[c-nsp] Can you apply crypto map to SVI

Hi All, Got a problem with a site-to-site IPSEC vpn implementation where one end is using SVI. Does any body know if a crypto map can be applied to a SVI to bring up the IPSEC tunnel? It accepts the command but I can't pass any traffic to/from it. interface vlan 10 crypto map MY-MAP Or do

Re: [c-nsp] XENPAK packet loss

On Mon, 15 Jun 2009, FF wrote: On a longer span (140km) link, I have the same setup, with two EDFAs. The input power comes in right around -24dbm. It tests clean mostly, but drops 2 packets out of 10,000 when empty. More traffic, more drops. I figured it was a strength problem (-24dbm is righ

[c-nsp] XENPAK packet loss

I've been trying to solve an odd problem and can't seem to make any headway. I'm in the process of upgrading two DF links that were formerly served by 1GB/ZX optics to XENPAK-DWDM optics. 1 lamba only on each. The ZX link for the first span ran fine. When the DWDM XENPAK is installed, both ends se

Re: [c-nsp] LX vs LH Transceivers

Dale, Thanks for the tip but this particular case I was using the sfp-only interface so there is not even an option for configuring media-type. router(config)#int g5/1 router(config-if)#me? % Unrecognized command router(config-if)#int g5/2 router(config-if)#me? media-type router(config-if)#

Re: [c-nsp] LX vs LH Transceivers

Hi Justin, On Tue, Jun 16, 2009 at 9:08 AM, Justin Krejci wrote: > We are running into some performance issues on the 7200 when under load so > we have a 6509 sup720 3bxl. The sup720 has one sfp port and one sfp/rj45 > combo port. We have one GLC-LH-SM SFP transceiver installed into the > sfp-only

[c-nsp] LX vs LH Transceivers

There appears to be a fair amount of threads online about using LX and LH together on a SMF link. I have a situation where there is a 7206VXR with an NPE-G1 that has a LX GBIC installed that is talking via SMF to a 12000 series router to one of our providers that is using an LX transceiver. This gi

Re: [c-nsp] 12k Full BGP Feed Memory Requirements

What type of LC's do you have in that router ? I'm trying to find what is the difference in the architecture between Eng3 vs Eng4 LC's that could justify this problem: router#show ip cef resource Hardware resource allocation status summary Green (Normal), Yellow (Caution) Red (Alarm) Slot HW

Re: [c-nsp] full routing table / provider-class chassis

On Jun 16, 2009, at 1:48 AM, Kevin Graham wrote: "ready to fall over at 150kpps" is only right if traffic is being entirely software switched on the MSFC3. Concur. I'd start here: sh proc c sort | e 0.00 sh fm sum --- Ro

Re: [c-nsp] 6500/SUP32 - RP ROMMON upgrade?

Charles Spurgeon wrote on 15/06/2009 21:54: On Sun, Jun 14, 2009 at 07:29:58PM -0500, Graham Wooden wrote: Thanks David and Dale for the insights. SP Rommon was pretty far back, and upgrading it solved an issue I was having. However, after reading the caveats listed for the MSFC2A, I don't th

Re: [c-nsp] 7201 NPE-G2 vs. 7204 with NPE-G2 engine

Hi, On Mon, Jun 15, 2009 at 11:49:00AM -0700, Denis Savage wrote: > Is there any benefit of going with the 7201 NPE-G2 over the 7204 VXR with > the NPE-G2 engine? They appear to be the exact same, except the 7204 has > four slots as opposed to the 7201 being a 1U appliance. Yet, the 7204 is > chea

Re: [c-nsp] 7201 NPE-G2 vs. 7204 with NPE-G2 engine

I believe the deal with the 7201 is that you are paying for the compactness. Also the 7204 is probably the most mass produced 72xx, so it's probably an economy of scale, especially if you are looking at refurb. Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577

Re: [c-nsp] full routing table / provider-class chassis

> Hah, keep drinking the cool aid! I have a pair of 6500s ready to fall > over at about 150kpps. All WS-67xx LAN cards with DFCs. CPU averages > 60% and often maxes. > > No netflow, no uRPF, no multicast, no IPv6, no BFD, no MPLS, no ACLs > in the forwarding plane. Very basic OSPF, BGP, and M

[c-nsp] 7201 NPE-G2 vs. 7204 with NPE-G2 engine

Is there any benefit of going with the 7201 NPE-G2 over the 7204 VXR with the NPE-G2 engine? They appear to be the exact same, except the 7204 has four slots as opposed to the 7201 being a 1U appliance. Yet, the 7204 is cheaper from what I can gather. Am I missing something? Thanks, Denis Savage

Re: [c-nsp] 6500/SUP32 - RP ROMMON upgrade?

On Sun, Jun 14, 2009 at 07:29:58PM -0500, Graham Wooden wrote: > Thanks David and Dale for the insights. > > SP Rommon was pretty far back, and upgrading it solved an issue I was > having. However, after reading the caveats listed for the MSFC2A, I don't > think I am going to mess with the RP - un

Re: [c-nsp] full routing table / provider-class chassis

> > Was the original intention of this thread not to find out exactly what *is* > the best tool for the above scenario? :) > > GSR w/E3 or E5 LCs, ASR 1K, CRS-1, or N7K, depending upon the circumstances Probably none of them -- N7K seems squarely targeted at enterprise DC, so given BU turf wa

Re: [c-nsp] Cisco ITP and SMSC

Any that you know on the subject could prove useful to me. But to be specific, anything that teaches concepts and configurations of application servers, routing on point codes, global title configuration, multilayer routing, etc. Thanks in advance. On Mon, Jun 15, 2009 at 6:57 PM, Yann Gauteron

[c-nsp] Qos on IPSec + GRE tunnel with sup720-3bxl

I am having an interesting challenge in getting a QoS policy that is supported / works across a IPSec + GRE tunnel running 12.2(18)SXF (Sup720-3bxl, ws-svc-ipsec-1, flexwan with DS3). I am not trying to do anything overly complex.. really just want to make sure RTP or EF tagged frames make it, and

Re: [c-nsp] heat fins popping loose on WS-X67xx cards

> The first shows the "Z1" socket in the background with the fuzzy loop in the > foreground. The second shows the heat fin & loop in the foregraound with the > socket in the background. The loop is supposed to be in the Z1 socket. Just unpacked a WS-X6748-GE-TX and found a loose jumped in t

Re: [c-nsp] Cisco ITP and SMSC

What kind of resources are you specifically interested in? 2009/6/15 Felix Nkansah : > Hi Team, > > I would appreciate if any on this list could direct me to useful resources > that go in-depth into SS7 and SS7-over-IP protocols, focusing on using Cisco > ITPs in combination with a SMSC and SS7 ne

[c-nsp] Policing on Catalyst 4948 - Hardware or Software?

The Catalyst 4948 was brought to my attention as a potential collocation aggregation device; with a specific requirement of bidirectional policing per port. I have spent quite a bit of time on Cisco and Google trying to find out whether policing (independent of marking/classifying) is performed i

[c-nsp] Cisco ITP and SMSC

Hi Team, I would appreciate if any on this list could direct me to useful resources that go in-depth into SS7 and SS7-over-IP protocols, focusing on using Cisco ITPs in combination with a SMSC and SS7 network. Thanks in advance. Felix ___ cisco-nsp mai

Re: [c-nsp] BGP Dynamic Neighbors and VPNv4

As follow-up for the archives. Short version: It doesn't seem to work. On Mon, 2009-04-27 at 17:13 +0200, Peter Rathlev wrote: > Reading about BGP Dynamic Neighbors I can see that the 12.2SX > Configuration Guide[1] states that only IPv4 peering is supported. Would > anybody know if this actually

Re: [c-nsp] Two events in EEM

In your first applet that triggers on the syslog pattern have it actually configure the second EEM applet that then runs on a countdown timer: action 4.0 cli command "event timer countodwn 30 Basically, have one applet configure the second and have the second configure a third that would remove t

Re: [c-nsp] Two events in EEM

Use a stub track object with a "delay" parameter? track 499 stub-object ! this delay will occur delay down 10 event manager applet test1 event syslog pattern ".*foo.*" action 1.0 track set 499 state down event manager applet test2 event track 499 state down action 1.0 cli command "your CL

Re: [c-nsp] Using 'shutdown' versus pulling the cable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 thomas.silla...@nextiraone.de wrote: > Hi Dale, > > using the "shutdown" command is IMHO always cleaner because of "graceful > shutdown" feature. If you plan a failover test physically disconnecting > the link or powering off the device shows the "rea

Re: [c-nsp] Using 'shutdown' versus pulling the cable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Dale, using the "shutdown" command is IMHO always cleaner because of "graceful shutdown" feature. If you plan a failover test physically disconnecting the link or powering off the device shows the "real" failover time. Brgds and have a great day

[c-nsp] FWSM failover time

Hi all, sorry for my eng ;) Ok, here is my story about 2 catalyst 6500 boxes, with installed fws blades. Between fws are configured as transparent with A/A failover. Nodes are connected with 2x10Tg EC. When one of boxes filed, initial failover begins, but the time between first node stops forw

[c-nsp] Using 'shutdown' versus pulling the cable

Hi all, I'm working on some failover test scenarios and I'm trying to determine if issuing a 'shutdown' command on a router's Ethernet interface is effectively identical, from the perspective of the attached switch, as removing the cable. Here's a simplified topology: R1-Fa0/0 -- Fa1/0/1-SW1 As

Re: [c-nsp] Two events in EEM

Inder, Sounds like you're a Cisco software development engineer. Shouldn't this be sent to a Cisco internal list rather than a public list? Eninja ;) On Jun 15, 2009, at 5:57 AM, Rishi Kochar wrote: hi i work for cisco in UC technology. i am very new to EEM. I dont deal with scripting a