Re: [c-nsp] STP over Port-channel issue

2024-05-06 Thread james list via cisco-nsp
Thanks good point on LACP Fast, we'll test it. RSTP should be in any case slower than 3 seconds with LACP FAST. Cheers James Il giorno lun 6 mag 2024 alle ore 15:22 Saku Ytti ha scritto: > On Mon, 6 May 2024 at 15:53, james list via cisco-nsp > wrote: > > > The qu

[c-nsp] STP over Port-channel issue

2024-05-06 Thread james list via cisco-nsp
dear experts a customer of mine has a legacy environment with 4 x Cisco 9500 (IOS XE 17.09.03) connected in a square mode with 2 links (2 per each connection) and each couple of links is considered a single virtual port (port-channel). Loops are managed with PVSTP. Two x C9500 are in DC1 while the

Re: [c-nsp] [j-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
hi I'd like to test with LACP slow, then can see if physical interface still flaps... Thanks for your support Il giorno dom 11 feb 2024 alle ore 18:02 Saku Ytti ha scritto: > On Sun, 11 Feb 2024 at 17:52, james list wrote: > > > - why physical interface flaps in DC1 if it i

Re: [c-nsp] [j-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
: Interface Ethernet1/44 is down (Initializing) Il giorno dom 11 feb 2024 alle ore 14:36 Saku Ytti ha scritto: > On Sun, 11 Feb 2024 at 15:24, james list wrote: > > > While on Juniper when the issue happens I always see: > > > > show log messages | last 440 | match LACPD_TIMEOUT

Re: [c-nsp] [j-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
e > related problems. > > Is this always the order of events? Does it always happen with Juniper > noticing problems receiving LACP PDU first? > > > On Sun, 11 Feb 2024 at 14:55, james list via juniper-nsp > wrote: > > > > Hi > > > > 1) cable has

Re: [c-nsp] [j-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
Hi 1) cable has been replaced with a brand new one, they said that to check an MPO 100 Gbs cable is not that easy 3) no errors reported on both side 2) here the output of cisco and juniper NEXUS1# sh interface eth1/44 transceiver details Ethernet1/44 transceiver is present type is QSFP-

Re: [c-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
50 et-0/1/5 Partner 32768 b0:8b:cf:83:49:5b 32768 429 100 Il giorno dom 11 feb 2024 alle ore 13:07 Gert Doering ha scritto: > HI, > > On Sun, Feb 11, 2024 at 12:50:32PM +0100, james list wrote: > > 2024 Feb 9 16:39:36 NEXUS1 %ETHPORT-5-IF_DOWN_PORT_CHANN

Re: [c-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
session exchange the same amount of routing updates >> across the links? >> >> >> On Sun, Feb 11, 2024, 21:09 james list via cisco-nsp < >> cisco-nsp@puck.nether.net> wrote: >> >> > Dear experts >> > we have a couple of BGP pe

Re: [c-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
he DC1 and DC2 bgp session exchange the same amount of routing updates > across the links? > > > On Sun, Feb 11, 2024, 21:09 james list via cisco-nsp < > cisco-nsp@puck.nether.net> wrote: > >> Dear experts >> we have a couple of BGP peers over a 100 Gbs interconnec

Re: [c-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
heers James Il giorno dom 11 feb 2024 alle ore 11:12 Gert Doering ha scritto: > Hi, > > On Sun, Feb 11, 2024 at 11:08:29AM +0100, james list via cisco-nsp wrote: > > we notice BGP flaps > > Any particular error message? BGP flaps can happen due to many different > reasons,

[c-nsp] Stange issue on 100 Gbs interconnection Juniper - Cisco

2024-02-11 Thread james list via cisco-nsp
Dear experts we have a couple of BGP peers over a 100 Gbs interconnection between Juniper (MX10003) and Cisco (Nexus N9K-C9364C) in two different datacenters like this: DC1 MX1 -- bgp -- NEXUS1 MX2 -- bgp -- NEXUS2 DC2 MX3 -- bgp -- NEXUS3 MX4 -- bgp -- NEXUS4 The issue we see is that sporadical

Re: [c-nsp] Port-channel not working Juniper vs Cisco

2023-06-11 Thread james list via cisco-nsp
JNPR from 30s to 1s, but not CSCO. I'm not sure if this > is the only problem, as insufficient data is shown about the state and > LACP PDUs. > > I believe the command is 'lacp rate fast' or 'lacp period short', to > reduce risk of operators getting bored,

[c-nsp] Port-channel not working Juniper vs Cisco

2023-06-11 Thread james list via cisco-nsp
Dear expert we've an issue in setting up a port-channel between a Juniper EX4400 and a Cisco Nexus N9K-C93180YC-EX over an SX 1 Gbs link. We've implemented the following configuration but on Juniper side it is interface flapping while on Cisco side it remains down. Light levels seem ok. Has anyon

Re: [c-nsp] TCP MSS CLAMPING issue

2022-01-23 Thread james list
RFC (=law) I'd expect those are followed, otherwise you cannot complain, am I wrong ? James Il giorno dom 23 gen 2022 alle ore 18:37 Gert Doering ha scritto: > Hi, > > On Sun, Jan 23, 2022 at 06:31:40PM +0100, james list wrote: > > thanks for the feedback. > > > &

Re: [c-nsp] TCP MSS CLAMPING issue

2022-01-23 Thread james list
point of view, since RFC6691 state "MUST use 536", the customer is not compliant. What do you think ? Cheers Il giorno dom 23 gen 2022 alle ore 17:40 Gert Doering ha scritto: > Hi, > > On Sun, Jan 23, 2022 at 05:10:42PM +0100, james list wrote: > > I suspect the current Cis

[c-nsp] TCP MSS CLAMPING issue

2022-01-23 Thread james list
Dear experts, I have tcp adjust-mss configured on an internet link with an ISP like following: interface GigabitEthernet0/0/0 description internet WAN link ip address x.x.x.x 255.255.255.252 ip tcp adjust-mss 1436 During DDOS attacks our firewall starts SYN challenge (acting as a proxy) and

Re: [c-nsp] policer on ASR1001X

2021-09-09 Thread james list
Hi just tested and police rate x pps is only applicable to control plane Cheers Il giorno mer 8 set 2021 alle ore 15:51 Lukasz Bromirski < luk...@bromirski.net> ha scritto: > Saku is always on point ;) > > > On 8 Sep 2021, at 15:31, Saku Ytti wrote: > > > > On Wed, 8 Sept 2021 at 16:30, Lukasz

Re: [c-nsp] policer on ASR1001X

2021-09-08 Thread james list
Thanks I would try to apply both Bps OR pps if possible Cheers Il Mer 8 Set 2021, 15:51 Lukasz Bromirski ha scritto: > Saku is always on point ;) > > > On 8 Sep 2021, at 15:31, Saku Ytti wrote: > > > > On Wed, 8 Sept 2021 at 16:30, Lukasz Bromirski > wrote: > > > >>> 3) is there any mode to l

[c-nsp] policer on ASR1001X

2021-09-07 Thread james list
Dear experts, I'd like to rate limit some ingress traffic coming from untrusted source to 10Mbs. I've an ASR1001X (16.3.7) and this is the config I'd place: * ip access-list extended ACL_10_203_231_129 permit ip any host 10.203.231.129 class-map match-all CM_LIMIT_INGRESS

Re: [c-nsp] strange issue

2021-07-29 Thread james list
Hi I've to ask for the VM routing table and then I will share. VM gateway is load balancer. Cheers James Il giorno gio 29 lug 2021 alle ore 18:17 Ryan Rawdon ha scritto: > > > On Jul 29, 2021, at 11:55 AM, james list wrote: > > > > > > Internet - Fire

[c-nsp] strange issue

2021-07-29 Thread james list
Dear experts My customer has the following very simple infrastructure: Internet - Firewall – Lan - Load balancer – Lan – hypervisor- VM It happens sometime that the VM do not respond anymore to Load balancer for external ip addresses until on the Load balancer it is setted to source NAT (SNA

[c-nsp] netflow not having stats

2021-05-16 Thread james list
Dear experts I've a netflow configured on ASR1001X which is sending indeed udp packet to collector but not displaying anything on the statistics, any idea why ? Config: flow exporter EXP_LOGS destination 10.101.11.119 source Port-channel5.99 (this is the ip address used to send netflow packet

[c-nsp] Integrate different DC technology over VXLAN

2021-04-09 Thread james list
Dear experts, do you have any suggestion where I can find useful information over www in order to provide DC interconnection of my two merging customers where one is running MPLS/VPLS with Juniper technology and the other one EVPN/VXLAN with Cisco ? The customer would like to explore the possibili

[c-nsp] Micro-segmentation

2020-08-02 Thread james list
Dear all, Many times my security team requires to have in place layer2 segregation in order to create dmz on the firewall as security measure to prevent lateral movement in case of different vlan management or to respect standards (pci, nist, etc). The result is in having hundreds or thousands vla

Re: [c-nsp] C6800 Sup2T buffering ?

2020-05-20 Thread james list
km Cheers Il giorno gio 21 mag 2020 alle ore 06:41 Saku Ytti ha scritto: > On Wed, 20 May 2020 at 23:45, james list wrote: > > Hey, > > > Dear experts > > my customer have some multicast flows which are detected sometime with > > peaks/latency. > > > They r

[c-nsp] C6800 Sup2T buffering ?

2020-05-20 Thread james list
Dear experts my customer have some multicast flows which are detected sometime with peaks/latency. They measure this latency based on protocol financial feed timestamp which I'm not able to decode (I guess they use stuff like Corvil). The path from the market datafeed source to the customer is:

[c-nsp] Internet monitoring in case of general issues

2020-03-14 Thread james list
Many times we recognize issues on internet, customer asking why additional delays are experienced, why it takes so long to access services, why "this afternoon is slow", we notice fresh bgp updates, etc etc... Everybody should know internet is cheap but unrealiable, customers many times would like

Re: [c-nsp] ASR1001X additional EBGP peer

2020-03-08 Thread james list
? We decided to add a link with the same carrier and we are aware we will not reach 50/50 balancing. What about RAM memory? Don t you see any issue? Cheers Il Dom 8 Mar 2020, 08:48 james list ha scritto: > Dear all > I'd like to have your recommandation. > > Our customer ru

[c-nsp] ASR1001X additional EBGP peer

2020-03-07 Thread james list
Dear all I'd like to have your recommandation. Our customer runs on ASR1001X an EBGP peering (full routing) with one ISP and some internal IBGP peering (full routing) with other sites of the customer. ASR1001xxx#sh ip bgp summary BGP router identifier 185.x.xxx, local AS number 12111 BGP table ve

Re: [c-nsp] [j-nsp] Traffic delayed

2018-10-03 Thread james list
RPs are expring and needed to be refreshed every 30 mins > interval. For multicast, check if any prune or joins are happening around > the time. Any IGMP joins or prunes around the same time. > > On Tue, Oct 2, 2018 at 9:38 AM james list wrote: > >> Dear experts >> >&g

Re: [c-nsp] [j-nsp] Traffic delayed

2018-10-02 Thread james list
Can you elaborate? Why just every 30 minutes the issue? Il Mar 2 Ott 2018, 20:34 Tom Beecher ha scritto: > You have switches with completely different buffer depths than you used > to. You prob want to look into that. > > On Tue, Oct 2, 2018 at 9:39 AM james list wrote: >

[c-nsp] Traffic delayed

2018-10-02 Thread james list
Dear experts I’ve a strange issue. Our customer replaced two L2/3 switches (C6500) where a pure L2 and L3 (hsrp) environment was set-up with a couple of new MX9k running the same L2 and L3 services but those two MX are running MPLS/VPLS to transport L3/L2 frames. Access switches are QFX5k connect

Re: [c-nsp] [j-nsp] Strange issue

2018-09-12 Thread james list
Thanks Saku/Lukas Investigation still on going I will let you know if something is found. Cheers Il Mar 11 Set 2018, 00:20 Saku Ytti ha scritto: > Oh I think I misunderstood OP. Yes, sounds like larger packets were > impacted smaller were not. > > On Tue, 11 Sep 2018 at 01:16, Saku Ytti wrote:

[c-nsp] Strange issue

2018-09-10 Thread james list
Dear experts I'm wondering if you can provide any hints/help on this problem. We experienced a strange issue in reaching the remote devices (servers) and perforiming bulk snmp walk, instead direct object query was working fine. After an entire nigth of issues (22pm to 6am), the problem disappeare

Re: [c-nsp] DHCP server

2018-06-16 Thread james list
Just one but hundreds of dhcp scopes. Cheers Il Sab 16 Giu 2018, 10:55 ha scritto: > How many physical interfaces/ports? > > A c891f could be sufficient... > > Jürgen. > -Original Message- > Dear experts, > a customer of mine as an old C7200 acting as DHCP server and wants to > replace

Re: [c-nsp] DHCP server

2018-06-15 Thread james list
th a much > cheaper software router like a ISR43xx > Do you mean the catylyst 9300 series? > > -Original Message- > From: cisco-nsp On Behalf Of james > list > Sent: Friday, June 15, 2018 1:19 PM > To: cisco-nsp NSP > Subject: [c-nsp] DHCP server > > This message or

[c-nsp] DHCP server

2018-06-15 Thread james list
Dear experts, a customer of mine as an old C7200 acting as DHCP server and wants to replace it with an IOS device in order to port configuration 1:1. He asked for a solution which is not so expensive, I'm thinking to ASR1k or CAT9k, do you have any other suggestion ? Thanks for any advice Cheers

[c-nsp] C4500x VSS convergence

2018-06-02 Thread james list
Dear experts I have a strange behaviour to share. I am testing ISSU and failover of a couple of 4500x configured in VSS. Basically what I see is that during the failover the active supervisor (or switc) takes more than 100 seconds to forward ip packets, making routing convergence is very slow. S

[c-nsp] IOS ip-base to advanced-ip-services upgrade

2018-04-23 Thread james list
Dear experts, I am wondering if anybody has clear the process to upgrade an ASR1001X from ip base to advanced ip. I need to enable BFD on BGP and seems that an upgrade is needed. I'd like to know if it's right to use or we need to buy a new license. Thanks for a feedback Cheers James __

[c-nsp] macsec

2018-03-14 Thread james list
Dear experts, I’m trying to get working macsec between Cisco 3850 and Juniper EX4300 without success. Here the config: Cisco 3850 key chain test macsec key 123ABC cryptographic-algorithm aes-128-cmac ! interface TenGigabitEthernet1/0/21 switchport access vlan 10 switchport mode acce

Re: [c-nsp] Huge SP CPU usage spikes 100%

2018-03-02 Thread james list
rrors : 0 TTL failures : 8688776 MTU failures : 0 Total packets L3 Processed by all Modules: 1710516850594 @ 57716 pps 2018-03-02 11:22 GMT+01:00 James Bensley : > On 1 March 2018 at 09:53, james list wrote: > > xxx#show ibc

Re: [c-nsp] Huge SP CPU usage spikes 100%

2018-03-01 Thread james list
bal Registers: global_cfg = 0x20 mis_init_sts = 0xF dimm_parm_cfg_hi = 0x0576 dimm_parm_cfg_lo = 0x42040F5A tm_init_size_cfg = 0x8000 xxx# 2018-03-01 10:02 GMT+01:00 James Bensley : > On 1 March 2018 at 08:29, james list wrote: > > D

Re: [c-nsp] Huge SP CPU usage spikes 100%

2018-03-01 Thread james list
; > Replace 'slot 5' with your port SUP port number. > > > On 1 March 2018 at 10:29, james list wrote: > > Dear experts, > > has anybody experienced a 100% SP CPU usage on C6500-Sup720 > (12.2(33)SXI5) > > with a lot of interrupts ? > > The main process

[c-nsp] Huge SP CPU usage spikes 100%

2018-03-01 Thread james list
Dear experts, has anybody experienced a 100% SP CPU usage on C6500-Sup720 (12.2(33)SXI5) with a lot of interrupts ? The main process is Heartbeat. Cisco TAC is struggling in having an idea to sorting out the issue, they are working since 3 days on it.. STP is stable, no mac moving, no real issue

[c-nsp] Meltdown and Spectre

2018-01-06 Thread james list
Dear all, For cve related to Meltdown and Spectre I'm wondering to know what are you doing or going to do on your networking gears? I'm struggling to understand something from vendors but I'd like to hear from people in the pitch. Cheers James ___ cisco

[c-nsp] Cisco Supply Chain issues in Amsterdam?

2018-01-03 Thread james list
Can only confirm to be in delay by two weeks now and still not got a delivery date by Cisco Big issues with end of year invoicing. Cheers James ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

[c-nsp] Traceroute not working as expected

2017-12-18 Thread james list
Dear expert I ve the following strange issue. In the same broadcast domain (10.1.0.0/24) I have four devices: 1) carrier router .1 2) firewallA .2 3) firewallB .3 4) firewallC .4 Carrier router has a default route to .2 (firewall A). 2-3-4) has gateway to .1 If I made traceroute to a wan locat

[c-nsp] multiple GRE on the same gear

2017-12-01 Thread james list
Dear experts, the bug CSCdy72539 states that on Cisco 6500 with SUP720 if are created multiple GRE interfaces using the same source address traffic is switched in CPU instead of hardware, it seems the issue is solved with SUP2T. The question: can ASR1001X suffer of the same issue ? I’m not able to

[c-nsp] multiple GRE on the same gear

2017-12-01 Thread james list
Dear experts, the bug CSCdy72539 states that on Cisco 6500 with SUP720 if are created multiple GRE interfaces using the same source address traffic is switched in CPU instead of hardware, it seems the issue is solved with SUP2T. The question: can ASR1001X suffer of the same issue ? I’m not able to

[c-nsp] PTP: what kind of monitoring is requested by MIFID 2 ?

2017-06-06 Thread james list
Dear experts, Has anybody already approached the PTP monitoring requested by MIDIF 2 ? --- Article 4 of RTS 25 states : Compliance with the maximum divergence requirements Operators of trading venues and their members or participants shall establish a system of traceability t

Re: [c-nsp] mac filter on switch

2017-05-23 Thread james list
+02:00 Peter Rathlev : > On Tue, 2017-05-23 at 15:22 +0200, james list wrote: > > I’ve a customer switch C3750 (12.2(35)), is there a way to permit on > > a specific port only a group of mac address which could generate > > traffic towards the switch ? > > > > I’

Re: [c-nsp] mac filter on switch

2017-05-23 Thread james list
GMT+02:00 Peter Rathlev : > On Tue, 2017-05-23 at 15:22 +0200, james list wrote: > > I’ve a customer switch C3750 (12.2(35)), is there a way to permit on > > a specific port only a group of mac address which could generate > > traffic towards the switch ? > > > > I’ve

[c-nsp] mac filter on switch

2017-05-23 Thread james list
Dear experts, I’ve a customer switch C3750 (12.2(35)), is there a way to permit on a specific port only a group of mac address which could generate traffic towards the switch ? I’ve tried mac acl but I do not get the expected result. Any idea, example or www reference is appreciated. Thanks in

Re: [c-nsp] traffic stuck firewall assymetry

2017-03-29 Thread james list
as well if the traffic is flowing asymmetrically. Best Regards Ted -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of james list Sent: den 29 mars 2017 17:31 To: cisco-nsp NSP ; Juniper List < juniper-...@puck.nether.net> Subject: [c-nsp] traf

[c-nsp] traffic stuck firewall assymetry

2017-03-29 Thread james list
Hi experts I’ve a couple active-passive firewall clusters (both with two member-A and member-B) in two different localtions connected with two different WAN links (WAN-A and WAN-B). One cluster in site A has firewall member-A as active and the router/switch (C6500 not in VSS) with WAN link A as HS

[c-nsp] PVST+ with arista box

2017-03-06 Thread james list
Dear experts, I'm looking for hands on experience in interconnecting a huge cisco network (>400 vlan) running PVST+ with some arista boxes which in principle as default uses MST but in theory could interact with Cisco proprietary PVST+. Despite the arista document which confirm the interop, has a

[c-nsp] How to protect the firewall

2017-02-09 Thread james list
Hi experts, I've a customer which experienced a big trouble since one of the server system engineer in the company has assigned to a test server the same ip address of the firewall cluster. They do not have networking resources and got time to understand the issue. My question: is there a way to

Re: [c-nsp] C3850 and NAT

2017-02-08 Thread james list
--Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of james list Sent: Wednesday, February 8, 2017 4:17 PM To: cisco-nsp NSP Subject: [c-nsp] C3850 and NAT Dear experts, I'm wondering if anybody can give detailed or experienced info about NAT support on

[c-nsp] C3850 and NAT

2017-02-08 Thread james list
Dear experts, I'm wondering if anybody can give detailed or experienced info about NAT support on c3850. I m not able to find any info on feature set but on the web is not so clear... I'm looking a cheapest, in respect to 6500 or 68xx, switch able to support NAT (not a router). Thank you in advan

[c-nsp] looking to find the best cisco device

2016-10-24 Thread james list
Dear expert I’m having a look to a scenario in order to find the best matching (and cheapest) device. I need at least 3 x 10 Gbs interface (one in ingress and 2 in egress port-channel) and to support functionalities such as: - BGP - Mcast PIM - Mcast proxy register - NAT - 10 Gbs throughput

Re: [c-nsp] huge amount of mcast traffic

2016-10-17 Thread james list
ll it work, yes. Will it work well, I doubt >> it. >> >> >> Matthew Huff | 1 Manhattanville Rd >> Director of Operations | Purchase, NY 10577 >> OTA Management LLC | Phone: 914-460-4039 >> aim: matthewbhuff| Fax: 914-694-5669

Re: [c-nsp] huge amount of mcast traffic

2016-10-13 Thread james list
application that uses > the multicast data. > > > > > > Matthew Huff | 1 Manhattanville Rd > > Director of Operations | Purchase, NY 10577 > > OTA Management LLC | Phone: 914-460-4039 > > aim: matthewbhuff | Fax: 914-69

Re: [c-nsp] huge amount of mcast traffic

2016-10-13 Thread james list
ment LLC | Phone: 914-460-4039 > aim: matthewbhuff| Fax: 914-694-5669 > > > -Original Message- > > From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of > > james list > > Sent: Thursday, October 13, 2016 10:45 AM > > T

[c-nsp] huge amount of mcast traffic

2016-10-13 Thread james list
Dear experts, I’ve a multicast financial market connected to my infrastructure, I’ve been informed that a new data multicast flow could reach up to 6 Gbs, so an huge amount of traffic needs to be replicated. Market is connected to an ASR 1001, than to a C6807-XL and customers are connected to C65

Re: [c-nsp] stange vlan 1 output

2016-10-07 Thread james list
.nether.net] On Behalf Of > james list > Sent: Friday, October 7, 2016 1:44 PM > To: Pete Templin > Cc: cisco-nsp@puck.nether.net > Subject: Re: [c-nsp] stange vlan 1 output > > There is firewall on the other side... > > Thanks all for the hints! > > Il 07/Ott/2016 1

Re: [c-nsp] stange vlan 1 output

2016-10-07 Thread james list
n that platform do this > a lot where the 4948 participates in DTP enough for the other side to drop > to access but the 4948 forgets to match it. > > > On 10/7/2016 9:17 AM, james list wrote: > >> Hi experts, >> >> an issue on my c6500 sup720 12.2(33)SXI5. >>

Re: [c-nsp] stange vlan 1 output

2016-10-07 Thread james list
is the perfect time to run > > sh int g8/45 switchport > sh int g9/27 switchport > > to get configured values VS negotiations > > -Original Message- > From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of > james list > Sent: Friday, October

[c-nsp] stange vlan 1 output

2016-10-07 Thread james list
Hi experts, an issue on my c6500 sup720 12.2(33)SXI5. I have two equal trunk configuration ports: xxx#sh run int g8/45 interface GigabitEthernet8/45 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 269 switchport mode trunk logging event link-status l

[c-nsp] C6500 dual supervisor redundancy to break

2016-10-01 Thread james list
Hi experts, on my running C6500 in one of the PoP I've configured redundancy with dual Sup-2T. Now I'm going to add a new C6500 and want to remove one Sup from running C6500 and to insert in the new one. The questions: 1) do you suggest to keep redundancy enabled also with one Sup in the current

[c-nsp] PTP design

2016-09-20 Thread james list
Hi experts! More than a vendor related question I’m wondering to discuss or get hints regarding the upcoming mifid2 new PTP request (max divergence from UTC of 1 microsecond) implementation that will be requested since Jan 2018. I’d like to setup in my DC two fully redundant PTP source, for this

Re: [c-nsp] Issue with port-channel hashing

2016-07-23 Thread james list
> You may also want to set 'mls ip cef load-sharing full'. > > Mack McBride | Senior Network Architect | ViaWest, Inc. > O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | > www.viawest.com > > > -Original Message- > From: cisco-nsp [mailt

Re: [c-nsp] Issue with port-channel hashing

2016-07-22 Thread james list
That is not unfortunately so adaptive to understand that a link is full and change for other sessions... :-( 2016-07-22 13:18 GMT+02:00 James Ventre : > > On Fri, Jul 22, 2016 at 3:45 AM, james list wrote: > >> 2) What if I would change hashing from fixed to adaptive ? a

[c-nsp] Issue with port-channel hashing

2016-07-22 Thread james list
Dear experts, I need help. On my C6500 sup720 (12.2(33)SXI5) I’ve a port channel 4 x 1Gbs with 1 Gbs full and hashing fixed. On the port-channel I’m trunking with few L2 vlans and on top of one of those I’ve L3 (with OSPF). Since hashing is fixed all the traffic that 6500 Asic has decided to

Re: [c-nsp] c6500 process memory

2016-07-01 Thread james list
esses to the SP but I doubt they have interest in reviving > the old platform. > > 70% is nothing really, I wouldn't worry about it until it's over 95% > > On 6/30/2016 12:18 PM, james list wrote: > >> Dear experts, >> just to ask if there are any guidance or best pr

[c-nsp] c6500 process memory

2016-06-30 Thread james list
Dear experts, just to ask if there are any guidance or best practice about process memory utilization, currently on my C6500 I'm at 70% usage and would like to know if I need to be alterted or not... I use this box for full routing table (BGP process is the higher memory user)... Kind regards Jam

[c-nsp] VTP doubt

2016-06-16 Thread james list
Hi I've two 6500 (6500-A and 6500-B) in production as VTP server, access switch are 3750 or 4500 as VTP clients. Today if I add manually a vlan on one of the two VTP server (ie on 6500-A) it's propagated to the other server (6500-B) and clients. The question is: do I've to add manually on both VT

Re: [c-nsp] udld fail ?

2016-05-31 Thread james list
yes, in general I see your points, I was wondering if there could be a reasonable reason for the mentioned behaviour 2016-05-31 16:33 GMT+02:00 Nick Hilliard : > james list wrote: > > Apparently the Cisco gear has disabled one out of the two ten giga > > interface after some

[c-nsp] udld fail ?

2016-05-31 Thread james list
dear experts I've a Cisco 6500 (12.2(33)) connected to a juniper EX4200 with a 2 x 10Gb port channel. Apparently the Cisco gear has disabled one out of the two ten giga interface after some flapping of the other one and due to UDLD that is currently non configured as aggressive nor bidirectional (

[c-nsp] BGP query

2016-03-10 Thread james list
Dear experts I've a BGP question. I've a router peering with a customer of mine, plain EBGP no MPLS, see following chain as example: myroutera --ebgp-- myrouterB --ebgp-- myrouterC --ebgp-- mycustomerA --ebgp-- mycustomer_BGP_worldwide_network Between myrouterX I use EBGP with private AS, now I'v

Re: [c-nsp] LAN + Security solution hint

2016-02-03 Thread james list
rt Doering" ha scritto: > Hi, > > On Wed, Feb 03, 2016 at 07:34:16PM +0100, james list wrote: > > I'd use cisco 3850/3750 in stack but i m not sure this is the right > choice. > > The problem is that what you're asking for is nearly impossible, so > coming up

Re: [c-nsp] LAN + Security solution hint

2016-02-03 Thread james list
Hi, > > On Wed, Feb 03, 2016 at 06:25:29PM +0100, james list wrote: > > well indeed I've asked for network expert suggestion, not for my father > > suggestion... > > Where can I send my invoice? > > You get paid for your customer to do this design, so if you want

Re: [c-nsp] LAN + Security solution hint

2016-02-03 Thread james list
h your best guess, and we'll confirm/deny whether you're on > the right track. > > On 2/3/2016 7:38 AM, james list wrote: > >> I’d like to have an hint if possible… >> >> For a project I’ve to provide a LAN solution to my customer with a mix of >> 1 >

[c-nsp] LAN + Security solution hint

2016-02-03 Thread james list
Dear experts, I’d like to have an hint if possible… For a project I’ve to provide a LAN solution to my customer with a mix of 1 Gbs copper and 10 Gbs copper ports (let say 20 x 1 Gbs and 30 x 10 Gbs ports) plus a firewalling solution supporting feature like server load balancing and reverse-prox

Re: [c-nsp] L2 over L3 scenario

2015-10-23 Thread james list
Thanks guys 2015-10-23 10:37 GMT+02:00 james list : > Dear experts, > > a customer of mine is looking for a solution to stretch L2 point2point > links over its L3 flat infrastructure, basically it has some L3 6500 > switches making its WAN networks and as routing protocol is

[c-nsp] L2 over L3 scenario

2015-10-23 Thread james list
Dear experts, a customer of mine is looking for a solution to stretch L2 point2point links over its L3 flat infrastructure, basically it has some L3 6500 switches making its WAN networks and as routing protocol is using eBGP over the wan links (no IGP at all... argh...). On top of the requested

Re: [c-nsp] bgp scalability C7600

2015-02-06 Thread james list
Hi gert Good info. >From customer requirements and pricing point of view the idea is to replace with a nexus. Regards Il 06/feb/2015 19:45 "Gert Doering" ha scritto: > Hi, > > On Fri, Feb 06, 2015 at 03:16:26PM +0100, james list wrote: > > do anybody have numb

[c-nsp] bgp scalability C7600

2015-02-06 Thread james list
Gents, do anybody have numbers in terms of BGP sessions scalability oin C7600 SUP-720 ? greetings ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-n