Re: [c-nsp] Need some guidance for T1 / wireless ethernet handoff load balancing/failover setup

2008-08-19 Thread Gert Doering
Hi, On Mon, Aug 18, 2008 at 06:36:20PM -0500, Scott Lambert wrote: I have a customer who went directly to cisco to ask about how to load balance two WAN connections I see two key issues here: - how to load *balance*. - how to reliably detect wireless is down if there is no end-to-end

Re: [c-nsp] 11503 ssl redundancy synch

2008-08-19 Thread Toby Burrows (Qube)
Many thanks Vijay, had suspected as much, just didn't want to believe it! It does seem really silly for the price of these things, it looks like I will be pushing for a pair of F5's when I implement my shared LB solution, Thanks again, Toby Burrows -Original Message- From: Ramcharan,

[c-nsp] 20G Etherchannel with Standby-SupV?

2008-08-19 Thread Garry
For a project we are in the process of evaluating the way to implement the requirements ... One solution would be a dual (extendable) site setup with a 4507R at each site, with dual SupV 10GE and dual connection each via two different fiber routes. Plan would be to connect one port each of the

[c-nsp] snmp values for indiviual vlans on trunk port

2008-08-19 Thread Vincent Hoffman
Hi, Just been asked if its possible to pull out the traffic values for specific vlans on a trunk port via snmp on a 2960 or 3750. I'm pretty sure the answer is no, but thought I'd have an ask, any suggestions? Vince ___ cisco-nsp mailing list

Re: [c-nsp] Queuing on 1 Gig transit interfaces

2008-08-19 Thread David Granzer
Hello, if the interface is GigE with traffic at around 300Mb/s and there is not any other back presure mechanism like traffic shaping then on the interface is not congestion and the congestion management like WFQ is not in use. David the congestion management is used only when On 8/19/08, Nic

Re: [c-nsp] 20G Etherchannel with Standby-SupV?

2008-08-19 Thread Garry
Looks like I mis-read (or at least misunderstood) the wording in the document I quoted ... in another one, I found a slightly more clear statement which noted that of the four 10G interfaces, any two could be used in a redundant setup ... so I guess the 20G idea is only feasible for a 2-site

Re: [c-nsp] CAB-HD8-ASYNC extension cables?

2008-08-19 Thread Andrew Girling
On Aug 19, 2008, at 12:21 AM, Kevin Graham wrote: The connector on the cards are (Micro)D68F (also used by SCSI-3 devices). You would be looking for a D68M-D68F cable to extend the connection. [...oops. sorry Brian, you were right...] Thanks, I didn't have one on hand to check. Do you

[c-nsp] Platform experience and recommendations for L2TPv3.

2008-08-19 Thread Lamar Owen
Good morning list. No rant today. :-) I am looking, however, for the collected experience of this list in platform experience and recommendations for providing six to twelve point to point L2TPv3 (or equivalent technology) tunnels at up to 150Mb/s rates between APS-protected OC3 endpoints (if

[c-nsp] 7600, diagnostic per-port

2008-08-19 Thread Christian Bering
Hi all, #diagnostic start module 3 test per-port port 2 Diagnostic[Module 3]: Running test(s) 4-5 may disrupt normal system operation Do you want to continue? [no]: Will running this diagnostics feature be disruptive to traffic on any other ports than port 2? Port 2 is currenly down/down but I

Re: [c-nsp] CAB-HD8-ASYNC extension cables?

2008-08-19 Thread Lamar Owen
On Monday 18 August 2008 21:40:35 Andrew Girling wrote: The connector on the cards are (Micro)D68F (also used by SCSI-3 devices). A SCSI LVD/SE 68 pin extension might work; I'd just wonder about the pairing (SCSI cables have strict pairing guidelines; certain signals have to traverse

[c-nsp] OT: network inventory

2008-08-19 Thread nasir.shaikh
Hi, Anybody familiar with (freeware/shareware) tools for a network inventory? Install-base is 100% cisco. Are there other utilities around that would scan the collected configurations and read relevant info (descriptions, ip add, link bandwidth etc)? Nasir Shaikh

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Jack
I think solar winds may help you. Regards, Jack -- From: [EMAIL PROTECTED] Sent: Tuesday, 19 August, 2008 8:13 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] OT: network inventory Hi, Anybody familiar with (freeware/shareware) tools for a

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Jeff Aitken
On Tue, Aug 19, 2008 at 01:13:28PM +0100, [EMAIL PROTECTED] wrote: Anybody familiar with (freeware/shareware) tools for a network inventory? Install-base is 100% cisco. Sounds like you want rancid: http://www.shrubbery.net/rancid/ --Jeff ___

[c-nsp] voice call drop on as5400

2008-08-19 Thread a0kunev
Hello I would like to share the problem we recently got on our network. We have DS3 coming to as5400, that converting PSTN calls to VOIP. We're handling only incoming calls, so the dial-pear config is simple, one voice and one voip provider. Recently we've started receiving complains from our

Re: [c-nsp] CAB-HD8-ASYNC extension cables?

2008-08-19 Thread Bjørn Mork
Andrew Girling [EMAIL PROTECTED] writes: On Aug 19, 2008, at 12:21 AM, Kevin Graham wrote: Thanks, I didn't have one on hand to check. Do you happen to know if the pinout is consistent w/ the HD68's used in the CAB-OCTAL? (Could be very useful for sparing...) Unfortunately, I'm not sure,

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Adam Greene
Besides documenting config changes, can rancid perform a tftp backup of router / switch startup configs, or integrate with some other software to pull down the config file if a change is detected? - Original Message - From: Lamar Owen [EMAIL PROTECTED] To: cisco-nsp@puck.nether.net

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Rikard Stemland Skjelsvik
http://www.ziptie.org/ -- Rikard On Tue, 19 Aug 2008, [EMAIL PROTECTED] wrote: Hi, Anybody familiar with (freeware/shareware) tools for a network inventory? Install-base is 100% cisco. Are there other utilities around that would scan the collected configurations and read relevant info

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Lamar Owen
On Tuesday 19 August 2008 09:04:29 Adam Greene wrote: Besides documenting config changes, can rancid perform a tftp backup of router / switch startup configs, or integrate with some other software to pull down the config file if a change is detected? See

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Jon Lewis
On Tue, 19 Aug 2008, Adam Greene wrote: Besides documenting config changes, can rancid perform a tftp backup of router / switch startup configs, or integrate with some other software to pull down the config file if a change is detected? It doesn't use tftp for it, but rancid does backup your

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Joe Provo
On Tue, Aug 19, 2008 at 09:04:29AM -0400, Adam Greene wrote: Besides documenting config changes, can rancid perform a tftp backup of router / switch startup configs, or integrate with some other software to pull down the config file if a change is detected? Lots of folks trigger rancid runs

Re: [c-nsp] OT: network inventory

2008-08-19 Thread chip
So far all of the software that's been presented will autodiscover devices and backup configs and such. Is there anything around that will actually take inventory of a router. By inventory I mean, list of cards, model numbers, serial numbers, pluggable optics, etc. I've been working on scripts

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Mike Louis
You can use a tool from the cisco partner site called Cisco Network Discovery Tool. It will categorize every modules in IOS/CatOS devices and output them to excel spreadsheets. It lists all EOL hardware and Software as well as serial numbers and such per device and module. Its great for

Re: [c-nsp] OT: network inventory

2008-08-19 Thread gordon
I've had pretty good luck with nedi so far: http://www.nedi.ch/ On Tue, 19 Aug 2008 09:56:42 -0400 chip [EMAIL PROTECTED] wrote: So far all of the software that's been presented will autodiscover devices and backup configs and such. Is there anything around that will actually take inventory

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Lamar Owen
On Tuesday 19 August 2008 09:56:42 chip wrote: So far all of the software that's been presented will autodiscover devices and backup configs and such. Is there anything around that will actually take inventory of a router. By inventory I mean, list of cards, model numbers, serial numbers,

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Ian MacKinnon
hi Chip, chip wrote: So far all of the software that's been presented will autodiscover devices and backup configs and such. Is there anything around that will actually take inventory of a router. By inventory I mean, list of cards, model numbers, serial numbers, pluggable optics, etc. I've

Re: [c-nsp] OT: network inventory

2008-08-19 Thread chip
On Tue, Aug 19, 2008 at 10:24 AM, Lamar Owen [EMAIL PROTECTED] wrote: On Tuesday 19 August 2008 09:56:42 chip wrote: So far all of the software that's been presented will autodiscover devices and backup configs and such. Is there anything around that will actually take inventory of a

Re: [c-nsp] Queuing on 1 Gig transit interfaces

2008-08-19 Thread Rodney Dunn
Exactly. Some folks think they need it just to say they are doing fancy qos. ;) If you want to put a MQC policy on the interface they can. But don't do it at those rates on the 7500 as you will kill the VIP CPU. They need a hardware forwarding platform to do those rates with QOS. Rodney On

Re: [c-nsp] Need some guidance for T1 / wireless ethernet handoffload balancing/failover setup

2008-08-19 Thread Ben Steele
omg terrible formatting, apologies everyone! damn webmail client... - Original Message - From: [EMAIL PROTECTED] To: cisco-nsp@puck.nether.net; Scott Lambert [EMAIL PROTECTED] Sent: Tuesday, August 19, 2008 1:25 PM Subject: Re: [c-nsp] Need some guidance for T1 / wireless ethernet

Re: [c-nsp] debugging stack corruption

2008-08-19 Thread Rodney Dunn
How are you getting this output? If you ssh/telnet to it and run the command do you get th esame output? That's not stack corruption to me. Rodney On Mon, Aug 18, 2008 at 01:10:44PM -0700, bill fumerola wrote: anyone see anything like this. i assume only a reload will fix this: rtr1#sh

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Giany
I see a lot of people ask about this. Here it is my 2 cents: I have set this using rancid and some perl scripts. If you manage to install rancid then the perl script should contain: 1. variables with : rancid config files , router.db, snmp community 2. vars with port type for cisco/cat/juniper

[c-nsp] Transmit Discards Across MLPPP

2008-08-19 Thread Jeffrey Wojciechowski
Hi All: I am new to this forum so not sure if this is a good place to ask this question. Whats the best way to troubleshoot transmit discards across MLPPP? Here is my setup and symptoms: -Cisco 2821 with 3x VWIC1-1MFT making up the multilink @ 1536 bandwidth (IPBASE image) -I am polling that

Re: [c-nsp] Transmit Discards Across MLPPP

2008-08-19 Thread Rodney Dunn
On a Cisco bundle we do QOS before putting the MLPPP headers on. That prevents a lot of out of orders if you do QOS after putting the MLP headers on. So what you are seeing sounds correct. You are most likely bursting above the bundle rate coming from your LAN going towards the bundle so the QOS

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Laurent Geyer
On Tue, Aug 19, 2008 at 9:56 AM, chip [EMAIL PROTECTED] wrote: So far all of the software that's been presented will autodiscover devices and backup configs and such. Is there anything around that will actually take inventory of a router. By inventory I mean, list of cards, model numbers,

Re: [c-nsp] voice call drop on as5400

2008-08-19 Thread a0kunev
Hi Alex, this is CAS with em, unfortunatly. T1s configured as signaling-class cas test profile incoming S*a*d*n controller T1 7/0:1 framing esf ds0-group 0 timeslots 1-24 type em-fgb dtmf dnis cas-custom 0 class test ! controller T3 7/0 framing m23 clock source line t1 1-28 controller

Re: [c-nsp] debugging stack corruption

2008-08-19 Thread bill fumerola
On Tue, Aug 19, 2008 at 10:41:05AM -0400, Rodney Dunn wrote: How are you getting this output? ssh rtr1 en sh stacks If you ssh/telnet to it and run the command do you get th esame output? it is not signal noise (serial spew, ip corruption, etc). That's not stack corruption to me. i'll try

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Mathias Spoerr
So far all of the software that's been presented will autodiscover devices and backup configs and such. Is there anything around that will actually take inventory of a router. By inventory I mean, list of cards, model numbers, serial numbers, pluggable optics, etc. I've been working on

Re: [c-nsp] Need some guidance for T1 / wireless ethernet handoff load balancing/failover setup

2008-08-19 Thread Scott Lambert
On Mon, Aug 18, 2008 at 09:02:27PM -0700, Seth Mattinen wrote: Scott Lambert wrote: I have a customer who went directly to cisco to ask about how to load balance two WAN connections to their Cisco PIX 515E. Cisco sold them an ASA 5510 and two 1841s and suggested VRRP or GLBP for the LAN

Re: [c-nsp] Need some guidance for T1 / wireless ethernet handoff load balancing/failover setup

2008-08-19 Thread Frank Bulk
If you can do (private) BGP, this document may help: http://www.cisco.com/en/US/tech/tk365/technologies_configuration_example0918 6a00800945bf.shtml#conf3 Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gert Doering Sent: Tuesday, August 19, 2008

[c-nsp] Cisco ASA - Export rules

2008-08-19 Thread Artur Renato Araujo da Silva
Hi, I would like to export the ASA rules to a HTML file (without using ASDM). Does anyone know a way (script?) to parse the ACLs and export to HTML? Tks Artur ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Cisco ASA - Export rules

2008-08-19 Thread Teller, Robert
I use this script to parse my pix acls and export them to an excel file. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Artur Renato Araujo da Silva Sent: Tuesday, August 19, 2008 1:57 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Cisco ASA - Export

Re: [c-nsp] Cisco ASA - Export rules

2008-08-19 Thread Teller, Robert
'Created by Robert Teller WScript.Echo This script will take a minute or two to run vbCrLf Please be patient Const ForReading = 1 'Looks for CF acl query WSArg = Wscript.arguments.Count If WSArg 1 Then WScript.Echo Please select a valid source WScript.Quit End If PixACL =

Re: [c-nsp] Cisco ASA - Export rules

2008-08-19 Thread Christian Koch
you could use nipper, which is a config auditor, so it will audit your security policy and configuration, and you have the options to export to xml, html, etc .. http://sourceforge.net/projects/nipper/?abmode=1 On Tue, Aug 19, 2008 at 4:56 PM, Artur Renato Araujo da Silva [EMAIL PROTECTED]

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Oliver Gorwits
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Chip, chip wrote: | Is there | anything around that will actually take inventory of a router. | By inventory I mean, list of cards, model numbers, serial | numbers, pluggable optics, etc. We use Netdisco for network discovery (both for

Re: [c-nsp] OT: network inventory

2008-08-19 Thread Stig Johansen
Check out NAV (Network Administration Visualized) at http://metanav.uninett.no/ as well. It gives full inventory of all devices as well as a load of other useful features.. Best regards, Stig Meireles Johansen -Opprinnelig melding- Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] På

Re: [c-nsp] MPLS VPN Question about PE-CE - Private or Public IP?

2008-08-19 Thread Christian Koch
a 64bit route distinguisher and the 32bit ip address are used to create vpnv4 address, which specifically solves the overlap problem On Tue, Aug 19, 2008 at 9:19 PM, Andy Saykao [EMAIL PROTECTED] wrote: Just wondering from those in the know, whether it's best practice to implement public or

Re: [c-nsp] Cisco ASA - Export rules

2008-08-19 Thread Church, Charles
In ASDM, there is a button under file called Show running configuration in a new window. That opens up a browser window with a URL something like: https://X.Y.Z.6/admin/exec/show%20running-config/show%20running-config%2 0asdm# that shows the whole running config. Probably nothing you couldn't

[c-nsp] Unable to connect VLAN traffic

2008-08-19 Thread Johnny Ramirez
We have layer 2 connectivity from our main office to an offsite facility where our servers reside. We are connected via fiber but is not a dedicated circuit.   Recently I  created a VLAN with same ID on both switches (main office and Offsite facility) . I trunked the port on both ends but not

Re: [c-nsp] Unable to connect VLAN traffic

2008-08-19 Thread Derick Winkworth
Q-in-Q Johnny Ramirez wrote: We have layer 2 connectivity from our main office to an offsite facility where our servers reside. We are connected via fiber but is not a dedicated circuit. Recently I created a VLAN with same ID on both switches (main office and Offsite facility) . I

Re: [c-nsp] MPLS VPN Question about PE-CE - Private or Public IP?

2008-08-19 Thread John Osmon
On Tue, Aug 19, 2008 at 09:41:09PM -0400, Christian Koch wrote: a 64bit route distinguisher and the 32bit ip address are used to create vpnv4 address, which specifically solves the overlap problem I don't think the overlap is the real issue: Although I tend to be more fond of using public

Re: [c-nsp] MPLS VPN Question about PE-CE - Private or Public IP?

2008-08-19 Thread Mikael Abrahamsson
On Wed, 20 Aug 2008, Andy Saykao wrote: Just wondering from those in the know, whether it's best practice to implement public or private IP's for the PE-to-CE link. What's everyone using and why? Best practice is to use public IP for the PE-CE link and then you admin the CE using that

Re: [c-nsp] Unable to connect VLAN traffic

2008-08-19 Thread Johnny Ramirez
Justin,   I appreciate your well explained answer. So basically they would tell me what VLANs I should use for me to match them.     Thanks       John--- On Tue, 8/19/08, Justin Shore [EMAIL PROTECTED] wrote: From: Justin Shore [EMAIL PROTECTED] Subject: Re: [c-nsp] Unable to connect VLAN

Re: [c-nsp] Unable to connect VLAN traffic

2008-08-19 Thread Ryan Lambert
Johnny, I think the better solution if your provider can accommodate, is to do Q-in-Q instead of having to dictate what tags you can use. This allows you, as Justin mentioned, to use your own tags across the circuit instead of having to coordinate with them every time you need to add another

Re: [c-nsp] Unable to connect VLAN traffic

2008-08-19 Thread Justin Shore
Johnny Ramirez wrote: Justin, I appreciate your well explained answer. So basically they would tell me what VLANs I should use for me to match them. That's one possibility. Hopefully your SP has progressed beyond that point though and supports Q-in-Q. It scales much better than

[c-nsp] VLAN ID limit?

2008-08-19 Thread Alex Balashov
For some reason, my Catalyst 2900 series (WS-C2924-XL) does not like VLAN IDs higher than 1005: sw01(config)#switchport trunk allowed vlan add 1202 Command rejected: Bad VLAN list - character #5 (EOL) delimits a VLAN number (1202) out of the range 1 to 1005. This is with a trunking interface:

Re: [c-nsp] VLAN ID limit?

2008-08-19 Thread Andrew Gristina
Are you in transparent vtp mode? On Tue, Aug 19, 2008 at 9:48 PM, Alex Balashov [EMAIL PROTECTED] wrote: For some reason, my Catalyst 2900 series (WS-C2924-XL) does not like VLAN IDs higher than 1005: sw01(config)#switchport trunk allowed vlan add 1202 Command rejected: Bad VLAN list -

Re: [c-nsp] VLAN ID limit?

2008-08-19 Thread Chris Phillips
Alex, You don't get around it on the 2924. You will need to upgrade to the 2950G-24-EI. They're not much more than the 2924. Good luck. Alex Balashov wrote: For some reason, my Catalyst 2900 series (WS-C2924-XL) does not like VLAN IDs higher than 1005: sw01(config)#switchport trunk

Re: [c-nsp] VLAN ID limit?

2008-08-19 Thread Alex Balashov
Damn. Are you absolutely sure there is no IOS upgrade for the existing switch that can fix this? Chris Phillips wrote: Alex, You don't get around it on the 2924. You will need to upgrade to the 2950G-24-EI. They're not much more than the 2924. Good luck. Alex Balashov wrote: For some

Re: [c-nsp] VLAN ID limit?

2008-08-19 Thread Chris Phillips
The last time I checked 12.0(WC17) or something like that, it was not possible. WC17 came out in mid-2007 if I recall correctly. I don't think that Cisco is going to support anything 1005 on the XL series switches ever. Their goal is to keep you buying new gear, and if they just keep

Re: [c-nsp] VLAN ID limit?

2008-08-19 Thread Gabriel Kuri
afaik, the 2900XL and 3500XL series switches do not support extended range vLANs, you'll need to upgrade your switch, sorry ... http://supportwiki.cisco.com/ViewWiki/index.php/The_Cisco_Catalyst_switch_does_not_permit_the_creation_of_extended-range_VLANs_in_the_VLAN_database_mode - Gabriel