Re: [c-nsp] Nexus 7000 and OTV

2014-05-20 Thread Martin Clifton
Similar model used here.
We have two datacentres (10Km apart) with a common L2.   Has been solid
for over 3 years.

Regards, Martin


-Original Message-
From: Antonio Soares 
Date: Wednesday, 21 May 2014 5:59 am
To: 'Blake Pfankuch - Mailing List' ,
"cisco-nsp@puck.nether.net" 
Subject: Re: [c-nsp] Nexus 7000 and OTV

>No issues with OTV on a stick:
>
>http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCI/
>wh
>itepaper/DCI3_OTV_Intro/DCI_1.html#wp1215970
>
>
>Regards,
>
>Antonio Soares, CCIE #18473 (RS/SP)
>amsoa...@netcabo.pt
>http://www.ccie18473.net
>
>
>-Original Message-
>From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of
>Blake Pfankuch - Mailing List
>Sent: terça-feira, 20 de Maio de 2014 20:32
>To: cisco-nsp@puck.nether.net
>Subject: [c-nsp] Nexus 7000 and OTV
>
>Looking to deploy OTV between 2 datacenters on some Nexus 7000 equipment.
>Anyone have any experience with this?  Any feedback would be appreciated,
>good or bad.
>
>Thanks,
>Blake
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Config management

2013-05-01 Thread Martin Clifton
It should be '.html'

Regards, Martin

[cid:5B1E7612-440B-49DA-B055-825AE1A720A8]


From: Andrey Petrenko mailto:andy.petre...@gmail.com>>
Date: Saturday, 27 October 2012 8:12 AM
To: Martin Clifton mailto:martin.clif...@vu.edu.au>>
Cc: Dan Letkeman mailto:danletke...@gmail.com>>, 
cisco-nsp mailto:cisco-nsp@puck.nether.net>>
Subject: Re: [c-nsp] Config management

Wrong url

--
With best regards,
Andrey 'sshd' Petrenko
xmmp\gtalk: andy.petrenko at gmail.com<http://gmail.com/>
skype: andy.petrenko
web: http://sshd.by<http://sshd.by/>

26.10.2012, в 23:46, Martin Clifton 
mailto:martin.clif...@vu.edu.au>> написал(а):

Hi,

As mentioned by others, Rancid is a popular tool for keeping track of
configs.  Someone wrote a simple script which hooks into components
(clogin in particular) of Rancid to enable changes to multiple devices.
You define a list of devices and create a command file where you put your
required changes eg in Cisco parlance:

conf t
no access-list 200
access list 200 Š.
access list 200 Š.
end
wr


See:
http://www.shrubbery.net/pipermail/rancid-discuss/2008-September/003296.htm
l

Regards, Martin



On 27/10/12 6:51 AM, "Dan Letkeman" 
mailto:danletke...@gmail.com>> wrote:

Hello,

Curious as to what everyone is using for config management for
switches.  I have a few hundred 2960's and 3560's to manage on a
regular basis, and I would like to have something that can make mass
config changes.  Not really looking for anything to monitor them as I
have that part covered.  Just the ability to mass add to acl's or
upload config changes to keep everything consistent.


Thanks,
Dan.
___
cisco-nsp mailing list  
cisco-nsp@puck.nether.net<mailto:cisco-nsp@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  
cisco-nsp@puck.nether.net<mailto:cisco-nsp@puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.
<>___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Config management

2012-10-26 Thread Martin Clifton
Hi,

As mentioned by others, Rancid is a popular tool for keeping track of
configs.  Someone wrote a simple script which hooks into components
(clogin in particular) of Rancid to enable changes to multiple devices.
You define a list of devices and create a command file where you put your
required changes eg in Cisco parlance:

conf t
no access-list 200
access list 200 Š.
access list 200 Š.
end
wr


See:
http://www.shrubbery.net/pipermail/rancid-discuss/2008-September/003296.htm
l

Regards, Martin



On 27/10/12 6:51 AM, "Dan Letkeman"  wrote:

>Hello,
>
>Curious as to what everyone is using for config management for
>switches.  I have a few hundred 2960's and 3560's to manage on a
>regular basis, and I would like to have something that can make mass
>config changes.  Not really looking for anything to monitor them as I
>have that part covered.  Just the ability to mass add to acl's or
>upload config changes to keep everything consistent.
>
>
>Thanks,
>Dan.
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] problem with VPC port-channel between Cisco 3550 and pair of Nexus 5020

2012-05-23 Thread Martin Clifton
Hi,

You may find the Nexus 5020 has blocked the port because it has received a
spanning-tree bpdu from the 3560.

You could apply the following command on the 3550 uplink:
spanning-tree bpdufilter enable

Whilst this is safe enough on a single link, I would be very careful about
applying it in a redundant/port-channeled scenario.

Regards, Martin








-Original Message-
From: Tom Mikelson 
Date: Wed, 23 May 2012 11:54:32 -0600
To: 
Subject: [c-nsp] problem with VPC port-channel between Cisco 3550 and pair
of Nexus 5020

>Physical links are up, cdp neighbor shows all devices
>Nexus 5020 pair configured with working VPC link on VLAN 11.
>Port-channel 64 on both Nexus 5020s show blocked for spanning-tree VLAN
>11.
>
>* Nexus 5020s *
>
>interface port-channel64
>  description TEST
>  switchport mode trunk
>  switchport trunk allowed vlan 11
>  speed 1000
>  vpc 64
>
>interface Ethernet1/8
>  description TEST
>  switchport mode trunk
>  switchport trunk allowed vlan 11
>  speed 1000
>  channel-group 64 mode active
>
>* Cisco 3550 *
>
>interface Port-channel64
> description TEST
> switchport trunk encapsulation dot1q
> switchport trunk allowed vlan 11
> switchport mode trunk
>!
>interface GigabitEthernet0/1
> description TEST_to_5020_A
> switchport trunk encapsulation dot1q
> switchport trunk allowed vlan 11
> switchport mode trunk
> channel-group 64 mode active
>!
>interface GigabitEthernet0/2
> description TEST_to_5020_B
> switchport trunk encapsulation dot1q
> switchport trunk allowed vlan 11
> switchport mode trunk
> channel-group 64 mode active
>!
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] IP Source Guard and Smartlog on 3750s

2012-04-19 Thread Martin Clifton
Hi,

I'm looking at implementing IPSG on our 3750s.   This is a test which stops a 
host using a port unless its mac-address/host-address match the ip dhcp 
snooping table.

This works fine.   IOS is 15.0(1)SE2.   The specific hardware is Catalyst 
3750G-24PS.

My problem is that I want to be alerted when there is a violation.   You can't 
configure traps for IPSG, and there is no syslog entry (from which I could use 
EEM to generate a trap).   The only method offered by the IOS is to use 
'smartlog' which sends specially-formatted netflow-v9 messages to a specified 
collector.   It is not possible to manually configure 'flexible netflow' on the 
3750 – but I don't know if that would help anyway – except that I would be able 
to see the records on the switch without sending them to a collector.

I've tried a few different collectors – the only one I've found that 
understands the records is 'Scrutinizer'.   It sees the record as an IPSG 
violation but provides nothing else except the vlan number.   (What I would 
like is the interface and the offending ip/mac).

Looking at the raw netflow data via nfcapd/nfdump confirm that the vlan is the 
only useful field that is sent.

I can't find any Cisco documentation on how to interpret the netflow records 
generated by SmartLog – what the format is; what collectors understand them 
etc.   But if the record only contains the vlan then they are not much use 
anyway.

Any thoughts ?

Regards, Martin



This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Nexus 2k - host ports

2011-06-23 Thread Martin Clifton
Hi Simon,

We came across a similar problem where we had no choice but retain some
Cat3750s in between the servers and our N2Ks.
On the connecting ports on the 3750:  spanning-tree bpdufilter enable
Not a great workaround, but is only short-term.

I'm not familiar with ILO but assume it is some sort of server management
port. Where I am they are Dell servers and DRAC ports (I think).
Whatever, they also are 100Mbps only.  Driven by the absence of 100Mbps
ports on our N2Ks, it motivated us to set up a separate "out-of-band"
management network based on spare Cat2960s and Cat3750s.

Regards, Martin







On 24/06/11 3:29 PM, "Thomason, Simon"  wrote:

>Hey All,
>
>Just doing a little research at the moment for some design work and I
>found out that you can not plug a switch into a nexus2k as all ports are
>host ports.
>
>I am certain a least a few people on here have had a look into this and
>was just wondering if there is some kind of work around?
>
>I have also been trying to find out if on the road map for the nexus
>platform there is something in the works to support this at a later date.
>
>Reason for plugging a switch into the Nexus2k's would be to allow the ilo
>ports which only operate at 100M to be plugged into a cheaper switch
>rather than burning up a 10/100/1000 extender per rack with a 10gig
>extender.
>
>---reference---
>Host interfaces are for host or server connectivity only; host interfaces
>cannot connect to another network. These interfaces are always enabled as
>edge ports; as they come up, these ports immediately transition to the
>forwarding state. Host interfaces are always enabled with BPDU Guard. If
>a BPDU is received, the port is immediately placed in an error-disabled
>state which keeps the link down.
>
>http://www.cisco.com/en/US/docs/switches/datacenter/nexus2000/sw/configura
>tion/guide/rel_4_0_1a/FEX-features.html
>
>Host interfaces are for host or server connectivity only; host interfaces
>cannot connect to another network. These interfaces are always enabled as
>edge ports; as they come up, these ports immediately transition to the
>forwarding state. Host interfaces are always enabled with BPDU Guard. If
>a BPDU is received, the port is immediately placed in an error-disabled
>state which keeps the link down.
>---reference---
>
>Hot foot it to RACQ MotorFest at Eagle Farm Racecourse on 17 July and
>swoon over Queensland¹s largest display of collectable vehicles. Visit
>www.racq.com/motorfest
>
>Please Note: If you are not the intended recipient, please delete this
>email as its use is prohibited.  RACQ does not warrant or represent that
>this email is free from viruses or defects.  If you do not wish to
>receive any further commercial electronic messages from RACQ please
>e-mail unsubscr...@racq.com.au or contact RACQ on 13 19 05.
>
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Upgrading Software using TFTP server in a Nexus 7000

2011-06-12 Thread Martin Clifton
Hi,

If you are using the default control plane policy then you will find that
this is rate-limiting your tftp, causing it to timeout.

You can adjust your policy or disable it for the duration of your tftp
session.

Regards, Martin






On 13/06/11 6:31 AM, "Renelson Panosky"  wrote:

>I am trying to upgrade the IOS in a new Nexus 7000 that i am working on.
>I
>keep getting this crazy error: TFTP get operation failed:connection timed
>out.
>
>I can ping my TFTP server from the switch and i can ping the switch so i
>know i have two way communication.  Have Anyone of you guys ran into this
>situation or any other machine?
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Nexus equipment in corporate networks

2011-03-12 Thread Martin Clifton
Hi,

We have two datacentres with L2 spanning them - for this we use the Nexus OTV 
feature (provides L2 over L3).   You can't run SVIs on the same vDC as you use 
for the OTV edge device - hence a separate vDC is mandatory.

In addition we use two vDCs with VRFs to provide security tiering (in 
conjunction with ASAs and load balancers).  Yes, we could use VRFs exclusively 
but having two separate vDCs makes it cleaner.

We also have a separate management vDC - very handy but a luxury, not a 
necessity.


From: cisco-nsp-boun...@puck.nether.net [cisco-nsp-boun...@puck.nether.net] on 
behalf of chris stand [cstand...@gmail.com]
Sent: Saturday, March 12, 2011 11:22 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Nexus equipment in corporate networks

Hello,

   Is anyone here using Nexus 7Ks in their corporate networks ?
Other than the management vDC are you breaking up your networks into
multiple vDCs ?


thank you.

Chris
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Nexus OTV Question

2011-03-01 Thread Martin Clifton
This problem occurred with the 7K NX-OS 5.1.1a. Upgrading to 5.1.2
resolved the problem.

Regards, Martin

-
Martin Clifton
ITS - Networks and Computing
Victoria University
Melbourne, Australia

Phone: 03 9919 4579
-





On 28/02/11 10:16 AM, "Martin Clifton"  wrote:

>Hello all,
>
>We have a pair of Nexus 7Ks at each of our two datacentres, separated by
>about 10K.   There is a 40G L3 connection between the cores at each site
>and we run OTV over this core to provide L2 connectivity betweens the
>DCs.  As well as setting up new vlans on the Nexus kit (5Ks and 2Ks) we
>are also using the OTV connection to transport vlans from our legacy
>datacentre which is based on Cat6509s and 3750s.
>
>I have a concern about the table that is displayed when you enter the
>command "sh otv route".   This table shows entries for "site" (ie local)
>and "overlay" (ie other DC)  mac addresses.The issue is with the
>"Uptime" data.  For the overlay addresses this will randomly reset to
>zero and all addresses will reset to zero at the one time.   The
>frequency of this reset seems to be a function of the number of vlans ie
>the more vlans I add to the overlay, the more often the value resets.
>With 100 or more vlans the value may build up to a minute or two but will
>often only get to a few seconds before resetting.
>
>This doesn't appear to impact the functionality of OTV.   But does it
>indicate I have a problem ?   What is it that causes the reset and why
>are all the (overlay) mac addresses reset at the same time ?The
>symptoms occur whether or not "otv suppress-arp-nd" is enabled or not.
>
>Regards, Martin
>
>-
>Martin Clifton
>ITS - Networks and Computing
>Victoria University
>Melbourne, Australia
>
>Phone: 03 9919 4579
>-
>
>
>This email, including any attachment, is intended solely for the use of
>the intended recipient. It is confidential and may contain personal
>information or be subject to legal professional privilege. If you are not
>the intended recipient any use, disclosure, reproduction or storage of it
>is unauthorised. If you have received this email in error, please advise
>the sender via return email and delete it from your system immediately.
>Victoria University does not warrant that this email is free from viruses
>or defects and accepts no liability for any damage caused by such viruses
>or defects.
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Nexus OTV Question

2011-02-28 Thread Martin Clifton
Thanks Lincoln,

The problem isn't associated with a single mac-address moving between
ports - at least I don't think so. Everything seems to be behaving as
expected - except for the "sh otv route" table.

For clarity, I configured only a couple of vlans over OTV.  The otv route
table quickly stabilises and can be reconciled against the originating
device.   Then, a new mac-address appears or disappears.  What then
happens is that the uptime for all pre-existing mac-addresses resets to
zero.  This is not what I would expect - I would have expected the uptimes
for the pre-existing mac-addresses to continue to increment.

Then, as I add vlans (100 or so), the number of mac-addresses increases
dramatically, and of course the probability of a change to the table
increases.  Consequently the frequency at which all of the uptimes reset
to zero increases.  This then gives the impression that the system is
quite unstable - which I don't believe it is.

Regards, Martin

---------
Martin Clifton
ITS - Networks and Computing
Victoria University
Melbourne, Australia

Phone: 03 9919 4579
-




On 28/02/11 5:31 PM, "Lincoln Dale"  wrote:

>hi Martin,
>
>On 28/02/2011, at 10:16 AM, Martin Clifton wrote:
>> I have a concern about the table that is displayed when you enter the
>>command "sh otv route".   This table shows entries for "site" (ie local)
>>and "overlay" (ie other DC)  mac addresses.The issue is with the
>>"Uptime" data.  For the overlay addresses this will randomly reset to
>>zero and all addresses will reset to zero at the one time.   The
>>frequency of this reset seems to be a function of the number of vlans ie
>>the more vlans I add to the overlay, the more often the value resets.
>>With 100 or more vlans the value may build up to a minute or two but
>>will often only get to a few seconds before resetting.
>
>i would not expect the "uptime" in "show otv route" to be resetting.
>that, to me, indicates that the MAC address(es) are moving/oscillating
>between ports on the originating device.
>with OTV we still do hardware-based MAC learning for L2 switching but
>whenever a MAC address is learnt or moves that is picked up by
>control-plane and advertised accordingly.
>
>for one of those mac addresses, suggest you look into whether it is in
>fact moving - and more importantly - why.  it could be a misconfiguration
>(like Port Channel "mode on" on one device and no Port Channel defined on
>the other end.
>it could be misconfigured hosts - set up with NIC teaming or Link
>Aggregation incorrectly.
>it could be unstable L2 at one side.
>t could be a loop.  (but i'd expect that to be having more noticable
>impacts on the network :) ).
>
>pick one of the N7Ks where you see the change originating from and do a
>few "show hardware mac address-table  | grep " and
>see if its moving.  that shows the h/w mac table.  you may also see the
>same moving of mac addresses in "show mac address-table" but the h/w one
>will show updates sooner.
>
>
>cheers,
>
>lincoln.

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Nexus OTV Question

2011-02-27 Thread Martin Clifton
Hello all,

We have a pair of Nexus 7Ks at each of our two datacentres, separated by about 
10K.   There is a 40G L3 connection between the cores at each site and we run 
OTV over this core to provide L2 connectivity betweens the DCs.  As well as 
setting up new vlans on the Nexus kit (5Ks and 2Ks) we are also using the OTV 
connection to transport vlans from our legacy datacentre which is based on 
Cat6509s and 3750s.

I have a concern about the table that is displayed when you enter the command 
"sh otv route".   This table shows entries for "site" (ie local) and "overlay" 
(ie other DC)  mac addresses.The issue is with the "Uptime" data.  For the 
overlay addresses this will randomly reset to zero and all addresses will reset 
to zero at the one time.   The frequency of this reset seems to be a function 
of the number of vlans ie the more vlans I add to the overlay, the more often 
the value resets.   With 100 or more vlans the value may build up to a minute 
or two but will often only get to a few seconds before resetting.

This doesn't appear to impact the functionality of OTV.   But does it indicate 
I have a problem ?   What is it that causes the reset and why are all the 
(overlay) mac addresses reset at the same time ?The symptoms occur whether 
or not "otv suppress-arp-nd" is enabled or not.

Regards, Martin

-
Martin Clifton
ITS - Networks and Computing
Victoria University
Melbourne, Australia

Phone: 03 9919 4579
-


This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] How to run a scheduled script to grab interface stats

2010-11-27 Thread Martin Clifton
If you can't use SNMP or don't want to use expect, then another method
which is available on the Catalyst 3750 (can't vouch for other platforms)
is to push information out via tftp.

sh int | redirect tftp:///

This can be put in a cron job (called kron by cisco) so that the info can
be sent on a regular basis.
eg to push out the result of 'sh int' every 10 minutes:

kron policy-list DO-SOMETHING
 cli sh int | redirect tftp:///
kron occurrence DO-SOMETHING-REGULARLY in 10 recurring
 policy-list DO-SOMETHING

Then you just need a script on the tftp-server to parse the received file
and put it in a form that suits.

Martin




On 27/11/10 3:43 AM, "John Neiberger"  wrote:

>I'd like to periodically (weekly, for example) gather certain
>interface stats via "show int" and then upload those stats via
>ftp/tftp/scp or whatever to a server. I'll then pull those stats into
>an Excel spreadsheet and parse them. What would be the best way to do
>this? Is this something that can be built in a TCL script and then run
>on a schedule? If you needed to do this, how would you do it? I have
>stats from multiple interfaces on six 7600s that I need to grab at
>least once a week.
>
>Any thoughts?
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/

This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] V

2009-10-26 Thread Martin Clifton



Sent from my iPhone


This email, including any attachment, is intended solely for the use of the 
intended recipient. It is confidential and may contain personal information or 
be subject to legal professional privilege. If you are not the intended 
recipient any use, disclosure, reproduction or storage of it is unauthorised. 
If you have received this email in error, please advise the sender via return 
email and delete it from your system immediately. Victoria University does not 
warrant that this email is free from viruses or defects and accepts no 
liability for any damage caused by such viruses or defects.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] OSX app for console access

2008-11-20 Thread Martin Clifton
Eric,

To access the usb-serial adaptor within Terminal or iTerm:

http://www.tigoe.net/pcomp/resources/archives/avr/000749.shtml

On 21/11/08 8:27 AM, "Eric Cables" <[EMAIL PROTECTED]> wrote:

> Out of curiosity, what app are people using w/ OSX to console into
> Cisco gear?  I've been using ZTerm, but thought I'd pose the question
> in case there was a better app out there that I hadn't tried.
> 
> -- Eric Cables
> ___
> cisco-nsp mailing list  cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/


Regards, Martin

-
Martin Clifton
ITS - Networks and Computing
Victoria University
Melbourne, Australia

Phone: 03 9919 4579
-


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/