[c-nsp] CRS1 downgrade from 4.0.1 to 3.6.2
Hi, I have upgraded CRS1 to 4.0.1 from 3.6.2. Upgrade worked fine and it is running 4.0.1. But the issue is I am not able to downgrade it back to 3.6.2 If I am trying to run any install command I see similar output - RP/0/RP0/CPU0:crs1.BLB(admin)#install commit Fri Feb 25 03:45:10.181 UTC Install operation 402 '(admin) install commit' started by user 'colt123' via CLI at 03:45:10 UTC Fri Feb 25 2011. Error:Cannot proceed with the operation because the upgrade package is Error:active. Error: Error:The package should only be used when upgrading from software RP/0/RP0/CPU0:Feb 25 03:45:11.503 : instdir[216]: %INSTALL-INSTMGR-3-INSTALL_OPERATION_USER_ERROR : User error occurred during install operation 402. See 'show install log 402 detail' for more inError:versions prior to 4.0.0. Once the upgrade is complete, it should be formation. Error:immediately deactivated and removed. No further install operations Error:will be allowed until this is completed. Error: Error:Deactivate the package from the entire router by executing the Error:'install deactivate ' command in admin mode. Error:Remove the package from the entire router by executing the 'install Error:remove ' command in admin mode. Error:No further install operations will be allowed until this is Error:completed. Install operation 402 failed at 03:45:11 UTC Fri Feb 25 2011. I have also checked on the active and inactive files and could not locate upgrade package on active disk (boot disk). Does anyone has faced similar issue? Regards, Vikas ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] CRS1 downgrade from 4.0.1 to 3.6.2
Also I can see this log which clearly says no upgrade package is available but then why it asks to uninstall the upgrade package.. Fri Feb 25 02:26:03.572 UTC Install operation 396 '(admin) install remove disk1:hfr-upgrade-p.pie-4.0.1 synchronous' started by user 'colt123' via CLI at 02:26:04 UTC Fri Feb 25 2011. P/0/RP0/CPU0:Feb 25 02:26:04.876 : instdir[216]: %INSTALL-INSTMGR-3-INSTALL_OPERATION_USER_ERROR : User error occurred during install operation 396. See 'show install log 396 detail' for more inKformation. Warning: The following specified package does not use the boot device, and so Warning: will not be removed: Warning: disk1:hfr-upgrade-p.pie-4.0.1 Error:There are no valid packages on the boot device to be removed. Regards, VIkas On Fri, Feb 25, 2011 at 4:33 PM, Vikas Sharma vikasshar...@gmail.comwrote: Hi, I have upgraded CRS1 to 4.0.1 from 3.6.2. Upgrade worked fine and it is running 4.0.1. But the issue is I am not able to downgrade it back to 3.6.2 If I am trying to run any install command I see similar output - RP/0/RP0/CPU0:crs1.BLB(admin)#install commit Fri Feb 25 03:45:10.181 UTC Install operation 402 '(admin) install commit' started by user 'colt123' via CLI at 03:45:10 UTC Fri Feb 25 2011. Error:Cannot proceed with the operation because the upgrade package is Error:active. Error: Error:The package should only be used when upgrading from software RP/0/RP0/CPU0:Feb 25 03:45:11.503 : instdir[216]: %INSTALL-INSTMGR-3-INSTALL_OPERATION_USER_ERROR : User error occurred during install operation 402. See 'show install log 402 detail' for more inError:versions prior to 4.0.0. Once the upgrade is complete, it should be formation. Error:immediately deactivated and removed. No further install operations Error:will be allowed until this is completed. Error: Error:Deactivate the package from the entire router by executing the Error:'install deactivate ' command in admin mode. Error:Remove the package from the entire router by executing the 'install Error:remove ' command in admin mode. Error:No further install operations will be allowed until this is Error:completed. Install operation 402 failed at 03:45:11 UTC Fri Feb 25 2011. I have also checked on the active and inactive files and could not locate upgrade package on active disk (boot disk). Does anyone has faced similar issue? Regards, Vikas ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] CRS1 downgrade from 4.0.1 to 3.6.2
Hi Vikas, Have the CRS is running on 4.0.1? I mean that the all steps required to complete the installation have completed? Or you are stuck during installation... For downgrade the same procedures are required. However your flash file system is required to up-grade from FAT 16 to FAT 32 in 4.0.1, have you did this? -FJ On Fri, Feb 25, 2011 at 4:05 PM, Vikas Sharma vikasshar...@gmail.comwrote: Also I can see this log which clearly says no upgrade package is available but then why it asks to uninstall the upgrade package.. Fri Feb 25 02:26:03.572 UTC Install operation 396 '(admin) install remove disk1:hfr-upgrade-p.pie-4.0.1 synchronous' started by user 'colt123' via CLI at 02:26:04 UTC Fri Feb 25 2011. P/0/RP0/CPU0:Feb 25 02:26:04.876 : instdir[216]: %INSTALL-INSTMGR-3-INSTALL_OPERATION_USER_ERROR : User error occurred during install operation 396. See 'show install log 396 detail' for more inKformation. Warning: The following specified package does not use the boot device, and so Warning: will not be removed: Warning: disk1:hfr-upgrade-p.pie-4.0.1 Error:There are no valid packages on the boot device to be removed. Regards, VIkas On Fri, Feb 25, 2011 at 4:33 PM, Vikas Sharma vikasshar...@gmail.com wrote: Hi, I have upgraded CRS1 to 4.0.1 from 3.6.2. Upgrade worked fine and it is running 4.0.1. But the issue is I am not able to downgrade it back to 3.6.2 If I am trying to run any install command I see similar output - RP/0/RP0/CPU0:crs1.BLB(admin)#install commit Fri Feb 25 03:45:10.181 UTC Install operation 402 '(admin) install commit' started by user 'colt123' via CLI at 03:45:10 UTC Fri Feb 25 2011. Error:Cannot proceed with the operation because the upgrade package is Error:active. Error: Error:The package should only be used when upgrading from software RP/0/RP0/CPU0:Feb 25 03:45:11.503 : instdir[216]: %INSTALL-INSTMGR-3-INSTALL_OPERATION_USER_ERROR : User error occurred during install operation 402. See 'show install log 402 detail' for more inError:versions prior to 4.0.0. Once the upgrade is complete, it should be formation. Error:immediately deactivated and removed. No further install operations Error:will be allowed until this is completed. Error: Error:Deactivate the package from the entire router by executing the Error:'install deactivate ' command in admin mode. Error:Remove the package from the entire router by executing the 'install Error:remove ' command in admin mode. Error:No further install operations will be allowed until this is Error:completed. Install operation 402 failed at 03:45:11 UTC Fri Feb 25 2011. I have also checked on the active and inactive files and could not locate upgrade package on active disk (boot disk). Does anyone has faced similar issue? Regards, Vikas ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] CRS1 downgrade from 4.0.1 to 3.6.2
I have upgraded CRS1 to 4.0.1 from 3.6.2. Upgrade worked fine and it is running 4.0.1. But the issue is I am not able to downgrade it back to 3.6.2 I have also checked on the active and inactive files and could not locate upgrade package on active disk (boot disk). Does anyone has faced similar issue? I think Cisco have somehow messed up the 4.0.1 upgrade PIE. I've had an issue, not the same one as you experiences, but similar enough on a XR12k. When trying to remove the 4.0.1 upgrade PIE it promptly announced it would remove all other 4.0.1 PIEs as well. It turned out this was a false alarm, they were not removed. The thing is covered in CSCti51558. -- Pelle RFC1925, truth 11: Every old idea will be proposed again with a different name and a different presentation, regardless of whether it works. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] CRS1 downgrade from 4.0.1 to 3.6.2
On Fri, 25 Feb 2011, Vikas Sharma wrote: Hi, I have upgraded CRS1 to 4.0.1 from 3.6.2. Upgrade worked fine and it is running 4.0.1. But the issue is I am not able to downgrade it back to 3.6.2 I believe the release notes say that when you've finished upgrading to 4.0.x and removed the upgrade package, you cannot downgrade again. If you want to go back to 3.6.2 you have to Turboboot that image including recommended reformat of the flash drives to FAT16. Perhaps when you do this, you might as well go to 3.8.x instead of the now (afaik) unsupported 3.6.2? -- Mikael Abrahamssonemail: swm...@swm.pp.se ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
[c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device
Hello, I would like to connect IPv4-only devices like printers to an IPv6-only Network and I thought about doing this with NAT-PT on a cisco-device. To play around with NAT-PT and do some tests I need a cheap device. According to the cisco document Implementing NAT-PT for IPv6 (http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-nat_trnsln_ps6350_TSD_Products_Configuration_Guide_Chapter.html) I need IOS 12.4(2)T if I want to use all the available features. What is the cheapest cisco-device with at least two or better four fast ethernet ports running IOS 12.4(2)T to evaluate, if configuring NAT-PT is a solution for my problem ? greetings and thanks for help, Andreas -- Zentrum für Datenverarbeitung Abteilung Netze Tel: 07071-2970342 Fax: 07071-295912 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] CRS1 downgrade from 4.0.1 to 3.6.2
Hi Farhan, Yes I did follow all steps and box is up and running 4.0.1 w/o any issue. Also it has Fat32 partition. Regards, Vikas On Fri, Feb 25, 2011 at 5:04 PM, Farhan Jaffer bandh...@gmail.com wrote: Hi Vikas, Have the CRS is running on 4.0.1? I mean that the all steps required to complete the installation have completed? Or you are stuck during installation... For downgrade the same procedures are required. However your flash file system is required to up-grade from FAT 16 to FAT 32 in 4.0.1, have you did this? -FJ On Fri, Feb 25, 2011 at 4:05 PM, Vikas Sharma vikasshar...@gmail.comwrote: Also I can see this log which clearly says no upgrade package is available but then why it asks to uninstall the upgrade package.. Fri Feb 25 02:26:03.572 UTC Install operation 396 '(admin) install remove disk1:hfr-upgrade-p.pie-4.0.1 synchronous' started by user 'colt123' via CLI at 02:26:04 UTC Fri Feb 25 2011. P/0/RP0/CPU0:Feb 25 02:26:04.876 : instdir[216]: %INSTALL-INSTMGR-3-INSTALL_OPERATION_USER_ERROR : User error occurred during install operation 396. See 'show install log 396 detail' for more inKformation. Warning: The following specified package does not use the boot device, and so Warning: will not be removed: Warning: disk1:hfr-upgrade-p.pie-4.0.1 Error:There are no valid packages on the boot device to be removed. Regards, VIkas On Fri, Feb 25, 2011 at 4:33 PM, Vikas Sharma vikasshar...@gmail.com wrote: Hi, I have upgraded CRS1 to 4.0.1 from 3.6.2. Upgrade worked fine and it is running 4.0.1. But the issue is I am not able to downgrade it back to 3.6.2 If I am trying to run any install command I see similar output - RP/0/RP0/CPU0:crs1.BLB(admin)#install commit Fri Feb 25 03:45:10.181 UTC Install operation 402 '(admin) install commit' started by user 'colt123' via CLI at 03:45:10 UTC Fri Feb 25 2011. Error:Cannot proceed with the operation because the upgrade package is Error:active. Error: Error:The package should only be used when upgrading from software RP/0/RP0/CPU0:Feb 25 03:45:11.503 : instdir[216]: %INSTALL-INSTMGR-3-INSTALL_OPERATION_USER_ERROR : User error occurred during install operation 402. See 'show install log 402 detail' for more inError:versions prior to 4.0.0. Once the upgrade is complete, it should be formation. Error:immediately deactivated and removed. No further install operations Error:will be allowed until this is completed. Error: Error:Deactivate the package from the entire router by executing the Error:'install deactivate ' command in admin mode. Error:Remove the package from the entire router by executing the 'install Error:remove ' command in admin mode. Error:No further install operations will be allowed until this is Error:completed. Install operation 402 failed at 03:45:11 UTC Fri Feb 25 2011. I have also checked on the active and inactive files and could not locate upgrade package on active disk (boot disk). Does anyone has faced similar issue? Regards, Vikas ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] CRS1 downgrade from 4.0.1 to 3.6.2
Hi Mikael, There is a process to downgrade, but it is not working for me http://www.cisco.com/web/Cisco_IOS_XR_Software/pdf/CRS-1_Upgrade_Procedure_3_6_x_4_0_0_to_401-3.pdf I have 3.6.2 in production network and I want to move to 4.0.1 due to some really GOOD feature availability. I also think the last option is turboboot, if I do not find any other way to downgrade. Regards, Vikas On Fri, Feb 25, 2011 at 5:35 PM, Mikael Abrahamsson swm...@swm.pp.sewrote: On Fri, 25 Feb 2011, Vikas Sharma wrote: Hi, I have upgraded CRS1 to 4.0.1 from 3.6.2. Upgrade worked fine and it is running 4.0.1. But the issue is I am not able to downgrade it back to 3.6.2 I believe the release notes say that when you've finished upgrading to 4.0.x and removed the upgrade package, you cannot downgrade again. If you want to go back to 3.6.2 you have to Turboboot that image including recommended reformat of the flash drives to FAT16. Perhaps when you do this, you might as well go to 3.8.x instead of the now (afaik) unsupported 3.6.2? -- Mikael Abrahamssonemail: swm...@swm.pp.se ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device
On 2/25/11 2:17 PM, Andreas Mueller wrote: Hello, I would like to connect IPv4-only devices like printers to an IPv6-only Network and I thought about doing this with NAT-PT on a cisco-device. To play around with NAT-PT and do some tests I need a cheap device. According to the cisco document Implementing NAT-PT for IPv6 (http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-nat_trnsln_ps6350_TSD_Products_Configuration_Guide_Chapter.html) I need IOS 12.4(2)T if I want to use all the available features. What is the cheapest cisco-device with at least two or better four fast ethernet ports running IOS 12.4(2)T to evaluate, if configuring NAT-PT is a solution for my problem ? greetings and thanks for help, Hello Andreas, In general performance of NAT64 is not really high. I remember on Cisco 2801 ~4Mbit was all I could get. I used one of the latest 12.4T release, 12.4(24)T as far as I remember. The smaller reasonable device to play with would be Cisco 1841 but it's also available on 870 and 880 platform. Of course for the production network I'd check how much traffic it's going to handle (and not only in number of TCP sessions that have to be translated but throughput itself, because NAT64 is process switched since 12.4(20)T, until that it was fast switched). Regards, -- Piotr Wojciechowski (CCIE #25543) | The trouble with being a god is http://ccieplayground.wordpress.com | that you've got no one to pray to JID: pe...@jabber.org | -- (Terry Pratchett, Small Gods) ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
[c-nsp] NAT through VRF imported routes
OK, write this off as another weird thing I want to do and yes I should be using an ASR and/or multiple layers of hardware but I have a lot of reasons for not wanting to do either so instead I'm using a cat6500/vs720, SXI5. - ip access-list extended NAT-ACL permit tcp 10.200.0.0 0.0.255.255 75.98.69.0 0.0.0.255 range 1 11000 ip vrf A rd 1:1 route-target import 1:1 route-target import 2:2 route-target export 1:1 ip vrf B rd 2:2 route-target import 1:1 route-target export 2:2 route-target import 2:2 int g1/1 ip vrf forwarding A ip address 10.1.1.1 255.255.255.0 ip nat outside int g2/2 ip vrf forwarding B ip address 20.2.2.2 255.255.255.0 ip nat inside ip nat pool POOL 3.3.3.3 3.3.3.9 prefix-length 24 ip nat inside source list NAT-ACL pool POOL overload (insert bunch of stuff here using BGP such that the net effect is ip route 75.98.69.0 255.255.255.0 int g1/1 vrf A ip route 10.200.0.0 0.0.255.255 int g2/2 vrf B e.g. importing the routes into the other VRFs) - Will this actually work, or will it blow up spectacularly in my face? Something tells me that it'd work on an ASR but not on a cat6500 because it requires a mind-bending twist that the EARL isn't able to process. (Though netflow entries don't exist on a per-VRF basis, do they? And NAT is handled via netflow...) -bacon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device
what about the option of doing a 6to4 relay; we do this with some low-end c2621xm routers and these work just fine -- Regards, Ge Moua Network Design Engineer University of Minnesota | OIT - NTS -- On 2/25/11 7:17 AM, Andreas Mueller wrote: Hello, I would like to connect IPv4-only devices like printers to an IPv6-only Network and I thought about doing this with NAT-PT on a cisco-device. To play around with NAT-PT and do some tests I need a cheap device. According to the cisco document Implementing NAT-PT for IPv6 (http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-nat_trnsln_ps6350_TSD_Products_Configuration_Guide_Chapter.html) I need IOS 12.4(2)T if I want to use all the available features. What is the cheapest cisco-device with at least two or better four fast ethernet ports running IOS 12.4(2)T to evaluate, if configuring NAT-PT is a solution for my problem ? greetings and thanks for help, Andreas ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device
Pitor- Please forgive my ignorance: I am attempting to get familiar with this myself on a 2811 running 12.4(24)T4 - but that's IP Base. I don't even have the option to assign an IPv6 address to an interface. Do you happen to know which flavor image I need? Regards, -Jeff Wojciechowski -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Piotr Wojciechowski Sent: Friday, February 25, 2011 9:00 AM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device On 2/25/11 2:17 PM, Andreas Mueller wrote: Hello, I would like to connect IPv4-only devices like printers to an IPv6-only Network and I thought about doing this with NAT-PT on a cisco-device. To play around with NAT-PT and do some tests I need a cheap device. According to the cisco document Implementing NAT-PT for IPv6 (http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-nat_ trnsln_ps6350_TSD_Products_Configuration_Guide_Chapter.html) I need IOS 12.4(2)T if I want to use all the available features. What is the cheapest cisco-device with at least two or better four fast ethernet ports running IOS 12.4(2)T to evaluate, if configuring NAT-PT is a solution for my problem ? greetings and thanks for help, Hello Andreas, In general performance of NAT64 is not really high. I remember on Cisco 2801 ~4Mbit was all I could get. I used one of the latest 12.4T release, 12.4(24)T as far as I remember. The smaller reasonable device to play with would be Cisco 1841 but it's also available on 870 and 880 platform. Of course for the production network I'd check how much traffic it's going to handle (and not only in number of TCP sessions that have to be translated but throughput itself, because NAT64 is process switched since 12.4(20)T, until that it was fast switched). Regards, -- Piotr Wojciechowski (CCIE #25543) | The trouble with being a god is http://ccieplayground.wordpress.com | that you've got no one to pray to JID: pe...@jabber.org | -- (Terry Pratchett, Small Gods) ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ This electronic mail (including any attachments) may contain information that is privileged, confidential, or otherwise protected from disclosure to anyone other than its intended recipient(s). Any dissemination or use of this electronic mail or its contents (including any attachments) by persons other than the intended recipient(s) is strictly prohibited. If you have received this message in error, please delete the original message in its entirety (including any attachments) and notify us immediately by reply email so that we may correct our internal records. Midland Paper Company accepts no responsibility for any loss or damage from use of this electronic mail, including any damage resulting from a computer virus. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Bonded T3 Bandwidth issue
The anda is a metro E box. Are you bonding them and then turning the whole thing into ethernet? Also, how are they bonded? Are you running ml-ppp between the anda and the cisco? Doesn't it seem likely that the Anda box is the one doing the bonding? I see there is a 2212e model that has two DS3 wan interfaces. I would expect the fastE interface on this to be facing the cisco7200, which would take the cisco out of the bonding role. -mark ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Bonded T3 Bandwidth issue
The 2212 DS3\E3 does the bonding and as you have stated the 7200 is out of the bonding role. Could this have anything to do with the negotiation between my fiber to copper converter and my router? This is what my wan provider is telling me. On Fri, Feb 25, 2011 at 09:02, Mark Kent m...@noc.mainstreet.net wrote: The anda is a metro E box. Are you bonding them and then turning the whole thing into ethernet? Also, how are they bonded? Are you running ml-ppp between the anda and the cisco? Doesn't it seem likely that the Anda box is the one doing the bonding? I see there is a 2212e model that has two DS3 wan interfaces. I would expect the fastE interface on this to be facing the cisco7200, which would take the cisco out of the bonding role. -mark ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] cisco-nsp Digest, Vol 99, Issue 67
Umair; i think it may be a configurations issue if you do not have the proper commands entered.. in order to get logs of BFD neighbors status you do need to configure log adjacency-changes. log-adjacency-changes [detail] Example: Router(config-router)# log-adjacency-changes Configures the router to send a system logging (syslog) message when a neighbor goes up or down. •Entering the log-adjacency-changes command allows you to see the BFD node down syslog message whenever a neighbor is down due to receiving a BFD failure detection notification. if that is already configured then check may be you need to increase the size of your log file. or may be u need an IOS upgrade. regards From: umair.sae...@live.com To: saidiz...@hotmail.com; cisco-nsp@puck.nether.net Subject: RE: cisco-nsp Digest, Vol 99, Issue 67 Date: Thu, 24 Feb 2011 14:51:23 + Hi Said Izawi, Thanks for email. But i dont hae any configurational issues. customer is running BFD with static route fine. problem is when one of the BFD neighbor goes down/up it router does not shows it in its log. so i m unable to know when th BFD neighbor went down/UP. is there any command to log BFD neighbor status with static routes. i am running SRE2. Thanks Best Regards, Umair SaeedAM IP Operations Core South , Pakistan Telecommunication Company Ltd, Phone # +92 333 2354591 From: saidiz...@hotmail.com To: cisco-nsp@puck.nether.net; umair.sae...@live.com Subject: RE: cisco-nsp Digest, Vol 99, Issue 67 Date: Wed, 23 Feb 2011 15:05:18 + Hello umair: CONFIGURING BFD BFD can be configured in two steps. The first step in configuring BFD is setting the baseline parameters for all BFD sessions on an interface. The configuration occurs at the interface level and the syntax is as follows: [no] bfd interval 50-999 min_rx 1-999 multiplier 3-50 interval: determines how frequently (in milliseconds) BFD packets will be sent to BFD peers. min_rx: determines how frequently (in milliseconds) BFD packets will be expected to be received from BFD peers multiplier: The number of consecutive BFD packets which must be missed from a BFD peer before declaring that peer unavailable, and informing the higher-layer protocols of the failure the second step Once the baseline parameters have been set, individual protocols must be informed that they will be using BFD for failure detection. In the first release of BFD, the supported protocols are OSPF, IS-IS, EIGRP and BGP. on the concerned interface you specify BFD. example: interface GigabitEthernet1/2 ip ospf network point-to-point ip ospf cost 1000 ip ospf hello-interval 3 ip ospf dead-interval 10 ip ospf bfd router ospf 1 log-adjacency-changes bfd interval 50 min_rx 50 multiplier 5 Kind Regards Said Izawi Senior Network Analyst From: cisco-nsp-requ...@puck.nether.net Subject: cisco-nsp Digest, Vol 99, Issue 67 To: cisco-nsp@puck.nether.net Date: Wed, 23 Feb 2011 09:23:04 -0500 Send cisco-nsp mailing list submissions to cisco-nsp@puck.nether.net To subscribe or unsubscribe via the World Wide Web, visit https://puck.nether.net/mailman/listinfo/cisco-nsp or, via email, send a message with subject or body 'help' to cisco-nsp-requ...@puck.nether.net You can reach the person managing the list at cisco-nsp-ow...@puck.nether.net When replying, please edit your Subject line so it is more specific than Re: Contents of cisco-nsp digest... --Forwarded Message Attachment-- From: umair.sae...@live.com To: cisco-nsp@puck.nether.net Date: Wed, 23 Feb 2011 06:26:00 + Subject: [c-nsp] BFD neighbor up/down in log with Static Dear all, I wanted to know that can any one know the command to enable logging of BFD neighbor status in routers log. I have already enables snmp traps but i need to show these in router logs. We are using BFD with static routing. Thanks Best Regards, Umair SaeedAM IP Operations Core South , Pakistan Telecommunication Company Ltd, Phone # +92 333 2354591 --Forwarded Message Attachment-- From: h...@efes.iucc.ac.il To: cisco-nsp@puck.nether.net Date: Wed, 23 Feb 2011 08:55:17 +0200 Subject: Re: [c-nsp] flow-export to more than 2? Platforms which have implemented FNF or some subset thereof (N7K, CRS-1, ASR9K, et. al.) can support multiple exporters. What about 7600s? Any IOS train that handles more than 2 exporters? Thanks, Hank --Forwarded Message Attachment-- From: vikasshar...@gmail.com To: cisco-nsp@puck.nether.net Date: Wed, 23 Feb 2011 13:44:47 +0530 Subject: [c-nsp] CRS-1 Policy change Hi, I have a policy which I can see currently not applied on any interface, I am trying to modify the policy (remove existing class-map and add new class-map), but when I commit I see following message !!% Policy manager does not support this feature: Platform does not support policy-map modification type qos I
Re: [c-nsp] Bonded T3 Bandwidth issue
Doesn't it seem likely that the Anda box is the one doing the bonding? I see there is a 2212e model that has two DS3 wan interfaces. I would expect the fastE interface on this to be facing the cisco7200, which would take the cisco out of the bonding role. You can't have them bonded on one end and not the other. Are you running ML-PPP between the anda and the 7200? If not it seems like the Anda thinks it has a big 90M pipe and the 7200 thinks it has two seperate (or one single) DS3. Bonding can only happen between two boxes speaking the same language. Just out of curiosity, why not use the ethernet ports on the 7200? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Multicast Packet Loss over GRE
If it's enough / consistent enough packet drops you should be able to see a diff on the two tunnel routers in sh ip mroute x.x.x.x x.x.x.x count. This should at least confirm where the drops are happing. Mcast packet forwarding is not significantly different for being over a GRE tunnel if we are talking about a software router (do normal mcast stuff then hand off for encap or decap then hand to mcast code). Hardware platforms on the other hand are a diff story. -Ben On Feb 24, 2011, at 12:07 AM, Dav A wrote: Hi All, Was hoping someone can provide some advice with regards to troubleshooting a particularly painful multicast issue. The set up isnt particularly complex: Servers SwitchTunnel router (RP) GRE over WAN Tunnel router SwitchServers The tunnel router interfaces have been configured with the TCP mss adjust mtu command and set to 1400. Everythings been up and working for a year but recently weve been experiencing issues with mcast and can see dropped packets when using a sniffer on the server. The suspicion lies with the WAN provider who has recently made changes but extended pings/sweeps over the WAN shows no drops. Has anyone any ideas or experience on how to troubleshoot packet loss over GRE for multicast? Regards, David ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Bonded T3 Bandwidth issue
Just out of curiosity, why not use the ethernet ports on the 7200? That curiosity was the tip-off that the discussion here was going in a direction inconsistent with the set-up that Lawrence cisco-...@theindianmaiden.com has.Not that he has explained it fully yet, but it seems pretty clear that no one is going to take a metroE handoff and plug it into his cisco7200 by using a pair of DS3 ports with an Anda box. -mark ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Bonded T3 Bandwidth issue
On Fri, Feb 25, 2011 at 1:57 PM, Mark Kent m...@noc.mainstreet.net wrote: Just out of curiosity, why not use the ethernet ports on the 7200? That curiosity was the tip-off that the discussion here was going in a direction inconsistent with the set-up that Lawrence cisco-...@theindianmaiden.com has. Agree Not that he has explained it fully yet, Agree it seems pretty clear that no one is going to take a metroE handoff and plug it into his cisco7200 by using a pair of DS3 ports with an Anda box. Agree I guess I was intrigued by the use of the Anda box here. I've only seen it used in metro-e environments. It would help if OP would explain fully what he is trying to implement here. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device
According to the Feature Navigator (which we know is not always accurate), IPv6 is supported in IPBASE only on 7200 and 7300 routers and Catalyst 3560/3750, CBS3k blade switches and 6500 Sup32 switches. On 2811 routers with 12.4T, IPv6 is available in IP Voice, SP Services, Advanced IP Services, Enterprise Services and Advanced Enterprise Services. Andras On Fri, Feb 25, 2011 at 5:57 PM, Jeff Wojciechowski jeff.wojciechow...@midlandpaper.com wrote: Pitor- Please forgive my ignorance: I am attempting to get familiar with this myself on a 2811 running 12.4(24)T4 - but that's IP Base. I don't even have the option to assign an IPv6 address to an interface. Do you happen to know which flavor image I need? Regards, -Jeff Wojciechowski -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Piotr Wojciechowski Sent: Friday, February 25, 2011 9:00 AM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device On 2/25/11 2:17 PM, Andreas Mueller wrote: Hello, I would like to connect IPv4-only devices like printers to an IPv6-only Network and I thought about doing this with NAT-PT on a cisco-device. To play around with NAT-PT and do some tests I need a cheap device. According to the cisco document Implementing NAT-PT for IPv6 (http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-nat_ trnsln_ps6350_TSD_Products_Configuration_Guide_Chapter.html) I need IOS 12.4(2)T if I want to use all the available features. What is the cheapest cisco-device with at least two or better four fast ethernet ports running IOS 12.4(2)T to evaluate, if configuring NAT-PT is a solution for my problem ? greetings and thanks for help, Hello Andreas, In general performance of NAT64 is not really high. I remember on Cisco 2801 ~4Mbit was all I could get. I used one of the latest 12.4T release, 12.4(24)T as far as I remember. The smaller reasonable device to play with would be Cisco 1841 but it's also available on 870 and 880 platform. Of course for the production network I'd check how much traffic it's going to handle (and not only in number of TCP sessions that have to be translated but throughput itself, because NAT64 is process switched since 12.4(20)T, until that it was fast switched). Regards, -- Piotr Wojciechowski (CCIE #25543) | The trouble with being a god is http://ccieplayground.wordpress.com | that you've got no one to pray to JID: pe...@jabber.org | -- (Terry Pratchett, Small Gods) ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ This electronic mail (including any attachments) may contain information that is privileged, confidential, or otherwise protected from disclosure to anyone other than its intended recipient(s). Any dissemination or use of this electronic mail or its contents (including any attachments) by persons other than the intended recipient(s) is strictly prohibited. If you have received this message in error, please delete the original message in its entirety (including any attachments) and notify us immediately by reply email so that we may correct our internal records. Midland Paper Company accepts no responsibility for any loss or damage from use of this electronic mail, including any damage resulting from a computer virus. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device
Thanks! Sent from my Android phone using TouchDown (www.nitrodesk.com) -Original Message- From: Tóth András [diosbej...@gmail.com] Received: Friday, 25 Feb 2011, 3:08pm To: Jeff Wojciechowski [jeff.wojciechow...@midlandpaper.com] CC: Piotr Wojciechowski [pe...@peper.eu.org]; cisco-nsp@puck.nether.net [cisco-nsp@puck.nether.net] Subject: Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device According to the Feature Navigator (which we know is not always accurate), IPv6 is supported in IPBASE only on 7200 and 7300 routers and Catalyst 3560/3750, CBS3k blade switches and 6500 Sup32 switches. On 2811 routers with 12.4T, IPv6 is available in IP Voice, SP Services, Advanced IP Services, Enterprise Services and Advanced Enterprise Services. Andras On Fri, Feb 25, 2011 at 5:57 PM, Jeff Wojciechowski jeff.wojciechow...@midlandpaper.com wrote: Pitor- Please forgive my ignorance: I am attempting to get familiar with this myself on a 2811 running 12.4(24)T4 - but that's IP Base. I don't even have the option to assign an IPv6 address to an interface. Do you happen to know which flavor image I need? Regards, -Jeff Wojciechowski -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Piotr Wojciechowski Sent: Friday, February 25, 2011 9:00 AM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Searching for cheap IPv6 NAT-PT Cisco-device On 2/25/11 2:17 PM, Andreas Mueller wrote: Hello, I would like to connect IPv4-only devices like printers to an IPv6-only Network and I thought about doing this with NAT-PT on a cisco-device. To play around with NAT-PT and do some tests I need a cheap device. According to the cisco document Implementing NAT-PT for IPv6 (http://www.cisco.com/en/US/docs/ios/ipv6/configuration/guide/ip6-nat_ trnsln_ps6350_TSD_Products_Configuration_Guide_Chapter.html) I need IOS 12.4(2)T if I want to use all the available features. What is the cheapest cisco-device with at least two or better four fast ethernet ports running IOS 12.4(2)T to evaluate, if configuring NAT-PT is a solution for my problem ? greetings and thanks for help, Hello Andreas, In general performance of NAT64 is not really high. I remember on Cisco 2801 ~4Mbit was all I could get. I used one of the latest 12.4T release, 12.4(24)T as far as I remember. The smaller reasonable device to play with would be Cisco 1841 but it's also available on 870 and 880 platform. Of course for the production network I'd check how much traffic it's going to handle (and not only in number of TCP sessions that have to be translated but throughput itself, because NAT64 is process switched since 12.4(20)T, until that it was fast switched). Regards, -- Piotr Wojciechowski (CCIE #25543) | The trouble with being a god is http://ccieplayground.wordpress.com | that you've got no one to pray to JID: pe...@jabber.org | -- (Terry Pratchett, Small Gods) ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ This electronic mail (including any attachments) may contain information that is privileged, confidential, or otherwise protected from disclosure to anyone other than its intended recipient(s). Any dissemination or use of this electronic mail or its contents (including any attachments) by persons other than the intended recipient(s) is strictly prohibited. If you have received this message in error, please delete the original message in its entirety (including any attachments) and notify us immediately by reply email so that we may correct our internal records. Midland Paper Company accepts no responsibility for any loss or damage from use of this electronic mail, including any damage resulting from a computer virus. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ This electronic mail (including any attachments) may contain information that is privileged, confidential, or otherwise protected from disclosure to anyone other than its intended recipient(s). Any dissemination or use of this electronic mail or its contents (including any attachments) by persons other than the intended recipient(s) is strictly prohibited. If you have received this message in error, please delete the original message in its entirety (including any attachments) and notify us immediately by reply email so that we may correct our internal records. Midland Paper Company accepts no responsibility for any loss or damage from use of this electronic mail, including any damage resulting from a computer virus.
Re: [c-nsp] ASA 5505 doesn't like itself
Cisco PIX/ASA are not routers. For example, you cannot ping from the inside network to the outside interface, or any other simular type of test. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Tom Sutherland Sent: Friday, February 25, 2011 4:01 PM To: Michael Loether Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] ASA 5505 doesn't like itself as a test, you might try: icmp permit any inside icmp permit any outside from cisco command reference: To configure access rules for ICMP traffic that terminates at a adaptive security appliance interface, use the icmp command. On Thu, 2011-02-17 at 16:53 -0500, Michael Loether wrote: I have a ASA 5505 I am setting up at a small branch office. Working towards a site to site VPN but first I need to get it to talk to itself. Traffic is not passing from inside to outside. interface Vlan1 nameif inside security-level 100 ip address 172.19.1.1 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 ip address 64.183.175.22 255.255.255.252 ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! nat (inside,outside) after-auto source dynamic any interface DHCPd is running on VL 1 and it is handing out IPs as expected. ping inside 64.183.175.21 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 64.183.175.21, timeout is 2 seconds: ? Success rate is 0 percent (0/5) ACLs are any any ip on both inside and outside. Any suggestion would be appreciated. Mike ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] cisco-nsp Digest, Vol 99, Issue 67
Hi Said Izawi, as i can see that this logging is valid when BFD is used with OSPF. Even with any dynamic protocol it can be valid. I have static routing with BFD and it does not logs its changes. Interface Gi9/17 bfd interval 200 min_rx 200 multiplier 5 no bfd echo exit ip route static bfd GigabitEthernet9/17 X.X.X.X ip route Y.Y.Y.Y 255.255.255.0 GigabitEthernet9/17 X.X.X.X tag 111 Thanks Best Regards, Umair SaeedAM IP Operations Core South , Pakistan Telecommunication Company Ltd, Phone # +92 333 2354591 From: saidiz...@hotmail.com To: umair.sae...@live.com; cisco-nsp@puck.nether.net Subject: RE: cisco-nsp Digest, Vol 99, Issue 67 Date: Thu, 24 Feb 2011 16:25:31 + Umair; i think it may be a configurations issue if you do not have the proper commands entered.. in order to get logs of BFD neighbors status you do need to configure log adjacency-changes. log-adjacency-changes [detail] Example: Router(config-router)# log-adjacency-changes Configures the router to send a system logging (syslog) message when a neighbor goes up or down. •Entering the log-adjacency-changes command allows you to see the BFD node down syslog message whenever a neighbor is down due to receiving a BFD failure detection notification. if that is already configured then check may be you need to increase the size of your log file. regards From: umair.sae...@live.com To: saidiz...@hotmail.com; cisco-nsp@puck.nether.net Subject: RE: cisco-nsp Digest, Vol 99, Issue 67 Date: Thu, 24 Feb 2011 14:51:23 + Hi Said Izawi, Thanks for email. But i dont hae any configurational issues. customer is running BFD with static route fine. problem is when one of the BFD neighbor goes down/up it router does not shows it in its log. so i m unable to know when th BFD neighbor went down/UP. is there any command to log BFD neighbor status with static routes. i am running SRE2. Thanks Best Regards, Umair SaeedAM IP Operations Core South , Pakistan Telecommunication Company Ltd, Phone # +92 333 2354591 From: saidiz...@hotmail.com To: cisco-nsp@puck.nether.net; umair.sae...@live.com Subject: RE: cisco-nsp Digest, Vol 99, Issue 67 Date: Wed, 23 Feb 2011 15:05:18 + Hello umair: CONFIGURING BFD BFD can be configured in two steps. The first step in configuring BFD is setting the baseline parameters for all BFD sessions on an interface. The configuration occurs at the interface level and the syntax is as follows: [no] bfd interval 50-999 min_rx 1-999 multiplier 3-50 interval: determines how frequently (in milliseconds) BFD packets will be sent to BFD peers. min_rx: determines how frequently (in milliseconds) BFD packets will be expected to be received from BFD peers multiplier: The number of consecutive BFD packets which must be missed from a BFD peer before declaring that peer unavailable, and informing the higher-layer protocols of the failure the second step Once the baseline parameters have been set, individual protocols must be informed that they will be using BFD for failure detection. In the first release of BFD, the supported protocols are OSPF, IS-IS, EIGRP and BGP. on the concerned interface you specify BFD. example: interface GigabitEthernet1/2 ip ospf network point-to-point ip ospf cost 1000 ip ospf hello-interval 3 ip ospf dead-interval 10 ip ospf bfd router ospf 1 log-adjacency-changes bfd interval 50 min_rx 50 multiplier 5 Kind Regards Said Izawi Senior Network Analyst From: cisco-nsp-requ...@puck.nether.net Subject: cisco-nsp Digest, Vol 99, Issue 67 To: cisco-nsp@puck.nether.net Date: Wed, 23 Feb 2011 09:23:04 -0500 Send cisco-nsp mailing list submissions to cisco-nsp@puck.nether.net To subscribe or unsubscribe via the World Wide Web, visit https://puck.nether.net/mailman/listinfo/cisco-nsp or, via email, send a message with subject or body 'help' to cisco-nsp-requ...@puck.nether.net You can reach the person managing the list at cisco-nsp-ow...@puck.nether.net When replying, please edit your Subject line so it is more specific than Re: Contents of cisco-nsp digest... --Forwarded Message Attachment-- From: umair.sae...@live.com To: cisco-nsp@puck.nether.net Date: Wed, 23 Feb 2011 06:26:00 + Subject: [c-nsp] BFD neighbor up/down in log with Static Dear all, I wanted to know that can any one know the command to enable logging of BFD neighbor status in routers log. I have already enables snmp traps but i need to show these in router logs. We are using BFD with static routing. Thanks Best Regards, Umair SaeedAM IP Operations Core South , Pakistan Telecommunication Company Ltd, Phone # +92 333 2354591 --Forwarded Message Attachment-- From: h...@efes.iucc.ac.il To: cisco-nsp@puck.nether.net Date: Wed, 23 Feb 2011 08:55:17 +0200 Subject: Re: [c-nsp] flow-export to more than 2? Platforms which have implemented FNF or
[c-nsp] MPLS-TP
any idea if following features are on roadmap for 7600 or ASR 9K -MPLS-TP -LDPoRSVP -ITU Y.1731 -ethernet OAM 802.1ag on 7600 ? - ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
