Re: [c-nsp] DNA -- How do I justify the expense to mgmt when we'll never use it?

2023-01-06 Thread Jared Mauch via cisco-nsp
I mean a lot of it is discovery based on what you may know, people leak, etc..

Re: [c-nsp] ASR920 and EEM:Mandatory.dualrate_eem.tcl

2019-08-26 Thread Jared Mauch
I’ll say this in public (now) - Changing the security posture on the VTYs is a great reason to not use this product at the moment. I’ve seen many people not monitor their devices for these types of changes, and this is a great case to study. Time for some retraining of people. - Jared > On

Re: [c-nsp] ASR9900 - Copy files from USB key

2019-06-02 Thread Jared Mauch
> On Jun 2, 2019, at 3:50 AM, James Bensley > wrote: > > > I recently upgraded from eXR 6.5.2 to 6.5.3 and pushed the files using > SCP to the router from a jump box, which was on the same LAN as the > management interface on the RSP. It was copying at 100Mbps (the speed > of the OOB switch)

Re: [c-nsp] ASR9900 - Copy files from USB key

2019-05-21 Thread Jared Mauch
> On May 20, 2019, at 11:03 PM, Erik Sundberg wrote: > > Little follow up. > > On a ASR9906 6.3.3 (32bit) the usb key comes up as usb: but on 6.3.3 (64-bit) > it's disk2: > > > Copying the 6.3.3 migration files from a USB Key was 182 seconds, with HTTP > it was around 1 hour. (1.3 G File)

Re: [c-nsp] Internet speed

2018-08-12 Thread Jared Mauch
Host your own. Here’s a good one: https://github.com/adolfintel/speedtest Jared Mauch > On Aug 12, 2018, at 7:00 AM, ring...@mail.com wrote: > > Hi everyone, > > I wanted to ask how do you guys handle the customer complains about slow > Internet speed? Today alm

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Jared Mauch
> On Oct 19, 2017, at 1:54 PM, Charles Sprickman <sp...@bway.net> wrote: > >> >> On Oct 19, 2017, at 1:49 PM, Jared Mauch <ja...@puck.nether.net> wrote: >> >> Take a look at the UBNT Edgepoint gear as well. Fairly cool, comes in >> 10G/

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Jared Mauch
found them. > > Thanks, > Christina > > - Original Message - > From: "Harold 'Buz' Dale" <buz.d...@usg.edu> > To: "Jared Mauch" <ja...@puck.nether.net>, "C. Klam" <ck...@ias.edu> > Cc: cisco-nsp@puck.nether.net > Sent

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Jared Mauch
If you just need one port, there is this box that works quite well: https://www.balticnetworks.com/mikrotik-fiber-to-copper-converter.html It does not have an integrated splice tray though. - Jared > On Oct 19, 2017, at 12:00 PM, Christina Klam wrote: > > All, > > I am hoping

Re: [c-nsp] WS-X6716-10GE in a 7600

2017-09-06 Thread Jared Mauch
I’ve found if you go a few rounds with Cisco they will blame 3rd party, then realize their driver is buggy and fix. Or you have a bad card :-) I’d opt for the latter, but the former does occur at times. - Jared > On Sep 6, 2017, at 7:57 PM, Bryan Holloway wrote: > > I

Re: [c-nsp] Broadband Aggregation/Termination

2017-04-19 Thread Jared Mauch
What’s helpful is rolling v6 while doing nat on V4. Reduces your state on v4 and avoids issues like the google captcha problem that heavy NAT environments encounter. - Jared > On Apr 19, 2017, at 5:47 PM, CBL wrote: > > Any problems with Google saying there are too many

Re: [c-nsp] ASR9000 SFP/XFP Input Error troubleshooting

2017-04-04 Thread Jared Mauch
nd the NP direction of research. Also, what type of optics, etc are involved? There may be additional diagnostic data you can extract from the XFPs to determine what is going on based on the INF-8077 type data in the EEPROM. - Jared -- Jared Mauch | pgp key available via finge

[c-nsp] administrative inquiry

2017-03-30 Thread Jared Mauch
. I see this as an inelegant change on the part of Cisco, but ultimately we have little control of this. Thoughts? Please honor reply-to and send your requests to me directly. Thanks, - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http

Re: [c-nsp] Which one is the stable version of Cisco IOS XR?

2017-03-09 Thread Jared Mauch
Nothing inherently wrong with 6.x aside from it's still Cisco. You likely want 5.3.4 if you have any trident based linecards. Jared Mauch > On Mar 9, 2017, at 5:23 AM, Mark Tinka <mark.ti...@seacom.mu> wrote: > > > >> On 9/Mar/17 00:54, Ted Johansson wrote: >

Re: [c-nsp] BGP Route Reflector Case

2017-02-23 Thread Jared Mauch
> On Feb 23, 2017, at 4:37 AM, Pierre Emeriaud wrote: > > 2017-02-23 5:49 GMT+01:00 Curtis Piehler : >> Local market route >> reflectors do solve the issue of sub-optimal routing from a local market >> perspective. > > > There is another solution to

Re: [c-nsp] Tabo Topic? Third party Maintenance

2017-01-23 Thread Jared Mauch
ould be fine. If you have anything more complex, don't expect it to be easy. They presume you're doing it wrong, and you must be open to that as a concept. Remember the KISS principle. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++;

Re: [c-nsp] Tabo Topic? Third party Maintenance

2017-01-23 Thread Jared Mauch
course this depends on the ability to triage yourself. I've generally not had any issues with a vendor when we say it failed, we swapped with spare, here's the serial. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; |

Re: [c-nsp] 2 port 100 gig module - ASR9000

2017-01-05 Thread Jared Mauch
I would slide it in. If it doesn't work load 5.3.4. It will perform the best it can under those circumstances. Jared Mauch > On Jan 5, 2017, at 6:08 PM, Aaron <aar...@gvtc.com> wrote: > > What I'm trying to figure out is how to put this (2) port 100 gig module into >

Re: [c-nsp] 2 port 100 gig module - ASR9000

2017-01-05 Thread Jared Mauch
t: Thursday, January 5, 2017 4:18 PM > To: 'Aaron' <aar...@gvtc.com>; 'Tom Hill' <t...@ninjabadger.net>; > cisco-nsp@puck.nether.net; 'Jared Mauch' <ja...@puck.nether.net> > Subject: RE: [c-nsp] 2 port 100 gig module - ASR9000 > > I think cisco does these backwards compat

Re: [c-nsp] 2 port 100 gig module - ASR9000

2017-01-05 Thread Jared Mauch
I would not run anything earlier than 5.3.4 these days personally. These are fine cards and work well. - jared > On Jan 5, 2017, at 3:54 PM, Aaron wrote: > > Is anyone using this or familiar with it ? > > > > If so, please let me know what the minimum RSP and IOS XR

Re: [c-nsp] Rec for full-table multi-peer bgp router?

2016-12-05 Thread Jared Mauch
> On Dec 5, 2016, at 2:46 PM, Raphael Mazelier wrote: > > > Very interesting. > > 7280SR look perfect for us. (if the price is OK; I will call my local Arista > representative). > > We are another content AS and we push 150gps approx in peak. > We plan to upgrade from our

Re: [c-nsp] SFP DOM SNMP Polling?

2016-11-22 Thread Jared Mauch
> On Nov 22, 2016, at 9:32 AM, Tim Durack wrote: > > I have a vendor that does not support SFP DOM SNMP polling. They state this > is due to EEPROM read life cycle. Constant reads will damage the SFP. > > We SNMP poll SFP DOM from Cisco equipment without issue. > > Not

Re: [c-nsp] Router memory problem

2016-10-27 Thread Jared Mauch
acy. If you see examples on the internet using them or access-lists to do route filtering, please don't copy those examples. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only m

Re: [c-nsp] 3rd party dwdm 80km optics in asr 9001

2016-09-28 Thread Jared Mauch
; "service unsupported-tranceiver" BTW, Cisco has indiciated to me you may need both as the global command doesn't unlock certain code paths because bad developers. The 9K team thinks they're a unique snowflake so deserve to set 2 bars vs the single global bar.

Re: [c-nsp] 3rd party dwdm 80km optics in asr 9001

2016-09-28 Thread Jared Mauch
> > archive at http://puck.nether.net/pipermail/cisco-nsp/ > > > > > ___ > > cisco-nsp mailing list cisco-nsp@puck.nether.net > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipe

Re: [c-nsp] ASR 9000 Upgrade Expectations

2016-07-13 Thread Jared Mauch
. Jared Mauch > On Jul 13, 2016, at 6:31 AM, Nick Griffin <nick.jon.grif...@gmail.com> wrote: > > Hello, looking for some details in regards to an ASR9000 code upgrade. > Currently running software version 5.1.1 with the following packages: > > Committed Packages: >

Re: [c-nsp] BGP blackhole community config

2016-06-20 Thread Jared Mauch
> On Jun 20, 2016, at 1:38 PM, Satish Patel wrote: > > I have tried that too and got this error. > > R1(config-router)#neighbor xx.xx.xx.xx route-map RTBH out > % "RTBH" used as BGP outbound route-map, tag match not supported > % not supported match will behave as

Re: [c-nsp] BGP blackhole community config

2016-06-20 Thread Jared Mauch
> On Jun 19, 2016, at 10:07 PM, Satish Patel wrote: > > I have added "ip bgp-community new-format" in global config, but i > don't have following command in my ASR1006 router > > neighbor xx.xx.xx.xx remote-as 200 send-community > > so i have added > > neighbor

Re: [c-nsp] netflow real AS instead of uplink provider?

2016-06-15 Thread Jared Mauch
I would consider upgrading to at least 5.3.1 + SMUs or 6.0.1. I seem to recall a number of issues back in the 4.3.x images. 4.3.1 is quite crusty. If you need to stay in 4.3.x perhaps 4.3.4. I would avoid 5.3.3. - Jared > On Jun 15, 2016, at 9:09 AM, Nemeth Laszlo wrote:

Re: [c-nsp] A9K Netflow export drops

2016-06-14 Thread Jared Mauch
We have had no more severe issues than prior releases. Make sure you load the IPv6 PSIRT SMU of course. Jared Mauch > On Jun 14, 2016, at 7:44 AM, Robert Williams <rob...@custodiandc.com> wrote: > > have you had any significant

Re: [c-nsp] A9K Netflow export drops

2016-06-14 Thread Jared Mauch
> On Jun 14, 2016, at 8:32 AM, Robert Williams wrote: > > Hi Chris, > > Thanks for this, we’ve not considered 6.0.1 yet, mainly due to it being > relatively new and I’m not aware currently of anyone running it in production > on a 90xx, so slightly apprehensive :) We

Re: [c-nsp] ASR9010 end of life?

2016-05-17 Thread Jared Mauch
If you are buying new look at the 9910. Jared Mauch > On May 17, 2016, at 4:16 PM, Satish Patel <satish@gmail.com> wrote: > > So we are good with those parts or i need to worry? > >> On Tue, May 17, 2016 at 3:27 PM, Jeremy Bresley <b...@brezworks.com> wrote

[c-nsp] testing

2016-05-13 Thread Jared Mauch
please ignore. -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

2016-05-12 Thread Jared Mauch
> On May 12, 2016, at 1:58 PM, Saku Ytti wrote: > > On 12 May 2016 at 17:42, Mark Tinka wrote: > > Hey, > >> Has not worked out for us. >> >> Elephant flows (particularly of a non-IP nature) cannot be solved with >> Juniper's adaptive load balancing. I

Re: [c-nsp] IOS-XR 5.3.3 add Yang Models

2016-05-11 Thread Jared Mauch
> On May 11, 2016, at 12:06 PM, quinn snyder <snyd...@gmail.com> wrote: > > >> On May 11, 2016, at 08:43, Jared Mauch <ja...@puck.nether.net> wrote: >> >> FYI: you may want to look at 6.0.1 which was just (re)-posted to CCO as >> well. For

Re: [c-nsp] IOS-XR 5.3.3 add Yang Models

2016-05-11 Thread Jared Mauch
FYI: you may want to look at 6.0.1 which was just (re)-posted to CCO as well. For us it fixes a number of critical issues which are not in the 5.3.3 EMR. - Jared > On May 11, 2016, at 6:24 AM, Christian Kildau wrote: > > Hi cisco-nsp, > > we're currently experimenting with

Re: [c-nsp] ASR1004 Used

2016-05-08 Thread Jared Mauch
-7124S-24-Port-10-Gigabit-Ethernet-Managed-Switch-/141984188598?hash=item210eeac8b6:g:wHwAAOSw3mpXH528 - Jared > On May 8, 2016, at 2:02 PM, Satish Patel <satish@gmail.com> wrote: > > I need all fiber interface with 20G ingress and 20G egress. > > On Sun, May 8, 2016 at

Re: [c-nsp] ASR1004 Used

2016-05-08 Thread Jared Mauch
If you purchase via enterprise channel you will get those prices. Are you doing only Ethernet? If so check someone like Arista or Brocade. Jared Mauch > On May 8, 2016, at 1:20 PM, Satish Patel <satish@gmail.com> wrote: > > Seriously? > > I check with CDW and pr

Re: [c-nsp] ASR1004 Used

2016-05-08 Thread Jared Mauch
You can buy nice new routers for less than that. Hopefully you don't need TDM interfaces. Jared Mauch > On May 5, 2016, at 2:41 PM, Satish Patel <satish@gmail.com> wrote: > > Need your input or suggestion, I have check with one of company and > they sales *used Cisco eq

Re: [c-nsp] ASR9K Upgrade

2016-03-14 Thread Jared Mauch
emove TFTP support for this reason. You should make sure you do all the right things to make TCP faster, including selective-ack amongst other options. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My s

Re: [c-nsp] Tail-f / NCS

2016-03-12 Thread Jared Mauch
-more-damages-here-someone-using-wrench-to-drive-nail-image58686199 Jared Mauch > On Mar 12, 2016, at 3:03 PM, CiscoNSP List <cisconsp_l...@hotmail.com> wrote: > > > Hi Guys - Have some of our "sales" team at Cisco Live atm, and they are > raving about Tail-f /

Re: [c-nsp] DWDM Passive or Active Multiplexing

2016-03-11 Thread Jared Mauch
https://ripe67.ripe.net/presentations/131-ripe2-2.pdf Jared Mauch On Mar 11, 2016, at 5:32 AM, Lukas Tribus <luky...@hotmail.com> wrote: >> We are running dwdm with just splitters and amplifiers at 100 GE with no >> issues. > > You run multiple 100GE circuits over (semi

Re: [c-nsp] DWDM Passive or Active Multiplexing

2016-03-09 Thread Jared Mauch
If you are only doing 10g there are a lot of inexpensive solutions in this space for the distances you mentioned. Jared Mauch On Mar 9, 2016, at 4:55 PM, Lukas Tribus <luky...@hotmail.com> wrote: >> Hi Tim, thanks for your great info! Appreciate it. >> >> Hey Bill,

Re: [c-nsp] NCS-5001 - MPLS L3VPN Issue

2016-03-09 Thread Jared Mauch
> On Mar 9, 2016, at 3:27 PM, Tom Hill wrote: > > On 08/03/16 09:27, James Bensley wrote: >> This issue didn't show up in lab testing and we haven't been able to >> replicate it (nor have TAC). It seems to be something about the >> ordering of patching and that was the

Re: [c-nsp] NCS-5001 - MPLS L3VPN Issue

2016-03-04 Thread Jared Mauch
rs connected to these devices. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puc

Re: [c-nsp] NCS-5001 - MPLS L3VPN Issue

2016-02-27 Thread Jared Mauch
> On Feb 26, 2016, at 5:54 PM, James Bensley wrote: > > On 26 February 2016 at 22:43, Phil Bedard wrote: >> How you upgrade the whole OS is still a bit hazy though. They have said it >> involves using a self-extracting ISO distribution similar to other

Re: [c-nsp] Sup720: dumb question

2016-02-17 Thread Jared Mauch
The key question is what software are you attempting to boot and what images are in the bootflash/sup-bootflash/disk0: etc Having console output here is key to understanding what’s going on. - Jared > On Feb 17, 2016, at 1:52 PM, Dave McGuire wrote: > > > Hey folks.

Re: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability

2016-02-16 Thread Jared Mauch
We’ve been having some interesting issues with the ASA that have kept us pegged at a specific release. Upgrading even a minor release causes all traffic to be dropped without any clear explanation and TAC was not much help. I’m thinking of just replacing the ASA with something that is easier

Re: [c-nsp] SFP compatibility

2016-02-03 Thread Jared Mauch
> On Feb 3, 2016, at 9:06 PM, Wilmer wrote: > > Hey Guys, > > Probably a stupid question, but I can't find an obvious answer on Cisco. > > Are the following SFP's able to be used to together: > > One device is using at GLC-FE-100EX & the other end is using > a

Re: [c-nsp] Most cost effective 100G router?

2016-01-20 Thread Jared Mauch
> On Jan 20, 2016, at 5:34 PM, James Bensley wrote: > > Sorry I missed the full table requirement. I’ve used 9904 for this before. - Jared ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Junk Message Apology

2015-12-09 Thread Jared Mauch
Apologies for the spam overnight. Rules are now in place to block these messages. - Jared ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Equipment for a large-ish LAN event

2015-12-09 Thread Jared Mauch
> On Dec 9, 2015, at 8:13 AM, Chuck Church wrote: > > Isn't game traffic fairly small in bandwidth need, but very latency > dependent? QOS seems like a good fit here. Priority queue the game traffic > based on matched ACL, and best effort everything else, re-marking it

Re: [c-nsp] Cache DNS servers

2015-12-01 Thread Jared Mauch
You may also find useful help at the dns-operations list. - Jared > On Dec 1, 2015, at 1:05 PM, Murat Kaipov wrote: > > Hello folks! > > I have little question about DNS servers that you use in your environment? > We use bind on freebsd servers now. I did some benchmarks

Re: [c-nsp] TFTP/SCP

2015-11-23 Thread Jared Mauch
> On Nov 23, 2015, at 9:42 AM, Aaron wrote: > > and scp/sftp > The issue I’ve seen here is a directional one, there is no SCP/SFTP support to copy data out: RP/0/RSP0/CPU0:Router#copy ? /recurseRecursively list subdirectories encountered WORDCopy

Re: [c-nsp] TFTP/SCP

2015-11-23 Thread Jared Mauch
_ > From: cisco-nsp <cisco-nsp-boun...@puck.nether.net> on behalf of Jared Mauch > <ja...@puck.nether.net> > Sent: Monday, November 23, 2015 8:46 AM > To: Aaron > Cc: John Heasley; cisco-nsp@puck.nether.net > Subject: Re: [c-nsp] TFTP/SCP > >> On N

Re: [c-nsp] TFTP/SCP

2015-11-23 Thread Jared Mauch
> On Nov 23, 2015, at 9:52 AM, Aaron wrote: > > sftp isn't under copy. Not sure why it isn't. > > RP/0/RSP0/CPU0:2051a-lab#sftp ? > WORD [[user@][host[:]]][source-filename] > It’s not made accessible to any other parts of the system either, so isn’t properly

Re: [c-nsp] TFTP/SCP

2015-11-19 Thread Jared Mauch
seem to test it often so if you report a bug, it takes quite some time to find the code caretaker. Jared Mauch > On Nov 19, 2015, at 8:14 AM, Mark Tinka <mark.ti...@seacom.mu> wrote: > > > >> On 19/Nov/15 15:54, Jared Mauch wrote: >> >> We use FTP as

Re: [c-nsp] TFTP/SCP

2015-11-19 Thread Jared Mauch
Yup. You can filter by IP address and check image checksum after if it's something without a crypto signature. Jared Mauch > On Nov 19, 2015, at 8:54 AM, Daniel Brisson <dbris...@uvm.edu> wrote: > > What about protecting credentials? Do you use a service account that has 0

Re: [c-nsp] TFTP/SCP

2015-11-19 Thread Jared Mauch
We use FTP as the image isn't something that needs to be protected from eavesdroppers. Jared Mauch > On Nov 19, 2015, at 6:46 AM, Mark Tinka <mark.ti...@seacom.mu> wrote: > > > >> On 19/Nov/15 12:25, Harry Hambi - Atos wrote: >> >> Hi All, >>

Re: [c-nsp] default maximum-prefix limits on XR!

2015-09-17 Thread Jared Mauch
Some of these limits are per-platform, so remember there is no “generic ios-xr”. On the 9K you may need to set your profile to match your use case. It’s less obvious compared to a generic central CPU platform like most XE devices are. - Jared > On Sep 17, 2015, at 9:24 AM, Adam Vitkovsky

Re: [c-nsp] Weird config changes on C2621XM with AIM-VPN/BPII

2015-09-17 Thread Jared Mauch
ptic and their EEPROM validation code wasn't perfect. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ cisco-nsp mailing list cisco-nsp@

Re: [c-nsp] %NTP: Multicast peer 224.0.1.1 does not exist

2015-08-21 Thread Jared Mauch
Is pim enabled on the interface? On Aug 21, 2015, at 3:39 AM, Victor Sudakov v...@mpeks.tomsk.su wrote: Colleagues, A 7206VXR (NPE-G2) is not sending ntp broadcasts nor multicasts, and I even cannot recofigure ntp settings on an interface (see below). Any idea what the problem could

Re: [c-nsp] Peering + Transit Circuits

2015-08-18 Thread Jared Mauch
On Aug 18, 2015, at 8:47 AM, Gert Doering g...@greenie.muc.de wrote: XR doesn't do it at all, hrmph) We have been asking about this as well, it might be worth revisiting. - Jared ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Utility to identify orphaned ACLs and such?

2015-08-13 Thread Jared Mauch
://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ cisco

Re: [c-nsp] putty SSH errors on IOS-XR 5.1.1

2015-08-13 Thread Jared Mauch
the configurations. SSH for login as another example. Paranoia about breaking things when you're not standards compliant is pure lazy gamesmanship. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My

Re: [c-nsp] Utility to identify orphaned ACLs and such?

2015-08-13 Thread Jared Mauch
On Thu, Aug 13, 2015 at 09:37:34AM -0400, Jared Mauch wrote: Cisco really needs to implement a 'show config dead' or similar type command that displays all these orphaned policies. I have a hard enough time with cisco parsing their own configs though I can't push on this now

[c-nsp] OT: Honest Networker

2015-07-20 Thread Jared Mauch
While off-topic, I thought this would be of interest for people who see issues with their routers as this captures many of the situations we operators see on a regular basis. http://honestnetworker.wordpress.com - Jared ___ cisco-nsp mailing list

Re: [c-nsp] Remote management console servers?

2015-07-14 Thread Jared Mauch
. The cases where I have used console are generally to recover a device that has gone south in a really-bad way. Trying to use a console port for anything more than that will result in frustration. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue

Re: [c-nsp] SFPs (Third party) - ordered standard LH, but got ZX

2015-07-06 Thread Jared Mauch
Cisco does a poor job of reading the SFF MSA fields from their own optics let alone what they describe as “3rd party”. You may find it easier to use something to read/validate the optics yourself if that works for your logistics. (shameless plug: i have something that might be interesting

Re: [c-nsp] SFPs (Third party) - ordered standard LH, but got ZX

2015-07-06 Thread Jared Mauch
On Jul 6, 2015, at 4:50 AM, CiscoNSP List cisconsp_l...@hotmail.com wrote: Hi Everyone, As per titleordered a bunch of our usual single mode SFP's. and they are badged as LH, but when inserted into router/switch, they report as ZX.can I connect our LH to the new ZX ones

Re: [c-nsp] Fibre Channel over SDH STM64

2015-07-06 Thread Jared Mauch
or have I lost the plot? Thanks! ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Jared Mauch | pgp key available via finger

Re: [c-nsp] test...list lag, or down?

2015-05-21 Thread Jared Mauch
mailman was not running and I since restarted it. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. ___ cisco-nsp mailing list

Re: [c-nsp] New IOS release time frame, when bug is identified

2015-05-18 Thread Jared Mauch
On May 15, 2015, at 1:28 AM, CiscoNSP List cisconsp_l...@hotmail.com wrote: Bug is still private(i.e. Details not publicly viewable) - but located here: https://tools.cisco.com/bugsearch/bug/CSCuu32800 Can provide SR if needed. It’s cisco policy that any defect hit by customer in

Re: [c-nsp] Preventive Maintenance Template

2015-05-05 Thread Jared Mauch
We collect things along the following lines: a) interface status b) BGP status (for all address families) c) interface descriptions d) interface IPs e) ISIS/OSPF neighbor(s) This is fairly easy to script and automate if you have an existing RANCID installation. You can then snapshot pre+post

Re: [c-nsp] Question for TAC

2015-04-30 Thread Jared Mauch
The solution is simple. Call the engineer. When they say they are going to research say I'll hold. Works wonders to motivate them. Don't be afraid to ask for their manager or the duty manager. Jared Mauch On Apr 30, 2015, at 5:20 AM, Adam Vitkovsky adam.vitkov...@gamma.co.uk wrote: Does

Re: [c-nsp] TCP MSS on IOS XR

2015-04-28 Thread Jared Mauch
What version of IOS-XR? What are the interface MTUs? There were a number of TCP enhancements that went in around the 5.1 timeframe which impact the way window scaling works as well. Also, do you have path-mtu enabled on all the devices? on XR you want something like this: tcp selective-ack

Re: [c-nsp] sip trunk to asterisk

2015-03-30 Thread Jared Mauch
my_regex session protocol sipv2 session target ipv4:1.2.3.4 session transport udp dtmf-relay rtp-nte codec g711ulaw fax-relay ecm disable fax rate disable fax protocol pass-through g711ulaw no vad ! - Jared -- Jared Mauch | pgp key available via finger from ja

Re: [c-nsp] Asset Management Software

2015-03-26 Thread Jared Mauch
Rancid seems to work well for our network. We can get the location of any serial number from the history in CVS as an example. On Mar 26, 2015, at 2:25 AM, M K gunner_...@live.com wrote: Hi allWhat is the best Asset Management (free) software to use ?

Re: [c-nsp] IP SLA?

2015-03-24 Thread Jared Mauch
On Mar 24, 2015, at 8:27 AM, Dan Brisson dbris...@gmail.com wrote: I'm curious what folks do in the situation where you have redundant links to your customers. I'm speaking primarily in co-lo environments where you offer redundant Internet connectivity to co-lo customers. So for

Re: [c-nsp] Restrictions NetFlow v9 for IPv6

2015-03-18 Thread Jared Mauch
. Is there some solution? This will depend on the platform. you may need to enable bgp attribute-download depending on what you are using. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements

Re: [c-nsp] cisco regex puzzle of the day

2015-03-11 Thread Jared Mauch
and immediately delete all copies of the message. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Jared Mauch | pgp key available via

Re: [c-nsp] Packet Fragmentation

2015-02-12 Thread Jared Mauch
Network Architect Zcorum ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Jared Mauch | pgp key available via finger from ja

Re: [c-nsp] Non Cisco SFP

2015-02-02 Thread Jared Mauch
And why is that? We have many non-cisco optics deployed without trouble. I would avoid the cheapest-of-the-cheap optics, as those have been rumored to have trouble, slow i2c responses, or other issues that the software is poorly coded to handle. We’ve done this with SFP, XFP, SFP+ and CFP

Re: [c-nsp] Non Cisco SFP

2015-02-02 Thread Jared Mauch
On Feb 2, 2015, at 11:16 AM, Gert Doering g...@greenie.muc.de wrote: Hi, On Mon, Feb 02, 2015 at 03:29:41PM +, Rick Martin wrote: I am glad to see this thread, we are on the cusp of making the plunge into aftermarket optics Whatever aftermarket optics are - I would not go and by

Re: [c-nsp] Non Cisco SFP

2015-02-02 Thread Jared Mauch
+ i’ve ordered has worked 100% and they are priced right. -- Matthew S. Crocker President Crocker Communications, Inc. PO BOX 710 Greenfield, MA 01302-0710 E: matt...@crocker.com P: (413) 746-2760 F: (413) 746-3704 W: http://www.crocker.com On Feb 2, 2015, at 11:31 AM, Jared Mauch

Re: [c-nsp] Non Cisco SFP

2015-02-02 Thread Jared Mauch
their first party optics. - Jared -Warjack On Mon Feb 02 2015 at 11:37:59 AM Jared Mauch ja...@puck.nether.net wrote: On Feb 2, 2015, at 11:16 AM, Gert Doering g...@greenie.muc.de wrote: Hi, On Mon, Feb 02, 2015 at 03:29:41PM +, Rick Martin wrote: I am glad to see this thread

Re: [c-nsp] SNMP and interface description - IOS-XR

2015-01-20 Thread Jared Mauch
On Jan 20, 2015, at 4:27 PM, Peter Rathlev pe...@rathlev.dk wrote: On Tue, 2015-01-20 at 19:13 +0200, Hank Nussbacher wrote: In IOS 12.2(33)SRE7a in order to read an interface description we did: snmpwalk -v 2c -c snmp read community rtr1 .1.3.6.1.4.1.9.2.2.1.1.28 [This is the Cisco

Re: [c-nsp] ios-xr asr9k ipv6IfAdminStatus does return next instance if it does not exist

2014-12-16 Thread Jared Mauch
. Did you report the issue to Cisco so they can fix this? We've ended up building a regression suite to test the SNMP stack of any new release that checks for these types of defects. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http

Re: [c-nsp] Capturing remote trafic / RSPAN through non-Cisco

2014-12-12 Thread Jared Mauch
On Dec 12, 2014, at 12:38 PM, David Deutsch david.deut...@telna.com wrote: Hello all, I have a 7201 router running an ITP image that is used as an SS7 STP, it in turn is connected to a Cisco 4948E which is trunked into a series of Dell M8024K blade switches (I know, I know). I've been

Re: [c-nsp] Cisco transceiver's maintenance service

2014-12-05 Thread Jared Mauch
mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine

Re: [c-nsp] Single core fibre question

2014-11-29 Thread Jared Mauch
Do you mean single strand of fiber? If so many people make and sell these bx/bi-di optics for both 1 and 10G. Keep in mind there are two types up vs down and note the frequencies and transmit power for these as there are 10/20/40 and 80km varieties out there. Of course make sure you have

Re: [c-nsp] ASR9K XR 5.1.3 Experience

2014-11-24 Thread Jared Mauch
There are a number of SMUs you should load if using 5.1.3, I don't think they all have been posted publicly. Happy to provide you a list in private. Jared Mauch On Nov 24, 2014, at 3:30 AM, Alfred Wandati wandati.li...@gmail.com wrote: Hello list, We are looking at upgrading a number

Re: [c-nsp] Cisco recommendation for distribution layer campus network

2014-09-28 Thread Jared Mauch
I would say avoid Cisco. The IOS-XE based switches take *forever* to boot and can easily last 5-10 minutes during the entire process. We have tried for nearly a decade now to educate Cisco on why this is important and they have often missed the boat in what is feasible or otherwise. (boot

Re: [c-nsp] Connecting PoP's with long distance

2014-09-04 Thread Jared Mauch
You should be able to do 120km with a ZR XFP @ 10G without anything. If you later want to add equipment to the sites, you can look at doubling your optics and something like this: http://www.perle.com/products/10-Gigabit-Standalone-Media-Converters.shtml - Jared On Sep 4, 2014, at 5:36 AM,

Re: [c-nsp] Experience on ASR9k XR 5.1.2

2014-08-25 Thread Jared Mauch
On Sun, Aug 24, 2014 at 07:13:05PM +0200, Mark Tinka wrote: On Thursday, August 21, 2014 02:17:43 PM Jared Mauch wrote: Wait for 5.1.3 it will be out soon. We have had a number of minor issues in 5.1.2 including the vtys not working. Now that I recall - I did have the console manager

Re: [c-nsp] Experience on ASR9k XR 5.1.2

2014-08-21 Thread Jared Mauch
Wait for 5.1.3 it will be out soon. We have had a number of minor issues in 5.1.2 including the vtys not working. Jared Mauch On Aug 21, 2014, at 5:43 AM, Mattias Gyllenvarg matt...@gyllenvarg.se wrote: Dear List I would love to hear some feed back on the 5.1.2 Train of IOS XR

Re: [c-nsp] Experience on ASR9k XR 5.1.2

2014-08-21 Thread Jared Mauch
https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine

Re: [c-nsp] Experience on ASR9k XR 5.1.2

2014-08-21 Thread Jared Mauch
https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine

Re: [c-nsp] ASR9k 4.3.4 vs 5.1.3

2014-08-21 Thread Jared Mauch
. We never ran 4.3 but I have heard that 4.3.4 is fairly stable as well. I would hold off on 5.1 until 5.1.3 is released, which should be soon. - Jared -- Jared Mauch | pgp key available via finger from ja...@puck.nether.net clue++; | http://puck.nether.net/~jared/ My

Re: [c-nsp] Strange corrupt DNS Cache in IOS

2014-08-15 Thread Jared Mauch
On Aug 15, 2014, at 10:34 AM, Frank Bulk frnk...@iname.com wrote: Don't use a router as a DNS resolver for customers. Just don't. Or if you are, use something that is properly designed for that function. Check out the UBNT EdgeRouter stuff, cheap, vyatta (JunOS-like), and gives you

Re: [c-nsp] Strange corrupt DNS Cache in IOS

2014-08-15 Thread Jared Mauch
Can get more luck with voodoo dolls some days. Jared Mauch On Aug 15, 2014, at 4:12 PM, Łukasz Bromirski luk...@bromirski.net wrote: Open a case with TAC. That's what they are for, right? -- ./ On 15 Aug 2014, at 18:05, Sascha E. Pollok s...@iphh.net wrote: Frank, Jared, I

  1   2   3   4   5   >