Re: [c-nsp] C2960G and output drops

2008-10-03 Thread Gert Doering
Hi, On Fri, Oct 03, 2008 at 09:41:10AM +1000, Brad Henshaw wrote: Gert Doering wrote: OK, I've done quite some testing, tuning to the extreme... Queueset: 1 Queue : 1 2 3 4 -- buffers : 1 5 93

Re: [c-nsp] IP-VPN CE-PE local pref problem

2008-10-03 Thread Oliver Boehmer (oboehmer)
That's strange... can you show show ip bgp vpnv4 vrf ipvpn_0001 prefix, this shows the resulting vrf BGP table (i.e. after import) which might or might not be identical to the rd rd output (wowever it looks like you're using the same RD on both PEs, so this might not make a difference

Re: [c-nsp] Virtual Interface to the Internet

2008-10-03 Thread Oliver Boehmer (oboehmer)
Ray Burkholder wrote on Friday, October 03, 2008 5:30 AM: I have a customer with two sites. Site 1 connects to Router A. Site 2 connects to Router B. We have an internet connection on Router C. Router A connects to Router C and Router B connects to Router C. The customer wishes to be

Re: [c-nsp] Virtual Interface to the Internet

2008-10-03 Thread Ray Burkholder
Hmm, so your requirement is to limit (shape/police) the amount of BW the customer can use towards the Internet, and impose no limits for Site A--B traffic? If that's the case, I guess there is no real nice (and scalable) solution. That is pretty much it in a nutshell. Afterwards,

Re: [c-nsp] 10/100/1000 speeds in GE SFP ports

2008-10-03 Thread Marian Ďurkovič
On Thu Sep 25 17:20:40 EDT 2008, Saku Ytti wrote: On (2008-09-25 22:56 +0200), Asbjorn Hojmark - Lists wrote: One funny thing is that the 6500 release note now (SXH) says: 48-port Gigabit or 10/100/1000 Mbps Ethernet SFP about the 6748-SFP, where the previous (SXF) phrase was: 48-port

[c-nsp] Etherchannel Load Balancing

2008-10-03 Thread Michalis Palis
Hello all We are doing etherchanel between two a Cisco catalyst 4509 switchs but load balancing is not working On the one link we have about 700M and on the other 60M. The configured load balancing method is the default which is (src-dst-ip). Any ideas?

Re: [c-nsp] Etherchannel Load Balancing

2008-10-03 Thread A . L . M . Buxey
Hi, We are doing etherchanel between two a Cisco catalyst 4509 switchs but load balancing is not working On the one link we have about 700M and on the other 60M. The configured load balancing method is the default which is (src-dst-ip). the method you need to use to get

Re: [c-nsp] problem with serial number on cisco 7200 routers /maintenance contract

2008-10-03 Thread Daniel Roesen
On Thu, Oct 02, 2008 at 07:15:19PM -0700, Irfan Siddiqui wrote: I don't think this is possible on 720X you have to read it of of chassis Indeed. We resorted to configure the chassis sticker ID as snmp-server chassis-id manually. We found no electronic way, not up to NPE-G1. Best regards,

Re: [c-nsp] Failed to locate egress interface for UDP

2008-10-03 Thread trejrco
FWIW - FF02::1:2 to UDP/547 is a DHCPv6 solicit (or information request) ... And the ASA probably doesn't have relaying configured (or, atleast, doesn't know where the server is) HTH /TJ --Original Message-- From: Jay Hennigan Sender: [EMAIL PROTECTED] To: cisco-nsp@puck.nether.net

Re: [c-nsp] problem with serial number on cisco 7200 routers /maintenance contract

2008-10-03 Thread David Barak
I can confirm that this appears to be true of NPE-G2s as well. David Barak Daniel Roesen wrote: On Thu, Oct 02, 2008 at 07:15:19PM -0700, Irfan Siddiqui wrote: I don't think this is possible on 720X you have to read it of of chassis Indeed. We resorted to configure the chassis sticker ID

Re: [c-nsp] Etherchannel Load Balancing

2008-10-03 Thread Euan Galloway
On Fri, Oct 03, 2008 at 12:39:31PM +0100, [EMAIL PROTECTED] wrote: configuration of your network... eg, in this case, if a server is on the network and all clients is on a different network, then as far as the cisco is aware, then all traffic in that scenario will look the same to the load

[c-nsp] ACL vs IP verify unicast: TCAM entries

2008-10-03 Thread Victor Lyapunov
Hello All At work we have a network of BRAS for PPP termination, consisting of Juniper ERX and Cisco 10k. I was wondering what is the most efficient way to filter incoming subscriber traffic. We would like to verify that incoming subscriber traffic is indeed sourced from the IP that we assigned

Re: [c-nsp] Cisco Pix. Global command

2008-10-03 Thread Dan
global (outside) 2 interface Dan John Ramz wrote: OS 7 I only have 2 Public Ip addresses: 2.1.1.2: In the ROuter 2.1.1.3 I am configuring this firewall very basic: Ethernet0: outside Ip address: 2.1.1.3 Ethernet1: inside Ip address: 192.168.254.253 global (outside) 1 2.1.1.3 nat

Re: [c-nsp] ACL vs IP verify unicast: TCAM entries

2008-10-03 Thread Euan Galloway
On Fri, Oct 03, 2008 at 05:54:31PM +0300, Victor Lyapunov wrote: -Creating an ACL that is common for every subscriber (same for all routers) that allows incoming traffic originating from the address ranges that are assigned to us. This would create an incoming ACL with roughly 24 entries

Re: [c-nsp] ACL vs IP verify unicast: TCAM entries

2008-10-03 Thread Phil Mayers
What is the mechanism employed by ip verify unicast? Does it create on-the-fly an ACL for each interface that it is applied to containg in my case just one entry that matches the network address of the interface? In this case in a typical BRAS terminating 16000 users would require 16000

Re: [c-nsp] NAT timeout

2008-10-03 Thread Alex Wa
Thank you, guys,  for sharing your knowledge. I will research about EEM applet and will apply the solution.   alejandro wainshtok   --- On Thu, 10/2/08, Rodney Dunn [EMAIL PROTECTED] wrote: From: Rodney Dunn [EMAIL PROTECTED] Subject: Re: [c-nsp] NAT timeout To: Alex Wa [EMAIL PROTECTED] Cc:

[c-nsp] looking for ideas on configuring HQos egress shaping on ES20G cards in 7600

2008-10-03 Thread Munroe, James (DSS/MAS)
Hello, I'm looking for anyone who might have any recommendations from similar setups they've done with H-Qos on ES20 linecards providing aggregate shaping to remote sites made up of multiple VLANs. Here's my scenario, looking to create H-Qos egress service policy on an ES20G 1GE interface to

[c-nsp] Need urgent help with a Cisco/StrataCom BPX 8600

2008-10-03 Thread Mike Brown
Hi, We have an 8600 that has a 12 port DS3 card and at present we split up various VPI's to different DS3 ports. This has been working for some time. We just added a OC3 card to the unit and that will tie to the Qwest cloud. When trying to build a connection between a PVC on the OC3 card to a

[c-nsp] L2 control protocol tunneling

2008-10-03 Thread Phil Bedard
Hi, does anyone know if there is a way to get a Cisco switch to ignore STP BPDUs and simply pass them through the box, apart from L2CP tunneling? We have a scenario where we have a customer 6500 connected to an Ethernet NID device which is doing QinQ that is then connected to a 4507