Re: [c-nsp] 2621 to SonicWall VPN Trouble

2007-04-02 Thread Seth Mattinen
Making the NAT translation ignore traffic destined for the VPN fixed the problem... I should have seen that. Thanks for the second set of eyes. =) ~Seth ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Switch/router recommendations?

2007-04-10 Thread Seth Mattinen
david raistrick wrote: On Tue, 10 Apr 2007, Voll, Scott wrote: 3560 or 3750 but I don't see sub $2000. what kind of port count are you looking for? 24 / 48 . 24 is plenty. I only need 6. ;) I wouldn't recommend the express 500's but they would be sub $2k. thanks I realize this

Re: [c-nsp] wireless lan controller and remote ap

2007-06-04 Thread Seth Mattinen
Dan wrote: Thanks for the info, Well there is a few reasons that I wanted to go with cisco instead of a different company, but my mind isn't made up. So as far as I can tell, i'm limited to 8 access points if i use H-REAP. Controllers at each site is definitly out of the budget range.

Re: [c-nsp] Looking for a 2000 port GigE (rj45) solution?

2007-06-25 Thread Seth Mattinen
Simon Hamilton-Wilkes wrote: How about HP ProCurve Switch 2900-48G, way cheaper than Cisco's (4K even each) and they have 4 X 10 gig ports on the back, two of which are 10 gig CX4 so you can use them to trunk distances of 15M without needing optical transceivers or fibers. They are

Re: [c-nsp] Cisco IOS versions that support switchport?

2007-06-26 Thread Seth Mattinen
Hank Nussbacher wrote: I tried using the Feature navigator and could not find a simple switchport capability. Where can I find a Cisco page that shows which IOS versions that support switchport capability (specifically for 871, 1841, 2501, 2514 and 2610)? Isn't that command only

Re: [c-nsp] Cisco 3550 Vlan Interface Graphing

2007-06-27 Thread Seth Mattinen
William Jackson wrote: Hi all We have a 3550 with some SVI interfaces. We wish to graph these in MRTG/Cacti but do not seem to be getting valid readings. We also monitor the etherchannel uplink from that switch and this shows traffic properly. Is there a known issue

Re: [c-nsp] Four T1 on small cisco router

2007-07-02 Thread Seth Mattinen
Mark Kent wrote: 1. How will you get traffic to and from this router? fast-ethernet on one side, 4xT1 on the other 2. What routing protocols will it speak? none 3. What other services/features are needed (ACLs, IPSEC, Netflow, QOS, VOIP, etc?) Basic self-protection ACL 4. What

Re: [c-nsp] WIC errors

2007-07-10 Thread Seth Mattinen
Higham, Josh wrote: We just had this crop up last week, with a genuine Cisco WIC. TAC said they have seen it before, and reseating (2-3 times) should resolve the problem. We have not tried the fix yet, though (would like to know if it works). Notably in our case the T1 interface was

Re: [c-nsp] loss of advertised bgp route

2007-07-10 Thread Seth Mattinen
bill buhlman wrote: Hi All, We've installed a new 7609 recently (up 3 weeks) and run BGP to connect to our upstream provider. We are announcing two prefixes, a /16 and /24. Since the install I've noticed connectivity to the ISP has gone down for a few minutes about 10 times, never during

Re: [c-nsp] BGP log disable bgp logging

2007-07-11 Thread Seth Mattinen
Murali Krishna wrote: Hi, Below are the logging messages in the routers snip can any one tell me how to disable BGP debug messages to from the router log? it's filling-up router logging buffer in 15 minutes. no debug all ? ___ cisco-nsp

[c-nsp] Fake NM-4e

2007-07-21 Thread Seth Mattinen
I bought myself a fake NM-4E off eBay the other day and I thought I'd share some details I noticed about it. I expected it to be a fake, but I didn't want to pay $1400 on something going in an end of service 3640 as a toy. * The connectors are stewart connectors * Has a Made in USA sticker on

Re: [c-nsp] Fake NM-4e

2007-07-23 Thread Seth Mattinen
Seth Mattinen wrote: I bought myself a fake NM-4E off eBay the other day and I thought I'd share some details I noticed about it. I expected it to be a fake, but I didn't want to pay $1400 on something going in an end of service 3640 as a toy. * The connectors are stewart connectors

Re: [c-nsp] Dual E1/T1 - best practice in combining them?

2007-08-11 Thread Seth Mattinen
Garry Glendown wrote: I have just enabled a second E1 for a customer. No problem there as such, just two point-to-point links with same weight routes pointing towards both links, results in a pretty equal distribution of the traffic flows on both links. Of course this also means a single flow

Re: [c-nsp] Default route pointed to an interface

2007-08-16 Thread Seth Mattinen
Justin Shore wrote: This has been talked about before on this list but I'd like to bring it up again for my particular situation. I have a pair of border routers, 1 with 2 upstream connection and the other with a single connection. I'm pulling down full tables from each provider and

Re: [c-nsp] hardware load balancer?

2007-09-10 Thread Seth Mattinen
Adam Greene wrote: I wanted to thank all people who replied to my question about hardware load balancers, both on and off list. The feedback I received is very helpful in discerning options and best practices. Would you be willing to summarize for the list? I'm looking for some load

Re: [c-nsp] Router recommendation

2007-09-12 Thread Seth Mattinen
Steve Bertrand wrote: Hi everyone, We run a small ISP, with approximately 2500 dialup clients, 50 SDSL clients, and with about 300 domain hosting clients. We currently have a Cisco 2651 router that is underpowered for our environment. (C2600-ADVENTERPRISEK9-M) -- Cisco 2651XM (MPC860P)

Re: [c-nsp] ATM + 7505

2007-09-20 Thread Seth Mattinen
Sridhar Ayengar wrote: Gert Doering wrote: Well, if you insist on doing NAT, the 1401 is capable of doing so... I'd like to avoid it, if possible. In that case, just don't use NAT... :-) So then how do I get the static IP assigned to my 7505 to my 7505 when the 1401 is in the way? Can

Re: [c-nsp] Cisco 2851 with HWIC-4ESW and CBR configuration.

2007-09-27 Thread Seth Mattinen
Curtis Doty wrote: 6:52pm [EMAIL PROTECTED] said: I try to configure CBR for the interface GIgabit and the fa0/1/0 Why? Uh...nevermind... One reason may be to bridge the ports of a POE enabled module into a network for the POE capability and not waste a port on an uplink. ~Seth

Re: [c-nsp] Cisco RPS for 3550 switch

2007-10-01 Thread Seth Mattinen
TCIS List Acct wrote: We are looking at options to provide redundancy for the internal A/C power supply in some 3550-48-EMIs. It seems that the following RPS models will work: RPS-300 RPS-675 RPS-2300 We plan to do a 1-1 config (1 RPS for 1 switch), so we are leaning towards the

Re: [c-nsp] Cisco RPS for 3550 switch

2007-10-01 Thread Seth Mattinen
TCIS List Acct wrote: Seth Mattinen wrote: I've tried it; doesn't work on my gear. I'd always plan for full outage though if you ever have to switch back to internal power. The RPS-600 was so much better than what's being passed off as a redundant power supply these days... I never

Re: [c-nsp] Cisco 3660 NVRAM Replace

2007-10-09 Thread Seth Mattinen
Juan C. Crespo R. wrote: Dears could anyone of you tell me where I can find a replace for cisco 3640 nvram? I usually get my odd memory/flash stuff at memoryx.net. ~Seth ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Has anyone run into this error: %SYS-4-CHUNKMALLOCFAIL

2007-10-24 Thread Seth Mattinen
Howard Leadmon wrote: The sucker should have more RAM than it knows what to do with.. *smiles* sho proc mem Processor Pool Total: 1898778796 Used: 240963296 Free: 1657815500 I/O Pool Total: 67108864 Used:5887264 Free: 61221600 Transient Pool Total: 16777216 Used:

Re: [c-nsp] OT - spam from Choice Resale

2007-10-24 Thread Seth Mattinen
Chris Woodfield wrote: Hello, I'm guessing that you've scraped my email address from one or more professional mailing lists (NANOG, cisco-nap, et al). Being in this business, you should probably know that unsolicited marketing emails such as these, even when targeted, are *highly*

Re: [c-nsp] uBR924 code

2007-11-01 Thread Seth Mattinen
Justin Shore wrote: Does anyone know where we can get the uBR924 code at? I tried download from the EoL product page but the target page is missing. I've found a number of releases from 12.1 through 12.3 for various uBR900 series devices but none say 924. I'm not familiar enough with the

Re: [c-nsp] Multihoming with 2801

2007-11-26 Thread Seth Mattinen
Pablo Almido wrote: Hi All, I am planning to configure Multihoming for my network in my job, I have a class C /24 to announce, we have recently getting our own ASN, currently we have 1 router 2801, I want to take only a default route from each provider, and announnce my network to each ISP,

Re: [c-nsp] Multihoming with 2801

2007-11-26 Thread Seth Mattinen
Nate Carlson wrote: On Mon, 26 Nov 2007, Seth Mattinen wrote: 128 is fine for default routes. If you want to get a little fancy but not go full routes, your upstreams may have the option to send you only customer routes with a default route. (Even a partial feed may require some trimming

Re: [c-nsp] Cisco 1841 Router CRC errors

2007-12-17 Thread Seth Mattinen
Tom Storey wrote: On one particular PC I have cannot auto negotiate and cannot be set to 100/full without producing errors. I have to run it in 100 half. At least this one is only a PC. Its got a Broadcom NIC. My suggestion would be, if you can spare two ports on the switch, to

Re: [c-nsp] OT: How do you fight spam in your enterprise? I need help

2007-12-19 Thread Seth Mattinen
Steve Bertrand wrote: Bob Fronk wrote: BARRACUDA. Seconded. Which has the ability to create spam, but just not for the people who bought it, thus creating the illusion of making the world a better place. If you choose to use one, please don't spam the rest of us with its NDR's and other

Re: [c-nsp] OT: Pingsta spam

2008-01-01 Thread Seth Mattinen
Jay Hennigan wrote: Anyone on-list heard of pingsta.com? Within the last hour I've received ten invitations to join them as an internetwork expert. I just got 13 of them in less than 30 minutes. Feels like a good estimate of the number of mailing lists I've ever posted on. ~Seth

Re: [c-nsp] OT: Pingsta spam

2008-01-01 Thread Seth Mattinen
e ninja wrote: Jay, This is not spam, it's a mailserver bug. check the blog post http://pingstapeople.blogspot.com/ It most certainly *is* spam. I've gotten other unsoliceted messages from them, the last on December 8. I've never signed up for anything of theirs. ~Seth

[c-nsp] Line rate DS3 on a 3845

2008-01-08 Thread Seth Mattinen
Does anyone have real-life experience with driving a full DS3's worth of bandwidth through the 3845? The website says it will, but I don't know if that's yes, as long as it's a single flow or yes, even for worst case traffic or something in the middle. Thanks! ~Seth

[c-nsp] EtherSwitch HWIC Question

2008-01-14 Thread Seth Mattinen
I have a HWIC-4ESW module with POE. I'm pretty new to this module, so forgive my ignorance if I'm missing something totally obvious. =) Let's say I have ports Fa0/1/0, Fa0/1/1, and a subint on onboard Fa0/0.3 that's a dot1q VLAN to an external switch. (Fa0/0 has two tagged subinterfaces.) Is

Re: [c-nsp] EtherSwitch HWIC Question

2008-01-14 Thread Seth Mattinen
Adrian Chadd wrote: On Mon, Jan 14, 2008, Seth Mattinen wrote: I have a HWIC-4ESW module with POE. I'm pretty new to this module, so forgive my ignorance if I'm missing something totally obvious. =) Let's say I have ports Fa0/1/0, Fa0/1/1, and a subint on onboard Fa0/0.3 that's a dot1q

Re: [c-nsp] RFC 1918 on loopback?

2008-01-15 Thread Seth Mattinen
[EMAIL PROTECTED] wrote: We tend to design our networks based on an idea outlined somewhat in this thread: http://marc.info/?l=cisco-nspm=113016470017015w=2 Implementing private IP addresses on links between your routers violates RFC1918 unless you implement filters on your borders. You

Re: [c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Seth Mattinen
Mike Louis wrote: So this is a layer 2 switching vs layer 3 switching performance issue. Are you running any policies or QOS on either switch? ACLs or anything other than a vanilla routing/switching setup? It can do ACL and L3 at line rate - unless you have a logging ACL, or exceeded the

Re: [c-nsp] recommended Cisco router/firewall for 10 to 100Mbps, dual homed

2008-02-03 Thread Seth Mattinen
Adrian Minta wrote: Patrick Giagnocavo wrote: Hi Currently I am using an OpenBSD box which has given no problems, as a router/firewall for some colocated systems. However, I would like to take advantage of some of the Cisco features like NBAR, and the FTP proxy code (systems needing

Re: [c-nsp] Bogon Filter - Least Resource/CPU intensive method?

2008-03-06 Thread Seth Mattinen
Whisper wrote: Thanks for all the replies, they have been very enlightning. Are there any other methods people use to filter/block bogons? Its always good to hear about the relative real world pros cons of implementing specific policy decisions. Not precisely a bogon list, but there's

Re: [c-nsp] rack power question

2008-03-25 Thread Seth Mattinen
Justin Shore wrote: Bill Wichers wrote: We typically run our network stuff on DC power, and we have lots lower power density there. The biggest problem we see with network stuff is that so much of the devices run sideways air flow (not in the front, out the back, so we have to do funny air

Re: [c-nsp] 7201 rack mounting

2008-04-24 Thread Seth Mattinen
Elmar K. Bins wrote: [EMAIL PROTECTED] (Benny Amorsen) wrote: [EMAIL PROTECTED] writes: racked a lot of 7200's. never had a problem with them drooping alarmingly. tighten your screws. It IS a problem with 1U front mounted stuff. Even 3750's suffer from it. 3750s always had the cheapest

Re: [c-nsp] Shutting Down Catalyst 6509?

2008-07-06 Thread Seth Mattinen
Mark Tinka wrote: On Friday 04 July 2008 20:54:48 Felix Nkansah wrote: Thanks guys. I thought it has some special shutdown procedures or commands. Which is something we wish for on Cisco's new ASR line, seeing as it has a hard drive and all. Current documented procedure to shutdown the

Re: [c-nsp] Help with multilink ppp, routing not working correctly..

2008-07-19 Thread Seth Mattinen
Howard Leadmon wrote: Hello Diogo, Thanks for the reply.. Actually I had a dynamic routing protocol running on the routers, and even pulled that and tried using static routes. Actually as I was just trying to ping interface to interface, no routing at all should have been needed, as

Re: [c-nsp] Help with multilink ppp, routing not working correctly..

2008-07-19 Thread Seth Mattinen
Howard Leadmon wrote: Hello Seth, I actually was digging in the command ref and saw that option, and tried it, didn't seem to change the routing. I didn't actually shut the interface, maybe I need to do that. I am not sure if that /32 route is even a problem, just that I did notice it

Re: [c-nsp] Fake Gear?? 2621XM

2008-08-13 Thread Seth Mattinen
Paul Stewart wrote: The exact same problem keeps happening about every 3-4 weeks on most of these 2621XM's - the FastE0/1 port goes to sleep. When a technician goes onsite, he does a shutdown/no shutdown and everything starts working again for 3-4 weeks. At first we thought this was the

Re: [c-nsp] Need some guidance for T1 / wireless ethernet handoff load balancing/failover setup

2008-08-18 Thread Seth Mattinen
Scott Lambert wrote: I have a customer who went directly to cisco to ask about how to load balance two WAN connections to their Cisco PIX 515E. Cisco sold them an ASA 5510 and two 1841s and suggested VRRP or GLBP for the LAN with the ASA and 1841s. Apparantly, the customer didn't even

Re: [c-nsp] 3560 ACL performance?

2008-08-25 Thread Seth Mattinen
rendo wrote: hi, is there any exact/rough number of acl which doesn't impact the cpu? or how can we check/make sure that the cpu will not be impacted if the traffic increasing? Try: show platform tcam utilization ~Seth ___ cisco-nsp mailing

Re: [c-nsp] Few questions regarding fixed vs modular and when which is better.

2008-08-29 Thread Seth Mattinen
and the side vent, back-to-front vent (even passive cooling) routing/switching/monitoring gear have their own special area. -- Seth Mattinen [EMAIL PROTECTED] Roller Network LLC ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https

[c-nsp] IPv6 ACL question for the 3750

2008-09-02 Thread Seth Mattinen
I'm playing with IPv6 on a 3750. Looking at the release notes for 12.2(46)SE, I see the following limitation for IPv6 access lists: * The switch does not support output port ACLs. It's currently running 12.2(25)SEE and I tested statements like permit tcp any host x:x:x:x:2d0:b7ff:fee6:574 eq 80

[c-nsp] Receiving BGP communities

2008-09-05 Thread Seth Mattinen
Is there a reason why I would not be receiving BGP communities? Upstream says they are sending, but I don't see anything. The only communities I can see are the one from my cymru bogon route server neighbors. Upstream's end is a Juniper, if that makes a difference. I feel like I'm missing

Re: [c-nsp] Receiving BGP communities

2008-09-06 Thread Seth Mattinen
On Sat, September 6, 2008 00:52, Ran Liebermann wrote: Maybe you have an ingress route-map setting new communities without the additive suffix? Here's what my ingress route-map looks like: ip as-path access-list 2 permit ^3561$ route-map set-localpref permit 10 match as-path 2 set

Re: [c-nsp] Receiving BGP communities

2008-09-06 Thread Seth Mattinen
Arie Vayner (avayner) wrote: Seth, You can use the debug ip bgp updates command (if you are getting a big table, you can use an ACL to filter it out...). If you get communities from your upstream, you would see it. If not, just send them the output, and let them worry about it. Thanks.

Re: [c-nsp] IPv6 Subnetting - Service Provider

2008-09-11 Thread Seth Mattinen
Paul Stewart wrote: Hi there... In a SP environment, what's common practice so far with subnetting? Typically, in IPv4 today we use a /30 or /29 for point to point and each device has a /32 loopback... I've been reading a lot of different opinions and everyone seems to recommend a /64

Re: [c-nsp] Performance Of www.cisco.com

2008-09-24 Thread Seth Mattinen
Mark Tinka wrote: Hi all. Not sure if it's just me but for the past several months, I've found the performance (response times) when browsing www.cisco.com is not all too great. I've tried using different paths to reach the site, and in some cases, there is short-lived improvement,

Re: [c-nsp] BGP Multihomed Selective/Conditional Advertisement

2008-10-27 Thread Seth Mattinen
[EMAIL PROTECTED] wrote: Nathan, thanks for this idea. Your idea could work. I just need to find out if they will accept my 2x /25 routes if I split the /24. As for the prepend, how could I deal with peers that might be closer to Cogent than ATT and not load-balance that traffic based on

[c-nsp] HWIC-3G-* experience?

2008-11-03 Thread Seth Mattinen
Does anyone have any experience with the HWIC-3G-* cards in real life? I'm considering emergency access plans using these as opposed to traditional methods, and I'd be interested in any success or horror stories before jumping in. ~Seth ___

Re: [c-nsp] Catalyst 3750 stacks with many members

2008-11-16 Thread Seth Mattinen
Mark Tinka wrote: On Monday 17 November 2008 05:20:25 Pshem Kowalczyk wrote: As a result of that we do not put stacks any more. If we need more ports we simply join them using ethernet cables (and etherchannels) and manage independently of each other. It has always been my personal opinion

Re: [c-nsp] Green Cisco

2008-11-18 Thread Seth Mattinen
Mikael Abrahamsson wrote: On Wed, 19 Nov 2008, Tim Durack wrote: Cisco, a Green company. So why does every SFP come packaged in an oversize plastic bag plus useless piece of paper? I know others who ship SFPs in a 20x20x5 cm cardboard box, so when you order 100 of them, you get a good part

Re: [c-nsp] HWIC-4ESW

2008-11-19 Thread Seth Mattinen
Peter Chuba wrote: Hi, I've got a 2801 whose built-in ports are damaged. I was wondering if I could add an HWIC-4ESW module and use this to connect to both the provider and LAN. And will I be able to do NAT with this setup? Will I also be able to do PPPOE on the vlan interface? I think it

Re: [c-nsp] Cisco 3G Router - IPSec configuration of central site when remote site is dynamic DHCP/3G

2009-01-05 Thread Seth Mattinen
Manu Chao wrote: Hello, I need central and remote Cisco IOS configuration example when using a router with 3G module on a remote site. IP adress of remote site is dynamic: DHCP/3G. How to configuration central site IPSec peer configuration when remote site IP @ is dynamic due to DHCP/3G?

Re: [c-nsp] ASA tftp question

2009-01-05 Thread Seth Mattinen
chloe K wrote: Hi I have a problem to backup the running config to tftp How it works? Thank you firewall# copy running-config tftp Usage: copy capture:capture-name tftp://location/pathname [pcap] copy http[s]://[user:password@]location[:port]/pathname

Re: [c-nsp] Implementing Unicast RPF multi-homed network

2009-01-24 Thread Seth Mattinen
root net wrote: Hello, I was wondering where the best place would be to implement Unicast RPF on a multi-homed network with full routes / filtered routes and private peering interconnects with local ISPs (small businesses)? Currently we just use ACLs to do drop spoofing on our upstream

Re: [c-nsp] New with Cisco

2009-01-28 Thread Seth Mattinen
Michael K. Smith wrote: Hello Dan: On 1/28/09 5:20 PM, Dan Ciora da...@catalinajazzclub.com wrote: Hello, My name is Dan and I just start working with Cisco Router. We have a router 800 Series that was working perfect. We had to upgrade the point of sale application, and the new version

Re: [c-nsp] New with Cisco

2009-01-28 Thread Seth Mattinen
David Prall wrote: http://www.iana.org/assignments/port-numbers pcsync-https8443/tcpPCsync HTTPS pcsync-https8443/udpPCsync HTTPS http://www.cisco.com/en/US/docs/security/fwsm/fwsm23/command/reference/pvalu es.pdf Don't know which access-list is on which interface. Don't know

Re: [c-nsp] How to get backplane utilization

2009-01-30 Thread Seth Mattinen
Everton Diniz wrote: Hi all, I want to get backplane utilization of a 6500 w/ CatOS, showing utilization in bps. It´s possible? OID 1.3.6.1.4.1.9.5.1.1.8 isn´t enough for me, because show me in percentage. Couldn't you just use math against that number and the known max bps? ~Seth

Re: [c-nsp] BGP - OSPF default route failover

2009-01-31 Thread Seth Mattinen
tkacprzyn...@spencerstuart.com wrote: I am trying to figure out what would be the best way to provide redundant Internet access across two sites running BGP full routing tables at the edge and OSPF between the sites. My main goal is to be able to have fail-over to the other site's Internet access

Re: [c-nsp] How to add new rule in the same access-list

2009-02-04 Thread Seth Mattinen
Deric Kwok wrote: Hi I have old rule in the switch but don't know how to add new rule in the same access-list When I add new deny rule, it will be put at the end of the access-list If I remove the access-list 140, I have to re-type all lines again. That's correct. You need to remove

Re: [c-nsp] How to add new rule in the same access-list

2009-02-05 Thread Seth Mattinen
Alex Moya wrote: You can add lines if you use sequence numbers on you acl. What version are you using Sent from my iPhone On Feb 5, 2009, at 2:29 AM, Seth Mattinen se...@rollernet.us wrote: Deric Kwok wrote: Hi I have old rule in the switch but don't know how to add new rule

Re: [c-nsp] Sprint ATT BGP multihoming

2009-02-11 Thread Seth Mattinen
Stephen Kratzer wrote: Deleted the original post, so I'll reply to this leaf... ATT is fine. Make sure that Sprint, at that particular location, has multiple transit providers. We are multihomed at one location with Embarq and Level3. As it turns out, Embarq's sole transit provider at that

Re: [c-nsp] any hints about this error

2009-02-11 Thread Seth Mattinen
James Slepicka wrote: 1. google.com 2. AMDP2_FE-6-EXCESSCOLL site:cisco.com 3. I'm Feeling Lucky Now now, don't go suggesting crazy ideas like that. ~Seth ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] BGP MSS=576 bytes

2009-02-11 Thread Seth Mattinen
Dale Shaw wrote: Hi, 2009/2/12 Antonio Soares amsoa...@netcabo.pt: This seems buggy to me :( Bad documentation, at least. The IOS 12.4 *mainline* command reference and config guide waffle on and on about 'bgp transport' yet the command (BGP router config mode or per-neighbour) doesn't even

Re: [c-nsp] SUP upgrade when moving from Gig to 10gig

2009-02-12 Thread Seth Mattinen
Powers, Kenny wrote: I have a client that has a SUP720-3BXL in his core and is moving from gige blades to 6708-10G-3C cards. Does he need VS-S720-10G-3C engines to get full capabilities out of the 6708s? or would the 3BXLs be okay? The VS supervisors are for the virtual switching system

Re: [c-nsp] need help about switch cisco 4 9 4 8

2009-02-20 Thread Seth Mattinen
chloe K wrote: Hi I have problems in this switch 49 48 1/ I can't setup the management interface. I have another same modeul. I can see there is Fasthernet to set it up as management port. 2/ After reload, I lost configuration. I did copy run start It said that it

Re: [c-nsp] Horrible MPPP Performance

2009-03-06 Thread Seth Mattinen
Michael K. Smith wrote: Hello Everyone: I have two 2800 series routers with 4, clear-channel T-1's between. I'm running MPPP with the 4 T1's in the bundle. Performance is *awful*. 100 byte packets, 40 ms with 98% delivered. 1500 byte packets, 900 ms latency with 25% packet loss. Here

Re: [c-nsp] power down of standby sup is not possible

2009-03-10 Thread Seth Mattinen
Tassos Chatzithomaoglou wrote: Anyone care to explain why such a limitation? 7609(config)#no power enable module 5 %Error: no power control on supervisor cards 7609#sh mod Mod Ports Card Type Model Serial No. --- -

Re: [c-nsp] power down of standby sup is not possible

2009-03-10 Thread Seth Mattinen
Tassos Chatzithomaoglou wrote: Seth Mattinen wrote on 11/03/2009 00:50: Tassos Chatzithomaoglou wrote: Anyone care to explain why such a limitation? 7609(config)#no power enable module 5 %Error: no power control on supervisor cards 7609#sh mod Mod Ports Card Type

[c-nsp] HWIC-4T1/E1 Platform Support

2009-03-13 Thread Seth Mattinen
I'm looking at the HWIC-4T1/E1 and according to its data sheet, it's only supported in the 2821, 2851 and 3800's. On the 2800 data sheet, the big table says it's OK for all 2800's. Which one is correct? ~Seth ___ cisco-nsp mailing list

Re: [c-nsp] Cisco 3750G-24PS Issues with POE

2009-03-17 Thread Seth Mattinen
Michael K. Smith - Adhost wrote: -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of George Stylianou Sent: Tuesday, March 17, 2009 4:28 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Cisco 3750G-24PS Issues with

Re: [c-nsp] Cisco 3750G-24PS Issues with POE

2009-03-18 Thread Seth Mattinen
George Stylianou wrote: sh power inline Module Available Used Remaining (Watts) (Watts)(Watts) -- - - 1 370.00.0 370.0 Interface Admin Oper Power Device Class Max

Re: [c-nsp] centralized mac filtering

2009-03-18 Thread Seth Mattinen
Hegedus Gabor wrote: Hi all, Is any solution to filtering wifi mac addresses from one database, if i have more devices and one wireless domain with one ssid? I've done this in the past with great success using FreeRADIUS, MySQL, and HP AP420 access points. It's actually quite simple; the

Re: [c-nsp] Cisco 3750G-24PS Issues with POE

2009-03-18 Thread Seth Mattinen
George Stylianou wrote: Huh, that's weird. Are you plugging the phone directly into the switch or is there wiring (patch panels, in-wall wiring, etc.) between the switch and the phone? It seems like it's just not detecting that there's a POE device on the other end.

Re: [c-nsp] Freeware management software

2009-03-21 Thread Seth Mattinen
Rubens Kuhl wrote: How well does Opsview scale to, for instance, 10 thousand devices and 20 thousand data sources ? It scales by using distributed monitoring and clustering. Can't say I've ever tried it with a system that big, though. ~Seth ___

Re: [c-nsp] GRE throughput on 3750G

2009-03-23 Thread Seth Mattinen
Ramcharan, Vijay A wrote: All, I'm just looking for confirmation that GRE on the 3750G is done in software with the resulting low throughput (~20Mbps with iperf across GRE tunnel on 3750G). All testing and reading that I've done indicates that the hardware on the 3750 is not especially built

Re: [c-nsp] Too dumb for SLB on ASR1Ks?

2009-04-07 Thread Seth Mattinen
Elmar K. Bins wrote: So far, I have gotten only the one response to my question. What would be the suggestion? Ask Cisco for configuration help? Create a bug id? Any ideas/guidance? I'm under the impression my basic config should be working but it doesn't... You know, any input etc...

Re: [c-nsp] Packet Loss on 6513

2009-04-07 Thread Seth Mattinen
Mesiatowsky, Shawn wrote: We currently have 2 6513's in our core, and we have seen packet loss on our network. I was trying to locate the source of the packet loss. We did see some input queue drops on the SVI's and physical interfaces. I had increased our queue size on the vlan interfaces

[c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Seth Mattinen
One of my carriers has given me a choice for a new circuit delivery: T3 or Ethernet. My outside world circuit experience is all non-Ethernet, so I have a few questions the sales group wasn't able to answer. I'd love to hear some real world experience. The cost difference between the two is not

Re: [c-nsp] Max length of 9600 serial over CAT5e

2009-04-08 Thread Seth Mattinen
Bill Wichers wrote: RS-232 has more limitations than just cable capacitance. RS-232 is a single-ended communication protocol (on the physical level), so it's noise immunity is not very good. This is especially a problem if you're running the cable in an electrically noisy environment (like a

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Seth Mattinen
Bill Wichers wrote: I've found that some carriers consider Ethernet something of a toy whereas TDM and SONET circuits are considered more mission critical. Basically our local engineering gusy say that the Ethernet links are just a bunch of jumpers in COs, and by that they mean a single link

Re: [c-nsp] 2600 series for 100M

2009-04-08 Thread Seth Mattinen
Deric Kwok wrote: Hi Do you know Cisco 2651XM is fine for 100M network? You aren't likely to get line rate 100 meg out of it. If the memory is 256M, it is ok? Can it support Virtual private network, VLAN and new tcsh command? It'll do crypto (slowly). You'll need a crypto AIM if you're

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Seth Mattinen
A big thank you to everyone who shared their wisdom. I'm going to go back and ask them how they plan on delivering the circuit. If it is TDM all the way up to the building and the difference is purely which card they put in their shelf to hand it off to me, then there's not much point in paying

Re: [c-nsp] best way to network servers with management (iLO/IPMI)

2009-04-09 Thread Seth Mattinen
Roland Dobbins wrote: On Apr 9, 2009, at 8:42 PM, Drew Weaver wrote: Ideally, I would like to be able to assign the management device a RFC 1918 IP, have the actual server be on a different subnet altogether but use a shared port. This isn't a good idea because of fate-sharing - you

Re: [c-nsp] best way to network servers with management (iLO/IPMI)

2009-04-09 Thread Seth Mattinen
Roland Dobbins wrote: On Apr 10, 2009, at 12:20 AM, Seth Mattinen wrote: I have two older Dell servers that only give you the option of a shared ethernet port for their onboard IPMI, take it or leave it. So, you can use the built-in port for that, and insert another NIC for use

Re: [c-nsp] 2600 vs 2800 series different

2009-04-13 Thread Seth Mattinen
Deric Kwok wrote: Hi What is different between 2600 and 2800 router? I check it is just 100 different in ebay Does 2800 also have feature as 2600? if yet Does 3500 Router also have same feature as 2600? Does 2800 support VPN, tcsh command and vlan? Did you try reading the data

Re: [c-nsp] X2 to GigE

2009-04-20 Thread Seth Mattinen
Skeeve Stevens wrote: Actually, what are the chance of these working in a HP? None. It looks like a converter, but it's not, it's a convenience to access wiring on the backplane Cisco added to let you use this module until you're ready for 10 gig. ~Seth

Re: [c-nsp] Channelized DS3 over SM fiber handoff

2009-05-01 Thread Seth Mattinen
Michael Ulitskiy wrote: Hello, We will need to terminate channelized DS3 circuit in 7200VXR router. The problem is that DS3 is given to us by telco (Verizon) as a single-mode fiber. I have no experience with this kind of setup and actually limited experience with DS3 circuits. Has

Re: [c-nsp] Channelized DS3 over SM fiber handoff

2009-05-01 Thread Seth Mattinen
Troy Beisigl wrote: Maybe they delivered a channelized OC3? I know that is an actual product, but have never seen a DS3 as fiber handoff. Maybe; odd though if one asked for a DS3. If that's the case you can just get an OC3 port adapter. ~Seth ___

Re: [c-nsp] Out of Band Network

2009-05-04 Thread Seth Mattinen
Mike Louis wrote: Hey Folks, I am building an out of band network and was wondering what everyones experience was with the following products. I am planning on using an 1841 configured as terminal server in each closet with 1-2 HWIC-8A slots in each router depending on the number of

Re: [c-nsp] No ACL egress logging on 3550s (12.2(44)SE3)

2009-05-07 Thread Seth Mattinen
Jeff Kell wrote: We have some 3550 EMIs that have some ACLs on their SVIs. I just ran across (through troubleshooting something else) a case where an access list with deny ... log is NOT being logged. I ran some other cases across the access list, with some additional logging, and I have

[c-nsp] Stupid Security Questions

2009-05-10 Thread Seth Mattinen
This is just me whining hoping someone from Cisco will listen. So I log in today to run a crashinfo file through the output interpreter and lo and behold, cisco is become infected with those stupid security question things I loathe to no end. For the love of $diety, why? Why must you force me to

Re: [c-nsp] About Multihoming

2009-05-13 Thread Seth Mattinen
Цэвээндорж ЖиМэйл wrote: Hello, Is it possible to multihoming with BGP on one router like 3825 ISR ? Sure. ~Seth ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Wifi network and too many wifi users

2009-05-14 Thread Seth Mattinen
reflect ocean wrote: Hi there.I run a medium-sized wifi network.We are cisco shop (autonommous access points).Recently wifi users number have reached limits we didn't expect.Because of that,we had to adjust our subnet network in order to support more users associated to the only SSID our

Re: [c-nsp] DHCP Option 66 String

2009-05-14 Thread Seth Mattinen
Nick Ryce wrote: Hi Guys, I have been hunting around trying to find if when using cisco dhcp and option 66 I can use a http url rather than tftp? Within most linux dhcp daemons this can be done. Any help greatly appreciated. I use an URL with mine for a pool of Polycom phones: ip

  1   2   3   >