Re: [c-nsp] LDPv6 Census Check

2020-06-14 Thread Christian Meutes
On Fri, Jun 12, 2020 at 10:22 PM David Sinn wrote: > Except that is actually the problem if you look at it in hardware. And to > be very specific, I'm talking about commodity hardware, not flexible > pipelines like you find in the MX and a number of the ASR's. I'm also > talking about the more re

Re: [c-nsp] LDPv6 Census Check

2020-06-12 Thread Christian Meutes
Salve, On Thu, Jun 11, 2020 at 8:08 PM David Sinn wrote: Rewrites on MPLS is horrible from a memory perspective as maintaining the > state and label transition to explore all possible discrete paths across > the overall end-to-end path you are trying to take is hugely in-efficient. > Applying ci

Re: [c-nsp] ASR920: egress ACL on BDIs

2020-01-19 Thread Christian Meutes
Hi, On Sun 19. Jan 2020 at 12:23, Gert Doering wrote: > replying to myself with a few... interesting... discoveries we've made > in the meantime... > > On Mon, Dec 30, 2019 at 11:57:54AM +0100, Gert Doering wrote: > > quick question to the group - ACLs on BDIs on ASR920s, is this something > > k

Re: [c-nsp] Sup2T multicast hardware forwarding missing

2019-10-21 Thread Christian Kratzer
Hi, On Fri, 18 Oct 2019, Łukasz Bromirski wrote: Christian, What does the 'show mls cef exception status’ say? If you want, send the SR # to my @cisco.com address (lukasz.bromirski) and I’ll look into what’s going on at the TAC end. summary to the list. This turned out to be plain ol

[c-nsp] Sup2T multicast hardware forwarding missing

2019-10-17 Thread Christian Kratzer
fine for 4 years and then broke over night. [1] We initially wanted to upgrade to 151-2.SY12 in the service window but the issu upgrade failed miserably and we had to had to hard reboot sups from the cmp. But that is another story. Any ideas ? Greetings Christian -- Christian Kratzer

[c-nsp] Add-Path Selection on IOS-XE (maybe also on other platforms)

2018-10-29 Thread Christian
Hi list, considering my following situation, which seems to me pretty ordinary: Two RRs responsible for a domain of iBGP clients. Two iBGP clients share for redundancy reasons the same customer via eBGP, sometimes also by other protocols or even just statics/connected networks of customers. Now

Re: [c-nsp] memory issue asr1002-x

2017-11-22 Thread Christian Kratzer
ture to run two IOS processes on a box splitting up memory between them. Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden Fax: +49 7032 893 997 - 9

[c-nsp] IPv6 FHS Etherchannel support for 4506/Sup7LE

2017-07-05 Thread Christian Kratzer
oadmaps for the 4506. We will be dropping port-channels for the time being to get dhcpv6 interface-id from customer ports. Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-

Re: [c-nsp] Cisco 4506 dhcpv6 interface-id, remote-id

2017-05-31 Thread Christian Kratzer
nment of static prefixes 2. logging of assignments to customers Apprently there are some new commands in IOS 3.9 that I will need to test tomorrow. Still hoping per interface user configurable interface-id or remote-id will be available on the platform soon. Greetings Christian kind regard

[c-nsp] Cisco 4506 dhcpv6 interface-id, remote-id

2017-05-31 Thread Christian Kratzer
configurable ipv6 opt18 or 37. Is a feature like this somewhere on the roadmaps for the c4506 platform ? Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden Fax

Re: [c-nsp] Typhoon support on XRe

2017-05-01 Thread Christian
od advice since the MOD200 appeared, I think. RSP440 is going EOS this summer, so not much left to chose from. :-/ -- Christian Meutes - Wiesbaden, Germany JESK-RIPE - tel:+49.176.32370305 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puc

Re: [c-nsp] Typhoon support on XRe

2017-05-01 Thread Christian Meutes
Hi Frederic, On 01/05/2017 16:02, frederic.jut...@sig-telecom.net wrote: Why dead QNX ? Dead for Cisco (seam that the automobile manufacturer are using QNX) ? Dead because of the late support of 64bits platforms ? dead because of everyone putting it's expenditures into Linux, and so also Cis

Re: [c-nsp] Typhoon support on XRe

2017-05-01 Thread Christian
Hey, On 01/05/17 15:12, Lukas Tribus wrote: Seriously? I thought only Trident cards ended support in 5.3.X. IOS XR 6.x *DOES* support Typhoon, just not in the 64-bit flavor. yeah, based on dead QNX, not with Linux and LXC architecture. -- Christian Meutes - Wiesbaden, Germany JESK-RIPE

[c-nsp] Typhoon support on XRe

2017-05-01 Thread Christian
Hi list, does someone know for sure that XRe will never support Typhoon based linecards? So XR has no future for <100G kit? Thanks Christian -- Christian Meutes - Wiesbaden, Germany JESK-RIPE - tel:+49.176.32370305 ___ cisco-nsp mailing l

Re: [c-nsp] Wierd MPLS/VPLS issue

2016-12-03 Thread Christian
test these devices intensively on all possible usecases. cheers Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] netflow real AS instead of uplink provider?

2016-06-15 Thread Christian Kildau
Do you have "bgp attribute-download" under router bgp ? Best regards, Chris On Wed, Jun 15, 2016 at 2:57 PM, Nemeth Laszlo wrote: > Hello > > I tried to get the source or destianton AS of a flow from our ASR9001 > (iosxr 4.3.1) router. > > But i got this: > > RP/0/RSP0/CPU0:asr0#sh flow monitor

Re: [c-nsp] A9K Netflow export drops

2016-06-14 Thread Christian Kildau
We also do not see any significant issues with 6.0.1. CPU load on the RSP did drop by 50% tough. That is for ASR9001 terminating a couple hundred BGP sessions. Best regards, Chris On Tue, Jun 14, 2016 at 3:58 PM, Jared Mauch wrote: > We have had no more severe issues than prior releases. Make

Re: [c-nsp] A9K Netflow export drops

2016-06-14 Thread Christian Kildau
de that you were actually losing real Netflow data or not? > Is that just bad wording on the bug? > > > > Cheers! > > > > *From:* ckil...@unixhosts.org [mailto:ckil...@unixhosts.org] *On Behalf > Of *Christian Kildau > *Sent:* 14 June 2016 13:34 > *To:* Lukas Tr

Re: [c-nsp] A9K Netflow export drops

2016-06-14 Thread Christian Kildau
Hi, bug id is CSCuz91132. Best regards, Chris On Tue, Jun 14, 2016 at 2:28 PM, Lukas Tribus wrote: > Hi Chris, > > > > Hi Robert, > > > > we've finally received clarification from TAC: > > In our case this was a bug within IOS-XR 5.3.X. > > For us, this is fixed in 6.0.1 which we wanted to upg

Re: [c-nsp] A9K Netflow export drops

2016-06-14 Thread Christian Kildau
Hi Robert, we've finally received clarification from TAC: In our case this was a bug within IOS-XR 5.3.X. For us, this is fixed in 6.0.1 which we wanted to upgrade to anyway due to extended netconf support. hth, Chris On Wed, May 25, 2016 at 5:05 PM, Robert Williams wrote: > Chris - Thanks, I'

Re: [c-nsp] IOS-XR 5.3.3 add Yang Models

2016-05-23 Thread Christian Kildau
Hi all, sorry for not replying earlier. We will continue evaluating YANG in the lab as we have now upgraded one box to 6.0.1 and there is Cisco-IOS-XR-ipvX-acl-cfg.yang. Currently we still have other issues with 6.0.1 like totally broken netflow... Best regards, Chris On Thu, May 12, 2016 at 4:

Re: [c-nsp] A9K Netflow export drops

2016-05-23 Thread Christian Kildau
Hi all, we're seeing the exact same symptoms on our all our 9001s. I have opened a TAC case regarding this issue last week. Will keep you posted! Best regards, Chris On Mon, May 23, 2016 at 6:09 PM, Christian Kildau wrote: > Hi all, > > we're seeing the exact same symp

Re: [c-nsp] IOS-XR 5.3.3 add Yang Models

2016-05-12 Thread Christian Kildau
(That last message was actually intended for the list.) On Wed, May 11, 2016 at 4:02 PM, Phil Mayers wrote: > On 11/05/16 14:56, Christian Kildau wrote: > >> >> That's pretty bad news, as the supplied models don't offer much >> functionality from what we can

[c-nsp] IOS-XR 5.3.3 add Yang Models

2016-05-11 Thread Christian Kildau
Hi cisco-nsp, we're currently experimenting with netconf/yang on IOS-XR 5.3.3 (asr9k). The out of the box supported yang models are somewhat limited. E.g. there is no model that supports editing ACLs. I have found https://github.com/YangModels/yang which lists lots of yang models, but have not ye

[c-nsp] ASR920 - Service instane

2015-12-28 Thread Danielsen . Peter Christian PED
Hello everyone, I'm trying to configure an ASR920 with service instance, this is not working as planned, in other words is not working. Scenario: CPE Router Gi0/0 <-> Gi0/0/10 ASR920 <- - -> ASR920 Gi0/0/13 <-> Te0/0/1/0 ASR9K My CPE router have a couple of sub-interfaces, that I want to conn

Re: [c-nsp] BGP multipath load balancing.. broken sessions upon hash change

2015-09-02 Thread Chase Christian
Correct, in order to have a "sticky" session, the device would have to keep the TCP session state in a table somewhere (like a NAT table), which ECMP and CEF do not do. On Wed, Sep 2, 2015 at 2:55 PM, Łukasz Bromirski wrote: > Peter, > > > On 02 Sep 2015, at 22:49, Peter Kranz wrote: > > > > I’

Re: [c-nsp] "New" IOS release time frame, when bug is identified

2015-05-15 Thread Christian Kratzer
m my experience also with other network vendors. this is the time for: immediately followed by: Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gae

[c-nsp] Cisco ACI - Unsupported/Alternativ transceiver

2014-12-14 Thread Danielsen.Peter Christian PED
Hi, I'm looking it to a project using Cisco ACI, and is curious about if I can use alternative QSFP transceivers between Spine and Leaf, the reason for going down this path is pure cost, the connection between half og the setup will be on QSFP-40G-LR4 optics, due to the distance and cables betw

[c-nsp] ME2600X FTTH design, shaping, road map questions

2014-11-28 Thread Christian Kratzer
the ports to be always on so the dumb FTU units we have deployed see gigabit frames and bring their link up. I would be happy to hear from others using or evaluatiing the ME2600X for their experiences. Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...

Re: [c-nsp] DHCPv6 accounting on ASR1000

2014-10-29 Thread Christian Schmit
Hi Chris, I have tested 3.13 in the lab yesterday and can confirm that dhcpv6 accounting is now working! As version 3.13 is quite new I hesitate to put in on our production ASR boxes. Christian From: "Chris Conn" Sent: Tuesda

[c-nsp] DHCPv6 accounting on ASR1000

2014-10-24 Thread Christian Schmit
a.b.c.d auth-port 1645 acct-port 1646 key 7 ! Is anyone running dhcpv6 accounting successfully on the ASR1k? If yes under which IOS XE version? regards, Christian ___ cisco-nsp mailing list cisco-nsp

[c-nsp] Tapping a PPPoVPDN and/or PPPoE subscriber session the ASR1000

2014-09-09 Thread Christian Schmit
mediation device is required which we do not have Any hints will be appreciated. thanks, Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail

Re: [c-nsp] traceroutes via mpls network - works for on-net but not for off-net (def rt)

2014-09-05 Thread Christian Meutes
On 2014-09-05 15:41, Aaron wrote: 123.123.144.1 is one of my l3vpn customer subnets and I can trace to it and see all my mpls p hops along the way... (mpls p boxes are 172.20.x.x) (not sure why the penultimate hop times out but perhaps that's another topic) (1) You are sure that 124.173.255

Re: [c-nsp] traceroutes via mpls network - works for on-net but not for off-net (def rt)

2014-09-05 Thread Christian Meutes
On 2014-09-04 19:16, Aaron wrote: In my network traceroute works fine for on-net (known) subnets. I can see the mpls lsr P hops. But when I traceroute to internet destinations off-net (unknown) subnets and my packets follow default routing, I do not see my mpls lsr P hops. What is the de

Re: [c-nsp] ASR1001 RAM

2014-08-12 Thread Christian Kratzer
ipv4 bgp feeds. The boxes in question have since been upgraded to 16GB with third party memory and everything is fine now. Regular experience just does not apply to this box. It just looks similar but is totally different under the hood. Greetings Christian -- Christian Kratzer

[c-nsp] No more duplex auto on Cisco 4506E WS-X4640-CSFP-E-Gbic

2014-07-30 Thread Christian Kratzer
isco. Has anybody else seen or notices this. I have not been able to find anythin in the release notes yet. Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden Fa

Re: [c-nsp] Hierarchical FIB on Cisco 7600

2014-04-26 Thread Christian Meutes
On 26 Apr 2014, at 12:50, Cydon Satyr wrote: > I see. But then is there any effect of having repair path installed with > "bgp additional-paths install" command on platform without Hierarchical > FIBs or is it purely cosmetic? Regardless of PIC through ADD-PATH you can make use of multiple pathe

Re: [c-nsp] ASR1001 tracelogs

2014-03-24 Thread Christian Deckelmann
{ $ios = "XE"; } in /usr/lib/rancid/bin/rancid Regards, Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] SPA Module compatibility

2014-02-25 Thread Christian Kratzer
f worms is of course link state detection as you also mentioned. Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden Fax: +49 7032 893 997 - 9 HRB 2452

Re: [c-nsp] SPA Module compatibility

2014-02-24 Thread Christian Kratzer
nd the carriers desire to offer various bandwidth options between 100mbit/s abd 1git/s. I just don't fully trust their shaping/policing solutions to provide the inbetween bandwidths. Old school interfaces that had configurable clock rate did the right thing (tm) out of the box. Greetings

Re: [c-nsp] Sup2T-XL vs Sup720BXL FIB TCAM

2013-11-05 Thread Christian Schmit
to be changed to accommodate more of one type of forwarding entry. For example, in the PFC4XL, the default setting provides for 512 K IPv4 entries, and this can be increased through configuration control to support up to 1 M entries if required. On Tue, 5 Nov 2013, Christian Schmit wrote: Toda

Re: [c-nsp] Sup2T-XL vs Sup720BXL FIB TCAM

2013-11-05 Thread Christian Schmit
type of forwarding entry. For example, in the PFC4XL, the default setting provides for 512 K IPv4 entries, and this can be increased through configuration control to support up to 1 M entries if required. On Tue, 5 Nov 2013, Christian Schmit wrote: Today I tested a Sup2T-XL and a Sup720BXL in the

[c-nsp] Sup2T-XL vs Sup720BXL FIB TCAM

2013-11-05 Thread Christian Schmit
output of the Sup2T-XL seems to say that the Sup2T-XL has a larger FIB TCAM (2M) than the Sup720-BXL. Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] multicast 3750X

2013-08-14 Thread Christian Kratzer
Hi, On Tue, 13 Aug 2013, selamat pagi wrote: yep, *ip multicast-routing* distributed is configured you also have the correct sdm template setup on the switch ? I assume you could not configure multicast routing otherwise. Greetings Christian cheers, keti On Tue, Aug 13, 2013 at 11:35

[c-nsp] terminating double tagged vlans on ASR1000

2013-08-14 Thread Christian Schmit
normal sub-interfaces in a future release? Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
nteed to work > just because you can configure it. > > But I'd be happy for you if I were wrong on this. > > Aled > > > On 9 August 2013 17:33, Christian Kildau wrote: > >> Well, at least there is feature bgp, ospf and ospfv3 (Altough not >> availa

Re: [c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
Well, at least there is feature bgp, ospf and ospfv3 (Altough not available with our license) But "feature hsrp" is available and I can configure it, so I think this should work?! On Fri, Aug 9, 2013 at 6:23 PM, James Ventre wrote: > On Fri, Aug 9, 2013 at 11:48 AM, Aled Morris wrote: > > You

Re: [c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
eason Active vlans -- --- -- --- -- --- 1 Po2 up success success200 2 Po3 up success success200 On Fri, Aug 9, 2013 at 5:57 PM, Christian Kildau wrote:

Re: [c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
Yes, vlan200 goes trough vpc peer-link: # show vpc Legend: (*) - local vPC is down, forwarding via vPC peer-link vPC domain id : 1 Peer status : peer adjacency formed ok vPC keep-alive status : peer is alive Configuration consi

Re: [c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
JAB1246007K On Fri, Aug 9, 2013 at 5:48 PM, Aled Morris wrote: > You do have the L3 daughter card installed in both your 5k's, right? > > I think without the card you can configure IP but HSRP won't work. > > Aled > > > On 9 August 2013 16:34, Christian Kildau w

Re: [c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
o-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of > Christian Kildau > Sent: Friday, August 09, 2013 9:33 AM > To: Rati Berikaant Jokhadze > Cc: cisco-nsp@puck.nether.net > Subject: Re: [c-nsp] Nexu 5020 HSRP issues > > sw2# sh run int vlan200 > > !Command: show run

Re: [c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
Hi , > > Please share us SW2 int vlan200 config. > > and ping result from sw1 to sw2 > > On 08/09/2013 03:52 PM, Christian Kildau wrote: >> Hi Cisco-NSP, >> >> we're having some very strange issues while adding HSRP to our Nexus 5020 >> where both HSRP

[c-nsp] Nexu 5020 HSRP issues

2013-08-09 Thread Christian Kildau
r any hint! Kind Regards Christian P.S. features are enabled of course ;-) ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Cisco Wireless VOIP IP phone issue

2013-03-28 Thread Christian Kratzer
n the wireless to force faster roaming. Wish I could find that PP. that would propably be EAP-FAST for fast reauthentication. Greetings Christian -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 99

[c-nsp] ASR1001 which memory RP1 oder RP2 ???

2013-03-22 Thread Christian Kratzer
Firmware version: 15.0(1r)S # show inventory NAME: "module R0", DESCR: "Cisco ASR1001 Route Processor" PID: ASR1001 , VID: V02, SN: xxx Greetings Christian -- Christian Kratzer CK Software GmbH Ema

Re: [c-nsp] IOS XR and router rib rump always-replicate

2013-03-06 Thread Christian Meutes
On 06.03.2013, at 09:26, Mikael Abrahamsson wrote:. > How is multicast supposed to work at all whereever for L3 routing without PIM? > > I'll admit I'm a bit rusty and only know about PIM-SM and PIM-SSM, what other > methods are there for controlling routed multicast? You need mLDP or RSVP for

Re: [c-nsp] IOS XR and router rib rump always-replicate

2013-03-01 Thread Christian Meutes
On 01.03.2013, at 13:06, "Oliver Boehmer (oboehmer)" wrote: > > > On 01/03/2013 10:58, "Mikael Abrahamsson" wrote: > >> On Fri, 1 Mar 2013, Christian Meutes wrote: >> >>> On 01.03.2013, at 10:01, Mikael Abrahamsson wrote: >>> &

Re: [c-nsp] IOS XR and router rib rump always-replicate

2013-03-01 Thread Christian Meutes
On 01.03.2013, at 10:01, Mikael Abrahamsson wrote: > On Fri, 1 Mar 2013, Christian Meutes > Do you have your sources addresses in IGP? Nope, BGP SAFI unicast. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/m

Re: [c-nsp] IOS XR and router rib rump always-replicate

2013-03-01 Thread Christian Meutes
On 01.03.2013, at 07:44, Mikael Abrahamsson wrote: > Proper way (at least it was in XR 3.6 - 3.8 time) is to put multicast sources > into BGP address-family multicast. By default, if the source is only in BGP > af-unicast then it's not considered valid for multicast RPF check in XR. Never hear

Re: [c-nsp] MPLS routed pseudowire between ASR9k and 7600 with LAN cards

2013-02-27 Thread Christian Meutes
"mtu" on IOX is L2, IOS treats it as packet mtu. -- Christian On 27.02.2013, at 07:49, Artyom Viklenko wrote: > 26.02.2013 08:13, Aivars пишет: >> >> >> interface PW-Ether555 >> >> mtu 9216 > [...] >> >> 7600: >> >&

Re: [c-nsp] pros and cons for IPTV multicast in rosen-mvpn vs GRT

2013-02-18 Thread Christian Meutes
A lot of complexity, protocol overhead, data mdt scalability, more state, more bugs, PIM pimping / RPF vector, more RPs in case of sparse-mode... If VPN is mandatory I would go MLDP if supported. -- Christian On 18.02.2013, at 16:09, Adam Vitkovsky wrote: > Hi folks, > Are the

Re: [c-nsp] stp on me3600 on efp's with locally connected older switch

2013-02-08 Thread Christian Meutes
> There isn't much you can do afaik: STP on ACs (CE-only, and consistent port > configurations / prone PVSTP), waiting for MST-AG or even MC LAG, keep away > from loop-capable ACs per L2 site. I'am really missing here s/w support for H-VPLS based setups. Currently I see no way other then runnin

Re: [c-nsp] Cat6500 odd arp behavior

2013-02-01 Thread Christian Meutes
On 30.01.2013, at 19:48, wrote: > Thanks Christian. Can you elaborate on what side effects from uRPF I need to > be aware of when using the glean HWRL? Dropped packets, especially when using stuff like eg. dhcp-relay on these boxes -> even if programmed exception ACLs with the h/

Re: [c-nsp] Cat6500 odd arp behavior

2013-01-25 Thread Christian Meutes
On Jan 25, 2013, at 10:16 PM, wrote: > Am I understanding the issue correctly? I ran into those issues back in 2008 when the CoPP docs haven't been "that" clear about the relationship between CoPP, ARP and the glean HWRL. You should mostly be safe when you enable the glean HWRL and, obviously,

Re: [c-nsp] stp on me3600 on efp's with locally connected older switch

2013-01-25 Thread Christian Meutes
On Jan 25, 2013, at 4:57 PM, Nick Hilliard wrote: > with rstp you can have a different topology per vlan, but you max out at > 128 vlans. With MST you're stuck with 16 topologies per area, but you can > use all 4094 vlans. I believe you mean PVRST and not RSTP.

Re: [c-nsp] stp on me3600 on efp's with locally connected older switch

2013-01-25 Thread Christian Meutes
On 24.01.2013, at 23:44, Nick Hilliard wrote: > This isn't surprising. An me3600 can handle up to 4000 bridge domains > (http://goo.gl/0gz4n), each with their own topology, but only supports 128 > rstp instances (http://goo.gl/RLQ05). While rstp has more flexibility than > mst, it doesn't scale

Re: [c-nsp] Cat6500 odd arp behavior

2013-01-24 Thread Christian Meutes
On Jan 24, 2013, at 7:01 PM, wrote: > Is there something that would prevent ARP from discovering these newly > added devices when the switch would be soliciting the network segment > for the MAC address for a certain IP? I was leaning towards bug... or I have > some unintended consequence due to

Re: [c-nsp] stp on me3600 on efp's with locally connected older switch

2013-01-24 Thread Christian Meutes
> And if anyone has any suggestions about designing loop prevention via > me3600's when I'm connecting legacy vlans over vpls via my mpls cloud then > fire away. There isn't much you can do afaik: STP on ACs (CE-only, and consistent port configurations / prone PVSTP), waiting for MST-AG or even M

Re: [c-nsp] stp on me3600 on efp's with locally connected older switch

2013-01-24 Thread Christian Meutes
On 24.01.2013, at 21:40, "Aaron" wrote: > Ugh, I asked this question like a month ago! I knew it seemed familiar > :) thanks folks for putting up with me :) Hey! Did y'all know that > efp's only support MSTP !! lol Which translates at least to 802.1d, 802.1w and 802.1s, not *that* ba

Re: [c-nsp] ACS 5.x and ASA - Webtype ACL

2013-01-16 Thread Andre Christian
Unfortunately I have another call. Sent from my iPad On Jan 16, 2013, at 6:46 AM, "Antonio Soares" wrote: > Guys, > > > > I was trying to send an large Webtype ACL from ASA5.3 to ASA8.4. To do that, > I use the Cisco AV Pairs. This is configured under Policy > Elements->Authorization and P

Re: [c-nsp] recommendation for upgrade-paths pls

2012-12-20 Thread Christian Meutes
On 20.12.2012, at 09:54, Harald Kapper wrote: > I'd be happy to receive recommendations whether to go the ASR-1000 route or > skip this and go directoy to 760x-systems (using which RSP/SUP?). Relevant question is here really how much interfaces and how much bandwidth do you expect for the next

Re: [c-nsp] MPLS TE

2012-12-20 Thread Christian Meutes
Still missing relevant informations, but I guess you miss the backup-path TE configuration on your protecting core interfaces. On 20.12.2012, at 19:38, M K wrote: > > R2 > router isis 1 > net 49.0001...0002.00 > is-type level-2-only > metric-style wide > passive-interface Loopback0 > m

Re: [c-nsp] mpls and IP forwording

2012-12-20 Thread Christian Meutes
On 20.12.2012, at 19:46, zaid wrote: > how the forwarding will be if i have 2 parallel links between two routers one > with mpls enable and the 2nd without mpls ? suppose to see both in cef ? > right > > one with lable and the 2nd with out label ? any reply correct. _

Re: [c-nsp] me3600x - g0/25 ?!

2012-12-19 Thread Christian Meutes
Happens when you insert SFPs in the SFP+ interfaces. Only way to get rid of them is a reboot. -- Christian On 20.12.2012, at 03:29, "Aaron" wrote: > Any idea why I see an interface g0/25 on my me3600x? this may be following > the ios upgrade to 15.3(1)S > >

Re: [c-nsp] All multicast punting to CPU on 6500

2012-12-16 Thread Christian Meutes
t you rely entirely on the availability of h/w-based rate-limiters of your PFC platform. For example if there wasn't a HSRP rate-limiter shipped with the SX code you could quite easily kill the box with few Megs of HSRP. The same is true for all other B/Mcasts. -- Christian On 16.12.2

Re: [c-nsp] route-target import on non-leaking PEs

2012-12-14 Thread Christian Meutes
On 14.12.2012, at 02:42, Jason Lixfeld wrote: > So after thinking about this a little more, I realized that my ME3600 example > was incorrect. The reference device wasn't actually sitting equidistant > between the two PEs sourcing the default routes. When I check the routing > table and the

Re: [c-nsp] route-target import on non-leaking PEs

2012-12-13 Thread Christian Meutes
You need add-path on both sides, yes. But as Phil already noted your RRs are definitely tie-breaking to different pathes. On 13.12.2012, at 22:12, Phil Mayers wrote: > On 13/12/12 15:04, Jason Lixfeld wrote: >> >> On 2012-12-13, at 9:56 AM, Phil Mayers >> wrote: >> >>> On 13/12/12 14:47, Ja

[c-nsp] private vlan ports

2012-12-13 Thread Christian Bösch
isolation ports do only work for IPv4? Thanks in advance, Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Moving Routing from 7206VRX to 6509-E

2012-12-12 Thread Christian Meutes
Start with learning PFC-based QoS and downgrade your expectation regarding your current policies: shaping and multiple priority queues only supported on the WS-X6904-40G-2T (and only two PQs supported). I hope for you that this keeps the main limitation... -- Christian On 13.12.2012, at 00

[c-nsp] ME3400 roadmap for IPv6 first hop redundany

2012-11-28 Thread Christian Kratzer
know if hsrp for ipv6 (perhaps even with a global address) is anywhere on the roadmaps for the me3400 ? If not what box does cisco expect us to use for ipv6 CPE applications ? Greetings Christian Kratzer CK Software GmbH -- Christian Kratzer CK Software GmbH Email: c

Re: [c-nsp] URPF MAC check

2012-11-23 Thread Christian Meutes
This feature makes sense, but you would need peers understanding your filtering policy. Further, fib support for this would only makes sense if cisco would also implement uRPF for feasible routes like in junos. -- Christian On 23.11.2012, at 16:15, Aled Morris wrote: > On 23 November 2

Re: [c-nsp] can not configure modem by router

2012-11-18 Thread Christian Kratzer
/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Christian Kratzer CK Software GmbH Email: c...@cksoft.de Wildberger Weg 24/2 Phone: +49 7032 893 997 - 0 D-71126 Gaeufelden Fax: +49 7032 893 997 - 9 HR

Re: [c-nsp] BGP full table - 7200 NPE-G2

2012-10-17 Thread Christian Kratzer
4GB are not all available to the IOS. If you want lots of full feeds on the box go for 8GB from the beginning. Check the archives for lots of discussion on this. Greetings Christian Cheers. Date: Wed, 17 Oct 2012 10:46:16 +0300 From: s...@ytti.fi To: cisco-nsp@puck.nether.net Subject: Re

Re: [c-nsp] Change BGP default-originate to IGP?

2012-09-27 Thread Christian Meutes
The best way is here really to inject the defaults via ISIS. On 27.09.2012, at 04:04, Tom Lanyon wrote: > Hi list, > > In an enterprise network I have a core of 4900Ms with a few ASR1ks hanging > off to handle upstream connectivity. As an example: > > Upstream1 - [ASR1k]--[4900M]--[4900M]--[

Re: [c-nsp] Inter AS MPLS hybrid thingy...

2012-09-13 Thread Christian Meutes
On Sep 13, 2012, at 2:52 PM, Christian Meutes wrote: > That's why I suggested to give the L3VPN customer also MPLS on the PE-CE > link. So that just the L3VPN CE needs to have the CsC-customers eBGP nexthop > tag. > > It's a while back when I played with CsC, but ena

Re: [c-nsp] Inter AS MPLS hybrid thingy...

2012-09-13 Thread Christian Meutes
. But not (and this > is how I read it) between a Child_net L3VPN customer and the L3VPN > customer on parent_net.. > So enough speculating, let's wait for JC to clarify the requirements :-) > > oli > > On 13/09/2012 12:54, "Christian Meutes" wrote: >

Re: [c-nsp] Inter AS MPLS hybrid thingy...

2012-09-13 Thread Christian Meutes
Hey Oli, I read it as Child_net1 is L3VPN with MPLS enabled (CsC) but I may be wrong... On 13.09.2012, at 11:53, "Oliver Boehmer (oboehmer)" wrote: > Don't think this is going to work Christian. Child_net1's interface to > Parent_net is actually in the global table

Re: [c-nsp] Inter AS MPLS hybrid thingy...

2012-09-13 Thread Christian Meutes
Import&Export between the RDs and give the L3VPN-only customer also MPLS and eBGP session between them. On 13.09.2012, at 10:44, "JC Cockburn" wrote: > Hi All, > > We have a weird setup/requirement as following and I need some advise > please: > > > > Working MPLS network serving L3 VPNs (

Re: [c-nsp] Best Ipam software?

2012-09-13 Thread Christian Meutes
Sup, On Sep 12, 2012, at 10:18 PM, Nick Hilliard wrote: > I use netdot myself. It's unashamedly web 1.0. It won't do overlapping > subnets and there are some aspects of it which need some work, but I find > it to be very good (I'm the freebsd port maintainer for netdot). If you're > on linux,

Re: [c-nsp] Help on redistribute OSPF/BGP

2012-08-30 Thread Christian Meutes
Hi, On Aug 30, 2012, at 7:03 PM, Olivier CALVANO wrote: > but that's don't sent BGP route to the neighbor ospf (or i don't have > the good command for see > what route are sent ;=>) You need "bgp redistribute-internal" under your bgp configuration. But take care of redistributing too much.

Re: [c-nsp] bgp/ospf default route interaction

2012-08-27 Thread Christian Meutes
Hi, On 27.08.2012, at 22:57, Michael Ulitskiy wrote: > Thanks for the reply. > So what you're saying is that if ospf router itself injects ospf default in > its ospf database then > it would ignore any other ospf defaults it might receive (regardless of > metric) In your case the locally inje

Re: [c-nsp] bgp/ospf default route interaction

2012-08-27 Thread Christian Meutes
Hiho, On Aug 27, 2012, at 7:52 PM, Michael Ulitskiy wrote: > Now on CORE2 I add 'always' keyword to OSPF 'default-originate' command, > making it: > > CORE2: router ospf 100 default-information originate always > > For some reason I don't understand it changes the game completely. Now > IBGP

Re: [c-nsp] ME3600X Embedded Packet Capture

2012-08-13 Thread Christian Meutes
e local-tail carriers, but you are the one having the contract with the client. In such case all you can do is checking for mac or start to involve the local tail. Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether

Re: [c-nsp] ME3600X sends Multicast-Copies out of same Interface

2012-08-10 Thread Christian Meutes
Hi Waris, it's 15.2(2)S. On Aug 7, 2012, at 12:22 PM, Waris Sagheer (waris) wrote: > Hi Christian, > Can you tell me the software release? > > Regards, > Waris > > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp

Re: [c-nsp] Loop/Unreachable problem with C6500/SUP720

2012-08-09 Thread Christian Meutes
Hi Sebastian, maybe due to load-sharing 10.1.66.51 takes other path back than 10.1.66.84? So maybe one hop is missing a route or has a wrong one? Just tapping in the dark because I didn't saw working traceroute forward and backward. Chri

[c-nsp] ME3600X sends Multicast-Copies out of same Interface

2012-08-03 Thread Christian Meutes
this and Cisco gets aware of it. regards Christian ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] m-vpn

2012-06-08 Thread Christian
Unfortunately the Juniper documentation sucks (don't they have Visio or equivalent?). The RFC6514 combined with RFC6513 is horrible long and quite complex because of a dozen of different options how to implement and run and ways what to use for LSP-setup/signaling, c-state distribution, de/multipl

Re: [c-nsp] OSPFv3 in a VRF on a 7600

2012-04-10 Thread Christian Kratzer
ure myself for hooking up v6 vrf lite setups over protected tunnels. Seems there is no such feature in feature navigator. Greetings Christian /Benny ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

Re: [c-nsp] ASR9000v and distance

2012-04-09 Thread Christian Kratzer
this opens though as I am still lacking understanding of new IOS XR concepts. Seems we do not have to worry about vlan id signifance so much as IOS XR just pushes and pops vlan ids from subinterfaces. Lets just hope this all comes together and we will find a way to transition smoothly ;) Gree

Re: [c-nsp] ASR9000v and distance

2012-04-09 Thread Christian Kratzer
current IOS XR Configration guides. Either the feature is not available yet or my google foo is lacking the appropriate seeding ;) Greetings Christian Kratzer CK Software GmbH -A Sent from my tablet; excuse brevity On 07/04/2012, at 13.59, Robert Hass wrote: Hi I have three questions regarding

  1   2   3   4   >