Re: [c-nsp] SIP not working behind NAT

2010-09-30 Thread Bikash Bhattarai
After issuing no ip nat service sip udp port 5060 and clearing the nat translation table solved the issue. Thank you all With regards, Bikash Bhattarai -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of LM Sent:

Re: [c-nsp] IPv6 and Cat 6500

2010-09-30 Thread Lukasz Bromirski
On 2010-09-30 05:41, Dale W. Carder wrote: Sup2 would implement IPv6 routing (if it does at all) in software. That might be ok for test purposes, but not appreciable workloads. Otherwise, you would want a sup720. Sup2 will forward IPv6 in software with performance around 200kpps maximum.

[c-nsp] TCAM issue on 6500

2010-09-30 Thread Shanawaz
We are running into a TCAM issue on our 6500's running SXI3/IP services on SUP720/PFC3B The message we keep getting is Hardware TCAM exceeded. Our ACL TCAM's are running full Show tcam counts doesnot indicate a problem Show tcam counts detail indicates the masks on the HI BANK is 99% used. The

Re: [c-nsp] TCAM issue on 6500

2010-09-30 Thread Dobbins, Roland
On Sep 30, 2010, at 3:17 PM, Shanawaz wrote: Is there a way of borrowing space from other TCAM's (Qos TCAM, Netflow TCAM) to supply the ACL tcam? Also why is the Hi BANK getting full whereas the LOW BANK has plenty in spare?

[c-nsp] help on pxe boot

2010-09-30 Thread teklay gebremichael
hello, I have a session server for thin clients to connect to.  the session server has 2 NICs(one connecting to the organization switching infrastucture and the other one to the thin client network/subnet only). i have connected one cisco 2960 switch (new switch with default confg) to connect

Re: [c-nsp] help on pxe boot

2010-09-30 Thread Ingen Schenau, Jeroen van (ICTS)
On Thu, 2010-09-30 at 01:49 -0700, teklay gebremichael wrote: hello, I have a session server for thin clients to connect to. the session server has 2 NICs(one connecting to the organization switching infrastucture and the other one to the thin client network/subnet only). i have connected

Re: [c-nsp] IPv6 and Cat 6500

2010-09-30 Thread Saku Ytti
On (2010-09-30 10:08 +0200), Lukasz Bromirski wrote: Both Sup32 and Sup720 do support IPv6 in hardware, as it's function of PFC to store FIB and forward traffic. Two things to watch for in EARL7.x. ACL It can only do /128 lookup, if no L4 lookups are used in any ACL. This is the default

Re: [c-nsp] IPv6 and Cat 6500

2010-09-30 Thread Phil Mayers
On 30/09/10 10:17, Saku Ytti wrote: On (2010-09-30 10:08 +0200), Lukasz Bromirski wrote: Both Sup32 and Sup720 do support IPv6 in hardware, as it's function of PFC to store FIB and forward traffic. Two things to watch for in EARL7.x. ACL It can only do /128 lookup, if no L4 lookups are

Re: [c-nsp] help on pxe boot

2010-09-30 Thread Alexander Clouter
teklay gebremichael teklis...@yahoo.com wrote: since we are planning to have computer lab with old pcs that will boot from the server, this problem is very critical. is there some thing enabled by default on the switch that prevents booting from the network? 'spanning-tree portfast

Re: [c-nsp] IPv6 and Cat 6500

2010-09-30 Thread William F. Maton Sotomayor
On Wed, 29 Sep 2010, Security Team wrote: I am looking at a new setup and wondering what is the minimum setup that a Cat6500 can do IOS/BGP things on IPv6 and IPv4? As long as I am setting up a new setup I may as well learn how to handle the IPv4 and IPv6 dual battle of the bits. Can a Sup2

Re: [c-nsp] help on pxe boot

2010-09-30 Thread teklay gebremichael
Thanks Alex. i just enabled the portfast default and the portfast bpduguad default from the global config mode and it worked for me. --- On Thu, 9/30/10, Alexander Clouter a...@digriz.org.uk wrote: From: Alexander Clouter a...@digriz.org.uk Subject: Re: [c-nsp] help on pxe boot To:

Re: [c-nsp] IPv6 and Cat 6500

2010-09-30 Thread Elmar K. Bins
Re, wma...@ryouko.imsb.nrc.ca (William F. Maton Sotomayor) wrote: I am looking at a new setup and wondering what is the minimum setup that a Cat6500 can do IOS/BGP things on IPv6 and IPv4? As long as I am setting up a new setup I may as well learn how to handle the IPv4 and IPv6 dual battle

[c-nsp] HSRP Capability in ASR1k

2010-09-30 Thread Matthew Melbourne
Does anyone have a 10G SPA in an ASR1k? If so, could you post the output of show standby capability, as it would be interesting to see whether the 10G interface hardware supports 511 HSRP groups. It would appears that logical port-channel groups support a very limited number of HSRP groups.

Re: [c-nsp] HSRP Capability in ASR1k

2010-09-30 Thread Tassos Chatzithomaoglou
Running 15.0(1)S. ASR1kshow standby capability ASR1006 * indicates hardware may support HSRP | Interface Type H Potential Max Groups per subin Te1/0/089

Re: [c-nsp] FW: HSRP Capability in ASR1k

2010-09-30 Thread Mack O'Brian
here you go: 1006#sho standby capability ASR1006 * indicates hardware may support HSRP | Interface Type H Potential Max Groups per subin Gi0/0/027 SPA-5X1GE-V2

[c-nsp] ASR1006 Router

2010-09-30 Thread Renelson Panosky
I am configuring an ASR1006 with the following SPA cards installed. SPA-10X1GE-V2 SPA-4XT3/E3 SPA-8XCHT1/E1 Do anybody know the command to type to make the router recognize the following cards ? SPA-4XT3/E3 SPA-8XCHT1/E1 Because when i do sho ip int brief i only see the following Interface

Re: [c-nsp] ASR1006 Router

2010-09-30 Thread Mack O'Brian
I believe it is card type command. config t#card type t3 0 3 On Thu, Sep 30, 2010 at 11:50 AM, Renelson Panosky panocisc...@gmail.comwrote: I am configuring an ASR1006 with the following SPA cards installed. SPA-10X1GE-V2 SPA-4XT3/E3 SPA-8XCHT1/E1 Do anybody know the command to type to

Re: [c-nsp] ASR1006 Router

2010-09-30 Thread Asbjorn Hojmark - Lists
On Thu, 30 Sep 2010 14:50:31 -0400, you wrote: I am configuring an ASR1006 with the following SPA cards installed. SPA-10X1GE-V2 SPA-4XT3/E3 Have you read and tried Required Configuration Tasks:

Re: [c-nsp] ASR1006 Router

2010-09-30 Thread Renelson Panosky
No, That's not it. that's for the 3800 and 3900 series On Thu, Sep 30, 2010 at 2:57 PM, Mack O'Brian mackobria...@gmail.comwrote: I believe it is card type command. config t#card type t3 0 3 On Thu, Sep 30, 2010 at 11:50 AM, Renelson Panosky panocisc...@gmail.com wrote: I am

Re: [c-nsp] FW: HSRP Capability in ASR1k

2010-09-30 Thread Matthew Melbourne
Thanks for info all! Looks like it's 2047 for the SPA-1X10GE-L-V2 and 511 for each GE port of the on-board 4-port GE SPA card. Even reusing the same HSRP groups (in this case just 1 and 2) on different sub-interfaces on the same physical interface counts towards the supported maximum on a

[c-nsp] Cisco TwinGig Converter on 7600?

2010-09-30 Thread Felix Nkansah
Hi, Does anyone know if the Cisco twingig converter can be setup on the Cisco 7600 platform. The commands for enabling them on the 4500 don't seem to be available on my 7600. Appreciate your response. Thanks. Felix ___ cisco-nsp mailing list

Re: [c-nsp] SIP not working behind NAT

2010-09-30 Thread Jared Mauch
On Sep 30, 2010, at 4:35 PM, Roger Wiklund wrote: On Cisco routers, we always have to turn the sip nat OFF This has been my experience as well, the SIP-ALG in IOS is broken, and will also break other SIP (eg: Apple iChat) as well. I've seen it with Cisco IP phones using SIP behind Cisco

Re: [c-nsp] ASR1006 Router

2010-09-30 Thread cisconsp
XYZ01-exacc-rtr01#show inventory | I SPA NAME: module 0, DESCR: Cisco ASR1000 SPA Interface Processor 10 NAME: SPA subslot 0/0, DESCR: 5-port Gigabit Ethernet Shared Port Adapter PID: SPA-5X1GE-V2 , VID: V02, SN: JAE1139YA4X NAME: SPA subslot 0/1, DESCR: 8-port Channelized T1/E1 to DS0 Shared

[c-nsp] traffic policing on 7600

2010-09-30 Thread Jiří Procházka
Hi, I'm trying to limit outgoing traffic from our PE router (7606, 12.2(33)SRD4) from 'whatever' source (inside our network) to transit lines. This router is the only one with active full BGP feeds, so whole traffic flowing to transit is going through this box. What am I trying to

Re: [c-nsp] FW: HSRP Capability in ASR1k

2010-09-30 Thread Arie Vayner (avayner)
Matt, I am curious, why do you have to use different MAC addresses for the different HSRP groups? If you use the same HSRP group ID on the different sub-ifs, we use the same MAC address... Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Cisco TwinGig Converter on 7600?

2010-09-30 Thread Lukasz Bromirski
On 2010-09-30 21:41, Felix Nkansah wrote: Does anyone know if the Cisco twingig converter can be setup on the Cisco 7600 platform. No. There's no support and no plan to support it. -- Everything will be okay in the end. | Łukasz Bromirski If it's not okay, it's not the

[c-nsp] RES: traffic policing on 7600

2010-09-30 Thread Leonardo Gama Souza
The only solution I can think on the top of my head is deploying SCE8000 along with Policy Server, thus you can have global visibility of the transit traffic. Of course this is not cheap. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Service agreement warning for EOL hardware

2010-09-30 Thread Seth Mattinen
So I went to download the latest image for an ancient router and received this nifty error message: Service Agreement Validation Warning: Please read before downloading software As part of an ongoing effort to provide you with exceptional service and support, Cisco is making enhancements to its

Re: [c-nsp] FW: HSRP Capability in ASR1k

2010-09-30 Thread Matthew Melbourne
We don't have different MAC addresses; we only use two HSRP groups which would normally imply two distinct HSRP MAC addresses; one for each group. The issue we're seeing is we're re-using the same HSRP groups on each customer sub-interface which (somehow) is limiting the number of sub-interfaces

Re: [c-nsp] Service agreement warning for EOL hardware

2010-09-30 Thread Łukasz Bromirski
On 2010-10-01 00:28, Seth Mattinen wrote: So I went to download the latest image for an ancient router and received this nifty error message: Seeing as how the 3640 went EOS in 2002 and EOL in 2007, it can't have a service contract or be eligible for one. Is this something I should care about?

Re: [c-nsp] traffic policing on 7600

2010-09-30 Thread Cory Ayers
Hello, Hi, I'm trying to limit outgoing traffic from our PE router (7606, 12.2(33)SRD4) from 'whatever' source (inside our network) to transit lines. This router is the only one with active full BGP feeds, so whole traffic flowing to transit is going through this box. What am I

Re: [c-nsp] Service agreement warning for EOL hardware

2010-09-30 Thread Seth Mattinen
On 9/30/2010 15:53, Łukasz Bromirski wrote: On 2010-10-01 00:28, Seth Mattinen wrote: So I went to download the latest image for an ancient router and received this nifty error message: Seeing as how the 3640 went EOS in 2002 and EOL in 2007, it can't have a service contract or be eligible

Re: [c-nsp] Service agreement warning for EOL hardware

2010-09-30 Thread Łukasz Bromirski
On 2010-10-01 01:15, Seth Mattinen wrote: There's a End of new service attachment - November 2006. So, a customer activating a 5-year agreement with Cisco on November 2006 could have a support to November 2011. Usually such agrements are made as part of multi-year Advanced Services contracts.

Re: [c-nsp] Service agreement warning for EOL hardware

2010-09-30 Thread Seth Mattinen
On 9/30/2010 16:42, Łukasz Bromirski wrote: On 2010-10-01 01:15, Seth Mattinen wrote: There's a End of new service attachment - November 2006. So, a customer activating a 5-year agreement with Cisco on November 2006 could have a support to November 2011. Usually such agrements are made as

Re: [c-nsp] Service agreement warning for EOL hardware

2010-09-30 Thread Łukasz Bromirski
On 2010-10-01 01:57, Seth Mattinen wrote: The odd thing is that it doesn't seem to be tied to valid contracts because I tried an 877 image (I let smartnet expire after it was decommissioned) and it didn't say anything. Perhaps the 3640 is just too old. Bear in mind that before the IOS license

Re: [c-nsp] can I use | pipe line such as | inc xxx and regexp such as regexp ^$ both , when I execute show bgp

2010-09-30 Thread Mark Tinka
On Wednesday, September 29, 2010 03:36:38 pm Peter Rathlev wrote: Just the lack of clarity in documentation and/or lack of I haven't had a chance to deploy kinky stuff with IOS XR (our boxes are core nodes, and the most interesting things are IS-IS, IPv6 and LDP, hehe). But all commands and

Re: [c-nsp] C892 PPPoE on VLANs

2010-09-30 Thread Garry
On 30.09.2010 00:45, Łukasz Bromirski wrote: It works the same with regards to switch ports, however the WLAN AP is autonomous. You can configure up to 14 VLANs (Table 3): http://www.cisco.com/en/US/prod/collateral/routers/ps380/data_sheet_c78-519930.html Thanks!