[c-nsp] what is the Crypto PAS Proc???

2008-01-08 Thread Stephanie . Castelain
Hello List, I have a router which is overloaded. His processor goes up to 99% load. When issuing a sh proc cpu command, the one with the higgest load is the Crypto PAS Proc. Do you have a hint? #sh proc cpu | begin crypto 188 479 50 0.00% 0.00% 0.00% 0 crypto

[c-nsp] traffic shaping on 7200

2008-01-08 Thread Rivo Tahina RAZAFINDRATSIFA
Hi all, I do traffic shaping on a 7206 box, eg: a: 10Mbps for one class b: 15Mbps for another class c: 20Mbps for another class If c: only use 10Mbps, how can I share it to a: and b:? How can I monitor (graph) the bandwidth usage for the 3 classes? Best Regards.

[c-nsp] Current CCNA tests

2008-01-08 Thread Garry
I was thinking about getting a refreshed CCNA certification sometime, my original cert ran out a while ago ... (luckily, my knowledge of Cisco routers didn't expire with it ;) ) Anyway, I remember Cisco was (or had just did) an update on their CCNA tests back then. I also remember that the

Re: [c-nsp] traffic shaping on 7200

2008-01-08 Thread Jean-Christophe Varaillon
Hi, If c: only use 10Mbps, how can I share it to a: and b:? I would say that if your classes are Class Based Weighted Faire Queuing. How can I monitor (graph) the bandwidth usage for the 3 classes? You can graph each class using MRTG and the relevant OID (.1.3.6.1.4.1.9.9.166.1.15.1.1.7.x.y,

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread tele
http://www.cisco.com/web/learning/le3/current_exams/640-802.html :tele On Tue, 2008-01-08 at 13:16 +0100, Garry wrote: I was thinking about getting a refreshed CCNA certification sometime, my original cert ran out a while ago ... (luckily, my knowledge of Cisco routers didn't expire with

[c-nsp] 3560 inline power trouble

2008-01-08 Thread Erich Hohermuth
Hello, We have a strange problem with a 3560-8PC router (c3560-advipservicesk9-mz.122-37.SE1). Which kills three times the uplink Port from a 2960. It looks like a power over ethernet problem which accour if you power off the 2960. The port is configured like this: interface FastEthernet0/1

Re: [c-nsp] traffic shaping on 7200

2008-01-08 Thread Zitouni Rachid
Hi, Using wfq (ie class based shaping) : To illustrate, lets suppose the following weight for each queue, a:1 b:2 c:3 If total bandwith doesn't exceed 45Mbps, no congestion: each queue can manage its bandwith. If total amount of bandwith 45Mbps exceed, wfq gives a weight to each queue, In

Re: [c-nsp] traffic shaping on 7200

2008-01-08 Thread David Granzer
On 1/8/08, Rivo Tahina RAZAFINDRATSIFA [EMAIL PROTECTED] wrote: Hi all, I do traffic shaping on a 7206 box, eg: a: 10Mbps for one class b: 15Mbps for another class c: 20Mbps for another class If c: only use 10Mbps, how can I share it to a: and b:? maybe this help policy-map PMAP1 class

Re: [c-nsp] traffic shaping on 7200

2008-01-08 Thread Ed Ravin
On Tue, Jan 08, 2008 at 01:38:44PM +0300, Rivo Tahina RAZAFINDRATSIFA wrote: Hi all, I do traffic shaping on a 7206 box, eg: a: 10Mbps for one class b: 15Mbps for another class c: 20Mbps for another class If c: only use 10Mbps, how can I share it to a: and b:? How can I monitor (graph)

Re: [c-nsp] traffic shaping on 7200

2008-01-08 Thread Zitouni Rachid
Suitable not to forget to enable persistence of ifindex and cbqos objects index otherwise your brain will be damaged so as irreversible :-) HiH and HnY Rachid -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Jean-Christophe Varaillon Envoyé : mardi 8

Re: [c-nsp] Telnet software with source port

2008-01-08 Thread Ernie Mikulic (emikulic)
Cisco IP SLAs TCP Connect operation may fit your bill. http://www.cisco.com/go/ipsla -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ali, Rijas: BB UAE (IT) Sent: Monday, January 07, 2008 5:57 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Telnet

Re: [c-nsp] 7604/sup32

2008-01-08 Thread Jared Mauch
On Tue, Jan 08, 2008 at 07:45:11AM -0800, Mark Kent wrote: So, I'm looking at the cisco web pages and I see the 7600 is pushed big-time as a service provider edge device, and yet I see that the sup32-3b has a 300Mhz processor, and so it is not much faster than an NPE-300 (262Mhz). I stopped

Re: [c-nsp] Remote rebooting

2008-01-08 Thread Adam Piasecki
Thanks for the response, you guys gave me a bunch of ideas and i finally figure out the problem. The last length of fiber was Multimode, or is bad, i moved the entire router back one fiber jump and i'm rockin in the 10/10mb world now.. No errors, this DS3 is solid. Unfortionally the fiber

Re: [c-nsp] 7604/sup32

2008-01-08 Thread Peter Rathlev
On Tue, 2008-01-08 at 07:45 -0800, Mark Kent wrote: So, I'm looking at the cisco web pages and I see the 7600 is pushed big-time as a service provider edge device, and yet I see that the sup32-3b has a 300Mhz processor, and so it is not much faster than an NPE-300 (262Mhz). I stopped

[c-nsp] SCP router-to-router work?

2008-01-08 Thread Raymond, Steven
So I can easily scp an image from my workstation onto a router. But I cannot seem to scp IOS files between routers (sup720s, SRB2 code). Am 99% certain I did so in the past, but no amount of monkeying could get it to work recently. Failure indication varies (it happens immediately), but it

Re: [c-nsp] 7604/sup32

2008-01-08 Thread Eugeniu Patrascu
Peter Rathlev wrote: With 512MB memory, it can't take a full table? The world is moving fast I guess. :-) Not the memory is the issue, but TCAM size and on the Sup32 it can't take full routes anymore (as it's limited to 239k routes, iirc). ___

Re: [c-nsp] 7604/sup32

2008-01-08 Thread Ian Cox
At 06:32 PM 1/8/2008 +0100, Peter Rathlev wrote: On Tue, 2008-01-08 at 07:45 -0800, Mark Kent wrote: So, I'm looking at the cisco web pages and I see the 7600 is pushed big-time as a service provider edge device, and yet I see that the sup32-3b has a 300Mhz processor, and so it is not much

Re: [c-nsp] 7604/sup32 (minor correction)

2008-01-08 Thread Ian Cox
At 06:32 PM 1/8/2008 +0100, Peter Rathlev wrote: On Tue, 2008-01-08 at 07:45 -0800, Mark Kent wrote: So, I'm looking at the cisco web pages and I see the 7600 is pushed big-time as a service provider edge device, and yet I see that the sup32-3b has a 300Mhz processor, and so it is not much

Re: [c-nsp] 7604/sup32

2008-01-08 Thread Peter Rathlev
On Tue, 2008-01-08 at 19:46 +0200, Eugeniu Patrascu wrote: Not the memory is the issue, but TCAM size and on the Sup32 it can't take full routes anymore (as it's limited to 239k routes, iirc). On Tue, 2008-01-08 at 09:50 -0800, Ian Cox wrote: It forwards in hardware if the FIB will fit into

Re: [c-nsp] 7604/sup32

2008-01-08 Thread Brian Turnbow
Hi, 7600 is a hardware forwarding platform(basically a catalyst 6500), whereas the 7200 is processor based. The 7600 can forward much much more traffic. With full routes however the sup-32 isn't going to cut it you need the 720 with PFC3BXL. The sup32 doesn't have enough tcam space for full

Re: [c-nsp] 7604/sup32 (minor correction)

2008-01-08 Thread Robert Blayzor
Ian Cox wrote: It forwards in hardware if the FIB will fit into the hardware FIB table. The full internet table will not fit into a PFC2/PFC3a/PFC3b/FFC3a/DFC3b/PFC3C/DFC3C anymore since the hardware table, even after changing from the default will only get you 239k routes. For full

Re: [c-nsp] 7604/sup32 (minor correction)

2008-01-08 Thread Mark Boolootian
If you don't use XLs and then you wind up with FIB exception and packets forwarded in software. Packets for those routes that haven't been installed in the FIB... I'm probably a bad person for asking, and not first searching, but can someone remind me what happens when the FIB fills - what

Re: [c-nsp] 7604/sup32

2008-01-08 Thread Mark Kent
[EMAIL PROTECTED] wrote: There has been alot of talk about this on the list yeah, but it's nice to get it boiled down to the essentials, like you and others did. Thanks, -mark ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Line rate DS3 on a 3845

2008-01-08 Thread Seth Mattinen
Does anyone have real-life experience with driving a full DS3's worth of bandwidth through the 3845? The website says it will, but I don't know if that's yes, as long as it's a single flow or yes, even for worst case traffic or something in the middle. Thanks! ~Seth

Re: [c-nsp] Line rate DS3 on a 3845

2008-01-08 Thread Jeffrey Ollie
On 1/8/08, Seth Mattinen [EMAIL PROTECTED] wrote: Does anyone have real-life experience with driving a full DS3's worth of bandwidth through the 3845? The website says it will, but I don't know if that's yes, as long as it's a single flow or yes, even for worst case traffic or something in the

Re: [c-nsp] Line rate DS3 on a 3845

2008-01-08 Thread Justin Shore
Jeffrey Ollie wrote: On 1/8/08, Seth Mattinen [EMAIL PROTECTED] wrote: Does anyone have real-life experience with driving a full DS3's worth of bandwidth through the 3845? The website says it will, but I don't know if that's yes, as long as it's a single flow or yes, even for worst case

Re: [c-nsp] SCP router-to-router work?

2008-01-08 Thread Luan Nguyen
Say you want to scp ios from router 1 onto router 2 disk2: on router 2 set up aaa new-model aaa authentication login default local aaa authorization exec default local username steve priviledge 15 password steve then on router 1 where you have the ios: copy disk2:iosimage.bin scp://[EMAIL

Re: [c-nsp] 6500 autoboot intermittent failures

2008-01-08 Thread Jon Lewis
On Mon, 7 Jan 2008, Jon Lewis wrote: On Mon, 7 Jan 2008, Jared Mauch wrote: I've never tried anything greater than 1G. I can report now that 2GB cards work properly, both with 12.2SXF and 12.2SXD. -- Jon Lewis

Re: [c-nsp] SCP router-to-router work?

2008-01-08 Thread Peter Rathlev
On Tue, 2008-01-08 at 09:47 -0800, Raymond, Steven wrote: So I can easily scp an image from my workstation onto a router. But I cannot seem to scp IOS files between routers (sup720s, SRB2 code). Am 99% certain I did so in the past, but no amount of monkeying could get it to work recently.

Re: [c-nsp] 7604/sup32 (minor correction)

2008-01-08 Thread Euan Galloway
On Tue, Jan 08, 2008 at 10:14:09AM -0800, Mark Boolootian wrote: If you don't use XLs and then you wind up with FIB exception and packets forwarded in software. Packets for those routes that haven't been installed in the FIB... Switched to the floor if you are unlucky enough in topology

Re: [c-nsp] SCP router-to-router work?

2008-01-08 Thread Raymond, Steven
I have no problems logging in w/ SSH. And the problems are the same when copying from a a Linux shell. Maybe SRB is just being stupid. :-) Agreed. Further testing this morning shows I can send from SRB2 to SRA2 just fine, but from the very same router running SRB2 to another router running

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Gert Doering
Hi, On Tue, Jan 08, 2008 at 02:33:00PM +, [EMAIL PROTECTED] wrote: helps people pass exams, but from listening to friends complain about cisco exams, it's usually been an issue of comprehension than incorrect answers or to many right answers. Do they still ask about Class B networks, and

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Justin Shore
Gert Doering wrote: Hi, On Tue, Jan 08, 2008 at 02:33:00PM +, [EMAIL PROTECTED] wrote: helps people pass exams, but from listening to friends complain about cisco exams, it's usually been an issue of comprehension than incorrect answers or to many right answers. Do they still ask

Re: [c-nsp] auto-rp/bsr for external RPs

2008-01-08 Thread Zitouni Rachid
msdp peering between border RPs could fit your need. HiH Rachid -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de James Slepicka Envoyé : mardi 8 janvier 2008 21:06 À : cisco-nsp@puck.nether.net Objet : [c-nsp] auto-rp/bsr for external RPs Hello all,

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Peter Rathlev
On Tue, 2008-01-08 at 22:51 +0100, Gert Doering wrote: Do they still ask about Class B networks, and how many subnets of 16 hosts can you put into a Class C (ignoring the now-default of ip subnet-zero) and such crappy stuff? I may be pedantic now (it' getting late!), but ip subnet-zero

[c-nsp] [OT] Driving 1310nm optics through 1550nm circulators

2008-01-08 Thread Dale Shaw
Hi, Apologies for the off-topic post, but I figured there'd be a few fibre optic guru nerd types out there. I need to connect some equipment (a router to a switch) via a dark fibre service. At each end, the service is presented as TX and RX on an optical circulator -- the fibre run itself is a

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread A . L . M . Buxey
Hi, I may be pedantic now (it' getting late!), but ip subnet-zero doesn't change the number of hosts you can cram into an unsubnetted /24 network, class C or otherwise, does it? As I understand it, it just pretty much right - it allows you to use some freaky /24's within your available space

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Justin Shore
Peter Rathlev wrote: Um... EIGRP is still semi-widely used last time I checked. It's a complex protocol, but things like unequal cost multipath makes it well worth knowing. And it was OSPF and BGP that took up by far the largest part of my exam, but maybe I was just lucky. :-) That may be but

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Brian Desmond
As I recall from a couple years ago (maybe three even at this point) there was a bunch of that how many subnets of size X can you fit in a /Y? Lot of look at this STP topology and tell us what will happen if event K occurs too. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Paul Raj Khangure
On Tue, Jan 08, 2008 at 02:33:00PM +, [EMAIL PROTECTED] wrote: their website. I'm not a trainer or someone that helps people pass exams, but from listening to friends complain about cisco exams, it's usually been an issue of comprehension than incorrect answers or to many right answers.

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Paul Raj Khangure
On Tue, Jan 08, 2008 at 11:17:51PM +, [EMAIL PROTECTED] wrote: available space - but its more important when using /23's and the like where you can use .0 and .255 addresses within the space. I've found that there are an awful lot of (mis?)configured routers and hosts out there which will

[c-nsp] CSS - Logging

2008-01-08 Thread Steve Wright
Hi all, I'm having some interesting fun with getting a CSS to log what I'm after to my syslog server. I see messages getting through, for example a service going down etc.. however I'd also like to log when the service comes back up and I haven't quite found teh correct knobs to tweak to get

[c-nsp] Bridge L2 network across WAN

2008-01-08 Thread Geyer, Nick
Hi Everyone, I am hoping someone can help me out here. We have an old legacy network which is just a flat L2 network across multiple sites connected by fibre. For various reasons this fibre will no longer be available for use, so I need to find another way to keep this L2 network intact. There

[c-nsp] 75MB native IOS image over tftp via OS X

2008-01-08 Thread Jason Lixfeld
So I'm having a heck of a time trying to get a big file onto either the bootflash or disk0 of a SUP720. The tftp never finishes and spits an error back (can't present the error message at the moment). A quick search showed some results circa 2000 which large files and solaris had issues,

Re: [c-nsp] Bridge L2 network across WAN

2008-01-08 Thread John van Oppen
That would be a great application for l2tpv3, assuming you don't need to move a huge amount of data and don't have MPLS enabled. Hit me up off-list for the config examples. John van Oppen Spectrum Networks LLC 206.973.8302 (Direct) 206.973.8300 (main office) -Original Message- From:

Re: [c-nsp] auto-rp/bsr for external RPs

2008-01-08 Thread James Slepicka
probably not the answer you want to hear...Run an RP for *all* groups on a router you control Actually, this is what I'm doing now -- all of my routers are pointing to an anycast RP for internal groups. run MSDP between your RP and the upstream RP Unfortunately, the third party won't run MSDP

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Andrew Gristina
On Jan 8, 2008 2:58 PM, Justin Shore [EMAIL PROTECTED] wrote: Peter Rathlev wrote: Um... EIGRP is still semi-widely used last time I checked. It's a complex protocol, but things like unequal cost multipath makes it well worth knowing. And it was OSPF and BGP that took up by far the largest

Re: [c-nsp] Bridge L2 network across WAN

2008-01-08 Thread Andrew Gristina
You can also look at QinQ tunneling. But really that just extends the pain. It might be more worth your time to deal with the flat layer 2 network. On Jan 8, 2008 5:47 PM, Geyer, Nick [EMAIL PROTECTED] wrote: Hi Everyone, I am hoping someone can help me out here. We have an old legacy

Re: [c-nsp] 75MB native IOS image over tftp via OS X

2008-01-08 Thread Garry
Jason Lixfeld wrote: So I'm having a heck of a time trying to get a big file onto either the bootflash or disk0 of a SUP720. The tftp never finishes and spits an error back (can't present the error message at the moment). I have something in the back of my mind where TFTP was limited to

Re: [c-nsp] 75MB native IOS image over tftp via OS X

2008-01-08 Thread Jason Lixfeld
On 9-Jan-08, at 12:29 AM, Garry wrote: Jason Lixfeld wrote: So I'm having a heck of a time trying to get a big file onto either the bootflash or disk0 of a SUP720. The tftp never finishes and spits an error back (can't present the error message at the moment). I have something in the

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Gert Doering
Hi, On Tue, Jan 08, 2008 at 11:17:51PM +, [EMAIL PROTECTED] wrote: I may be pedantic now (it' getting late!), but ip subnet-zero doesn't change the number of hosts you can cram into an unsubnetted /24 network, class C or otherwise, does it? As I understand it, it just pretty much

Re: [c-nsp] Current CCNA tests

2008-01-08 Thread Gert Doering
Hi, On Tue, Jan 08, 2008 at 11:36:18PM +0100, Peter Rathlev wrote: On Tue, 2008-01-08 at 22:51 +0100, Gert Doering wrote: Do they still ask about Class B networks, and how many subnets of 16 hosts can you put into a Class C (ignoring the now-default of ip subnet-zero) and such crappy