Re: [c-nsp] SXI1 is out
Hi, On Thu, Apr 02, 2009 at 09:01:47AM +1000, David Hughes wrote: Is anyone happily using per-interface NDE on SXI? That would be a huge leap in usefulness. We do (SXH3a and SXI) and it works. That is, we haven't uncovered any nasties yet, and the amount of data is matching our expectations. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert Doering - Munich, Germany g...@greenie.muc.de fax: +49-89-35655025g...@net.informatik.tu-muenchen.de pgpSFhU9a8knB.pgp Description: PGP signature ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
In fear of prosecution from section 70 of the CRIMES ACT 1914 I will simply say it is the successor to SXI, the SX series is an IOS available for the 6500 Platform. http://www.cisco.com/en/US/prod/collateral/iosswrel/ps8802/ps6970/ps6017/ps9673/product_bulletin_c25-503086.html Ben On Thu, Apr 2, 2009 at 1:27 PM, Wilkinson, Alex alex.wilkin...@dsto.defence.gov.au wrote: 0n Wed, Apr 01, 2009 at 05:50:01PM +0300, Tassos Chatzithomaoglou wrote: ...but release notes haven't been updated yet. I'm having a maintenance window tomorrow and i was planning to upgrade 3 6500s from SXF9 to SXI, but since SXI1 came out, i'm thinking of moving directly to it. Anyone know what is fixed from SXI to SXI1? What is SXI1 ? -aW IMPORTANT: This email remains the property of the Australian Defence Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 1914. If you have received this email in error, you are requested to contact the sender and delete the email. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
On Thu, Apr 02, 2009 at 04:40:04PM +1030, Ben Steele wrote: In fear of prosecution from section 70 of the CRIMES ACT 1914 I will simply say it is the successor to SXI, the SX series is an IOS available for the 6500 Platform. I still say the name SXI1 is a sexual harassment complaint just waiting to happen. :) -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
So anyone try out an ISSU upgrade from SXI to SXI1 yet? I'd really like to see if it works as advertised. -Brandon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
I believe that SXI introduces eFSU and not ISSU - which requires a linecard reload if the line card is not supported. * http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/issu_efsu.html The following modules support eFSU preload: –WS-X67*xx* modules –SIP-400 and SIP-600 I think we're still waiting on ISSU which is curiously not mentioned in the SXI1 release notes - maybe still on the dev/bug table? But I'm with Brandon - anyone give it a go yet? Ryan On Thu, Apr 2, 2009 at 12:08 PM, Brandon Bennett benn...@gmail.com wrote: So anyone try out an ISSU upgrade from SXI to SXI1 yet? I'd really like to see if it works as advertised. -Brandon ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
Hi, So anyone try out an ISSU upgrade from SXI to SXI1 yet? I'd really like to see if it works as advertised. hmmm, good call - I may have to check this out as when we did our SXF and SXH to SXI upgrade it thought it had been done via ISSU (why? dont know - hopefully fixed in SXI1 !) and therefore borked our dual sup720 setups which led to 3 other issues. alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
[c-nsp] SXI1 is out
...but release notes haven't been updated yet. I'm having a maintenance window tomorrow and i was planning to upgrade 3 6500s from SXF9 to SXI, but since SXI1 came out, i'm thinking of moving directly to it. Anyone know what is fixed from SXI to SXI1? PS: I was running SXI in a lab for a few weeks without any major issues. -- Tassos ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
On Apr 1, 2009, at 10:50 AM, Tassos Chatzithomaoglou wrote: ...but release notes haven't been updated yet. I'm having a maintenance window tomorrow and i was planning to upgrade 3 6500s from SXF9 to SXI, but since SXI1 came out, i'm thinking of moving directly to it. Anyone know what is fixed from SXI to SXI1? PS: I was running SXI in a lab for a few weeks without any major issues. I know this image has 4-byte ASN support and fixes for at least one bgp related bug. I've been toying with it for a few hours now with no significant problems. I know at least one of my bugs did not make it to SXI1 making the modular unusable in our environment. - Jared ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
SXI didn't support Netflow export from a VRF other than the global table. The command option wasn't available in the ip flow export command syntax. Here is what I am seeing in SXI 6509(config)#ip flow-export destination 10.1.1.3 9996 ? cr The vrf flag was available in SXH. Has that been fixed in SXI1? Mike Louis Senior Solutions Architect CCIE #17082 (RS) -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jared Mauch Sent: Wednesday, April 01, 2009 11:02 AM To: Tassos Chatzithomaoglou Cc: cisco-nsp Subject: Re: [c-nsp] SXI1 is out On Apr 1, 2009, at 10:50 AM, Tassos Chatzithomaoglou wrote: ...but release notes haven't been updated yet. I'm having a maintenance window tomorrow and i was planning to upgrade 3 6500s from SXF9 to SXI, but since SXI1 came out, i'm thinking of moving directly to it. Anyone know what is fixed from SXI to SXI1? PS: I was running SXI in a lab for a few weeks without any major issues. I know this image has 4-byte ASN support and fixes for at least one bgp related bug. I've been toying with it for a few hours now with no significant problems. I know at least one of my bugs did not make it to SXI1 making the modular unusable in our environment. - Jared ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ Note: This message and any attachments is intended solely for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, legally privileged, confidential, and/or exempt from disclosure. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the original sender immediately by telephone or return email and destroy or delete this message along with any attachments immediately. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
Mike Louis wrote: SXI didn't support Netflow export from a VRF other than the global table. The command option wasn't available in the ip flow export command syntax. Here is what I am seeing in SXI 6509(config)#ip flow-export destination 10.1.1.3 9996 ? cr The vrf flag was available in SXH. It didn't work properly in SXH. It only exported MSFC-switched flows. Has that been fixed in SXI1? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
Good to know. I didn't it much in SXH, just installed SXH enough long enough to see the command was there. We had a multi-VRF deployment and SXH crashed and went to ROMMON once we configured 3 or more EIGRP AS #s in VRF-Lite deployment. We had to go to SXI for stability with EIGRP and VRF-lite. Then we lost Netflow commands again outside the global VRF. Mike -Original Message- From: Phil Mayers [mailto:p.may...@imperial.ac.uk] Sent: Wednesday, April 01, 2009 12:41 PM To: Mike Louis Cc: Jared Mauch; Tassos Chatzithomaoglou; cisco-nsp Subject: Re: [c-nsp] SXI1 is out Mike Louis wrote: SXI didn't support Netflow export from a VRF other than the global table. The command option wasn't available in the ip flow export command syntax. Here is what I am seeing in SXI 6509(config)#ip flow-export destination 10.1.1.3 9996 ? cr The vrf flag was available in SXH. It didn't work properly in SXH. It only exported MSFC-switched flows. Has that been fixed in SXI1? Note: This message and any attachments is intended solely for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, legally privileged, confidential, and/or exempt from disclosure. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the original sender immediately by telephone or return email and destroy or delete this message along with any attachments immediately. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
netflow on the 65xx is broken enough i'm surprised it gave you any data of value. - jared On Apr 1, 2009, at 12:42 PM, Mike Louis wrote: Good to know. I didn't it much in SXH, just installed SXH enough long enough to see the command was there. We had a multi-VRF deployment and SXH crashed and went to ROMMON once we configured 3 or more EIGRP AS #s in VRF-Lite deployment. We had to go to SXI for stability with EIGRP and VRF-lite. Then we lost Netflow commands again outside the global VRF. Mike -Original Message- From: Phil Mayers [mailto:p.may...@imperial.ac.uk] Sent: Wednesday, April 01, 2009 12:41 PM To: Mike Louis Cc: Jared Mauch; Tassos Chatzithomaoglou; cisco-nsp Subject: Re: [c-nsp] SXI1 is out Mike Louis wrote: SXI didn't support Netflow export from a VRF other than the global table. The command option wasn't available in the ip flow export command syntax. Here is what I am seeing in SXI 6509(config)#ip flow-export destination 10.1.1.3 9996 ? cr The vrf flag was available in SXH. It didn't work properly in SXH. It only exported MSFC-switched flows. Has that been fixed in SXI1? Note: This message and any attachments is intended solely for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, legally privileged, confidential, and/or exempt from disclosure. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the original sender immediately by telephone or return email and destroy or delete this message along with any attachments immediately. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
Mike Louis wrote: SXI didn't support Netflow export from a VRF other than the global table. The command option wasn't available in the ip flow export command syntax. Here is what I am seeing in SXI 6509(config)#ip flow-export destination 10.1.1.3 9996 ? cr The vrf flag was available in SXH. Has that been fixed in SXI1? Probably not. I ran into the same thing when trying to run NetFlow on a number of ME6524s. SXH had it, SXI didn't. TAC said: 'It wasn't fully functional in SXH and worked only for software flows. It's removed in SXI and there are no plans to bring it back'. Bummer :-( Regards, Marco. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
On Wed, 2009-04-01 at 14:01 -0400, Jared Mauch wrote: netflow on the 65xx is broken enough i'm surprised it gave you any data of value. Hm, I thought it worked okay. Out of curiosity, what should one be careful about with it, if one's network was dominated by 6500s? We only use it for troubleshooting though, so precision is less important for us if that's the problem. Regards, Peter ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
Peter Rathlev wrote: On Wed, 2009-04-01 at 14:01 -0400, Jared Mauch wrote: netflow on the 65xx is broken enough i'm surprised it gave you any data of value. Hm, I thought it worked okay. Out of curiosity, what should one be careful about with it, if one's network was dominated by 6500s? We only use it for troubleshooting though, so precision is less important for us if that's the problem. I wouldn't use it for accounting but with the right sampling it can be used to see how much traffic you are sending to/from other ASN's. I use: mls sampling packet-based 1024 8192 Which gives a convenient ~1000 conversion factor from indicated bandwidth to actual. - Kevin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
Is anyone happily using per-interface NDE on SXI? That would be a huge leap in usefulness. David ... On 02/04/2009, at 4:01 AM, Jared Mauch wrote: netflow on the 65xx is broken enough i'm surprised it gave you any data of value. - jared ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] SXI1 is out
0n Wed, Apr 01, 2009 at 05:50:01PM +0300, Tassos Chatzithomaoglou wrote: ...but release notes haven't been updated yet. I'm having a maintenance window tomorrow and i was planning to upgrade 3 6500s from SXF9 to SXI, but since SXI1 came out, i'm thinking of moving directly to it. Anyone know what is fixed from SXI to SXI1? What is SXI1 ? -aW IMPORTANT: This email remains the property of the Australian Defence Organisation and is subject to the jurisdiction of section 70 of the CRIMES ACT 1914. If you have received this email in error, you are requested to contact the sender and delete the email. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
