[c-nsp] GRE on GSR

2009-04-28 Thread Julio Arruda
Just to confirm, from what I understand, IOS on the 12K only allows you to configure GRE if you have a TSC (tunnel server card). http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/gre.html But, still not clear to me: 0- This still the case ? (I would assume so).. 1- Can we use newer gen

[c-nsp] sup 720 3c 10GE blades for 7600

2009-04-28 Thread Matthew Huff
Our cisco rep and var are pushing back on our plans to upgrade our 7600 from sup32 to the RSP 720 with 10GE saying they are in limited production. Of course, they are pushing us toward the ASR product line. Anyone know of any issues with the RSP 720 w 10GE interfaces? Matthew Huff   |

Re: [c-nsp] sup 720 3c 10GE blades for 7600

2009-04-28 Thread Michel Renfer
AFAIK there are some issues when using the the RSP720-10G in redundant configurations. Thats the statement we know, why the RSP is not yet general orderable. cheers, michel -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of

Re: [c-nsp] sup 720 3c 10GE blades for 7600

2009-04-28 Thread Matthew Huff
That's good news. That's what we heard as well. Since we are doing box-to-box redudancy (eigrp load balancing) and not using SSO, RPR/RPR+ then there shouldn't be an issue. Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone:

Re: [c-nsp] BGP Dynamic Neighbors and VPNv4

2009-04-28 Thread Peter Rathlev
On Mon, 2009-04-27 at 17:36 +0100, Phil Mayers wrote: SXI will accept and nvgen the following config: router bgp 64580 bgp listen range 192.168.1.0/24 peer-group foo neighbor foo peer-group neighbor foo remote-as 64580 ! address-family ipv4 neighbor foo activate

Re: [c-nsp] Problems with multiple VPDN hops

2009-04-28 Thread Steve McCrory
Hi Pshem, Thanks for you reply. It seems that our radius and vpdn-group configurations were correct but we were missing the 'vpdn authen-before-forward' command on the middle LNS which was causing the problem. Thanks again for your input. Regards Steven Steven McCrory Senior Network

[c-nsp] question about SSO

2009-04-28 Thread Neil d
Hi everyone, I have a 7609s with 2 sup720, working in sso mode, now when the sup switchover, according to cisco documentation, layer 2 traffic shouldnt be interupted, but I noticed there's a rougly 0.6s gap in packet loss. ( traffic is in/out the same router, no other router involved). Is this

Re: [c-nsp] question about SSO

2009-04-28 Thread Church, Charles
Unless there are DFCs involved, I would expect a tiny delay when the linecards switch over to the other PFC. I thought Cisco promised failover times or a second or two with SSO on a 6500. I think you're seeing what you should. Chuck -Original Message- From:

[c-nsp] 3750 and show mls qos interface int stat output

2009-04-28 Thread Clinton Work
Anybody have a more detailed description of the field headers for the show mls qos interface int stat output on a 3750? Table 2-30 describes 6 field headers, but the command output only has 5 fields of output. Are they the same as the 3550: incoming, no_change, classified, policed, and

[c-nsp] 7600 with Sup720-3CXL and 6704/8 line cards

2009-04-28 Thread Seth Fiermonti
Hello, I am new to this and got very confused looking at cisco.com. Can I do MPLS and large route tables with 67xx line cards in the 7600? I have DFCs in all cards. What are my limitations? Do I need ES/ES+ modules instead? Any help is appreciated!

Re: [c-nsp] question about SSO

2009-04-28 Thread Tassos Chatzithomaoglou
Enhanced chassis (6500-E), DFC cards and SXI should do around 500ms. Cisco has said in later versions it will move down to 50ms. On my own L2 tests, the above setup did 1s, regardless of which card was used for passing traffic. -- Tassos Church, Charles wrote on 28/04/2009 22:13: Unless

Re: [c-nsp] 7600 with Sup720-3CXL and 6704/8 line cards

2009-04-28 Thread Gert Doering
Hi, On Tue, Apr 28, 2009 at 03:49:29PM -0400, Seth Fiermonti wrote: I am new to this and got very confused looking at cisco.com. Can I do MPLS and large route tables with 67xx line cards in the 7600? I have DFCs in all cards. What are my limitations? Do I need ES/ES+ modules

Re: [c-nsp] 3750 and show mls qos interface int stat output

2009-04-28 Thread Richard N. Ingram
The policer stats (Inprofile and OutofProfile) are right next to each other, instead of on top of each other, so there are indeed 6 fields in the command output as well. In addition, you get enqueued and drop statistics for each queue and threshold. You used to only get that from the show

[c-nsp] ICMP unreachable packets handling on IOS firewall (Zone-based not CBAC)

2009-04-28 Thread Anthony GUENEAU
Hello, I recently configured a Cisco 3825 router with the IOS firewall, running Zone-based Policy Firewall feature. I'm experiencing the following issue: ICMP unreachable packets, with code 4 (Fragmentation required, and DF flag set), passing through the fw-router are properly processed at

Re: [c-nsp] 7600 with Sup720-3CXL and 6704/8 line cards

2009-04-28 Thread Gert Doering
Hi, (I'm copying my reply back to the mailing list, as other readers will find the answers in the archives) On Tue, Apr 28, 2009 at 04:10:46PM -0400, Seth Fiermonti wrote: If it is so common, please answer. We have this specific line of questions about once per months. It's really not so

Re: [c-nsp] 3750 and show mls qos interface int stat output

2009-04-28 Thread Peter Rathlev
On Tue, 2009-04-28 at 13:28 -0600, Clinton Work wrote: Anybody have a more detailed description of the field headers for the show mls qos interface int stat output on a 3750? Table 2-30 describes 6 field headers, but the command output only has 5 fields of output. Are they the same as

Re: [c-nsp] 3750 and show mls qos interface int stat output

2009-04-28 Thread Peter Rathlev
On Tue, 2009-04-28 at 16:02 -0600, Clinton Work wrote: All the fields are there, I was asking about the column headers. 3750# show mls qos int f1/0/15 stat FastEthernet1/0/15 cos: outgoing --- incomingno_changeclassified