[c-nsp] dynamic global-vrf leaking

2010-05-25 Thread Ibrahim Abo Zaid
Hi group

Iam looking for a feature can be used to route VPN internet traffic from
global interface into VRF interface (or global and add VPN label)

normaly , that is done using static route to perform global-vrf leaking
but i'm looking for a more scalable and dynamic solution


any ideas ?


thanks
--ibrahim
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] dynamic global-vrf leaking

2010-05-25 Thread Ibrahim Abo Zaid
also is there any feature supports dynamic export of VPN routes to global ?

i knew the reverse exist (importing IPv4 routes into VRF) but i'm looking
for the reverse



On Tue, May 25, 2010 at 10:03 AM, Ibrahim Abo Zaid 
ibrahim.aboz...@gmail.com wrote:

  Hi group

 Iam looking for a feature can be used to route VPN internet traffic from
 global interface into VRF interface (or global and add VPN label)

 normaly , that is done using static route to perform global-vrf leaking
 but i'm looking for a more scalable and dynamic solution


 any ideas ?


 thanks
 --ibrahim

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] transporting STM1 over IP (CEoIP)

2010-05-25 Thread Arie Vayner (avayner)
Miguel,

Take a look here:
http://www.cisco.com/en/US/prod/collateral/modules/ps6267/product_data_s
heet0900aecd805bad23.html

This is a SPA module that goes into the 7600 router, which would allow
Circuit Emulation for STM1 links.

Arie

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Miguel Mata
Sent: Tuesday, May 25, 2010 00:52
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] transporting STM1 over IP (CEoIP)

is there a way (namely modules, chassis, etc) to transport an STM1 over
IP with Cisco? I've 
only seen E1, ser or T1 over IP so far.

Please bear with me. I'm new to Cisco so many question arises when I got
to change 
technology.

Thanks in advance.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Tracking config changes

2010-05-25 Thread Frederic LOUI

Hi Mike,

RANCID +1
Besides what has been said so far...
Other alternatives to circumvent the problem. (If you still want to make 
sure that you did not forget to save your config ...)
* On recent IOS, you can use EEM (Embedded Event Manager to trigger a 
write mem when running-config is different than startup-config.

* On older platform, maybe the kron feature can be used to write mem

Hope this help
Cheers/ Fred

Mike a écrit :

Hi Gang,

In my smallish network I am guilty sometimes of using cli to make 
cisco switch and router config changes, and sometimes I have been 
known to forget to 'wr mem' when I'm sure it's what I want. The 
reasons for this vary, but I want to be better than this disaster 
waiting for a power outage or other event to force a reset, losing 
something that could potentially be important that I may forget about 
later. I know there are approaches to this in larger envionments using 
config version control systems and such, but I think I want something 
simpler to at least notify me when/if I have a 'running config' that 
has been modified from the 'startup config' and not committed to nvram.


One approach I might think of would be to poll the devices on my 
normal snmp schedule and include a check for the last date of 
configuration change. I could easilly throw an alert if it's been more 
than an hour since the last config change/write to memory, but I don't 
know which variables I would poll for that. A secondary idea might 
also be to download the configs and commit them to cvs anytime a 
change is detected, but some here might think this is backwards and 
that configs should only be uploaded? What do you other service 
provider folks do?


Mike-
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Tracking config changes

2010-05-25 Thread Youssef Bengelloun-Zahr
Hello Mike,

+1 for RANCID + SVN + DIFFED MAILS.

Y.



2010/5/25 Frederic LOUI frederic.l...@renater.fr

 Hi Mike,

 RANCID +1
 Besides what has been said so far...
 Other alternatives to circumvent the problem. (If you still want to make
 sure that you did not forget to save your config ...)
 * On recent IOS, you can use EEM (Embedded Event Manager to trigger a
 write mem when running-config is different than startup-config.
 * On older platform, maybe the kron feature can be used to write mem

 Hope this help
 Cheers/ Fred

 Mike a écrit :

  Hi Gang,

 In my smallish network I am guilty sometimes of using cli to make cisco
 switch and router config changes, and sometimes I have been known to forget
 to 'wr mem' when I'm sure it's what I want. The reasons for this vary, but I
 want to be better than this disaster waiting for a power outage or other
 event to force a reset, losing something that could potentially be important
 that I may forget about later. I know there are approaches to this in larger
 envionments using config version control systems and such, but I think I
 want something simpler to at least notify me when/if I have a 'running
 config' that has been modified from the 'startup config' and not committed
 to nvram.

 One approach I might think of would be to poll the devices on my normal
 snmp schedule and include a check for the last date of configuration change.
 I could easilly throw an alert if it's been more than an hour since the last
 config change/write to memory, but I don't know which variables I would poll
 for that. A secondary idea might also be to download the configs and commit
 them to cvs anytime a change is detected, but some here might think this is
 backwards and that configs should only be uploaded? What do you other
 service provider folks do?

 Mike-
 ___
 cisco-nsp mailing list cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/


 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/




-- 
Youssef BENGELLOUN-ZAHR ……
Ingénieur Réseaux et Télécoms


Technopole de l'Aube  en Champagne - BP 601 - 10901 TROYES  Cedex 9
Agence Paris : 6, rue Charles Floquet - 92120 MONTROUGE
Tel +33 (0) 825 000 720
Tel. direct  +33 (0) 1 77 35 59 14
Tel. portable  +33 (0) 6 22 42 63 80
Emaily...@720.fr
…….www.720.fr
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Tracking config changes

2010-05-25 Thread Mark Wheadon
If you have less than 20 devices. Cat Tools Freeware Edition is pretty 
good and it comes with a nice GUI that runs on Windows, you can schedule 
copy run starts and also get a report e-mailed to you of the differences 
in configuration.



On 25/05/2010 11:30, Youssef Bengelloun-Zahr wrote:

Hello Mike,

+1 for RANCID + SVN + DIFFED MAILS.

Y.



2010/5/25 Frederic LOUIfrederic.l...@renater.fr

   

Hi Mike,

RANCID +1
Besides what has been said so far...
Other alternatives to circumvent the problem. (If you still want to make
sure that you did not forget to save your config ...)
* On recent IOS, you can use EEM (Embedded Event Manager to trigger a
write mem when running-config is different than startup-config.
* On older platform, maybe the kron feature can be used to write mem

Hope this help
Cheers/ Fred

Mike a écrit :

  Hi Gang,
 

In my smallish network I am guilty sometimes of using cli to make cisco
switch and router config changes, and sometimes I have been known to forget
to 'wr mem' when I'm sure it's what I want. The reasons for this vary, but I
want to be better than this disaster waiting for a power outage or other
event to force a reset, losing something that could potentially be important
that I may forget about later. I know there are approaches to this in larger
envionments using config version control systems and such, but I think I
want something simpler to at least notify me when/if I have a 'running
config' that has been modified from the 'startup config' and not committed
to nvram.

One approach I might think of would be to poll the devices on my normal
snmp schedule and include a check for the last date of configuration change.
I could easilly throw an alert if it's been more than an hour since the last
config change/write to memory, but I don't know which variables I would poll
for that. A secondary idea might also be to download the configs and commit
them to cvs anytime a change is detected, but some here might think this is
backwards and that configs should only be uploaded? What do you other
service provider folks do?

Mike-
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

   

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

 



   


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] BGP flapping session

2010-05-25 Thread Chris Lane
We are an ISP and have many customer neighbor sessions on our router. One of
my customers BGP sessions started flapping yesterday. The bridge we have to
them has no errors or disconnects. So i debugged the bgp session and
recieved the following. Also to note the customer router is a Juniper.

FYI: i removed the IPs.

ay 24 20:20:29.715: BGP: timer-wheel running slow by 1 ticks

May 24 20:20:35.780: BGP:  remote close

May 24 20:20:35.780: BGP:  -reset the session

May 24 20:20:35.780: BGP:  rcv message type 3, length (excl. header) 2

May 24 20:20:35.780: BGPNSF state:  went from nsf_not_active to
nsf_not_active

May 24 20:20:35.780: BGP:  went from Established to Idle

May 24 20:20:35.780: %BGP-5-ADJCHANGE: neighbor  Down Peer closed the
session

May 24 20:20:35.780: BGP:  closing

May 24 20:20:35.780: BGP:  read request no-op

May 24 20:20:39.530: BGP:  read request no-op

May 24 20:21:01.676: BGP:  read request no-op

May 24 20:21:10.878: BGP:  went from Idle to Active

May 24 20:21:10.878: BGP:  open active delayed 28655ms (35000ms max, 28%
jitter)

May 24 20:21:13.831: BGP:  passive open to 64.119.159.185

May 24 20:21:13.831: BGP:  went from Active to Idle

May 24 20:21:13.839: BGP:  went from Idle to Connect

May 24 20:21:13.839: BGP:  read request no-op

May 24 20:21:13.839: BGP:  rcv message type 1, length (excl. header) 36

May 24 20:21:13.839: BGP:  rcv OPEN, version 4, holdtime 90 seconds

May 24 20:21:13.839: BGP:  went from Connect to OpenSent

May 24 20:21:13.839: BGP:  sending OPEN, version 4, my as: 19406, holdtime
180 seconds

May 24 20:21:13.839: BGP:  rcv OPEN w/ OPTION parameter len: 26

May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 6

May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 1, length 4

May 24 20:21:13.839: BGP:  OPEN has MP_EXT CAP for afi/safi: 1/1

May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 2

May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 128, length 0

May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(old) for all
address-families

May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 2

May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 2, length 0

May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(new) for all
address-families

May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 8

May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 64, length 6

BGP:  rcvd OPEN w/ remote AS 46324

May 24 20:21:13.848: BGP:  went from OpenSent to OpenConfirm

May 24 20:21:13.848: BGP:  send message type 1, length (incl. header) 45

May 24 20:21:13.890: BGP:  went from OpenConfirm to Established

May 24 20:21:13.890: %BGP-5-ADJCHANGE: neighbor  Up

May 24 20:21:15.089: BGP_Router: unhandled major event code 128, minor 0



Any help would greatly be appreciated.

Chris

-- 
//CL
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] FlexOptic

2010-05-25 Thread Tim Durack
Anybody have any experience with FlexOptic? Their website seems a
little crazy: http://www.flexoptix.net

But they claim to have an SFP/GBIC programmer, plus tunable optics,
which is what interests me.

-- 
Tim:
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] BGP flapping session

2010-05-25 Thread Billy Guthrie

Chris,

Have you checked connectivity to this customer; ping, traceroutes, etc.

Customer's link could be saturated causing issues for BGP


May 24 20:21:10.878: BGP:  open active delayed 28655ms (35000ms max, 28%
jitter)

the 28% leads me to be that it is possible there is some type of congestion 
which
could be possibly the reason you are seeing flaps.

Hope this helps
Billy




Chris Lane wrote:

We are an ISP and have many customer neighbor sessions on our router. One of
my customers BGP sessions started flapping yesterday. The bridge we have to
them has no errors or disconnects. So i debugged the bgp session and
recieved the following. Also to note the customer router is a Juniper.

FYI: i removed the IPs.

ay 24 20:20:29.715: BGP: timer-wheel running slow by 1 ticks

May 24 20:20:35.780: BGP:  remote close

May 24 20:20:35.780: BGP:  -reset the session

May 24 20:20:35.780: BGP:  rcv message type 3, length (excl. header) 2

May 24 20:20:35.780: BGPNSF state:  went from nsf_not_active to
nsf_not_active

May 24 20:20:35.780: BGP:  went from Established to Idle

May 24 20:20:35.780: %BGP-5-ADJCHANGE: neighbor  Down Peer closed the
session

May 24 20:20:35.780: BGP:  closing

May 24 20:20:35.780: BGP:  read request no-op

May 24 20:20:39.530: BGP:  read request no-op

May 24 20:21:01.676: BGP:  read request no-op

May 24 20:21:10.878: BGP:  went from Idle to Active

May 24 20:21:10.878: BGP:  open active delayed 28655ms (35000ms max, 28%
jitter)

May 24 20:21:13.831: BGP:  passive open to 64.119.159.185

May 24 20:21:13.831: BGP:  went from Active to Idle

May 24 20:21:13.839: BGP:  went from Idle to Connect

May 24 20:21:13.839: BGP:  read request no-op

May 24 20:21:13.839: BGP:  rcv message type 1, length (excl. header) 36

May 24 20:21:13.839: BGP:  rcv OPEN, version 4, holdtime 90 seconds

May 24 20:21:13.839: BGP:  went from Connect to OpenSent

May 24 20:21:13.839: BGP:  sending OPEN, version 4, my as: 19406, holdtime
180 seconds

May 24 20:21:13.839: BGP:  rcv OPEN w/ OPTION parameter len: 26

May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 6

May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 1, length 4

May 24 20:21:13.839: BGP:  OPEN has MP_EXT CAP for afi/safi: 1/1

May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 2

May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 128, length 0

May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(old) for all
address-families

May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 2

May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 2, length 0

May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(new) for all
address-families

May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
(Capability) len 8

May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 64, length 6

BGP:  rcvd OPEN w/ remote AS 46324

May 24 20:21:13.848: BGP:  went from OpenSent to OpenConfirm

May 24 20:21:13.848: BGP:  send message type 1, length (incl. header) 45

May 24 20:21:13.890: BGP:  went from OpenConfirm to Established

May 24 20:21:13.890: %BGP-5-ADJCHANGE: neighbor  Up

May 24 20:21:15.089: BGP_Router: unhandled major event code 128, minor 0



Any help would greatly be appreciated.

Chris

  


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cat6500 PM_SCP-SP-2-LCP_FW_ERR_INFORM Bus Asic #0 out of sync error

2010-05-25 Thread Chris Wopat
Hello, trying to determine if this is is an issue with the line card
(WS-X6148-GE-TX) or the chassis (6509). Out of the blue once every 6
months or so we get:

May 25 07:09:55.108 CDT: %PM_SCP-SP-2-LCP_FW_ERR_INFORM: Module 8 is
experiencing the following error: Bus Asic #0 out of sync error
May 25 07:10:13.107 CDT: %PM_SCP-SP-2-LCP_FW_ERR_INFORM: Module 8 is
experiencing the following error: Bus Asic #0 out of sync error
...

After ~5 minutes of the above errors the card shuts down:

May 25 07:14:59.717 CDT: %LINK-3-UPDOWN: Interface GigabitEthernet8/4,
changed state to down
May 25 07:14:59.717 CDT: %LINK-3-UPDOWN: Interface GigabitEthernet8/8,
changed state to down
May 25 07:14:59.717 CDT: %LINK-3-UPDOWN: Interface
GigabitEthernet8/10, changed state to down
snip
May 25 07:14:59.921 CDT: %HA_EM-6-LOG: Mandatory.go_intlpbk.tcl: GOLD
EEM TCL policy for TestIntPortLoopback
May 25 07:14:59.625 CDT: %CONST_DIAG-SP-6-HM_TEST_SP_INFO:
TestIntPortLoopback[8]: last_busy_percent[23%], Tx_Rate[68730],
Rx_Rate[10475]
May 25 07:14:59.625 CDT: %CONST_DIAG-SP-2-HM_MOD_RESET: Resetting
Module 8 for software recovery, Reason: Failed TestIntPortLoopback
May 25 07:14:59.625 CDT: %OIR-SP-3-PWRCYCLE: Card in module 8, is
being power-cycled 'off (Diagnostic Failure)'
May 25 07:14:59.761 CDT: %C6KPWR-SP-4-DISABLED: power to module in
slot 8 set off (Diagnostic Failure)

At this point we have to re-seat the card. Currently running
12.2(33)SXI2a. Trying to determine which (or both) to replace- module
or chassis. Thoughts?

--Chris
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] BGP flapping session

2010-05-25 Thread Chris Lane
I had an extended ping going to customer IP during our troubleshooting and i
never lost a packet or had loss when the session went down. Customer states
they have a Juniper with 768m memory and i was sending full routes. My
hunch figured he had a memory issue so i shut down the Full route session
and sent him a default but it the session still flapped.
customer also states no errors on interface that we connect to him.

Thanks for response.


On Tue, May 25, 2010 at 9:06 AM, Billy Guthrie b...@billyguthrie.com wrote:

 Chris,

 Have you checked connectivity to this customer; ping, traceroutes, etc.

 Customer's link could be saturated causing issues for BGP



 May 24 20:21:10.878: BGP:  open active delayed 28655ms (35000ms max, 28%
 jitter)

 the 28% leads me to be that it is possible there is some type of congestion
 which
 could be possibly the reason you are seeing flaps.

 Hope this helps
 Billy





 Chris Lane wrote:

 We are an ISP and have many customer neighbor sessions on our router. One
 of
 my customers BGP sessions started flapping yesterday. The bridge we have
 to
 them has no errors or disconnects. So i debugged the bgp session and
 recieved the following. Also to note the customer router is a Juniper.

 FYI: i removed the IPs.

 ay 24 20:20:29.715: BGP: timer-wheel running slow by 1 ticks

 May 24 20:20:35.780: BGP:  remote close

 May 24 20:20:35.780: BGP:  -reset the session

 May 24 20:20:35.780: BGP:  rcv message type 3, length (excl. header) 2

 May 24 20:20:35.780: BGPNSF state:  went from nsf_not_active to
 nsf_not_active

 May 24 20:20:35.780: BGP:  went from Established to Idle

 May 24 20:20:35.780: %BGP-5-ADJCHANGE: neighbor  Down Peer closed the
 session

 May 24 20:20:35.780: BGP:  closing

 May 24 20:20:35.780: BGP:  read request no-op

 May 24 20:20:39.530: BGP:  read request no-op

 May 24 20:21:01.676: BGP:  read request no-op

 May 24 20:21:10.878: BGP:  went from Idle to Active

 May 24 20:21:10.878: BGP:  open active delayed 28655ms (35000ms max, 28%
 jitter)

 May 24 20:21:13.831: BGP:  passive open to 64.119.159.185

 May 24 20:21:13.831: BGP:  went from Active to Idle

 May 24 20:21:13.839: BGP:  went from Idle to Connect

 May 24 20:21:13.839: BGP:  read request no-op

 May 24 20:21:13.839: BGP:  rcv message type 1, length (excl. header) 36

 May 24 20:21:13.839: BGP:  rcv OPEN, version 4, holdtime 90 seconds

 May 24 20:21:13.839: BGP:  went from Connect to OpenSent

 May 24 20:21:13.839: BGP:  sending OPEN, version 4, my as: 19406, holdtime
 180 seconds

 May 24 20:21:13.839: BGP:  rcv OPEN w/ OPTION parameter len: 26

 May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 6

 May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 1, length 4

 May 24 20:21:13.839: BGP:  OPEN has MP_EXT CAP for afi/safi: 1/1

 May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 2

 May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 128, length 0

 May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(old) for all
 address-families

 May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 2

 May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 2, length 0

 May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(new) for all
 address-families

 May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 8

 May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 64, length 6

 BGP:  rcvd OPEN w/ remote AS 46324

 May 24 20:21:13.848: BGP:  went from OpenSent to OpenConfirm

 May 24 20:21:13.848: BGP:  send message type 1, length (incl. header) 45

 May 24 20:21:13.890: BGP:  went from OpenConfirm to Established

 May 24 20:21:13.890: %BGP-5-ADJCHANGE: neighbor  Up

 May 24 20:21:15.089: BGP_Router: unhandled major event code 128, minor 0



 Any help would greatly be appreciated.

 Chris







-- 
//CL
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Tracking config changes

2010-05-25 Thread Mihaly Szummer

Hello Mike,

First of all: +1 to RANCID.

Another aproach could be to use the IOS command 'archive'.

Here's a few links:

http://blogs.techrepublic.com.com/networking/?p=532
http://www.nil.com/ipcorner/RouterConfigArch/

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gtconlog.html

http://www.cisco.com/en/US/docs/ios/12_3t/12_3t4/feature/guide/gt_diff.html

HTH,
Mihaly

In my smallish network I am guilty sometimes of using cli to make  
 cisco switch and router config changes, and sometimes I have been known  
 to forget to 'wr mem' when I'm sure it's what I want. The reasons for  
 this vary, but I want to be better than this disaster waiting for a  
 power outage or other event to force a reset, losing something that  
 could potentially be important that I may forget about later. I know  
 there are approaches to this in larger envionments using config version  
 control systems and such, but I think I want something simpler to at  
 least notify me when/if I have a 'running config' that has been modified  
 from the 'startup config' and not committed to nvram.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco Switch Packet Buffering Matrix?

2010-05-25 Thread Skeeve Stevens
Well, I assume someone from Cisco has seen this request.

I don't have the time dicking around with vendors who won't willing give the 
information that is needed for pre-sales.

So I will just look at Arista, Juniper and ProCurve... I hear they have a bunch 
of new kit to look at.

...Skeeve

--
Skeeve Stevens, CEO/Technical Director
eintellego Pty Ltd - The Networking Specialists
ske...@eintellego.net / www.eintellego.net
Phone: 1300 753 383, Fax: (+612) 8572 9954
Cell +61 (0)414 753 383 / skype://skeeve
www.linkedin.com/in/skeeve ; facebook.com/eintellego
--
NOC, NOC, who's there?


 -Original Message-
 From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-
 boun...@puck.nether.net] On Behalf Of Seth Mattinen
 Sent: Tuesday, 25 May 2010 2:15 PM
 To: cisco-nsp@puck.nether.net
 Subject: Re: [c-nsp] Cisco Switch Packet Buffering Matrix?
 
 On 5/24/10 3:16 PM, Skeeve Stevens wrote:
  If it requires an NDA or me having to talk to Cisco to find out this
 basic information, then I will drop Cisco off the list for
 consideration as you rightly point out, the others all provide this
 detail upfront.
 
  How does Cisco expect us to sell them as a superior product against
 other vendors if the information is not available?
 
 
 You have to give them credit where it's due: Cisco is very good about
 providing all kinds of docs compared to, for example, Brocade. I could
 never imagine buying a Brocade product if I have to pay to read a
 manual. I'm really big on researching things myself.
 
 Cisco is not good at other things like disclosing the true capabilities
 of QoS on the 3560/3750 switches (as a downgrade from the 3550) and
 buffers.
 
 ~Seth
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Apple Mac + iPhone = strange network loop?

2010-05-25 Thread Peter Rathlev
I wonder if anybody else have seen this problem. In the past two weeks
we've had two cases where a tethering between a MacBook and an iPhone
have resulted in some strange loop on the network.

It seems that the users have setup some kind of network connection
sharing between the iPhone and the Mac. I don't know Macs well enough to
know exactly how it works, but it looks like some NAT thing.

It also looks like the Mac uses a wired connection and the iPhone uses a
wireless connection to the same L2 network. On the gateways (running
HSRP) we then see this:

002660: May 21 09:16:50.426 CEST: %HSRP-4-BADAUTH: Bad authentication
from 10.100.0.134, group 22, remote state Standby

It turns out this (10.100.0.134) is the IP address of the MacBook.
Capturing the traffic, we can see that it is exactly the HSRP hellos,
but just with the IP address replaced, a la NAT.

Without HSRP authentication (we tried that too!) it actually steals
the primary role, i.e. when it reflects the primary router's hello the
two real routers assume a Standby role.

It doesn't cause broadcast loops or anything, so it seems to only
forward/bridge unicast packets.

Apart from telling people not to connect their wonderful Apple devices
in this way, what can we do? :-)

-- 
Peter


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco 7206VXR (NPE-G2) SRD4

2010-05-25 Thread Anrey Teslenko
Hi all,

We recently has tried to update IOs version on our  Cisco router 7206VXR
(NPE-G2) up to SRD4 12.2 (33).
But we observed trouble with bgp process.
Some sessions had not risen or got down with following notifications

May 25 07:28:29 router.name.net 118: May 25 07:28:29: %BGP-5-ADJCHANGE:
neighbor  Down BGP Notification sent
May 25 07:28:29 router.name.net 119: May 25 07:28:29: %BGP-3-NOTIFICATION:
sent to neighbor ip-address 4/0 (hold time expired) 0 bytes
May 25 07:28:30 router.name.net 120: May 25 07:28:29:
%BGP_SESSION-5-ADJCHANGE: neighbor ip-address VPNv4 Unicast topology base
removed from session  BGP Notification sent
May 25 07:28:31 router.name.net May 25 07:29:38: %BGP_SESSION-5-ADJCHANGE:
neighbor ip-address VPNv4 Unicast topology base removed from session
 Unknown path error

The dampening was disabled and  some sessions were in a up status and not
got down.
So we have made rollback. But this is situation very unpleasant.

I have found nothing  on cisco.com

Please help me, if anyone had something similar.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco 7206VXR (NPE-G2) SRD4

2010-05-25 Thread Mark Wheadon

On 25/05/2010 16:51, Anrey Teslenko wrote:

Unknown path error
   


Do you have a copy of the BGP configuration (removing the actual IP's) ? 
I have upgraded several devices to SRD4 and I am pretty happy with this 
software release. I am using IBGP/EBGP without any problems although I 
had yet to upgrade a NPE-G2 to SRD4.


Did you grab any debug outputs at the time ?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Apple Mac + iPhone = strange network loop?

2010-05-25 Thread Jay Hennigan
On 5/25/10 8:28 AM, Peter Rathlev wrote:

 002660: May 21 09:16:50.426 CEST: %HSRP-4-BADAUTH: Bad authentication
 from 10.100.0.134, group 22, remote state Standby
 
 It turns out this (10.100.0.134) is the IP address of the MacBook.
 Capturing the traffic, we can see that it is exactly the HSRP hellos,
 but just with the IP address replaced, a la NAT.
 
 Without HSRP authentication (we tried that too!) it actually steals
 the primary role, i.e. when it reflects the primary router's hello the
 two real routers assume a Standby role.
 
 It doesn't cause broadcast loops or anything, so it seems to only
 forward/bridge unicast packets.
 
 Apart from telling people not to connect their wonderful Apple devices
 in this way, what can we do? :-)

Make sure that you use HSRP authentication everywhere.  Have the Apple
customers open bug reports with Apple, and suggest that they mention
Cisco HSRP protocol conflict in their reports.

Be prepared to wait a while for Apple to realize the issue, do
regression testing, and roll it out in their next updates.

--
Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net
Impulse Internet Service  -  http://www.impulse.net/
Your local telephone and internet company - 805 884-6323 - WB6RDV
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] IPv6 over GRE or IPv6IP tunneling on sup32

2010-05-25 Thread Michael Ulitskiy
On Tuesday 25 May 2010 01:48:02 am Mikael Abrahamsson wrote:
 On Mon, 24 May 2010, Michael Ulitskiy wrote:
 
  Hello,
 
  Does anybody know if sup32/PFC3B support hardware forwarding of ipv6 over 
  GRE or ipv6ip tunnels?
  IOS 12.2(33)SXH4. I can't find a definitive answer in cisco doc.
  I know tunnel mode gre runs in hardware, but I'm not sure if ipv6 on top 
  of it will make any difference.
  Has anybody tried it?
 
 I know for a fact that tunnel mode ipv6ip is hw path on a Sup720 (if 
 it's the only tunnel using that loopback IP as tunnel IP), so should be on 
 sup32 as well?
 


My understanding is that sup32 should be no differenct.
Anyway it seems you're right.
I've made the following little lab - Tu0 is IPv6 over GRE tunnel and Tu1 is 
IPv6IP.

interface Tunnel0
 no ip address
 load-interval 30
 ipv6 address ::FFFE:1::1/64
 ipv6 enable
 no snmp trap link-status
 tunnel source Loopback0
 tunnel destination a.b.c.d
!
interface Tunnel1
 no ip address
 load-interval 30
 ipv6 address ::FFFE:2::1/64
 ipv6 enable
 no snmp trap link-status
 tunnel source Loopback1
 tunnel destination a.b.c.d
 tunnel mode ipv6ip
!

Here's what I see:

CORE1#sh mls cef ipv6

Codes: + - Push label
Index  Prefix  Adjacency
...
196864 ::FFFE:1::/64   punt
196866 ::FFFE:2::/64   Tu1 a.b.c.d
...

GRE tunnel (Tu0) has punt adjacency, while ipv6ip tunnel has Tu1 adjacency.
Also I've put some traffic on both tunnels and here's what I got:

CORE1#sh int tu0 stats
Tunnel0
  Switching pathPkts In   Chars In   Pkts Out  Chars Out
   Processor  3264  3408
 Route cache   42125677980  27110   25666796
   Distributed cache  101526065737  0  0
   Total  14367   11743981  27113   25667204

CORE1#sh int tu1 stats
Tunnel1
  Switching pathPkts In   Chars In   Pkts Out  Chars Out
   Processor  9   1078 58   5680
 Route cache  0  0  0  0
   Distributed cache  29935   29559402  21701   20714008
   Total  29944   29560480  21759   20719688

Most ipv6 over GRE traffic is in route cache path, while most ipv6ip traffic
in distributed cache. I'm not sure what the difference between them, but my
guess is that route cache is software CEF, while distributed cache is PFC3.
Am I right?
Is there any better way to confirm it?
Thanks,

Michael

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Apple Mac + iPhone = strange network loop?

2010-05-25 Thread Peter Rathlev
On Tue, 2010-05-25 at 12:15 -0400, Alex Moya wrote:
 Peter I do not believe that the mac is causing this issue unless there
 is some software running on the MAC that is telling it to create a
 HSRP session. I would look at that first.

When we first saw it, we thought the Mac was deliberately trying
something nasty, but when we talked to the user (and his IT guy) no-one
could find anything wrong with the Mac. The only thing that stood out
was the tethering.

It doesn't seem to be HSRP-specific, since it simply replaces the IP
address in the IPv4 header and nothing else. This might be a general
multicast thing, I will try to test that.

(Of course we don't have any Macs to test with, so we'll have to test on
the live network. :-))

-- 
Peter


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] BGP flapping session

2010-05-25 Thread Chris Lane
Wanted to close out issue, customer had a memory and broadcast issue from
their Own customer.
Thanks to all

On Tue, May 25, 2010 at 9:30 AM, Chris Lane clane1...@gmail.com wrote:

 I had an extended ping going to customer IP during our troubleshooting and
 i never lost a packet or had loss when the session went down. Customer
 states they have a Juniper with 768m memory and i was sending full routes.
 My hunch figured he had a memory issue so i shut down the Full route session
 and sent him a default but it the session still flapped.
 customer also states no errors on interface that we connect to him.

 Thanks for response.


 On Tue, May 25, 2010 at 9:06 AM, Billy Guthrie b...@billyguthrie.comwrote:

 Chris,

 Have you checked connectivity to this customer; ping, traceroutes, etc.

 Customer's link could be saturated causing issues for BGP



 May 24 20:21:10.878: BGP:  open active delayed 28655ms (35000ms max, 28%
 jitter)

 the 28% leads me to be that it is possible there is some type of
 congestion which
 could be possibly the reason you are seeing flaps.

 Hope this helps
 Billy





 Chris Lane wrote:

 We are an ISP and have many customer neighbor sessions on our router. One
 of
 my customers BGP sessions started flapping yesterday. The bridge we have
 to
 them has no errors or disconnects. So i debugged the bgp session and
 recieved the following. Also to note the customer router is a Juniper.

 FYI: i removed the IPs.

 ay 24 20:20:29.715: BGP: timer-wheel running slow by 1 ticks

 May 24 20:20:35.780: BGP:  remote close

 May 24 20:20:35.780: BGP:  -reset the session

 May 24 20:20:35.780: BGP:  rcv message type 3, length (excl. header) 2

 May 24 20:20:35.780: BGPNSF state:  went from nsf_not_active to
 nsf_not_active

 May 24 20:20:35.780: BGP:  went from Established to Idle

 May 24 20:20:35.780: %BGP-5-ADJCHANGE: neighbor  Down Peer closed the
 session

 May 24 20:20:35.780: BGP:  closing

 May 24 20:20:35.780: BGP:  read request no-op

 May 24 20:20:39.530: BGP:  read request no-op

 May 24 20:21:01.676: BGP:  read request no-op

 May 24 20:21:10.878: BGP:  went from Idle to Active

 May 24 20:21:10.878: BGP:  open active delayed 28655ms (35000ms max, 28%
 jitter)

 May 24 20:21:13.831: BGP:  passive open to 64.119.159.185

 May 24 20:21:13.831: BGP:  went from Active to Idle

 May 24 20:21:13.839: BGP:  went from Idle to Connect

 May 24 20:21:13.839: BGP:  read request no-op

 May 24 20:21:13.839: BGP:  rcv message type 1, length (excl. header) 36

 May 24 20:21:13.839: BGP:  rcv OPEN, version 4, holdtime 90 seconds

 May 24 20:21:13.839: BGP:  went from Connect to OpenSent

 May 24 20:21:13.839: BGP:  sending OPEN, version 4, my as: 19406,
 holdtime
 180 seconds

 May 24 20:21:13.839: BGP:  rcv OPEN w/ OPTION parameter len: 26

 May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 6

 May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 1, length 4

 May 24 20:21:13.839: BGP:  OPEN has MP_EXT CAP for afi/safi: 1/1

 May 24 20:21:13.839: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 2

 May 24 20:21:13.839: BGP:  OPEN has CAPABILITY code: 128, length 0

 May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(old) for all
 address-families

 May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 2

 May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 2, length 0

 May 24 20:21:13.848: BGP:  OPEN has ROUTE-REFRESH capability(new) for all
 address-families

 May 24 20:21:13.848: BGP:  rcvd OPEN w/ optional parameter type 2
 (Capability) len 8

 May 24 20:21:13.848: BGP:  OPEN has CAPABILITY code: 64, length 6

 BGP:  rcvd OPEN w/ remote AS 46324

 May 24 20:21:13.848: BGP:  went from OpenSent to OpenConfirm

 May 24 20:21:13.848: BGP:  send message type 1, length (incl. header) 45

 May 24 20:21:13.890: BGP:  went from OpenConfirm to Established

 May 24 20:21:13.890: %BGP-5-ADJCHANGE: neighbor  Up

 May 24 20:21:15.089: BGP_Router: unhandled major event code 128, minor 0



 Any help would greatly be appreciated.

 Chris







 --
 //CL




-- 
//CL
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] FlexOptic

2010-05-25 Thread Tim Durack
On Tue, May 25, 2010 at 1:32 PM, Sascha Pollok nsp-l...@pollok.net wrote:
 they do. And they are crazy indeed :) Thomas held a presentation at
 DENOG1 about Flexoptics. A few slides are available from
 http://www.denog.de/meetings/denog1/agenda_en.html. Unfortunately
 in German.

 There is also an mp4 video clip of his presentation which was
 in English afair.

I've been looking for an SFP/Optic reprogrammer, 'cos I'm tired of
vendor lock. But this one appears to be license based, which means I'm
trading one drug pusher for another...

-- 
Tim:
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] FlexOptic

2010-05-25 Thread Sascha Pollok

Hello Tim,


Anybody have any experience with FlexOptic? Their website seems a
little crazy: http://www.flexoptix.net

But they claim to have an SFP/GBIC programmer, plus tunable optics,
which is what interests me.


they do. And they are crazy indeed :) Thomas held a presentation at
DENOG1 about Flexoptics. A few slides are available from 
http://www.denog.de/meetings/denog1/agenda_en.html. Unfortunately

in German.

There is also an mp4 video clip of his presentation which was
in English afair.

Sascha
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] FlexOptic

2010-05-25 Thread Nick Hilliard
On 25/05/2010 18:41, Tim Durack wrote:
 I've been looking for an SFP/Optic reprogrammer, 'cos I'm tired of
 vendor lock. But this one appears to be license based, which means I'm
 trading one drug pusher for another...

The economics of this depend on the volume of transceivers you need to
reprogram.  Don't FlexOptics have an unlimited version?

Yes, vendor locking is very tiresome.

Nick
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] FlexOptic

2010-05-25 Thread Tim Durack
On Tue, May 25, 2010 at 2:25 PM, Nick Hilliard n...@inex.ie wrote:
 On 25/05/2010 18:41, Tim Durack wrote:
 I've been looking for an SFP/Optic reprogrammer, 'cos I'm tired of
 vendor lock. But this one appears to be license based, which means I'm
 trading one drug pusher for another...

 The economics of this depend on the volume of transceivers you need to
 reprogram.  Don't FlexOptics have an unlimited version?

Doesn't look like it. They have a Professional Bundle:

http://www.flexoptix.net/en/transceiver/flexbox/preise-sfp-configurator.html

 Yes, vendor locking is very tiresome.

Indeed. I don't mind vendors making money. I do mind them needlessly
limiting the tools I have available to deliver network services. What
does MSA stand for again? (I know it only applies to equipment
vendors, not their poor users.)

-- 
Tim:

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco x64 IPSec VPN client

2010-05-25 Thread Jay Nakamura
I don't think I saw anyone post this on the list but it looks like
Cisco released 64bit version of IPSec VPN client that's not beta.

vpnclient-winx64-msi-5.0.07.0290-k9.exe

I think all of my clients who was forced to upgrade so they can use
Anyconnect with their 64bit OS is going to be pissed.  I am glad it
came out, but why couldn't Cisco do this to begin with???

Grumble...
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] dynamic global-vrf leaking

2010-05-25 Thread Kenny Sallee
You could use VRF's for all interfaces and RT import/export the routes
between VRF's - even the 'global routes'.  Use import-map's to control what
routes make it into each VRF.  You'll need to run MP-BGP to make it work.  I
basically do this where I work (different scenario but same concept).

Kenny

On Tue, May 25, 2010 at 12:08 AM, Ibrahim Abo Zaid 
ibrahim.aboz...@gmail.com wrote:

 also is there any feature supports dynamic export of VPN routes to global ?

 i knew the reverse exist (importing IPv4 routes into VRF) but i'm looking
 for the reverse



 On Tue, May 25, 2010 at 10:03 AM, Ibrahim Abo Zaid 
 ibrahim.aboz...@gmail.com wrote:

   Hi group
 
  Iam looking for a feature can be used to route VPN internet traffic from
  global interface into VRF interface (or global and add VPN label)
 
  normaly , that is done using static route to perform global-vrf leaking
  but i'm looking for a more scalable and dynamic solution
 
 
  any ideas ?
 
 
  thanks
  --ibrahim
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] dynamic global-vrf leaking

2010-05-25 Thread Youssef Bengelloun-Zahr

Hello,

+1, importing routes from global routing table using import-map under  
a vrf instance.


Using it over here.

Y.



Le 25 mai 2010 à 22:07, Kenny Sallee kenny.sal...@gmail.com a  
écrit :



You could use VRF's for all interfaces and RT import/export the routes
between VRF's - even the 'global routes'.  Use import-map's to  
control what
routes make it into each VRF.  You'll need to run MP-BGP to make it  
work.  I

basically do this where I work (different scenario but same concept).

Kenny

On Tue, May 25, 2010 at 12:08 AM, Ibrahim Abo Zaid 
ibrahim.aboz...@gmail.com wrote:

also is there any feature supports dynamic export of VPN routes to  
global ?


i knew the reverse exist (importing IPv4 routes into VRF) but i'm  
looking

for the reverse



On Tue, May 25, 2010 at 10:03 AM, Ibrahim Abo Zaid 
ibrahim.aboz...@gmail.com wrote:


Hi group

Iam looking for a feature can be used to route VPN internet  
traffic from

global interface into VRF interface (or global and add VPN label)

normaly , that is done using static route to perform global-vrf  
leaking

but i'm looking for a more scalable and dynamic solution


any ideas ?


thanks
--ibrahim


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] 12.4(15)T12 - 15.0M ATM ADSL PPPoE pre-clone removed, idle statistics no longer tracker, performance increases, and other undocumented improvements?

2010-05-25 Thread P C
I just updated my 7201 from 12.4(15)T12 to 15.0M to resolve an issue with
RIP.  During the process, I've noticed a few changes:

1) (config)#virtual-template 2 pre-clone 500
% Command ignored (deprecated post 12.2S)
Virtual-template pre-clone seems to be removed.  It mentions version 12.2S,
which doesn't seem relevant between 12.4T-15.0, but in either case it
doesn't seem necessary.

I reviewed the DSL broadband deployment guide, and indeed in 12.4T when I
made the config it recommended using it.  This section seems to be removed
in the 15.0 version of the guide (although several sample configs within
which have it remain).

I found nothing in the release notes for 15.0 regarding this functionality
change.

Does anyone know if this was removed, why, and the impact of such?


2) PPPoE performance on an ATM DS3 seems greatly improved, at least for
session establishment.  I wasn't expecting this, but re-establishing 1,000
sessions went from a 45 second affair to a 15 second one.  Were there some
major change here?


3) PPPoE idle session statistics (show user) no longer are tracked.


4) Outbound flash RIP updates based on the loss of a connected network
(metric 16 updates) targetted by a network statement get advertised to rip
neighbors, ignoring a distribute list telling the router not to send updated
about anything but a default route.

I suspect #3 is a new bug (but better than the one I had before as metric 16
updates are essentially ignored) so I'll deal with it for now.


Perhaps does anyone have any information regarding the significant PPPoE
changes that occured and what they were -- or has anyone else experienced
similar behavior with 15.0 as the issues shown above?  I wish it was in the
release notes, but it isn't.

Thanks!
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Tracking config changes

2010-05-25 Thread Joe Shen

Could it possible to track special configuration line and generate summary 
report on  monitored lines?

e.g. want to track configuration on each device, and montor 
  OSPF neighbor configuration every day 



 发件人: Mark Wheadon m...@currybeast.co.uk
 主题: Re: [c-nsp] Tracking config changes
 收件人: cisco-nsp@puck.nether.net
 日期: 2010年5月25日,周二,下午6:51
 If you have less than 20 devices. Cat
 Tools Freeware Edition is pretty 
 good and it comes with a nice GUI that runs on Windows, you
 can schedule 
 copy run starts and also get a report e-mailed to you of
 the differences 
 in configuration.
 
 
 On 25/05/2010 11:30, Youssef Bengelloun-Zahr wrote:
  Hello Mike,
 
  +1 for RANCID + SVN + DIFFED MAILS.
 
  Y.
 
 
 
  2010/5/25 Frederic LOUIfrederic.l...@renater.fr
 
     
  Hi Mike,
 
  RANCID +1
  Besides what has been said so far...
  Other alternatives to circumvent the problem. (If
 you still want to make
  sure that you did not forget to save your config
 ...)
  * On recent IOS, you can use EEM (Embedded Event
 Manager to trigger a
  write mem when running-config is different than
 startup-config.
  * On older platform, maybe the kron feature can be
 used to write mem
 
  Hope this help
  Cheers/ Fred
 
  Mike a 閏rit :
 
    Hi Gang,
       
  In my smallish network I am guilty sometimes
 of using cli to make cisco
  switch and router config changes, and
 sometimes I have been known to forget
  to 'wr mem' when I'm sure it's what I want.
 The reasons for this vary, but I
  want to be better than this disaster waiting
 for a power outage or other
  event to force a reset, losing something that
 could potentially be important
  that I may forget about later. I know there
 are approaches to this in larger
  envionments using config version control
 systems and such, but I think I
  want something simpler to at least notify me
 when/if I have a 'running
  config' that has been modified from the
 'startup config' and not committed
  to nvram.
 
  One approach I might think of would be to poll
 the devices on my normal
  snmp schedule and include a check for the last
 date of configuration change.
  I could easilly throw an alert if it's been
 more than an hour since the last
  config change/write to memory, but I don't
 know which variables I would poll
  for that. A secondary idea might also be to
 download the configs and commit
  them to cvs anytime a change is detected, but
 some here might think this is
  backwards and that configs should only be
 uploaded? What do you other
  service provider folks do?
 
  Mike-
 
 ___
  cisco-nsp mailing list cisco-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/
 
         
  ___
  cisco-nsp mailing list  cisco-nsp@puck.nether.net
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/
 
       
 
 
     
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/
 


  

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Fax support on AS5350

2010-05-25 Thread Tseveendorj Ochirlantuu
Hi all,

How do I know does AS5350 support fax ?

IOS version
Cisco IOS Software, 5350 Software (C5350-IS-M), Version 12.4(20)T1, RELEASE
SOFTWARE (fc3)

Any help will be appreciated.

Regards,
Tseveen.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/