[c-nsp] Multicast flooding on vlan in L3 switch

2007-10-04 Thread Wyatt Mattias Ishmael Jovial Gyllenvarg
Hi all We have an issue we cant find any reference too. We have a 3560G that gets a ip pim spare-mode mutlicast feed. There is a Vlan X on the switch with a few access ports. When a join comes from one of these ports all ports in the vlan are flooded. We have tried several IGMP SNOOPING

Re: [c-nsp] shaping: which platform to choose and where to place

2007-10-04 Thread Peter Salanki
I want to throw in Procera Networks PacketLogic to the DPI alternatives aswell, this is really a box to concider :) Simply rate-limiting the users can most probably still be done in the Linux up to atleast 200megs. 3 okt 2007 kl. 18.15 skrev Mark Pace Balzan: Hi, Are there another

[c-nsp] Converting a 1242AG from Lightweight to Autonomous IOS

2007-10-04 Thread Tom Storey
Hi all. Having a bit of fun converting a currently Lightweight 1242AG access point to Autonomous mode. Attached is the output on the console that I get which should give you an idea of what Im looking at. Essentially what is happening is as follows: 1. TFTP server running on 10.0.0.2 with a

Re: [c-nsp] Soft Reconfiguration In?

2007-10-04 Thread David Freedman
Murphy, William wrote: Just wondering how many folks are using BGP soft reconfiguration inbound? I am currently not using it since I am concerned about memory usage. If it's enabled I assume it doubles your BGP memory consumption. Is that a fair assessment? Thanks... I enable this feature

Re: [c-nsp] Multicast flooding on vlan in L3 switch

2007-10-04 Thread Tim Stevenson
What is the group address you are joining? Cat switches like the 3560 should constrain to just the L2 ports that have joined even when the vlan interface is an OIF at L3. Tim At 09:54 AM 10/4/2007 +0200, Wyatt Mattias Ishmael Jovial Gyllenvarg observed: Hi all We have an issue we cant find

[c-nsp] 2611XM and VPN card Issue

2007-10-04 Thread Networkers
I just installed an AIM-VPN-EP card in a 2611XM with 128Megs RAM. I'm getting this error message. Does this mean the card is defective? Oct 4 10:30:09.122 MDT: %HW_VPN-1-LPRXERR: Virtual Private Network (VPN) Module0/2: Command Error IPSEC cmd=CRYPTO_ISA_SA_DELETE[0x30] Uproc cmd=DB Zero[50]

[c-nsp] Cisco 7206 and Adtran SM2 blade ADSL

2007-10-04 Thread Denny Reiter
Anybody here ever terminated ADSL from an Adtran TA3000 using an SM2 blade on a Cisco 7206 and used DHCP? I can get DHCP to work using pass through, but then I get no circuit id information as far as what port the customer is on, etc. If I enable DCHP authentication on the SM2, I get

Re: [c-nsp] GOLD error under SXF10

2007-10-04 Thread Sukumar Subburayan (sukumars)
there is no specific issue related to this in SXF10, and there is nothing fixed in SXF11 related to this. If you can provide access to the setup via unicast, we can take a look. sukumar -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mack Sent:

[c-nsp] Real quick interface statistics question

2007-10-04 Thread Drew Weaver
627425063 packets input, 85917292730 bytes, 0 no buffer Received 2 broadcasts, 0 runts, 0 giants, 0 throttles 68 input errors, 0 CRC, 0 frame, 68 overrun, 0 ignored What exactly is an overrun on a gigabit Ethernet card and is 68 out of 627,000,000 packets a large issue? I'm just wondering, I

[c-nsp] Interface output

2007-10-04 Thread Ahmad Cheikh-Moussa
Hi! Can someone tell me, what it means, if I have unknown protocol drops ? I've got no packet loss. The speed is good too. The cisco output interpreter says everything is ok. Here the output of show interface : #sh int fastEthernet 0/1 FastEthernet0/1 is up, line protocol is up Hardware is

Re: [c-nsp] Real quick interface statistics question

2007-10-04 Thread Stephen Wilcox
It means the interface MAC received data faster than it could be passed to the controller. I have seen it when there is a bad interface or bad cabling. It can also be caused if you are trying to do some clever features with the card and its not processing the packets quick enough. 68/627m

Re: [c-nsp] Interface output

2007-10-04 Thread Rodney Dunn
Cisco IOS software keeps track of per-interface counters for unknown protocol drops. However, these per-interface counters, that record packets with unknown (or unconfigured) protocol received, are not displayed in the cmdBoldshow interfacesnocmdBold command. This is a request to display those

[c-nsp] Cisco CNS Network Registrar 6.1 vs. VitalQIP IPAM

2007-10-04 Thread Dean Perrine
All, Anyone have some useful information in this area? Looking for information on the Pros / Cons of the following products: Cisco CNS Network Registrar 6.1 *vs.* Lucent VitalQIP - IP Name Management Any information would be helpful, Thank you, Dean Perrine

[c-nsp] single interface multiple VRF

2007-10-04 Thread Masood Ahmad Shah
Is it Possible to have 2 or more VRF tables existing on one single Interface Eth/Serial. If the answer is yes, how do you guys do that. Regards, Masood Ahmad Shah ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] single interface multiple VRF

2007-10-04 Thread Peter Rathlev
Masood Ahmad Shah [EMAIL PROTECTED] 10/05/07 12:01 AM Is it Possible to have 2 or more VRF tables existing on one single Interface Eth/Serial. If the answer is yes, how do you guys do that. You can use vrf selection source if you have the right equipment (7200 and up). Take a look at this:

Re: [c-nsp] single interface multiple VRF

2007-10-04 Thread Masood Ahmad Shah
I know if you use VRF-Lite you binds logical interfaces to a VRF (normally one WAN-interface and one LAN-interface). If there is only one WAN-link, it must be divided into sub-interfaces (with F/R, channel-groups, Vlans etc). The same applies to single LAN-ports. Is it correct? How exactly you

Re: [c-nsp] single interface multiple VRF

2007-10-04 Thread Ray Burkholder
This may help some: http://www.oneunified.net/blog/Cisco/vrflite.article -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Masood Ahmad Shah Sent: Thursday, October 04, 2007 19:01 To: cisco-nsp@puck.nether.net Subject: [c-nsp] single interface

[c-nsp] PA-MC-T3 and capacity questions

2007-10-04 Thread Troy Beisigl
Hi, I have 2 quick questions about capacity issues when using PA-MC-T3 cards and the ability to do MLPPP. We currently have 5 PA-MC-T3 cards in a 7507/RSP8 chassis and I would like to be able to move onto either a higher capacity chassis or split things between two chassis. If we go the route

Re: [c-nsp] eigrp redist ospf learned default route

2007-10-04 Thread Brad Henshaw
Richard Collins wrote: Are you sure about that - eigrp won't allow a redistr of a default route from another routing protocol? I gave it a quick try and it seemed to work. I believe what doesn't work is a redistr of a static default route into ospf. I'm not sure about anything :-) But

Re: [c-nsp] Converting a 1242AG from Lightweight to Autonomous IOS

2007-10-04 Thread Tom Storey
Nevermind, got it going. Must have been the original TFTP server I was using. Tried some different software and it worked fine. Cheers, Tom Hi all. Having a bit of fun converting a currently Lightweight 1242AG access point to Autonomous mode. Attached is the output on the console that

Re: [c-nsp] Interface output

2007-10-04 Thread Michael Malitsky
Now, why doesn't TAC know about this? I've just opened a ticket with the exact same question. It took them 2+ days to arrive at a similar answer (with a lot less certainty and detail), and in between they've produced random guesses ranging from your IOS is too new and this is a cosmetic problem

[c-nsp] Retreiving lost isakmp key

2007-10-04 Thread Matt Hill
Hi, One of our clients has lost their isakmp key and would like to know if they can recover it. Of course they have blamed it all on us... It doesn't bother me if we recover it from the Pix or from their client software in the end. I have always thought this was not possible and my initial

Re: [c-nsp] Retreiving lost isakmp key

2007-10-04 Thread Curtis Doty
Tomorrow Matt Hill said: One of our clients has lost their isakmp key and would like to know if they can recover it. Of course they have blamed it all on us... It doesn't bother me if we recover it from the Pix or from their client software in the end. I have always thought this was not

[c-nsp] Problem with 10 / Half ports with SXH

2007-10-04 Thread Colin Jenkinson
Hi, we recently upgraded a whole bunch of 6500s with s72033-ipservicesk9-mz.122-33.SXH from SX7. Since then we have had trouble with older equipment such as AS5200s and legacy Voicemail servers and PABXs the can only do 10 / Half becoming not responsive. The counters on the problem

[c-nsp] Verify static route next hop

2007-10-04 Thread Kevin Barrass
Hi Iam looking into a problem where we have no option other than to use static routes for political reasons ;0) Unfortunatly our core network between layer 3 devices is a switched ethernet backbone. The problem we have is that if a next hop of a static route goes down the static route stays