ensure you have 'port-channel load-balance per-module'.
You already found the adaptive knob.
Adaptive is more difficult to troubleshoot when there are issues.
You may also want to set 'mls ip cef load-sharing full'.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C
sized packets the processors get about 2500 cycles
for each packet.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net
Throughput is output direction only.
As for licensing, there is a certification in that.
It is that complicated.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp
http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5-2/cg-nat/configuration/guide/b_cgnat_cg52xasr9k/b_cgnat_cg52xasr9k_chapter_011.pdf
Documentation is also helpful.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr
Another explanation is that pseudowires were previously created on the device
and deleted and then
When MPLS was re-enabled, the interfaces reappeared.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
free
And all routes and longer prefixes that you are advertising must be accepted
back.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun
side the interface configs
should be pretty obvious.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mike
XR code is friendlier to BGP traffic engineering.
The ASR9K also has better MPLS support.
You should be able to do most things on both.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message
ASR9Ks, we do primarily IP across our core.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: Peter Kranz [mailto:pkr...@unwiredltd.com]
Sent: Thursday, July 07, 2016 2:50 PM
to the internet.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of James
Jun
Sent: Thursday, July 07, 2016 9:08 AM
4 million routes dynamically allocated.
Sent from my Verizon, Samsung Galaxy smartphone
Original message
From: Howard Leadmon <how...@leadmon.net>
Date: 7/6/16 12:54 AM (GMT-07:00)
To: Mack McBride <mack.mcbr...@viawest.com>, 'Gert Doering'
<g...@greenie.
:
http://www.ciscopress.com/articles/article.asp?p=764234=3
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: Gert Doering [mailto:g...@greenie.muc.de]
Sent: Tuesday, July 05, 2016
The spec sheet isn't really clear.
On the 2T it is 1M which is quite constraining.
If it is actually 2M then it would be fine as eventually IPv4 will die and IPv6
is going to have less prefixes.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711
The Sup6T is still TCAM limited.
We are moving to ASR9Ks.
But we have used the ASR1Ks where we need full netflow capture with great
success.
The port density and total throughput is not as high as the 6500 though.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C
That code is definitely subject to memory leaks.
Specifically if you have a shut down BGP session.
That is also in some revs of SXI.
Later revs tend to have fewer bugs since they are mostly patching bugs.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711
Depending on specific code revision it may require a reboot.
Some code revs are worse than others.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp
2.3 -2.1
Te1/529.4 0.00 6.0 -2.7 -2.6
Te1/627.2 0.00 5.9 -2.7 -2.1
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: ci
cause the router to crash.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Nick
Cutting
Sent: Thursday, June
If you can use Selective Route Download, it frees a good bit of space.
We are running BGP with two full tables and we run fairly high mem utilization
but aren't running into the memory leaks that we did on SXJ.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C
The memory cost savings of Selective Route Download is still substantial.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: Mark Tinka [mailto:mark.ti...@seacom.mu]
Sent
The BGP process does receive the updates. It also has its own version of the
RIB.
The IP RIB Update process handles the 'installed routes' and pushes things out
to the CEF.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com
My understanding is that on the 6500/7600 series the IP RIB Update process also
contains the prebuilt FIB to be pushed into CEF.
I may be wrong on that but I don't think so. BGP-SD definitely does not push
the routes into the IP RIB Update process.
Mack McBride | Senior Network Architect
HoldingGetbufsRetbufs Process
641 0 1219766648 1120578988 396258488 0 0 BGP Router
0 0 174776148 11120 159003332 0 0 *Init*
380 0 230882752 145539804 62344120 0 0 IP RIB Update
Mack McBride | Senior Network
convergence time.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert
Doering
Sent: Tuesday, June 07, 2016 12:44
There is no way to check the load directly.
You simply calculate the combined bw of the two ports and that will give you
the amount of traffic.
Divide by 16G and that will give you the decimal version of percent.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C
/cisco/nsp/145906
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Saku
Ytti
Sent: Thursday, June 02, 2016 10:26
/irg-15-s-book/irg-selective-download.html
That link is for S code but it is also available in SY.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com
-Original Message-
From: cisco-nsp [mailto:cisco-nsp
a 'safety net'.
Once you get into that range, 'Bad things happen'.
'show mls cef summary' actually shows about 5K less on my devices but those
routes are still in there.
So don't use that as what is actually getting inserted.
Mack McBride | Senior Network Architect | ViaWest, Inc.
O: 720
4948Es are pretty good if you need 10/100/1000.
They are also relatively cheap and can be bought used at a good discount.
If you don't need 10/100 then the Nexus 9300 series has a shared 50Mbyte buffer.
But they are relatively pricey and new so used is not really available.
Mack McBride | Senior
as well, the difference being the 6708 can't use a
CFC.
One caveat on the 6500 platform in general is bad things happen if you saturate
the bus.
Up to and including reload.
Mack McBride
Senior Network Architect
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net
the same thing with
the Nexus 2000 edge.
The latency with either one is still going to be well below measurable for
gaming applications.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original
divide flag
packets
Up with expected and unexpected sources as well.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net
a huge number of cores to do the encapsulation.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert
or
transceiver unsupported
When placing them in equipment then consider it a win.
The light levels are consistent with LX/LH.
EX transmit levels are above -1 db
And ZX transmit levels are above 0 db.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com
move from HWRL to CoPP.
And yes if you have no icmp redirect everywhere then you can disable the HWRL
that corresponds.
Just remember to put it on the Loopback interfaces otherwise you can still have
issues.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr
in software on the RP.
One important thing to remember with CoPP is to baseline before you
implement dropping traffic. That way you can verify what you are doing
will not affect normal operations.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com
Since the processor is faster you may want to open up policies a bit more as
well.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun
the IE-3010.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of
harbor235
Sent: Wednesday, May 27, 2015 1:45
probably be the last links removed.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mark
Tinka
Sent
environment to protect
against
code bugs because we got bit when we were running 6500s as borders years back.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: Nick Hilliard
The only two options I can think of are reboot the box and see if it fixes it
Or open a tac case with cisco (which I am guessing you can't do because you
don't have
a service contract).
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com
Sounds like there is a link somewhere in the path with 1500 MTU.
I would check everything in the path.
And verify the path is what you think it is.
Remember tunnel paths are not necessarily symmetrical.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com
sites.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Bill
Buhlman
Sent: Friday, May 15, 2015 3:20 PM
Are all of the acls the same on both boxes?
It almost sounds like one box had a tcam explosion due to differing ACLs.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From
A link to the article/web page would be helpful because the current first hit
on page three really doesn't relate to the issue.
Remember the order can change based on someone's search history as well as the
number of people visiting a link
And additional links being added.
Mack McBride
go up to a ASR1000 series.
The ASR1001 would be a good fit depending on the port count you need. But
again you might need a router and
A switch to achieve what you need.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn
. And adjusting QoS so the ping
packets
Have preference on the upstream switch.
But again, this isn't ideal. Getting a 2911 would probably still be a better
option.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
to solve the problem.
If it is actually traffic based considering upgrading to a 4948E.
It is a much more capable switch.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco
The usual response with code that old is to upgrade code.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net
If the next-hop is not accessible from the 'new' network, the routes will not
be learned.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp
Yes agreed.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Saku
Ytti
Sent: Thursday, March 12, 2015
-in then you have a lot
More complexity to worry about.
I haven't tested this but it should work:
(65400_)+([1-57-9][0-9]*_|6[01-35-9][0-9]*_|64[01-46-9][0-9]*_|645[1-9][0-9]*_|6450[1-9][0-9]*_|64500[0-9]+_)+
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr
The junos expression in question DOES NOT involve backtracking.
After a match there is no need to backtrack.
The expression in question goes character by character excluding the 64500.
Note the last part matches 6 digit ASNs that start with 64500.
Mack McBride | Network Architect | ViaWest, Inc
What is the value you are expecting?
The last four digits indicate 400 (190 is hex obviously).
I mean, how many prefixes are you expecting to send to your provider?
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter
Personally we don't use the web interface at all.
Frankly, SSL v3.0 is about the same security as http.
Learning to use the command line via ssh is not that hard.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter
This is probably the correct action.
Disable the insecure protocol and force people to use command line until they
upgrade.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message
is possible).
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Simon
Lockhart
Sent: Monday, October 06, 2014 9:25
/guide/chassis/asrswcfg/csa_rtu.html#pgfId-1057870
http://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/guide-c07-731639.html#_Toc386508999
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com
This does look like an issue with the dual sup configuration :(.
You may need cisco support to sort it out.
One solution may be to remove the second sup while configuring
And then reinserting it once the box is booted with the desired configuration.
Mack McBride | Network Architect | ViaWest, Inc
.
And a side note multicast and ipv6 both use two entries.
The other poster that said you were 28 short was incorrect.
Those settings should have worked.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
One other thought, try the following settings:
Ipv6: 128
Multicast: 32
Ip and mpls as default
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco
you want, you would do:
mls cef maximum-routes ipv6 100
mls cef maximum-routes ip-multicast 28
no mls cef maximum-routes ip 750
no mls cef maximum-routes mpls 10
The MPLS and ip will be shared and equal.
Mack McBride | Network Architect | ViaWest, Inc.
-Original Message-
From: cisco-nsp
I forgot about that.
The tcam settings on the Sup2T are dynamic.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: Rolf Hanßen [mailto:n...@rhanssen.de]
Sent: Saturday
fixed our devices because
We connect to other services that have not prepared.
So be on the lookout for MLSCEF-SP-7-FIB_EXCEPTION messages in your logs.
Mack McBride | Network Architect | ViaWest, Inc.
___
cisco-nsp mailing list cisco-nsp
Given the patterned packet loss, I would suspect some kind of rate limiting.
Where it is happening I cannot say. It could be built in to the pseudowire
code.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter
Recommended settings have been discussed on Nanog and IPv6 meetings for the
last couple of years.
We are currently using 640 for IPv4 and 192 for IPv6.
Mack McBride
Network Architect
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Pete
Templin
There are a couple of bugs.
Not sure of the bug ID but there is one that only happens if you have a shut
down peer.
It causes a memory leak.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
That sounds like the bug I mentioned.
Eliminating the shutdown peer fixes the issue in the bug I mentioned.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: Gert
Cisco found the bug. It is bug id: CSCuh43027.
It effects 15.2 and some 15.3 code as well as the corresponding ASR code
releases.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message
identify a bug
that matches this. BGP withdrawals are getting received since
the route is removed from the bgp rib but not getting forwarded
to the device rib from the protocol rib. Routes adds and changes
seem to be unaffected. Any feedback on this problem would be helpful.
Mack McBride
Sr. Network
ports, each port will rate limit to the
specified
value independently. If you have x ports and your rate limit is y, you are
actually open
to x*y traffic. I haven't had a chance to play with the sup2T family but my
understanding
is this was fixed in the sup2T.
Mack McBride | Network Architect
cause TCAM exhaustion rather than LOU
exhaustion.
The following document applies to all sup720 and rsp720 variants:
http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a00800c9470.shtml#wp43500
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502
customers
can't leave for another provider.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of
Dobbins
to agree to disagree
on this point.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of
Dobbins, Roland
Sent
Even our consumer customers tend to be businesses with an alternate connection
in their office.
We specialize in B2B. But we do have a number of home DSL customers.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn
is another arena as you still have a choice of providers available as the
phone companies are still required
to provide other providers access to their customers.
I would advise against limiting DNS choices.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr
fully enabled.
Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |
Twitter | YouTube
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott
Voll
Sent: Wednesday, November 27
I concur with 9100.
Which providers have you run into problems with 9100?
I know certain cisco gear doesn't support packets that big for certain links.
The 3750/3560 series for example only support 9000 on gigabit interfaces and
much smaller on 10/100 ports.
LR Mack McBride
Network Architect
.
Mack McBride
Network Architect
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
from shrinking and expanding.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Phil
Mayers
Sent: Friday, July 05, 2013 5:25 AM
To: Robert Williams
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Sup-720 fabric
Mack McBride
Network Architect
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Rolf
Hanßen
Sent: Monday, July 01, 2013 6:44 AM
To: Nick Hilliard
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Drop rule at the end of CoPP conflicts with MAC
People running CoPP usually think of CoPP.
People that have run GSRs will also think of receive access lists.
Most right thinking ISPs should have rules that rate limit rather than drop the
connection.
CoPP is not a receive access list and should not be treated like one.
LR Mack McBride
Network
First step is determining what is actually hitting your control plane and
what the maximum traffic levels for that traffic should be.
For some platforms like the 6500 you have to deal with traffic requiring ARP
And ICMP responses as well as what should be hitting the cpu for control and
routing
infra exmem statistics
If the FIB overflows the DRAM, it will start using IRAM.
If the IRAM fills the ESP may become unstable and traffic is offloaded to the
RP.
I have not found a command to actually show the CEF information on the ESP.
LR Mack McBride
Network Architect
-Original Message
warranty or service contract, I would try to RMA if reseating
doesn't help.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Chris
Lane
Sent: Friday, May 17, 2013 7:17 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp
for the inactive BGP
sessions.
I encountered this problem on our PRP-2s.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Drew Weaver
Sent: Thursday, March 07, 2013 6:21 AM
To: cisco-nsp
You would put in aggregate summary-only for the ones you want to leak.
Each summary-only line will produce a route.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Aaron
Sent: Tuesday
HSRP and GLPB requires setting up different groups for the dual stack.
The same groups can be used on different vlans but the IPv6 has to be in a
separate group from IPv4.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp
7600 will do EoMPLS with lan cards (best bet is pseudowire mode) but there are
caveats with vlan rewrite and things like that.
And of course the lack of support for Q in Q.
Mack
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net
to be dropping deaggregates.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of James Urwiller
Sent: Thursday, February 28, 2013 8:12 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] BGP
[mailto:jurwil...@americanbb.com]
Sent: Friday, March 01, 2013 10:27 AM
To: Mack McBride; cisco-nsp@puck.nether.net
Subject: Re: BGP advertisements more specific than IGP
Community strings don't effect inbound traffic, right?
Is there really no good way to influence inbound traffic?
James Urwiller
The ES+ cards are the way to go.
The OSM modules aren't going to do what you want.
In addition they aren't properly supported in newer code.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf
OSI is another good source.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of harbor235
Sent: Saturday, February 23, 2013 7:48 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] low cost
that and there is
going to be table pruning if
growth continues.
LR Mack McBride
Network Architect
-Original Message-
From: Charles Sprickman [mailto:sp...@bway.net]
Sent: Tuesday, February 19, 2013 9:03 PM
To: Lukasz Bromirski
Cc: Mack McBride; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp
they handle
the routes. The only difference is between v4 and v6, 2 x v4 = 1 x v6.
There is a difference in the ACL TCAM but it mainly effects IPv6 ACLs.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net
I believe amazon ran into this not too long ago.
At 768k you are effectively limiting your IPv6 table to 128k (you can't really
go more than that if you expect to use IPv6).
I recommend a 640k/192k split.
As for an article:
http://www.ipv4depletion.com/?p=672
LR Mack McBride
Network Architect
Reality is UDP matters.
LR Mack McBride
Network Architect
-Original Message-
From: Randy [mailto:randy_94...@yahoo.com]
Sent: Wednesday, February 13, 2013 11:14 PM
To: Mack McBride
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ip tcp adjust-mss
HUH!
What corner cases
There are always corner cases.
That's why I said most.
LR Mack McBride
Network Architect
From: Alexander Arseniev [mailto:ecra...@hotmail.com]
Sent: Tuesday, February 12, 2013 9:03 AM
To: Mack McBride; moua0...@umn.edu; cisco-nsp@puck.nether.net
Subject: RE: [c-nsp] ip tcp adjust-mss
From
I wouldn't say it is good news.
Lots of people smoke and drink too, it doesn't make it healthy.
Long term you want to stop fragmenting.
LR Mack McBride
Network Architect
From: Eric A Louie [mailto:elo...@yahoo.com]
Sent: Monday, February 11, 2013 2:00 PM
To: Mack McBride; Cisco NSP
Subject: Re
This is very common practice and practically everyone does it.
Usually if you have your own backbone you enlarge the backbone packet size
though.
Sometimes that isn't an option due to provider switches in the path.
LR Mack McBride
Network Architect
-Original Message-
From: cisco-nsp
1 - 100 of 346 matches
Mail list logo