Re: [c-nsp] Router memory problem

2016-10-26 Thread Mark Tinka


On 26/Oct/16 22:06, Joseph Mays wrote:

>
> router bgp 
>   distribute-list prefix max16 in

You really shouldn't be using distribute lists.

Mark.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Pavel Skovajsa
I also noticed that going through the proxies makes things worse - weird,
have to sniff it one day. Btw ever since the ftp access to cisco ios file
went away, what are you doing to get the ios image files in "mass" way?

The only thing I figured out is to use Firefox cliget plug-in for the Cisco
portal, which generates nice curl cli commands that I can then use to
download all those files directly from the internal FTP server. Still, I
have to do it one by one.

-pavel

On Wed, Oct 26, 2016 at 8:15 PM, Nick Cutting  wrote:

> This happens to me on chrome - but not firefox
>
> -Original Message-
> From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of
> Mark Tinka
> Sent: Wednesday, October 26, 2016 9:22 AM
> To: Pavel Skovajsa ; Harry Hambi - Atos <
> harry.ha...@bbc.co.uk>
> Cc: cisco-nsp NSP 
> Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a
>
>
>
> On 26/Oct/16 12:42, Pavel Skovajsa wrote:
>
> > On a similar topic of the software download portal. Does it happen to
> > you that when you navigate those software download selections nothing
> > happens after you click on them?
> > I drives me mad sometimes as it comes and goes.
>
> It takes a while, but it loads, eventually.
>
> Mark.
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net https://puck.nether.net/
> mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Router memory problem

2016-10-26 Thread Joseph Mays
> On the plus side, if you screw up routing with a mistake, you’ll free a lot 
> of memory :-/

See, there could be a silver lining. :-)

Got the commands in...

router bgp 
  distribute-list prefix max16 in

ip prefix-list max23 seq 5 permit 0.0.0.0/0 ge 8 le 16

The bgp table seems to be dropping in size over time

core-gw1.noc#show ip bgp sum
[...]
xx.xxx.xxx.x4   174  146060 785   70730200 13:00:03   605322

core-gw1.noc#show ip bgp sum
[...]
xx.xxx.xxx.x4   174  146060 785   70730200 13:00:03   603660

but it's taking a long time. I could clear the bgp tables, but I'm hesitant to 
do that. Maybe better to just let it drop over time.







-Original Message- 
From: Chris Boyd 
Sent: Wednesday, October 26, 2016 3:57 PM 
To: cisco-nsp@puck.nether.net 
Subject: Re: [c-nsp] Router memory problem 


> On Oct 26, 2016, at 2:19 PM, Joseph Mays  wrote:
> 
> I was thinking about using a prefix list to limit the size of the BGP routing 
> table.

Hard to do if you can’t see the config, but I suppose if you are careful you 
could tftp it in, since you mentioned that’s still working.  On the plus side, 
if you screw up routing with a mistake, you’ll free a lot of memory :-/

—Chris

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Router memory problem

2016-10-26 Thread Chris Boyd

> On Oct 26, 2016, at 2:19 PM, Joseph Mays  wrote:
> 
> I was thinking about using a prefix list to limit the size of the BGP routing 
> table.

Hard to do if you can’t see the config, but I suppose if you are careful you 
could tftp it in, since you mentioned that’s still working.  On the plus side, 
if you screw up routing with a mistake, you’ll free a lot of memory :-/

—Chris

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Router memory problem

2016-10-26 Thread Chuck Church
That’s pretty low.  Under a megabyte for largest block.  Is soft reconfig 
enabled?  Maybe turn that off, or like you said filter some routes. 

 

Chuck

 

From: Joseph Mays [mailto:m...@win.net] 
Sent: Wednesday, October 26, 2016 3:06 PM
To: Chuck Church ; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Router memory problem

 

Perhaps. Looks like, but I don't know if it's TOO low.

core-gw1.noc#show mem

HeadTotal(b) Used(b) Free(b)   Lowest(b)  Largest(b)

Processor   6381CC60   78368   438972176 5506192  945056  898812

  I/OE003355443210948872226055602228776022426364

 

Maybe if I reduce the size of the bgp tables.

 

-Original Message- 

From: Chuck Church 

Sent: Wednesday, October 26, 2016 2:51 PM 

To: 'Joseph Mays' ; cisco-nsp@puck.nether.net 
  

Subject: RE: [c-nsp] Router memory problem 

 

Is the router out of RAM?  A really low memory condition might cause this.  
'show mem' or 'show log' (if configured) might show some malloc errors if that 
is the issue.

 

Chuck

 

-Original Message-

From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joseph 
Mays

Sent: Wednesday, October 26, 2016 2:28 PM

To: cisco-nsp@puck.nether.net  

Subject: [c-nsp] Router memory problem

 

I’m dealing with a serious problem on a router I can only connect to remotely. 
Show run on the router returns nothing.

 

core-gw1.noc#show run

core-gw1.noc#

 

The running config is definitely there, though and the router is operational. 
And interestingly the system that copies the router’s config every night seems 
to have no problem pulling it down via tftp. And I can add and remove config 
commands and have them become active, even though I can’t see the config when 
it’s running.

 

I tried copying the running config to the startup config and got an error.

 

core-gw1.noc#dir nvram:

Directory of nvram:/

 

  488  -rw-   19717  startup-config

  489  1157  private-config

  490  -rw-   19717  underlying-config

1    46  persistent-data

2  -rw-   0  ifIndex-table

3  -rw-   4  rf_cold_starts

 

522232 bytes total (498234 bytes free)

core-gw1.noc#write mem

startup-config file open failed (Not enough space)

 

I found that any command I try with regards to the startup config gets the same 
result. I concluded that the nvram: must be corrupt. So I did an “erase” to 
reformat and clear it, and that went fine. so then I tried to write the 
startup-config again and had the same problem.

 

core-gw1.noc#erase nvram:

Erasing the nvram filesystem will remove all configuration files! Continue? 
[confirm] [OK] Erase of nvram: complete core-gw1.noc#dir nvram:

Directory of nvram:/

 

  508  -rw-   0  startup-config

  509     0  private-config

  510  -rw-   0  underlying-config

1    46  persistent-data

2  -rw-   0  ifIndex-table

3  -rw-   4  rf_cold_starts

 

522232 bytes total (519108 bytes free)

core-gw1.noc#copy run start

Destination filename [startup-config]?

startup-config file open failed (Not enough space)

 

So now I am in a position where I don’t dare reboot the router because it has 
no startup config. I did try tftping the backup config to nvram:, and it worked 
find as long as I gave it another name.

 

core-gw1.noc#copy tftp nvram:

Address or name of remote host [admin2.win.net]?

Source filename [core-gw1.noc-confg.noALW]? noc-config Destination filename 
[noc-config]?

Accessing tftp://admin2.win.net/noc-config...

Loading noc-config from 216.24.27.2 (via FastEthernet2/0): !!!

[OK - 34368 bytes]

 

34368 bytes copied in 0.756 secs (45460 bytes/sec) core-gw1.noc#dir nvram:

Directory of nvram:/

 

  508  -rw-   0  startup-config

  509     0  private-config

  510  -rw-   0  underlying-config

1    46  persistent-data

2  -rw-   0  ifIndex-table

3  -rw-   4  rf_cold_starts

4  -rw-   34368  noc-config

 

But when I tried to rename noc-config to startup-config, it gave the same space 
error. As does deleting startup-config, or any attempt to do anything to the 
startup-config file.

 

Here is the show ver info on the router.

 

Cisco Internetwork Operating System Software IOS (tm) 7200 Software 
(C7200-IK9SU2-M), Version 12.3(23), RELEASE SOFTWARE (fc5) Technical Support: 
http://www.cisco.com/techsupport 

Re: [c-nsp] Router memory problem

2016-10-26 Thread Joseph Mays
I was thinking about using a prefix list to limit the size of the BGP 
routing table.



-Original Message- 
From: Chris Boyd

Sent: Wednesday, October 26, 2016 2:59 PM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Router memory problem



On Oct 26, 2016, at 1:51 PM, Chuck Church  wrote:

Is the router out of RAM?  A really low memory condition might cause this. 
'show mem' or 'show log' (if configured) might show some malloc errors if 
that is the issue.


+1 I had a similar issue a while back with a 7206VXR that was getting full 
routes.  Worked fine, forwarding packets, but could not sh run.  Cutting 
back to customer routes + default “fixed” it about 10 minutes after the 
upstream made the change.


—Chris

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/ 


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] IPv6 VPC Port channel Nexus -- 2951

2016-10-26 Thread Scott Voll
So I have a 2951 setup with a Port-channel to a set of L3 Nexus 5548's on a
VPC.

IPv4 seems to work fine.

IPv6 on the other hand I'm getting a loop detected.

%IPV6_ND-4-LOOPBACK: Looped back NS(DAD) packet detected for 
on Port-channel XX.yy

What am I missing so that IPv6 will work?

Can someone head me down the right path?



Sample Config:

2951

interface Port-channelxx.yy
 encapsulation dot1Q xxx
 ip address 10.x.yy.5 255.255.255.0
ipv6 address 2620:xx:yy:zz::5/64
ipv6 enable

Nexus

interface port-channelxx
  description router
  switchport mode trunk
  speed 1000
  vpc xx

interface Vlanyyy
  description
  no shutdown
  ip address 10.x.yy.2/24
  ipv6 address 2620:xx:yy:zz::2/64
  ipv6 router 
  ip router 
  ip pim sparse-mode
  hsrp version 2
  hsrp yyy
preempt
priority 110
ip 10.x.yy.1
  hsrp yyy ipv6
preempt
priority 130
ip 2620:xx:yy:zz:::1
  ip dhcp relay address 10.x.y.z
  ipv6 dhcp relay address 2620:xx:yy:zz::40

is it as easy as only allowing router vlan's down the VPC on the nexus?

TIA

Scott
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Router memory problem

2016-10-26 Thread Joseph Mays
Perhaps. Looks like, but I don't know if it's TOO low.


core-gw1.noc#show mem
HeadTotal(b) Used(b) Free(b)   Lowest(b)  Largest(b)
Processor   6381CC60   78368   438972176 5506192  945056  898812
  I/OE003355443210948872226055602228776022426364

Maybe if I reduce the size of the bgp tables.

-Original Message- 
From: Chuck Church 
Sent: Wednesday, October 26, 2016 2:51 PM 
To: 'Joseph Mays' ; cisco-nsp@puck.nether.net 
Subject: RE: [c-nsp] Router memory problem 

Is the router out of RAM?  A really low memory condition might cause this.  
'show mem' or 'show log' (if configured) might show some malloc errors if that 
is the issue.

Chuck

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joseph 
Mays
Sent: Wednesday, October 26, 2016 2:28 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Router memory problem

I’m dealing with a serious problem on a router I can only connect to remotely. 
Show run on the router returns nothing.

core-gw1.noc#show run
core-gw1.noc#

The running config is definitely there, though and the router is operational. 
And interestingly the system that copies the router’s config every night seems 
to have no problem pulling it down via tftp. And I can add and remove config 
commands and have them become active, even though I can’t see the config when 
it’s running.

I tried copying the running config to the startup config and got an error.

core-gw1.noc#dir nvram:
Directory of nvram:/

  488  -rw-   19717  startup-config
  489  1157  private-config
  490  -rw-   19717  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (498234 bytes free)
core-gw1.noc#write mem
startup-config file open failed (Not enough space)

I found that any command I try with regards to the startup config gets the same 
result. I concluded that the nvram: must be corrupt. So I did an “erase” to 
reformat and clear it, and that went fine. so then I tried to write the 
startup-config again and had the same problem.

core-gw1.noc#erase nvram:
Erasing the nvram filesystem will remove all configuration files! Continue? 
[confirm] [OK] Erase of nvram: complete core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (519108 bytes free)
core-gw1.noc#copy run start
Destination filename [startup-config]?
startup-config file open failed (Not enough space)

So now I am in a position where I don’t dare reboot the router because it has 
no startup config. I did try tftping the backup config to nvram:, and it worked 
find as long as I gave it another name.

core-gw1.noc#copy tftp nvram:
Address or name of remote host [admin2.win.net]?
Source filename [core-gw1.noc-confg.noALW]? noc-config Destination filename 
[noc-config]?
Accessing tftp://admin2.win.net/noc-config...
Loading noc-config from 216.24.27.2 (via FastEthernet2/0): !!!
[OK - 34368 bytes]

34368 bytes copied in 0.756 secs (45460 bytes/sec) core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts
4  -rw-   34368  noc-config

But when I tried to rename noc-config to startup-config, it gave the same space 
error. As does deleting startup-config, or any attempt to do anything to the 
startup-config file.

Here is the show ver info on the router.

Cisco Internetwork Operating System Software IOS (tm) 7200 Software 
(C7200-IK9SU2-M), Version 12.3(23), RELEASE SOFTWARE (fc5) Technical Support: 
http://www.cisco.com/techsupport Copyright (c) 1986-2007 by cisco Systems, Inc.
Compiled Tue 24-Jul-07 21:42 by stshen
Image text-base: 0x60008AF4, data-base: 0x61F53280

ROM: System Bootstrap, Version 12.2(20030826:190624) [BLD-npeg1_rommon_r11 
102], DEVELOPMENT SOFTWARE
BOOTLDR: 7200 Software (C7200-KBOOT-M), Version 12.2(15)B, EARLY DEPLOYMENT 
RELEASE SOFTWARE (fc1)

core-gw1.noc uptime is 11 hours, 10 minutes System returned to ROM by reload at 
03:00:12 EDT Wed Oct 26 2016 System restarted at 03:02:54 EDT Wed Oct 26 2016 
System image file is 

Re: [c-nsp] Router memory problem

2016-10-26 Thread Chris Boyd

> On Oct 26, 2016, at 1:51 PM, Chuck Church  wrote:
> 
> Is the router out of RAM?  A really low memory condition might cause this.  
> 'show mem' or 'show log' (if configured) might show some malloc errors if 
> that is the issue.

+1 I had a similar issue a while back with a 7206VXR that was getting full 
routes.  Worked fine, forwarding packets, but could not sh run.  Cutting back 
to customer routes + default “fixed” it about 10 minutes after the upstream 
made the change.

—Chris

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Router memory problem

2016-10-26 Thread Chuck Church
Is the router out of RAM?  A really low memory condition might cause this.  
'show mem' or 'show log' (if configured) might show some malloc errors if that 
is the issue.

Chuck

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joseph 
Mays
Sent: Wednesday, October 26, 2016 2:28 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Router memory problem

I’m dealing with a serious problem on a router I can only connect to remotely. 
Show run on the router returns nothing.

core-gw1.noc#show run
core-gw1.noc#

The running config is definitely there, though and the router is operational. 
And interestingly the system that copies the router’s config every night seems 
to have no problem pulling it down via tftp. And I can add and remove config 
commands and have them become active, even though I can’t see the config when 
it’s running.

I tried copying the running config to the startup config and got an error.

core-gw1.noc#dir nvram:
Directory of nvram:/

  488  -rw-   19717  startup-config
  489  1157  private-config
  490  -rw-   19717  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (498234 bytes free)
core-gw1.noc#write mem
startup-config file open failed (Not enough space)

I found that any command I try with regards to the startup config gets the same 
result. I concluded that the nvram: must be corrupt. So I did an “erase” to 
reformat and clear it, and that went fine. so then I tried to write the 
startup-config again and had the same problem.

core-gw1.noc#erase nvram:
Erasing the nvram filesystem will remove all configuration files! Continue? 
[confirm] [OK] Erase of nvram: complete core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (519108 bytes free)
core-gw1.noc#copy run start
Destination filename [startup-config]?
startup-config file open failed (Not enough space)

So now I am in a position where I don’t dare reboot the router because it has 
no startup config. I did try tftping the backup config to nvram:, and it worked 
find as long as I gave it another name.

core-gw1.noc#copy tftp nvram:
Address or name of remote host [admin2.win.net]?
Source filename [core-gw1.noc-confg.noALW]? noc-config Destination filename 
[noc-config]?
Accessing tftp://admin2.win.net/noc-config...
Loading noc-config from 216.24.27.2 (via FastEthernet2/0): !!!
[OK - 34368 bytes]

34368 bytes copied in 0.756 secs (45460 bytes/sec) core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts
4  -rw-   34368  noc-config

But when I tried to rename noc-config to startup-config, it gave the same space 
error. As does deleting startup-config, or any attempt to do anything to the 
startup-config file.

Here is the show ver info on the router.

Cisco Internetwork Operating System Software IOS (tm) 7200 Software 
(C7200-IK9SU2-M), Version 12.3(23), RELEASE SOFTWARE (fc5) Technical Support: 
http://www.cisco.com/techsupport Copyright (c) 1986-2007 by cisco Systems, Inc.
Compiled Tue 24-Jul-07 21:42 by stshen
Image text-base: 0x60008AF4, data-base: 0x61F53280

ROM: System Bootstrap, Version 12.2(20030826:190624) [BLD-npeg1_rommon_r11 
102], DEVELOPMENT SOFTWARE
BOOTLDR: 7200 Software (C7200-KBOOT-M), Version 12.2(15)B, EARLY DEPLOYMENT 
RELEASE SOFTWARE (fc1)

core-gw1.noc uptime is 11 hours, 10 minutes System returned to ROM by reload at 
03:00:12 EDT Wed Oct 26 2016 System restarted at 03:02:54 EDT Wed Oct 26 2016 
System image file is "disk2:c7200-ik9su2-mz.123-23.bin"
Last reload reason: Reload command



This product contains cryptographic features and is subject to United States 
and local country laws governing import, export, transfer and use. Delivery of 
Cisco cryptographic products does not imply third-party authority to import, 
export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for compliance 
with U.S. and local country laws. By using this product you agree to comply 
with applicable laws and regulations. If you are unable to comply 

Re: [c-nsp] Router memory problem

2016-10-26 Thread Joseph Mays
The "show run" command has always worked in the past. No one else has 
reconfigured anything on this router since I started working on it.

core-gw1.noc#show priv
Current privilege level is 15
core-gw1.noc#show running-config view full
 ^
% Invalid input detected at '^' marker.

core-gw1.noc#show running-config ?
  brief   configuration without certificate data
  class-map   Show class-map information
  fullfull configuration
  interface   Show interface configuration
  linenum Display line numbers in output
  map-class   Show map class information
  policy-map  Show policy-map information
  |   Output modifiers
  

core-gw1.noc#show running-config full
core-gw1.noc#


-Original Message- 
From: Nick Cutting 
Sent: Wednesday, October 26, 2016 2:32 PM 
To: Joseph Mays ; cisco-nsp@puck.nether.net 
Subject: RE: [c-nsp] Router memory problem 

Check your logged in at privilege 15
Also - there may be "views" configured.

Try also this:

sh running-config view full

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joseph 
Mays
Sent: Wednesday, October 26, 2016 2:28 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Router memory problem

I’m dealing with a serious problem on a router I can only connect to remotely. 
Show run on the router returns nothing.

core-gw1.noc#show run
core-gw1.noc#

The running config is definitely there, though and the router is operational. 
And interestingly the system that copies the router’s config every night seems 
to have no problem pulling it down via tftp. And I can add and remove config 
commands and have them become active, even though I can’t see the config when 
it’s running.

I tried copying the running config to the startup config and got an error.

core-gw1.noc#dir nvram:
Directory of nvram:/

  488  -rw-   19717  startup-config
  489  1157  private-config
  490  -rw-   19717  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (498234 bytes free)
core-gw1.noc#write mem
startup-config file open failed (Not enough space)

I found that any command I try with regards to the startup config gets the same 
result. I concluded that the nvram: must be corrupt. So I did an “erase” to 
reformat and clear it, and that went fine. so then I tried to write the 
startup-config again and had the same problem.

core-gw1.noc#erase nvram:
Erasing the nvram filesystem will remove all configuration files! Continue? 
[confirm] [OK] Erase of nvram: complete core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (519108 bytes free)
core-gw1.noc#copy run start
Destination filename [startup-config]?
startup-config file open failed (Not enough space)

So now I am in a position where I don’t dare reboot the router because it has 
no startup config. I did try tftping the backup config to nvram:, and it worked 
find as long as I gave it another name.

core-gw1.noc#copy tftp nvram:
Address or name of remote host [admin2.win.net]?
Source filename [core-gw1.noc-confg.noALW]? noc-config Destination filename 
[noc-config]?
Accessing tftp://admin2.win.net/noc-config...
Loading noc-config from 216.24.27.2 (via FastEthernet2/0): !!!
[OK - 34368 bytes]

34368 bytes copied in 0.756 secs (45460 bytes/sec) core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts
4  -rw-   34368  noc-config

But when I tried to rename noc-config to startup-config, it gave the same space 
error. As does deleting startup-config, or any attempt to do anything to the 
startup-config file.

Here is the show ver info on the router.

Cisco Internetwork Operating System Software IOS (tm) 7200 Software 
(C7200-IK9SU2-M), Version 12.3(23), RELEASE SOFTWARE (fc5) Technical Support: 
http://www.cisco.com/techsupport Copyright (c) 1986-2007 by cisco Systems, Inc.
Compiled Tue 24-Jul-07 21:42 by stshen
Image text-base: 0x60008AF4, data-base: 0x61F53280

ROM: System Bootstrap, Version 12.2(20030826:190624) [BLD-npeg1_rommon_r11 
102], DEVELOPMENT 

Re: [c-nsp] Router memory problem

2016-10-26 Thread Nick Cutting
Check your logged in at privilege 15
Also - there may be "views" configured.

Try also this:

sh running-config view full

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Joseph 
Mays
Sent: Wednesday, October 26, 2016 2:28 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Router memory problem

I’m dealing with a serious problem on a router I can only connect to remotely. 
Show run on the router returns nothing.

core-gw1.noc#show run
core-gw1.noc#

The running config is definitely there, though and the router is operational. 
And interestingly the system that copies the router’s config every night seems 
to have no problem pulling it down via tftp. And I can add and remove config 
commands and have them become active, even though I can’t see the config when 
it’s running.

I tried copying the running config to the startup config and got an error.

core-gw1.noc#dir nvram:
Directory of nvram:/

  488  -rw-   19717  startup-config
  489  1157  private-config
  490  -rw-   19717  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (498234 bytes free)
core-gw1.noc#write mem
startup-config file open failed (Not enough space)

I found that any command I try with regards to the startup config gets the same 
result. I concluded that the nvram: must be corrupt. So I did an “erase” to 
reformat and clear it, and that went fine. so then I tried to write the 
startup-config again and had the same problem.

core-gw1.noc#erase nvram:
Erasing the nvram filesystem will remove all configuration files! Continue? 
[confirm] [OK] Erase of nvram: complete core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (519108 bytes free)
core-gw1.noc#copy run start
Destination filename [startup-config]?
startup-config file open failed (Not enough space)

So now I am in a position where I don’t dare reboot the router because it has 
no startup config. I did try tftping the backup config to nvram:, and it worked 
find as long as I gave it another name.

core-gw1.noc#copy tftp nvram:
Address or name of remote host [admin2.win.net]?
Source filename [core-gw1.noc-confg.noALW]? noc-config Destination filename 
[noc-config]?
Accessing tftp://admin2.win.net/noc-config...
Loading noc-config from 216.24.27.2 (via FastEthernet2/0): !!!
[OK - 34368 bytes]

34368 bytes copied in 0.756 secs (45460 bytes/sec) core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts
4  -rw-   34368  noc-config

But when I tried to rename noc-config to startup-config, it gave the same space 
error. As does deleting startup-config, or any attempt to do anything to the 
startup-config file.

Here is the show ver info on the router.

Cisco Internetwork Operating System Software IOS (tm) 7200 Software 
(C7200-IK9SU2-M), Version 12.3(23), RELEASE SOFTWARE (fc5) Technical Support: 
http://www.cisco.com/techsupport Copyright (c) 1986-2007 by cisco Systems, Inc.
Compiled Tue 24-Jul-07 21:42 by stshen
Image text-base: 0x60008AF4, data-base: 0x61F53280

ROM: System Bootstrap, Version 12.2(20030826:190624) [BLD-npeg1_rommon_r11 
102], DEVELOPMENT SOFTWARE
BOOTLDR: 7200 Software (C7200-KBOOT-M), Version 12.2(15)B, EARLY DEPLOYMENT 
RELEASE SOFTWARE (fc1)

core-gw1.noc uptime is 11 hours, 10 minutes System returned to ROM by reload at 
03:00:12 EDT Wed Oct 26 2016 System restarted at 03:02:54 EDT Wed Oct 26 2016 
System image file is "disk2:c7200-ik9su2-mz.123-23.bin"
Last reload reason: Reload command



This product contains cryptographic features and is subject to United States 
and local country laws governing import, export, transfer and use. Delivery of 
Cisco cryptographic products does not imply third-party authority to import, 
export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for compliance 
with U.S. and local country laws. By using this product you agree to comply 
with applicable laws and regulations. If you are unable to comply with U.S. and 
local laws, return this product 

[c-nsp] Router memory problem

2016-10-26 Thread Joseph Mays
I’m dealing with a serious problem on a router I can only connect to remotely. 
Show run on the router returns nothing.

core-gw1.noc#show run
core-gw1.noc#

The running config is definitely there, though and the router is operational. 
And interestingly the system that copies the router’s config every night seems 
to have no problem pulling it down via tftp. And I can add and remove config 
commands and have them become active, even though I can’t see the config when 
it’s running.

I tried copying the running config to the startup config and got an error.

core-gw1.noc#dir nvram:
Directory of nvram:/

  488  -rw-   19717  startup-config
  489  1157  private-config
  490  -rw-   19717  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (498234 bytes free)
core-gw1.noc#write mem
startup-config file open failed (Not enough space)

I found that any command I try with regards to the startup config gets the same 
result. I concluded that the nvram: must be corrupt. So I did an “erase” to 
reformat and clear it, and that went fine. so then I tried to write the 
startup-config again and had the same problem.

core-gw1.noc#erase nvram:
Erasing the nvram filesystem will remove all configuration files! Continue? 
[confirm]
[OK]
Erase of nvram: complete
core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts

522232 bytes total (519108 bytes free)
core-gw1.noc#copy run start
Destination filename [startup-config]?
startup-config file open failed (Not enough space)

So now I am in a position where I don’t dare reboot the router because it has 
no startup config. I did try tftping the backup config to nvram:, and it worked 
find as long as I gave it another name.

core-gw1.noc#copy tftp nvram:
Address or name of remote host [admin2.win.net]?
Source filename [core-gw1.noc-confg.noALW]? noc-config
Destination filename [noc-config]?
Accessing tftp://admin2.win.net/noc-config...
Loading noc-config from 216.24.27.2 (via FastEthernet2/0): !!!
[OK - 34368 bytes]

34368 bytes copied in 0.756 secs (45460 bytes/sec)
core-gw1.noc#dir nvram:
Directory of nvram:/

  508  -rw-   0  startup-config
  509     0  private-config
  510  -rw-   0  underlying-config
1    46  persistent-data
2  -rw-   0  ifIndex-table
3  -rw-   4  rf_cold_starts
4  -rw-   34368  noc-config

But when I tried to rename noc-config to startup-config, it gave the same space 
error. As does deleting startup-config, or any attempt to do anything to the 
startup-config file.

Here is the show ver info on the router.

Cisco Internetwork Operating System Software
IOS (tm) 7200 Software (C7200-IK9SU2-M), Version 12.3(23), RELEASE SOFTWARE 
(fc5)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2007 by cisco Systems, Inc.
Compiled Tue 24-Jul-07 21:42 by stshen
Image text-base: 0x60008AF4, data-base: 0x61F53280

ROM: System Bootstrap, Version 12.2(20030826:190624) [BLD-npeg1_rommon_r11 
102], DEVELOPMENT SOFTWARE
BOOTLDR: 7200 Software (C7200-KBOOT-M), Version 12.2(15)B, EARLY DEPLOYMENT 
RELEASE SOFTWARE (fc1)

core-gw1.noc uptime is 11 hours, 10 minutes
System returned to ROM by reload at 03:00:12 EDT Wed Oct 26 2016
System restarted at 03:02:54 EDT Wed Oct 26 2016
System image file is "disk2:c7200-ik9su2-mz.123-23.bin"
Last reload reason: Reload command



This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
exp...@cisco.com.

cisco 7206VXR (NPE-G1) processor (revision A) with 491520K/32768K bytes of 
memory.
Processor board ID 20399590
SB-1 CPU at 

Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Nick Cutting
This happens to me on chrome - but not firefox

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mark 
Tinka
Sent: Wednesday, October 26, 2016 9:22 AM
To: Pavel Skovajsa ; Harry Hambi - Atos 

Cc: cisco-nsp NSP 
Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a



On 26/Oct/16 12:42, Pavel Skovajsa wrote:

> On a similar topic of the software download portal. Does it happen to 
> you that when you navigate those software download selections nothing 
> happens after you click on them?
> I drives me mad sometimes as it comes and goes.

It takes a while, but it loads, eventually.

Mark.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread James Bensley
On 26 October 2016 at 13:35, Lukas Tribus  wrote:
>> On a similar topic of the software download portal. Does it happen to you
>> that when you navigate those software download selections nothing happens
>> after you click on them?
>> I drives me mad sometimes as it comes and goes.
>
> Yes. It also happens that it redirects you to a page that only contains
> corrupted content (no html, just random letters, like you would open a zip
> file with notepad). Wait a few hours and it usually goes away.
>
> Its pathetic.


Yeah I get that. Sometimes I am browsing though a Squid proxy and it
seems to be much worse then but I'll have no issues with any other
sides whilst using that proxy. It looks like the encrypted HTTPS
payload is being dumped. 3 refreshes seems to reliably work for some
reason for me :)


Cheers,
James.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco Security Advisory: Cisco Email Security Appliance Corrupted Attachment Fields Denial of Service Vulnerability

2016-10-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Cisco Security Advisory: Cisco Email Security Appliance Corrupted Attachment 
Fields Denial of Service Vulnerability 

Advisory ID: cisco-sa-20161026-esa3

Revision 1.0

For Public Release 2016 October 26 16:00 UTC (GMT)

+-

Summary
===

A vulnerability in the email message filtering feature of Cisco AsyncOS 
Software for Cisco Email Security Appliances could allow an unauthenticated, 
remote attacker to cause an affected device to stop scanning and forwarding 
email messages due to a denial of service (DoS) condition.

The vulnerability is due to improper input validation of email attachments that 
have corrupted fields. An attacker could exploit this vulnerability by sending 
a crafted email message, which has an attachment with corrupted fields, through 
an affected device. When the affected software filters the attachment, the 
filtering process could crash and restart, resulting in a DoS condition. After 
the filtering process restarts, the software resumes filtering for the same 
attachment, causing the filtering process to crash and restart again. A 
successful exploit could allow the attacker to cause a repeated DoS condition.

Cisco has released software updates that address this vulnerability. There are 
no workarounds that address this vulnerability. 

This advisory is available at the following link:
 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa3

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (SunOS)

iQIVAwUBWAedua89gD3EAJB5AQIOlBAA2+nYWHtIoo6idYeCYFiXYxlpVwtDWIjU
7wEleNwd564UN+IY6jTCY+3eW0zPnA0vrk10iwQm7xVy3WTVfqTU/m1TS3fOgSzI
X+stWrOXeU3tWehVfZkBKF5UbSEe8CNU7vAzminsy5dq5hfTHTx/oSXWuB4wV2Be
HMO8IxJRFPV7DO2xz3FkqEf360vTUIoRiP7CGmwZ6+CEp4Lm/LDE3/oVuaHoaj/Q
XrikOqRa4gabGszQ1mSUH+cgqgFRb/MLQaL8AcKd8VYnj8nRIpqAN7W1FvsoXvcZ
O0GreEL9EoBICWXsCuEa/lBGxqPHn9PwRReQu+0RnDzsTXK3Js0vcO77lLmydFb6
6/7ykkJDK7XlldYBBNzc2CvgBVa8/LEsB5xPWV1UplaAxB/dFU4S9JI5Y3AioKJ+
xUD9P68OYTjOguLGvAcCPkLOqKGuchPPYu19QEnMeP5SDA84ooYP+l24OQa5HV6L
hQbxgdXi6NMs50r2SpfpbSrk7pTYW/wUT++uKLl619r1G8EIJJqTdl3PtFvoAoxz
dyLw/hPfyTGHE2ZV0CIlzgBykFUkNp8RhtO1UDPT9Z4Dqod44oLiGroqaul4V77/
zcHvOT4yLWDhwiKm3Dv5my5NvV4+Tc24bBwVj9S8Y/7lxGM/BQJF97AfN7UrH9mA
kLEPJFLPx0k=
=yYBs
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco Security Advisory: Cisco Email Security Appliance Advanced Malware Protection Attachment Scanning Denial of Service Vulnerability

2016-10-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Cisco Security Advisory: Cisco Email Security Appliance Advanced Malware 
Protection Attachment Scanning Denial of Service Vulnerability 

Advisory ID: cisco-sa-20161026-esa2

Revision 1.0

For Public Release 2016 October 26 16:00 UTC (GMT)

+-

Summary
===

A vulnerability in the email attachment scanning functionality of the Advanced 
Malware Protection (AMP) feature of Cisco AsyncOS Software for Cisco Email 
Security Appliances could allow an unauthenticated, remote attacker to cause an 
affected device to stop scanning and forwarding email messages due to a denial 
of service (DoS) condition.

The vulnerability is due to improper handling of UU-encoded files that are 
attached to an email message. An attacker could exploit this vulnerability by 
sending a crafted email message with a UU-encoded file attachment through an 
affected device. The scanning of the attachment could cause the mail handling 
process of the affected software to restart, resulting in a DoS condition. 
After the mail handling process restarts, the software resumes scanning for the 
same attachment, which could cause the mail handling process to restart again. 
A successful exploit could allow the attacker to cause a repeated DoS condition.

Cisco has released software updates that address this vulnerability. There are 
no workarounds that address this vulnerability.

This advisory is available at the following link:
 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa2

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (SunOS)
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=wtS3
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco Security Advisory: Cisco Email Security Appliance Malformed DGN File Attachment Denial of Service Vulnerability

2016-10-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Cisco Security Advisory: Cisco Email Security Appliance Malformed DGN File 
Attachment Denial of Service Vulnerability

Advisory ID: cisco-sa-20161026-esa1

Revision 1.0

For Public Release 2016 October 26 16:00 UTC (GMT)

+-

Summary
===

A vulnerability in the email message filtering feature of Cisco AsyncOS 
Software for Cisco Email Security Appliances could allow an unauthenticated, 
remote attacker to cause a denial of service (DoS) condition on an affected 
device.

The vulnerability exists because the message filtering feature of the affected 
software does not properly validate compressed message attachments that contain 
malformed Design (DGN) files. An attacker could exploit this vulnerability by 
sending a crafted email message, which has a compressed attachment containing a 
malformed DGN file, through an affected device. While the affected software 
filters the attachment, memory could be consumed at a high rate and ultimately 
exhausted, causing the filtering process to restart and resulting in a DoS 
condition. After the filtering process restarts, the software resumes filtering 
for the same attachment, causing the filtering process to exhaust memory and 
restart again. A successful exploit of this vulnerability could allow the 
attacker to cause a repeated DoS condition.

Cisco has released software updates that address this vulnerability. There are 
no workarounds that address this vulnerability.

This advisory is available at the following link: 

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-esa1

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (SunOS)
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=watm
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Cisco Security Advisory: Cisco IP Interoperability and Collaboration System Universal Media Services Unauthorized Access Vulnerability

2016-10-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Cisco IP Interoperability and Collaboration System Universal Media Services 
Unauthorized Access Vulnerability

Advisory ID: cisco-sa-20161026-ipics

Revision: 1.0

For Public Release 2016 October 26 16:00 GMT

+-


Summary
===

A vulnerability in the interdevice communications interface of the Cisco IP 
Interoperability and Collaboration System (IPICS) Universal Media Services 
(UMS) could allow an unauthenticated, remote attacker to modify configuration 
parameters of the UMS and cause the system to become unavailable.

The vulnerability is due to insufficient authentication for the interdevice 
communications interface access. An attacker could exploit this issue by 
accessing the interdevice communications interface and making changes to the 
UMS configuration, causing the system to become unavailable.

Cisco has released software updates that address this vulnerability. There are 
no workarounds that address this vulnerability.

This advisory is available at the following link: 
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics

-BEGIN PGP SIGNATURE-
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=o3dI
-END PGP SIGNATURE-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Mark Tinka


On 26/Oct/16 12:42, Pavel Skovajsa wrote:

> On a similar topic of the software download portal. Does it happen to you
> that when you navigate those software download selections nothing happens
> after you click on them?
> I drives me mad sometimes as it comes and goes.

It takes a while, but it loads, eventually.

Mark.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] IPsec on IOS-XR?

2016-10-26 Thread Curtis Piehler
What Ted said :)  unless you want to drop 5 USD on 1 VSM it is more
cost effective to buy a smaller 1k for a dedicated ipsec endpoint

On Oct 26, 2016 8:57 AM, "Hank Nussbacher"  wrote:

> On 26/10/2016 15:26, Curtis Piehler wrote:
>
> I have ASR1000s.  But I need it on an ASR9000. :-(
>
> -Hank
>
> You are better off buying an ASR1000.   They are designed to do ipsec at
> near line rate
>
> On Oct 26, 2016 8:13 AM, "Hank Nussbacher"  wrote:
>
> I am following the IPsec example here:
> http://www.cisco.com/c/en/us/support/docs/ip/generic-routing
> -encapsulation-gre/9221-quicktip.html
> and have managed to alter the syntax to fit with IOS-XR but when I get
> to crypto map commands:
>
> *crypto map myvpn 10 ipsec-isakmp set peer 192.168.2.2 set transform-set
> to_fred match address 101 *
>
> I cannot find any comparable command syntax in IOS-XR:
> RP/0/RSP0/CPU0:petach-tikva-gp(config)#crypto map VPN 15 gdoi
> ?
>   fail-close  Specify a fail-close ACL.
>   interface   Enable crypto map on an interface
>   ipsec-node  Set the ipsec node on this crypto map
>   match   Match values.
>   set Set values
>
> What am I missing?
>
> Thanks,
> Hank
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] IPsec on IOS-XR?

2016-10-26 Thread Ted Johansson
You will need to buy the VSM or the ISM line card if you wish to do IPsec on 
ASR9K.

Best Regards
Ted

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Hank 
Nussbacher
Sent: den 26 oktober 2016 14:57
To: Curtis Piehler 
Cc: Cisco Network Service Providers 
Subject: Re: [c-nsp] IPsec on IOS-XR?

On 26/10/2016 15:26, Curtis Piehler wrote:

I have ASR1000s.  But I need it on an ASR9000. :-(

-Hank

> You are better off buying an ASR1000.   They are designed to do ipsec
> at near line rate
>
>
> On Oct 26, 2016 8:13 AM, "Hank Nussbacher"  > wrote:
>
> I am following the IPsec example here:
> 
> http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/9221-quicktip.html
> 
> 
> and have managed to alter the syntax to fit with IOS-XR but when I get
> to crypto map commands:
>
> *crypto map myvpn 10 ipsec-isakmp set peer 192.168.2.2 set
> transform-set
> to_fred match address 101 *
>
> I cannot find any comparable command syntax in IOS-XR:
> RP/0/RSP0/CPU0:petach-tikva-gp(config)#crypto map VPN 15 gdoi
> ?
>   fail-close  Specify a fail-close ACL.
>   interface   Enable crypto map on an interface
>   ipsec-node  Set the ipsec node on this crypto map
>   match   Match values.
>   set Set values
>
> What am I missing?
>
> Thanks,
> Hank
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> 
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> 
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
>
>

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

 IMPORTANT NOTICE 
The content of this e-mail is intended for the addressee(s) only and may 
contain information that is confidential and/or otherwise protected from 
disclosure. If you are not the intended recipient, please note that any 
copying, distribution or any other use or dissemination of the information 
contained in this e-mail (and its attachments) is strictly prohibited. If you 
have received this e-mail in error, kindly notify the sender immediately by 
replying to this e-mail and delete the e-mail and any copies thereof.

Tele2 AB (publ) and its subsidiaries (“Tele2 Group”) accepts no responsibility 
for the consequences of any viruses, corruption or other interference 
transmitted by e-mail.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] IPsec on IOS-XR?

2016-10-26 Thread Hank Nussbacher
On 26/10/2016 15:26, Curtis Piehler wrote:

I have ASR1000s.  But I need it on an ASR9000. :-(

-Hank

> You are better off buying an ASR1000.   They are designed to do ipsec
> at near line rate
>
>
> On Oct 26, 2016 8:13 AM, "Hank Nussbacher"  > wrote:
>
> I am following the IPsec example here:
> 
> http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/9221-quicktip.html
> 
> 
> and have managed to alter the syntax to fit with IOS-XR but when I get
> to crypto map commands:
>
> *crypto map myvpn 10 ipsec-isakmp set peer 192.168.2.2 set
> transform-set
> to_fred match address 101 *
>
> I cannot find any comparable command syntax in IOS-XR:
> RP/0/RSP0/CPU0:petach-tikva-gp(config)#crypto map VPN 15 gdoi
> ?
>   fail-close  Specify a fail-close ACL.
>   interface   Enable crypto map on an interface
>   ipsec-node  Set the ipsec node on this crypto map
>   match   Match values.
>   set Set values
>
> What am I missing?
>
> Thanks,
> Hank
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> 
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> 
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
>
>

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Lukas Tribus
> On a similar topic of the software download portal. Does it happen to you
> that when you navigate those software download selections nothing happens
> after you click on them?
> I drives me mad sometimes as it comes and goes.

Yes. It also happens that it redirects you to a page that only contains
corrupted content (no html, just random letters, like you would open a zip
file with notepad). Wait a few hours and it usually goes away.

Its pathetic.



Lukas
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] IPsec on IOS-XR?

2016-10-26 Thread Curtis Piehler
You are better off buying an ASR1000.   They are designed to do ipsec at
near line rate

On Oct 26, 2016 8:13 AM, "Hank Nussbacher"  wrote:

I am following the IPsec example here:
http://www.cisco.com/c/en/us/support/docs/ip/generic-
routing-encapsulation-gre/9221-quicktip.html
and have managed to alter the syntax to fit with IOS-XR but when I get
to crypto map commands:

*crypto map myvpn 10 ipsec-isakmp set peer 192.168.2.2 set transform-set
to_fred match address 101 *

I cannot find any comparable command syntax in IOS-XR:
RP/0/RSP0/CPU0:petach-tikva-gp(config)#crypto map VPN 15 gdoi
?
  fail-close  Specify a fail-close ACL.
  interface   Enable crypto map on an interface
  ipsec-node  Set the ipsec node on this crypto map
  match   Match values.
  set Set values

What am I missing?

Thanks,
Hank
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] IPsec on IOS-XR?

2016-10-26 Thread Hank Nussbacher
I am following the IPsec example here:
http://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/9221-quicktip.html
and have managed to alter the syntax to fit with IOS-XR but when I get
to crypto map commands:

*crypto map myvpn 10 ipsec-isakmp set peer 192.168.2.2 set transform-set
to_fred match address 101 *

I cannot find any comparable command syntax in IOS-XR:
RP/0/RSP0/CPU0:petach-tikva-gp(config)#crypto map VPN 15 gdoi
? 
  fail-close  Specify a fail-close ACL.
  interface   Enable crypto map on an interface
  ipsec-node  Set the ipsec node on this crypto map
  match   Match values.
  set Set values

What am I missing?

Thanks,
Hank
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Pavel Skovajsa
On a similar topic of the software download portal. Does it happen to you
that when you navigate those software download selections nothing happens
after you click on them?
I drives me mad sometimes as it comes and goes.

-pavel

Dňa 26.10.2016 11:30 používateľ "Harry Hambi - Atos" 
napísal:

> Hi Ted,
> Manage to find eventually, thanks for your help.
>
>
> Rgds
> Harry
>
> Harry Hambi BEng(Hons)  MIET  Rsgb
>
>
> -Original Message-
> From: Ted Johansson [mailto:ted.johans...@tele2.com]
> Sent: 26 October 2016 10:13
> To: Harry Hambi - Atos
> Cc: cisco-nsp@puck.nether.net
> Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a
>
> Hi Harry,
>
> Go to software.cisco.com
> Software Download
> Find: ASR 1001-X
> IOS XE Software
>
> And you should be able to select your requested software there.
>
> Best Regards
> Ted
>
> Sent from my Phone
>
> > On 26 Oct 2016, at 11:09, Harry Hambi - Atos 
> wrote:
> >
> > Thanks Ted,
> > The hardware platforms are 1001 & 1001-X
> > 1002 & 1002-X. I find the Cisco site time consuming to get to where you
> want.
> >
> >
> > Rgds
> > Harry
> >
> > Harry Hambi BEng(Hons)  MIET  Rsgb
> >
> > -Original Message-
> > From: Ted Johansson [mailto:ted.johans...@tele2.com]
> > Sent: 26 October 2016 10:02
> > To: Harry Hambi - Atos
> > Cc: cisco-nsp@puck.nether.net
> > Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a
> >
> > Hi Harry,
> >
> > You will need to look at that specific device that you wish to download
> the software for since it's different images for different platforms and
> models.
> >
> > Best Regards
> > Ted
> >
> > Sent from my Phone
> >
> >> On 26 Oct 2016, at 10:50, Harry Hambi - Atos 
> wrote:
> >>
> >> Hi All,
> >> Looking to download above firmware for ASR, the nearest I can find is
> iosxe-remote-mgmt03.16.04a S 155.3.S4a-ext.ova. This don't look right, any
> ideas appreciated.
> >>
> >>
> >> Rgds
> >> Harry
> >>
> >> Harry Hambi BEng(Hons)  MIET  Rsgb
> >>
> >> ___
> >> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/cisco-nsp
> >> archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> >  IMPORTANT NOTICE 
> > The content of this e-mail is intended for the addressee(s) only and may
> contain information that is confidential and/or otherwise protected from
> disclosure. If you are not the intended recipient, please note that any
> copying, distribution or any other use or dissemination of the information
> contained in this e-mail (and its attachments) is strictly prohibited. If
> you have received this e-mail in error, kindly notify the sender
> immediately by replying to this e-mail and delete the e-mail and any copies
> thereof.
> >
> > Tele2 AB (publ) and its subsidiaries ("Tele2 Group") accepts no
> responsibility for the consequences of any viruses, corruption or other
> interference transmitted by e-mail.
> >
> >
> > -
> > http://www.bbc.co.uk
> > This e-mail (and any attachments) is confidential and
> > may contain personal views which are not the views of the BBC unless
> specifically stated.
> > If you have received it in
> > error, please delete it from your system.
> > Do not use, copy or disclose the
> > information in any way nor act in reliance on it and notify the sender
> > immediately.
> > Please note that the BBC monitors e-mails
> > sent or received.
> > Further communication will signify your consent to
> > this.
> > -
>
>  IMPORTANT NOTICE 
> The content of this e-mail is intended for the addressee(s) only and may
> contain information that is confidential and/or otherwise protected from
> disclosure. If you are not the intended recipient, please note that any
> copying, distribution or any other use or dissemination of the information
> contained in this e-mail (and its attachments) is strictly prohibited. If
> you have received this e-mail in error, kindly notify the sender
> immediately by replying to this e-mail and delete the e-mail and any copies
> thereof.
>
> Tele2 AB (publ) and its subsidiaries ("Tele2 Group") accepts no
> responsibility for the consequences of any viruses, corruption or other
> interference transmitted by e-mail.
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Harry Hambi - Atos
Hi Ted,
Manage to find eventually, thanks for your help.

 
Rgds
Harry
 
Harry Hambi BEng(Hons)  MIET  Rsgb


-Original Message-
From: Ted Johansson [mailto:ted.johans...@tele2.com] 
Sent: 26 October 2016 10:13
To: Harry Hambi - Atos
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a

Hi Harry,

Go to software.cisco.com
Software Download
Find: ASR 1001-X
IOS XE Software

And you should be able to select your requested software there.

Best Regards
Ted

Sent from my Phone

> On 26 Oct 2016, at 11:09, Harry Hambi - Atos  wrote:
>
> Thanks Ted,
> The hardware platforms are 1001 & 1001-X
> 1002 & 1002-X. I find the Cisco site time consuming to get to where you want.
>
>
> Rgds
> Harry
>
> Harry Hambi BEng(Hons)  MIET  Rsgb
>
> -Original Message-
> From: Ted Johansson [mailto:ted.johans...@tele2.com]
> Sent: 26 October 2016 10:02
> To: Harry Hambi - Atos
> Cc: cisco-nsp@puck.nether.net
> Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a
>
> Hi Harry,
>
> You will need to look at that specific device that you wish to download the 
> software for since it's different images for different platforms and models.
>
> Best Regards
> Ted
>
> Sent from my Phone
>
>> On 26 Oct 2016, at 10:50, Harry Hambi - Atos  wrote:
>>
>> Hi All,
>> Looking to download above firmware for ASR, the nearest I can find is 
>> iosxe-remote-mgmt03.16.04a S 155.3.S4a-ext.ova. This don't look right, any 
>> ideas appreciated.
>>
>>
>> Rgds
>> Harry
>>
>> Harry Hambi BEng(Hons)  MIET  Rsgb
>>
>> ___
>> cisco-nsp mailing list  cisco-nsp@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>  IMPORTANT NOTICE 
> The content of this e-mail is intended for the addressee(s) only and may 
> contain information that is confidential and/or otherwise protected from 
> disclosure. If you are not the intended recipient, please note that any 
> copying, distribution or any other use or dissemination of the information 
> contained in this e-mail (and its attachments) is strictly prohibited. If you 
> have received this e-mail in error, kindly notify the sender immediately by 
> replying to this e-mail and delete the e-mail and any copies thereof.
>
> Tele2 AB (publ) and its subsidiaries ("Tele2 Group") accepts no 
> responsibility for the consequences of any viruses, corruption or other 
> interference transmitted by e-mail.
>
>
> -
> http://www.bbc.co.uk
> This e-mail (and any attachments) is confidential and
> may contain personal views which are not the views of the BBC unless 
> specifically stated.
> If you have received it in
> error, please delete it from your system.
> Do not use, copy or disclose the
> information in any way nor act in reliance on it and notify the sender
> immediately.
> Please note that the BBC monitors e-mails
> sent or received.
> Further communication will signify your consent to
> this.
> -

 IMPORTANT NOTICE 
The content of this e-mail is intended for the addressee(s) only and may 
contain information that is confidential and/or otherwise protected from 
disclosure. If you are not the intended recipient, please note that any 
copying, distribution or any other use or dissemination of the information 
contained in this e-mail (and its attachments) is strictly prohibited. If you 
have received this e-mail in error, kindly notify the sender immediately by 
replying to this e-mail and delete the e-mail and any copies thereof.

Tele2 AB (publ) and its subsidiaries ("Tele2 Group") accepts no responsibility 
for the consequences of any viruses, corruption or other interference 
transmitted by e-mail.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Ted Johansson
Hi Harry,

Go to software.cisco.com
Software Download
Find: ASR 1001-X
IOS XE Software

And you should be able to select your requested software there.

Best Regards
Ted

Sent from my Phone

> On 26 Oct 2016, at 11:09, Harry Hambi - Atos  wrote:
>
> Thanks Ted,
> The hardware platforms are 1001 & 1001-X
> 1002 & 1002-X. I find the Cisco site time consuming to get to where you want.
>
>
> Rgds
> Harry
>
> Harry Hambi BEng(Hons)  MIET  Rsgb
>
> -Original Message-
> From: Ted Johansson [mailto:ted.johans...@tele2.com]
> Sent: 26 October 2016 10:02
> To: Harry Hambi - Atos
> Cc: cisco-nsp@puck.nether.net
> Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a
>
> Hi Harry,
>
> You will need to look at that specific device that you wish to download the 
> software for since it's different images for different platforms and models.
>
> Best Regards
> Ted
>
> Sent from my Phone
>
>> On 26 Oct 2016, at 10:50, Harry Hambi - Atos  wrote:
>>
>> Hi All,
>> Looking to download above firmware for ASR, the nearest I can find is 
>> iosxe-remote-mgmt03.16.04a S 155.3.S4a-ext.ova. This don't look right, any 
>> ideas appreciated.
>>
>>
>> Rgds
>> Harry
>>
>> Harry Hambi BEng(Hons)  MIET  Rsgb
>>
>> ___
>> cisco-nsp mailing list  cisco-nsp@puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>  IMPORTANT NOTICE 
> The content of this e-mail is intended for the addressee(s) only and may 
> contain information that is confidential and/or otherwise protected from 
> disclosure. If you are not the intended recipient, please note that any 
> copying, distribution or any other use or dissemination of the information 
> contained in this e-mail (and its attachments) is strictly prohibited. If you 
> have received this e-mail in error, kindly notify the sender immediately by 
> replying to this e-mail and delete the e-mail and any copies thereof.
>
> Tele2 AB (publ) and its subsidiaries (“Tele2 Group”) accepts no 
> responsibility for the consequences of any viruses, corruption or other 
> interference transmitted by e-mail.
>
>
> -
> http://www.bbc.co.uk
> This e-mail (and any attachments) is confidential and
> may contain personal views which are not the views of the BBC unless 
> specifically stated.
> If you have received it in
> error, please delete it from your system.
> Do not use, copy or disclose the
> information in any way nor act in reliance on it and notify the sender
> immediately.
> Please note that the BBC monitors e-mails
> sent or received.
> Further communication will signify your consent to
> this.
> -

 IMPORTANT NOTICE 
The content of this e-mail is intended for the addressee(s) only and may 
contain information that is confidential and/or otherwise protected from 
disclosure. If you are not the intended recipient, please note that any 
copying, distribution or any other use or dissemination of the information 
contained in this e-mail (and its attachments) is strictly prohibited. If you 
have received this e-mail in error, kindly notify the sender immediately by 
replying to this e-mail and delete the e-mail and any copies thereof.

Tele2 AB (publ) and its subsidiaries (“Tele2 Group”) accepts no responsibility 
for the consequences of any viruses, corruption or other interference 
transmitted by e-mail.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Harry Hambi - Atos
Thanks Ted,
The hardware platforms are 1001 & 1001-X
1002 & 1002-X. I find the Cisco site time consuming to get to where you want.


Rgds
Harry

Harry Hambi BEng(Hons)  MIET  Rsgb

-Original Message-
From: Ted Johansson [mailto:ted.johans...@tele2.com]
Sent: 26 October 2016 10:02
To: Harry Hambi - Atos
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASR Firmware 15.5(3)S4a

Hi Harry,

You will need to look at that specific device that you wish to download the 
software for since it's different images for different platforms and models.

Best Regards
Ted

Sent from my Phone

> On 26 Oct 2016, at 10:50, Harry Hambi - Atos  wrote:
>
> Hi All,
> Looking to download above firmware for ASR, the nearest I can find is 
> iosxe-remote-mgmt03.16.04a S 155.3.S4a-ext.ova. This don't look right, any 
> ideas appreciated.
>
>
> Rgds
> Harry
>
> Harry Hambi BEng(Hons)  MIET  Rsgb
>
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

 IMPORTANT NOTICE 
The content of this e-mail is intended for the addressee(s) only and may 
contain information that is confidential and/or otherwise protected from 
disclosure. If you are not the intended recipient, please note that any 
copying, distribution or any other use or dissemination of the information 
contained in this e-mail (and its attachments) is strictly prohibited. If you 
have received this e-mail in error, kindly notify the sender immediately by 
replying to this e-mail and delete the e-mail and any copies thereof.

Tele2 AB (publ) and its subsidiaries (“Tele2 Group”) accepts no responsibility 
for the consequences of any viruses, corruption or other interference 
transmitted by e-mail.


-
http://www.bbc.co.uk
This e-mail (and any attachments) is confidential and
may contain personal views which are not the views of the BBC unless 
specifically stated.
If you have received it in
error, please delete it from your system.
Do not use, copy or disclose the
information in any way nor act in reliance on it and notify the sender
immediately.
Please note that the BBC monitors e-mails
sent or received.
Further communication will signify your consent to
this.
-
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Ted Johansson
Hi Harry,

You will need to look at that specific device that you wish to download the 
software for since it's different images for different platforms and models.

Best Regards
Ted

Sent from my Phone

> On 26 Oct 2016, at 10:50, Harry Hambi - Atos  wrote:
>
> Hi All,
> Looking to download above firmware for ASR, the nearest I can find is 
> iosxe-remote-mgmt03.16.04a S 155.3.S4a-ext.ova. This don't look right, any 
> ideas appreciated.
>
>
> Rgds
> Harry
>
> Harry Hambi BEng(Hons)  MIET  Rsgb
>
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

 IMPORTANT NOTICE 
The content of this e-mail is intended for the addressee(s) only and may 
contain information that is confidential and/or otherwise protected from 
disclosure. If you are not the intended recipient, please note that any 
copying, distribution or any other use or dissemination of the information 
contained in this e-mail (and its attachments) is strictly prohibited. If you 
have received this e-mail in error, kindly notify the sender immediately by 
replying to this e-mail and delete the e-mail and any copies thereof.

Tele2 AB (publ) and its subsidiaries (“Tele2 Group”) accepts no responsibility 
for the consequences of any viruses, corruption or other interference 
transmitted by e-mail.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] ASR Firmware 15.5(3)S4a

2016-10-26 Thread Harry Hambi - Atos
Hi All,
Looking to download above firmware for ASR, the nearest I can find is 
iosxe-remote-mgmt03.16.04a S 155.3.S4a-ext.ova. This don't look right, any 
ideas appreciated.


Rgds
Harry

Harry Hambi BEng(Hons)  MIET  Rsgb

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/