Re: [c-nsp] Larger scale router rollout tools?

2007-07-03 Thread Jared Mauch
On Tue, Jul 03, 2007 at 07:59:40AM +0200, Garry wrote: Hi, we will be required to go through some larger number of router rollout soon, I was wondering if there are any tools available to automate this? I will building some config template, with the (rather small number of) variables

Re: [c-nsp] Larger scale router rollout tools?

2007-07-03 Thread Phil Mayers
On Tue, 2007-07-03 at 02:14 -0400, Jared Mauch wrote: On Tue, Jul 03, 2007 at 07:59:40AM +0200, Garry wrote: Hi, we will be required to go through some larger number of router rollout soon, I was wondering if there are any tools available to automate this? I will building some config

Re: [c-nsp] 3660 and BGP

2007-07-03 Thread Elmar K. Bins
Hi Seth, [EMAIL PROTECTED] (Seth Mattinen) wrote: The 3660 is lots faster than the 3640. The routerperformance.pdf claims 25-36 mbit/s for the 3640 (64 byte packets, no features) and 51-61 mbit/s. for the 3660. My 3640 experience saw it max out around 10 to 12 meg, so without

Re: [c-nsp] 3660 and BGP

2007-07-03 Thread Gideon Le Grange
On 02 Jul 2007, at 10:33 PM, Seth Mattinen wrote: Reinard, Gerno wrote: Trying to figure out if a 3660 is sufficient to run BGP. It currently has only 64MB of memory, but will be upgraded to 256 or 512. I have two different responses - one saying that BGP only requires a large amount

Re: [c-nsp] PBR Strange behavior [NC]

2007-07-03 Thread david . ponsdesserre
Which Ios version are you using ? I know there is a bug in the 12.4 , i have experienced it myself .. Rgds David [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 03/07/07 00:17 To cisco-nsp@puck.nether.net cc Subject [c-nsp] PBR Strange behavior Hi List, I've configured an policy

[c-nsp] RSPAN over IP

2007-07-03 Thread Manu Chao
Hola, I need to do a RSPAN over an IP network. Is it possible today? Is there any roadmap that will help? Thanks. Manu ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Monitoring congested links

2007-07-03 Thread Rodney Dunn
For accuracy for any drop I'm not sure you will be able to beat a MQC policing policy that just matches and permits. Then set the rate close to line rate and watch for exceed and violate drops via SNMP polls of the MQC mibs. Or just watch for output drops because that is what should happen when

Re: [c-nsp] RSPAN over IP

2007-07-03 Thread Daniel Kratz
Hello Manu, You need the ERSPAN feature. http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/122sx/swcg/span.pdf Regards, Kratz On 7/3/07, Manu Chao [EMAIL PROTECTED] wrote: Hola, I need to do a RSPAN over an IP network. Is it possible today? Is there any roadmap that will help?

Re: [c-nsp] RSPAN over IP

2007-07-03 Thread Jeff Tantsura
Hi, Yes, it is possible, ERSPAN is the name. For 7600: ERSPAN Guidelines and Restrictions These are ERSPAN guidelines and restrictions: .Release 12.2(18)SXE and later releases support ERSPAN. .Release 12.2(18)SXF and later releases support ERSPAN when the router is operating in any switching

Re: [c-nsp] RSPAN over IP

2007-07-03 Thread Saku Ytti
On (2007-07-03 11:44 +0200), Manu Chao wrote: Hola, I need to do a RSPAN over an IP network. Is it possible today? Is there any roadmap that will help? As addition to ERSPAN info you've received from list you might want to check these out:

Re: [c-nsp] Unicast storms

2007-07-03 Thread Vincent De Keyzer
Brian, I don't think this is the way unicast storm-control is supposed to work. Of course the traffic on the LAN is bursty, but that's just fine; what I think Cisco tried to address with this feature is the unicast flood due to unknown destination MAC address. Foundry has similar (equivalent?)

Re: [c-nsp] RSPAN over IP

2007-07-03 Thread Matt Addison
Does anyone know if the ERSPAN feature is coming to any other product lines or if it's going to remain (65|76)00 only? ~Matt -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Saku Ytti Sent: Tuesday, July 03, 2007 7:19 AM To: cisco-nsp@puck.nether.net

Re: [c-nsp] Unicast storms

2007-07-03 Thread Vincent De Keyzer
Basically I have two answers now: 1. Eric points me to asymmetric traffic/routing and MAC/ARP timeouts 2. Stephen says unicast storm-control does not work properly by design (or because of Microsoft, depending on which side you are on :) Now, if anybody has successfully implemented unicast

Re: [c-nsp] Unicast storms

2007-07-03 Thread Brian Turnbow
It will vary a bit between switches But here is how it is described by cisco. Storm control (or traffic suppression) monitors packets passing from an interface to the switching bus and determines if the packet is unicast, multicast, or broadcast. The switch counts the number of packets of a

Re: [c-nsp] tunnel internet traffic via a VPN?

2007-07-03 Thread Peter Krupl
Hi, This is propably caused by the fact that you can't have the traffic entering and leaving the hub pix on the same interface. Unless you use pix/asa 7.0 or newer software. The following URL explains the necessary steps:

Re: [c-nsp] 3660 and BGP

2007-07-03 Thread Reinard, Gerno
I'm pretty sure the 3660 doesn't support more than 256M (reference below), but if you feel I'm wrong, please point me to the correct reference (so I can go and upgrade my 3660s as well): No Gideon, you're right - 256 MB is it for the 3660. Just another piece of information I was given

[c-nsp] NPE-G1 - 3rd Party Approved memory issues?

2007-07-03 Thread David Freedman
Heya, We've had a number of issues whilst using 3rd party cisco approved memory in NPE-G1s , where boxes reload and give the following as their reason: router uptime is 30 minutes System returned to ROM by error - an unknown failure, PC 0x0 at 14:33:23 BST Tue Jul 3 2007 System restarted at

Re: [c-nsp] NPE-G1 - 3rd Party Approved memory issues?

2007-07-03 Thread David Freedman
Oh, and no crashinfo was produced either router#show stacks Minimum process stacks: Free/Size Name 2600/3000 allegro libretto init 11568/12000 Router Init 8240/12000 Init 4196/6000 Update prst /6000 DIB error message 5444/6000 RADIUS INITCONFIG 9864/12000 Exec

Re: [c-nsp] VTY locks on show commands

2007-07-03 Thread Andrew Yourtchenko
On 7/2/07, Vincent De Keyzer [EMAIL PROTECTED] wrote: How do I change the MTU to fix it? The frame circuit is in a Telco's area I don't normally work in. Well, you don't really have to change the MTU - you'd rather ask the telco why you can't ping with large packets. Normally you should

[c-nsp] 1841's with bad 12.4(3c) code?

2007-07-03 Thread ChrisSerafin
Anyone having issues with a 1841 running 12.4(3c)? I have a few of these out in the field with no problems, but one that has a split tunnel is constantly having problems with dropped traffic. It's running a simple VPN to a 3000 but spliting some traffic stright out to the internet locally.

Re: [c-nsp] Unicast storms

2007-07-03 Thread Gert Doering
Hi, On Mon, Jul 02, 2007 at 01:25:17PM -0400, Pickett, McLean (OCTO) wrote: The switch will only timeout the mac table entry if the host has failed to generate a single valid frame over the timeout period. The switch will then broadcast the first frame destined to the host and re-learn the

[c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Alex Haan
Hi Everyone, Is it possible to configure two ASes on one BGP router? If it's possible, how many feeds we are going to receive from an ISP peer? One or Two? Thanks, Alex _ Tell us your tech love story in the Summer Lovin

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Joseph Jackson
You could do it inside a VRF, but I don't know if it would work for what you want since it makes seprate routing tables. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Haan Sent: Tuesday, July 03, 2007 10:34 AM To: cisco-nsp@puck.nether.net

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Paul Stewart
Never done it... But can you not create: router bgp 12345 network x.x.x.x etc... router bgp 98765 network x.x.x.x into the same router?? Paul -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joseph Jackson Sent: Tuesday, July 03, 2007 1:39 PM To:

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Skeeve Stevens
No. On a 7200-npe400 running disk0:c7200-ik9o3s-mz.124-13a.bin Router(config)#router bgp 12345 BGP is already running; AS is 6789 ...Skeeve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Stewart Sent: Wednesday, 4 July 2007 3:45 AM To: 'Joseph

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Joseph Jackson
Oh yep you guys are correct. There is no option to do bgp within a VRF. Atleast not on any of the hardware I am running. Sorry! Joseph -Original Message- From: Skeeve Stevens [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 03, 2007 10:58 AM To: 'Paul Stewart'; Joseph Jackson;

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Paul Stewart
Ooops... sorry, I had always presumed that would be easily done...;) -Original Message- From: Skeeve Stevens [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 03, 2007 1:58 PM To: 'Paul Stewart'; 'Joseph Jackson'; 'Alex Haan'; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Configure two AS

Re: [c-nsp] Larger scale router rollout tools?

2007-07-03 Thread Marco Huggenberger
2007/7/3, Phil Mayers [EMAIL PROTECTED]: Also, on recent IOS you can scp *to* the box and it works just like a scp config-fragment router:running-config We successfully use the archive command (on 12.4.x IOS): code archive path tftp://ip-of-your-tftp-server/$h write-memory time-period 1440

Re: [c-nsp] Larger scale router rollout tools?

2007-07-03 Thread Skeeve Stevens
Anyway to do a variable based on time so it doesn't constantly overwrite itself? I'd love a 200707041530 in the filename. ...Skeeve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marco Huggenberger Sent: Wednesday, 4 July 2007 4:13 AM To:

Re: [c-nsp] Larger scale router rollout tools?

2007-07-03 Thread Skeeve Stevens
Awesome. From: http://www.cisco.com/en/US/products/ps6566/products_command_reference_chapte r09186a0080790a59.html Because some file systems are incapable of storing the date and time that a file was written, the filename of the archive file can contain the date, time, and router hostname. To

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Gustavo Novais
You can also look at neighbor X.X.X.X local-as, to impersonate other AS's Gustavo Novais -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Stewart Sent: terça-feira, 3 de Julho de 2007 18:45 To: 'Joseph Jackson'; 'Alex Haan';

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Alex Haan
I guess that this enables advertisement of one AS's network while suppressing the advertisement of the networks from the other AS, right? One newb question, can I advertize the networks for both AS through one AS? Thanks, Alex From: Gustavo Novais [EMAIL PROTECTED] To: Paul Stewart [EMAIL

Re: [c-nsp] Larger scale router rollout tools?

2007-07-03 Thread Arie Vayner (avayner)
Garry, You may want to take a look at this Cisco product: Cisco Configuration Engine http://www.cisco.com/en/US/partner/products/sw/netmgtsw/ps4617/index.htm l Arie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Garry Sent: Tuesday, July 03, 2007

[c-nsp] SOCKS5 aware configuration management tools ?

2007-07-03 Thread kevin gannon
Anyone aware of a comerical or open source tool that can: 1. Collect configs via ssh and or telnet 2. Use a SOCK5 proxy server for the SSH/telnet connection In our case the each device might have a different SOCKS server Thanks regards kevin ___

Re: [c-nsp] SOCKS5 aware configuration management tools ?

2007-07-03 Thread Jeffrey C. Ollie
On Tue, 2007-07-03 at 20:13 +0100, kevin gannon wrote: Anyone aware of a comerical or open source tool that can: 1. Collect configs via ssh and or telnet 2. Use a SOCK5 proxy server for the SSH/telnet connection In our case the each device might have a different SOCKS server RANCID[1]

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Collins, Richard (SNL US)
Though it is not exactly your question you can always use the neighbor x.x.x.x local-as 2ndAS [no-prepend] to spoof a different AS to one peer. Rich -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Haan Sent: Tuesday, July 03, 2007 10:34 AM To:

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Philippe Strauss
[mailto:[EMAIL PROTECTED] On Behalf Of Alex Haan Sent: Tuesday, July 03, 2007 10:34 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Configure two AS on one BGP router Hi Everyone, Is it possible to configure two ASes on one BGP router? If it's possible, how many feeds we

Re: [c-nsp] tunnel internet traffic via a VPN?

2007-07-03 Thread Scott Lambert
On Tue, Jul 03, 2007 at 03:37:10PM +0200, Peter Krupl wrote: Hi, This is propably caused by the fact that you can't have the traffic entering and leaving the hub pix on the same interface. That's what I found out with the help of a couple of off-list replies. Unless you use pix/asa 7.0 or

Re: [c-nsp] [SPAM] - RE: Configure two AS on one BGP router - Dynamic IP detected dnsbl.sorbs.net

2007-07-03 Thread Gustavo Novais
You have the option to suppress your actual AS from the AS path (no-prepend), or not. By default your AS path will look like {local-AS your AS}. This will not suppress any routes, it is supposedly used for migration purposes, (for example, two companies have merged and wish to keep their

[c-nsp] P to P T1 timing issue?

2007-07-03 Thread Kienzle, John
Hello all. We are configuring our routers for a point to point T1 circuit. We are using a similar config as we have had in the past with T1's. The problem we seem to be having is the connection goes up and down continuously. In fact, it will be up for 20 seconds, down for 10 seconds, and then

Re: [c-nsp] P to P T1 timing issue?

2007-07-03 Thread Justin M. Streiner
On Tue, 3 Jul 2007, Kienzle, John wrote: We are configuring our routers for a point to point T1 circuit. We are using a similar config as we have had in the past with T1's. The problem we seem to be having is the connection goes up and down continuously. In fact, it will be up for 20

Re: [c-nsp] P to P T1 timing issue?

2007-07-03 Thread Kienzle, John
It is a vwic 2mft t1-d1 card in a 3845 series router. CRC errors, aborted packets and carrier transitions. The interface appears to stay up, so does the controller port. Update - TAC is thinking we have a bad card after further review. John Kienzle Senior ITS Analyst -Original

Re: [c-nsp] P to P T1 timing issue?

2007-07-03 Thread Jay Hennigan
Kienzle, John wrote: It is a vwic 2mft t1-d1 card in a 3845 series router. CRC errors, aborted packets and carrier transitions. The interface appears to stay up, so does the controller port. Update - TAC is thinking we have a bad card after further review. Look closely into the modular

Re: [c-nsp] P to P T1 timing issue?

2007-07-03 Thread luiz . maia
There is a parameter in the controller that you should verify: CRC4 or NOCRC. A good troubleshoothing source is: http://www.cisco.com/en/US/tech/tk713/tk628/technologies_tech_note09186a00800a758d.shtml LUIZ PAULO MAIA Gerência de Redes e Telecomun / ATOS ORIGIN SERVIÇOS DE TECNOLOGIAINFORM

Re: [c-nsp] Larger scale router rollout tools?

2007-07-03 Thread Kevin Graham
Or more generally still, just NETCONF. Hopefully it will eventually kill the stupid templates we all have floating around in some form or another: http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124newft/124t/124t9/srnetcon.htm ...though fairly limited still being only in 12.4T

[c-nsp] Archive timezone

2007-07-03 Thread Skeeve Stevens
Hey guys. BDC-7206G1-A#show clock 13:12:39.953 AEST Wed Jul 4 2007 archive path tftp://x/HN-$h-$t.cfg write-memory time-period 720 But, the config it just archived got this name: -rw-rw-rw- 1 nobody 19K Jul 4 13:11 HN-BDC-7206G1-A-Jul--4-03:11:37.685.cfg-3 Archive is using GMT?

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Matt Carter
howdy, what is the reason for wanting to run 2 as on one router? are you trying to provide true separation between the ASN's, VRF style, or just be able masquerade as another ASN per se when talking to an upstream? would something like this meet the requirements? The local-AS feature allows a

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Skeeve Stevens
I have one customer with a 7200-G2 and another with a 7507. The 7507 is getting very old obviously and can't even take 2 full feeds any more. They are located in the same DC and would be easy to trunk some VLAN's. I was considering the idea of doing away with the 7507 and virtualising the

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Saku Ytti
On (2007-07-03 21:54 +0200), Philippe Strauss wrote: I recall seeing a new feature, if my memory serves well in 12.4, named something like BGP AS migration. Don't know if it does fit your purpose, never used it myself. It appears as either AS# to your peers. e.g. your customer can change

[c-nsp] MWAM (PDSN) Perfomance metrics question

2007-07-03 Thread Alex Burba
Hello. Does someone have any experience with the MWAM (WS-SVC-MWAM-1) ? I'm interested in its perfomance metrics when acting as a PDSN and providing some QoS (traffic policing) to each session (~50-100k). From it's documentation I can see some perfomance metrics for no-QoS deployments and that

Re: [c-nsp] Configure two AS on one BGP router

2007-07-03 Thread Alex Burba
Hello. Does someone have any experience with the MWAM (WS-SVC-MWAM-1) ? I'm interested in its perfomance metrics when acting as a PDSN and providing some QoS (traffic policing) to each session (~50-100k). From it's documentation I can see some perfomance metrics for no-QoS deployments and that