[c-nsp] snmp trap v3

Hello Could anybody provide valid snmpv3 trap config? I've tryed snmp-server user trap_user trap_group v3 snmp-server group trap_group v3 noauth notify *tv.0001..0F snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart snmp-server host

Re: [c-nsp] snmp trap v3

Sergey Velikanov [Intelsoft] wrote: Hello Could anybody provide valid snmpv3 trap config? I've tryed snmp-server user trap_user trap_group v3 snmp-server group trap_group v3 noauth notify *tv.0001..0F snmp-server enable traps snmp authentication linkdown linkup

Re: [c-nsp] Larger scale router rollout tools?

On Tue, 2007-07-03 at 17:55 -0700, Kevin Graham wrote: Or more generally still, just NETCONF. Hopefully it Isn't the CCE a netconf proxy in effect? will eventually kill the stupid templates we all have floating around in some form or another:

[c-nsp] cisco VPN client to an IOS router: sending ALL traffic thru the VPN

Hello, I'm trying to setup a small router (c876) for a customer, with a VPN setup such that VPN client get the default route thru the VPN, hence all traffic goes thru the VPN (no split-tunneling). Along with NAT on the central c876, it's not easy as it seems. Basically, client VPN enter thru the

[c-nsp] MPLS and VLAN on same FE or GE interface ?

Hi, Back in 2003 I failed miserably at configuring two 7206 VXR so that their FE interfaces could be connected to a VLAN switch, running MPLS in one VLAN and non-MPLS in other VLANs. Basically I'd like to have int fa0/0.2 description MPLS VLAN for my routers encapsulation dot1Q 2 ip

Re: [c-nsp] cisco VPN client to an IOS router: sending ALL traffic thru the VPN

oops forgot IOS version: c870-adventerprisek9-mz.124-11.T2 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] MPLS and VLAN on same FE or GE interface ?

Code Monkey wrote: Hi, Back in 2003 I failed miserably at configuring two 7206 VXR so that their FE interfaces could be connected to a VLAN switch, running MPLS in one VLAN and non-MPLS in other VLANs. Basically I'd like to have int fa0/0.2 description MPLS VLAN for my routers

Re: [c-nsp] MPLS and VLAN on same FE or GE interface ?

On Wed, July 4, 2007 10:24 am, Code Monkey wrote: Back in 2003 I failed miserably at configuring two 7206 VXR so that their FE interfaces could be connected to a VLAN switch, running MPLS in one VLAN and non-MPLS in other VLANs. I've done this in a previous life, using the on-board ports on

[c-nsp] L3 Interface for 2821

Hi there! Once again I have a small problem and I'm sure you guys can help me out ;-) I have two 2821 routers. They have 2 Gi interfaces onboard. In one of them I have a HWIC-4ESW. I'd like to connect a Catalyst 2950 to a third interface of the router. I need to configure the switchports (on

[c-nsp] Netflow: 7600, egress

Hello! On my 7600 test box with RSP720 I failed to do egress netflow. Here is config snapshot: mls flow ip interface-full interface GigabitEthernet1/25 ip address XXX.YYY.17.2 255.255.255.252 ip flow ingress ip flow egress ! interface GigabitEthernet1/26 ip address XXX.YYY.16.2

Re: [c-nsp] L3 Interface for 2821

interface FastEthernet4 switchport mode access switchport access vlan 10 interface Vlan10 ip address 10.1.1.1 255.255.255.0 Create the VLAN in your VLAN database and that should do the trick just fine You need to use a SVI to make it layer3 I don't believe you can do trunking on the 4ESW

Re: [c-nsp] L3 Interface for 2821

interface FastEthernet4 switchport mode access switchport access vlan 10 interface Vlan10 ip address 10.1.1.1 255.255.255.0 Create the VLAN in your VLAN database and that should do the trick just fine You need to use a SVI to make it layer3 I don't believe you can do trunking on the 4ESW

Re: [c-nsp] L3 Interface for 2821

Thanks for the fast reply! What would I do if I need about 10 VLANs on my 4 port interface? The router doesn't shout at me if I configure one of the ports of the 4ESW as a trunk. Should I do that and then create interface Vlan1, Vlan2, ...? Is this a good solution, considering performance etc?

Re: [c-nsp] L3 Interface for 2821

You only need to create the SVI's if you need layer3 in place... if you just want to trunk VLAN's between the two there's no need to use them I would image you can do a LOT of VLAN's on them (don't know for sure but guessing at 250) never done many as never had reason. But the nice thing

[c-nsp] dhcp snooping clarification

Hi I have a dhcp snooping setup on a 3550 switch. I have downstream some other access devices that insert option82 information to the DHCP requests. On my switch I have: ip dhcp smart-relay ip dhcp relay information option ip dhcp relay information policy keep ! ip dhcp

[c-nsp] PPPOE on 7246VXR

Hi there... Just looking for feedback on running PPPOE on a Ubr7246VXR CMTS router? According to what I'm reading it supports PPPOE just like any other router pretty much anyone using it and/or have any gotchas to share? Thanks in advance, Paul

Re: [c-nsp] L3 Interface for 2821

The documentation for the HWIC-4ESW (http://www.cisco.com/en/US/products/ps5853/products_data_sheet0900aecd8016b f0b.html) mentions dot1q trunking as a supported feature, but doesnt seem to hint at how many VLANs can be trunked, therefore, I'd be assuming that it can do as many as is supported by

Re: [c-nsp] L3 Interface for 2821

the HWIC-4ESW have support for max.16 VLAN's; and you can do a trunk link with all of them ... On 7/4/07, Tom Storey [EMAIL PROTECTED] wrote: The documentation for the HWIC-4ESW ( http://www.cisco.com/en/US/products/ps5853/products_data_sheet0900aecd8016b f0b.html) mentions dot1q trunking as

[c-nsp] several ME-C3750-24TE crushed at the same time with 12.2(35)SE2

hi, several minutes ago we've just experienced the most awkward network event: 6 catalyst switches ME-C3750-24TE configured as MPLS PE have crushed at the same time. we upgraded IOS version last week to 12.2(35)SE2. although it seems like a clear IOS issue and we are standing by for update from

Re: [c-nsp] Unicast storms

Hi Vincent, I'm saying it works just fine but the implementation is sucky. I use it extensively but you just need to set your thresholds pretty high to make sure they arent tripped. I also usually have it just filter rather than shut the port that way it will auto-recover. As to what 'pretty

Re: [c-nsp] Netflow: 7600, egress

Hello! Dmitry, where have you find anything about egress NetFlow on 7600? :) I am reading config guide attentively http://www.cisco.com/en/US/products/hw/routers/ps368/products_configuration_guide_chapter09186a0080699369.html#wp1078217 but no nothing about egress netflow! 2007/7/4, Dmitry Kiselev

Re: [c-nsp] MPLS and VLAN on same FE or GE interface ?

On 7/4/07, Matthew Kirkland [EMAIL PROTECTED] wrote: Code Monkey wrote: Hi, Back in 2003 I failed miserably at configuring two 7206 VXR so that their FE interfaces could be connected to a VLAN switch, running MPLS in one VLAN and non-MPLS in other VLANs. We run this quite happily ,

Re: [c-nsp] Netflow: 7600, egress

It is only supported on the RSP720/MSFC4/SRB afaik. You can get netflow stats for L2-switched traffic, I think ip flow l2-switched vlan xxx. Have you tried not having both ingress and egress on the same interface at the same time? I know that it won't create flows for traffic

Re: [c-nsp] ISP Connection

Get your ISP to provision a /30 between them and your 2800. Then have them statically route the /25 to your end of the /30, then on your router you can do whatever you want with the /25. Assign it to an interface, subnet it further, whatever. On 4-Jul-07, at 10:20 AM, Gary Roberton wrote:

[c-nsp] MPLS design in a non-MPLS cored network - was Re: MPLS and VLAN on same FE or GE interface ?

Tim Franklin wrote: On Wed, July 4, 2007 10:24 am, Code Monkey wrote: Back in 2003 I failed miserably at configuring two 7206 VXR so that their FE interfaces could be connected to a VLAN switch, running MPLS in one VLAN and non-MPLS in other VLANs. I've done this in a previous life, using

Re: [c-nsp] Netflow: 7600, egress

Hm... Not for MSFC only, because comand guide recommends to configure cef... By the way, may be you try evidently configure cef on interface :) 2007/7/4, Dmitry Kiselev [EMAIL PROTECTED]: Hello! On Wed, Jul 04, 2007 at 05:35:31PM +0400, alexey wrote: Hello! Dmitry, where have you find

Re: [c-nsp] ifHCOutOctets Counter64

Hello, There is a bug in cisco IOS 12.2(33) SRA1-3 (CSCsh69601). Workaround: Upgrade to SRA4. On 6/21/07, talex [EMAIL PROTECTED] wrote: Hello, After upgradeing the IOS version to 12.2(33)SRA3 on C7613 Sup720, i've noticed some errors in the result returned by the snmp OID

[c-nsp] Rate Limit/Police/Etc a dot1q trunk

Hey guys, I have a situation where I have some dot1q trunks coming in one trunk and going out another. I would like to somehow limit the speed that these dot1q VLAN's are able to do on an individual VLAN basis. The equipment I want to do this on is a 3560G (Enhanced). I would

Re: [c-nsp] Unicast storms

On (2007-07-04 15:44 +0100), Stephen Wilcox wrote: I take it you mean unicast frames with mac addresses that are currently unknown to the switch on that port? In which case you cant limit it that way.. but you have two options: In risk of repeating myself, you can rate-limit them on PFC3C

Re: [c-nsp] Netflow: 7600, egress

Hello! On Wed, Jul 04, 2007 at 10:18:14AM -0400, Phil Bedard wrote: It is only supported on the RSP720/MSFC4/SRB afaik. You can get netflow stats for L2-switched traffic, I think ip flow l2-switched vlan xxx. Have you tried not having both ingress and egress on the same interface

Re: [c-nsp] MPLS design in a non-MPLS cored network - was Re: MPLS and VLAN on same FE or GE interface ?

On Wed, July 4, 2007 3:29 pm, Reuben Farrelly wrote: I am in the process of reworking/migrating some of our existing infrastructure - and working with tagged MPLS and VLAN traffic in this sort of config is certainly something I expect I will doing real soon. In our situation we have 4

Re: [c-nsp] Unicast storms

On Wed, Jul 04, 2007 at 06:32:16PM +0300, Saku Ytti wrote: On (2007-07-04 15:44 +0100), Stephen Wilcox wrote: I take it you mean unicast frames with mac addresses that are currently unknown to the switch on that port? In which case you cant limit it that way.. but you have two options:

[c-nsp] Lawful Intercept Questions

Hi all, In previous posts I asked about a way to 'mirror' or intercept a PPPoE session. It seems the consensus was this wasn't really possibly without utilising the lawful intercept features available in IOS. Further questions on this topic: 1) The LI feature-set - latest 12.4T has:

Re: [c-nsp] Configure two AS on one BGP router

You could technically trick the router by using the local-as command but that is probably not what you are going for. If you are multi-homed you should probably be applying for your own AS. Could you be mores specfic with what your goals are? On 7/3/07 2:07 PM, Paul Stewart [EMAIL PROTECTED]

[c-nsp] CN=Aaron Jeskey/O=zwickerpc is out of the office.

I will be out of the office starting Fri 06/29/2007 and will not return until Mon 07/09/2007. I will be out of the office beginning June 29 thru July 9th. Should you need immediate assistance during this time please contact Joe Smith at 978.686.2255 (3517) or call HelpDesk at 978.686.2255