Re: [c-nsp] Windows server hangs connected to 3750

Hm, are the servers configured in some kind of active/failover or somesuch? I vaguely remember the default Windows method of failover causing no end of trouble to default-configured Cisco switches as MAC addresses pingpong between ports.. Adrian On Wed, Nov 26, 2008, Vigar, Damien wrote: Hi

Re: [c-nsp] wireless access-controll feature in ios software

Hello, perhaps you are looking for this: Consent Feature for Cisco IOS Routers 12.4(15)T http://www.cisco.com/en/US/docs/ios/12_4t/12_4t15/auth_fw.html However you can also use the embedded captive portal when you use Cisco WLC controllers or you can also try Chillispot --koug On Tue, 25

Re: [c-nsp] Windows server hangs connected to 3750

Hello, some 1000T SFP are 1000-Full only and does not support auto negotiation. You can try set 1000-Full on the servers and check if that helps. Regards, David On Wed, Nov 26, 2008 at 6:17 AM, Vigar, Damien [EMAIL PROTECTED] wrote: Hi all, We are experiencing an issue with Windows 2003R2

Re: [c-nsp] wireless access-controll feature in ios software

you mean the authentication proxy in ios? http://www.cisco.com/en/US/docs/ios/12_0t/12_0t5/feature/guide/iosfw2_1.html Brian -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Arne Larsen / Region Nordjylland Sent: martedì 25 novembre 2008 21.53 To:

Re: [c-nsp] Windows server hangs connected to 3750

Damien, What sort of troubleshooting have you done thus far ? Some questions/suggestions: * check to make sure MAC addresses on the servers aren't the same. Sounds strange but I've had it before (from a reputable vendor whose name is abbreviated to 3 letters). * hard code both switch server

[c-nsp] ASA AIP-SSM-10

Dear all, We were upgrading the patches on AIP-SSM-10 and IPS seems not to be coming up after reload. the module status is UNRESPONSIVE. more over we havent configure recovery on it. please suggest to bring up the IDS from scratch. Thanks Ronnie ___

[c-nsp] Cisco sw mac based auth

Hi all, I hope it is a good mailing list, and i will get answer to my problem: I use 802.1x for user authentication, a still have configured a switch to AAA(radius), I want to use mac address based authentication: - I plug in my cabel, - pc send auth(contains mac; and hostname, pass not

Re: [c-nsp] tclsh and ip access list help

Cool. Gert Doering wrote: Hi, On Wed, Nov 26, 2008 at 06:00:20AM +0700, a. rahman isnaini r.sutan wrote: Or it might cisco developing kind of 'sequential' access-list whit ' insertable ' command :) They already have. Named ACLs always had this, and in very recent IOS versions (SXH, at

[c-nsp] vpn_hw-1-packet_error / 7201

Hi all, I have 2 Cisco 7201 routers (c7200p-advipservicesk9-mz.124-15.T3.bin) with SA-VAM2+ VPN modul. Between this routers i use a crypted GRE tunnel: interface Tunnel0 description TUNNEL ip address 192.168.1.1 255.255.255.252 ip mtu 1418 ip tcp adjust-mss 1300 ip ospf cost 100

Re: [c-nsp] SM SFP over MM cable

Pavel Skovajsa wrote: Hello, I have heard stories that normal LX single mode SFP works fine over any MM fiber. Is that true? Does it have any distance limitation? Is there any doc I can read so that I understand what are the various possibilities to mix/match various SM/MM SFPs etc. It's

Re: [c-nsp] wireless access-controll feature in ios software

Jep, I beleive that's it. Great thanks. /Arne -Oprindelig meddelelse- Fra: John Kougoulos [mailto:[EMAIL PROTECTED] Sendt: 26. november 2008 08:33 Til: Arne Larsen / Region Nordjylland Cc: 'cisco-nsp@puck.nether.net' Emne: Re: [c-nsp] wireless access-controll feature in ios software

[c-nsp] no implementation plans

Hello! According to rumors Cisco have no plans: to DWDM-X2 modules support for 6708 cards on C7600 under 12.2SR to 6716 support on C7600 to finish SCE blade Any other rumors? :) Thanks! -- Dmitry Kiselev ___ cisco-nsp mailing list

[c-nsp] any way to check the cisco interface to output to file

Hi I realize there is dropping packet in router. Is there any way to check cisco interface to output to file? I want to record every minutes Thank you - Now with a new friend-happy design! Try the new Yahoo! Canada Messenger

Re: [c-nsp] any way to check the cisco interface to output to file

If you use SecureCRT, it's very easy. Just log the output to a file and run a script like this one: #$language = VBScript #$interface = 1.0 Sub Main do crt.Screen.Send sh interface x/y VbCr crt.Sleep 6 loop End Sub The crt.Sleep

Re: [c-nsp] any way to check the cisco interface to output to file

Snmp probes to the interface -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chloe K Sent: Wednesday, November 26, 2008 4:56 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] any way to check the cisco interface to output to file Hi I realize

Re: [c-nsp] vpn_hw-1-packet_error / 7201

I had the same problem a few weeks ago with a 3845. Initially we thought we were hitting an IOS Bug but in the end of the day, the messages were correlated with some circuit problems. Verify if your circuits are clean and in the case they are, check these two Bugs: - CSCee43714 - CSCeg52468

Re: [c-nsp] SM SFP over MM cable

Yes, a normal single mode SFP (GLC-LH-SM) works with both SM and MM fiber. MM is limited to 300 meters (greater distances may be possible with a mode-conditioning patch cord). Have a look at GLC-LH-SM in table 6 at http://www.cisco.com/en/US/docs/routers/7200/install_and_upgrade/gbic_sfp_mo

Re: [c-nsp] any way to check the cisco interface to output to file

Create a kron job on the router itself and then use command | append flash:filename to collect the information local to the router. The router will have to support append on it's filesystem, some don't, 800 series specifically. David -- http://dcp.dcptech.com -Original Message-

Re: [c-nsp] Cisco sw mac based auth

--On Wednesday, 26. November 2008 10:36 +0100 Hegedus Gabor [EMAIL PROTECTED] wrote: what can i use for cisco? finaly, how can i set up mac based authentication on cisco sw. You can use MAC Authentication Bypass. ___ cisco-nsp mailing list

Re: [c-nsp] Windows server hangs connected to 3750

What NIC(s) do you have in the server? Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Vigar, Damien Sent: Tuesday, November 25, 2008 11:18 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Windows server hangs connected to 3750 Hi all, We are

[c-nsp] Static default route VRF not appearing

Hi In an IP-VPN test, I need to add a static default route pointing to CE1 from PE1. This would I assume be redistributed to other PE's, then CE routers as 'redistribute static' is enabled on the PE config for this customer however this seems not to be the case. In fact PE2 never even sees

Re: [c-nsp] Windows server hangs connected to 3750

One issue I've seen with 2003R2 is that it implemented Chimney (TCP checksum offloading) by default which has caused us endless grief with really bad TCP performance. It seems network drivers shipped with 2003R2 were not really ready for this chance and many of them perform very badly even under

[c-nsp] txQueueNotAvail on a Cisco 4948 Switch

We are seeing the txQueueNotAvail counter increase for TxQueue 3 on a Cisco Catalyst 4948 switch. Does anyone have any insight on what txQueueNotAvail means? Also, are there specific switch ports associated with TxQueue 3 and if so how do I find out what ports those are? The output from the

[c-nsp] SM SFP over MM cable

Hello, I have heard stories that normal LX single mode SFP works fine over any MM fiber. Is that true? Does it have any distance limitation? Is there any doc I can read so that I understand what are the various possibilities to mix/match various SM/MM SFPs etc. Regards, Pavel Skovajsa

Re: [c-nsp] no implementation plans

On Wed, Nov 26, 2008 at 7:14 AM, Dmitry Kiselev [EMAIL PROTECTED] wrote: Hello! According to rumors Cisco have no plans: to DWDM-X2 modules support for 6708 cards on C7600 under 12.2SR to 6716 support on C7600 to finish SCE blade Any other rumors? :) Thanks! VSS will die a horrible

Re: [c-nsp] Static default route VRF not appearing

Mark Tech wrote on Wednesday, November 26, 2008 15:44: Hi In an IP-VPN test, I need to add a static default route pointing to CE1 from PE1. This would I assume be redistributed to other PE's, then CE routers as 'redistribute static' is enabled on the PE config for this customer however this

Re: [c-nsp] no implementation plans

On Wed, Nov 26, 2008 at 10:12 AM, Tim Durack [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 7:14 AM, Dmitry Kiselev [EMAIL PROTECTED] wrote: Hello! According to rumors Cisco have no plans: to DWDM-X2 modules support for 6708 cards on C7600 under 12.2SR to 6716 support on C7600 to

Re: [c-nsp] no implementation plans

Why do you say vss will die a horrible death? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Durack Sent: Wednesday, November 26, 2008 7:12 AM To: [EMAIL PROTECTED]; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] no implementation plans On Wed, Nov

Re: [c-nsp] no implementation plans

On Wed, Nov 26, 2008 at 10:20 AM, Tim Durack [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 10:12 AM, Tim Durack [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 7:14 AM, Dmitry Kiselev [EMAIL PROTECTED] wrote: Hello! According to rumors Cisco have no plans: to DWDM-X2 modules support for

Re: [c-nsp] Static default route VRF not appearing

Got it Cheers Mark - Original Message From: Oliver Boehmer (oboehmer) [EMAIL PROTECTED] To: Mark Tech [EMAIL PROTECTED] Cc: cisco-nsp@puck.nether.net Sent: Wednesday, November 26, 2008 3:17:10 PM Subject: RE: [c-nsp] Static default route VRF not appearing Mark Tech wrote on

[c-nsp] 6509 problems

Hi all. We have been using a 7200 and recently we purchased a 6509. The plan is to move everything to the 6509 from the 7200. In order to accomplish this our plan was to connect the 7200 to the 6509 via GigE. Our current network is like this: Internet traffic hits the 7200, the 7200 has a

Re: [c-nsp] no implementation plans

That's where I am at, now that VSS supports fwsm and ace I'll probably be looking at migrating in January or February. -Original Message- From: Tim Durack [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2008 7:43 AM To: Teller, Robert Cc: [EMAIL PROTECTED];

Re: [c-nsp] OSR7609 w/Sup720-3BXL

On Tue, Nov 25, 2008 at 6:10 PM, Richard A Steenbergen [EMAIL PROTECTED]wrote: On Tue, Nov 25, 2008 at 12:25:29AM -0500, Chris Hale wrote: Anyone know if you can use a Sup720-3BXL with a OSR7609? Are there any restrictions on the modules/cards that you can use in the OSR7609? What's the

Re: [c-nsp] no implementation plans

On Wed, Nov 26, 2008 at 11:04 AM, Sidney Boumendil [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 4:42 PM, Tim Durack [EMAIL PROTECTED] wrote: Open questions in my mind: am I really going to go back and do a VSS conversion on existing installations? That's a lot of time and energy,

Re: [c-nsp] no implementation plans

On Wed, Nov 26, 2008 at 4:42 PM, Tim Durack [EMAIL PROTECTED] wrote: Open questions in my mind: am I really going to go back and do a VSS conversion on existing installations? That's a lot of time and energy, especially as it doesn't reduce exposure to IOS bugs (we haven't had any hardware

[c-nsp] Service Policy per-class bandwidth graphing -- any tools available?

We have a number of large MQC policies, and I'd like to graph the throughput of each class, allowing us to pro-actively identify any classes that may be exceeding their allocated bandwidth. Are there any tools available that allow service policy bandwidth graphing, on a per-class basis (maybe a

Re: [c-nsp] Service Policy per-class bandwidth graphing -- any tools available?

Hi Eric, There's a qos mib available for use with cbwfq on the cisco website (software navigator), i also found this link on the cacti forum, it's not done yet tho: http://forums.cacti.net/about7401.htmlhighlight=cbwfq -- Wouter Prins 2008/11/26 Eric Cables [EMAIL PROTECTED]: We have a number

Re: [c-nsp] Vlan assignments

Have a look at TR-101 TR-144 from broadband forum (ex dsl forum). http://www.broadband-forum.org/technical/trlist.php Also, Cisco provides some design guides; you just have to ask your account manager. -- Tassos sheaujiun wrote on 26/11/2008 01:48: Yes, it seems subjective but is there

Re: [c-nsp] Allowing VPN clients to access L2L tunnels terminating on the same outside interface

What about setting up some GRE tunnels to route the traffic of interest over to the other L2L sites. I've seen configs for this on Cisco CCO. Regards, Ge Moua | Email: [EMAIL PROTECTED] Network Design Engineer University of Minnesota | Networking Telecommunications Services Aaron Riemer

Re: [c-nsp] Allowing VPN clients to access L2L tunnels terminating on the same outside interface

You could also bring up another L2L tunnel specific to your client vpn hosts: pc = client vpn = asa int1 = asa int2 = l2l vpn = checkpoint convoluted but another (static) crypto map for l2l tunnel from client vpn (off of dynamic crypto map). Good luck. Regards, Ge Moua | Email: [EMAIL

Re: [c-nsp] Service Policy per-class bandwidth graphing -- any tools available?

Eric The cbQoS mib uses dynamic indexes which change if you amend the Service Policy or class definition. It is possible though (if you can walk the relevant MIB) to work out for yourself the indexes. You can then graph the relevant oids directly. You haven't mentioned which platform - the 10720

[c-nsp] 7600-RSP720-10GE - which IOS ?

Hi list, I will problably receive a rsp720-3CXL 10G to replace an rsp720-3C-GE later this week, and I am curious if any of of you can give me advice on which IOS version to go for.. I see I can choose from SRC,SRC1,SRC2 and SRD versions. Anyone has good/bad experiences with one of the above?

Re: [c-nsp] shape withing policy map

On Mon, Nov 24, 2008 at 10:48 PM, Marko Milivojevic [EMAIL PROTECTED]wrote: You made a small configuration mistake. Enter configuration commands, one per line. End with CNTL/Z. JID_CORE_Router(config)#policy-map CMS JID_CORE_Route(config-pmap-c)#shape average 100

Re: [c-nsp] Windows server hangs connected to 3750

Hi David, Yes, we've tried that and still had the problem (our SFPs seem to support auto-negotiation just fine). The odd thing there is that another of our larger sites is using auto on their site server, and it's having no problems at all with the setup. Cheers, Damien -Original

Re: [c-nsp] Windows server hangs connected to 3750

Nope. They are single servers, functioning as DC/File and print servers for individual sites. The odd thing is that one is at our largest site, with hundreds of staff and students, and another is at a small site with maybe a couple dozen people tops. But other sites of similar size are not

Re: [c-nsp] Windows server hangs connected to 3750

I've checked with our server admin and he's turned ip chimney off on all our servers. -Original Message- From: Sigurbjörn Birkir Lárusson [mailto:[EMAIL PROTECTED] Sent: Thursday, 27 November 2008 1:52 AM To: [EMAIL PROTECTED]; Vigar, Damien; cisco-nsp@puck.nether.net Subject: Re:

Re: [c-nsp] Allowing VPN clients to access L2L tunnels terminating on the same outside interface

Hi Guys, We have resolved this by simply putting a static route pointing out to the spoke VPN site's internal addressing pointing to the outside interface on our firewall. I believe changing the addressing of the VPN clients would have done the same thing though. Thanks, Aaron -Original

Re: [c-nsp] Windows server hangs connected to 3750

Responses inline... Damien, What sort of troubleshooting have you done thus far ? Some questions/suggestions: * check to make sure MAC addresses on the servers aren't the same. Sounds strange but I've had it before (from a reputable vendor whose name is abbreviated to 3 letters). No,

[c-nsp] broadcast address question

Hi I got this info from sh int but how come the broadcast address is not 192,168,0.195 and 192.168.0.165 but those are 255.255.255.255 in linux, those are 192,168,0.195 and 192.168.0.165 router#sh ip interface FastEthernet0/0 is up, line protocol is up Internet

[c-nsp] Stack port flaps on Cisco 3750G series (was: Re: Catalyst 3750 stacks with many members)

Hi, We've had no real trouble with large stacks of 3750G switches vs. smaller ones - I can see we have over 60 stacks of 7 and above (14 of these are 9 stack members). We poll these switches every minute using SNMP (statseeker, cacti) and have several scripts that perform configuration

[c-nsp] cisco6500-vlans missing

hi, 1. In cisco 6500 switch, the vlans are missing whenever it is restarted manually. please give me solution why it is happening. 2. one of the gig port showing errdisable. cheers, bye. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Opinions about ICMP Destination Unreachable

I am just wondering how many people have ICMP Destination Unreachables disabled on their core routers. Could an CPE router, which may encapsulate data, be able to depend on ICMP Unreachables to be sent to it? I know there are many cases where router implementations default it to off (to

Re: [c-nsp] Service Policy per-class bandwidth graphin g -- any tools available?

On Thursday 27 November 2008 06:39:39 Dean Smith wrote: Cisco have introduced some index persistence to the cbQos mib but I haven't personally tested whether this gives persistence between policy edits...or simply between reboots. http://www.cisco.com/en/US/docs/ios/12_4t/12_4t4/ht_cbqos

Re: [c-nsp] Service Policy per-class bandwidth graphing -- any tools available?

Dean, Thanks for the reply, very helpful info. The platform is a 7200VXR NPE-G2. The policy isn't exactly static, changing versions as new classes are defined (QOS_POLICY_V1 - QOS_POLICY_V2, for example). I think it may be difficult with the dynamic nature to define any static OIDs to graph,

Re: [c-nsp] Service Policy per-class bandwidth graphing -- any tools available?

On Thursday 27 November 2008 14:40:55 Eric Cables wrote: Thanks for the reply, very helpful info. The platform is a 7200VXR NPE-G2. The policy isn't exactly static, changing versions as new classes are defined (QOS_POLICY_V1 - QOS_POLICY_V2, for example). I think it may be difficult with

Re: [c-nsp] Service Policy per-class bandwidth graphing -- any tools available?

Excellent. I just finished reading through the provided link, and it does appear to be a viable solution. i'll work on getting that Cacti template implemented, and see how things go. Thanks for the replies.. -- Eric Cables On Wed, Nov 26, 2008 at 10:49 PM, Mark Tinka [EMAIL PROTECTED]