Re: [c-nsp] big uptime - what you got ?

2020-02-11 Thread Ed Ronayne
I have a switch stack here with a little over 6 years Switch Ports Model SW VersionSW Image -- - - ---- *1 30WS-C3750X-24 15.0(2)SE C3750E-UNIVERSALK9-M

Re: [c-nsp] Cisco 8000

2019-12-15 Thread Ed Ronayne
Hi Came across that 920 model the other day. Will be useful. But the single AC PSU would make it difficult for us to use. Dual DC is in the line up but not AC unfortunately Regards Ed Sent from my iPhone > On 15 Dec 2019, at 15:05, Mark Tinka wrote: > >  > >>

[c-nsp] Router advice

2009-11-18 Thread Ed W
rch was a 2800 series, but NetFlow seems like a possible red flag. I'd be open to hearing about other vendors' options that meet the requirements (offlist of course), but no "Build Your Own"/Quagga options. Thanks, Ed ___

[c-nsp] Shape users over quota

2009-08-16 Thread Ed Lazerus
Dear All, We currently use 7300's as LNS's, we have for a few years worked on user pays excess, like all businesses things change and so must we, we are looking to offer new plans of use quota then we shape you down top 64/64kbps. We have 3 PoPs, each have approximately 25-30K users, we would expe

[c-nsp] Single LNS, two providers

2009-08-06 Thread Ed Lazerus
adjust-mss 1360 peer default ip address pool default ppp mtu adaptive ppp authentication pap chap /Ed/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net

Re: [c-nsp] Modifying ACLs on production router

2008-10-05 Thread Ed Ravin
On Sun, Oct 05, 2008 at 12:37:34PM -0600, Matlock, Kenneth L wrote: > If you have an access-list on an interface, and that access-list > didn't exist then it got interpreted as a 'permit ip any any'. As > soon as you add the first line of the ACL, it then becomes a default > of 'deny ip any any' af

Re: [c-nsp] Modifying ACLs on production router

2008-10-05 Thread Ed Ravin
On Sun, Oct 05, 2008 at 06:24:12PM +0200, Gert Doering wrote: > On Sun, Oct 05, 2008 at 08:21:40AM -0400, Ed Ravin wrote: > > If the router doesn't complain about syntax > > problems, the script then removes the original ACL from any interfaces > > it is applied to and a

Re: [c-nsp] Modifying ACLs on production router

2008-10-05 Thread Ed Ravin
plies the original ACL. This leaves two short windows when the interface has no ACL applied, but since the script is doing all the work automatically those windows are as brief as possible. -- Ed ___ cisco-nsp mailing list cisco-nsp@puck.nethe

Re: [c-nsp] Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

2008-06-25 Thread Ed Leatherman
Apologies i meant to send this to the cisco-voip list On Wed, Jun 25, 2008 at 2:18 PM, Ed Leatherman <[EMAIL PROTECTED]> wrote: > Hi folks > > Was planning to apply a SR to call manager 5.1.3 this weekend anyway so may > as well patch this too... but I can't find a 5.1.3c

Re: [c-nsp] Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service and Authentication Bypass Vulnerabilities

2008-06-25 Thread Ed Leatherman
Hi folks Was planning to apply a SR to call manager 5.1.3 this weekend anyway so may as well patch this too... but I can't find a 5.1.3c version on cco. Latest is 5.1.3b, 5.1.3.3000-5. Any ideas? Ed On Wed, Jun 25, 2008 at 12:00 PM, Cisco Systems Product Security Incident Response Team &l

Re: [c-nsp] Any 3xxx Switches support MPLS?

2008-05-06 Thread ed
I am almost positive the me3400 will do mpls vpn from PE--CE with the metroipaccess image. -Ed -Original Message- From: Dan Armstrong <[EMAIL PROTECTED]> Date: Tue, 06 May 2008 20:23:44 To:Phil Bedard <[EMAIL PROTECTED]> Cc:cisco-nsp@puck.nether.net Subject: Re: [c-n

Re: [c-nsp] Ethernet Freezeup

2008-04-10 Thread Ed Ravin
On Thu, Apr 10, 2008 at 01:36:33PM +0200, Andre Beck wrote: > Ok, so what's common in *all* these cases is the NPE225. Exactly what > I fear is the culprit. I guess I should pull the NPE-225 out of my 1750 that was also experiencing the problem? I thought the common factor was the "router-on-a-s

Re: [c-nsp] Ethernet Freezeup

2008-04-09 Thread Ed Ravin
On Tue, Apr 08, 2008 at 08:36:57PM +0200, Andre Beck wrote: > Hi Jon, > > On Tue, Apr 08, 2008 at 10:35:36AM -0500, [EMAIL PROTECTED] wrote: > > Is it possible that your interface is getting wedged? > > > > http://www.cisco.com/en/US/products/hw/iad/ps397/products_tech_note09186a0 > > 0800a7b85.s

Re: [c-nsp] Ethernet Freezeup

2008-04-07 Thread Ed Ravin
On Mon, Apr 07, 2008 at 10:10:38AM -0400, Ed Ravin wrote: The story so far: On Sat, Jul 15, 2006 at 05:23:20PM -0400, Ed Ravin wrote: > A few times on this list, people have discussed how a Cisco 1700 series > router can suddenly "freeze up" on its main Ethernet interface. The &

Re: [c-nsp] Ethernet Freezeup

2008-04-07 Thread Ed Ravin
The story so far: On Sat, Jul 15, 2006 at 05:23:20PM -0400, Ed Ravin wrote: > A few times on this list, people have discussed how a Cisco 1700 series > router can suddenly "freeze up" on its main Ethernet interface. The > problem as I've observed it hits routers tha

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-15 Thread Ed Ravin
On Wed, Mar 12, 2008 at 11:31:22PM -0400, Jason Berenson wrote: > We have 3 7206's used as edge routers. PA-MC-T3 in from our DAX and > ethernet out to our transport. So there are a few adjacencies along > with iBGP and eBGP. It seems like the router that goes down (flaps > OSPF/BGP instance

Re: [c-nsp] Tracking down spoofed source IPs in DMVPN (GRE multipoint) environments

2008-02-19 Thread Ed Ravin
On Tue, Feb 19, 2008 at 02:56:18PM +1100, Dale Shaw wrote: > I gave in and scripted a "sh ip cache flow | i 169.254" command to run > on each of the downstream spoke routers when a broadcast packet was > seen upstream, and this worked, but I was wondering if there was a > better way. > > So, is th

Re: [c-nsp] RES: Router uptime, can you beat it?

2008-01-31 Thread ed
You win. -Original Message- From: "Leonardo Gama Souza" <[EMAIL PROTECTED]> Date: Thu, 31 Jan 2008 17:52:45 To:"Howard Jones" <[EMAIL PROTECTED]>, Subject: [c-nsp] RES: Router uptime, can you beat it? Ok...I have one IGS running smoothly for 16 years: IGS-BX Software, Version 8.3(0

Re: [c-nsp] 3GE-GBIC-SC Problem

2008-01-30 Thread ed
No experience with that particular card; however, possibly a bad gbic? Try swapping it with another port and see if the problem follows the gbic. Also, is there anything on that port config that is different from the other ports? -Original Message- From: "scott" <[EMAIL PROTECTED]> Da

Re: [c-nsp] OSPF router gets separated from a broadcast domain

2008-01-29 Thread Ed Ravin
But for the devices that don't speak OSPF, there's no way to reach them from the "other side" of the leased line when it is down unless I play tricks with /32 routes. -- Ed ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Top 10 Network Engineering Tools

2008-01-28 Thread Ed Ravin
On Mon, Jan 28, 2008 at 12:22:51PM -0800, Joseph Jackson wrote: > Myself and a coworker are trying to get together a list of the top ten tools > any network engineer shouldn't be without. We're looking for vendor neutral > tools. So what do you all think are the most haves? I recently discovered

Re: [c-nsp] How to measuse the throughput on Internet Links

2008-01-09 Thread ed
r the proximity is to your equip, the faster it will be). Hope this helps. - Ed -Original Message- From: "omar parihuana" <[EMAIL PROTECTED]> Date: Wed, 9 Jan 2008 11:56:49 To:"Michael Long" <[EMAIL PROTECTED]>, "cisco-nsp@puck.nether.net" Sub

Re: [c-nsp] traffic shaping on 7200

2008-01-08 Thread Ed Ravin
On Tue, Jan 08, 2008 at 01:38:44PM +0300, Rivo Tahina RAZAFINDRATSIFA wrote: > Hi all, > > I do traffic shaping on a 7206 box, eg: > a: 10Mbps for one class > b: 15Mbps for another class > c: 20Mbps for another class > > If c: only use 10Mbps, how can I share it to a: and b:? > How can I monitor

Re: [c-nsp] Something like MTR, but forced path

2007-12-18 Thread Ed Ravin
On Tue, Dec 18, 2007 at 09:01:50PM -0500, Tuc at T-B-O-H.NET wrote: > I'm basically looking for something I can run on Unix and > give me a curses view of IPs I give it to ping at the same time. You could use Mon: http://mon.wiki.kernel.org/index.php/Main_Page The server component will do the

Re: [c-nsp] report duplicate ips on lan

2007-10-31 Thread Ed Ravin
On Wed, Oct 31, 2007 at 06:17:04PM +0200, Tassos Chatzithomaoglou wrote: > So, I'm looking for something that "snoops" the arp/ip packets, > creates an ip-mac table and if an ip stored in this table appears > with a new mac, then report an error. Is there such a feature on > a switch (or router)?

Re: [c-nsp] service monitoring on a small scale?

2007-09-27 Thread Ed Ravin
On Wed, Sep 26, 2007 at 12:58:42PM -0500, neal rauhauser wrote: > Yesterday we cooked a POS card in a 7507 and the customer has just had > it with stuff breaking at 0200 and learning about it at 0900 via fifty angry > customer messages. > > The failure modes we see are not simple link up/

Re: [c-nsp] MIB Class-based-QoS

2007-09-26 Thread Ed Ravin
On Wed, Sep 26, 2007 at 09:39:38AM +0200, Daniel Suchy wrote: > There's addon for Cacti doing this. > See http://forums.cacti.net/about12485.html Also for Cricket (genDevConfig and its predecessor genRtrConfig): http://acktomic.com/?p=4 ___ cisco-nsp

Re: [c-nsp] [Retrieved] Fiber issue, banging my head.

2007-09-10 Thread Ed Ronayne
As Rick as saying. Have you tried putting an attenuator on the fibre. Maybe you're over cooking the RX side on one of the SFP's Regards Ed -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Drew Weaver Sent: 10 September 2007 18:07 To: &

Re: [c-nsp] Learning Resources...

2007-09-06 Thread Ed Leatherman
ough on one thing to make you any kind of expert, but plenty to get you started. ISBN: 0596101511 Subtitle is "everything you need to know that wasn't on the CCNA Exam" Ed On 9/5/07, Justin Scott <[EMAIL PROTECTED]> wrote: > > Good afternoon, sorry if this is off-topic.

Re: [c-nsp] "Unrecognized cookie format" for WIC-1DSU-T1

2007-08-29 Thread Ed Ravin
On Wed, Aug 29, 2007 at 12:30:41AM -0500, neal rauhauser wrote: > Is it a WIC-1DSU-T1? And you need a WIC-1DSU-T1-V2 for the >18xx/28xx/38xx series ... if it came out of an older router this is >likely the case. Thanks, that's exactly what happened. Luckily, we have a 1700 router nea

[c-nsp] "Unrecognized cookie format" for WIC-1DSU-T1

2007-08-28 Thread Ed Ravin
We just stuck a WIC-1DSU-T1 removed from service on a different router into a 2801. The router says this upon bootup: %CFG-3-CARD_NOT_SUPPORTED: Slot 3: Unrecognized cookie format for card!sslinit fn The version info is: Cisco IOS Software, 2801 Software (C2801-ADVSECURITYK9-M), Version 12.4(3

Re: [c-nsp] Possible BGP memory leak?

2007-08-20 Thread Ed Ravin
On Tue, Aug 21, 2007 at 07:10:08AM +0200, Oliver Boehmer (oboehmer) wrote: > Ed Ravin <> wrote on Tuesday, August 21, 2007 3:29 AM: > > > On a 7513 router running 12.0(S), we're running rather low on memory. > > Yes, I know of the futility of fitting two full Internet

[c-nsp] Possible BGP memory leak?

2007-08-20 Thread Ed Ravin
On a 7513 router running 12.0(S), we're running rather low on memory. Yes, I know of the futility of fitting two full Internet feeds into 256M, and I'm working on that, but in the meantime, this looks weird: Router# show proc mem | inc Hold|BGP PID TTY Allocated FreedHoldingGetbufs

Re: [c-nsp] Consoling to NPE-150 with DB25 console port

2007-07-21 Thread Ed
-io or > c7200-io-FE > > > http://cisco.com/en/US/products/hw/routers/ps341/products_quick_start09186a00800a85fe.html#wp32633 > > Otis > > > > Ed wrote: > > Hi, > > > > I am wondering if anyone can help me with what type of connectors I need > &

[c-nsp] Consoling to NPE-150 with DB25 console port

2007-07-20 Thread Ed
Hi, I am wondering if anyone can help me with what type of connectors I need (pinouts etc would be nice) in order for me to console to a cisco 7206 with an NPE-150? It has a female DB25 console port. Thanks all. Ed ___ cisco-nsp mailing list cisco

Re: [c-nsp] Stuck Route

2007-06-26 Thread Ed Ravin
On Tue, Jun 26, 2007 at 02:01:37PM +0100, Steve Wright wrote: > Hi all, > > We have a number of dial in platforms (PSTN, ISDN, xDSL) and we recently > changed our radius servers. > > Since then, every now and again we are seeing a stuck per-user static route; > ie they login on one device, get

Re: [c-nsp] Tools for making config backups

2007-06-20 Thread Ed Ravin
On Wed, Jun 20, 2007 at 08:49:49AM -0400, Jason Plank wrote: > Totally agree. Rancid gives you what you need based on your requirements > below. At my last place of employment we went away from Cisco works and > towards rancid. Good stuff. I agree, but with one reservation - RANCID's default archi

Re: [c-nsp] Applying ACL

2007-06-01 Thread Ed Ravin
On Fri, Jun 01, 2007 at 10:11:16AM +0300, John Kougoulos wrote: > my preferred method is to upload the acl with tftp, ofcourse with the > first line "permit tcp any any established" ... > Gert Doering wrote: >> But usually you're dead in the water as soon as you copy-and-paste a >> new version of

Re: [c-nsp] display last lines of logging

2007-05-24 Thread Ed Ravin
> On Thu, May 24, 2007 at 05:26:01PM +0300, Tassos Chatzithomaoglou wrote: > > I was wondering > > > > Is there a way to display the x last lines of the log of a router (through > > the cli) ? > > Like the CatOS "sh logging buffer -x" is doing. Or like the Unix "tail" command? Apparently no

Re: [c-nsp] syslog server

2007-05-18 Thread Ed Ravin
On Fri, May 18, 2007 at 11:57:49AM -0500, Dan wrote: > Anybody have any recommendations on what kind of syslog server to use? I'm happy with syslog-ng (version 1.6.11, haven't migrated to the 2.0 series yet). It can automatically rotate the file name of the log file by the current date or lots of

Re: [c-nsp] front-end box to protect wimpy Cisco router from DoS?

2007-05-11 Thread Ed Ravin
On Fri, May 11, 2007 at 05:04:25PM +1000, Brad Henshaw wrote: > Ed Ravin: > > I have an elderly 7200 NPE-225 box on my network that has no > > problem handling normal traffic, but every now and then > > someone sends a DoS attack in its general direction and the > >

[c-nsp] front-end box to protect wimpy Cisco router from DoS?

2007-05-11 Thread Ed Ravin
on an inexpensive hardware/software solution for this purpose? We like free software, of course, but we'd consider a reasonably priced commercial product if it could do the job. Thanks, -- Ed ___ cisco-nsp mailing list cisco-nsp@puck.nether

Re: [c-nsp] SNMP quering of queue-stats etc. / CBWFQ / cbqos from C7200

2007-05-10 Thread Ed Ravin
On Thu, May 10, 2007 at 12:04:42PM +0200, Dennis Breithaupt wrote: > > Hello people, > It seems, that I've either misunderstood the concepts of getting > qos-stats out of a c7200 :) or that there're some other problems with > that. Anyway, I kindly request any hints, that may help here :)

Re: [c-nsp] HSRP and BGP

2007-04-29 Thread Ed Ravin
On Mon, Apr 30, 2007 at 01:24:02PM +1000, Skeeve Stevens wrote: > Is this not a valid way to do HSRP to an upstream? Is there > something wrong with this methodology? Is there some configuration in the > HSRP or BGP that I have missed? Yes, Yes, and Maybe. I'm guessing that the HSRP IP addr

Re: [c-nsp] OSPF Problem

2007-04-26 Thread Ed Ravin
On Thu, Apr 26, 2007 at 03:24:53PM -0400, Paul Stewart wrote: > Hi folks... > > I'm trying to bring up a pair of new OSPF connections and can't figure this > out.. we do these connections all the time so scratching my head Cisco has a very nice troubleshooting document on OSPF neighbor proble

Re: [c-nsp] How to monitor BGP sessions

2007-04-17 Thread Ed Ravin
On Tue, Apr 17, 2007 at 05:20:08PM +0200, chiel wrote: > I was wondering how you guys monitor your BGP sessions. Do you > use snmp traps or do you poll the router with a snmp get As already posted by others, you can use either method. Here's a script that uses SNMP to get the router status, and c

Re: [c-nsp] Switch/router recommendations?

2007-04-10 Thread Ed Ravin
On Tue, Apr 10, 2007 at 06:31:48PM -0400, David Coulson wrote: > We've had good success with the Netgear GSM7328S switches. 1U (but > pretty deep) with 24 10/100/1000 ports (4 SFP ports) and lots of L3 > features (OSPF, VRRP, Dot1q, etc). Probably sub-$2k if you buy it from > the right place. We

Re: [c-nsp] Warranty Info on 6500 Gear

2007-04-06 Thread Ed Butler
not a solicitor so don't quote me on that. :) Regards, Ed Butler RapidSwitch Ltd DDI: 020 7106 0731 RapidSwitch Ltd, Sovereign House, 227 Marsh Wall, London, E14 9SD This email message is intended only for the addressee(s) and contains information that may be confidential and/or copy

Re: [c-nsp] 3750 acting as a hub - resolved

2007-04-03 Thread Ed Butler
Timers that we are running are currently default on this stack: eg 5 mins for MAC, 4 hours for ARP. Regards, Ed Butler RapidSwitch Ltd DDI: 020 7106 0731 RapidSwitch Ltd, Sovereign House, 227 Marsh Wall, London, E14 9SD This email message is intended only for the addressee(s) and contains

Re: [c-nsp] 3750 acting as a hub - resolved

2007-04-02 Thread Ed Butler
r mac-address-table dynamic" command. Why it happened in the first place is still a mystery to me, I would be interested to hear any thoughts. Regards, Ed Butler RapidSwitch Ltd DDI: 020 7106 0731 RapidSwitch Ltd, Sovereign House, 227 Marsh Wall, London, E14 9SD This email message is intended on

Re: [c-nsp] 3750 acting as a hub

2007-04-02 Thread Ed Butler
itate this. Regards, Ed Butler RapidSwitch Ltd DDI: 020 7106 0731 RapidSwitch Ltd, Sovereign House, 227 Marsh Wall, London, E14 9SD This email message is intended only for the addressee(s) and contains information that may be confidential and/or copyright. No representation is made that this

[c-nsp] 3750 acting as a hub

2007-04-02 Thread Ed Butler
s: 77 Total Mac Address Space Available: 2680 Regards, Ed Butler RapidSwitch Ltd DDI: 020 7106 0731 RapidSwitch Ltd, Sovereign House, 227 Marsh Wall, London, E14 9SD This email message is intended only for the addressee(s) and contains information that may be confidential and/or copyright

Re: [c-nsp] 6500 WS-X6748-GE-TX and memory

2007-03-27 Thread Ed Butler
Perhaps you could explain why you need/want to upgrade the memory so people could better comment? Regards, Ed Butler RapidSwitch Ltd DDI: 020 7106 0731 RapidSwitch Ltd, Sovereign House, 227 Marsh Wall, London, E14 9SD This email message is intended only for the addressee(s) and contains