Re: [c-nsp] Nexus Architecture question

2021-06-11 Thread Jeffrey G. Fitzwater
I am not sure this question was asked in this thread, but are you using a custom COPP and not the default? If you have a custom COPP you must apply the new policy with that name prefix i.e. router-core-copp-acl-hsrp Vs copp-acl-hsrp. We do this on our 7 and 9ks so that any new code does not ove

Re: [c-nsp] Converting policy-map from IOS to NXOS no "conform drop"

2021-01-22 Thread Jeffrey G. Fitzwater
Just use conform drop violate drop That's what we do. jeff Fitzwater EIS Network Systems & Monitoring Princeton University From: cisco-nsp on behalf of Drew Weaver Sent: Friday, January 22, 2021 8:07 AM To: 'cisco-nsp@puck.nether.net' Subject: [c-nsp] Conve

Re: [c-nsp] QinQ termination on a Catalyst 6800

2019-02-19 Thread g
Hello, I have a distinct memory of running selective QinQ on a 6500a chassis a couple of years back but there where some ASIC limit on it where the mapping done on one interface would affect all ports in a portgroup belonging to that specific ASIC. Perhaps this feature was removed because of this l

[c-nsp] VB: ASR920 is a ticking timebomb (CSCvk35460)

2019-01-25 Thread g
-Ursprungligt meddelande- Från: cisco-nsp För Mark Tinka Skickat: den 25 januari 2019 11:11 Till: cisco-nsp@puck.nether.net Ämne: Re: [c-nsp] ASR920 is a ticking timebomb (CSCvk35460) On 24/Jan/19 21:12, James Jun wrote: > May be this is good time to re-hash discussion about replacin

[c-nsp] Cisco portable datasheet

2015-03-25 Thread Gireesh G via cisco-nsp
Hi  Just wondering cisco no longer maintaining the portable data sheets  ? Looking for the nexus and ASR routers .  http://www.cisco.com/web/partners/downloads/765/tools/quickreference/routerperformance.pdf Thanks and RegardsGireesh ___ cisco-nsp maili

[c-nsp] OT : Internap Flow Control Platform

2015-02-13 Thread Gireesh G via cisco-nsp
Hi Anybody using Internap Flow Control Platform ? How is your opinion about it ? Is any other comparative  products there in market ? Thanks and RegardsGiree  ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/

Re: [c-nsp] Sup720 Redundancy Problems

2014-08-17 Thread Jeffrey G. Fitzwater
ff > sees the different path? > > Thanks > --Tammy > > > On 8/17/14, 7:11:45, Jeffrey G. Fitzwater wrote: >> We had a problem when we first used redundant sups because we defined boot >> config to be on disk0: . >> >> The standby sup would constantl

Re: [c-nsp] Sup720 Redundancy Problems

2014-08-17 Thread Jeffrey G. Fitzwater
We had a problem when we first used redundant sups because we defined boot config to be on disk0: . The standby sup would constantly reboot until I removed that command and used the boot from nvram. Jeff Fitzwater Princeton University On Aug 17, 2014, at 5:35 AM, Ben Hammadi, Kayssar (NSN -

[c-nsp] 6500 redundant supervisors and non-NFS aware RIP

2014-07-14 Thread Jeffrey G. Fitzwater
We are planning on installing a second supervisor in one of our border 6500Es thats connects to our 3 ISPs. The systems runs both BGP for ISP peering and RIP for internal routing to core. The sup is a 720-10G with VS-F6K-PFC3CXL running 122-33.SXJ5 Q1 Since BGP is NFS aware but only after

[c-nsp] bug CSCum74698 SYSMGR-2-TMP_DIR_FULL: System temporary directory usage is unexpectedly high at 90%.

2014-07-07 Thread Jeffrey G. Fitzwater
We are receiving this error and TAC is saying there is no workaround. WE are running 6.2.6 on 7k with sup2E CSCum74698 SYSMGR-2-TMP_DIR_FULL: System temporary directory usage is unexpectedly high at 90%. Does anybody know… What happens when it reaches 100? Will a sup switchover clear th

Re: [c-nsp] nexus 7k PACL to block outbound IPV6 ?

2014-06-13 Thread Jeffrey G. Fitzwater
An IPv4 ACL only deals with only IPv4, so I would need and outbound IPv6 or MAC filter, but neither can be applied to outbound on port-channel. Jeff F. On Jun 13, 2014, at 9:52, Roland Dobbins wrote: > > On Jun 13, 2014, at 8:27 PM, Phil Mayers wrote: > >> Unless you're trying to block RAs

[c-nsp] nexus 7k PACL to block outbound IPV6 ?

2014-06-13 Thread Jeffrey G. Fitzwater
I have a case where we think that IPv6 packets are causing problems on a windows server connected to a port channel on one of our Nexus 7ks. I would like to apply an PACL filter to block OUTBOUND IPV6 traffic to server, but it looks like it can only be applied INBOUND. I don’t want to do it at

[c-nsp] nexus 7k stops mac-address table stops learning now floods

2014-06-04 Thread Jeffrey G. Fitzwater
WE are running 6.1.2 on 7k 18 slot with sup2. FDB appears to have stopped learning addresses, but some are in table and we are not even close to limit. Cleared mac address table but no change. Switched to standby sup but no change. Has anyone seen this issue ? I currently have case ope

Re: [c-nsp] Nexus compatible optics

2013-12-11 Thread Jeffrey G. Fitzwater
I believe I had asked the question about third party optics with the new NX-OS 6.2.2a, and found out that in this revision you MUST enter the command “service unsupported-transceiver” to get them to be recognized. In previous versions that command was enabled by default. Who knew! There we

Re: [c-nsp] Third party transceivers that fail only with new, NX-OS 6.2.2a on sup-2E

2013-11-19 Thread Jeffrey G. Fitzwater
, at 4:24 PM, James Slepicka (c-nsp) wrote: > Does the command exist in 6.1(3)? I don't have a box that I can test with. > > -Original Message- > From: Jeffrey G. Fitzwater [mailto:jf...@princeton.edu] > Sent: Tuesday, November 19, 2013 3:19 PM > To: James Slepicka

Re: [c-nsp] Third party transceivers that fail only with new, NX-OS 6.2.2a on sup-2E

2013-11-19 Thread Jeffrey G. Fitzwater
) work without "service > unsupported-transceiver". This was 'fixed' in 6.2(2)... > > Thanks for reporting this, Jeff. We'll be upgrading soon and this saved me > from a big headache. > > -Original Message- > From: cisco-nsp [mailto:cisco-ns

Re: [c-nsp] Third party transceivers that fail only with new, NX-OS 6.2.2a on sup-2E

2013-11-19 Thread Jeffrey G. Fitzwater
2:49 PM, Jeffrey G. Fitzwater mailto:jf...@princeton.edu>> wrote: I don’t see the “service unsupported-transceiver” command nor does it run (in case its hidden). That would imply its not there on 7k 6.1.3 or 6.2.2a. Can you imagine us doing an upgrade on one of our core 7k and having

Re: [c-nsp] Third party transceivers that fail only with new, NX-OS 6.2.2a on sup-2E

2013-11-19 Thread Jeffrey G. Fitzwater
What sup and what EPLD ver. Interesting ! Jeff On Nov 19, 2013, at 3:10 PM, Tim Durack mailto:tdur...@gmail.com>> wrote: "service unsupported-transceiver" works for us on 6.2.2a. On Tue, Nov 19, 2013 at 2:49 PM, Jeffrey G. Fitzwater mailto:jf...@princeton.edu>>

Re: [c-nsp] Third party transceivers that fail only with new, NX-OS 6.2.2a on sup-2E

2013-11-19 Thread Jeffrey G. Fitzwater
-23L line cards. I just > accepted the fact that we will have to pay the Cisco tax. > > Regards, > Christina > > On 11/19/2013 02:45 PM, Jeffrey G. Fitzwater wrote: >> Christina, are you running on sup-2E ? We are running many non-CISCO >> transceivers on nexus 7k runn

Re: [c-nsp] Third party transceivers that fail only with new, NX-OS 6.2.2a on sup-2E

2013-11-19 Thread Jeffrey G. Fitzwater
t; the "most annoying BU CY2013" title...) > > gert > -- > USENET is *not* the non-clickable part of WWW! > //www.muc.de/~gert/ > Gert Doering - Munich, Germany

Re: [c-nsp] Third party transceivers that fail only with new, NX-OS 6.2.2a on sup-2E

2013-11-19 Thread Jeffrey G. Fitzwater
Christina, are you running on sup-2E ? We are running many non-CISCO transceivers on nexus 7k running 6.1.3 but when I did the upgrade to 6.2.2a NO GOOD. We also ran across issue with 6.2.2a on sup-2E that you cannot overwrite slot0: file. Delete but no overwrite. TAC case open. Jeff On

[c-nsp] Third party transceivers that fail only with new NX-OS 6.2.2a on sup-2E

2013-11-18 Thread Jeffrey G. Fitzwater
Since CISCO TECH will probably not touch this because its not CISCO, I see if anybody has solution. We are running nx-os 6.1.3 on 7k with sup-2E on a new chassis that will go into production soon. We wanted to run the 6.2.2a to fix some other issues with logging and found out the channel po

[c-nsp] rate limiting per IP on nexus 7k

2013-11-08 Thread Jeffrey G. Fitzwater
I need to rate limit some hosts to 5Mbps each outbound on a vlan on nexus 7k running 6.2. Without testing yet, I’am not sure it will rate limit per IP, but may aggregate the rate per ACL since the policing applies to a single class-map. I would hate to have to configure a class-map for each I

[c-nsp] DFC bootflash?

2013-11-03 Thread P G
What is DFC bootflash for? #dir dfc#3-bootflash:/ No files in directory on the other card it just reports error when I try to show the DFC bootflash and it's not reporting the size of DFC bootflash When I tried to upgrade the rommon on the WS-X6704-10GE with DFC3BXL, one card reported error b

[c-nsp] Online Insertion and Removal effect on Spanningtree ?

2013-10-09 Thread Jeffrey G. Fitzwater
Does anyone know if OIR has any effect on Spanning Tree ? I know it stops the BUS briefly but thats it. We had to remove a mod that had nothing connected but did still have config, and we experienced many STP log messages relating to ROOT change from other connect switches. I could not find

[c-nsp] Format a nexus 7k sup-1 flash card (slot0) without a sup-1

2013-08-26 Thread Jeffrey G. Fitzwater
We have replaced all our sup-s with sup-2s and shipped back the sup-1s, but kept the slot0: flash cards because they still had sensitive data. We have been trying to format the flash cards using different DISK utilities and CLIs but cannot seem to find anything that will work. I used to do th

[c-nsp] nexus 7k interface DOM traps

2013-08-21 Thread Jeffrey G. Fitzwater
We are running 6.1.2 on 7k and never seem to get traps when an optical trans. goes out of range. We see the problem manually with the command "show int e2/15 trans det" but no traps. Any ideas? Jeff Fitzwater OIT Network Systems Princeton University ___

[c-nsp] IGNOR test message

2013-07-19 Thread Jeffrey G. Fitzwater
TEST email ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] 7k EPLD version in I/O mods

2013-07-18 Thread Jeffrey G. Fitzwater
We have a 7k chassis that has a SUP-1 and FAB-1 that will be upgraded with SUP-2 and FAB-2, but while I am testing in a spare chassis I don't want to prohibit the spare modules from being used in chassis with SUP-1 if the EPLD is incompatible. Q1. Is the EPLD version that I load into an I

Re: [c-nsp] Am I being very stupid or....

2013-07-05 Thread Jeffrey G. Fitzwater
Not sure about a 3825, but is the console in a VRF and you need to specify what vrf you want to ping? Jeff F. On Jul 5, 2013, at 11:53 AM, Chris Knipe wrote: > Hi All, > > I can't believe I am doing this, but I am either missing something VERY > obvious, or I am in need for some assistance

Re: [c-nsp] How to tell what routes are not in CEF and follow DEFAULT path?

2013-07-02 Thread Jeffrey G. Fitzwater
e: > On (2013-07-02 20:19 +), Jeffrey G. Fitzwater wrote: > >> I would like to find out what routes are NOT in my route table and therefore >> follow the DEFAULT path to 0.0.0.0. >> >> Would "show ip cef unresolved" work ? I get nothing back whe

[c-nsp] How to tell what routes are not in CEF and follow DEFAULT path?

2013-07-02 Thread Jeffrey G. Fitzwater
I would like to find out what routes are NOT in my route table and therefore follow the DEFAULT path to 0.0.0.0. I am running a 6500 sup-720-10G with SXI. Is there any CEF command that might tell me this or is it something very simple I just missed. Would "show ip cef unresolved" work ? I

Re: [c-nsp] nexus logging L3 ACL and mac source ?

2013-06-24 Thread Jeffrey G. Fitzwater
Forgot to mention this is on 6500 sup-720-10G running 12.2.33 SXI7 I believe that the "logging" statement in the ACE also forces the packet to be punted. Jeff On Jun 24, 2013, at 10:32 AM, Phil Mayers wrote: > On 24/06/13 15:29, Jeffrey G. Fitzwater wrote: >> In IOS wh

Re: [c-nsp] nexus logging L3 ACL and mac source ?

2013-06-24 Thread Jeffrey G. Fitzwater
The logging is applied to an extended named ACL attached to a VLAN ACL via "access-group" in. On Jun 24, 2013, at 10:32 AM, Phil Mayers wrote: > On 24/06/13 15:29, Jeffrey G. Fitzwater wrote: >> In IOS when we had an L3 ACL with "deny log-input" the log entry

[c-nsp] nexus logging L3 ACL and mac source ?

2013-06-24 Thread Jeffrey G. Fitzwater
In IOS when we had an L3 ACL with "deny log-input" the log entry would show the VLAN and MAC SRC for ACE hit…. %SEC-6-IPACCESSLOGP: list router-in denied udp n.n.n.n(137) (Vlan176 00de.adee.675a) -> n.n.n.n(137), 67 packets But in NX-OS this does not appear possible with 6.1.2. FIXES in

[c-nsp] nexus 7k IGMP QUERIER on HSRP interface?

2013-04-19 Thread Jeffrey G. Fitzwater
How should an igmp querier be configured if the interface is also configured for HSRP? In NX-OS 6.1.2 you must explicitly configure an IP for the querier. --- "vlan configuration (vlan#) " "ip igmp snooping querier A.B.C.D" -- Do I use the VIP IP or the interface IP

[c-nsp] nexus 7k logging with ACL name ?

2013-03-25 Thread Jeffrey G. Fitzwater
nexus 7k 6.1.2 Is there any way to show in log message, when you have and ACL with LOG option, the actual name of the ACL? Thanks for any help. Jeff Fitzwater OIT Network Systems Princeton University ___ cisco-nsp mailing list cisco-nsp@puck.neth

Re: [c-nsp] nx-os ssh connection startup delay ?

2013-03-11 Thread Jeffrey G. Fitzwater
en SSH is established the reverse record for the IP might be requested causing a delay. You could also do an ethanalyzer capture in the main vdc in one session while doing an SSH connection to the N7k and check what's happening. Best regards, Andras On Mon, Mar 11, 2013 at 4:55 PM, Jeffr

[c-nsp] nx-os ssh connection startup delay ?

2013-03-11 Thread Jeffrey G. Fitzwater
cisco 7k 6.1.2 We are seeing delays when ssh-ing to system just before the banner page comes up. Once session is up we see no delay. It has become very consistent when we log-in recently and the delay is always just before the banner is displayed. Debugging of the SSH session at client end

[c-nsp] How important is the HW revision of a module?

2013-02-14 Thread Jeffrey G. Fitzwater
How concerned should I be about the HW and FW revisions? 2.2 to 4.3 seems pretty far apart. Here are two CEF720 24 port 1000mb SFP WS-X6724-SFP modules. One is our current running and the other is from used market for lab testing. Mod MAC addresses HwFw

Re: [c-nsp] nexus 7k force FTP source interface ?

2013-01-30 Thread Jeffrey G. Fitzwater
Yes, but that's our plan B. Thanks Jeff F. On Jan 30, 2013, at 09:44 , Jeffrey G. Fitzwater wrote: > I am trying to FTP xfer config file to server, which we have configured to > only allow the nexus loopback0 as SRC IP, but xfer fails because SRC is one > of the L3 VLAN IPs

[c-nsp] nexus 7k force FTP source interface ?

2013-01-30 Thread Jeffrey G. Fitzwater
I am trying to FTP xfer config file to server, which we have configured to only allow the nexus loopback0 as SRC IP, but xfer fails because SRC is one of the L3 VLAN IPs NOT loopback0. How can I force FTP to use a certain IP interface, specifically from management loopback? So far I see no wa

Re: [c-nsp] Switch lights rapid blinking

2013-01-28 Thread Jeffrey G. Fitzwater
if this started one day. Its hard to say if there has been a change. This network needs to be rebuilt with proper vlans and removing a /16 from this 200 host network. From: "a.l.m.bu...@lboro.ac.uk<mailto:a.l.m.bu...@lboro.ac.uk>" mailto:a.l

Re: [c-nsp] Switch lights rapid blinking

2013-01-28 Thread Jeffrey G. Fitzwater
Alan, there are many normal things that can cause this, like ARP broadcast, unknown unicast especially in a large flat nets. I would start there, but remember it might be normal. Jeff Fitzwater OIT Network Systems Princeton University wrote: > Hi, >> Can someone please point me in the rig

[c-nsp] monitoring dropped CoPP packets ?

2013-01-04 Thread Jeffrey G. Fitzwater
nexus 7k with sup-1 5.2 How can I tell which MATCH statement within a CLASS-MAP is causing CoPP drops shown in example below? Here are the two I am concerned with. The CoPP stats were cleared 10 min prior to this output. -- class-map copp-system-class-normal (match-a

[c-nsp] 4500x logs Rx power low even with no link

2012-12-18 Thread Jeffrey G. Fitzwater
We have an veal 4500x with an 10GBase-LR SFP+ attached, which is now logging … %SFF8472-5-THRESHOLD_VIOLATION: Te1/32: Rx power low alarm; Operating value: -40.0 dBm, Threshold value: -18.4 dBm. We havn't installed the fiber yet but it seemed a little odd that the port was logging low power wi

[c-nsp] UCS blade internal vlan fixed range ??

2012-12-06 Thread Jeffrey G. Fitzwater
We are looking at using the CISCO UCS blades but we have a problem with the vlan ID we have in use not available on the UCS blade. Is there any way to change the internal VLAN range (3968 to 4048) that is fixed in in the USC blade code? They fixed this problem for the NX-OS to allow it to be us

Re: [c-nsp] UDP port 19 (chargen ) being punted to CPU ?

2012-08-28 Thread Jeffrey G. Fitzwater
It turns out it is some bug with adding this single entry into a long ACL. Once we did a rebuild of ACL ( no access list foo then access-list foo ) all worked fine. The singe ACE entry was added about two weeks ago and just last week someone decided to poke at the port 19 and thats when we saw

[c-nsp] UDP port 19 (chargen ) being punted to CPU ?

2012-08-27 Thread Jeffrey G. Fitzwater
We have within the last week noticed high CPU due to packets with DST of port 19 (chargen ) but NOT DST IP of router, being punted to CPU. We set up monitor port with SRC of RP CPU and both directions and can clearly see constant stream of DST port 19. We can't just block SRC IP or PORT since

Re: [c-nsp] Unsupported SFP on Cisco 2960

2012-07-25 Thread Jeffrey G. Fitzwater
How does DOM support fit into all this? CISCO SFP vs 3rd party? If a third party tells you they support DOM, does that mean it works as advertised and the values returned are correct.Is this a good reason to buy only CISCO? Jeff Fitzwater OIT Network Systems Princeton University On Jul 2

[c-nsp] OTV overlay mac limitation ?

2012-06-25 Thread Jeffrey G. Fitzwater
We are looking at OTV to mainly eliminate the tromboning of packets between out two data centers which will soon both have 7013 nexus (only one 7018 the other a 6513 soon to be upgraded). The two data centers each have many L3 subnets and are extended to the other data center using L2 trunks.

Re: [c-nsp] FWSM ACL présidence ? ACL not blocking traffic

2012-04-25 Thread Jeffrey G. Fitzwater
I am using MANUAL, so I then run the "access-list commit" config command. On Apr 25, 2012, at 11:24 , Jeffrey G. Fitzwater wrote: > > We have tried the following on our test FWSM setup and it appears to break > our original ACL used for blocking hosts. > Nothing i

[c-nsp] FWSM ACL présidence ? ACL not blocking traffic

2012-04-25 Thread Jeffrey G. Fitzwater
We have tried the following on our test FWSM setup and it appears to break our original ACL used for blocking hosts. Nothing in the docs I have read states one ACL overrides the other. I have FWSM with OUTSIDE interface that has ACL-1 that is applied to both inbound and outbound traffic to DEN

[c-nsp] nexus 7K COPP ARP traffic?

2012-03-26 Thread Jeffrey G. Fitzwater
I am trying to understand if ALL ARP (requests ) packets that a nexus 7K sees, need to be punted to the CPU and therefor managed by COPP policies / rate-limits? Over the weekend we had a data loop that cooked the CPU and we are trying to understand what packets that were control plane processe

[c-nsp] NX-OS MAC-MOVE notifications, no vlan shown ??

2012-03-21 Thread Jeffrey G. Fitzwater
I am running NX 5.2.1 on 7018 and have set logging level L2FM to 5 (notifications) in order to see the MAC-MOVES in logs. The problem I see is that VLAN associated with the MAC is not part of the error message as it is with 6500 IOS… NX-OS %L2FM-4-L2FM_MAC_MOVE: Mac 0014.4f82.9a60 has mov

Re: [c-nsp] channel fails when using sup 10g port ?

2012-01-05 Thread Jeffrey G. Fitzwater
bling the consistency > check. > > I haven't tried it. > > /chris > > >> -Original Message- >> From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- >> boun...@puck.nether.net] On Behalf Of David Prall >> Sent: Thursday, January 05, 2

Re: [c-nsp] channel fails when using sup 10g port ?

2012-01-05 Thread Jeffrey G. Fitzwater
just an access port. Jeff On Jan 5, 2012, at 10:48 , Andrew Miehs wrote: Hi Jeff, On Thu, Jan 5, 2012 at 1:12 PM, Jeffrey G. Fitzwater mailto:jf...@princeton.edu>> wrote: I am trying to use the sup720-10G 10g port and another 10g port on a 6708-10G module as an ether-channel pair

[c-nsp] channel fails when using sup 10g port ?

2012-01-05 Thread Jeffrey G. Fitzwater
I am trying to use the sup720-10G 10g port and another 10g port on a 6708-10G module as an ether-channel pair. Running IOS 12.2.SXI3 QOS enabled globally, but not enabled on 10G ports by default. If I do a "show mls qos" it tells me that qos is NOT enabled on the 10G modules. (FIFO mode) The

Re: [c-nsp] 6500 fabric switching mode ??

2011-11-02 Thread Jeffrey G. Fitzwater
to bus stalls if the blade has to be replaced. > > LR Mack McBride > Network Architect > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jeffrey G. Fitzwater > Sent: Monday, October 31, 201

[c-nsp] 6500 fabric switching mode ??

2011-10-31 Thread Jeffrey G. Fitzwater
Will the switching processor or routing processor on a sup720-3B incur more CPU load if its switching mode is BUS vs dCEF? It looks like it would be best for me to upgrade mod 3 to something that supports a fabric connection. If I run "show fabric switching-mode" on 6513 I get the following…

[c-nsp] 3750E as backup edge router default only

2011-10-28 Thread Jeffrey G. Fitzwater
We would like to try a 3750E as a backup router should we have a catastrophic failure of our current 6500 that has 3 ISP attached. This would only be used as a temp ISP backup. The 3750E would only need to connect to one ISP at 1G and only need DEFAULT to peer. Is there any issues with it ac

[c-nsp] nvram private-config ??

2011-10-25 Thread Jeffrey G. Fitzwater
I am running SXI3 which has the SSH bug that stops SSH logins from working if you change the HOSTNAME. Well... I went and changed the hostname and now ssh fails and have to use Telnet until I find a fix or reboot. I have tried the procedure to remove the phantom key, but it is logging that it

Re: [c-nsp] 3750X stacking with 3750 ??

2011-10-12 Thread Jeffrey G. Fitzwater
iates. All rights reserved. This document is Cisco Public Information. Jeff Thanks to all for info. On Oct 12, 2011, at 10:24 , Nick Hilliard wrote: On 12/10/2011 13:56, Jeffrey G. Fitzwater wrote: Does anybody know that absolute answer, if a 3750X can or cannot stack with a 3750 or 3750E

[c-nsp] 3750X stacking with 3750 ??

2011-10-12 Thread Jeffrey G. Fitzwater
Does anybody know that absolute answer, if a 3750X can or cannot stack with a 3750 or 3750E ? I have heard both Yes and No from Cisco ? Thanks for any info. Jeff Fitzwater OIT Network & Telecommunications Systems Princeton University ___ cisco-ns

Re: [c-nsp] 8021q trunk VLAN allowed list inbound and outbound behavior

2011-09-21 Thread Jeffrey G. Fitzwater
If they allow vlan 50 into your trunk port, then THAT traffic will hit your switch but will get dumped by your switch if you do NOT allow vlan 50; and I believe the vlan 50 packets are counted as DISCARDED frames on that port. So the pipe is more congested with vlan 50 traffic. (That is pack

Re: [c-nsp] BGP neighbor route-map or prefix-list ?

2011-09-16 Thread Jeffrey G. Fitzwater
neighbor. > > It should work either way though :) Let me know if you have some specific > examples and I can take a looksie at it. > > -Kevin > > On Fri, 16 Sep 2011, Jeffrey G. Fitzwater wrote: > >> I have been using the ( neighbor xxx.xxx.xxx.xxx pre

[c-nsp] BGP neighbor route-map or prefix-list ?

2011-09-16 Thread Jeffrey G. Fitzwater
I have been using the ( neighbor xxx.xxx.xxx.xxx prefix-lit myPrefix out ) to control what prefixes we announce to our ISPs. I now have a need to do a little more prefix filter control using ( neighbor xxx.xxx.xxx.xxx route-map myRouteMap out ) . Can I just do all the PREFIX filtering using t

Re: [c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Mike G
, Andrew Miehs wrote: > On Friday, June 17, 2011, Mike G wrote: > > Thanks for the great feedback Andrew! Did you ever discover the cause of > the crash? Also, was the 20 second outage due to the delay in the > active-hot sup taking over or was it something else? > >

Re: [c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Mike G
Thanks for the great feedback Andrew! Did you ever discover the cause of the crash? Also, was the 20 second outage due to the delay in the active-hot sup taking over or was it something else? On Jun 16, 2011 4:15 PM, "Andrew Miehs" wrote: > On Friday, June 17, 2011, Mike G wr

[c-nsp] VSS - Horror stories, show-stoppers, other personal experience?

2011-06-16 Thread Mike G
Hey all, We're looking at implementing VSS between our distribution/core switches, which are currently in a high-availability configuration using HSRP. >From my research so far, the system is straight-forward and the limitations and requirements are fairly well documented. Has anyone had persona

[c-nsp] Cases to lock a switch -- physical layer protection?

2011-04-19 Thread Furnish, Trever G
Hello, I have a particularly sensitive scenario where I need to allow access to other hardware within a rack but ensure that no one is able to physically modify connections to the top-of-rack switch and ASA. I would love to find an in-rack-mountable case to go around the Cisco gear, in the same w

[c-nsp] (no subject)

2010-08-25 Thread PARATTE Florent (G)
Hello, yesterday, a stack of three WS-C3750G-24TS-S IPBASE 12.2(50)SE3 reloaded after having erased its configuration... i tried to find the issue but i haven't found anything. I just have syslog messages as following: Notice 2010-08-2414:36:584606: 004527: Aug 24 14:36:57.301: %SYS-5-

Re: [c-nsp] Looping up far end smartjack

2010-06-28 Thread Paul G. Timmins
Fiber fed ones aren't - but usually the copper loop fed ones are. > -Original Message- > From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of Adam Korab > Sent: Monday, June 28, 2010 7:01 PM > To: Richey > Cc: cisco-nsp@puck.nether.net > Subjec

Re: [c-nsp] Cisco ISP Essentials - Book Not For Sale

2010-05-05 Thread Paul G. Timmins
I was able to get a copy from Amazon as a used copy. 2 new from $59.99 8 used from $39.95 > -Original Message- > From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- > boun...@puck.nether.net] On Behalf Of Felix Nkansah > Sent: Tuesday, May 04, 2010 7:42 PM > To: cisco-nsp@puck.neth

Re: [c-nsp] DC Inverters

2010-03-29 Thread Paul G. Timmins
You mean DC rectifiers for turning AC into DC? If you are going through the trouble, why not throw on a small chain of deep cycles to smooth things out and let you run a bit in a power outage? -Paul From: cisco-nsp-boun...@puck.nether.net [cisco-nsp-bou

Re: [c-nsp] Unified IOS (15.x) and feature based licensing model

2010-03-24 Thread Paul G. Timmins
I think it makes my choice to use Adtran CPE well placed. Except for their lack of IPv6 support *grumble* From: cisco-nsp-boun...@puck.nether.net [cisco-nsp-boun...@puck.nether.net] on behalf of Tim Franklin [...@pelican.org] Sent: Wednesday, March 24, 20

Re: [c-nsp] strange ipv6 problems on 3550 SVI

2010-03-19 Thread Paul G. Timmins
> Feature Navigator is wrong - as usual. 3550 does not have hw support for > IPv6, therefore no support for it. No plan, according to BU (have this > info via our account manager), to support > IPv6 on these switches. Go for 3560 or 3750 > > > Best Regards, >Janos Mohacsi Wh

Re: [c-nsp] cisco-nsp Digest, Vol 85, Issue 19

2009-12-07 Thread Paul G
-Original Message- From: cisco-nsp-requ...@puck.nether.net Sent: Monday, December 07, 2009 9:53 AM To: cisco-nsp@puck.nether.net Subject: cisco-nsp Digest, Vol 85, Issue 19 Send cisco-nsp mailing list submissions to cisco-nsp@puck.nether.net To subscribe or unsubscribe via the W

Re: [c-nsp] ipv6 cheat sheet

2009-11-25 Thread Paul G. Timmins
You can subnet ipv6 with your eyeballs, just add or subtract 4 from the prefix length for every character you move to the left or right. 1234:1234:1234:1234::/64 1234:1234:1234:123X::/60 1234:1234:1234:12XX::/56 1234:1234:1234:1XXX::/52 1234:1234:1234::/48 etc -Original Message- From: ci

Re: [c-nsp] 7200 Queuing

2009-11-09 Thread Florent PARATTE (G)
, even with the topology described just before. Normally, with this test topology, I should have RTP packet loss, is it right? -Message d'origine- De : Ryan West [mailto:rw...@zyedge.com] Envoyé : lundi, 9. novembre 2009 14:58 À : Florent PARATTE (G); cisco-nsp@puck.nether.net Objet : RE:

[c-nsp] 7200 Queuing

2009-11-09 Thread Florent PARATTE (G)
Hello, I would like to have precisions on default queuing on 7200 Routers. Here is my test topology: PC -100Mbps-- Switch --100Mbps--- Router --10Mbps-- Switch --100Mbps- LAN There is no QOS configured on equipments. There is a softphone on the PC an

Re: [c-nsp] IPV6 in general was Re: Large networks

2009-08-26 Thread Paul G. Timmins
We've got paying customers who came to us specifically because we support it. Our last decision for IP transport had IPv6 as a requirement. YMMV. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott Granados Sent: Wednesda

[c-nsp] Best bang for the buck in L2TP devices

2009-08-10 Thread Daryl G. Jurbala
So I'm running unencrypted L2TP back to my colo and currently have about 300 clients terminated to a 3825. Anyone have a good feeling for what the best bang for the buck would be to scale that up to 5000? I am looking at the ASA 5540s, but even Cisco pre-sales doesn't seem to be able to te

Re: [c-nsp] ISP in US

2009-07-31 Thread Daryl G. Jurbala
On Jul 30, 2009, at 6:42 PM, Andy William wrote: Thx all and i will think about Gulfstream Daryl :) but i start to think about P2P connections like AT&T IPL (International Private Line) or ATM PVC between both sites , what do you think ? what is the estimated cost for 2M connection ? T

Re: [c-nsp] ISP in US

2009-07-30 Thread Daryl G. Jurbala
None. There is no common carrier between the two. The US has plenty to choose from. The Middle East has very few, all buying from one or two top tier in-region carriers. It is also likely that you will have to use a VPN between the sites, as any type of SIP/RTP/H.323 is likely to be bloc

Re: [c-nsp] PPTP devices

2009-07-24 Thread Daryl G. Jurbala
On Jul 20, 2009, at 5:06 PM, Arie Vayner (avayner) wrote: If your 3825 router is having a hard time taking care of the load, I would recommend you look at a 7201 (or at an older 7301). I appreciate the responses from all. I am testing Poptop, but am having some interoperability issues wit

[c-nsp] PPTP devices

2009-07-20 Thread Daryl G. Jurbala
I'm in the unfortunate position of having to support a bunch (100 or so now, 300 or so very soon) PPTP connections. Right now I'm using a 3825, and based on CPU performance it looks like I'll be lucky to get 200 on this thing with my typical end use usage patterns. Cisco seems to be prett

Re: [c-nsp] IPV6 to IPV4

2009-07-15 Thread Paul G. Timmins
Dual Stack. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Chintan Shah Sent: Wednesday, July 15, 2009 2:08 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] IPV6 to IPV4 Hi, The IPV6 host has to communicate to some IPV4

Re: [c-nsp] BGP router-id - Chaos?

2009-07-15 Thread Paul G. Timmins
As far as I know, changing the router ID will take care of clearing the BGP tables for you. :) It should reset all sessions. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jeff Cartier Sent: Wednesday, July 15, 2009 1:49 P

Re: [c-nsp] Extended demarc

2009-07-08 Thread Paul G. Timmins
If you're asking about T1s, we've extended a demarc 23 stories over Category 0 building pair from the 70s or 80s and the circuit has run flawlessly. You have to test the cables when they're that old due to building sway causing shorts and things like that, but it works. T1s are designed to go sever

Re: [c-nsp] PIX/ASA Change Control

2009-06-26 Thread Paul G. Timmins
We use subversion, and giving web access to the repository through the normal subversion frontend, no special additions, works for us, but our needs have been basically just to get a last known good configuration to blow onto a customer's replacement unit prior to dispatching a technician. Works pr

Re: [c-nsp] About Multihoming

2009-05-17 Thread Daryl G. Jurbala
Multihoming is not always about redundancy, and the most likely point of failure is not always your own router. It is often something much more expensive, like your power. On May 13, 2009, at 4:06 PM, Robert Maier wrote: but if you are using Multihoming, only one router is single point of

Re: [c-nsp] The mechanics of SSO

2009-05-10 Thread Daryl G. Jurbala
On May 7, 2009, at 11:32 AM, Ross Vandegrift wrote: On Thu, May 07, 2009 at 02:03:44AM +0300, Ibrahim Abo Zaid wrote: actually i can't get if SUP running SSO why you think configuration will be loaded from active to standby during switchover ? ! SSO maintains control plane and data plane re

Re: [c-nsp] Adding member to Multilink PPP during production

2009-04-24 Thread Paul G. Timmins
We do this all the time in carrier scenarios, carrying voip. I've never seen a problem with taking out members of ppp multilink groups at random, and re-adding them at random. It might cause a packet or two to drop when the link goes away unexpectedly. > -Original Message- > From: cisco-ns

Re: [c-nsp] Rancid and commercial config management tools

2009-02-05 Thread Paul G. Timmins
If I were you, I'd package up Rancid, call it "JoeWare", and bill them a ton for it. :) > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joe Loiacono > Sent: Thursday, February 05, 2009 4:57 PM > To: Cisco-NSP Mailin

Re: [c-nsp] Management Interface 2960

2009-01-14 Thread Adam g
co.com/ViewWiki/index.php/How_to_configure_a_loopb > ack_interface_in_Cisco_Catalyst_switch > > > James > > > > -Original Message- > From: cisco-nsp-boun...@puck.nether.net > [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Adam g > Sent: Wedne

[c-nsp] Management Interface 2960

2009-01-13 Thread Adam g
Is there anyway to use a loopback interface as a management interface on a 2960? The option to create the loopback is there, but no management is available when I try to telnet. I've never used a loopback on a pure layer 2 device before, just curious to see if it was possible. Thanks ___

[c-nsp] Backing up a 15454 over TL1 - Database Is Busy

2009-01-07 Thread Paul G. Timmins
I have a ONS that I am backing up over TL1. If I run the program I wrote to handle the TL1 manually, it works after a couple of tries. If I connect in directly and type the commands, it runs properly almost every time. Running from cron, I always get an error about the database being busy. Anyone

Re: [c-nsp] OK, what is a cheap and dirty hack to test a port

2008-10-15 Thread Paul G. Timmins
Most modern sonet gear does not provide clocking to individual DS1s running it. The only reason clocking ever existed on point to point circuits was that the older gear couldn't avoid being an active participant in the circuit. It's possible the carrier you're using has upgraded the equipment, and

Re: [c-nsp] PA-POS-1OC3 vs. PA-A3-OC3SMI

2008-09-18 Thread Paul G. Timmins
That card handles E1s, not T1s. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Marco > van den Bovenkamp > Sent: Thursday, September 18, 2008 5:26 PM > To: cisco-nsp@puck.nether.net > Subject: Re: [c-nsp] PA-POS-1OC3 vs. PA-A3-OC3SMI > > David A

  1   2   >