11-03 Thread Thomason, Simon
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/data_sheet_c78-527494.html VPN Protocol Choice SSL (TLS and DTLS), and IPsec/IKEv2 New in AnyConnect 3.0 * AnyConnect now provides a choice of VPN protocols, allowing administrators to use whichever protocol best fits

Re: [c-nsp] Changing VLANs

2011-11-02 Thread Thomason, Simon
You could use EEM and tcl scripts to do this. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mohammad Khalil Sent: Thursday, 3 November 2011 4:15 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Changing VLANs Hi all

Re: [c-nsp] Strange Cisco ASA5520 errors - Connection limit exceeded

2011-10-27 Thread Thomason, Simon
Sh activation-key ASA# sh activation-key Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 150perpetual Inside Hosts : Unlimited perpetual Failover :

[c-nsp] Anyconnect 3.0 client as a service.

2011-10-18 Thread Thomason, Simon
Hello all, I just wanted to know if you could start the anyconnect 3.0 client on a windows xp machine as service or system process so normal users can not ctrl + alt + del and kill the process. Cheers, Simon T Members save 1%* p.a. on car loan rates with no ongoing fees. Apply today

Re: [c-nsp] redundant Cat3560 trunk links

2011-10-09 Thread Thomason, Simon
Etherchannel? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of zaidoon h Sent: Sunday, 9 October 2011 9:52 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] redundant Cat3560 trunk links How to connect redundant Cat3560

Re: [c-nsp] sup2T software release notes have hit

2011-09-11 Thread Simon Leinen
IPv6 multicast...never seen that before] The PFC3 used the HW Netflow table for IPv6 multicast forwarding. Apparently the PFC4 supports wide enough keys so that the normal forwarding TCAM can be used for IPv6 multicast, just like for IPv4 unicast/multicast and IPv6 unicast. -- Simon

Re: [c-nsp] WARNING: Netflow Data Export Hardware assisted NAT not supported on 76xx/65xx on the same interface

2011-08-29 Thread Simon Leinen
come from people within Cisco (e.g. TMEs), well-paid consultants, or from the community. (Fortunately for you there are places like cisco-nsp with the purpose to help small financial-services institutions avoid paying expensive consultants! ;-) -- Simon

[c-nsp] WAAS Mobile client and IE7

2011-07-25 Thread Thomason, Simon
like this and whether there is a quick fix (other than stop using IE7). WAAS mobile version 3.5.2 Cheers, Simon T. Save money and avoid queues – pre-purchase discounted Ekka tickets at your local RACQ store. Visit: racq.com/entertainment Please Note: If you are not the intended recipient, please

Re: [c-nsp] sup2T software release notes have hit

2011-07-24 Thread Simon Leinen
don't see many drawbacks with that. SX got 32-bit AS numbers before SR :-P SX is even bound to have tons of marginally useful MPLS fatures, because so many enterprise networks use MPLS these days. -- Simon. ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] Cisco Nexus 2248TP interface down/inactive

2011-07-21 Thread Thomason, Simon
More information is required! What interfaces are you working on? What makes you think it is a spanning-tree issue? Logs debugs? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Renelson Panosky Sent: Friday, 22 July

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Simon Leinen
Thanks for the heads-up! There's some more technical information about the Supervisor 2T in the White Papers section: http://www.cisco.com/en/US/customer/products/hw/switches/ps708/prod_white_papers_list.html -- Simon. ___ cisco-nsp mailing list cisco

[c-nsp] Nexus 2k - host ports

2011-06-23 Thread Thomason, Simon
Hey All, Just doing a little research at the moment for some design work and I found out that you can not plug a switch into a nexus2k as all ports are host ports. I am certain a least a few people on here have had a look into this and was just wondering if there is some kind of work around?

Re: [c-nsp] Latest Nexus 5k NX-OS?

2011-06-16 Thread Thomason, Simon
I just saw this email going over the release notes now. I did not see that CSCtn94753 was fixed but only skimming over right now. Flex links looks pretty interesting along with Orphan port shutdown. -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] BGP Private-AS removal

2011-06-15 Thread Simon Allard
That only works if the private AS is originating the routes. Since the Private AS's are actually in the middle of the path that command will do nothing. I have been struck by this issue in the past, and the only way I could resolve it was to change my private AS's to publics, or originate the

Re: [c-nsp] Wireless 802.1x authentication failures

2011-06-14 Thread Thomason, Simon
Are all the clients and server in sync with time? Just out of interest. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Edward Iong Sent: Tuesday, 14 June 2011 4:53 PM To: engel.lab...@gmail.com Cc:

[c-nsp] Latest Nexus 5k NX-OS?

2011-06-14 Thread Thomason, Simon
Hey All, Was just wondering if anyone has started to use n5000-uk9.5.0.3.N1.1c.bin NX-OS? I have been advised this will fix a few issues with our monitoring solution Statseeker (nexus does not send correct snmp info to statseeker). Currently running on n5000-uk9.5.0.2.N2.1.bin so there are

Re: [c-nsp] CIsco 5548P with 2248TP

2011-06-02 Thread Thomason, Simon
Configuration would be a good starting point? I am assuming you have checked all the basic things; Plugged in and powered on? Cabled correctly (Multi or single mode cables)? Interface show fex or optic? -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] problems with 6500 and syncing sup config.

2011-06-01 Thread Thomason, Simon
To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] problems with 6500 and syncing sup config. On 06/01/2011 02:33 AM, Thomason, Simon wrote: Been getting the following error when doing a write me on a 6500. Jun 1 11:16:35.721 EST: %SYS-SPSTBY-4-CONFIG_NV_NEED_OVERRUN: Non config data present

[c-nsp] problems with 6500 and syncing sup config.

2011-05-31 Thread Thomason, Simon
what process show startup would be in the show process and have not as yet been able to find information as to which process this would be. Anyone seen this before or know of a solution? Cheer, Simon. Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and swoon over Queensland’s

[c-nsp] Nexus 5k NX-OS upgrade issues VPC access port.

2011-04-12 Thread Thomason, Simon
Hey All, Just wanted to check something off with the subject matter experts. Last night did an upgrade on my pair of nexus 5k from 5.0.2N1.1 to 5.0.2.N2.1 and ran into and issues where after one device was rebooted one of my VPC failed until the second Nexus one was upgrade. I am pretty

Re: [c-nsp] New Joiner - ME3600X and tools

2011-03-29 Thread Simon Lockhart
On Tue Mar 29, 2011 at 10:35:41AM -0700, Waris Sagheer (waris) wrote: VPLS and H-VPLS will be supported in the next release coming out in June 2011. On the ME3600X as well, or just the ME3800X? Simon ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] New Joiner - ME3600X and tools

2011-03-28 Thread Simon Lockhart
got one (so far) which I'm going to be using as an EoMPLS endpoint. It has all the features I need for that. If I wanted an ethernet access box that did L3 with IPv4 and IPv6, then I would (and do) use a 3560G (or 3560E if I need 10G). Simon ___ cisco

[c-nsp] N5K with Generic Copper sfp

2011-03-21 Thread Thomason, Simon
Hey All, Was just wondering if anyone has had much luck using generic copper sfp in a nexus 5020? I have run into an issue with a generic SFP will not bring the port up on my 5k but a Cisco one work first time. I do know that Cisco will say to use a Cisco sfp but there is a rather big price

Re: [c-nsp] N5K with Generic Copper sfp

2011-03-21 Thread Thomason, Simon
wrote: On 3/21/2011 6:22 PM, Thomason, Simon wrote: Hey All, Was just wondering if anyone has had much luck using generic copper sfp in a nexus 5020? I have run into an issue with a generic SFP will not bring the port up on my 5k but a Cisco one work first time. I do know that Cisco will say

Re: [c-nsp] flow-export to more than 2?

2011-03-15 Thread Simon Leinen
Simon Leinen writes: For l3 traffic only. Still can't export l2 ipv6 netflow data, even though the records can be viewed on the PFC. :-( I hadn't known about that particular restrictions, but there are others: * The AS number fields aren't filled in in IPv6 flows. I understand

Re: [c-nsp] flow-export to more than 2?

2011-02-27 Thread Simon Leinen
(although thankfully they can produce Netflow accounting from IPv6 traffic now). Exporting v9 data to a v4 host should be OK. Last time I looked, Simon was messing around with some v6 samplicator code, but the last update I saw on the Google Code page was almost a year ago. Right[1]. I do have UDP

Re: [c-nsp] flow-export to more than 2?

2011-02-27 Thread Simon Leinen
Nick Hilliard writes: On 27 Feb 2011, at 11:49, Simon Leinen simon.lei...@switch.ch wrote: Not much of a risk because Hank has 7600s, which don't know how to send Netflow packets over IPv6 (although thankfully they can produce Netflow accounting from IPv6 traffic now). For l3 traffic only

Re: [c-nsp] QinQ on 3550 not working?

2011-01-21 Thread Simon Lockhart
that (as the switch complained at me when I hadn't done it). I also tried it without a VRF, which didn't help either. Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail

[c-nsp] QinQ on 3550 not working?

2011-01-20 Thread Simon Lockhart
suggestions on what's going wrong? Is there a better way to acheieve what I'm trying to do? Many thanks, Simon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail

Re: [c-nsp] Ping test with DF bit and MTU / IP MTU value

2011-01-18 Thread Thomason, Simon
something here but that seems like a simple enough question and answer?!?! Cheers, Simon -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Muhammad Atif Jauhar Sent: Wednesday, 19 January 2011 12:21 PM To: cisco-nsp

Re: [c-nsp] How to limit bandwidth on CISCO switch interfaces

2011-01-05 Thread Thomason, Simon
http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a00800a3a25.shtml should cover you off. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of JA Colmenares Sent: Thursday, 6 January 2011 2:54 PM To:

Re: [c-nsp] Layer Two tunneling question (advice needed)

2011-01-03 Thread Thomason, Simon
. You might want to also have a look at OTV on the nexus 7k if you want layer2 site to site. Cheers, Simon T -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John Neiberger Sent: Tuesday, 4 January 2011 10:23 AM

  1   2   >