Re: [c-nsp] Issue with port-channel hashing

2016-07-22 Thread Mack McBride
ensure you have 'port-channel load-balance per-module'. You already found the adaptive knob. Adaptive is more difficult to troubleshoot when there are issues. You may also want to set 'mls ip cef load-sharing full'. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C

Re: [c-nsp] Router ASR1k ACL count question

2016-07-22 Thread Mack McBride
sized packets the processors get about 2500 cycles for each packet. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] ASR-1k 10g Licenses

2016-07-19 Thread Mack McBride
Throughput is output direction only. As for licensing, there is a certification in that. It is that complicated. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp

Re: [c-nsp] ASR9000/IOS-XR NAT/PAT

2016-07-18 Thread Mack McBride
http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r5-2/cg-nat/configuration/guide/b_cgnat_cg52xasr9k/b_cgnat_cg52xasr9k_chapter_011.pdf Documentation is also helpful. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr

Re: [c-nsp] mystery pseudowire interfaces?

2016-07-18 Thread Mack McBride
Another explanation is that pseudowires were previously created on the device and deleted and then When MPLS was re-enabled, the interfaces reappeared. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com

Re: [c-nsp] Router 6504E - SUP 720 3B XL

2016-07-18 Thread Mack McBride
free And all routes and longer prefixes that you are advertising must be accepted back. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun

Re: [c-nsp] ATT ASE Madness - one way ethernet

2016-07-08 Thread Mack McBride
side the interface configs should be pretty obvious. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mike

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-07 Thread Mack McBride
XR code is friendlier to BGP traffic engineering. The ASR9K also has better MPLS support. You should be able to do most things on both. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-07 Thread Mack McBride
ASR9Ks, we do primarily IP across our core. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: Peter Kranz [mailto:pkr...@unwiredltd.com] Sent: Thursday, July 07, 2016 2:50 PM

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-07 Thread Mack McBride
to the internet. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of James Jun Sent: Thursday, July 07, 2016 9:08 AM

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-06 Thread Mack McBride
4 million routes dynamically allocated. Sent from my Verizon, Samsung Galaxy smartphone Original message From: Howard Leadmon <how...@leadmon.net> Date: 7/6/16 12:54 AM (GMT-07:00) To: Mack McBride <mack.mcbr...@viawest.com>, 'Gert Doering' <g...@greenie.

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-05 Thread Mack McBride
: http://www.ciscopress.com/articles/article.asp?p=764234=3 Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de] Sent: Tuesday, July 05, 2016

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-05 Thread Mack McBride
The spec sheet isn't really clear. On the 2T it is 1M which is quite constraining. If it is actually 2M then it would be fine as eventually IPv4 will die and IPv6 is going to have less prefixes. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-05 Thread Mack McBride
The Sup6T is still TCAM limited. We are moving to ASR9Ks. But we have used the ASR1Ks where we need full netflow capture with great success. The port density and total throughput is not as high as the 6500 though. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C

Re: [c-nsp] SUP720's memory, looking at options..

2016-07-05 Thread Mack McBride
That code is definitely subject to memory leaks. Specifically if you have a shut down BGP session. That is also in some revs of SXI. Later revs tend to have fewer bugs since they are mostly patching bugs. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711

Re: [c-nsp] c6500 process memory

2016-07-05 Thread Mack McBride
Depending on specific code revision it may require a reboot. Some code revs are worse than others. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp

Re: [c-nsp] 7600 67xx DOM support

2016-06-24 Thread Mack McBride
2.3 -2.1 Te1/529.4 0.00 6.0 -2.7 -2.6 Te1/627.2 0.00 5.9 -2.7 -2.1 Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: ci

Re: [c-nsp] PBR two default gateway

2016-06-24 Thread Mack McBride
cause the router to crash. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Nick Cutting Sent: Thursday, June

Re: [c-nsp] Route processor memory at 99% on 720-3bxl

2016-06-24 Thread Mack McBride
If you can use Selective Route Download, it frees a good bit of space. We are running BGP with two full tables and we run fairly high mem utilization but aren't running into the memory leaks that we did on SXJ. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C

Re: [c-nsp] Route processor memory at 99% on 720-3bxl

2016-06-23 Thread Mack McBride
The memory cost savings of Selective Route Download is still substantial. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: Mark Tinka [mailto:mark.ti...@seacom.mu] Sent

Re: [c-nsp] Route processor memory at 99% on 720-3bxl

2016-06-22 Thread Mack McBride
The BGP process does receive the updates. It also has its own version of the RIB. The IP RIB Update process handles the 'installed routes' and pushes things out to the CEF. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com

Re: [c-nsp] Route processor memory at 99% on 720-3bxl

2016-06-22 Thread Mack McBride
My understanding is that on the 6500/7600 series the IP RIB Update process also contains the prebuilt FIB to be pushed into CEF. I may be wrong on that but I don't think so. BGP-SD definitely does not push the routes into the IP RIB Update process. Mack McBride | Senior Network Architect

Re: [c-nsp] Route processor memory at 99% on 720-3bxl

2016-06-22 Thread Mack McBride
HoldingGetbufsRetbufs Process 641 0 1219766648 1120578988 396258488 0 0 BGP Router 0 0 174776148 11120 159003332 0 0 *Init* 380 0 230882752 145539804 62344120 0 0 IP RIB Update Mack McBride | Senior Network

Re: [c-nsp] 6500/7600 TCAM Usage

2016-06-07 Thread Mack McBride
convergence time. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert Doering Sent: Tuesday, June 07, 2016 12:44

Re: [c-nsp] 6509 weird pps value

2016-06-06 Thread Mack McBride
There is no way to check the load directly. You simply calculate the combined bw of the two ports and that will give you the amount of traffic. Divide by 16G and that will give you the decimal version of percent. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C

Re: [c-nsp] 6509 weird pps value

2016-06-03 Thread Mack McBride
/cisco/nsp/145906 Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Saku Ytti Sent: Thursday, June 02, 2016 10:26

Re: [c-nsp] 6500/7600 TCAM Usage

2016-06-03 Thread Mack McBride
/irg-15-s-book/irg-selective-download.html That link is for S code but it is also available in SY. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720.891.2502 | C: 303.720.2711 | mack.mcbr...@viawest.com | www.viawest.com -Original Message- From: cisco-nsp [mailto:cisco-nsp

Re: [c-nsp] 6500/7600 TCAM Usage

2016-05-31 Thread Mack McBride
a 'safety net'. Once you get into that range, 'Bad things happen'. 'show mls cef summary' actually shows about 5K less on my devices but those routes are still in there. So don't use that as what is actually getting inserted. Mack McBride | Senior Network Architect | ViaWest, Inc. O: 720

Re: [c-nsp] Output drops on 2960

2016-02-05 Thread Mack McBride
4948Es are pretty good if you need 10/100/1000. They are also relatively cheap and can be bought used at a good discount. If you don't need 10/100 then the Nexus 9300 series has a shared 50Mbyte buffer. But they are relatively pricey and new so used is not really available. Mack McBride | Senior

Re: [c-nsp] C6509 Fabric Switch Capacity

2016-01-13 Thread Mack McBride
as well, the difference being the 6708 can't use a CFC. One caveat on the 6500 platform in general is bad things happen if you saturate the bus. Up to and including reload. Mack McBride Senior Network Architect -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Equipment for a large-ish LAN event

2015-12-30 Thread Mack McBride
the same thing with the Nexus 2000 edge. The latency with either one is still going to be well below measurable for gaming applications. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original

Re: [c-nsp] CoPP on 7600s

2015-11-30 Thread Mack McBride
divide flag packets Up with expected and unexpected sources as well. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] GRE tunnel 8000kbit (8Mbit) limit issue

2015-07-15 Thread Mack McBride
a huge number of cores to do the encapsulation. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert

Re: [c-nsp] SFPs (Third party) - ordered standard LH, but got ZX

2015-07-07 Thread Mack McBride
or transceiver unsupported When placing them in equipment then consider it a win. The light levels are consistent with LX/LH. EX transmit levels are above -1 db And ZX transmit levels are above 0 db. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com

Re: [c-nsp] CoPP on 7600s

2015-07-01 Thread Mack McBride
move from HWRL to CoPP. And yes if you have no icmp redirect everywhere then you can disable the HWRL that corresponds. Just remember to put it on the Loopback interfaces otherwise you can still have issues. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr

Re: [c-nsp] CoPP on 7600s

2015-06-30 Thread Mack McBride
in software on the RP. One important thing to remember with CoPP is to baseline before you implement dropping traffic. That way you can verify what you are doing will not affect normal operations. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com

Re: [c-nsp] Sup720 - Sup2T migration and CoPP

2015-06-01 Thread Mack McBride
Since the processor is faster you may want to open up policies a bit more as well. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun

Re: [c-nsp] outdoor rating

2015-05-27 Thread Mack McBride
the IE-3010. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of harbor235 Sent: Wednesday, May 27, 2015 1:45

Re: [c-nsp] New IOS release time frame, when bug is identified

2015-05-22 Thread Mack McBride
probably be the last links removed. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mark Tinka Sent

Re: [c-nsp] 7600 upgrade recommendations?

2015-05-18 Thread Mack McBride
environment to protect against code bugs because we got bit when we were running 6500s as borders years back. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: Nick Hilliard

Re: [c-nsp] Sup2T MPLS-TE - Strange issue with MTU selection

2015-05-18 Thread Mack McBride
The only two options I can think of are reboot the box and see if it fixes it Or open a tac case with cisco (which I am guessing you can't do because you don't have a service contract). Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com

Re: [c-nsp] Sup2T MPLS-TE - Strange issue with MTU selection

2015-05-17 Thread Mack McBride
Sounds like there is a link somewhere in the path with 1500 MTU. I would check everything in the path. And verify the path is what you think it is. Remember tunnel paths are not necessarily symmetrical. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com

Re: [c-nsp] 7600 upgrade recommendations?

2015-05-17 Thread Mack McBride
sites. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Bill Buhlman Sent: Friday, May 15, 2015 3:20 PM

Re: [c-nsp] One Cat6k/Sup2T is software switching, its identical partner is not

2015-04-18 Thread Mack McBride
Are all of the acls the same on both boxes? It almost sounds like one box had a tcam explosion due to differing ACLs. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From

Re: [c-nsp] Storm-control Issue

2015-04-15 Thread Mack McBride
A link to the article/web page would be helpful because the current first hit on page three really doesn't relate to the issue. Remember the order can change based on someone's search history as well as the number of people visiting a link And additional links being added. Mack McBride

Re: [c-nsp] 3850?

2015-04-09 Thread Mack McBride
go up to a ASR1000 series. The ASR1001 would be a good fit depending on the port count you need. But again you might need a router and A switch to achieve what you need. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn

Re: [c-nsp] CSR1000v as an IPSLA probe

2015-04-09 Thread Mack McBride
. And adjusting QoS so the ping packets Have preference on the upstream switch. But again, this isn't ideal. Getting a 2911 would probably still be a better option. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube

Re: [c-nsp] 3850?

2015-04-09 Thread Mack McBride
to solve the problem. If it is actually traffic based considering upgrading to a 4948E. It is a much more capable switch. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco

Re: [c-nsp] 7600 high cpu due to BGP process

2015-04-07 Thread Mack McBride
The usual response with code that old is to upgrade code. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] RR Client in different AS?

2015-03-31 Thread Mack McBride
If the next-hop is not accessible from the 'new' network, the routes will not be learned. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp

Re: [c-nsp] cisco regex puzzle of the day

2015-03-12 Thread Mack McBride
Yes agreed. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Saku Ytti Sent: Thursday, March 12, 2015

Re: [c-nsp] cisco regex puzzle of the day

2015-03-11 Thread Mack McBride
-in then you have a lot More complexity to worry about. I haven't tested this but it should work: (65400_)+([1-57-9][0-9]*_|6[01-35-9][0-9]*_|64[01-46-9][0-9]*_|645[1-9][0-9]*_|6450[1-9][0-9]*_|64500[0-9]+_)+ Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr

Re: [c-nsp] cisco regex puzzle of the day

2015-03-11 Thread Mack McBride
The junos expression in question DOES NOT involve backtracking. After a match there is no need to backtrack. The expression in question goes character by character excluding the 64500. Note the last part matches 6 digit ASNs that start with 64500. Mack McBride | Network Architect | ViaWest, Inc

Re: [c-nsp] BGP Max-Prefix - Notification Data Decode Options ?

2015-03-10 Thread Mack McBride
What is the value you are expecting? The last four digits indicate 400 (190 is hex obviously). I mean, how many prefixes are you expecting to send to your provider? Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter

Re: [c-nsp] ASR1000 IOS Version

2015-02-19 Thread Mack McBride
Personally we don't use the web interface at all. Frankly, SSL v3.0 is about the same security as http. Learning to use the command line via ssh is not that hard. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter

Re: [c-nsp] ASR1000 IOS Version

2015-02-18 Thread Mack McBride
This is probably the correct action. Disable the insecure protocol and force people to use command line until they upgrade. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube -Original Message

Re: [c-nsp] Understanding ASR1k / ESP40 capacity

2014-10-06 Thread Mack McBride
is possible). Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Simon Lockhart Sent: Monday, October 06, 2014 9:25

Re: [c-nsp] ASR1K upgrade

2014-08-29 Thread Mack McBride
/guide/chassis/asrswcfg/csa_rtu.html#pgfId-1057870 http://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/guide-c07-731639.html#_Toc386508999 Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com

Re: [c-nsp] Adjusting TCAM allocation weird behavior on 7600

2014-08-07 Thread Mack McBride
This does look like an issue with the dual sup configuration :(. You may need cisco support to sort it out. One solution may be to remove the second sup while configuring And then reinserting it once the box is booted with the desired configuration. Mack McBride | Network Architect | ViaWest, Inc

Re: [c-nsp] Adjusting TCAM allocation weird behavior on 7600

2014-08-06 Thread Mack McBride
. And a side note multicast and ipv6 both use two entries. The other poster that said you were 28 short was incorrect. Those settings should have worked. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube

Re: [c-nsp] Adjusting TCAM allocation weird behavior on 7600

2014-08-06 Thread Mack McBride
One other thought, try the following settings: Ipv6: 128 Multicast: 32 Ip and mpls as default Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco

Re: [c-nsp] Adjusting TCAM allocation weird behavior on 7600

2014-08-05 Thread Mack McBride
you want, you would do: mls cef maximum-routes ipv6 100 mls cef maximum-routes ip-multicast 28 no mls cef maximum-routes ip 750 no mls cef maximum-routes mpls 10 The MPLS and ip will be shared and equal. Mack McBride | Network Architect | ViaWest, Inc. -Original Message- From: cisco-nsp

Re: [c-nsp] 512K routes approaching - have you adjusted your tcam settings

2014-07-28 Thread Mack McBride
I forgot about that. The tcam settings on the Sup2T are dynamic. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message- From: Rolf Hanßen [mailto:n...@rhanssen.de] Sent: Saturday

[c-nsp] 512K routes approaching - have you adjusted your tcam settings

2014-07-25 Thread Mack McBride
fixed our devices because We connect to other services that have not prepared. So be on the lookout for MLSCEF-SP-7-FIB_EXCEPTION messages in your logs. Mack McBride | Network Architect | ViaWest, Inc. ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] Cisco 7600 pseudowire ping

2014-07-22 Thread Mack McBride
Given the patterned packet loss, I would suspect some kind of rate limiting. Where it is happening I cannot say. It could be built in to the pseudowire code. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter

Re: [c-nsp] Sup720 (6k/7600) FIB_EXCEPTION_THRESHOLD warnings

2014-06-09 Thread Mack McBride
Recommended settings have been discussed on Nanog and IPv6 meetings for the last couple of years. We are currently using 640 for IPv4 and 192 for IPv6. Mack McBride Network Architect -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Pete Templin

Re: [c-nsp] BGP funny in SXI

2014-05-30 Thread Mack McBride
There are a couple of bugs. Not sure of the bug ID but there is one that only happens if you have a shut down peer. It causes a memory leak. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube

Re: [c-nsp] BGP funny in SXI

2014-05-30 Thread Mack McBride
That sounds like the bug I mentioned. Eliminating the shutdown peer fixes the issue in the bug I mentioned. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message- From: Gert

Re: [c-nsp] Stuck route issues on 7600 and ASR1000

2014-05-15 Thread Mack McBride
Cisco found the bug. It is bug id: CSCuh43027. It effects 15.2 and some 15.3 code as well as the corresponding ASR code releases. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message

[c-nsp] Stuck route issues on 7600 and ASR1000

2014-05-14 Thread Mack McBride
identify a bug that matches this. BGP withdrawals are getting received since the route is removed from the bgp rib but not getting forwarded to the device rib from the protocol rib. Routes adds and changes seem to be unaffected. Any feedback on this problem would be helpful. Mack McBride Sr. Network

Re: [c-nsp] BFD bypassing CoPP on 6500

2014-05-05 Thread Mack McBride
ports, each port will rate limit to the specified value independently. If you have x ports and your rate limit is y, you are actually open to x*y traffic. I haven't had a chance to play with the sup2T family but my understanding is this was fixed in the sup2T. Mack McBride | Network Architect

Re: [c-nsp] ACL TCAM LOU exhaustion on 7600 running 15.1 code

2014-05-05 Thread Mack McBride
cause TCAM exhaustion rather than LOU exhaustion. The following document applies to all sup720 and rsp720 variants: http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper09186a00800c9470.shtml#wp43500 Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502

Re: [c-nsp] rate limit dns

2013-12-31 Thread Mack McBride
customers can't leave for another provider. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Dobbins

Re: [c-nsp] rate limit dns

2013-12-31 Thread Mack McBride
to agree to disagree on this point. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Dobbins, Roland Sent

Re: [c-nsp] rate limit dns

2013-12-31 Thread Mack McBride
Even our consumer customers tend to be businesses with an alternate connection in their office. We specialize in B2B. But we do have a number of home DSL customers. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn

Re: [c-nsp] rate limit dns

2013-12-30 Thread Mack McBride
is another arena as you still have a choice of providers available as the phone companies are still required to provide other providers access to their customers. I would advise against limiting DNS choices. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr

Re: [c-nsp] IPv6 in the lab......

2013-11-27 Thread Mack McBride
fully enabled. Mack McBride | Network Architect | ViaWest, Inc. O: 720.891.2502 | mack.mcbr...@viawest.com | www.viawest.com | LinkedIn |  Twitter | YouTube -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott Voll Sent: Wednesday, November 27

Re: [c-nsp] Best practice, MPLS and MTU settings

2013-10-25 Thread Mack McBride
I concur with 9100. Which providers have you run into problems with 9100? I know certain cisco gear doesn't support packets that big for certain links. The 3750/3560 series for example only support 9000 on gigabit interfaces and much smaller on 10/100 ports. LR Mack McBride Network Architect

[c-nsp] IPv6 bug back for the 7600

2013-08-26 Thread Mack McBride
. Mack McBride Network Architect ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Sup-720 fabric failures

2013-07-05 Thread Mack McBride
from shrinking and expanding. LR Mack McBride Network Architect -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Phil Mayers Sent: Friday, July 05, 2013 5:25 AM To: Robert Williams Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Sup-720 fabric

Re: [c-nsp] Drop rule at the end of CoPP conflicts with MAC learning

2013-07-05 Thread Mack McBride
Mack McBride Network Architect -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Rolf Hanßen Sent: Monday, July 01, 2013 6:44 AM To: Nick Hilliard Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Drop rule at the end of CoPP conflicts with MAC

Re: [c-nsp] RESOLVED: Weird IPv6 problem passing Layer3 traffic

2013-07-05 Thread Mack McBride
People running CoPP usually think of CoPP. People that have run GSRs will also think of receive access lists. Most right thinking ISPs should have rules that rate limit rather than drop the connection. CoPP is not a receive access list and should not be treated like one. LR Mack McBride Network

Re: [c-nsp] How to CoPP (Control Plane Policing) configuration?

2013-06-13 Thread Mack McBride
First step is determining what is actually hitting your control plane and what the maximum traffic levels for that traffic should be. For some platforms like the 6500 you have to deal with traffic requiring ARP And ICMP responses as well as what should be hitting the cpu for control and routing

Re: [c-nsp] ASR 1002-X FIB scalability (was: Re: ASR-100x intro)

2013-05-29 Thread Mack McBride
infra exmem statistics If the FIB overflows the DRAM, it will start using IRAM. If the IRAM fills the ESP may become unstable and traffic is offloaded to the RP. I have not found a command to actually show the CEF information on the ESP. LR Mack McBride Network Architect -Original Message

Re: [c-nsp] 7609 %CONST_DIAG-SP-3-HM_TEST_FAIL

2013-05-17 Thread Mack McBride
warranty or service contract, I would try to RMA if reseating doesn't help. LR Mack McBride Network Architect -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Chris Lane Sent: Friday, May 17, 2013 7:17 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp

Re: [c-nsp] Quick question regarding BGP route churn PRP-2

2013-03-07 Thread Mack McBride
for the inactive BGP sessions. I encountered this problem on our PRP-2s. LR Mack McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Drew Weaver Sent: Thursday, March 07, 2013 6:21 AM To: cisco-nsp

Re: [c-nsp] summary, but leak a couple

2013-03-06 Thread Mack McBride
You would put in aggregate summary-only for the ones you want to leak. Each summary-only line will produce a route. LR Mack McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Aaron Sent: Tuesday

Re: [c-nsp] HSRP/VRRP/GLBP Dual Stack on Cat6500/Sup720 3BXL?

2013-03-01 Thread Mack McBride
HSRP and GLPB requires setting up different groups for the dual stack. The same groups can be used on different vlans but the IPv6 has to be in a separate group from IPv4. LR Mack McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp

Re: [c-nsp] 802.1Q-in-Q VLAN Tag Termination on 7600/6500 OSN modules

2013-03-01 Thread Mack McBride
7600 will do EoMPLS with lan cards (best bet is pseudowire mode) but there are caveats with vlan rewrite and things like that. And of course the lack of support for Q in Q. Mack -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] BGP advertisements more specific than IGP

2013-03-01 Thread Mack McBride
to be dropping deaggregates. LR Mack McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of James Urwiller Sent: Thursday, February 28, 2013 8:12 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] BGP

Re: [c-nsp] BGP advertisements more specific than IGP

2013-03-01 Thread Mack McBride
[mailto:jurwil...@americanbb.com] Sent: Friday, March 01, 2013 10:27 AM To: Mack McBride; cisco-nsp@puck.nether.net Subject: Re: BGP advertisements more specific than IGP Community strings don't effect inbound traffic, right? Is there really no good way to influence inbound traffic? James Urwiller

Re: [c-nsp] 802.1Q-in-Q VLAN Tag Termination on 7600/6500 OSN modules

2013-02-27 Thread Mack McBride
The ES+ cards are the way to go. The OSM modules aren't going to do what you want. In addition they aren't properly supported in newer code. LR Mack McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf

Re: [c-nsp] low cost reliable optics

2013-02-23 Thread Mack McBride
OSI is another good source. LR Mack McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of harbor235 Sent: Saturday, February 23, 2013 7:48 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] low cost

Re: [c-nsp] ASR-100x intro

2013-02-20 Thread Mack McBride
that and there is going to be table pruning if growth continues. LR Mack McBride Network Architect -Original Message- From: Charles Sprickman [mailto:sp...@bway.net] Sent: Tuesday, February 19, 2013 9:03 PM To: Lukasz Bromirski Cc: Mack McBride; cisco-nsp@puck.nether.net Subject: Re: [c-nsp

Re: [c-nsp] Next step-up from 7206VXR

2013-02-20 Thread Mack McBride
they handle the routes. The only difference is between v4 and v6, 2 x v4 = 1 x v6. There is a difference in the ACL TCAM but it mainly effects IPv6 ACLs. LR Mack McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Next step-up from 7206VXR

2013-02-20 Thread Mack McBride
I believe amazon ran into this not too long ago. At 768k you are effectively limiting your IPv6 table to 128k (you can't really go more than that if you expect to use IPv6). I recommend a 640k/192k split. As for an article: http://www.ipv4depletion.com/?p=672 LR Mack McBride Network Architect

Re: [c-nsp] ip tcp adjust-mss

2013-02-14 Thread Mack McBride
Reality is UDP matters. LR Mack McBride Network Architect -Original Message- From: Randy [mailto:randy_94...@yahoo.com] Sent: Wednesday, February 13, 2013 11:14 PM To: Mack McBride Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] ip tcp adjust-mss HUH! What corner cases

Re: [c-nsp] ip tcp adjust-mss

2013-02-13 Thread Mack McBride
There are always corner cases. That's why I said most. LR Mack McBride Network Architect From: Alexander Arseniev [mailto:ecra...@hotmail.com] Sent: Tuesday, February 12, 2013 9:03 AM To: Mack McBride; moua0...@umn.edu; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] ip tcp adjust-mss From

Re: [c-nsp] ip tcp adjust-mss

2013-02-11 Thread Mack McBride
I wouldn't say it is good news. Lots of people smoke and drink too, it doesn't make it healthy. Long term you want to stop fragmenting. LR Mack McBride Network Architect From: Eric A Louie [mailto:elo...@yahoo.com] Sent: Monday, February 11, 2013 2:00 PM To: Mack McBride; Cisco NSP Subject: Re

Re: [c-nsp] ip tcp adjust-mss

2013-02-11 Thread Mack McBride
This is very common practice and practically everyone does it. Usually if you have your own backbone you enlarge the backbone packet size though. Sometimes that isn't an option due to provider switches in the path. LR Mack McBride Network Architect -Original Message- From: cisco-nsp

  1   2   3   4   >