[c-nsp] Cisco BGP received community

2007-12-12 Thread Mark Tech
Hi How can I see what BGP communities are being sent to me via BGP on a Cisco box. With Foundry I can use the command 'sh ip bgp neighbors xx.xx.xx.xx routes detail' and the output will give me detailed information including what communities are being sent i.e. sh ip bgp neighbors

Re: [c-nsp] Cisco BGP received community

2007-12-12 Thread Oliver Boehmer (oboehmer)
Mark Tech wrote on Wednesday, December 12, 2007 10:03 AM: Hi How can I see what BGP communities are being sent to me via BGP on a Cisco box. With Foundry I can use the command 'sh ip bgp neighbors xx.xx.xx.xx routes detail' and the output will give me detailed information including what

Re: [c-nsp] 10G LFS function

2007-12-12 Thread Marian Ďurkovič
On Tue, Dec 11, 2007 at 10:35:18AM +0900, Hiromasa Sekiguchi wrote: Does cisco products support LFS function of 802.3ae? We have a WS-X6704-10GE. Sure. You can verify its operation by disconnecting just one fibre - both interfaces will go down immediately. This also works on 1GE connections,

Re: [c-nsp] 10G LFS function

2007-12-12 Thread Hiromasa Sekiguchi
Thank you for your advice. If we don't need LFS function (e.g. use BFD), can we disable it? Please let me know the commands how to do it. Regards, Hiromasa Marian Ďurkovič wrote [2007/12/12 18:42(JST)]: On Tue, Dec 11, 2007 at 10:35:18AM +0900, Hiromasa Sekiguchi wrote: Does cisco products

Re: [c-nsp] 10G LFS function

2007-12-12 Thread Marian Ďurkovič
On Wed, Dec 12, 2007 at 07:21:22PM +0900, Hiromasa Sekiguchi wrote: Thank you for your advice. If we don't need LFS function (e.g. use BFD), can we disable it? Why would you like to do this? LFS / Remote fault detection is much faster and triggers reconvergence immediately - so it's good to

Re: [c-nsp] 10G LFS function

2007-12-12 Thread Hiromasa Sekiguchi
I understand LFS/RF is much faster. I'd like to only know whether we can disable it or not. Regards, Hiromasa Marian Ďurkovič wrote [2007/12/12 19:54(JST)]: On Wed, Dec 12, 2007 at 07:21:22PM +0900, Hiromasa Sekiguchi wrote: Thank you for your advice. If we don't need LFS function (e.g.

Re: [c-nsp] Cisco Tacacs+

2007-12-12 Thread Oliver Boehmer (oboehmer)
DAVID Sébastien wrote on Tuesday, December 11, 2007 8:56 AM: Hi, I'm trying to set up my network with a tacacs server based on debian for authentification. Everything works correctly but I meet difficulties to limit the commands in configure mode How does your aaa config look

Re: [c-nsp] underruns error locally inputs errors, runts and abort on remote interface

2007-12-12 Thread Niels Bakker
* [EMAIL PROTECTED] (Ziad Majzoub) [Tue 11 Dec 2007, 04:07 CET]: I'm seeing underruns errors on local STM1 interface, on the remote router i'm seeing runts, aborts and imput errors the controller is clean(during a certain period). Try switching both to line clock source if there is SDH

Re: [c-nsp] underruns error locally inputs errors, runts and abort on remote interface

2007-12-12 Thread Ziad Majzoub
Niels, are you suggesting clock source internal , on both ends ? BTW there is definitely some SDH equipment on the path regards On Dec 12, 2007 7:38 AM, Niels Bakker [EMAIL PROTECTED] wrote: * [EMAIL PROTECTED] (Ziad Majzoub) [Tue 11 Dec 2007, 04:07 CET]: I'm seeing underruns errors on local

[c-nsp] Bridging two VLANs together

2007-12-12 Thread Frank Bulk
We have a unique situation where our transport equipment can't bridge the traffic between two endpoints, so we would like to dump off each link's VLAN onto our router (7609-S with WS-X6748-GE-TX blades) where it can perform the bridging. Any reason why the following configuration wouldn't work?

Re: [c-nsp] Bridging two VLANs together

2007-12-12 Thread Masood Ahmad Shah
Well, If I understand you are talking about inter-vlan bridging. Yes it should work fine. You may need to add bridge 2 protocol ieee It's bridge protocol global configuration command to define the type fo STP. Regards, Masood Ahmad Shah -Original Message- From: [EMAIL PROTECTED]

Re: [c-nsp] CDP -- more than one neighbor on the same port?

2007-12-12 Thread Gert Doering
Hi, On Wed, Dec 12, 2007 at 01:58:07PM -0500, Furnish, Trever G wrote: Under what circumstances would CDP show more than one neighbor on the same port? dumb switch in between (that floods CDP packets to all ports, instead of handling them itself). We have a site where the local IT staff is

Re: [c-nsp] CDP -- more than one neighbor on the same port?

2007-12-12 Thread Jeff Kell
Furnish, Trever G wrote: Under what circumstances would CDP show more than one neighbor on the same port? If those are 35nnXL switches with gigastack modules, that's what you get... gigastack is essentially a shared half-duplex bus. Jeff ___

[c-nsp] CDP -- more than one neighbor on the same port?

2007-12-12 Thread Furnish, Trever G
Under what circumstances would CDP show more than one neighbor on the same port? We have a site where the local IT staff is claiming that a switch interface (switch2 g0/2) is connected directly to exactly one other cisco switch, but 'show cdp nei' on switch 2 shows three other switches as

Re: [c-nsp] CDP -- more than one neighbor on the same port?

2007-12-12 Thread Furnish, Trever G
-Original Message- From: Gert Doering [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 12, 2007 2:12 PM To: Furnish, Trever G Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] CDP -- more than one neighbor on the same port? Hi, On Wed, Dec 12, 2007 at 01:58:07PM -0500,

Re: [c-nsp] Cisco Tacacs+

2007-12-12 Thread DAVID Sébastien
Yes i have enable aaa command : aaa new-model aaa authentication login telnet group tacacs+ enable aaa authentication login console group tacacs+ enable aaa authentication enable default group tacacs+ enable aaa authorization exec default group tacacs+ if-authenticated none aaa authorization

Re: [c-nsp] CDP -- more than one neighbor on the same port?

2007-12-12 Thread Furnish, Trever G
sigh That would be exactly it. I guess it should have clicked when he said they were connected in a stack -- my head just refuses to accept the idea that a series of switches would be connected via a half-duplex stacking bus. :-( -Original Message- From: Jeff Kell [mailto:[EMAIL

Re: [c-nsp] Bridging two VLANs together

2007-12-12 Thread Fred Reimer
Did you mean bridge 2 protocol vlan-bridge? I suggest you read this Cisco document before you consider doing this: http://www.cisco.com/warp/public/473/inter-vlan_11072.pdf HTH, Fred Reimer, CISSP, CCNP, CQS-VPN, CQS-ISS Senior Network Engineer Coleman Technologies, Inc. 954-298-1697

Re: [c-nsp] route table lookup on leaking between vrfs

2007-12-12 Thread Pshem Kowalczyk
On 12/12/2007, Oliver Boehmer (oboehmer) [EMAIL PROTECTED] wrote: {cut} In non-vrf situation I would use next-hop-self before advertising the /16 to all the other peers, that would force the lookup on the router that knows about the /24s. Is there a way to do this lookup when the routes

[c-nsp] Traffic Analyzing?

2007-12-12 Thread Shaun R.
I don't know if something like this is even possible so I figured I would ask. I was wondering if there was any type of software out there that would monitor traffic leaving the network and display reports about which ASN/Providers they are going down. This would be useful for determining

Re: [c-nsp] Traffic Analyzing?

2007-12-12 Thread Roland Dobbins
On Dec 12, 2007, at 12:42 PM, Shaun R. wrote: This would be useful for determining what providers I should peer with next. For example if the software showed that 50% of my traffic was destined to travel to or across Level3 then it would be beneficial for me to bring in a pipe from

Re: [c-nsp] Traffic Analyzing?

2007-12-12 Thread Peter Kranz
Sure.. Check out stager http://software.uninett.no/stager or FlowViewer http://ensight.eos.nasa.gov/FlowViewer/ coupled with netflow data exports.. both have nice web front ends to allow you to slice and dice your netflow data. Of course your router will need full routes so it knows

Re: [c-nsp] Traffic Analyzing?

2007-12-12 Thread Bernd Ueberbacher
Something like Netflow peer-as export? http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/honf_c/chap10/onf_dbgp.pdf Greets, Bernd Shaun R. schrieb: I don't know if something like this is even possible so I figured I would ask. I was wondering if there was any type of

Re: [c-nsp] Traffic Analyzing?

2007-12-12 Thread Bill Nash
I'm not looking for MRTG. I'm looking for a traffic analyzer. 'Ooooh. Traffic analysis.. Netflow! You seek Netflow!' - billn On Wed, 12 Dec 2007, Shaun R. wrote: I don't know if something like this is even possible so I figured I would ask. I was wondering if there was any type of software

Re: [c-nsp] Bridging two VLANs together

2007-12-12 Thread Frank Bulk
Yes, I've read it, and the proposed topology is simple enough I don't think the points raised in the documentation will be an issue. Worst case, we could burn up two ethernet ports and use a cross-over cable between the two VLANs. Frank -Original Message- From: Fred Reimer

Re: [c-nsp] Bridging two VLANs together

2007-12-12 Thread Frank Bulk
Protocol 'ieee' is not an option, but 'vlan-bridge' is. I've applied it to the global config. Anything in: http://puck.nether.net/pipermail/cisco-nsp/2005-May/020444.html that would suggest this is not enough? Frank -Original Message- From: Masood Ahmad Shah [mailto:[EMAIL PROTECTED]

[c-nsp] Announcement: FlowViewer v3.3 now available

2007-12-12 Thread Joe Loiacono
FlowViewer v3.3 is now available with a number of new useful features. FlowViewer is a web front-end to the flow-tools open-source netflow capture and analysis tool suite. FlowViewer provides textual and graphical analysis tools, as well as long term tracking for specified flows. The

Re: [c-nsp] Traffic Analyzing?

2007-12-12 Thread Joe Loiacono
With exported netflow data and FlowViewer/flow-tools (coincidently just announced FlowViewer v3.3) you could set up FlowTrackings for each peer (via next-hop IP address) and examine them after a period to see the relative loads. Joe [EMAIL PROTECTED] wrote on 12/12/2007 03:42:51 PM: I don't

Re: [c-nsp] Bridging two VLANs together

2007-12-12 Thread Collins, Richard (SNL US)
Hello, If I recall correctly, fall-back bridging is only for non-ip traffic. Though I haven't tested it I believe your configuration with the addition of bridge 2 protocol ieee should work. Rich I believe what you propose (fall-back bridging) will work, but will be performed in software.

Re: [c-nsp] underruns error locally inputs errors, runts and abort on remote interface

2007-12-12 Thread Niels Bakker
* [EMAIL PROTECTED] (Aaron) [Wed 12 Dec 2007, 16:57 CET]: You should try clock s internal first if you have SDH gear in the middle. Um, no. Exactly the opposite. Please read what I actually wrote: clock source line. Use internal on one side only if you have a back-to-back link only, or a

Re: [c-nsp] unwanted arp reply traffic at IX

2007-12-12 Thread Daniel Roesen
On Sun, Nov 18, 2007 at 02:23:57AM +0100, Daniel Roesen wrote: On Sun, Nov 18, 2007 at 12:33:55AM +0100, Daniel Roesen wrote: Router#sh run | i prox ip arp proxy disable Router#sh run int g0/1 | i prox Router#sh ip int g0/1 | i Prox Proxy ARP is enabled I've verified

Re: [c-nsp] unwanted arp reply traffic at IX

2007-12-12 Thread Michael K. Smith - Adhost
Hello Daniel: -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Daniel Roesen Sent: Wednesday, December 12, 2007 4:11 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] unwanted arp reply traffic at IX On Sun, Nov 18, 2007 at

Re: [c-nsp] Cisco Tacacs+

2007-12-12 Thread Oliver Boehmer (oboehmer)
DAVID Sébastien mailto:[EMAIL PROTECTED] wrote on Wednesday, December 12, 2007 8:29 PM: Yes i have enable aaa command : aaa new-model aaa authentication login telnet group tacacs+ enable aaa authentication login console group tacacs+ enable aaa authentication enable default group tacacs+

Re: [c-nsp] route table lookup on leaking between vrfs

2007-12-12 Thread Oliver Boehmer (oboehmer)
Pshem Kowalczyk wrote on Wednesday, December 12, 2007 9:22 PM: On 12/12/2007, Oliver Boehmer (oboehmer) [EMAIL PROTECTED] wrote: {cut} In non-vrf situation I would use next-hop-self before advertising the /16 to all the other peers, that would force the lookup on the router that knows