Re: [c-nsp] ASR1002-X (2) full BGP feeds

2015-04-24 Thread Gustav UHLANDER
Hello
That was also the case for the ASR1001 but we just checked the specification 
for the ram and then sought out some compatible sticks (seems like HP has some 
server that uses the same specification) When that was done all we needed to do 
was to see who was making sticks to compatible with the HP Spare part number. :)

Gustav UHLANDER
Senior Communication  Infrastructure Engineer

Sopra Steria
Kungsbron 13
Box 169
SE-101 23 Stockholm - Sweden
Phone: +46 8 622 42 00 - Mobile: +46 70 962 71 03
gustav.ulan...@soprasteria.com www.soprasteria.se
The content of this message may be confidential, legally privileged and 
protected by law. Unauthorized use, copying or disclosure of any of it may be 
unlawful. If you are not the intended recipient please notify the sender and 
remove it from your system. While attachments to this e-mail are checked for 
viruses, we do not accept any liability for any damage sustained by viruses.
Before printing, think about the environment.

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Adam 
Greene
Sent: den 24 april 2015 00:17
To: 'Scott Granados'
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASR1002-X  (2) full BGP feeds

Good to know. Thanks, Scott.

Unfortunately, it looks like Kingston does not carry RAM for the ASR1002-X ...

Will keep hunting!

-Original Message-
From: Scott Granados [mailto:sc...@granados-llc.net]
Sent: Thursday, April 23, 2015 10:52 AM
To: Adam Greene
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASR1002-X  (2) full BGP feeds

Kingston all the way.  At least for a while I know they were the company having 
their memory rebranded.  Not sure if this is still the case but have had very 
good luck with their memory modules  in Cisco devices.


On Apr 23, 2015, at 10:48 AM, Adam Greene maill...@webjogger.net wrote:

 Hi guys,
 
 Following up on this thread ... is there a particular non-Cisco RAM 
 manufacturer you've had good experience with (for example, a vendor 
 known to sell re-branded Cisco RAM?).
 
 You can hit me off-list if preferred.
 
 Thanks,
 Adam
 
 
 -Original Message-
 From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf 
 Of Adam Greene
 Sent: Friday, March 20, 2015 1:51 PM
 To: cisco-nsp@puck.nether.net
 Subject: Re: [c-nsp] ASR1002-X  (2) full BGP feeds
 
 Thanks, guys, for all the feedback.
 
 Summary: 
 - ASR1002-X with default processor and 8GB RAM is plenty for (2) full
 BGP feeds
 - if buying non-Cisco RAM, 16GB is cheap, so consider doing it now
 rather than later to avoid headaches
 - (2) full BGP feeds will be well below 1,000,000 FIB limit (which is
 comprised only of best routes)
 
 Besides the risk of not being able to obtain support from Cisco (and 
 maybe being billed by them) if a problem is traced to the third-party 
 RAM 
 (http://www.cisco.com/c/en/us/products/prod_warranty09186a00800b5594.h
 tml), does anyone see any issue with using non-Cisco RAM? Is it 
 generally just as reliable as the Cisco stuff?
 
 Thanks again,
 Adam
 
 
 
 -Original Message-
 From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf 
 Of Mark Tinka
 Sent: Friday, March 20, 2015 1:40 AM
 To: cisco-nsp@puck.nether.net
 Subject: Re: [c-nsp] ASR1002-X  (2) full BGP feeds
 
 
 
 On 19/Mar/15 15:57, Lukas Tribus wrote:
 In my opinion this box should work fine with 8GB RAM both from a 
 memory and CPU perspective, even with 2 or more full feeds. I have 
 ASR1004-RP2s with 8GB RAM doing a similar job (in MPLS VPNs), its 
 fine. ASR1002-X is a refreshed RP2 afaik.
 
 RP1 with 4GB RAM, not su much ...
 
 I've got tons of ASR1002-X's with 16GB of RAM running 2x full IPv4 and
 IPv6 feeds. No complaints.
 
 My guess is I'll run out of physical ports and ESP bandwidth before I 
 run out of RAM and FIB memory :-).
 
 Mark.
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Slightly off-topic - Network Monitoring software

2015-04-24 Thread Gustav UHLANDER
Hello
We are using Observium for this at present. 
It works well for us and is available both in a commercial and free license. 
Commercial license is also rather cheap. 
It works pretty good with nice graphs and customizable alert levels. 
Also it understands Pseudowires ok from most plattforms and has support for the 
most popular manufacturers. 

Gustav UHLANDER
Senior Communication  Infrastructure Engineer

Sopra Steria
Kungsbron 13
Box 169
SE-101 23 Stockholm - Sweden
Phone: +46 8 622 42 00 - Mobile: +46 70 962 71 03
gustav.ulan...@soprasteria.com www.soprasteria.se
The content of this message may be confidential, legally privileged and 
protected by law. Unauthorized use, copying or disclosure of any of it may be 
unlawful. If you are not the intended recipient please notify the sender and 
remove it from your system. While attachments to this e-mail are checked for 
viruses, we do not accept any liability for any damage sustained by viruses.
Before printing, think about the environment.

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Scott 
Granados
Sent: den 24 april 2015 12:53
To: CiscoNSP List
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Slightly off-topic - Network Monitoring software

I would also add Nagios to the list.  Open NMS has also been useful in the past 
and groundwork was interesting all be it expensive for the fully baked 
commercial version.

On Apr 24, 2015, at 12:00 AM, CiscoNSP List cisconsp_l...@hotmail.com wrote:

 Hi Everyone,
 
 Slightly off-topic, but we currently use Solarwinds - It works, is 
 functional, but some parts of it (Alerting for example), I find a bit 
 cumbersome.  
 
 Ive had a look at some alternatives, and came across Opmantekhad a look 
 at a demo, and first impressions were positive...looks good, Interface 
 appears intuitive+fairly easy to modifyjust wondering if anyone is using 
 it in production, and how they find it?
 
 Cheers.
 
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Alternate to TOR (4948)

2015-04-15 Thread Gustav UHLANDER
Yea thats our thought also no niggles just plain sailing :)

Gustav UHLANDER
Senior Communication  Infrastructure Engineer

Sopra Steria
Kungsbron 13
Box 169
SE-101 23 Stockholm - Sweden
Phone: +46 8 622 42 00 - Mobile: +46 70 962 71 03
gustav.ulan...@soprasteria.com www.soprasteria.se
The content of this message may be confidential, legally privileged and 
protected by law. Unauthorized use, copying or disclosure of any of it may be 
unlawful. If you are not the intended recipient please notify the sender and 
remove it from your system. While attachments to this e-mail are checked for 
viruses, we do not accept any liability for any damage sustained by viruses.
Before printing, think about the environment.

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Ian 
Henderson
Sent: den 15 april 2015 11:27
To: CiscoNSP List
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Alternate to TOR (4948)

On 15 Apr 2015, at 9:08 am, CiscoNSP List cisconsp_l...@hotmail.com wrote:
 
 Nexus 3000's ? (Option to do VPC with multiple 3000's in one rack back 
 to core/agg switches?)

Just installed two 3048’s to replace a Cat65k/Sup2. Configured vPC with LACP 
towards switches, ESX, Filers and Windows machines. Very happy with them, very 
good price. Haven’t thrashed them particularly hard - just simple L2 - but its 
seems to ‘just work’.

Rgds,


- I.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Alternate to TOR (4948)

2015-04-15 Thread Gustav UHLANDER
Hello.
Yea we are aware of that but we were pleasantly surprised with no buffer drops 
actually.
We are having a bunch of old ESX servers on these also with lots of north/south 
traffic so it doesn't seem to be that big of an issue at least not for us with 
our traffic profiles.

/Gustav

From: CiscoNSP List [mailto:cisconsp_l...@hotmail.com]
Sent: den 15 april 2015 10:44
To: Gustav UHLANDER; Bill Woodcock
Cc: cisco-nsp@puck.nether.net
Subject: RE: [c-nsp] Alternate to TOR (4948)


Thanks Gustav - Notice there is a difference in buffer size (4948 v Nexus), but 
store and forward vs cut-though may make the buffer difference moot?


Any issues with micro bursts causing drops on the Nexus? (As we see virtually 
none on the 4948's)


Cheers.


 From: gustav.ulan...@soprasteria.commailto:gustav.ulan...@soprasteria.com
 To: wo...@pch.netmailto:wo...@pch.net; 
 cisconsp_l...@hotmail.commailto:cisconsp_l...@hotmail.com
 CC: cisco-nsp@puck.nether.netmailto:cisco-nsp@puck.nether.net
 Subject: RE: [c-nsp] Alternate to TOR (4948)
 Date: Wed, 15 Apr 2015 08:29:29 +

 Hello.
 Yes we are using Nexus 3048 for TOR when 10 Ge isn't necessary so that is the 
 direct replacement for our 4948E TOR switches.
 We are generally very pleased with them both price, feature and performance 
 wise.
 However these are getting rather old now so we are woundering if they are 
 being EOLed soon.

 //Gustav.

 -Original Message-
 From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Bill 
 Woodcock
 Sent: den 15 april 2015 02:59
 To: CiscoNSP List
 Cc: cisco-nsp@puck.nether.netmailto:cisco-nsp@puck.nether.net
 Subject: Re: [c-nsp] Alternate to TOR (4948)


  On Apr 14, 2015, at 5:24 PM, CiscoNSP List 
  cisconsp_l...@hotmail.commailto:cisconsp_l...@hotmail.com wrote:
 
  Thanks Bill - So you've been happy with the Nexus? Have you moved from the 
  Cat range to Nexus?

 Yes, entirely, as of about two years ago. Very happy with them.

 -Bill




___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Alternate to TOR (4948)

2015-04-15 Thread Gustav UHLANDER
Hello.
Yes we are using Nexus 3048 for TOR when 10 Ge isn't necessary so that is the 
direct replacement for our 4948E TOR switches. 
We are generally very pleased with them both price, feature and performance 
wise. 
However these are getting rather old now so we are woundering if they are being 
EOLed soon. 

//Gustav.

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Bill 
Woodcock
Sent: den 15 april 2015 02:59
To: CiscoNSP List
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Alternate to TOR (4948)


 On Apr 14, 2015, at 5:24 PM, CiscoNSP List cisconsp_l...@hotmail.com wrote:
 
 Thanks Bill - So you've been happy with the Nexus?  Have you moved from the 
 Cat range to Nexus?

Yes, entirely, as of about two years ago.  Very happy with them.

-Bill




___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Whatsup Calls

2015-04-02 Thread Gustav UHLANDER
Hello Ytti.
I tend to agree. 
Often it is not the ones that write to this list that makes policy but often 
just try to come up with ways to enforce it. 

Gustav UHLANDER
Senior Communication  Infrastructure Engineer

Sopra Steria
Kungsbron 13
Box 169
SE-101 23 Stockholm - Sweden
Phone: +46 8 622 42 00 - Mobile: +46 70 962 71 03
gustav.ulan...@soprasteria.com www.soprasteria.se
The content of this message may be confidential, legally privileged and 
protected by law. Unauthorized use, copying or disclosure of any of it may be 
unlawful. If you are not the intended recipient please notify the sender and 
remove it from your system. While attachments to this e-mail are checked for 
viruses, we do not accept any liability for any damage sustained by viruses.
Before printing, think about the environment.

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Saku 
Ytti
Sent: den 2 april 2015 15:49
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Whatsup Calls

On (2015-04-02 13:06 +0300), M K wrote:

 Whatsup released voice recently , i wonder does Cisco SCE has the ability to 
 block it ?

Sorry, no clue. But from some responses you got, I'm emphatically people would 
keep political and commercial agendas out from c-nsp. This is technical 
question and merits technical answer.

If I'd ask how to setup netflow on this forum, I wouldn't want answer that I 
should stop spying on my customers.

--
  ++ytti
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2015.0.5856 / Virus Database: 4315/9400 - Release Date: 03/28/15
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR1002-X (2) full BGP feeds

2015-03-19 Thread Gustav UHLANDER
Hello Adam.
We are running a couple of ASR1001 with 8Gb memory with 2 full feeds and some 
minor L3vpns in the same box without issue. 

Gustav UHLANDER
Senior Communication  Infrastructure Engineer

Sopra Steria
Kungsbron 13
Box 169
SE-101 23 Stockholm - Sweden
Phone: +46 8 622 42 00 - Mobile: +46 70 962 71 03
gustav.ulan...@soprasteria.com www.soprasteria.se
The content of this message may be confidential, legally privileged and 
protected by law. Unauthorized use, copying or disclosure of any of it may be 
unlawful. If you are not the intended recipient please notify the sender and 
remove it from your system. While attachments to this e-mail are checked for 
viruses, we do not accept any liability for any damage sustained by viruses.
Before printing, think about the environment.

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Lukas 
Tribus
Sent: den 19 mars 2015 14:57
To: Adam Greene; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASR1002-X  (2) full BGP feeds

Hi Adam,


 We have a customer with an ASR1002-X supporting redundant links to the 
 Internet, currently taking only default routes to both in a 
 primary/failover scenario. However, they want to have the absolute 
 best path to all destinations to the Internet, and so are considering 
 taking full routes from both providers.



 According to their research the ASR1002-X supports up to 1,000,000 
 routes and to support two full BGP feeds, Cisco recommends upgrading 
 from the default 1 GB RAM to 16 GB RAM.

In my opinion this box should work fine with 8GB RAM both from a memory and CPU 
perspective, even with 2 or more full feeds. I have ASR1004-RP2s with 8GB RAM 
doing a similar job (in MPLS VPNs), its fine. ASR1002-X is a refreshed RP2 
afaik.

RP1 with 4GB RAM, not su much ...


Lukas

  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco Nexus 9500

2014-12-29 Thread Gustav UHLANDER
Hello Skeeve.
We are running the smaller 9300 series platform and in our experience there is 
still some bugs and missing features that are still there. 
We are missing multihomed FEXes for instance. 
We have also had some issues with some features that was in the documentation 
but when asking TAC why the commands aren't there we where informed that the 
platform didn't have support for it and that they would remove it from the 
documentation (MP-BGP in that case).
It seems that the platform isn't quite ready yet and that new features is being 
added with each and every new release of software. 
I cannot say if the same is true for the 9500 platform but I suspect it is 
seeing as the two are more or less the same platform as I understand it. Could 
be wrong on that one though. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Skeeve 
Stevens
Sent: den 24 december 2014 17:15
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Cisco Nexus 9500

Hi all,

I am considering selecting the Nexus 9500 series for a project.  I've 
seen/heard/read all the good stuff, and I want to know if there are any major 
issues/horror stories about this platform.

Any comments/experiences won't necessarily change my mind, but I'd like to know 
what I'm in for.

Feel free to reply off-list.

...Skeeve

*Skeeve Stevens - *eintellego Networks Pty Ltd ske...@eintellegonetworks.com ; 
www.eintellegonetworks.com

Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve

facebook.com/eintellegonetworks ;  http://twitter.com/networkceoau 
linkedin.com/in/skeeve

twitter.com/theispguy ; blog: www.theispguy.com


The Experts Who The Experts Call
Juniper - Cisco - Cumulus Linux - Cloud - Consulting - IPv4 Brokering 
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] VZW 4G LTE Interface Card

2014-12-10 Thread Gustav UHLANDER
Hello
We have a number of those connected and in use. 
We use the EHWIC-4G-LTE-G version of it. 
The only complaint we have is that the connection sometimes suffer from 
packetloss and a reboot is required to clear it up. 
Although we haven't done any more in-depth analysis of it since the nature of 
the connection has been best effort in nature. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Blake 
Dunlap
Sent: den 10 december 2014 02:52
To: Mike Hale
Cc: cisco-nsp@pu ck.nether.net
Subject: Re: [c-nsp] VZW 4G LTE Interface Card

The software got much better in the last year or two. It works pretty well all 
things considered.

-Blake

On Tue, Dec 9, 2014 at 9:35 AM, Mike Hale eyeronic.des...@gmail.com wrote:
 I can only speak to the ATT Version of the card, but for us it's been 
 pretty solid.  We have it sitting at an isolated site in the bay area, 
 and it's been reliable.

 Pain in the ass to get setup at first, but after that it's been good.
 They must have fixed a lot of the stability issues.

 On Tue, Dec 9, 2014 at 8:56 AM, Ryan Wilkins r...@deadfrog.net wrote:

 On Dec 9, 2014, at 10:35 AM, chris tknch...@gmail.com wrote:

 Anyone have any experience with the EHWIC-4G-LTE-V card for VZW 4G?

 I've implemented one in a mobile command truck for a police department.  I 
 can't say that I've been very impressed and have had to open numerous TAC 
 cases pertaining to both the LTE EHWIC card and its predecessor, the 3G HWIC 
 card.  The issue that I've had have been that the connection doesn't stay up 
 all the time.  There were some settings that I felt would help keep the card 
 stay online (disabling idle timeouts, short delays between disconnect and 
 reconnect, etc) however the card would still drop offline regularly even in 
 the middle of a data transfer.  It has been a couple years since I've 
 touched that card so I don't remember all the specifics but my recollection 
 is that after about 10 minutes the card would disconnect.  Verizon claimed 
 that they weren't doing anything of the sort.  One thing that will drop the 
 connection, by the way, is sending out RFC1918 and multicast traffic to the 
 VZW network.  I implemented egress filtering to block those types of traffic 
 but th!
 e!
   link would still regularly drop.  The TAC engineer told me that some of the 
 commands I was trying to configure weren't actually doing anything because 
 the support didn't exist in the IOS release I was using and he didn't think 
 the commands would ever be supported.  Maybe things are different now but my 
 previous experience had been anything but flawless.

 Best,
 Ryan Wilkins


 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/



 --
 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR920

2014-11-24 Thread Gustav UHLANDER
Hello.

We are looking into this plattform as a highend CPE so we would also be 
interested in such information if available. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mark 
Tinka
Sent: den 24 november 2014 15:15
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASR920

On Monday, November 24, 2014 03:43:05 PM Eric Van Tol wrote:

 If anyone else has any information to share about the ASR 920, either 
 privately or to the list, please let me know.

Reach out to Waris for more details. He's always helpful with this, as we're 
also doing the same re: this platform.

Mark.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] SFP's (Third party) for ME3600

2014-09-05 Thread Gustav UHLANDER
Hello.
The feeling we have had is that mostly it's the tri-rate copper SFPs that is 
causing the frustration.
Same with ASR1001. Never had an issue with optical fixed rate modules though. 


Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Aaron
Sent: den 4 september 2014 20:41
To: 'Lobo'; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] SFP's (Third party) for ME3600

Have you tried the hidden global command... service unsupported-transceiver

This worked for me when I couldn't get sfp's to work.  My notes below...

after typing that global command, just shut/no shut the port and it should 
immediately start working.  you won't need to reboot me3600 nor will you need 
to reinsert the sfp.  it will work.

insert sfp...  show log will show bad crc error and port in err-disabled mode.
 
sh int status err
sh int g0/23

...will show port in err-disabled

sh inventory

...will not be listed at first.

...will be down down on sh ip int br

conf t
int g0/23
shut
no shut

sh inventory

...will now show like this...

NAME: GigabitEthernet0/23, DESCR: Not Present
PID:   , VID: , SN: 08332636

Apr 18 07:59:26: %GBIC_SECURITY_CRYPT-4-VN_DATA_CRC_ERROR: GBIC in port 23 has 
bad crc Apr 18 07:59:26: %PM-4-ERR_DISABLE: gbic-invalid error detected on 
Gi0/23, putting Gi0/23 in err-disable state

eng-lab-3600-2#sh int status err

Port  Name   Status   Reason
Gi0/23lab2 pcerr-disabled gbic-invalid

conf t
service unsupported-transceiver

eng-lab-3600-2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
eng-lab-3600-2(config)#service unsupported-transceiver
Warning: When Cisco determines that a fault or defect can be traced to the use 
of third-party transceivers installed by a customer or reseller, then, at 
Cisco's discretion, Cisco may withhold support under warranty or a Cisco 
support program. In the course of providing support for a Cisco networking 
product Cisco may require that the end user install Cisco transceivers if Cisco 
determines that removing third-party parts will assist Cisco in diagnosing the 
cause of a support issue.

eng-lab-3600-2(config)#int g0/23
eng-lab-3600-2(config-if)#shut
eng-lab-3600-2(config-if)#no shut
eng-lab-3600-2(config-if)#^Z
eng-lab-3600-2#ib g0/23

Interface  IP-Address  OK? Method Status
Protocol
GigabitEthernet0/23unassigned  YES unset  down  down
eng-lab-3600-2#ib g0/23
Interface  IP-Address  OK? Method Status
Protocol
GigabitEthernet0/23unassigned  YES unset  down  down
eng-lab-3600-2#ib g0/23
Interface  IP-Address  OK? Method Status
Protocol
GigabitEthernet0/23unassigned  YES unset  upup

eng-lab-3600-2#

...show invent...

NAME: GigabitEthernet0/23, DESCR: Not Present
PID:   , VID: , SN: 08332636

...sho log...

Apr 18 08:08:24: %LINK-3-UPDOWN: Interface GigabitEthernet0/23, changed state 
to up Apr 18 08:08:25: %LINEPROTO-5-UPDOWN: Line protocol on Interface 
GigabitEthernet0/23, changed state to up

eng-lab-3600-2#sh int status err
eng-lab-3600-2#

Aaron

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Lobo
Sent: Thursday, September 04, 2014 10:48 AM
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] SFP's (Third party) for ME3600

Similar issues here.  The only 1000BaseT SFPs that we've gotten to work are the 
Cisco branded ones.  Some of the other brands/manufacturers we've used have 
given mixed results.  In one instance we had plugged in a 10/100/1000 SFP and 
tried connecting it to a Cisco 3750 FE port.  The FE port on the
3750 would come up but it would not come up on the 3600X side.  Swapping the 
SFP with a Cisco branded one would resolve the issue most of the time.  The 
3600X has proven to be one of the more finicky switches in terms of accepting 
non Cisco branded SFPs.

Jose

On 9/4/2014 6:53 AM, Phil Mayers wrote:
 On 03/09/2014 22:03, David Farrell wrote:
 On 02/09/2014 20:10, James Bensley wrote:
 I've used hundreads with no issues at all (with both 
 insertion/removal and actual operation).

 I've had a few 1000BaseT SFPs, both Cisco-branded and otherwise, 
 where the wee tab mechanism has broken and the 'release' isn't pushed 
 in to allow the SFP to slide out. I ended up having to push the 'release'
 mechanism in with a screwdriver to pop the SFP out. Had to file those 
 SFPs in the bin.

 Likewise. The copper SFPs seem to be a bit hit and miss TBH, in terms 
 of physical build quality and actual work-ing-ness, particular the 
 tri-rate / autoneg style issues

Re: [c-nsp] ASR1001 RAM

2014-08-09 Thread Gustav UHLANDER
Yea that depends on sw version.
We ran into the issue when upgrading to a newer image on routers that receive 
full feeds from upstream.
Sent it to tac and they said it was memory issue.

Skickas med OWA för iPad

Från: cisco-nsp cisco-nsp-boun...@puck.nether.net för Rich Lewis 
rle...@sis.tv
Skickat: den 6 augusti 2014 21:30:55
Till: Chuck Church; 'Richard Hicks'; 'CiscoNSP List'
Kopia: cisco-nsp@puck.nether.net
Ämne: Re: [c-nsp] ASR1001 RAM

 -Original Message-
 From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Chuck
 Church
 Sent: 06 August 2014 19:20

 That seems crazy that 4GB can't support a full table.

FWIW, we have full tables on an ASR1001 with 4GB RAM, and with add-path enabled:

503890 network entries using 124964720 bytes of memory
982424 path entries using 110031488 bytes of memory
BGP using 281251490 total bytes of memory

I guess it depends what else you're doing, but 4GB would seem ample on the face 
of it.


 -Original Message-
 From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of
 Richard Hicks

 $15k list price for 16GB of standard ECC RAM is criminal.


Agreed!


**

Satellite Information Services Limited. Registered Office: Whitehall Avenue, 
Kingston, Milton Keynes, Buckinghamshire, MK10 0AX. Company No. 4243307

The information in this email (which includes any files transmitted with it) is 
confidential and is intended for the addressee only. Unauthorized recipients 
are required to maintain confidentiality. If you have received this email in 
error please notify the sender immediately, destroy any copies and delete it 
from your computer system.

**


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR1001 RAM

2014-08-09 Thread Gustav UHLANDER
Yepp same here we upgraded our route reflectors to 16gig just a couple if weeks 
ago. We used hp memory for it. I Will try and get a partnumber for it on 
monday. :)

Skickas med OWA för iPad

Från: cisco-nsp cisco-nsp-boun...@puck.nether.net för Richard Hicks 
richard.hi...@gmail.com
Skickat: den 6 augusti 2014 19:33:15
Till: CiscoNSP List
Kopia: cisco-nsp@puck.nether.net
Ämne: Re: [c-nsp] ASR1001 RAM

We just purchased these 16GB kits for our ASR1001's:

http://www.memoryx.com/masr1k100116gb.html

Haven't had any problems.

The 4GB that come default on the ASR1001's cannot hold a full BGP routing
table.

I tried to get our Cisco Rep and Reseller to recommend Cisco Approved RAM
but they would not bite.
Said they were concerned that any non-Cisco branded memory would not be up
to the task.  Hog wash.

$15k list price for 16GB of standard ECC RAM is criminal.


On Tue, Aug 5, 2014 at 7:36 PM, CiscoNSP List cisconsp_l...@hotmail.com
wrote:

 Hi Guys,

 Can anyone please recommend (Non Cisco) ram for the ASR1001's ?

 Cheers.
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] MTU packet loss problem 12410 XR and 6509

2014-05-20 Thread Gustav UHLANDER
Hello.

In ios-xr the mtu is the L2 mtu while in vanilla ios the mtu is L3 mtu. 
This gives that XR is including L2 headers in the mtu setting. So in reality 
you have matching MTUs at present but when you configure XR with an mtu of 1500 
you get a mismatch. 
How is the etherchannel configured? Is the 6509 routing anything or are you 
using it as a switch? 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Lee 
Starnes
Sent: den 20 maj 2014 23:00
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] MTU packet loss problem 12410 XR and 6509

Hello everyone,

A strange MTU issue has popped up and for the life of me I am unable to figure 
out why. This seems to only affect one Metro-E carrier and only when the 
traffic passes between the 6500 and the 12410.

ME Carrier A --- 10G 6509 bundle-ether1(4G)---12410A
ME Carrier B ---/ \-bundle-ether2(4G)---12410B
ME Carrier C --/

Traffic that passes from either 12410 to customer links on ME carrier A are 
seeing MTU issues and packet loss. Traffic across those same links for carriers 
B and C have no issue. To test this, we can ping from from the
12410 to a site on ME carrier A with 1500byte packet size and get packet loss. 
The same test to clients on ME carrier B and C have no issues. Now, since no 
changes were made on our end and the carrier states no changes were made on 
their end, we are at a standstill.

However, I did see that the MTU size on the 12410's is by default 1514 and the 
MTU on the 6500 is 1500. Changing this to match 1500 on both sides causes no 
traffic to pass. I'm not sure why both sides of the bundle-ether interfaces 
matching MTU causes 100% packet loss.

Anybody have any ideas on why matching MTU size would cause no traffic to pass? 
Ultimately the carrier will need to fix their issue, but I would like to 
understand why this problem of matched MTU sizes causes no traffic.

Thanks.

-Lee
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4570 / Virus Database: 3950/7522 - Release Date: 05/19/14

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] *** GMX Spamverdacht *** Replacing 3750X stack

2014-05-02 Thread Gustav UHLANDER
Maybee the new 3650 is enough? 
Should have dubbel the buffer size according to cisco (12mb vs 6mb) Shared on 
all ports. 
Question is if its enough?

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert 
Doering
Sent: den 2 maj 2014 09:55
To: Garry
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] *** GMX Spamverdacht *** Replacing 3750X stack

Hi,

On Fri, May 02, 2014 at 06:43:32AM +0200, Garry wrote:
  We have a 3750X stack (2 switches) doing pure L2 at a small POP (Acting as 
  a core switch) - The small buffers are causing a lot of performance 
  issues, so we are looking to upgrade them.
 
 Not sure about your feature requirements, but have you thought about a 
 Nexus 5500/2200 combo? Alternatively, the 2960X series provides pretty

If buffers are an issue, 2960 is no better than 3750.

gert
--
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] ASR-1K and 3rd party sfps

2014-04-22 Thread Gustav UHLANDER
Hello
We have previously had problems with SFPs that has the ability to link up on 
10/100/1000. 
Even Ciscos own 10/100/1000 SFPs dosent work there for us at least. 
When we insert an SFP that can only establish a link on 1000mbit then it has 
worked so far for us regardless of manufacturer.

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Charles 
Sprickman
Sent: den 23 april 2014 07:08
To: Mike Hale
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] ASR-1K and 3rd party sfps

On Apr 23, 2014, at 12:39 AM, Mike Hale wrote:

 We've seen really weird behavior with third party SFPs in the past.
 NHR has been surprisingly solid for us across all out platforms so far 
 *knock on wood*.
 
 We've got some Finisar-branded SFPs in our ASR which work nicely (but 
 that's expected since Finisar is the OEM, IIRC, for Cisco's SFPs).
 
 Actually...check this out.
 
 https://supportforums.cisco.com/discussion/11445646/advice-needed-cisc
 o-asr-1002-routers-sfps
 
 The GLC-T don't appear to be supported on first glance.  The GE-T are.
  Since your vendor calls them GLC-T (even though they claim to be 
 GE-T), that might be your issue?

I suspect you nailed it.  The sticker says GLC-T, the idprom (or perhaps this 
is something IOS is generating based on some other properties of the GBIC) says 
GE-T:

Transceiver Type: = GE T (26)

Of course it also claims the connector is an LC (or LC.), which is beyond 
nonsensical:

Connector type= LC.

Vendor is supposed to be shipping something out to replace it, not sure what 
yet.

I promise to follow-up for the archives when I've got something that works.

Thanks,

Charles

 
 On Tue, Apr 22, 2014 at 7:17 PM, CiscoNSP List 
 cisconsp_l...@hotmail.com wrote:
 
 Ive got some ASR1006's with SPA-5X1GE with NHR Gb copper SFP's that work 
 finedont have any 1002-X's to test sorry.
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/
 
 
 
 --
 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4355 / Virus Database: 3882/7378 - Release Date: 04/22/14

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software

2014-04-15 Thread Gustav UHLANDER
Hello.
We had to request some of the images when we upgraded all our firewalls. Got a 
response from TAC an hour or so later,

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se 


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Brandon 
Ewing
Sent: den 15 april 2014 20:14
To: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco 
ASA Software

On Wed, Apr 09, 2014 at 12:05:46PM -0400, Cisco Systems Product Security 
Incident Response Team wrote:
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
 Multiple Vulnerabilities in Cisco ASA Software
 
 Advisory ID: cisco-sa-20140409-asa
 
 Revision 1.0
 
 For Public Release 2014 April 9 16:00  UTC (GMT)
 

Has anyone had any luck finding the fixed 8.3(2.40) images?  The latest 
interims I can find are 2.39.  Emailed TAC, but no response yet.

-- 
Brandon Ewing(nicot...@warningg.com)

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 6504-E IOS SSH/memory issues

2014-03-25 Thread Gustav UHLANDER
Hello Mark and Lukas. 
We have a full view of Both IPV6 and IPV4 from 2 providers until recently. 
Yes the CSR 1000V and more so ios XRv is interesting actually.

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mark 
Tinka
Sent: den 25 mars 2014 06:32
To: Lukas Tribus
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] 6504-E IOS SSH/memory issues

On Monday, March 24, 2014 11:45:28 PM Lukas Tribus wrote:

 You definitely cannot run a full view on a 64-bit ASR1k platform with 
 only 4GB of physical RAM.

Which is why I ditched the ASR1001 and went for CSR1000v on Dell servers.

Mark.

-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3722/7238 - Release Date: 03/23/14

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 6504-E IOS SSH/memory issues

2014-03-24 Thread Gustav UHLANDER
We have also had the same issue with some of our ASR 1001 boxes running 4 Gig 
memory and 4 peers 2x V4 and 2x V6. 
So upgrade of memory on those for us. Reboot frees up enough ram to get them 
going for a short while but memory upgrade and software upgrade for longterm.


Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Harold 
'Buz' Dale
Sent: den 24 mars 2014 14:56
To: Patrick M. Hausen; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] 6504-E IOS SSH/memory issues

We had a similar problem with a 7609 with a supe720.  TAC diagnosed that we 
were using too much memory for our BGP tables.
We would get a login prompt but it would fail even with the correct password. 
The box seems to be passing packets although we get some BGP peering issues 
occasionally. This box is scheduled for replacement soon so we are just dealing 
with it for the next week or so.
Good Luck,
Buz

--
buz.d...@usg.edu
Network Support Specialist University System of GA -IT Services.
706-583-2052 or (Toll Free in GA) 888-875-3697
 






On 3/24/14, 9:16 AM, Patrick M. Hausen hau...@punkt.de wrote:

Hi, all,

in Saturday our Rancid started to complain that it could not log on to 
one of our core/uplink routers, anymore. Yet the system is generally 
alive and happily pushing packets - Nagios did not ring me about any 
link or service failing, so this came as a bit of a surprise.

Turns out, SSH logins are not possible, anymore. Telnet and rsh work 
just fine. For each faile SSH login there is a line like this in the log:

Mar 20 12:30:09.415: %AAA-3-ACCT_LOW_MEM_UID_FAIL: AAA unable to create 
UID for incoming calls due to insufficient processor memory

Ah ... OK ... if it's failing in AAA, why does telnet still work? And 
the free memory doesn't look too bad, either:

HeadTotal(b) Used(b) Free(b)   Lowest(b)
Largest(b)
Processor   477267E0   881661984   8603850442127694018235288
20933772
  I/O80067108864216056044550326045451176
45501532

  Processor memory

Alloc PCSize Blocks  BytesWhat

0x4014A218 24 01 24XDR: mfib pltf group
0x4014A218 28 01 28XDR: mfib pltf group
0x4014A218 32 01 32XDR: mfib pltf group
0x401567F4 003808 01 003808Init
0x4016D4BC 24 01 24Init
...

In the thousands of lines that follow, there are precisely 256 memory 
blocks allocated to the SSH process. Is this a single process holding 
all that memory or are there 256 SSH processes, that are somewhat 
stuck/zombie because they are not terminated when the connection is 
closed?

I admit that I rarely log off, but rather just close the window running 
my SSH connection.
Bad admin. ;-) But any sane OS should timeout the TCP connection 
eventually and then terminate the process waiting on that socket.

IOS version is 15.1(2)SY1 advanced enterprise.

How can I proceed finding and eliminating the root cause? Rebooting the 
box to clean up is an option if planned ahead, but not a suitable 
permanent fix (i.e.
rebooting regularly
is out of the question).

Thanks for any hints,
Patrick
--
punkt.de GmbH * Kaiserallee 13a * 76133 Karlsruhe Tel. 0721 9109 0 * 
Fax 0721 9109 100
i...@punkt.de   http://www.punkt.de
Gf: Jürgen Egeling  AG Mannheim 108285




___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 6504-E IOS SSH/memory issues

2014-03-24 Thread Gustav UHLANDER
Hello.

Nop but an old image. 
Ran it through TAC and they advised to upgrade memory. 
It was apparently expected behavior with only 4 Gb of ram and 2 full IPV4 feeds 
and 2 full IPV6 feeds. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: Mark Tinka [mailto:mark.ti...@seacom.mu] 
Sent: den 24 mars 2014 17:14
To: cisco-nsp@puck.nether.net
Cc: Gustav UHLANDER; Harold 'Buz' Dale; Patrick M. Hausen
Subject: Re: [c-nsp] 6504-E IOS SSH/memory issues

On Monday, March 24, 2014 05:14:13 PM Gustav UHLANDER wrote:

 We have also had the same issue with some of our ASR 1001 boxes 
 running 4 Gig memory and 4 peers 2x V4 and 2x V6.
 So upgrade of memory on those for us. Reboot frees up enough ram to 
 get them going for a short while but memory upgrade and software 
 upgrade for longterm.

Sounds strange, but then again, I've never ran the ASR1001 myself (only the 
ASR1002 and ASR1006).

You're not, perhaps, running a second IOSd instance, are you?

Mark.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] FCoE or FCIP over MPLS possible?

2014-03-19 Thread Gustav UHLANDER
Hello.
We are having the same thoughts also and so far we have come to the conclusion 
that it should be possible from e technical standpoint but haven't done any 
tests with it. 
Then we have the age old question if we really should. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of 
Vitkovský Adam
Sent: den 19 mars 2014 11:45
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] FCoE or FCIP over MPLS possible?

Hi folks,
Is it possible to run FCoE over p2p PW or FCIP in an MPLS VRF please? 
Or there are so tight limitations regarding delay and variation that a 
dedicated fiber is the only option please? 

Thank you

adam

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] management access BCP?

2014-03-14 Thread Gustav UHLANDER
Hello.
We usually place a 1900 router with cellular modem, serial card and appropriate 
cellular plan to go with it. 
This usually just calls home through a DMVPN tunnel. I know it isn't fool proof 
but we consider it good enough at the moment. We are thinking about some dsl or 
similar connection to our bigger sites. Although we find that the cellular 
solution is pretty good. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert 
Doering
Sent: den 14 mars 2014 09:28
To: Charles Sprickman
Cc: cisco-nsp@puck.nether.net NSP
Subject: Re: [c-nsp] management access BCP?

Hi,

On Thu, Mar 13, 2014 at 10:02:29PM -0400, Charles Sprickman wrote:
 What are people doing these days to get OOB into a single small location?  
 Cellular?

What we've done is find some other ISP in the same colo that we knew from some 
common event, and just throw two cat5 cables over the wall - one has a /29 
from their IP space, one has a /29 from our IP space, and we both get nicely 
independent OOB-over-IP.

Of course you might want to connect that to a device that is seriously 
hardened, and such :-) - not to a speaks telnet-only and has direct access to 
all your consoles boxes.

gert

--
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de

-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3722/7186 - Release Date: 03/12/14

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] management access BCP?

2014-03-14 Thread Gustav UHLANDER
Hello.
We usually place a 1900 router with cellular modem and appropriate cellular  
cell plan to go with it. 
This usually just calls home through a DMVPN tunnel. I know it isn't fool proof 
but we consider it good enough. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert 
Doering
Sent: den 14 mars 2014 09:28
To: Charles Sprickman
Cc: cisco-nsp@puck.nether.net NSP
Subject: Re: [c-nsp] management access BCP?

Hi,

On Thu, Mar 13, 2014 at 10:02:29PM -0400, Charles Sprickman wrote:
 What are people doing these days to get OOB into a single small location?  
 Cellular?

What we've done is find some other ISP in the same colo that we knew from some 
common event, and just throw two cat5 cables over the wall - one has a /29 
from their IP space, one has a /29 from our IP space, and we both get nicely 
independent OOB-over-IP.

Of course you might want to connect that to a device that is seriously 
hardened, and such :-) - not to a speaks telnet-only and has direct access to 
all your consoles boxes.

gert

--
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany g...@greenie.muc.de
fax: +49-89-35655025g...@net.informatik.tu-muenchen.de

-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3722/7186 - Release Date: 03/12/14

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] output rate-limiting ME-3600X

2014-02-25 Thread Gustav UHLANDER
Hello.

We also do it in the same manner but usually on physical ports only (one port 
per customer on most devices.)

policy-map 10mbit-out
 description 10mbit output
 class class-default
  shape average 1000

interface GigabitEthernet0/19
 description cust:  [10mbit] 
 no switchport
 vrf forwarding x
 ip address 
 service-policy input 10mbit-in
 service-policy output 10mbit-out

We use the following software atm. 
Cisco IOS Software, ME360x Software (ME360x-UNIVERSALK9-M), Version 15.3(2)S1, 
RELEASE SOFTWARE (fc1) at the moment. 


Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Eric 
Louie
Sent: den 25 februari 2014 02:21
To: 'Pshem Kowalczyk'
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] output rate-limiting ME-3600X

Thanks, Pshem.  I'll try it on 15.2(4) and see if it works.

much appreciated,
Eric Louie


 -Original Message-
 From: Pshem Kowalczyk [mailto:pshe...@gmail.com]
 Sent: Monday, February 24, 2014 4:45 PM
 To: Eric Louie
 Cc: cisco-nsp@puck.nether.net
 Subject: Re: [c-nsp] output rate-limiting ME-3600X
 
 Hi,
 
 We do it regularly and for all interfaces:
 
 policy-map PM-INT-100M-OUT
  class class-default
   shape average 1
 
 
 interface GigabitEthernet0/2
  switchport trunk allowed vlan none
  switchport mode trunk
  service-policy output PM-INT-100M-OUT
 
 We'd generally have a service-instance rate-limit under that as well:
 
  service instance 331 ethernet
   encapsulation dot1q 331
   l2protocol forward
   service-policy input PM-CUST-DEFAULT-50M-AF-IN
   service-policy output PM-CUST-DEFAULT-50M-OUT
   xconnect 10.123.111.1 271331 encapsulation mpls
 
 policy-map PM-CUST-DEFAULT-50M-OUT
  description limiting to 50 Mbps
  class CM-DUMMY
  class class-default
   shape average 5000
   queue-limit percent 100
 
 (CM-DUMMY is there to allow for a queue-limit with only class-default).
 
 
 This is on 15.3(2)S.
 
 kind regards
 Pshem
 
 
 On 25 February 2014 11:05, Eric Louie elo...@yahoo.com wrote:
  I'm at an impasse trying to get this to work.  Does anyone have any 
  examples of setting output rate limiting on a physical interface?
 
  Am I running into an IOS feature issue?
 
  lab-kma-sd-base1# sh ver
  Cisco IOS Software, ME360x Software (ME360x-UNIVERSALK9-M), Version 
  15.2(4)S, RELEASE SOFTWARE (fc1)
 
  much appreciated,
  Eric Louie
 
  ___
  cisco-nsp mailing list  cisco-nsp@puck.nether.net 
  https://puck.nether.net/mailman/listinfo/cisco-nsp
  archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Re-licensing secondhand Cisco equipment

2014-01-10 Thread Gustav UHLANDER
I think the more expensive kit the more checks are performed. 
Also notice if you are cisco partner then you might be excluded from that if 
you buy second hand equipment (registered partners can only buy equipment from 
dists)

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of John 
Elliot
Sent: den 10 januari 2014 01:32
To: Sander Steffann
Cc: cisco-nsp
Subject: Re: [c-nsp] Re-licensing secondhand Cisco equipment

 
 Hi,
 
  So, just to clarify - You can purchase refurb/secondhand Cisco kit and then 
  purchase a smartnet contract for software access/updates(And also hardware 
  replacement)?
 
 Maybe, but Cisco is going to charge you a lot of money for that.



More money than purchasing new?   Smartnet on a secondhand vs new is the same 
price? 


 
  But you cant purchase (legally) refurb/secondhand kit and use it with the 
  software running on it? 
 
 In the EU you can always legally use the software that came with the 
 hardware. In other parts of the world you will probably have to pay. This is 
 based on the following pages on cisco.com:
 
 http://www.cisco.com/en/US/prod/hw_sw_relicensing_program.html:
 
  - The embedded Cisco software that runs on the hardware-as well as Cisco 
  standalone software-is not transferable. If you purchase used or 
  secondary-market Cisco equipment, you must acquire a new license from Cisco 
  before the software can be used.
  
  - Used and secondary-market equipment is not covered under the Cisco 
  standard warranty, and you cannot place it under a Cisco service and 
  support contract unless it is re-licensed by Cisco and has passed an 
  inspection by Cisco


We have occasionally purchased secondhand kit out of necessity (Disty's have no 
stock available - CE equipment..800 series etc), and we were able to smartnet 
them without issue, and also without being re-licensed or being 
inspectedIs this deemed illegal by Cisco even though they smartnet the unit 
based on serial numbers?

This is a complete minefield!

 
  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

-
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4259 / Virus Database: 3658/6987 - Release Date: 01/08/14

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Re-licensing secondhand Cisco equipment

2014-01-10 Thread Gustav UHLANDER
Hello mark. 

What I meant was the more expensive kit as in higher range platforms (6500/7600 
platform for instance).
There seems to be some checks done when you as a partner buy smartnet for those 
platforms. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se

-Original Message-
From: Mark Tinka [mailto:mark.ti...@seacom.mu] 
Sent: den 10 januari 2014 10:24
To: cisco-nsp@puck.nether.net
Cc: Gustav UHLANDER; John Elliot; Sander Steffann
Subject: Re: [c-nsp] Re-licensing secondhand Cisco equipment

On Friday, January 10, 2014 10:38:03 AM Gustav UHLANDER
wrote:

 I think the more expensive kit the more checks are performed. Also 
 notice if you are cisco partner then you might be excluded from that 
 if you buy second hand equipment (registered partners can only buy 
 equipment from dists)

Intuitively, more expensive kit is likely more current kit, which means you 
don't need re-licensing as it's not so available on the grey market (not 
including things like optics, SPA's, e.t.c.) :-). 

Unless you meant something else...

Mark.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 7609 clustering (like 6509 vss or IOS-VR nV edge)

2014-01-08 Thread Gustav UHLANDER
Should also be possible with SUP2T but then you are bound to the SY train last 
I checked so its probably not relevant to most outfits. 

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Stefano 
Sasso
Sent: den 8 januari 2014 16:16
To: Aaron
Cc: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] 7609 clustering (like 6509 vss or IOS-VR nV edge)

Never tested nor used, but if you check table 1 
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/product_data_sheet09186a0080159856_ps2797_Products_Data_Sheet.html
VSS is supported on VS-S720-10G that can fit both 6500 and 7600.

bye
stefano


2014/1/8 Aaron aar...@gvtc.com

 Is it possible to take two 7609's and make them operate as one ?





 Aaron



 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net 
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/




--
Stefano Sasso
http://stefano.dscnet.org/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 10Gig CWDM

2013-10-23 Thread Gustav UHLANDER
Hello.
We are using third party X2 CWDM optics in almost all of our 6500s.
Havent hit a snag yet. :)

Bästa hälsningar / Best regards,

Gustav Uhlander
Senior Communication  Infrastructure Engineer

Steria AB
Kungsbron 13
Box 169
SE-101 23  Stockholm
Sweden

Tel: +46 8 622 42 15
Fax: +46 8 622 42 23
Mobile: +46 70 962 71 03
gustav.ulan...@steria.se 
www.steria.se


-Original Message-
From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Brian 
Turnbow
Sent: den 23 oktober 2013 18:01
To: 'cisco-nsp@puck.nether.net'
Subject: [c-nsp] 10Gig CWDM

Hello Everyone,

We are looking into upgrading some links actually on a cwdm run to 10Gig.
After looking into DWDM equipment I was told to check into  10Gig CWDM plugs 
offered in sfp+  xenpak x2   xfp etc
Such as the ones offered by smartoptics
http://www.smartoptics.com/optical-transceivers/10g-ethernet-2/

As we would like to  add this to our existing 6500s does anyone have any 
experience using the x2/xenpaks in a cisco 6500 environment?
AFAIK cisco does not support  10G CWDM plug ins, at least I can't find anything 
stating that they do publically.

They are telling me it'll work but is unsupported , yet I would sleep better 
at night knowing that we are not beta testers



Thanks

Brian


---
This e-mail is intended only for the addressee named above. 
As this e-mail may contain confidential or privileged information, if you are 
not the named addressee, you are not authorized to retain, read, 
copy or disseminate this message or any part of it.   
 
Please consider your environmental responsibility before printing this e-mail.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/