Re: [c-nsp] SXH3 ghost bugs - more details

2008-09-16 Thread Gert Doering
Hi,

On Mon, Sep 15, 2008 at 12:56:08PM -0700, Christopher McCrory wrote:
 I'm curious, is bgp dampening on or off?

BGP dampening is off.

gert
-- 
Gert Doering
Mobile communications ... right now writing from * Munich Airport *
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco Unified Communications Manager v6.1 - Set-up

2008-09-16 Thread Oliver Gorwits
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


Tor-Ivar Kristoffersen wrote:
 I was just wondering if anyone have got a cookbook sort of
 document for Call Manager v6.1.

There's a sister mail list to this one, on the same server, for
Cisco VoIP, where you might get a better response:

http://puck.nether.net/mailman/listinfo/cisco-voip

HTH,

regards,
oliver.
- --
Oliver Gorwits, Network and Telecommunications Group,
Oxford University Computing Services
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIzz8w2NPq7pwWBt4RAo9yAKCFlVFKKUDWhd3QhOkWi5eiaXJqHgCgleRs
KPHBwVF6WN9gd9qStm3HKVg=
=EMdf
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ME3750 Shaping

2008-09-16 Thread Brad Henshaw
Syed Waqqas Ahmed wrote: 

 service-policy output BE-6mbps

The ME3750 doesn't support egress policy maps on standard ports.

Regards,
Brad
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASA rule, SSH thru ASA 5505 v8.0.3

2008-09-16 Thread Jonathan Charles
Turned out it was an ACL on the SSH Server that was blocking me... wow, that
was silly.

Curious tho... if I enable proxy arp I break the connection to their AS400
server, if I disable it, I kill the VPN...



Jonathan

On Mon, Sep 15, 2008 at 10:58 PM, D W [EMAIL PROTECTED] wrote:

  I haven't encountered an issue in the past doing this. Can you send out
 configs? Your ACL is set to allow ssh traffic to the pre-NAT (outside) IP
 address, correct?


  Date: Mon, 15 Sep 2008 19:34:47 -0500
  From: [EMAIL PROTECTED]
  To: cisco-nsp@puck.nether.net
  Subject: [c-nsp] ASA rule, SSH thru ASA 5505 v8.0.3

 
  I have an SSH server on the inside of a network, and the ASA is blocking
 SSH
  requests even tho I have an ACL permitting them and a static NAT to the
 SSH
  server.
 
  The ASA says it is blocked by the outside ACL even tho SSH (TCP 22) is
  specifically permitted... any ideas?
 
 
 
  Jonathan
  ___
  cisco-nsp mailing list cisco-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/

 --
 See how Windows connects the people, information, and fun that are part of
 your life. See 
 Nowhttp://clk.atdmt.com/MRT/go/msnnkwxp1020093175mrt/direct/01/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Proxy ARP and the ASA 5505

2008-09-16 Thread Jonathan Charles
Got an ASA 5505... if I enable proxy arp, users lose connections to their
AS400...

If I disable it, my VPN clients can't connect anywhere...

Any idea why, and how to fix?




Jonathan
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] c7604 starter kit

2008-09-16 Thread Asbjorn Hojmark - Lists
 QinQ would definitely be show stopper for me too. Are you
 sure it's not there? At least it can be configured, but
 couldn't find anyone with ASR1k who could test it on this
 short notice.

I got it directly from the BU that it wouldn't be supported
until RLS2, and a customer configured it just to find it Almost
Worked(TM) (there were issues with DHCP relay).

However, I had a meeting with the (a?) PM yesterday, and he
assured me it is in RLS1. The other thing is probably a bug
then.

-A

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] IS-IS for IPv6: Passive Loopback Interface Address Not Propagated

2008-09-16 Thread Mark Tinka
Hi all.

Has anyone experienced failure of the v6 address on a 
(dual-stacked) Loopback interface from being propagated 
into IS-IS?

We're seeing this on 12.2(33)SRC1 deployed on NPE-G2's, 
NPE-G1's and 7201's.

IS-IS is running in multi-topology mode, v6 infrastructure 
addresses are propagated fine, it's just that v6 addresses 
on the Loopback interface won't be.

Our pseudonodes (DIS's) are running on SUP720-3BXL's with 
12.2(33)SXH3. These are able to propagate their v6 Loopback 
interface addresses to the network, including to the 
7200's.

v4 is unaffected.

We have a case open with TAC, but it's been a while since 
they gave us any feedback.

All help appreciated.

Cheers,

Mark.


signature.asc
Description: This is a digitally signed message part.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] c7604 starter kit

2008-09-16 Thread Saku Ytti
On (2008-09-16 07:10 +0200), Asbjorn Hojmark - Lists wrote:

 However, I had a meeting with the (a?) PM yesterday, and he
 assured me it is in RLS1. The other thing is probably a bug
 then.

Ok so far we've listed EoMPLS and VPLS as definitely missing software
features, I still wonder what the 'OP' (Frank Bulk) ment by 'minimum
software features', perhaps something else that I'm not seeing.

-- 
  ++ytti
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] SXH3 ghost bugs - more details

2008-09-16 Thread Gert Doering
Hi,

On Mon, Sep 15, 2008 at 09:11:14PM +0100, Peter Taphouse wrote:
 Just to second (or third?) this bug.  We've got four 7600s on SXH3 which
  are afflicted by this - they were upgraded from 2a on tac's advise (to
 avoid netflow bug related spontaneous reloads) - and we don't use
 dampening.  It doesn't seem to matter if the prefixes that get withdrawn
 are i or ebgp, they get still ghosted to other ibgp peers.  

For iBGP-iBGP ghosts, our current setup is not suitable (read: no
route-reflector setup, so iBGP-iBGP announcements would not take place),
thus I have no evidence on whether this would also trigger the bug for
us.  But I think it's quite likely indeed, given that this seems to 
happen on sending *out* the withdraw...

 I've got a case open with tac, 

Would you mind sharing the case number with me?  I could forward this to
our TAC engineer so they know this is not just us.

Do you have a bug ID?

 but it's causing us enough grief that I'm moving back to SXF until 
 things calm down.  

*grumble* - I would love to do that, given that we're quite happy with
SXF since about two years now.  But we were unlucky/stupid enough to
get Sup720-10Gs for these new boxes, and they only run SHX...

 Would love the new netflow stuff in SXH if it gets stable enough...

We're quite happy with the SHX3 netflow.  No crashes (yet, knock wood)
and the load on everything is indeed much lower.

There are some other funnies in SXH3, but these are just annoyances
and not service impacting (we're not using scp).

gert

-- 
Gert Doering
Mobile communications ... right now writing from * Munich Airport *
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Data destinations for cisco sce 2000 devices

2008-09-16 Thread twelcome
Hi All

 We currently use a cisco sce2000 appliance to provision international 
bandwidth to our customers and to export traffic flows (in the form of RDR 
packets) to a single flow collection server (data destination), which stores 
the flows in a sql database. Recently we've needed to add some redundancy and 
failover to this data collection and it turns out (as stated in the sce 
documentation)  that the sce will support multiple destinations for rdr packets 
and that it will use those destinations in 3 modes: 

1. Redundant data collection servers with failover to the next destination if 
one is unreachable.
2. Multicast to several destinations
3. Round robin to several destinations

My question is this: Does anyone know if this actually works in practice as a 
mechansism for making the data collection database redundant? I.e despite what 
the sce documentation states, is there any reason why the sce using Redundant 
data collectors with failover would not be a viable way of adding redundancy to 
the data collection database?

Thanks in advance!
Traiano




Sent via my BlackBerry from Vodacom - let your email find you!
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] logging server in MPLS VRF

2008-09-16 Thread Vikas Sharma
Hi,

I am curious to know whether we should put snmp logging servers part of MPLS
vpn (as this has to reveive logs from all servers across the network) or it
should be the part of global routing table. If we can do ti with mpls vpn,
is there any benefit?

Regards,
Vikas Sharma
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] cisco 7507 vs ssg 550

2008-09-16 Thread Faisal Muzammil

Hi,
We have a cisco 7507 router for our wan and are thinking of replacing it with 
juniper ssg 550. Currently we have 1 GEIP interface on the lan side of 7507 and 
1 POS(STM/OC3) interface on the wan side. We have a few IP IP tunnels 
established and are running BGP over the wan and OSPF on the lan side. We also 
have the need of using PBRs. The main reason behind this change is that we are 
going to outgrow our STM capacity and need to upgrade to higher bandwidth on 
the wan side. hence similarly we will need to have a better option on the lan 
side instead of GEIP due to the limitation of 200mbps aggregate throughput on 
it.
 
Thanks in advance for your suggestions
 
regards
Famz

_
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] 6500 acl log cpu hit

2008-09-16 Thread Phil Mayers

All,

We've recently disabled OAL because we had to enable VACL capture.

Without OAL, can I ensure a stray log ACL statement won't kill the 
box? Can I use one of the MLS rate limiters to throttle it?


The obvious ones seem to be:

ACL VACL LOG - set to on, 2000pps

ICMP UNREAC. ACL-DROP - set to on, 0pps as OAL wanted this

Or does ACL log traffic hit the CoPP limiters?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco 12406 Etherchannel

2008-09-16 Thread Mark Tech
Hi
I am trying to configure Ethernchannel/link bundling on a 12406. The port 
channel seems to be accepted, however when I try and add a channel-group to my 
GE interfaces, it says its not supported? I am using SPA-10X1GE-V2 line cards 
with c12kprp-p-mz.120-32.SY6.bin IOS


interface Port-channel1
 ip address x.x.x.x 255.255.255.252
 no ip directed-broadcast
 channel-group minimum active 1
 no channel-group bandwidth control-propagation

router(config-if)#channel-group 1
Error: not supported on GigabitEthernet0/0/0.

Is there a way to bundle more that 1GE port on a 12406?

Regards

 Mark



  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] IS-IS for IPv6: Passive Loopback Interface Address Not Propagated

2008-09-16 Thread Frederic LOUI


Mark Tinka a écrit :

Hi all.

Has anyone experienced failure of the v6 address on a 
(dual-stacked) Loopback interface from being propagated 
into IS-IS?


We have the same setup and no particular issue with that.



We're seeing this on 12.2(33)SRC1 deployed on NPE-G2's, 
NPE-G1's and 7201's.



My version is : IOS 124-11.T2

IS-IS is running in multi-topology mode, v6 infrastructure 
addresses are propagated fine, it's just that v6 addresses 
on the Loopback interface won't be.



Did you try ISIS debug command in order to see what's happening ?
When you inject your loopback ?

Our pseudonodes (DIS's) are running on SUP720-3BXL's with 
12.2(33)SXH3. These are able to propagate their v6 Loopback 
interface addresses to the network, including to the 
7200's.


v4 is unaffected.

We have a case open with TAC, but it's been a while since 
they gave us any feedback.


All help appreciated.


I record that there was some issues related to ISIS in multi-topology 
environment. metric style wide command was needed and also the 
interface command ipv6 enable is sometimes mandatory. (depending on 
the IOS vesion)



Please fin herewith this mail a snipset of config related to ISIS for 
IPv6:


!
interface Loopback0
 ip address 192.168.1.2 255.255.255.255
 ipv6 address 2001:DB8:2200:11::1/128
 ipv6 enable
!
interface Loopback1
 ip address 192.168.2.2 255.255.255.255
 ipv6 address 2001:DB8:2200:11::2/128
 ipv6 enable
!
interface Loopback2
 ip address 192.168.3.2 255.255.255.255
 ipv6 address 2001:DB8:2200:11::3/128
 ipv6 enable
!

!
router isis
 net 49.0001....00
 metric-style wide
 fast-flood 15
 max-lsp-lifetime 65535
 spf-interval 1 1 10
 prc-interval 1 1 10
 lsp-gen-interval 5 1 50
 no hello padding
 log-adjacency-changes
 passive-interface Loopback0
 passive-interface Loopback1
 passive-interface Loopback2
 bfd all-interfaces
 !
 address-family ipv6
 multi-topology
 exit-address-family
!

GSR-2#sh ipv6 protocols
IPv6 Routing Protocol is connected
IPv6 Routing Protocol is static
IPv6 Routing Protocol is isis
  Interfaces:
FastEthernet1/0
FastEthernet2/0
Loopback0 (Passive)
Loopback1 (Passive)
Loopback2 (Passive)
  Redistribution:
None
IPv6 Routing Protocol is bgp 65200
  Route Reflector for address family IPv6 Unicast, 2 clients
  IGP synchronization is disabled
  Redistribution:
None
  Neighbor(s):
AddressFiltIn FiltOut Weight RoutemapIn 
RoutemapOut

2001:DB8:2100:11::2
2001:DB8:2300:11::2
IPv6 Routing Protocol is bgp multicast
  Route Reflector for address family IPv6 Unicast, 2 clients
  IGP synchronization is disabled
  Redistribution:
None
  Neighbor(s):
AddressFiltIn FiltOut Weight RoutemapIn 
RoutemapOut

2001:DB8:2100:11::2
2001:DB8:2300:11::2

Just my 2 cents,
Hope this helps (Sorry if not), but I'm curious about the answer...
At the sounds like it is a issue with the IOS version. (Any 
possibility to try an other one ?)


Bgrds/Fred

--
Frederic LOUI / GIP RENATER

Service de Suivi Operationnel / Metrologie  QoS
Network Operations Service / Metrology  QoS

Tel: +33 1 53 94 20 82 / Fax: +33 1 53 94 20 31
[EMAIL PROTECTED] http://www.renater.fr

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Cisco NAC

2008-09-16 Thread Luan Nguyen
First try Cisco:
http://www.cisco.com/en/US/products/ps6128/tsd_products_support_series_home.
html
http://cisconac.blogspot.com/

One of my coworker's blog - he's excellent with NAC deployment.
http://cnc-networksecurity.blogspot.com/

Mailing list:  
http://listserv.muohio.edu/scripts/wa.exe?A0=cleanaccess

-Luan


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Fischer
Sent: Tuesday, September 16, 2008 6:29 AM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Cisco NAC

Does anyone here use the Cisco NAC product?  Is there a mailing list of
which anyone knows specifically for Cisco NAC?  User's group?  Online
community?  Any assistance in directing me toward any of these resources
would be genuinely appreciated.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 6500 acl log cpu hit

2008-09-16 Thread Tim Stevenson

You should use ACL BRIDGED IN/OUT to control that rate:
mls rate unicast acl input|output

Tim

At 03:56 AM 9/16/2008, Phil Mayers observed:

All,

We've recently disabled OAL because we had to enable VACL capture.

Without OAL, can I ensure a stray log ACL statement won't kill the 
box? Can I use one of the MLS rate limiters to throttle it?


The obvious ones seem to be:

ACL VACL LOG - set to on, 2000pps

ICMP UNREAC. ACL-DROP - set to on, 0pps as OAL wanted this

Or does ACL log traffic hit the CoPP limiters?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/




Tim Stevenson, [EMAIL PROTECTED]
Routing  Switching CCIE #5561
Technical Marketing Engineer, Data Center BU
Cisco Systems, http://www.cisco.com
IP Phone: 408-526-6759

The contents of this message may be *Cisco Confidential*
and are intended for the specified recipients only.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] NPE G1, CEF and ACLs and high CPU

2008-09-16 Thread Mateusz Błaszczyk
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

List,

 I will work on it and report the results accordingly.


As promised - here comes the report

1) I have reworked the ACL to introduce the shortcuts like permit
tcp any any established and permiting all traffic to customer pools
upfront. It looks like the majority of traffic is now permited and
about 8% of is matched for the last permit ip any any (vs 77%) with
previous ACL.

2) Also I noticed that I haven't got no ip unreachables on the port
so I have enabled that. Since then the RP PAS Features punts stopped
increasing

3) Finally - the CPU load - there is no significant drop of CPU load
(no immediate effect). I will monitor the CPU for longer
periods to see if there is at least any trend (up, down, no change).

(box is pushing 480Mbps/90kps of input traffic

#sh ver | in IOS|processo
Cisco IOS Software, 7301 Software (C7301-K91P-M), Version 12.2(28)SB6,
RELEASE SOFTWARE (fc1)
Cisco 7301 (NPE) processor (revision D) with 983040K/65536K bytes of memory.)

Seems I need a HW upgrade anyway.
Also I will try to upgrade to 12.4.20T but not now.

Best Regards,

- --
- -mat
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFIz7MjIvBv0k5esR4RAkUoAKCVREfOGZZ/tQhLm3jM264kpReHPwCeJLrm
8Le8SjzUB3xNIQnufd7Ycaw=
=c2Ct
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] 3750ME-7609 ES interface problem

2008-09-16 Thread Matt Liotta
I currently have a 3750ME connected via one of its ES interfaces to a  
6509 on one of the OSM (GE-WAN) interfaces and things work fine.  
However, when I try to connect the other ES port on the same 3750ME to  
a 7609 GigE interface the port won't come up. What is strange is that  
the 3750ME shows the port as up/up, but the 7609 shows it as down/ 
down. Interestingly, if I shut the 7609 port the 3750's port then goes  
down as well.


What am I missing?

-Matt
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] RES: Cisco 12406 Etherchannel

2008-09-16 Thread Leonardo Gama Souza
There are some restrictions...
Take a look: 
http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/lnkbndl.html
 
Cheers.



De: [EMAIL PROTECTED] em nome de Mark Tech
Enviada: ter 16/9/2008 08:12
Para: cisco-nsp@puck.nether.net
Assunto: [c-nsp] Cisco 12406 Etherchannel



Hi
I am trying to configure Ethernchannel/link bundling on a 12406. The port 
channel seems to be accepted, however when I try and add a channel-group to my 
GE interfaces, it says its not supported? I am using SPA-10X1GE-V2 line cards 
with c12kprp-p-mz.120-32.SY6.bin IOS


interface Port-channel1
 ip address x.x.x.x 255.255.255.252
 no ip directed-broadcast
 channel-group minimum active 1
 no channel-group bandwidth control-propagation

router(config-if)#channel-group 1
Error: not supported on GigabitEthernet0/0/0.

Is there a way to bundle more that 1GE port on a 12406?

Regards

 Mark



 
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] SXH3 ghost bugs - more details

2008-09-16 Thread Peter Taphouse
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1



 Would you mind sharing the case number with me?  I could forward this to
 our TAC engineer so they know this is not just us.
 
 Do you have a bug ID?

I've got no bug ID, but it's on case SR 609537689.  SXH3 introduced
another new bgp bug too - the output of show ip bgp neigh xx.xxx.xx.xx
advertised-routes produced badly wrong output. For example it showed us
announcing zero prefixes to one of our transit providers, even though
their looking glass showed them receiving them just fine :-/

That's why I opened the case originally, the ghosting bug I noticed
afterwards and then I quickly moved to SXF since it was causing too much
grief.

 but it's causing us enough grief that I'm moving back to SXF until 
 things calm down.  
 
 *grumble* - I would love to do that, given that we're quite happy with
 SXF since about two years now.  But we were unlucky/stupid enough to
 get Sup720-10Gs for these new boxes, and they only run SHX...

Just to make you feel better, the 7604 I reloaded yesterday with SXF15
just spontaneously reloaded...

- --
Peter Taphouse

Bytemark Hosting
http://www.bytemark.co.uk/
tel. +44 (0) 845 004 3 004
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIz8GDIAZ7OKeBB58RAi3zAKCaUsJbYjy6yRwx4796Yv9ko+hXTQCePYEB
UaQrHjlsOaFCeXKrjz7yTag=
=WgJ0
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco 12406 Etherchannel

2008-09-16 Thread Mark Tech
Hi, thanks for that. Just had a look at my inventory

sh inventory
NAME: slot 0, DESCR: ISE 10G Modular Services Card v2
PID: 12000-SIP-601 , VID: V04, SN: SAD12340460

Looks like I have an ISE card installed. If I look at the restrictions for the 
ISE, seems like only the following cards are supported:

IP Service Engine (ISE): 
–4-port Gigabit Ethernet ISE line card 
–4-port OC-3c/STM-1c POS/SDH ISE line card 
–8-port OC-3c/STM-1c POS/SDH ISE line card 
–16-port OC-3c/STM-1c POS/SDH ISE line card 
–4-port OC-12c/STM-4c POS/SDH ISE line card 
–1-port OC-48c/STM-16c POS/SDH ISE line card 

However it then goes to mention that the following cards support it.

Engine 5 SPA Interface Processors (SIPs): 
–10G Engine 5 SPA Interface Processor (12000-SIP-600) 
–2.5G multiservice engine SPA Interface Processor (12000-SIP-401) 
–5G multiservice engine SPA Interface Processor (12000-SIP-501) 
–10G multiservice engine SPA Interface Processor (12000-SIP-601) 

The GE cards are installed in a 12000-SIP-601, or is that I don't have 
an'Engine 5' within the 601installed?

Regards

Mark



- Original Message 
From: Leonardo Gama Souza [EMAIL PROTECTED]
To: Mark Tech [EMAIL PROTECTED]
Cc: cisco-nsp@puck.nether.net
Sent: Tuesday, September 16, 2008 3:49:54 PM
Subject: RES: [c-nsp] Cisco 12406 Etherchannel


There are some restrictions...
Take a look: 
http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/lnkbndl.html
 
Cheers.


De: [EMAIL PROTECTED] em nome de Mark Tech
Enviada: ter 16/9/2008 08:12
Para: cisco-nsp@puck.nether.net
Assunto: [c-nsp] Cisco 12406 Etherchannel


Hi
I am trying to configure Ethernchannel/link bundling on a 12406. The port 
channel seems to be accepted, however when I try and add a channel-group to my 
GE interfaces, it says its not supported? I am using SPA-10X1GE-V2 line cards 
with c12kprp-p-mz.120-32.SY6.bin IOS


interface Port-channel1
 ip address x.x.x.x 255.255.255.252
 no ip directed-broadcast
 channel-group minimum active 1
 no channel-group bandwidth control-propagation

router(config-if)#channel-group 1
Error: not supported on GigabitEthernet0/0/0.

Is there a way to bundle more that 1GE port on a 12406?

Regards

 Mark



 
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] IS-IS for IPv6: Passive Loopback Interface Address Not Propagated

2008-09-16 Thread Mark Tinka
On Tuesday 16 September 2008 20:36:00 Frederic LOUI wrote:

 My version is : IOS 124-11.T2

We haven't tested other releases on these boxes yet.

12.2(33)SXH3 does work on our SUP720-3BXL's, though.

 Did you try ISIS debug command in order to see what's
 happening ? When you inject your loopback ?

We did; nothing came up - all other interfaces are added 
into IS-IS with the exception of the Loopbacks.

 I record that there was some issues related to ISIS in
 multi-topology environment.

Actually, we found MT very useful when dual-stacking v4 and 
v6.

 metric style wide command 
 was needed...

We use wide metrics by default on all our IS's. 

 and also the interface command ipv6 enable 
 is sometimes mandatory. (depending on the IOS vesion)

We haven't had to do this for our v6 deployment (even when I 
run v6 under 12.3 mainline at my previous employer).

However, we did try enabling this command without much 
success in resolving this particular issue.

 Please fin herewith this mail a snipset of config related
 to ISIS for IPv6:

Pretty straight forward.

 At the sounds like it is a issue with the IOS
 version.

Agree.

Will work it and hope TAC can reproduce the issue.

Cheers,

Mark.


signature.asc
Description: This is a digitally signed message part.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Check bandwidth on router

2008-09-16 Thread Kristian Larsson
On Thu, Sep 11, 2008 at 07:54:45PM -0500, root net wrote:
 Hi List,
 
 Is there some sort of tool you can load into the IOS on a router to check
 bandwidth? Or if not what are you all doing these days in this situation.
 Like for example things are running slow and you think the Internet feed may
 be the problem is there a way to do speed tests on the router itself?

You can use ttcp directly from your router, it's a
bit like iperf. It's a hidden commmand but works
basically like the unix version, just type 'ttcp'
at your IOS prompt and follow the guide.

STH1#ttcp
transmit or receive [receive]:
...

  -K

-- 
Kristian LarssonKLL-RIPE
Network Engineer / Internet CoreTele2 / SWIPnet [AS1257]
+46 704 910401[EMAIL PROTECTED]
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 3750ME-7609 ES interface problem

2008-09-16 Thread Daniel Dib


On Tue, 16 Sep 2008, Matt Liotta wrote:

I currently have a 3750ME connected via one of its ES interfaces to a  
6509 on one of the OSM (GE-WAN) interfaces and things work fine.  
However, when I try to connect the other ES port on the same 3750ME to  
a 7609 GigE interface the port won't come up. What is strange is that  
the 3750ME shows the port as up/up, but the 7609 shows it as down/ 
down. Interestingly, if I shut the 7609 port the 3750's port then goes  
down as well.

What am I missing?

-Matt


Hi. Do you have the same autonegotiate settings on the 7609 and the 3750. On
the 3750 do you have speed nonegotiate and the same goes for the 7609. If
you haven't configured it specifically it will be autonegotiated. This can
lead to one port being up and the other down I've been bitten by this
myself. This might not be your issue but it's just a hunch. See the link
below:

http://www.cisco.com/en/US/docs/routers/7600/ios/12.2SXF/configuration/guide
/intrface.html#wp1040549

/Daniel
 

__ Information from ESET NOD32 Antivirus, version of virus signature
database 3446 (20080916) __

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com
 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] SRC2?

2008-09-16 Thread Rodney Dunn
9/30 'ish

On Tue, Sep 16, 2008 at 08:50:50PM +0300, Ran Liebermann wrote:
 Hi All,
 
 On Wed, Aug 13, 2008 at 6:35 PM, Bas Roos [EMAIL PROTECTED] wrote:
 
  Anyone know when 12.2(33)SRC2 is supposed to be released, specifically
  for the 7600.  I had heard by the end of July, but so far no release.
 
  The latest statement we got from them was end-september.
 
 Anyone from Cisco perhaps would comment on this?
 CSCso45720 makes it really problematic to go into production stage
 with the SRC train.
 
 Cheers,
 --
 Ran.
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] MX960 vs Cisco 7600

2008-09-16 Thread Steven Mark
hello,

We are a small ISP based out of Asia and we are considering above two products 
for carrier ethernet deployment. If anyone has done a comparitive study or have 
experience (support, feature-richness, IOS/JUNOS stability etc.).

Thanks
Steve


  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] SRC2?

2008-09-16 Thread Tassos Chatzithomaoglou

I believe SRD (plus the new ES cards) are supposed to come out at that time 
too...


--
Tassos


Rodney Dunn wrote on 16/09/2008 23:17:

9/30 'ish

On Tue, Sep 16, 2008 at 08:50:50PM +0300, Ran Liebermann wrote:

Hi All,

On Wed, Aug 13, 2008 at 6:35 PM, Bas Roos [EMAIL PROTECTED] wrote:


Anyone know when 12.2(33)SRC2 is supposed to be released, specifically
for the 7600.  I had heard by the end of July, but so far no release.

The latest statement we got from them was end-september.

Anyone from Cisco perhaps would comment on this?
CSCso45720 makes it really problematic to go into production stage
with the SRC train.

Cheers,
--
Ran.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco 12406 Etherchannel

2008-09-16 Thread Nitzan Tzelniker
You need 12.0(33)S1

Starting in Cisco IOS Release 12.0(33)S, Engine 5 line cards are also
supported as the egress interface on which you can configure a virtual
interface (EtherChannel or POS channel) for a link bundle. For a list of
supported Engine 5 interfaces, see Line Cards Supported on the Cisco 12000
Routerhttp://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/lnkbndl.html#wp1041951.


Nitzan

On Tue, Sep 16, 2008 at 18:57, Mark Tech [EMAIL PROTECTED] wrote:

 Hi, thanks for that. Just had a look at my inventory

 sh inventory
 NAME: slot 0, DESCR: ISE 10G Modular Services Card v2
 PID: 12000-SIP-601 , VID: V04, SN: SAD12340460

 Looks like I have an ISE card installed. If I look at the restrictions for
 the ISE, seems like only the following cards are supported:

 IP Service Engine (ISE):
 –4-port Gigabit Ethernet ISE line card
 –4-port OC-3c/STM-1c POS/SDH ISE line card
 –8-port OC-3c/STM-1c POS/SDH ISE line card
 –16-port OC-3c/STM-1c POS/SDH ISE line card
 –4-port OC-12c/STM-4c POS/SDH ISE line card
 –1-port OC-48c/STM-16c POS/SDH ISE line card

 However it then goes to mention that the following cards support it.

 Engine 5 SPA Interface Processors (SIPs):
 –10G Engine 5 SPA Interface Processor (12000-SIP-600)
 –2.5G multiservice engine SPA Interface Processor (12000-SIP-401)
 –5G multiservice engine SPA Interface Processor (12000-SIP-501)
 –10G multiservice engine SPA Interface Processor (12000-SIP-601)

 The GE cards are installed in a 12000-SIP-601, or is that I don't have
 an'Engine 5' within the 601installed?

 Regards

 Mark



 - Original Message 
 From: Leonardo Gama Souza [EMAIL PROTECTED]
 To: Mark Tech [EMAIL PROTECTED]
 Cc: cisco-nsp@puck.nether.net
 Sent: Tuesday, September 16, 2008 3:49:54 PM
 Subject: RES: [c-nsp] Cisco 12406 Etherchannel


 There are some restrictions...
 Take a look:
 http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/lnkbndl.html

 Cheers.

 
 De: [EMAIL PROTECTED] em nome de Mark Tech
 Enviada: ter 16/9/2008 08:12
 Para: cisco-nsp@puck.nether.net
 Assunto: [c-nsp] Cisco 12406 Etherchannel


 Hi
 I am trying to configure Ethernchannel/link bundling on a 12406. The port
 channel seems to be accepted, however when I try and add a channel-group to
 my GE interfaces, it says its not supported? I am using SPA-10X1GE-V2 line
 cards with c12kprp-p-mz.120-32.SY6.bin IOS


 interface Port-channel1
  ip address x.x.x.x 255.255.255.252
  no ip directed-broadcast
  channel-group minimum active 1
  no channel-group bandwidth control-propagation

 router(config-if)#channel-group 1
 Error: not supported on GigabitEthernet0/0/0.

 Is there a way to bundle more that 1GE port on a 12406?

 Regards

  Mark




 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/




 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] MX960 vs Cisco 7600

2008-09-16 Thread Rubens Kuhl Jr.
Cisco 7600 + ES20 are way too expensive on a price/port perspective.
Consider distributing smaller Cisco ME6524 boxes (which is not as
cheap as it used to be, but it is still lot less than 7600) instead of
large boxes like MX 960; if you really have the density to buy MX 960
instead of MX 240, I don't think there is anything on Cisco-land that
can match that.



Rubens

On Tue, Sep 16, 2008 at 6:24 PM, Steven Mark [EMAIL PROTECTED] wrote:
 hello,

 We are a small ISP based out of Asia and we are considering above two 
 products for carrier ethernet deployment. If anyone has done a comparitive 
 study or have experience (support, feature-richness, IOS/JUNOS stability 
 etc.).

 Thanks
 Steve



 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] MX960 vs Cisco 7600

2008-09-16 Thread Mark Tinka
On Wednesday 17 September 2008 09:24:13 Rubens Kuhl Jr. 
wrote:

 Cisco 7600 + ES20 are way too expensive on a price/port
 perspective. Consider distributing smaller Cisco ME6524
 boxes (which is not as cheap as it used to be, but it is
 still lot less than 7600)...

In our consideration for a small box capable of handling a 
large number of EoMPLS VC's, the ME6524 came up - but 
sadly, we can only think of it in that function, and not a 
combined L2VPN + IP termination device.

This is because it can only support 256,000 v4 routing 
entries (PFC-3C).

Would advise the OP to look at this if he's thinking of 
carrying full routes on it. If 0/0 is good enough, then no 
worries.

Mark.


signature.asc
Description: This is a digitally signed message part.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] MX960 vs Cisco 7600

2008-09-16 Thread Rubens Kuhl Jr.
Mark,

Even with no full-routing capability, one can still do L3 or L2 VPN so
the customer can reach a central Internet router with half million/one
million routes if it`s a BGP customer, or follow default if it's a
single-homed customer. That works if such a BGP customer are in the
few percent exception, not on 90%+ rule... which is the case for our
market, but might not be the case for the original poster. Good point.




Rubens


On Tue, Sep 16, 2008 at 10:33 PM, Mark Tinka [EMAIL PROTECTED] wrote:
 On Wednesday 17 September 2008 09:24:13 Rubens Kuhl Jr.
 wrote:

 Cisco 7600 + ES20 are way too expensive on a price/port
 perspective. Consider distributing smaller Cisco ME6524
 boxes (which is not as cheap as it used to be, but it is
 still lot less than 7600)...

 In our consideration for a small box capable of handling a
 large number of EoMPLS VC's, the ME6524 came up - but
 sadly, we can only think of it in that function, and not a
 combined L2VPN + IP termination device.

 This is because it can only support 256,000 v4 routing
 entries (PFC-3C).

 Would advise the OP to look at this if he's thinking of
 carrying full routes on it. If 0/0 is good enough, then no
 worries.

 Mark.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] NTP not synchronizing

2008-09-16 Thread Velasquez Venegas Jaime Omar
I kept working on this ntp issue.It's a fact that there's no packet
going out of the serial interface of the router even when NTP debugging
says NTP xmit packet.NTP Server is reacheable from the router through
any protocol.
Did some attempts like swapping ntp server ,changing ntp
versions,changing ntp server software,adding ntp broadcast delay in the
router.Heck I even disabled ntp so I can get a different message other
than Clock is unsynchronized.
Last time I restarted the router I removed all the ntp configuration in
the hope that it recalculates ntp clock-period parameter as cisco
documentation states but it didn't so now it's working with the previous
clock-period parameter.

These are detailed outputs of ntp status commands:

R1show ntp assoc de

NTP.Server configured, insane, invalid, unsynced, stratum 16
ref ID 0.0.0.0, time . (19:00:00.000 City Thu Dec 31
1899)
our mode client, peer mode unspec, our poll intvl 64, peer poll intvl 64
root delay 0.00 msec, root disp 0.00, reach 0, sync dist 0.000
delay 0.00 msec, offset 0. msec, dispersion 16000.00
precision 2**5, version 3
org time . (19:00:00.000 City Thu Dec 31 1899)
rcv time . (19:00:00.000 City Thu Dec 31 1899)
xmt time CC7AC750.449B3CCC (19:01:20.267 City Tue Sep 16 2008)
filtdelay = 0.000.000.000.000.000.000.00
0.00
filtoffset =0.000.000.000.000.000.000.00
0.00
filterror =  16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0
16000.0

R1show ntp stat

Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 249.5901 Hz, actual freq is 249.5906 Hz, precision is
2**16
reference time is CC7553E4.FE3E6D2D (15:47:32.993 City Fri Sep 12
2008)
clock offset is 0. msec, root delay is 0.00 msec
root dispersion is 0.02 msec, peer dispersion is 0.02 msec

I may try to restart it one more time before I suspect a faulty ntp
service.

-Mensaje original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] En nombre de Aaron R
Enviado el: Monday, September 15, 2008 7:12 AM
Para: 'Mike Louis'; 'root net'; Velasquez Venegas Jaime Omar
CC: cisco-nsp@puck.nether.net
Asunto: Re: [c-nsp] NTP not synchronizing

I have had similar problems in the past. I have found if your clock /
date are not set properly the router will refuse to accept the NTP
update as the offset is too large.

Also as suggested try multiple NTP servers. The fact that you are unable
to see the configured NTP servers' ref clock / stratum most likely
indicates some kind of comms issue. 

Cheers,

Aaron.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Louis
Sent: Monday, September 15, 2008 7:40 PM
To: root net; Velasquez Venegas Jaime Omar
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] NTP not synchronizing

What source interface is the cisco client router using for NTP requests?
If its not configured it will use the outbound interface used to reach
the server. I saw an issue the other day where the external interface on
the WAN was not reachable by the NTP server at the home office and thus
they could not sync time. They changed the source interface to ntp
source-interface Fax/x (for their lan which was reachable) and were
able to get sync'd.

HTH

Mike

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of root net
Sent: Monday, September 15, 2008 12:17 AM
To: Velasquez Venegas Jaime Omar
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] NTP not synchronizing

What NTP server are you using?  Are you trying to use the Cisco router
as the NTP server for your clients/hosts on your network or what?  My
bet is the NTP server is overwhelmed you are trying to connect to.  I
had this issue before and changed NTP servers worked like a charm.
Check the NIST listing for an updated listing of NTP servers that are
free or with little users.

rootnet

On Sat, Sep 13, 2008 at 1:30 PM, Velasquez Venegas Jaime Omar 
[EMAIL PROTECTED] wrote:

 Hi there.

 I'm having a problem trying to synchronize a Cisco Router across a wan

 link with a NTP Server (No-Cisco router).So far i've ruled out packet 
 filering or firewall blocking as a cause of this.Some other equipments

 at the local side of this router actually synchronize with the ntp 
 server at our LAN.What strikes me is the fact that router does reach 
 ntp server via other protocols other than ntp tough.


 This is what i get from the out-of-sync router:
 #Show ntp assoc
 address ref clock st  when  poll reach  delay  offset
 disp
 ~NTPServer0.0.0.0  16 -640 0.00.00
 16000.
 * master (synced), # master (unsynced), + selected, - candidate, ~ 
 configured

 I've set debugging for the ntp packets and for all the traffic getting

 out of the serial interface which got NTP: xmit packet to NTP.Server
 events.However there 's absolutely no attempt whatsoever of packet 
 being transmitted to NTP 

Re: [c-nsp] NTP not synchronizing

2008-09-16 Thread Church, Charles
Is the NTP you're trying to sync to synchronized itself?  NTP (unlike
SNTP) requires that.  The 'insane' and 'invalid' debug messages seem to
indicate that, I believe.

Chuck

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Velasquez
Venegas Jaime Omar
Sent: Tuesday, September 16, 2008 10:23 PM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] NTP not synchronizing


I kept working on this ntp issue.It's a fact that there's no packet
going out of the serial interface of the router even when NTP debugging
says NTP xmit packet.NTP Server is reacheable from the router through
any protocol.
Did some attempts like swapping ntp server ,changing ntp
versions,changing ntp server software,adding ntp broadcast delay in the
router.Heck I even disabled ntp so I can get a different message other
than Clock is unsynchronized.
Last time I restarted the router I removed all the ntp configuration in
the hope that it recalculates ntp clock-period parameter as cisco
documentation states but it didn't so now it's working with the previous
clock-period parameter.

These are detailed outputs of ntp status commands:

R1show ntp assoc de

NTP.Server configured, insane, invalid, unsynced, stratum 16
ref ID 0.0.0.0, time . (19:00:00.000 City Thu Dec 31
1899)
our mode client, peer mode unspec, our poll intvl 64, peer poll intvl 64
root delay 0.00 msec, root disp 0.00, reach 0, sync dist 0.000
delay 0.00 msec, offset 0. msec, dispersion 16000.00
precision 2**5, version 3
org time . (19:00:00.000 City Thu Dec 31 1899)
rcv time . (19:00:00.000 City Thu Dec 31 1899)
xmt time CC7AC750.449B3CCC (19:01:20.267 City Tue Sep 16 2008)
filtdelay = 0.000.000.000.000.000.000.00
0.00
filtoffset =0.000.000.000.000.000.000.00
0.00
filterror =  16000.0 16000.0 16000.0 16000.0 16000.0 16000.0 16000.0
16000.0

R1show ntp stat

Clock is unsynchronized, stratum 16, no reference clock
nominal freq is 249.5901 Hz, actual freq is 249.5906 Hz, precision is
2**16
reference time is CC7553E4.FE3E6D2D (15:47:32.993 City Fri Sep 12
2008)
clock offset is 0. msec, root delay is 0.00 msec
root dispersion is 0.02 msec, peer dispersion is 0.02 msec

I may try to restart it one more time before I suspect a faulty ntp
service.

-Mensaje original-
De: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] En nombre de Aaron R
Enviado el: Monday, September 15, 2008 7:12 AM
Para: 'Mike Louis'; 'root net'; Velasquez Venegas Jaime Omar
CC: cisco-nsp@puck.nether.net
Asunto: Re: [c-nsp] NTP not synchronizing

I have had similar problems in the past. I have found if your clock /
date are not set properly the router will refuse to accept the NTP
update as the offset is too large.

Also as suggested try multiple NTP servers. The fact that you are unable
to see the configured NTP servers' ref clock / stratum most likely
indicates some kind of comms issue. 

Cheers,

Aaron.



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike Louis
Sent: Monday, September 15, 2008 7:40 PM
To: root net; Velasquez Venegas Jaime Omar
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] NTP not synchronizing

What source interface is the cisco client router using for NTP requests?
If its not configured it will use the outbound interface used to reach
the server. I saw an issue the other day where the external interface on
the WAN was not reachable by the NTP server at the home office and thus
they could not sync time. They changed the source interface to ntp
source-interface Fax/x (for their lan which was reachable) and were
able to get sync'd.

HTH

Mike

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of root net
Sent: Monday, September 15, 2008 12:17 AM
To: Velasquez Venegas Jaime Omar
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] NTP not synchronizing

What NTP server are you using?  Are you trying to use the Cisco router
as the NTP server for your clients/hosts on your network or what?  My
bet is the NTP server is overwhelmed you are trying to connect to.  I
had this issue before and changed NTP servers worked like a charm.
Check the NIST listing for an updated listing of NTP servers that are
free or with little users.

rootnet

On Sat, Sep 13, 2008 at 1:30 PM, Velasquez Venegas Jaime Omar 
[EMAIL PROTECTED] wrote:

 Hi there.

 I'm having a problem trying to synchronize a Cisco Router across a wan

 link with a NTP Server (No-Cisco router).So far i've ruled out packet 
 filering or firewall blocking as a cause of this.Some other equipments

 at the local side of this router actually synchronize with the ntp 
 server at our LAN.What strikes me is the fact that router does reach 
 ntp server via other protocols other than ntp tough.


 This is what i get from the out-of-sync router:
 #Show ntp assoc
 address ref clock st  when  poll reach  delay  

Re: [c-nsp] ME3750 Shaping

2008-09-16 Thread Brad Henshaw
Eric Van Tol wrote:

 I've explained the situation to both Arie and my local SE.
 It looks like the 3750 is simply not able to provide what we need it
to do today.

Oh I'm sure it can do what you need - but only on 2 out of the 28 ports
:-/
(which is obviously insufficient)

When I've hit this situation I've ended up using multiple ME3750s but
this isn't
really scalable beyond 2 units. 7600+OSM or 7600+SIP400+GE SPA's are
just (for our
application) too expensive. ASR might be a viable option depending on
required
throughput.

Regards,
Brad
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Check bandwidth on router

2008-09-16 Thread Wilkinson, Alex
0n Tue, Sep 16, 2008 at 07:05:47PM +0200, Kristian Larsson wrote: 

On Thu, Sep 11, 2008 at 07:54:45PM -0500, root net wrote:
 Hi List,
 
 Is there some sort of tool you can load into the IOS on a router to check
 bandwidth? Or if not what are you all doing these days in this situation.
 Like for example things are running slow and you think the Internet feed 
may
 be the problem is there a way to do speed tests on the router itself?

You can use ttcp directly from your router, it's a
bit like iperf. It's a hidden commmand but works
basically like the unix version, just type 'ttcp'
at your IOS prompt and follow the guide.

Why on earth is it a hidden command I wonder ?

 -aW

IMPORTANT: This email remains the property of the Australian Defence 
Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 
1914.  If you have received this email in error, you are requested to contact 
the sender and delete the email.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Check bandwidth on router

2008-09-16 Thread Brad Henshaw

Wilkinson, Alex wrote:

 Why on earth is [ttcp] a hidden command I wonder ?

It's an unsupported command. If only Cisco would remove (not just
hide) other unsupported commands across the various platforms.

I've seen the performance of ttcp vary across platforms and IOS
versions - in some instances it demonstrates inconsistent and low
throughput where no such problem really exists, so don't assume
the results from ttcp run from routers/switches are necessarily
accurate or rely on the results for fault diagnosis.

Regards,
Brad
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/