[c-nsp] Cisco IOS to IOS XR Conversion

2009-10-23 Thread Jason Alex
Dear All,
  Is there is any tool to convert Cisco IOS to Cisco XR IOS ?
if there is one , i think it could benefit me alot ?

Thanks

Regards
Jason
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] QoS with Traffic shaping on ATM OC3 on 7206

2009-10-23 Thread Tim Franklin
 Aha, Tim. After upgrading IOS here was an error in the log that did
 not show up when entering commands. Here it is: 
 
 *Oct 22 12:18:52:  GTS : Not supported over ATM VCs
 
 I cannot apply this policy to either the ATM subinterface, or major
 ATM interface, as it won't accept the command and tells me that CBWFQ is
 not supported.

Did you try applying just the inside policy with class definitions, rather than 
the parent shaper, to the VC?

Regards,
Tim.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] RPF-vector and Interdomain multicast

2009-10-23 Thread Egor Zimin
Dear All,
Does anybody deploy RPF-vector feature with interdomain multicast solution ?

We need to distribute multicast source routes with BGP ipv4 multicast AF.
However, we wants to save completely BGP-free core (P-routers and some
other). RPF Vector looks like very suitable feature in this situation, but
unfortunately, we cannot use it, because of our multicast solution is
interdomain(we are using PIM SSM) and routers in our AS are
RPF-vector-enabled, however routers in upstream's AS are
non-RPFvector-enabled.

So, we need to enable rpf vector feature on our ASBRs, but upstream's ASBRs
doesn't support this TLV.

My questions are:
1. Is it true, that RPF vector feature must be enabled in all routers in a
multicast tree even if tree is interdomain ?
2. If no, how this TLV should be processed by non-rpf-vector-aware routers?
3. How do you think, would it be logical to enable this feature on a
per-interface(and even per-interface per direction) basis ?

-- 
Best regards,
Egor Zimin
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco IOS to IOS XR Conversion

2009-10-23 Thread Mark Tinka
On Friday 23 October 2009 03:48:17 pm Jason Alex wrote:

 Dear All,
   Is there is any tool to convert Cisco IOS
 to Cisco XR IOS ? if there is one , i think it could
 benefit me alot ?

Start here:

http://cisco.com/en/US/docs/ios_xr_sw/iosxr_r3.5/xr12000_conversion/reference/guide/cn35main.html
http://cisco.com/en/US/docs/ios_xr_sw/mcl/380_cr_mcl/380_book.html

Cheers,

Mark.


signature.asc
Description: This is a digitally signed message part.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Problem after upgrading ios on the 6509-E

2009-10-23 Thread Renelson Panosky
A lot of my WS-X6148A-GE-45AF showing up with minor error after i upgrade
the IOS on my switch, does any body here have any idea why and how to fix
it?

I've tried the following but still showing up with errors

1) i reset the module
2) i reseat the module ( take it out and put it back in)
Take a look at the sho mod

#sho mod
Mod Ports Card Type  Model  Serial
No.
--- - -- --
---
  1   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
SAD093908LP
  2   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
SAD093909ST
  3   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
SAD0938074N
  4   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
SAL1007DK13
  59  Supervisor Engine 32 8GE (Active)  WS-SUP32-GE-3B
SAD0939053K
  6   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
SAD093807LW

Mod MAC addresses   HwFw   Sw
Status
--- -- --  
---
  1  0015.c649.d1e0 to 0015.c649.d20f   1.3   8.4(1)   8.5(0.46)RFW Ok
  2  0015.c699.0790 to 0015.c699.07bf   1.3   8.4(1)   8.5(0.46)RFW Ok
  3  0015.63db.d030 to 0015.63db.d05f   1.2   8.4(1)   8.5(0.46)RFW Ok
  4  0016.c8ca.c350 to 0016.c8ca.c37f   2.0   8.4(1)   8.5(0.46)RFW Ok
  5  0013.809d.e5ce to 0013.809d.e5d9   4.2   12.2(18r)SX2 12.2(18)SXF1 Ok
  6  0015.63db.a090 to 0015.63db.a0bf   1.2   8.4(1)   8.5(0.46)RFW Ok

Mod  Sub-Module  Model  Serial   Hw
Status
 --- -- --- ---
---
  1  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093908VM  1.2Ok
  2  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093908WP  1.2Ok
  3  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093806F7  1.2Ok
  4  IEEE Voice Daughter CardWS-F6K-48-AF   SAL1007DAQZ  2.0Ok
  5  Policy Feature Card 3   WS-F6K-PFC3B   SAD093906E5  2.1Ok
  5  Cat6k MSFC 2A daughterboard WS-F6K-MSFC2A  SAD09390847  3.0Ok
  6  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093806HK  1.2Ok

Mod  Online Diag Status
 ---
  1  Pass
  2  Pass
  3  Pass
  4  Pass
  5  Minor Error
  6  Pass
VACO_24_5C#

On Thu, Oct 22, 2009 at 12:46 PM, Peter Kranz pkr...@unwiredltd.com wrote:

 Hi Renelson,
Without telling us the errors, not sure how we can diagnose your
 issue.

 Peter Kranz
 Founder/CEO - Unwired Ltd
 www.UnwiredLtd.com http://www.unwiredltd.com/
 Desk: 510-868-1614 x100
 Mobile: 510-207-
 pkr...@unwiredltd.com

 -Original Message-
 From: cisco-nsp-boun...@puck.nether.net
 [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Renelson Panosky
 Sent: Thursday, October 22, 2009 8:07 AM
 To: cisco-nsp@puck.nether.net
 Subject: [c-nsp] Problem after upgrading ios on the 6509-E

 A lot of my WS-X6148A-GE-45AF showing up with minor error after i upgrade
 the IOS on my switch, does any body here have any idea why and how to fix
 it?

 I've tried the following but still showing up with errors

 1) i reset the module
 2) i reseat the module ( take it out and put it back in)

 Renelson
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] juniper trinity

2009-10-23 Thread Marlon Duksa
Hi,
does anyone know what is this all about:

http://www.forbes.com/2009/10/21/cisco-hardware-software-technology-cio-network-juniper.html

They say  ...will reveal a new chipset it says is capable of twice the
data-pushing capacity of the current industry record

Juniper already has a 100G (half duplex) chip set on T1600 (ASIC) , and so
does Alcatel-Lucent on 7750/7450 platforms (true network processor) . Does
this announcement means that this new chip set will be a 200G (half duplex)
chip set or is it all a marketing hype? Will it be an ASIC or a true NP?

And why would they change their logo?


Marlon
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Problem after upgrading ios on the 6509-E

2009-10-23 Thread Andriy Bilous
If you haven't mixed the output from 2 platforms then it's your supervisor,
not linecards, has failed some minor test.

show diagnostic result module 5
may provide you with some ideas where to look next.


On Fri, Oct 23, 2009 at 3:22 PM, Renelson Panosky panocisc...@gmail.comwrote:

 A lot of my WS-X6148A-GE-45AF showing up with minor error after i upgrade
 the IOS on my switch, does any body here have any idea why and how to fix
 it?

 I've tried the following but still showing up with errors

 1) i reset the module
 2) i reseat the module ( take it out and put it back in)
 Take a look at the sho mod

 #sho mod
 Mod Ports Card Type  Model  Serial
 No.
 --- - -- --
 ---
  1   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
 SAD093908LP
  2   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
 SAD093909ST
  3   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
 SAD0938074N
  4   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
 SAL1007DK13
  59  Supervisor Engine 32 8GE (Active)  WS-SUP32-GE-3B
 SAD0939053K
  6   48  48-port 10/100/1000 RJ45 EtherModule   WS-X6148A-GE-45AF
 SAD093807LW

 Mod MAC addresses   HwFw   Sw
 Status
 --- -- --  
 ---
  1  0015.c649.d1e0 to 0015.c649.d20f   1.3   8.4(1)   8.5(0.46)RFW Ok
  2  0015.c699.0790 to 0015.c699.07bf   1.3   8.4(1)   8.5(0.46)RFW Ok
  3  0015.63db.d030 to 0015.63db.d05f   1.2   8.4(1)   8.5(0.46)RFW Ok
  4  0016.c8ca.c350 to 0016.c8ca.c37f   2.0   8.4(1)   8.5(0.46)RFW Ok
  5  0013.809d.e5ce to 0013.809d.e5d9   4.2   12.2(18r)SX2 12.2(18)SXF1 Ok
  6  0015.63db.a090 to 0015.63db.a0bf   1.2   8.4(1)   8.5(0.46)RFW Ok

 Mod  Sub-Module  Model  Serial   Hw
 Status
  --- -- --- ---
 ---
  1  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093908VM  1.2Ok
  2  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093908WP  1.2Ok
  3  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093806F7  1.2Ok
  4  IEEE Voice Daughter CardWS-F6K-48-AF   SAL1007DAQZ  2.0Ok
  5  Policy Feature Card 3   WS-F6K-PFC3B   SAD093906E5  2.1Ok
  5  Cat6k MSFC 2A daughterboard WS-F6K-MSFC2A  SAD09390847  3.0Ok
  6  IEEE Voice Daughter CardWS-F6K-GE48-AF SAD093806HK  1.2Ok

 Mod  Online Diag Status
  ---
  1  Pass
  2  Pass
  3  Pass
  4  Pass
  5  Minor Error
  6  Pass
 VACO_24_5C#

 On Thu, Oct 22, 2009 at 12:46 PM, Peter Kranz pkr...@unwiredltd.com
 wrote:

  Hi Renelson,
 Without telling us the errors, not sure how we can diagnose your
  issue.
 
  Peter Kranz
  Founder/CEO - Unwired Ltd
  www.UnwiredLtd.com http://www.unwiredltd.com/
  Desk: 510-868-1614 x100
  Mobile: 510-207-
  pkr...@unwiredltd.com
 
  -Original Message-
  From: cisco-nsp-boun...@puck.nether.net
  [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Renelson Panosky
  Sent: Thursday, October 22, 2009 8:07 AM
  To: cisco-nsp@puck.nether.net
  Subject: [c-nsp] Problem after upgrading ios on the 6509-E
 
  A lot of my WS-X6148A-GE-45AF showing up with minor error after i upgrade
  the IOS on my switch, does any body here have any idea why and how to fix
  it?
 
  I've tried the following but still showing up with errors
 
  1) i reset the module
  2) i reseat the module ( take it out and put it back in)
 
  Renelson
  ___
  cisco-nsp mailing list  cisco-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/
 
  ___
  cisco-nsp mailing list  cisco-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] 12.4(24)T2 has been released

2009-10-23 Thread Justin Shore
Just a reminder to all those who were waiting on the release of 
12.4(24)T2 that addressed most of the bugs reported by PSIRT on 9/23, 
24T2 was posted this morning.


http://www.cisco.com/en/US/docs/ios/12_4t/release/notes/124TCAVS.html

It's supposed to also address the bug that prevents NTP access-groups 
from working properly.


Justin

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] WAAS NM-WAE License?

2009-10-23 Thread David Lima
Thanks Dale, I will try that.
Have a nice weekend.
David

David Alejandro Lima Mencias
Soporte Internetworking
Alpha Systems S.R.L.
Tel: 591-2-2354141 ext. 256
Cel: 591-72568138
La Paz - Bolivia
david.l...@alphasys.com.bo

-Mensaje original-
De: dale.s...@gmail.com [mailto:dale.s...@gmail.com] En nombre de Dale Shaw
Enviado el: Jueves, 22 de Octubre de 2009 05:44 p.m.
Para: David Lima
CC: cisco-nsp@puck.nether.net
Asunto: Re: [c-nsp] WAAS NM-WAE License?

Hi David,

On Fri, Oct 23, 2009 at 3:12 AM, David Lima david.l...@alphasys.com.bo wrote:
 Hi, I have a C2811 with  a NM-WAE-502.

  1.  How can I check is the license is an Enterprise or transport?

I haven't used a WAAS NM before, but I understand you access it either
directly (CLI or web GUI; https://ip.addr:8443) or via a
service-module .. command. Anyway, if you can get a command line up,
show license will tell you what license type is used.

  2.  If I have a transport license, How can I upgrade to Enterprise License?

license add Enterprise will do it. It's an honour system.

You can also enable it using the web GUI and again it's just a tick box.

cheers,
Dale


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] juniper trinity

2009-10-23 Thread Richard A Steenbergen
On Fri, Oct 23, 2009 at 07:21:33AM -0700, Marlon Duksa wrote:
 Hi,
 does anyone know what is this all about:
 
 http://www.forbes.com/2009/10/21/cisco-hardware-software-technology-cio-network-juniper.html
 
 They say  ...will reveal a new chipset it says is capable of twice the
 data-pushing capacity of the current industry record
 
 Juniper already has a 100G (half duplex) chip set on T1600 (ASIC) , and so
 does Alcatel-Lucent on 7750/7450 platforms (true network processor) . Does
 this announcement means that this new chip set will be a 200G (half duplex)
 chip set or is it all a marketing hype? Will it be an ASIC or a true NP?
 
 And why would they change their logo?

This article is total bunk, factually incorrect in every possible way. 
Take this paragraph for example:

Juniper's new processors, what it will call the Trio family, will be 
built into line cards--networking components that can be stacked in a 
router to add capacity--that offer 16 10-gigabyte Ethernet ports. That's 
twice as much bandwidth as Cisco ( CSCO - news - people ) currently 
offers, though Cisco plans to launch its own 16-port devices in 2010.

If this doesn't send you screaming, nothing will. Whoever leaks this 
info to these folks should do a better job of it at least. Also that new 
logo is uglier than sin. :)

-- 
Richard A Steenbergen r...@e-gerbil.net   http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] [j-nsp] new logos

2009-10-23 Thread Jared Mauch


On Oct 23, 2009, at 11:36 AM, Richard A Steenbergen wrote:


If this doesn't send you screaming, nothing will. Whoever leaks this
info to these folks should do a better job of it at least. Also that  
new

logo is uglier than sin. :)


Depends, do you enjoy the new Cisco crayon logo? :)


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] juniper trinity

2009-10-23 Thread Marlon Duksa
Keep in mind that this is from the Forbes magazine - these guys have no clue
what a router is.
But the point is that something is coming out next week, and it gives me
kind of clue what...

I gather they will have 40G (full duplex chipset), have three of them on a
line card which will give them 120G of throughput???  Of course this will go
on MX...With no fabric redundancy. Only 10GE ports, no 100GE?? Will find out
soon...
Marlon

On Fri, Oct 23, 2009 at 8:36 AM, Richard A Steenbergen r...@e-gerbil.netwrote:

 On Fri, Oct 23, 2009 at 07:21:33AM -0700, Marlon Duksa wrote:
  Hi,
  does anyone know what is this all about:
 
 
 http://www.forbes.com/2009/10/21/cisco-hardware-software-technology-cio-network-juniper.html
 
  They say  ...will reveal a new chipset it says is capable of twice the
  data-pushing capacity of the current industry record
 
  Juniper already has a 100G (half duplex) chip set on T1600 (ASIC) , and
 so
  does Alcatel-Lucent on 7750/7450 platforms (true network processor) .
 Does
  this announcement means that this new chip set will be a 200G (half
 duplex)
  chip set or is it all a marketing hype? Will it be an ASIC or a true NP?
 
  And why would they change their logo?

 This article is total bunk, factually incorrect in every possible way.
 Take this paragraph for example:

 Juniper's new processors, what it will call the Trio family, will be
 built into line cards--networking components that can be stacked in a
 router to add capacity--that offer 16 10-gigabyte Ethernet ports. That's
 twice as much bandwidth as Cisco ( CSCO - news - people ) currently
 offers, though Cisco plans to launch its own 16-port devices in 2010.

 If this doesn't send you screaming, nothing will. Whoever leaks this
 info to these folks should do a better job of it at least. Also that new
 logo is uglier than sin. :)

 --
 Richard A Steenbergen r...@e-gerbil.net   http://www.e-gerbil.net/ras
 GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] juniper trinity

2009-10-23 Thread Richard A Steenbergen
On Fri, Oct 23, 2009 at 08:53:17AM -0700, Marlon Duksa wrote:
 Keep in mind that this is from the Forbes magazine - these guys have no clue
 what a router is.
 But the point is that something is coming out next week, and it gives me
 kind of clue what...
 
 I gather they will have 40G (full duplex chipset), have three of them on a
 line card which will give them 120G of throughput???  Of course this will go
 on MX...With no fabric redundancy. Only 10GE ports, no 100GE?? Will find out
 soon...

Remember the articles that came out before the MX's release, about how
Juniper had outsourced the entire thing and it was an EZChip based
platform? Makes you wonder exactly how full of shit they are on every
other article that isn't about something you actually know well, doesn't
it? :)

-- 
Richard A Steenbergen r...@e-gerbil.net   http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] PPPoE multiple sessions issue

2009-10-23 Thread D.J. O'Berry

Hello all,

I have an issue where random users will apparently lose their pppoe 
connection on their end for some reason, and reconnect again. The 
reconnect goes well, but the user cannot browse.  Doing a show user | 
inc username will list 2 pppoe sessions for the user. Obviously one of 
these is the lost session. We have a keepalive set, so after the 
keepalive time passes, the old session of course disappears. The problem 
is, until that happens or we remove the old session, the user cannot 
browse at all. Any ideas on causes of this would be much appreciated.


Thanks in advance.

--
D.J. O'Berry
Network Design Engineer
ZCorum
866-467-9791 ext 7041
dobe...@zcorum.com

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] juniper trinity

2009-10-23 Thread Jeff Kell
Richard A Steenbergen wrote:
 If this doesn't send you screaming, nothing will. Whoever leaks this 
 info to these folks should do a better job of it at least. Also that new 
 logo is uglier than sin. :)

Well, yeah.  Like Cisco, they went from a respectable logo to something
that looks like a 4-year old did it.

Jeff
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] PPPoE multiple sessions issue

2009-10-23 Thread Paul Stewart
Did this start out of the blue or is this a new installation?  We had
something like this occurring for a while but only on our own DSLAM's.  It
ended up being a timing issue from the DSLAM manufacturer which I confirmed
from others using the same gear (Occam).  To work around this issue, we
adjusted our keepalives in the virtual-template:

interface Virtual-Template1
 keepalive 30 10


This worked for us .. Occam I'm told is unable to reproduce this issue in
their labs but since this resolved it for us we never pushed the matter...

Cheers,
Paul

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of D.J. O'Berry
Sent: October 23, 2009 12:28 PM
To: 'Cisco-nsp'
Subject: [c-nsp] PPPoE multiple sessions issue

Hello all,

I have an issue where random users will apparently lose their pppoe 
connection on their end for some reason, and reconnect again. The 
reconnect goes well, but the user cannot browse.  Doing a show user | 
inc username will list 2 pppoe sessions for the user. Obviously one of 
these is the lost session. We have a keepalive set, so after the 
keepalive time passes, the old session of course disappears. The problem 
is, until that happens or we remove the old session, the user cannot 
browse at all. Any ideas on causes of this would be much appreciated.

Thanks in advance.

-- 
D.J. O'Berry
Network Design Engineer
ZCorum
866-467-9791 ext 7041
dobe...@zcorum.com

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] CRS-1 etherchannel

2009-10-23 Thread Dmitry Kiselev
Hello!

Could anybody answer me, is the etherchannel feature supported
on CRS-1 with 4-10GE modules (either, ports on single card or
cross-cards aggregation)?  I plan to use 4 10G ports as layer2
trunk and subinterfaces on it. Is it possible on CRS-1?

P.S. Any fresh plans of FCS date for 100G cards?

Thanks!

-- 
Dmitry Kiselev
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] juniper trinity

2009-10-23 Thread Brian Raaen
There is no logo change.  Could not find info anywhere on the juniper site and 
it was not even shown here

http://www.juniper.net/us/en/company/press-center/images/image-library/logos/

I found an article claiming the that logo change was not true.  Finding that 
article is an exercise left to the reader.

-- 

--

Brian Raaen
Network Engineer
bra...@zcorum.com


On Friday 23 October 2009, Richard A Steenbergen wrote:
 On Fri, Oct 23, 2009 at 07:21:33AM -0700, Marlon Duksa wrote:
  Hi,
  does anyone know what is this all about:
  
  http://www.forbes.com/2009/10/21/cisco-hardware-software-technology-cio-
network-juniper.html
  
  They say  ...will reveal a new chipset it says is capable of twice the
  data-pushing capacity of the current industry record
  
  Juniper already has a 100G (half duplex) chip set on T1600 (ASIC) , and so
  does Alcatel-Lucent on 7750/7450 platforms (true network processor) . Does
  this announcement means that this new chip set will be a 200G (half 
duplex)
  chip set or is it all a marketing hype? Will it be an ASIC or a true NP?
  
  And why would they change their logo?
 
 This article is total bunk, factually incorrect in every possible way. 
 Take this paragraph for example:
 
 Juniper's new processors, what it will call the Trio family, will be 
 built into line cards--networking components that can be stacked in a 
 router to add capacity--that offer 16 10-gigabyte Ethernet ports. That's 
 twice as much bandwidth as Cisco ( CSCO - news - people ) currently 
 offers, though Cisco plans to launch its own 16-port devices in 2010.
 
 If this doesn't send you screaming, nothing will. Whoever leaks this 
 info to these folks should do a better job of it at least. Also that new 
 logo is uglier than sin. :)
 
 -- 
 Richard A Steenbergen r...@e-gerbil.net   http://www.e-gerbil.net/ras
 GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/
 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] PPPoE multiple sessions issue

2009-10-23 Thread Paul Stewart
We noticed it after a new site had grown some in size if I recall .. hope
that helps..

Paul


-Original Message-
From: D.J. O'Berry [mailto:dobe...@zcorum.com] 
Sent: October 23, 2009 1:47 PM
To: Paul Stewart
Cc: 'Cisco-nsp'
Subject: Re: [c-nsp] PPPoE multiple sessions issue

The issue started up out of the blue. This network has run fine for 
several months with no issues. Its only in the last few months that the 
issue started occuring.  We dont use Occam dslams but I'll keep that in 
mind. We were using default keepalive settings of 300 seconds but have 
shortened that to 180 for testing. We'd like to stay away from 30 second 
keepalives if possible, but if we can't get the 180 to work we may try 
that.

Thanks for the suggestion.

Paul Stewart wrote:
 Did this start out of the blue or is this a new installation?  We had
 something like this occurring for a while but only on our own DSLAM's.  It
 ended up being a timing issue from the DSLAM manufacturer which I
confirmed
 from others using the same gear (Occam).  To work around this issue, we
 adjusted our keepalives in the virtual-template:

 interface Virtual-Template1
  keepalive 30 10


 This worked for us .. Occam I'm told is unable to reproduce this issue in
 their labs but since this resolved it for us we never pushed the matter...

 Cheers,
 Paul

 -Original Message-
 From: cisco-nsp-boun...@puck.nether.net
 [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of D.J. O'Berry
 Sent: October 23, 2009 12:28 PM
 To: 'Cisco-nsp'
 Subject: [c-nsp] PPPoE multiple sessions issue

 Hello all,

 I have an issue where random users will apparently lose their pppoe 
 connection on their end for some reason, and reconnect again. The 
 reconnect goes well, but the user cannot browse.  Doing a show user | 
 inc username will list 2 pppoe sessions for the user. Obviously one of 
 these is the lost session. We have a keepalive set, so after the 
 keepalive time passes, the old session of course disappears. The problem 
 is, until that happens or we remove the old session, the user cannot 
 browse at all. Any ideas on causes of this would be much appreciated.

 Thanks in advance.

   

-- 
D.J. O'Berry
Network Design Engineer
ZCorum
866-467-9791 ext 7041
dobe...@zcorum.com

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] PPPoE multiple sessions issue

2009-10-23 Thread D.J. O'Berry
The issue started up out of the blue. This network has run fine for 
several months with no issues. Its only in the last few months that the 
issue started occuring.  We dont use Occam dslams but I'll keep that in 
mind. We were using default keepalive settings of 300 seconds but have 
shortened that to 180 for testing. We'd like to stay away from 30 second 
keepalives if possible, but if we can't get the 180 to work we may try 
that.


Thanks for the suggestion.

Paul Stewart wrote:

Did this start out of the blue or is this a new installation?  We had
something like this occurring for a while but only on our own DSLAM's.  It
ended up being a timing issue from the DSLAM manufacturer which I confirmed
from others using the same gear (Occam).  To work around this issue, we
adjusted our keepalives in the virtual-template:

interface Virtual-Template1
 keepalive 30 10


This worked for us .. Occam I'm told is unable to reproduce this issue in
their labs but since this resolved it for us we never pushed the matter...

Cheers,
Paul

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of D.J. O'Berry
Sent: October 23, 2009 12:28 PM
To: 'Cisco-nsp'
Subject: [c-nsp] PPPoE multiple sessions issue

Hello all,

I have an issue where random users will apparently lose their pppoe 
connection on their end for some reason, and reconnect again. The 
reconnect goes well, but the user cannot browse.  Doing a show user | 
inc username will list 2 pppoe sessions for the user. Obviously one of 
these is the lost session. We have a keepalive set, so after the 
keepalive time passes, the old session of course disappears. The problem 
is, until that happens or we remove the old session, the user cannot 
browse at all. Any ideas on causes of this would be much appreciated.


Thanks in advance.

  


--
D.J. O'Berry
Network Design Engineer
ZCorum
866-467-9791 ext 7041
dobe...@zcorum.com

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] CRS-1 etherchannel

2009-10-23 Thread Grzegorz Janoszka

Dmitry Kiselev wrote:

Could anybody answer me, is the etherchannel feature supported
on CRS-1 with 4-10GE modules (either, ports on single card or
cross-cards aggregation)?  I plan to use 4 10G ports as layer2
trunk and subinterfaces on it. Is it possible on CRS-1?


On CRS-1 it is called bundle-ethernet. You can do it on set of ports 
within all the linecards you have.


--
Grzegorz Janoszka
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] [j-nsp] juniper trinity

2009-10-23 Thread Marlon Duksa
Not an EZChip. NP4 is scheduled for sampling in Dec of this year. It will
not be in production for another year...

This Trio or Trinity, whatever they call it is internally grown
technology...a combination if EZChip + I-chip functionality.

Plus I don't think it is a good strategy for Juniper to use third party
vendors as this will not give them differentiation...

Marlon

On Fri, Oct 23, 2009 at 11:53 AM, Roger Gabarit roger.gaba...@gmail.comwrote:

 This is probably related to the EZChip again though. 100G EZChip NP4 (used
 for queueing and filtering) will be produced in 2010, and given that it
 will
 be used both in Cisco ASR 9k and Juniper MX on their 100G line cards, it
 will be tough for any of the 2 vendors to make any difference on the packet
 forwarding/queing/filtering.

 2009/10/23 Richard A Steenbergen r...@e-gerbil.net

  On Fri, Oct 23, 2009 at 08:53:17AM -0700, Marlon Duksa wrote:
   Keep in mind that this is from the Forbes magazine - these guys have no
  clue
   what a router is.
   But the point is that something is coming out next week, and it gives
 me
   kind of clue what...
  
   I gather they will have 40G (full duplex chipset), have three of them
 on
  a
   line card which will give them 120G of throughput???  Of course this
 will
  go
   on MX...With no fabric redundancy. Only 10GE ports, no 100GE?? Will
 find
  out
   soon...
 
  Remember the articles that came out before the MX's release, about how
  Juniper had outsourced the entire thing and it was an EZChip based
  platform? Makes you wonder exactly how full of shit they are on every
  other article that isn't about something you actually know well, doesn't
  it? :)
 
  --
  Richard A Steenbergen r...@e-gerbil.net
 http://www.e-gerbil.net/ras
  GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1
 2CBC)
  ___
  juniper-nsp mailing list juniper-...@puck.nether.net
  https://puck.nether.net/mailman/listinfo/juniper-nsp
 
 ___
 juniper-nsp mailing list juniper-...@puck.nether.net
 https://puck.nether.net/mailman/listinfo/juniper-nsp

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] IP Route Cache - Unable to Route

2009-10-23 Thread Spencer Barnes
An interesting problem came up that I thought I'd share and see if
anyone has some thoughts.  A user on one of our private networks was
able to route fine to anything on his subnet but as soon as he attempted
any routing to another subnet, the connection slowed to a crawl.  We
found that moving him from his IP (172.30.50.131) to another IP worked
so upon further investigation I ran the following command and received
this output:

 

#show ip cache

IP routing cache 2 entries, 420 bytes

   3996 adds, 3994 invalidates, 0 refcounts

Minimum invalidation interval 2 seconds, maximum interval 5 seconds,

   quiet interval 3 seconds, threshold 0 requests

Invalidation rate 0 in last second, 0 in last 3 seconds

Last full cache invalidation occurred 00:03:09 ago

 

Prefix/Length   Age   Interface   Next Hop

172.30.50.131/3200:02:54  Fa2/1.1 172.30.50.131

172.30.50.155/3200:01:01  Fa2/1.1 172.30.50.155

 

Out of curiosity I changed the IP on a computer in the subnet to
172.30.50.155 and it had problems routing.  I changed it to
172.30.50.131 and received the same routing problem.  The problem
cleared when I disabled route-caching on the FA2/1.1 interface servicing
the 172.30.50.x subnet.  The strange thing is there are a bunch of other
very active IPs on this subnet and none of them show up in this list,
only these two IPs.  Route-caching is also enabled for other interfaces
on this router but there are no entries for IPs behind those interfaces.
I tried clearing the cache but it did not have an effect.  

 

Before:

 

interface FastEthernet2/1

 description [Office LAN] Connected to 3COM-3 Port 13

 no ip address

 ip flow ingress

 ip route-cache policy

 ip route-cache flow

 no ip mroute-cache

 duplex full

 ipv6 enable

 ipv6 nd ra-interval 30

 ipv6 nd prefix default 172800 172800

 hold-queue 1500 in

 

interface FastEthernet2/1.1

 encapsulation dot1Q 1 native

 ip address 172.30.50.1 255.255.255.0

 ip flow ingress

 no ip mroute-cache

 no snmp trap link-status

 ipv6 enable

 ipv6 nd ra-interval 30

 ipv6 nd prefix default 172800 172800

 

After:

 

interface FastEthernet2/1

 description [Office LAN] Connected to 3COM-3 Port 13

 no ip address

 ip flow ingress

 no ip route-cache cef

 no ip route-cache

 no ip mroute-cache

 duplex full

 ipv6 enable

 ipv6 nd ra-interval 30

 ipv6 nd prefix default 172800 172800

 hold-queue 1500 in

 

interface FastEthernet2/1.1

 encapsulation dot1Q 1 native

 ip address 172.30.50.1 255.255.255.0

 ip flow ingress

 no ip route-cache

 no ip mroute-cache

 no snmp trap link-status

 ipv6 enable

 ipv6 nd ra-interval 30

 ipv6 nd prefix default 172800 172800

 

 

This network has been up for years with this configuration and I've
never seen this before.  Another strange thing...since I changed the
configuration, the output of show ip cache has expanded.  Before, there
were only the two 172.30.50.x entries.  Now it looks like this:

 

#show ip cache

IP routing cache 137 entries, 25160 bytes

   4212 adds, 4075 invalidates, 0 refcounts

Minimum invalidation interval 2 seconds, maximum interval 5 seconds,

   quiet interval 3 seconds, threshold 0 requests

Invalidation rate 0 in last second, 0 in last 3 seconds

Last full cache invalidation occurred 00:20:27 ago

 

Prefix/Length   Age   Interface   Next Hop

8.0.0.0/8   00:05:21  FastEthernet1/0 10.1.1.1

12.0.0.0/8  00:13:28  FastEthernet1/0 10.1.1.1

17.0.0.0/8  00:09:01  FastEthernet1/0 10.1.1.1

24.0.0.0/8  00:13:22  FastEthernet1/0 10.1.1.1

32.0.0.0/8  00:05:49  FastEthernet1/0 10.1.1.1

38.0.0.0/8  00:13:16  FastEthernet1/0 10.1.1.1

63.0.0.0/8  00:13:01  FastEthernet1/0 10.1.1.1

64.0.0.0/8  00:13:31  FastEthernet1/0 10.1.1.1

65.0.0.0/8  00:13:31  FastEthernet1/0 10.1.1.1

66.0.0.0/8  00:12:24  FastEthernet1/0 10.1.1.1

xxx.xxx.xxx.131/32   00:07:43  FastEthernet2/0 xxx.xxx.xxx.131

xxx.xxx.xxx.132/32   00:09:11  FastEthernet2/0 xxx.xxx.xxx.132

xxx.xxx.xxx.141/32   00:13:31  FastEthernet2/0 xxx.xxx.xxx.141

xxx.xxx.xxx.143/32   00:07:20  FastEthernet2/0 xxx.xxx.xxx.143

xxx.xxx.xxx.148/32   00:04:23  FastEthernet2/0 xxx.xxx.xxx.148

xxx.xxx.xxx.161/32   00:00:48  FastEthernet2/0 xxx.xxx.xxx.161

xxx.xxx.xxx.162/32   00:13:05  FastEthernet2/0 xxx.xxx.xxx.162

xxx.xxx.xxx.169/32   00:01:55  FastEthernet2/0 xxx.xxx.xxx.169

xxx.xxx.xxx.170/32   00:00:11  FastEthernet2/0 xxx.xxx.xxx.170

xxx.xxx.xxx.175/32   00:13:27  FastEthernet2/0 xxx.xxx.xxx.175

xxx.xxx.xxx.178/32   00:13:17  FastEthernet2/0 xxx.xxx.xxx.178

xxx.xxx.xxx.179/32   00:05:38  FastEthernet2/0 xxx.xxx.xxx.179

xxx.xxx.xxx.181/32   00:13:31  FastEthernet2/0 xxx.xxx.xxx.181

xxx.xxx.xxx.186/32   00:13:31  FastEthernet2/0 xxx.xxx.xxx.186

xxx.xxx.xxx.188/32   00:13:19  FastEthernet2/0 

[c-nsp] telnet session hangs on 6503-E

2009-10-23 Thread Roger Wiklund
Hi

Im having a weird problem with telnet to a C6503-E. When telneting from the
the router connected to its WAN, There is no problem at all.

However, when Im telneting from my jumphost telnet session hangs after
30seconds if im lucky. Usually it hangs before I get to enter the password

When debugging tcp, I get this error when the session hangs:

Oct 23 23:25:31: TCP2: bad seg from 192.168.105.117 -- outside window: port
23 seq 2084376338 ack 2015498788 rcvnxt 2084376350 rcvwnd 4092 len 12

I have tried service nagel, service tcp-keepalive-in/out, disabled tacacs,
tried to telnet to differnt IPs/VRFs on the switch, but still the exact same
thing.

I use this jumphouse for this customer, and they have a bunch of 2800 and
3800 that works perfect. But the three 6500s they have all behave like this.

Any tips?

Thanks
Roger
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] telnet session hangs on 6503-E

2009-10-23 Thread Scott Granados

Yes, run SSH!


Telnet is extremely bad form.;)

- Original Message - 
From: Roger Wiklund co...@xy.org

To: cisco-nsp@puck.nether.net
Sent: Friday, October 23, 2009 4:35 PM
Subject: [c-nsp] telnet session hangs on 6503-E



Hi

Im having a weird problem with telnet to a C6503-E. When telneting from 
the

the router connected to its WAN, There is no problem at all.

However, when Im telneting from my jumphost telnet session hangs after
30seconds if im lucky. Usually it hangs before I get to enter the password

When debugging tcp, I get this error when the session hangs:

Oct 23 23:25:31: TCP2: bad seg from 192.168.105.117 -- outside window: 
port

23 seq 2084376338 ack 2015498788 rcvnxt 2084376350 rcvwnd 4092 len 12

I have tried service nagel, service tcp-keepalive-in/out, disabled tacacs,
tried to telnet to differnt IPs/VRFs on the switch, but still the exact 
same

thing.

I use this jumphouse for this customer, and they have a bunch of 2800 and
3800 that works perfect. But the three 6500s they have all behave like 
this.


Any tips?

Thanks
Roger
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/ 


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] [j-nsp] juniper trinity

2009-10-23 Thread Richard A Steenbergen
On Fri, Oct 23, 2009 at 12:54:40PM -0700, Marlon Duksa wrote:
 This Trio or Trinity, whatever they call it is internally grown
 technology...a combination if EZChip + I-chip functionality.
 
 Plus I don't think it is a good strategy for Juniper to use third party
 vendors as this will not give them differentiation...

I've heard people make this argument, but it is absurd. The only thing
EZChip is used for on the MX is basic Ethernet framing and MAC lookup.
No doubt it was much cheaper and easier for Juniper to use an off the
shelf chip for this than to spin their own just to do this. To go from
there to claiming that the rest of the forwarding/queuing/etc will be
the same as a Cisco platform is absolutely insane, the only thing they
have in common is the Ethernet frame. It would be really sad if Juniper
(or anyone else) could be pressured into not using the best/cheapest
component for the job because the FUD department can somehow convince
people that there is no differentiation.

Of course, the next time Juniper designed a new ASIC it would probably
make sense for them to add that functionality into the new chip to
reduce costs and simplify the architecture.

-- 
Richard A Steenbergen r...@e-gerbil.net   http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] PPPoE multiple sessions issue

2009-10-23 Thread Frank Bulk
Do both PPPoE sessions have an IP address associated with them?  If you look
at the route table, both from an IP and a Virtual-Access perspective, are
there duplicate or missing entries from any perspective?

We ended up opening a TAC case for a somewhat similar issue centered around
the use of an external DHCP server and faulty day zero PPP state
situation.  The bug was resolved in 12.2(33)SB16.  

Frank

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of D.J. O'Berry
Sent: Friday, October 23, 2009 11:28 AM
To: 'Cisco-nsp'
Subject: [c-nsp] PPPoE multiple sessions issue

Hello all,

I have an issue where random users will apparently lose their pppoe 
connection on their end for some reason, and reconnect again. The 
reconnect goes well, but the user cannot browse.  Doing a show user | 
inc username will list 2 pppoe sessions for the user. Obviously one of 
these is the lost session. We have a keepalive set, so after the 
keepalive time passes, the old session of course disappears. The problem 
is, until that happens or we remove the old session, the user cannot 
browse at all. Any ideas on causes of this would be much appreciated.

Thanks in advance.

-- 
D.J. O'Berry
Network Design Engineer
ZCorum
866-467-9791 ext 7041
dobe...@zcorum.com

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/