Re: [c-nsp] Migration from vlan 1 for core.

2007-06-06 Thread Gert Doering
Hi, On Tue, Jun 05, 2007 at 02:40:47PM -0400, Jeff Crowe wrote: I am planning on migrating a legacy network that utilizes VLAN 1 on Cisco devices for it's core network to another VLAN ID (100 in this case). Is there any gotcha's that I should be aware of? All the switches and routers have

[c-nsp] Stable 12.3T for 7k2 router?

2007-06-06 Thread Garry
Hi, as we need the RTR/Track feature from the 12.3T for a project, I was wondering which relase would be considered safe for production use ... I did the preliminary tests with the 12.3.8T11 release, but saw there's a -14.T7 out ... or should I move over to the regular 12.4 release instead?

[c-nsp] How many DSL L2TP-tunnels on a 3825?

2007-06-06 Thread Garry
I'm currently looking into a replacement for our redundant set of 7200 routers (non-VXR) that are doing our DSL l2tp-Tunnels ... currently, both routers run at around 20-25% CPU load (peak). We possibly will get a large batch of additional dial-ins soon, which would probably be too much for

Re: [c-nsp] Stable 12.3T for 7k2 router?

2007-06-06 Thread Oliver Boehmer \(oboehmer\)
Garry wrote on Wednesday, June 06, 2007 9:48 AM: Hi, as we need the RTR/Track feature from the 12.3T for a project, I was wondering which relase would be considered safe for production use ... I did the preliminary tests with the 12.3.8T11 release, but saw there's a -14.T7 out ... or

Re: [c-nsp] Disable some routing

2007-06-06 Thread Jyotirmay Samanta
I don't know if I have understood your scenario properly. But based on your description it looks like you also have one ip address from the office network in the router. Now as u correctly said it's a normal behavior and if you want to stop this u have two options. 1. Put the office vlan

Re: [c-nsp] Disable some routing

2007-06-06 Thread Nate Carlson
On Wed, 6 Jun 2007, Bernd Ueberbacher wrote: I've got a bit of a strange question... I have a small Cisco Router with some VLANs and a Catalyst behind. If I connect one office to the switch in a seperate VLAN with an official IP address, the person can reach everything, but in my case (or

Re: [c-nsp] Maximum-routes Routes on 7600 with SUP2/PFC2

2007-06-06 Thread Justin Shore
Mohacsi Janos wrote: On Mon, 4 Jun 2007, Zahid Hassan wrote: Dear All, I am carrying full feed Internet (219K) plus VPNv4 routes (1K) on an OSR-7609 with SUP-2/PFC2. I seems to be getting intermittent packets drops and loss of connectivity from CPEs terminating on this OSR. I

[c-nsp] 4503 switches design issue

2007-06-06 Thread gokhan senol
hi i have two 4503 switches which are connected eachother as trunk via wireless. switch A (user As) Layer 2 vlans vlan 1, vlan 10, vlan 20, vlan 100, vlan 200 layer3 vlan interfacesvlan 10: 192.168.10.0 (default gateway for PCs in network A )

[c-nsp] Policing switch ports on 1811

2007-06-06 Thread The Father
Hi everyone. I'm trying to find a way to rate-limit or police to 3Mbps two of the switch ports on an 1811 router. I have configured both FE ports as follows: interface FastEthernet2 switchport access vlan 10 load-interval 30 ! interface FastEthernet9 switchport access vlan 10

Re: [c-nsp] Disable some routing

2007-06-06 Thread Paolo Riviello www.paoloriviello.com
HI, why don't you try ACL or VRF ... Hope this help Cheers -- Paolo Riviello Home: http://www.paoloriviello.com E-mail: [EMAIL PROTECTED] E-mail msn: [EMAIL PROTECTED] Skype: pao_rivi If men could get pregnant, abortion would be a sacrament. -H- From: Bernd Ueberbacher [EMAIL

Re: [c-nsp] WS-C3560G-48TS-S per port ACLs?

2007-06-06 Thread TCIS List Acct
Tom Zingale (tomz) wrote: Yes on a vlan or port you can allow/deny tcp/ip traffic. See the docs http://www.cisco.com/en/US/partner/products/hw/switches/ps5528/products_ configuration_guide_chapter09186a008081da63.html Does this same feature (per port IP ACLs on a L2 interface) work on the

[c-nsp] sub-interface inheritance of main interface properties

2007-06-06 Thread Antonio Querubin
I'm looking for ways to simplify some large router configs that have many sub-interfaces either for specific DLCIs, VCs, or VLANs. Is there a document somewhere that describes which properties or attributes of a main interface are automatically inherited by its sub-interfaces? So far,

Re: [c-nsp] Multilink PPP (MLPPP) Asymmetrical Throughput Problem NxT1

2007-06-06 Thread Rodney Dunn
On Tue, Jun 05, 2007 at 11:02:07PM -0400, Sean Shepard wrote: Thank you for the reply on this. We did exactly what you mention here (trying to isolate channels) and found the performance metrics didn't change very much except that there seemed to be little impairment with just a single T-1.

Re: [c-nsp] channelized 12000 cards

2007-06-06 Thread Oliver Boehmer \(oboehmer\)
Peder @ NetworkOblivion wrote on Wednesday, June 06, 2007 4:39 PM: Does anybody know of an easy way to tell if a 12000 card is channelized? I am new to the 12000 series and we are looking to buy an oc12 that channelizes to DS1 level. We keep running across people selling things like:

Re: [c-nsp] Netflow config on 6500 720-3B

2007-06-06 Thread Phil Mayers
On Wed, 2007-06-06 at 10:24 -0400, Jeff Fitzwater wrote: New to list... Could anyone on this list help with the correct config for NETFLOW EXPORT for version 9 on a CISCO 6500 with SUP-720-3B running 12.2.18-SXF. We are trying to export the flows to a QRadar device but the date

Re: [c-nsp] IPSec tunnel up but no Traffic

2007-06-06 Thread Scott Granados
Can you post the related parts of the configs you're using. I recently went down this road and it might help. - Original Message - From: Voll, Scott [EMAIL PROTECTED] To: cisco-nsp@puck.nether.net Sent: Wednesday, June 06, 2007 9:47 AM Subject: [c-nsp] IPSec tunnel up but no Traffic I

Re: [c-nsp] IPSec tunnel up but no Traffic

2007-06-06 Thread Voll, Scott
2801 config below. I don't think it's on the concentrator side as I've done other Lan-to-Lan's on them without problems. Scott ! ! crypto isakmp policy 10 encr aes 256 authentication pre-share group 2 crypto isakmp key 6 ### address a.b.c.41 ! crypto ipsec security-association lifetime

[c-nsp] Cisco equivalent of juniper hardware

2007-06-06 Thread Auquier Benoit
Hi, I'm looking for info on what would be technically equivalent to one redundant juniper m120 configuration in terms of cisco hardware. Requirements are : - redundant PSU - redundant routing engine - ability to take 4 full BGP views and about 25 peers - 10 interfaces, gigabit ethernet type -

[c-nsp] MTU sub-interface command

2007-06-06 Thread Alexandra Alvarado
Hello, I would like to know if is possible to configure different MTU size per sub-interface in the same interface from a router. Thanks A.A.A.A. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Multilink PPP (MLPPP) Asymmetrical Throughput Problem NxT1

2007-06-06 Thread Sean Shepard
Resolution was indeed increasing the output queue size. Looks like around 160 to 240 (for bonded 2xT1 and 3xT1) seemed to do the trick. Testing today has been tremendously positive. CEF does appear to be okay on MLPPP that far back (woo-hoo!). Thanks for your assistance and feedback! Sean

Re: [c-nsp] Cisco equivalent of juniper hardware

2007-06-06 Thread Phil Bedard
Best bang for the buck is going to be the 7600 w/SUP720 or RSP720. The XR12000 (GSR) models will work as well, but the Ethernet cost on those is going to be high. Not as high as on a M120, but higher than the 7600. Phil On Jun 6, 2007, at 12:59 PM, Auquier Benoit wrote: Hi, I'm

Re: [c-nsp] Cisco equivalent of juniper hardware

2007-06-06 Thread sthaug
I think you have missed some important factors: Do you need totally non-overbooked linecards? What are your QoS requirements, will LAN type QoS (small buffers and few queues) suffice for your needs, or do you need hierarchical shaping and deep buffers? Also - is the fact that VLANs are

Re: [c-nsp] Cisco equivalent of juniper hardware

2007-06-06 Thread Jeff Fitzwater
If you do choose the 7600, make sure you get the 720-BXL, it supports double the flow table size and larger TCAM for fast switching. We use 720-3B with 3Full BGPs but had to increase TCAM allotment for IP V4 flows vs IP v6 and Multicast, to reduce route processor CPU load due to flows

Re: [c-nsp] Low activity systems lose net connectivity

2007-06-06 Thread Tauren Mills
Thanks everyone for your help with this problem: I have a very simple network with about 5 linux servers, a cisco 3500XL switch and a 2600 router. There is a problem with servers that have very little or no traffic. The network interfaces on the low traffic servers seems to become

Re: [c-nsp] WAN optimization in IP carrier

2007-06-06 Thread Indra Simalango
Hi all, I'm quite newbie in this field. So far, in my current company, I've done some PoC using Cisco WAAS and Packeteer PacketShaperXpress (the one with Acceleration Compression module). For your requirements, how much WAN bandwidth do you have? What is each connection type? Is it a

[c-nsp] Cisco vs. Turin

2007-06-06 Thread Richard J. Sears
I am looking to replace my 7513's that I use for T1 aggregation with something like a Turin Networks TPE1200R and connect them to our 6500's via 802.1q and gig ethernet. The TPE1200 will terminate 12 Channelized DS3s and connect to the 6500 via dot1q for termination of the traffic. I like the

Re: [c-nsp] HSRP with 2 LAN switches

2007-06-06 Thread Ben Steele
You could do it with event manager combined with ip sla, not sure if your equipment supports it though. Ben Scott Dunn wrote: Hi Group, I had 2 x 3835 running eBGP for WAN redundancy (primary/shadow) and running HSRP for LAN failover to 1 switch. I've recently added a second switch, so now