Re: [c-nsp] partition-table and file-system type on Cisco 4500 SUP compact-flash

[Martin T]

Another utility, which should support both reading and writing to
"Class A" file-systems, at least to some extent, is cffs:

root@T60:~# cffs -v
cffs version 0.06  (C) Simon Evans 2002 (s...@secret.org.uk)
root@T60:~#

However, it seems to refuse to support ATA-type flash-memory cards:

root@T60:~# fdisk -lu /dev/sdb

Disk /dev/sdb: 32 MB, 32112640 bytes
255 heads, 63 sectors/track, 3 cylinders, total 62720 sectors
Units = sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk identifier: 0x

Disk /dev/sdb doesn't contain a valid partition table
root@T60:~# cffs /dev/sdb --dir
/dev/sdb is not an MTD character device
root@T60:~#


..and detects only linear-flash cards. For example SMART 4MB linear
flash PCMCIA card:

root@T60:~# dmesg | tail -5
[ 2756.208470] pcmciamtd 0.0: pcmcia: could not parse base and rmask0 of CIS
[ 2756.212768] Found: Intel 28F016S5
[ 2756.212773] SMART Modular Technologies  4MB FLASH Card  :
Found 2 x8 devices at 0x0 in 16-bit bank
[ 2756.21] erase region 0: offset=0x0,size=0x2,blocks=32
[ 2756.218484] pcmciamtd 0.0: mtd0: SMART Modular Technologies  4MB
FLASH Card
root@T60:~# cffs /dev/mtd0 --dir
root@T60:~# cffs /dev/mtd0 --fsck
Free space = 4194304 bytes

Flash is not blank
root@T60:~# cffs /dev/mtd0 --erase
Size = 4194304 erase size = 131072
32 Erase blocks
Proceed with erase [Y/n]Y
Erasing block  1/32
erase failed: Timer expired


However, this erase operation never completes. Ciscoflash, on the
other hand, seems not to support linear flash:

root@T60:~# ciscoflash -v -d /dev/mtd0 info
ciscoflash: Unknown magic number (0x)
root@T60:~#


Are there "Class A" and "Class B" file-systems both on ATA-type and
linear-type flash cards? Has anyone succesfully written to "Class A"
file-system under Linux?


thanks,
Martin


On Mon, Jun 17, 2013 at 5:18 PM, Martin T  wrote:
> One utility, which supports reading the "Class A" file-system, is
> ciscoflash(http://freecode.com/projects/ciscoflash) by Simon Lockhart:
>
> T42 ~ # ciscoflash -d /dev/sdb dir
> -#- --type-- --crc--- -seek-- -length- -date/time-- name
>   1 0002 E81CCB85 09831C   426652 Jun 17 2013 03:56:03
> cat4500-ios-promupgrade-122_31r_SGA7
> T42 ~ # ciscoflash -d /dev/sdb extract
> T42 ~ # ls -l cat4500-ios-promupgrade-122_31r_SGA7
> -rw-r--r-- 1 root root 426652 2013-06-17 17:13
> cat4500-ios-promupgrade-122_31r_SGA7
> T42 ~ #
>
> However, it does not support writing to "Class A" file-systems.
>
>
> regards,
> Martin
>
> 2013/6/17, Martin T :
>> Hi,
>>
>> older Cisco 4500 series supervisor engines support compact flash
>> cards. However, Cisco-branded 32MB compact-flash taken from Cisco 1800
>> series router is not recognized by SUP:
>>
>> Catalyst4500#dir slot0:
>> %Error opening slot0:/ (Bad device info block)
>> Catalyst4500#
>>
>> After executing "format slot0:", the compact flash became accessible:
>>
>> Catalyst4500#format slot0:
>> Format operation may take a while. Continue? [confirm]
>> Format operation will destroy all data in "slot0:".  Continue? [confirm]
>> Enter volume ID (up to 64 chars)[default slot0]:
>>
>> Format of slot0 complete
>> Catalyst4500#dir slot0:
>> Directory of slot0:/
>>
>> No files in directory
>>
>> 31784960 bytes total (31784960 bytes free)
>> Catalyst4500#
>>
>>
>> The problem is, that now I'm not able to access this compact-flash in
>> my PC. Looks like it even does not have a partition-table:
>>
>> T42 ~ # dmesg | tail
>> [1983944.880491] ata5.00: 62720 sectors, multi 0: LBA
>> [1983944.888476] ata5.00: configured for PIO0
>> [1983944.888794] scsi 4:0:0:0: Direct-Access ATA  STI Flash
>> 8.0.0  01/1 PQ: 0 ANSI: 5
>> [1983944.889398] sd 4:0:0:0: Attached scsi generic sg2 type 0
>> [1983944.891205] sd 4:0:0:0: [sdb] 62720 512-byte logical blocks:
>> (32.1 MB/30.6 MiB)
>> [1983944.891403] sd 4:0:0:0: [sdb] Write Protect is off
>> [1983944.891414] sd 4:0:0:0: [sdb] Mode Sense: 00 3a 00 00
>> [1983944.891501] sd 4:0:0:0: [sdb] Write cache: enabled, read cache:
>> enabled, doesn't support DPO or FUA
>> [1983944.910031]  sdb: unknown partition table
>> [1983944.910632] sd 4:0:0:0: [sdb] Attached SCSI removable disk
>> T42 ~ # fdisk -lu /dev/sdb
>>
>> Disk /dev/sdb: 32 MB, 32112640 bytes
>> 255 heads, 63 sectors/track, 3 cylinders, total 62720 sectors
>> Units = sectors of 1 * 512 = 512 bytes
>> Sector size (logical/physical): 512 bytes / 512 bytes
>> I/O size (minimum/optimal): 512 bytes / 512 bytes
>> Disk identifier: 0x
>>
>> Disk /dev/sdb doesn't contain a valid partition table
>> T42 ~ # file -s /dev/sdb
>> /dev/sdb: data
>> T42 ~ # dd if=/dev/sdb bs=512 count=1 | hexdump -C
>>   88 06 35 76 ea 01 00 00  01 00 00 00 00 00 04 00
>> |..5v|
>> 0010  ff ff ff ff 01 00 06 00  03 00 00 00 e5 01 00 00
>> ||
>> 0020  00 00 00 01 02 00 7c 60  00 00 00 00 02 00 c2 ff
>> |..|`|
>> 0030  00 00 3e 0

Re: [c-nsp] Silly question regarding C3K-NM-10G

[Peter Rathlev]

On Thu, 2014-09-11 at 22:57 +0200, Łukasz Bromirski wrote:
> That’s an error in the doc, it should be corrected. There’s no
> tab. You just unscrew the module and pull it.

Heh, it's a detail a senior tech can use to reveal wether a junior tech
actually read the documentation. :-)

-- 
Peter


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Silly question regarding C3K-NM-10G

[Peter Rathlev]

On Thu, 2014-09-11 at 14:12 +, Drew Weaver wrote:
> I can't seem to locate a tab on the NM-10G which releases it from the
> slot.

Just repeating what others say: There's no tab to be pressed. It must be
an error in the documentation. 

We just loosen the screws and pull the module in the screws.

-- 
Peter


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Silly question regarding C3K-NM-10G

[Łukasz Bromirski]

> On 11 Sep 2014, at 16:12, Drew Weaver  wrote:
> 
> In the instructions for removing a network module from a 3560x it states 
> 'carefully press the tab on the right side of the module'.
> 
> I can't seem to locate a tab on the NM-10G which releases it from the slot.
> 
> Is it under the mounting bracket? Under the faceplate? Is anyone aware of 
> where this mythical tab resides?

That’s an error in the doc, it should be corrected. There’s no
tab. You just unscrew the module and pull it.

-- 
"There's no sense in being precise when |   Łukasz Bromirski
you don't know what you're talking |  jid:lbromir...@jabber.org
about."   John von Neumann |http://lukasz.bromirski.net


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Silly question regarding C3K-NM-10G

[Scott Harvanek]

Same here, I do not recall any tabs.

Scott H.

On 9/11/14, 11:16 AM, Mike Hale wrote:

You should just be able to pull it out...I don't think there's a tab
since it's held in place with the two screws.  I don't remember any
tabs on the ones I've removed.

On Thu, Sep 11, 2014 at 7:54 AM, Scott Granados  wrote:

Carefully as apposed to what, recklessly press the tab with a hammer?

;)

On Sep 11, 2014, at 10:12 AM, Drew Weaver  wrote:


In the instructions for removing a network module from a 3560x it states 
'carefully press the tab on the right side of the module'.

I can't seem to locate a tab on the NM-10G which releases it from the slot.

Is it under the mounting bracket? Under the faceplate? Is anyone aware of where 
this mythical tab resides?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/





___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Cisco SF302-08 switches

[Murat Kaipov]

Hello Guys.

Did you have any experience with Cisco Small Business SF300 switches? We
purchased few of them and now I have little trouble. I can't add this
switches to snmp monitoring. For monitoring purposes I use PRTG v13, I try
add snmp mib's published by Cisco on official web site, but they doesn't
work. May one of you know how to add this switches to PRTG or any other snmp
tool. I try to use Paessler MIB Importer v3 but, and I have "::=" expected
error on line 31. I add screenshot to attachment. Can you advise something? 

Than you.

 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Silly question regarding C3K-NM-10G

[Mike Hale]

You should just be able to pull it out...I don't think there's a tab
since it's held in place with the two screws.  I don't remember any
tabs on the ones I've removed.

On Thu, Sep 11, 2014 at 7:54 AM, Scott Granados  wrote:
> Carefully as apposed to what, recklessly press the tab with a hammer?
>
> ;)
>
> On Sep 11, 2014, at 10:12 AM, Drew Weaver  wrote:
>
>> In the instructions for removing a network module from a 3560x it states 
>> 'carefully press the tab on the right side of the module'.
>>
>> I can't seem to locate a tab on the NM-10G which releases it from the slot.
>>
>> Is it under the mounting bracket? Under the faceplate? Is anyone aware of 
>> where this mythical tab resides?
>> ___
>> cisco-nsp mailing list  cisco-nsp@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/



-- 
09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Silly question regarding C3K-NM-10G

[Scott Granados]

Carefully as apposed to what, recklessly press the tab with a hammer?

;)

On Sep 11, 2014, at 10:12 AM, Drew Weaver  wrote:

> In the instructions for removing a network module from a 3560x it states 
> 'carefully press the tab on the right side of the module'.
> 
> I can't seem to locate a tab on the NM-10G which releases it from the slot.
> 
> Is it under the mounting bracket? Under the faceplate? Is anyone aware of 
> where this mythical tab resides?
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Silly question regarding C3K-NM-10G

[Drew Weaver]

In the instructions for removing a network module from a 3560x it states 
'carefully press the tab on the right side of the module'.

I can't seem to locate a tab on the NM-10G which releases it from the slot.

Is it under the mounting bracket? Under the faceplate? Is anyone aware of where 
this mythical tab resides?
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

[Youssef Bengelloun-Zahr]

2014-09-11 15:06 GMT+02:00 Nick Hilliard :

> On 11/09/2014 14:00, Youssef Bengelloun-Zahr wrote:
>
>> Things have changed as /127 are now supported on Brocade NetIron platforms
>> since vers 5.6.0 :-)
>>
>> /31 work just fine.
>>
>
> yep, netiron supports /31 just fine, but it's a different code base to the
> serveriron software.  At least as of SI-12.5.01, /31 doesn't work.
>

Agreed.

Y.


>
> Nick
>
>
>


-- 
Youssef BENGELLOUN-ZAHR
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

[Nick Hilliard]

On 11/09/2014 14:00, Youssef Bengelloun-Zahr wrote:

Things have changed as /127 are now supported on Brocade NetIron platforms
since vers 5.6.0 :-)

/31 work just fine.


yep, netiron supports /31 just fine, but it's a different code base to the 
serveriron software.  At least as of SI-12.5.01, /31 doesn't work.


Nick


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

[Youssef Bengelloun-Zahr]

2014-09-11 14:09 GMT+02:00 Nick Hilliard :

> On 11/09/2014 08:53, Justin M. Streiner wrote:
>
>> We use /31s here in many places in a mixed Cisco/Juniper environment, and
>> we have not had any problems with them.
>>
>
> fwiw, Brocade doesn't support /31 on its serveriron range, although it
> works fine on most other boxes which can route packets.  It also doesn't
> support /127 on most of its products, last time I looked.
>

Hello,

Things have changed as /127 are now supported on Brocade NetIron platforms
since vers 5.6.0 :-)

/31 work just fine.

Best regards.




>
> Nick
>
>
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>



-- 
Youssef BENGELLOUN-ZAHR
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

[Peter Persson]

We are running /31s on backbone and /112 on v6
To customer we always use /30 and /112

/Peter

2014-09-11 14:09 GMT+02:00 Nick Hilliard :

> On 11/09/2014 08:53, Justin M. Streiner wrote:
>
>> We use /31s here in many places in a mixed Cisco/Juniper environment, and
>> we have not had any problems with them.
>>
>
> fwiw, Brocade doesn't support /31 on its serveriron range, although it
> works fine on most other boxes which can route packets.  It also doesn't
> support /127 on most of its products, last time I looked.
>
> Nick
>
>
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

[Nick Hilliard]

On 11/09/2014 08:53, Justin M. Streiner wrote:

We use /31s here in many places in a mixed Cisco/Juniper environment, and
we have not had any problems with them.


fwiw, Brocade doesn't support /31 on its serveriron range, although it 
works fine on most other boxes which can route packets.  It also doesn't 
support /127 on most of its products, last time I looked.


Nick

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

[Justin M. Streiner]

On Thu, 11 Sep 2014, CiscoNSP List wrote:

Just trying to conserve IPv4 addresses - Has anyone run into any issues 
with using /31's? (OSPF/BGPanything else?)


We use /31s here in many places in a mixed Cisco/Juniper environment, and 
we have not had any problems with them.


jms
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] IOS-XR and PBR

[Oliver Boehmer (oboehmer)]

Looks like I may not have this feature as these are 12410XR chassis. Here is 
what I have in our lab environment.

true, unfortunately ABF is not supported on the XR12000 platform. it works on 
ASR9k and CRS..

oli
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ASR1001 and ME3600X licensing

[CiscoNSP List]

Thanks for the help - much appreciated.

> From: jwbens...@gmail.com
> Date: Thu, 11 Sep 2014 09:01:22 +0100
> To: cisco-nsp@puck.nether.net
> Subject: Re: [c-nsp] ASR1001 and ME3600X licensing
> 
> On 11 September 2014 07:58, CiscoNSP List  wrote:
> > Cheers - Just checked one of the ME's, and am seeing the same:
> >
> > Switch#sh license
> > Index 1 Feature: AdvancedMetroIPAccess
> > Period left: Life time
> > License Type: Permanent
> > License State: Active, In Use
> > License Count: Non-Counted
> > License Priority: Medium
> 
> Looks like you're all se then :)
> 
> Ours always come pre-installed for both platforms but we also always
> check anyway.
> 
> 
> Cheers,
> James.
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] IOS-XR and PBR

[Lee Starnes]

Looks like I may not have this feature as these are 12410XR chassis. Here
is what I have in our lab environment.

RP/0/9/CPU0:lab-router(config)#ipv4 access-list ABF
RP/0/9/CPU0:lab-router(config-ipv4-acl)#permit ipv4 10.10.10.0/24
172.16.0.0/19
RP/0/9/CPU0:lab-router(config-ipv4-acl)#permit ipv4 10.10.10.0/24 any
?
  dscp   Match packets with given DSCP value
  fragments  Check non-initial fragments
  logLog matches against this entry
  log-input  Log matches against this entry, including input interface
  packet-length  Check packet length
  precedence Match packets with given precedence
  
RP/0/9/CPU0:lab-router(config-ipv4-acl)#permit ipv4 10.10.10.0/24 any

-Lee

On Thu, Sep 11, 2014 at 12:37 AM, Oliver Boehmer (oboehmer) <
oboeh...@cisco.com> wrote:

>
> >
> >Since we have no default routes and all backbone links are full BGP minus
> >default route, I am going to assume that the second permit statement
> >won't work here. Would this just get specified as any since the first
> >entry would be matched for local netblocks and
>
> sorry, 0.0.0.0/0 should be "any".. so the first line matches traffic to
> your networks (and it just passes through normally and will be forwarded
> according to your RIB/FIB), and the 2nd matches traffic from this customer
> block to anything else, which then will be ABF'ed to your upstream.
>
> >it would not go further in the ACL?
>
> it actually would, so I missed a "permit ipv4 any any" catch-all at the
> end of the ACL to ensure traffic from other sources is forwarded
> normally.. it is a regular ACL, the ABF directives are just inserted into
> it.
> Need more coffee..
>
> >These special case customers all are fed from a single 6509 to the border
> >router that contains their one carrier of choice, but that border router
> >contains several backbone links and each border router also having links
> > to each other. I suspect that for simplifying this, we can match against
> >traffic on the link coming from that 6509 to the border router.
>
> exactly, that sounds straight-forward, just apply this inbound and you're
> set..
>
> oli
>
>
> >
> >
> >
> >Thanks for the pointers.
> >
> >
> >-Lee
> >
> >
> >On Wed, Sep 10, 2014 at 11:09 PM, Oliver Boehmer (oboehmer)
> > wrote:
> >
> >
> >>
> >>I am looking to setup some policy based routing on an IOS-XR router. From
> >>what I understand, XR does not have PBR, but ABF. When looking at how ABF
> >>works, I don¹t see how to set a next hop route (only next hop per TCP
> >>port).
> >
> >well, you can direct any traffic matching an ACE (be it layer 3 or 4) to a
> >chosen next-hop.
> >
> >>My question then would be, how does one accomplish this on XR? What
> >>I need to do is allow a particular IP block to only have access to one of
> >>our backbone carriers and not the others. We have their /24 only
> >>announced
> >>out the one carrier, but for outbound traffic, I want to make sure their
> >>traffic remains on that carrier but also have access to our local routes
> >>(all our local customers and local networks). Is this something that can
> >>be
> >>done with ABF
> >
> >Yes, it can be done, but possibly a bit more difficult:
> >
> >ipv4 access-list ABF
> > permit CUST/24 
> > permit CUST/24 0.0.0.0/0  next-hop
> >
> >
> >not sure how your topology looks and where you would need to apply this
> >forwarding rule, but the next-hop can be directly connected or resolve via
> >some form of tunnel (including LDP/LSP).
> >
> >oli
> >
> >
> >
> >
>
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ASR1001 and ME3600X licensing

[James Bensley]

On 11 September 2014 07:58, CiscoNSP List  wrote:
> Cheers - Just checked one of the ME's, and am seeing the same:
>
> Switch#sh license
> Index 1 Feature: AdvancedMetroIPAccess
> Period left: Life time
> License Type: Permanent
> License State: Active, In Use
> License Count: Non-Counted
> License Priority: Medium

Looks like you're all se then :)

Ours always come pre-installed for both platforms but we also always
check anyway.


Cheers,
James.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] /31's on Eth p-t-p links instead of /30's

[Phil Mayers]

Likewise.  /31 everywhere far end will support it, no issues.
-- 
Sent from my mobile device, please excuse brevity and typos.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] IOS-XR and PBR

[Oliver Boehmer (oboehmer)]

> 
>Since we have no default routes and all backbone links are full BGP minus
>default route, I am going to assume that the second permit statement
>won't work here. Would this just get specified as any since the first
>entry would be matched for local netblocks and

sorry, 0.0.0.0/0 should be "any".. so the first line matches traffic to
your networks (and it just passes through normally and will be forwarded
according to your RIB/FIB), and the 2nd matches traffic from this customer
block to anything else, which then will be ABF'ed to your upstream.

>it would not go further in the ACL?

it actually would, so I missed a "permit ipv4 any any" catch-all at the
end of the ACL to ensure traffic from other sources is forwarded
normally.. it is a regular ACL, the ABF directives are just inserted into
it.
Need more coffee..

>These special case customers all are fed from a single 6509 to the border
>router that contains their one carrier of choice, but that border router
>contains several backbone links and each border router also having links
> to each other. I suspect that for simplifying this, we can match against
>traffic on the link coming from that 6509 to the border router.

exactly, that sounds straight-forward, just apply this inbound and you're
set..

oli


>
>
>
>Thanks for the pointers.
>
>
>-Lee
>
>
>On Wed, Sep 10, 2014 at 11:09 PM, Oliver Boehmer (oboehmer)
> wrote:
>
>
>>
>>I am looking to setup some policy based routing on an IOS-XR router. From
>>what I understand, XR does not have PBR, but ABF. When looking at how ABF
>>works, I don¹t see how to set a next hop route (only next hop per TCP
>>port).
>
>well, you can direct any traffic matching an ACE (be it layer 3 or 4) to a
>chosen next-hop.
>
>>My question then would be, how does one accomplish this on XR? What
>>I need to do is allow a particular IP block to only have access to one of
>>our backbone carriers and not the others. We have their /24 only
>>announced
>>out the one carrier, but for outbound traffic, I want to make sure their
>>traffic remains on that carrier but also have access to our local routes
>>(all our local customers and local networks). Is this something that can
>>be
>>done with ABF
>
>Yes, it can be done, but possibly a bit more difficult:
>
>ipv4 access-list ABF
> permit CUST/24 
> permit CUST/24 0.0.0.0/0  next-hop
>
>
>not sure how your topology looks and where you would need to apply this
>forwarding rule, but the next-hop can be directly connected or resolve via
>some form of tunnel (including LDP/LSP).
>
>oli
>
>
>
>


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] IOS-XR and PBR

[Lee Starnes]

Hi Oliver,

Since we have no default routes and all backbone links are full BGP minus
default route, I am going to assume that the second permit statement won't
work here. Would this just get specified as any since the first entry would
be matched for local netblocks and it would not go further in the ACL?
These special case customers all are fed from a single 6509 to the border
router that contains their one carrier of choice, but that border router
contains several backbone links and each border router also having links to
each other. I suspect that for simplifying this, we can match against
traffic on the link coming from that 6509 to the border router.

Thanks for the pointers.

-Lee

On Wed, Sep 10, 2014 at 11:09 PM, Oliver Boehmer (oboehmer) <
oboeh...@cisco.com> wrote:

>
> >
> >I am looking to setup some policy based routing on an IOS-XR router. From
> >what I understand, XR does not have PBR, but ABF. When looking at how ABF
> >works, I don¹t see how to set a next hop route (only next hop per TCP
> >port).
>
> well, you can direct any traffic matching an ACE (be it layer 3 or 4) to a
> chosen next-hop.
>
> >My question then would be, how does one accomplish this on XR? What
> >I need to do is allow a particular IP block to only have access to one of
> >our backbone carriers and not the others. We have their /24 only announced
> >out the one carrier, but for outbound traffic, I want to make sure their
> >traffic remains on that carrier but also have access to our local routes
> >(all our local customers and local networks). Is this something that can
> >be
> >done with ABF
>
> Yes, it can be done, but possibly a bit more difficult:
>
> ipv4 access-list ABF
>  permit CUST/24 
>  permit CUST/24 0.0.0.0/0 next-hop 
>
> not sure how your topology looks and where you would need to apply this
> forwarding rule, but the next-hop can be directly connected or resolve via
> some form of tunnel (including LDP/LSP).
>
> oli
>
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ASR1001 and ME3600X licensing

[CiscoNSP List]

Cheers - Just checked one of the ME's, and am seeing the same:

Switch#sh license
Index 1 Feature: AdvancedMetroIPAccess
Period left: Life time
License Type: Permanent
License State: Active, In Use
License Count: Non-Counted
License Priority: Medium


> From: duncan.namuh...@infocom.ug
> To: cisconsp_l...@hotmail.com; adam.vitkov...@swan.sk; 
> cisco-nsp@puck.nether.net
> Subject: RE: [c-nsp] ASR1001 and ME3600X licensing
> Date: Thu, 11 Sep 2014 09:03:03 +0300
> 
> You should see something similar with the ME
> 
> #sh license
> Index 1 Feature: AdvancedMetroIPAccess
> Period left: Life time
> License Type: Permanent
> License State: Active, In Use
> License Count: Non-Counted
> License Priority: Medium
> 
> -Original Message-
> From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of
> CiscoNSP List
> Sent: Thursday, September 11, 2014 8:31 AM
> To: Vitkovský Adam; cisco-nsp@puck.nether.net
> Subject: Re: [c-nsp] ASR1001 and ME3600X licensing
> 
> Thanks Guys,
> 
> Just checked one of the ASR1001's with sh license - Assume this means it is
> enabled?
> 
> Index 2 Feature: advipservices
> Period left: Life time
> License Type: Permanent
> License State: Active, In Use
> License Count: Non-Counted
> License Priority: Medium
> 
> sh ver doesnt report anything regarding what licences are installed (Unlike
> 1921's etc, which report which technology package license is in use, whether
> it's permanent or not, and also what it will use next reboot)
> 
> Havent checked any of the ME's yet.
> 
> 
> 
> > From: adam.vitkov...@swan.sk
> > To: cisconsp_l...@hotmail.com; cisco-nsp@puck.nether.net
> > Subject: RE: [c-nsp] ASR1001 and ME3600X licensing
> > Date: Wed, 10 Sep 2014 07:22:35 +
> > 
> > Hi,
> > 
> > If you ordered it as such the licenses should be preinstalled at least
> that's my experience. 
> > If not you'd have to use the PAK # and serial # to obtain the license file
> from Cisco then copy it to the device and install it yourself. 
> > And yes you can check with sh lic blah blah. 
> > 
> > 
> > adam
> > > -Original Message-
> > > From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf 
> > > Of CiscoNSP List
> > > Sent: Wednesday, September 10, 2014 8:25 AM
> > > To: cisco-nsp@puck.nether.net
> > > Subject: [c-nsp] ASR1001 and ME3600X licensing
> > > 
> > > Hi Everyone,
> > > 
> > > We have purchased a number of the above devices and also purchased 
> > > Adv IP(For all the ASR's) and Adv Metro IP for all the ME3600's - We 
> > > were told a "paper license" was sent for the adv ip(For all ASR's 
> > > and ME3600's), which we have been unable to locate...a week later of 
> > > constant e-mails to disty/Cisco AM the disty is now stating that the 
> > > "licenses" are already installed on all the devices - I dont have 
> > > physical access to the devices until tomorow, but do you need 
> > > register the PAK for each device, and then install the license 
> > > keyor would they have come "pre-installed"?  Once I have access to
> each device, would sh ver or sh licenses tell me if adv IP was "active"?
> > > 
> > > 
> > > I cant believe how difficult this has beenand how lacking in 
> > > knowledge of the licensing both our Disty and Cisco AM have been.
> > > 
> > > Cheers.
> > > ___
> > > cisco-nsp mailing list  cisco-nsp@puck.nether.net 
> > > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > > archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/