Re: [c-nsp] Cisco BGP Running on VRF?

Hi Bill, On Tue, 2008-09-30 at 17:50 -0500, Murphy, William wrote: I have a Cat6506 VSS720-3C-XL switch on which I have configured BGP on a VRF using address-family ipv4 unicast vrf internet. I am getting BGP routes and all appears well but I can only display BGP info by using show ip bgp

Re: [c-nsp] Transparent LAN over Layer3

I would second that as well. We use l2tpv3 all over the place, with Ethernet. We mostly do it with 7200VXRs as endpoints but I have a few 12000s running with OC48s as tunnel server cards and those work nicely as well and it is a quite elegant solution when MPLS is not possible or only rather

[c-nsp] C2960G and output drops

Hi, one of our switches is misbehaving, and I'm wondering whether this is a configuration thing, or a hardware limitation. (It's not actually a QoS thing, but it's bordering on it) Setup: WS-C2960G-24TC-L, effectively only 4 ports active: This is where stuff comes in (UDP audio streaming

Re: [c-nsp] Cisco BGP Running on VRF?

Hi, On Tue, Sep 30, 2008 at 05:50:17PM -0500, Murphy, William wrote: I have a Cat6506 VSS720-3C-XL switch on which I have configured BGP on a VRF using address-family ipv4 unicast vrf internet. I am getting BGP routes and all appears well but I can only display BGP info by using show ip

Re: [c-nsp] Transparent LAN over Layer3

Hi, On Tue, Sep 30, 2008 at 10:20:40PM -0400, Paul Stewart wrote: If we could hand them off a few VLAN's we would just do that and not even use Q-in-Q unless we really needed to... but basically I'm looking for layer2 transport via layer3 devices... and there's no option for MPLS in this

Re: [c-nsp] IP-VPN CE-PE local pref problem

Hi, thanks for all the suggestions I have now changed the route-map are things are looking good. 5.14.93.0/24 is the route in question. In PE2, local pref can now be seen as 90 PE1#show ip bgp vpnv4 rd 894:1 BGP table version is 258, local router ID is 5.14.95.243 Status codes: s suppressed, d

[c-nsp] FWSM convertion

Anyone has a good reference on the steps to take to convert a standalone FWSM to the primary of a FAILOVER FWSM pair. Current FWSM is running 3.2.8 and has 2 transparent contexts. Are there any steps that will influence the current running FWSM (take it down or so) ? Thanks, Wim

Re: [c-nsp] C2960G and output drops

Hi We are having an almost identical problem using a 3750E. We are streaming udp video with an average of about 80Mb/s and the uplink port (in our case one gig) is clocking up output drops and causing video breakup. We too upgraded code but did not resolve the issue. We do have a TAC case

Re: [c-nsp] C2960G and output drops

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gert, - what L2 switches are other people using in environments with continuous high load that has microbursts? we use pair of stacked c3750 (copper) happily streaming ~500Mbps (multiple inputs, 1 output) Best Regards, - -- - -mat pgp-key

Re: [c-nsp] Transparent LAN over Layer3

Lol - thanks...;) I wish EoMPLS was possible for us but it's not so we're back to l2tpv3 ... Best, Paul -Original Message- From: Gert Doering [mailto:[EMAIL PROTECTED] Sent: October 1, 2008 4:31 AM To: Paul Stewart Cc: 'Michael K. Smith'; 'cisco-nsp' Subject: Re: [c-nsp]

Re: [c-nsp] C2960G and output drops

Hi, On Wed, Oct 01, 2008 at 07:08:57AM -0400, McEvilly, Patrick wrote: We are having an almost identical problem using a 3750E. We are streaming udp video with an average of about 80Mb/s and the uplink port (in our case one gig) is clocking up output drops and causing video breakup. We too

Re: [c-nsp] C2960G and output drops

Hi, On Wed, Oct 01, 2008 at 12:19:41PM +0100, Mateusz B?aszczyk wrote: - what L2 switches are other people using in environments with continuous high load that has microbursts? we use pair of stacked c3750 (copper) happily streaming ~500Mbps (multiple inputs, 1 output) What are you

Re: [c-nsp] Transparent LAN over Layer3

Thanks guys... I hadn't head much about l2tpv3 in the wild from actual users good to hear from folks actually using it a lot - that makes it easier for me to make some decisions... Best regards, thanks to everyone for onlist and offlist replies... Paul -Original Message- From: John

Re: [c-nsp] C2960G and output drops

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gert, What are you using as streaming server(s)? Optibase IPTV platfrom (www.optibase.com) which is windows based afaik. Background: we have windows media servers, and those seem to be extremely well-behaved, read: nearly no burstiness. The

Re: [c-nsp] C2960G and output drops

Hi, On Wed, Oct 01, 2008 at 12:45:11PM +0100, Mateusz B?aszczyk wrote: Background: we have windows media servers, and those seem to be extremely well-behaved, read: nearly no burstiness. The set of servers that is causing problems is Linux + MP3 and Flash streaming. maybe use of

[c-nsp] Forcing VLAN interface to UP state

Hi, Is there a way to force a VLAN interface (ex.: interface vlan 400) to UP/UP state on a Cisco UC520 (router, switch...), WITHOUT connecting a device to a port which is in the mentioned VLAN? The current configuration is: int vlan 400 ip address 10.1.1.1 255.255.255.0 show int vlan 400

Re: [c-nsp] Forcing VLAN interface to UP state

All vlan's are trunked by default? I know for routing you can put a static in with a high AD pointing to the null interface.. I don’t believe this will bring up the interface though. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff

Re: [c-nsp] Forcing VLAN interface to UP state

By default yes. If a port is in trunking mode it trunks 1-4096, unless you explicitly change the list. Another thing you can do is put a copper Ethernet port into that vlan, and do a 'no keepalive' on that port, which should bring the port up w/o anything hooked up to it. Once the port comes

Re: [c-nsp] Forcing VLAN interface to UP state

On Wed, October 1, 2008 2:02 pm, Bagosi Rómeó wrote: Is there a way to force a VLAN interface (ex.: interface vlan 400) to UP/UP state on a Cisco UC520 (router, switch...), WITHOUT connecting a device to a port which is in the mentioned VLAN? 'no autostate' on the vlan interface works for

Re: [c-nsp] Forcing VLAN interface to UP state

Hello, I'm not surre how it works on UC520, but with 3750 (for example) when you don't have a spanning tree instance for that vlan then the interface state is up/down. 3750-1#sh spanning-tree vlan 24 Spanning tree instance(s) for vlan 24 does not exist. 3750-1#sh int vlan 24 | i Vlan Vlan24 is

[c-nsp] QoS Mapping DSCP-EXP-IPP

Hi, Given that the QoS implementation is consistent across the network, can the mapping be done anyway we want? Or is there any mapping that should not be changed due to some restriction (e.g. Network Control class)? Is there any command showing the default mapping on 7200 with 12.3? (I

[c-nsp] DS3 problem on PA-T3

I am stumped on a problem with our Telco here. We have a frame-relay DS3 from Verizon. This is how it's connected from the CO. Verizon CO Frame router/switch - DS3 - Adtran Opti3 - OC3 fiber - Adtran Opti3 - DS3 - our router We started having problem two weeks ago and the circuit started

Re: [c-nsp] Forcing VLAN interface to UP state

Is vlan 400 created on the switch? harbor235 ;} On Wed, Oct 1, 2008 at 10:05 AM, David Granzer [EMAIL PROTECTED] wrote: Hello, I'm not surre how it works on UC520, but with 3750 (for example) when you don't have a spanning tree instance for that vlan then the interface state is up/down.

Re: [c-nsp] DS3 problem on PA-T3

At 10:18 AM 10/1/2008, you wrote: I am stumped on a problem with our Telco here. Jay, Have you tried an attenuator on the DS3 RECV port on your PA-T3? Try a 10db or a 13db. The signal from the Opti-3 is usually pretty high and overdrives the RECV circuit. Although typically when that

Re: [c-nsp] Transparent LAN over Layer3

We're having some of the same thoughts in my company, and are a bit concerned over overhead on L2TPv3 and the following MTU limitations. How do you people deal with this? -Allan On Wed, Oct 1, 2008 at 1:38 PM, Paul Stewart [EMAIL PROTECTED] wrote: Thanks guys... I hadn't head much about l2tpv3

[c-nsp] Cat 3750 StackMaster Selection considerations

Hi all We're going to use the cat3750 Stacks for the first time soon and I got a question regarding the StackMaster selection. Its not about how the StackMaster gets elected (thats clear enough from the guide) what I ask myself is how much sense does it make to define a StackMaster manually? What

Re: [c-nsp] C2960G and output drops

[mailto:[EMAIL PROTECTED] On Behalf Of Gert Doering one of our switches is misbehaving, and I'm wondering whether this is a configuration thing, or a hardware limitation. GigabitEthernet0/10 is up, line protocol is up (connected) 5 minute input rate 19432000 bits/sec, 32108

[c-nsp] BGP v4 multicast

All, Just a quick question; what's the best syntax for causing an eBGP session with v4 multicast AF to originate routes? We have: router bgp 65000 neighbor 192.168.1.1 remote-as 65001 address-family ipv4 neighbor 192.168.1.1 activate address-family ipv4 multicast neighbor

Re: [c-nsp] DS3 problem on PA-T3

It looks like Opti-3 have Long and Short option for LBO on the DS3 interface. I am going to make sure Verizon set it to short since the coax is only about 15' long. I don't have any attenuators handy to try that out. I did however, changed the DSU mode to Kentrox and errors have gone away for

Re: [c-nsp] C2960G and output drops

Hi, On Wed, Oct 01, 2008 at 08:48:02AM -0700, Higham, Josh wrote: GigabitEthernet0/10 is up, line protocol is up (connected) 5 minute input rate 19432000 bits/sec, 32108 packets/sec 5 minute output rate 380792000 bits/sec, 46406 packets/sec As you see, the ports are far from

Re: [c-nsp] C2960G and output drops

Gert Doering wrote on 01/10/2008 11:19: - how can I find out why the switch is dropping packets? You can try the sh platform port-asic stats command: 2960#sh platform port-asic stats ? drop Drop Statistics enqueueEnqueue Statistics miscellaneous Miscellaneous

Re: [c-nsp] BGP v4 multicast

Hi, On Wed, Oct 01, 2008 at 04:50:49PM +0100, Phil Mayers wrote: Just a quick question; what's the best syntax for causing an eBGP session with v4 multicast AF to originate routes? Same way you currently do it with IPv4 unicast, just put the statements under ipv4 multicast. As in - if you're

Re: [c-nsp] BGP v4 multicast

Gert Doering wrote: Hi, On Wed, Oct 01, 2008 at 04:50:49PM +0100, Phil Mayers wrote: Just a quick question; what's the best syntax for causing an eBGP session with v4 multicast AF to originate routes? sorry - missed the CC to list Same way you currently do it with IPv4 unicast, just put

Re: [c-nsp] BGP v4 multicast

Hi, On Wed, Oct 01, 2008 at 05:17:42PM +0100, Phil Mayers wrote: Same way you currently do it with IPv4 unicast, just put the statements under ipv4 multicast. As in - if you're doing redistribute static route-map foo, you can just put the same statement under address-fam ipv4 multicast as

Re: [c-nsp] BGP v4 multicast

Oh, well, if anybody actually starts *using* IPv4 multicast, it might return to a more or less working state. Our problem was that, since it is hardly ever used, providers tend to break it during network changes (forget to turn on PIM on newly enabled circuits, and things like this) - and when

Re: [c-nsp] C2960G and output drops

We saw similar problem and we solve it by doing etherchannel on the output interface. Nitzan On Wed, Oct 1, 2008 at 11:19, Gert Doering [EMAIL PROTECTED] wrote: Hi, one of our switches is misbehaving, and I'm wondering whether this is a configuration thing, or a hardware limitation. (It's

Re: [c-nsp] BGP v4 multicast

Hi, On Wed, Oct 01, 2008 at 05:24:16PM +0100, Phil Mayers wrote: So debugging always was very painful, and had no relation to the amount of users... Funnily enough, that's exactly the problem I'm facing now (it broken sometime since May, fix it) Look on every single router in the

Re: [c-nsp] C2960G and output drops

On Wed, Oct 01, 2008 at 07:08:57AM -0400, McEvilly, Patrick wrote: IOS version on the switch is 12.2(46)SE, but I had (25)SEE on it before that, and observed the same symptoms (except that (25)SEE does not display the output drops in the counters). Counters problem is CSCsj53001: The

Re: [c-nsp] C2960G and output drops

Hi, On Wed, Oct 01, 2008 at 07:07:59PM +0300, Tassos Chatzithomaoglou wrote: Gert Doering wrote on 01/10/2008 11:19: - how can I find out why the switch is dropping packets? You can try the sh platform port-asic stats command: 2960#sh platform port-asic stats ? drop Drop

Re: [c-nsp] C2960G and output drops

Hi, On Wed, Oct 01, 2008 at 07:51:01PM +0300, Nitzan Tzelniker wrote: We saw similar problem and we solve it by doing etherchannel on the output interface. Thanks. I have considered this, but I'm unhappy with this for a number of reasons - the biggest obstacle is that the next-hop device

[c-nsp] Cisco IOS firewall and Juniper WAN Optimization

Has anybody been successful in implementing Juniper WXC in an all Cisco environment utilizing IOS firewall at the remote site? We are in the evaluation process of various wan optimization appliances, have run Cisco's WAAS but did not really have success with them, we will give them another

Re: [c-nsp] Cisco BGP Running on VRF?

I am saying that there is MPLS going on because show platform hardware capacity pfc is showing a lot of TCAM being consumed for MPLS. I tried the commands you mentioned and those commands are not even available in the CLI. I did show ? and mpls is not in there. According to Cisco MPLS is not

Re: [c-nsp] Cat 3750 StackMaster Selection considerations

On Wed, Oct 1, 2008 at 5:44 PM, Michel Grossenbacher [EMAIL PROTECTED] wrote: Hi all We're going to use the cat3750 Stacks for the first time soon and I got a question regarding the StackMaster selection. Its not about how the StackMaster gets elected (thats clear enough from the guide) what I

Re: [c-nsp] Cat 3750 StackMaster Selection considerations

On Wed, 2008-10-01 at 21:30 +0200, Jeffrey Denton wrote: On Wed, Oct 1, 2008 at 5:44 PM, [EMAIL PROTECTED] wrote: At the moment I dont see much benefit in setting a Stack Master, only added complexity. Am I missing something? It's not complex. The only annoying part is having to reload

Re: [c-nsp] CSCsd45386, parser config cache fixed in 12.2(33)SRB4?

We have many 7600 with RSP720/SUP720 running SRB3 and SRB4, but we haven't met this problem. We use this command on everything that supports it. Do you have to enable compression of the configuration too? Besides the error message generated, is there an issue with the saved config? -- Tassos

Re: [c-nsp] Cisco IOS firewall and Juniper WAN Optimization

Hi Rick- I reviewed enough of your mail to see that you understand the issues with interoperability between the WXC and IOS Firewall. There is a (somewhat) similar issue with interoperability between Cisco WAAS and IOS FW, but there's fix in the Zone Firewall (specific releases; I can provide

[c-nsp] BGP Scaling

We're looking at ways of providing resilience to individual customer routers with multiple connections. Currently we use RIP which has worked well in the past but we're now concentrating more connections onto aggregator routers and testing has shown that the RIP will limit thatso we're

[c-nsp] ebgp and ibgp

Until today i had the following... Two border routers(7206VXR) connected to a 3750 Stack. the borders do ibgp with each other and the borders and 3750's do OSPF. Here's a quick text network design i created. http://unix-scripts.com/network/design.txt Today i brang on a new provider, since

Re: [c-nsp] ebgp and ibgp

IBGP sends the best route to the other IBGP peers, not both. Border2 knows about the multiple routes itself, but only sends the one best path to Border1. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaun R. Sent: Wednesday, October 01, 2008 16:04 To:

Re: [c-nsp] Best bet 65 IOS for mcast?

Well a bit of everything, and I'm going to push them into SSM migration. There'll probably still be SM in the network though. Are there any netflow improvements in SXH for mcast? I remember hearing top talkers was in there for unicast (?) On Sep 24, 2008, at 2:39 AM, Phil Mayers wrote:

Re: [c-nsp] C2960G and output drops

Gert Doering wrote: Queue 3 Weight 0 Frames 0 Weight 1 Frames 0 Weight 2 Frames 3505735486 ... so that basically tells me what I was assuming - all packets go into the same queue (no QoS marking going on here, all packets are important), and some of them get

[c-nsp] AIR-AP1252AG-A-K9 wont work with controller WS-C3750G-24WS-S25

Hello , We upgraded 1252 to lightweight version but AP still wont register to WS-C3750G-24WS-S25 . Any advises ? Some debug from AP , and sh ver below console messages on AP: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0 assigned DHCP address 10.0.200.88, mask 255.255.255.0, hostname

Re: [c-nsp] Extremely slow performing show running-config

Hi all Thanks for all the replies. 1) My total network consist of some 100 vlans. I don't think that's a lot right? 2) parser cache can be configured on the router, but it doesn't seem to have any effect. It's still about 7-10 minutes long 3) After some investigation I found that show running

Re: [c-nsp] AIR-AP1252AG-A-K9 wont work with controller WS-C3750G-24WS-S25

David , appreciate your response , below information I gather from controller. debugging on controller itself does NOT noticed any warning about AP, moreover controller shows AP as registered when AP goes to reboot. Any ideas where I can find information about interoperability between

[c-nsp] netflow issues on WS-F6700-DFC3CXL - 7600

I have already lodged a TAC for this (actually on my second TAC for same issue) but I thought i'd throw out here to see if anyone else has seen this as it has me perplexed at the moment. Problem: Netflow collector stops receiving flows from DFC on 7609-S but continues to receive flows from

Re: [c-nsp] AIR-AP1252AG-A-K9 wont work with controller WS-C3750G-24WS-S25

Andy, Which version of code you have on your controller? Best guess is the code you are running on the controller doesn't support the 1252s. David Andy Yerofyeyev wrote: Hello , We upgraded 1252 to lightweight version but AP still wont register to WS-C3750G-24WS-S25 . Any advises ? Some

Re: [c-nsp] AIR-AP1252AG-A-K9 wont work with controllerWS-C3750G-24WS-S25

Andy, Look here: %SYS-5-RELOAD: Reload requested by LWAPP CLIENT. Reload Reason: INCOMPATIBLE CONTROLLER VERSION. You should upgrade to 4.2 as 4.0 will not support that AP. Try 4.2.130. Read the notes to go up to it. Also note that as you upgrade, if you have any APs registered they will

Re: [c-nsp] CSCsd45386, parser config cache fixed in 12.2(33)SRB4?

Hi Tassos, We have many 7600 with RSP720/SUP720 running SRB3 and SRB4, but we haven't met this problem. We use this command on everything that supports it. Hmm, interesting. I may have to enable it again to test. Thanks. Do you have to enable compression of the configuration too? I don't