Re: [c-nsp] 2801 bandwidth limiting

2008-04-25 Thread Ibrahim Abo Zaid
Hi Dan add bandwidth 100 command under the ethernet interface terminates this connection and shaping should work , we'll need shaping instead of policing best regards --Abo Zaid On 4/25/08, Dan Letkeman [EMAIL PROTECTED] wrote: Luan, I have tried this, but it doesn't seem to take

Re: [c-nsp] 2801 bandwidth limiting

2008-04-25 Thread Oliver Boehmer (oboehmer)
The ports on the HWIC-4ESW (as well as on the other other switch modules for the ISRs) generally don't support the same set of QoS features as the regular L3 interfaces, so you can't shape on these ports. Can you move your uplink to one of the built-in FE ports instead? oli Dan Letkeman

Re: [c-nsp] Redistributing static routes in BGP

2008-04-25 Thread Christian Zeng
Hi, * Gary Roberton [EMAIL PROTECTED] wrote: So, an update for anyone who is interested. track 123 ip sla 1 reachability ip sla 1 icmp-echo 10.40.1.1 timeout 1000 threshold 2 frequency 3 ip sla schedule 1 life forever start-time now ip route 88.0.0.0 255.255.255.0 10.40.1.1 track 123 If

Re: [c-nsp] 2801 bandwidth limiting

2008-04-25 Thread Tom Storey
On 25/04/2008, at 3:58 PM, Oliver Boehmer (oboehmer) wrote: The ports on the HWIC-4ESW (as well as on the other other switch modules for the ISRs) generally don't support the same set of QoS features as the regular L3 interfaces, so you can't shape on these ports. Can you move your

[c-nsp] Qos between CE and PE

2008-04-25 Thread alex
Hello, I tried to enable Qos between to routers. I checked configurations on several sites but didn't get it to work. here are the relevant parts of the configs: On the CE router: class-map match-all FTP-server match access-group 110 ! policy-map FTP class FTP-server priority percent 75 !

Re: [c-nsp] Qos between CE and PE

2008-04-25 Thread Oliver Boehmer (oboehmer)
Alex, if you use the MQC percent keyword, make sure you set your interface bandwidth accordingly. What does show policy-map interface tell you about the bandwidth for the class you've used? I wouldn't use priority queue for this, bandwidth (as used on the PE) is just fine for this. oli

[c-nsp] 4948 vs sup32 for L2/L3 performance

2008-04-25 Thread Rutger Bevaart
Hello list, We're looking at swapping out our sup32 + 6148-GE for the 4948. Performance wise it seems that the 4948 is a very clear winner, as the 6148 linecard is oversubscribed 8:1 and can only do 8 Gbit/s total. We're worried about what features we're loosing when going this route.

Re: [c-nsp] SUP Options for Cat 4000

2008-04-25 Thread Howard Leadmon
You need a Sup2+, Sup3, Sup4 or Sup5 to run IOS and do L3/4 stuff in the switch. The original Sup2 uses CatOS, and even on that you should have 2x GE ports, not just one. Granted IOS is nice, but if you just want basic managed switching, CatOS works well on the beasties.. --- Howard Leadmon

Re: [c-nsp] Qos between CE and PE

2008-04-25 Thread Dirk-Jan van Helmond
remember that the priority command POLICES to a bitrate, not shapes. When you police a TCP session, things start to go terribly wrong with CA windows etc. So shape the traffic before you police it. regards, Dirk-Jan ps. why are you prioritizing FTP traffic? pps. if you are going to allocate

[c-nsp] Need some ideas on trunking vlans over ATM

2008-04-25 Thread Steven Pfister
I've got a situation where I have several (older) remote sites connected to a central site via ATM (they're being phased out for the most part). I need to find a way to have one particular vlan at each site assigned to a couple of ports on a switch at the central site. This only needs to be

Re: [c-nsp] 2801 bandwidth limiting

2008-04-25 Thread Dan Letkeman
That's kind of what I thought. I will be able to move it over to the FE port soon. So on the config for the shaping command, I create the class, match anything, create the policy, assign the class, and enter the shape command: bandwidth 10M shape peak 13M (this should not allow any more

Re: [c-nsp] Qos between CE and PE

2008-04-25 Thread Zitouni Rachid
No congestion... no qos scheduling :-) Rachid -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Oliver Boehmer (oboehmer) Envoyé : vendredi 25 avril 2008 13:36 À : [EMAIL PROTECTED]; cisco-nsp@puck.nether.net Objet : Re: [c-nsp] Qos between CE and PE

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Paul Stewart
Thanks - it kind of complicates things internally a couple of other folks had suggested this as well which I expected (and appreciate). I guess my question is whether there is *any* other solutions away from doing it dynamically via Radius? I was thinking of some form of static routing

Re: [c-nsp] 2801 bandwidth limiting

2008-04-25 Thread Oliver Boehmer (oboehmer)
the following config should work: policy-map FOO class class-default shape average 1300 int fastethernet x/y service-policy output FOO please take a look at CCO command reference (for example http://www.cisco.com/en/US/docs/ios/12_2/qos/command/reference/qrfcmd9.h tml#wp1077189) to see

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Dave Weis
On Thu, 24 Apr 2008, Paul Stewart wrote: Without messing with Radius, what options do I have to inject these routes towards the endpoints when they are changing different devices all the time? This seems like such a simple question but I have yet to come up with an elegant solution ;) I was

Re: [c-nsp] 2801 bandwidth limiting

2008-04-25 Thread Justin Shore
I'm surprised that no one has mentioned using a simple Committed Access Rate (CAR). It may not be the new hotness but it's simple, it works and works just about everywhere. interface Vlan XYZ rate-limit input 1000 conform-action transmit exceed-action drop rate-limit output

Re: [c-nsp] Cisco 7206VXR

2008-04-25 Thread Gert Doering
Hi, On Fri, Apr 25, 2008 at 01:12:14AM +0200, Sidney Boumendil wrote: (remember OIR ie hot swap of PA is not supported on 7200 platform)? 7200s perfectly well support PA OIR. Only the I/O-Board (and NPE) are not hot-swappable. gert -- USENET is *not* the non-clickable part of WWW!

Re: [c-nsp] Cisco 7206VXR

2008-04-25 Thread David Coulson
I think the 7200 platform is the only one from Cisco where I have never had a OIR hiccup. Gert Doering wrote: 7200s perfectly well support PA OIR. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] Cisco 7206VXR

2008-04-25 Thread Gert Doering
Hi, On Fri, Apr 25, 2008 at 10:55:35AM -0400, Jason Berenson wrote: Never had a hiccup? I'd say 70% of the time the router falls on its face... For 7500s, I can second that - but for the 7200, never ever any problem. (Non-VXRs VXRs, everything from NPE-150 to NPE-G1, IOS 11.1, 11.1CC to 12.3

Re: [c-nsp] Cisco 7206VXR

2008-04-25 Thread David Coulson
Gert Doering wrote: For 7500s, I can second that - but for the 7200, never ever any problem. On a 7500, if it was VIP based I would pretty much guarantee that the router would require a reload - Even manually forcing a bus stall rather than expecting the card insertion to do it right. The

[c-nsp] T1 aggregation boxes and some bonus info

2008-04-25 Thread Marlow, Travis
Hey everyone, I wanted to find out what everyone is using to aggregate customer T1 links. We're using the 7206VXR platform with NPE-G2 filled to the hilt with PA-MC-2T3+ cards, including the PA Jacket card slot. The second question I have is if anyone else is using this same solution, how are you

Re: [c-nsp] Need some ideas on trunking vlans over ATM

2008-04-25 Thread Everton da Silva Marques
On Fri, Apr 25, 2008 at 09:20:25AM -0400, Steven Pfister wrote: I've got a situation where I have several (older) remote sites connected to a central site via ATM (they're being phased out for the most part). I need to find a way to have one particular vlan at each site assigned to a couple

Re: [c-nsp] Need some ideas on trunking vlans over ATM

2008-04-25 Thread Lamar Owen
On Friday 25 April 2008, Steven Pfister wrote: I've got a situation where I have several (older) remote sites connected to a central site via ATM (they're being phased out for the most part). I need to find a way to have one particular vlan at each site assigned to a couple of ports on a

Re: [c-nsp] Need some ideas on trunking vlans over ATM

2008-04-25 Thread Lamar Owen
[I know, replying to my own message is poor form, but I forgot to show how to add an ELAN] On Friday 25 April 2008, Lamar Owen wrote: lane database parilane name pari server-atm-address 47.003CA700.0090BF2EF071.C0 default-name pari Here's where you would add an ELAN

Re: [c-nsp] 2801 bandwidth limiting

2008-04-25 Thread Dan Letkeman
Justin, Yes I tried that and it did work, but I think shaping is the preferred method for us. Thanks, Dan. On Fri, Apr 25, 2008 at 9:33 AM, Justin Shore [EMAIL PROTECTED] wrote: I'm surprised that no one has mentioned using a simple Committed Access Rate (CAR). It may not be the new hotness

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Paul Stewart
Thanks So if I go the radius route, if there a way for me to inject a /32 for the connection itself and then inject a route towards that /32? Take care, Paul -Original Message- From: Gert Doering [mailto:[EMAIL PROTECTED] Sent: Friday, April 25, 2008 12:04 PM To: Paul Stewart Cc:

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Gert Doering
Hi, On Fri, Apr 25, 2008 at 12:43:27PM -0400, Paul Stewart wrote: So if I go the radius route, if there a way for me to inject a /32 for the connection itself and then inject a route towards that /32? That's pretty much what Framed-IP-Route does. (Not that there's a technical difference

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Dave Weis
Gert Doering wrote: On Fri, Apr 25, 2008 at 12:43:27PM -0400, Paul Stewart wrote: So if I go the radius route, if there a way for me to inject a /32 for the connection itself and then inject a route towards that /32? That's pretty much what Framed-IP-Route does. (Not that there's a

Re: [c-nsp] T1 aggregation boxes and some bonus info

2008-04-25 Thread Justin M. Streiner
On Fri, 25 Apr 2008, Marlow, Travis wrote: Hey everyone, I wanted to find out what everyone is using to aggregate customer T1 links. We're using the 7206VXR platform with NPE-G2 filled to the hilt with PA-MC-2T3+ cards, including the PA Jacket card slot. The second question I have is if

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Jon Lewis
On Fri, 25 Apr 2008, Paul Stewart wrote: Thanks So if I go the radius route, if there a way for me to inject a /32 for the connection itself and then inject a route towards that /32? Framed-IP-Address = 10.0.0.1, Framed-Route = 192.168.1.0/29 10.0.0.1 1,

Re: [c-nsp] Cisco 7206VXR

2008-04-25 Thread Sidney Boumendil
On 4/25/08, Gert Doering [EMAIL PROTECTED] wrote: 7200s perfectly well support PA OIR. My mistake :) Must have confused with modular routers and NM. Sidney ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Paul Stewart
Thanks... that's exactly what I needed - will talk to our sys admin etc.. Thanks Dave as well for your reply and everyone else...;) Paul -Original Message- From: Jon Lewis [mailto:[EMAIL PROTECTED] Sent: Friday, April 25, 2008 1:01 PM To: Paul Stewart Cc: cisco-nsp@puck.nether.net

Re: [c-nsp] Static Routing Question

2008-04-25 Thread David Coulson
Assuming everything is dynamic, Framed-Address will set the remote side IP (you will need to use Framed-Netmask to set it to a /32). Then you can use Framed-Route to add a route pointing to that /32. Paul Stewart wrote: Thanks So if I go the radius route, if there a way for me to inject

Re: [c-nsp] Static Routing Question

2008-04-25 Thread Robert Blayzor
On Apr 25, 2008, at 2:03 PM, David Coulson wrote: Assuming everything is dynamic, Framed-Address will set the remote side IP (you will need to use Framed-Netmask to set it to a /32). Then you can use Framed-Route to add a route pointing to that /32. Framed-Netmask is assumed all ones if

Re: [c-nsp] Cisco 7206VXR

2008-04-25 Thread Gert Doering
Hi, On Fri, Apr 25, 2008 at 07:04:24PM +0200, Sidney Boumendil wrote: On 4/25/08, Gert Doering [EMAIL PROTECTED] wrote: 7200s perfectly well support PA OIR. My mistake :) Must have confused with modular routers and NM. Those are a bit funny indeed - 3660s actually support hot-swap,