Re: [c-nsp] show dsl int atm 0

2009-02-02 Thread Ziv Leyes
In my opinion and based on my short experience with ADSL on Cisco routers, the only values that are relevant for me are: Noise Margin: which represents, as the name says it, how far is your signal from the noise, the higher the better, the lowest recommended value would be around 20%.

Re: [c-nsp] show dsl int atm 0

2009-02-02 Thread Ziv Leyes
I second that, You're right, Basha. I've forgot to mention it in my previous answer. Setting interleave in the DSLAM will do automatically what I proposed before, lowering the speed of the link in order to improve line quality. Ziv -Original Message- From:

Re: [c-nsp] set clock

2009-02-02 Thread chris
Hello To set the clock use the command 'clock set hh:mm:ss' from enable mode. NTP can be configured in the global configuration mode use the command 'ntp server hostname'. The hostname can be an IP or a hostname, just make sure that you use an NTP server the router/switch can reach. Cheers

[c-nsp] VPN PIX 6.x Translation issue

2009-02-02 Thread William
Hi folks! I currently have a PIX firewall running 6 code, the firewall has 3 interfaces, inside, outside and inside2. At the moment I can VPN and communicate to all the hosts on the inside, what I'd like to do is also be able to communicate with the hosts on inside2, the security levels are:

[c-nsp] Channelized OC3 for 7206VXR

2009-02-02 Thread Jason Berenson
Greetings, We currently have a Turin DACS with DS3's in from the carrier and DS3's out to Cisco 7206VXR's. We would like to swap out the DS3 cards on the routers to channelized OC3 cards. Can anyone tell me the part number in a PA for the 7206 that can channelize an OC3 down to DS1? I

Re: [c-nsp] need help about switch boot up question

2009-02-02 Thread A . L . M . Buxey
Hi, In the default running config, there is interface FastEthernet1 no ip address speed auto duplex auto 2/ my switch is 48 ports Gig. Ethernet. Where is this phsically interface FastEthernet1 sounds suspiciously like a management interface, usually found lurking

Re: [c-nsp] Channelized OC3 for 7206VXR

2009-02-02 Thread David Aldworth
I went down this road a few months ago. A CHOC3 card does not seem to be available for the 7206 VXR. We wound up putting an Adtran OPTI-3 in front of the VXR to mux down the OC3 to DS3's. PA-MC-T3 or 2T3 works a charm in the VXR. David On Feb 2, 2009, at 9:10 AM, Jason Berenson wrote:

Re: [c-nsp] Channelized OC3 for 7206VXR

2009-02-02 Thread Justin M. Streiner
On Mon, 2 Feb 2009, Jason Berenson wrote: We currently have a Turin DACS with DS3's in from the carrier and DS3's out to Cisco 7206VXR's. We would like to swap out the DS3 cards on the routers to channelized OC3 cards. Can anyone tell me the part number in a PA for the 7206 that can

Re: [c-nsp] ASA O/S version 8

2009-02-02 Thread Justin M. Streiner
On Mon, 2 Feb 2009, John Aldrich wrote: Hi, we just installed a new ASA, and the folks who sold it to us and configured it for us (I don't know the first thing about configuring it! G) said they had upgraded it to version 7.4 or something like that, but that there was a new O/S version 8

Re: [c-nsp] ASA O/S version 8

2009-02-02 Thread Nick Griffin
Done a couple 8.0.4(16), be aware of sql bug, CSCsu44598 in 8.0.4. On Mon, Feb 2, 2009 at 10:47 AM, Justin M. Streiner strei...@cluebyfour.org wrote: On Mon, 2 Feb 2009, John Aldrich wrote: Hi, we just installed a new ASA, and the folks who sold it to us and configured it for us (I don't

[c-nsp] OSPF not propagating - But for only one route...?

2009-02-02 Thread ChrisSerafin
I have 2 L3 devices (2811/3750) which are running OSPF and redistributing statics/connected networks. For some reason 1 static route will not redistribute from the switch to the router and vice versa, although OTHER static routes propagate just fine, even after clearing the OSPF processes

Re: [c-nsp] VPN PIX 6.x Translation issue

2009-02-02 Thread Peter Rathlev
On Mon, 2009-02-02 at 15:57 +, William wrote: ... outside: 0 inside: 100 inside2: 90 When I try to speak to inside2 hosts, I get the following error: %PIX-3-305005: No translation group found for icmp src outside:10.10.199.3 dst inside2:192.168.0.1 (type 8, code 0) I'm very

Re: [c-nsp] OSPF not propagating - But for only one route...?

2009-02-02 Thread Wouter Prins
Try redistribute static subnets? 2009/2/2 ChrisSerafin ch...@chrisserafin.com I have 2 L3 devices (2811/3750) which are running OSPF and redistributing statics/connected networks. For some reason 1 static route will not redistribute from the switch to the router and vice versa, although

Re: [c-nsp] OSPF not propagating - But for only one route...?

2009-02-02 Thread Oliver Boehmer (oboehmer)
ChrisSerafin wrote on Monday, February 02, 2009 18:28: I have 2 L3 devices (2811/3750) which are running OSPF and redistributing statics/connected networks. For some reason 1 static route will not redistribute from the switch to the router and vice versa, although OTHER static routes

Re: [c-nsp] Policers on 6500 Sup-32

2009-02-02 Thread Ian MacKinnon
On 02/02/2009 11:04, Phil Mayers wrote: On Mon, Feb 02, 2009 at 10:21:11AM +, Ian MacKinnon wrote: Hi All, I am having an issue with policers on a 6500 not actually doing any policing. Running 12.2(33)SXH Silly question, but you do have the global mls qos set? :-) yup switch#sh mls

[c-nsp] set clock

2009-02-02 Thread chloe K
Hi I use show clock and get router / swtich time 14:15:22.574 UTC Mon Feb 2 2009 But the correct time is 9:14 am Mon Feb 2, 2009 How can I change it? How can I use the ntp to get the time? Thank you -

Re: [c-nsp] need help about switch boot up question

2009-02-02 Thread chloe K
Thank you How about this address when booting up IP Address : 192.168.0.5 Netmask : 255.255.255.0 Gateway : 10.1.1.1 TftpServer : 10.1.1.1 Main Memory : 256 MBytes What is this address for? Thank you again a.l.m.bu...@lboro.ac.uk wrote: Hi, In the

Re: [c-nsp] VPN PIX 6.x Translation issue

2009-02-02 Thread Laurent Geyer
This has to do with NAT behavior on Pix 6.x and supposedly changed on the ASA, but I have personally observed the behavior there as well. Pixes will inherently attempt to translate any traffic they receive on an interface unless told not to. In your case following should address the problem.

Re: [c-nsp] OSPF not propagating - But for only one route...?

2009-02-02 Thread Sigurbjörn Birkir Lárusson
You need to redistribute static subnets for this to work... BR, Sibbi On 2.2.2009 17:28, ChrisSerafin ch...@chrisserafin.com wrote: I have 2 L3 devices (2811/3750) which are running OSPF and redistributing statics/connected networks. For some reason 1 static route will not redistribute

Re: [c-nsp] OSPF not propagating - But for only one route...?

2009-02-02 Thread ChrisSerafin
How does 'redistribute static' differ from 'redistribute static subnets'? Thanks Antonio Querubin wrote: On Mon, 2 Feb 2009, ChrisSerafin wrote: I have 2 L3 devices (2811/3750) which are running OSPF and redistributing statics/connected networks. For some reason 1 static route will not

Re: [c-nsp] Netconf (over SSHv2) in SXI

2009-02-02 Thread Lincoln Dale
Phil Mayers wrote: Does anyone have working examples talking to the netconf implementation in 12.2(33)SXI? Or pointers to libraries / code that works? [..] rpc ... xmlns:cpi=http://www.cisc.com/cpi_10/schema; get filter cpi:config-format-cli-ios-text-cmd ... /..

Re: [c-nsp] Channelized OC3 for 7206VXR

2009-02-02 Thread Gert Doering
Hi, On Mon, Feb 02, 2009 at 11:29:42AM -0500, Justin M. Streiner wrote: That particular card does not support channelized operation. It's also end-of-life. I'm not aware of a channelized OC3 port adapter for the 7200 series. For whatever reason, there is a channelized STM-1 which goes

[c-nsp] need help about switch boot up question

2009-02-02 Thread chloe K
Hi I boot up the 4947 switch and see this address 1/ What is this address for? How can I change it? MAC Address : 00-35-24-05-fb-6f IP Address : 192.168.0.5 Netmask : 255.255.255.0 Gateway : 10.1.1.1 TftpServer : 10.1.1.1 Main Memory : 256 MBytes

Re: [c-nsp] show dsl int atm 0

2009-02-02 Thread Ziv Leyes
You're right, I didn't express myself right, so here's a clarification: In any case of setting interleave mode because of a poor line, you should know that it will decrease performance in many aspects. -Original Message- From: Tim Franklin [mailto:t...@pelican.org] Sent: Monday,

Re: [c-nsp] Policers on 6500 Sup-32

2009-02-02 Thread Ian MacKinnon
Hi Gergely, Yes, I have the set this. I did not before (several weeks ago), and was not seeing any traffic in the policy-map. I changed it and can now see traffic in the map :- nbg01-agg-switch-01#sh policy-map interface vlan 666 Vlan666 Service-policy input: 2MegPolice class-map:

Re: [c-nsp] Netconf (over SSHv2) in SXI

2009-02-02 Thread Phil Mayers
On Mon, Feb 02, 2009 at 12:11:23PM +, Lincoln Dale wrote: Phil Mayers wrote: Does anyone have working examples talking to the netconf implementation in 12.2(33)SXI? Or pointers to libraries / code that works? [..] rpc ... xmlns:cpi=http://www.cisc.com/cpi_10/schema; get filter

Re: [c-nsp] set clock

2009-02-02 Thread George Horton
Hello To set the clock use the command 'clock set hh:mm:ss' from enable mode. NTP can be configured in the global configuration mode use the command 'ntp server hostname'. The hostname can be an IP or a hostname, just make sure that you use an NTP server the router/switch can reach. Cheers

Re: [c-nsp] OSPF not propagating - But for only one route...?

2009-02-02 Thread Masood Ahmad Shah
To redistribute static routes to subnets of classful networks you use redistribute static subnets under the ospf router configuration. Regards, Masood Blog: http://weblogs.com.pk/jahil/ redistributing statics/connected networks. For some reason 1 static route will not redistribute from the

[c-nsp] Policers on 6500 Sup-32

2009-02-02 Thread Ian MacKinnon
Hi All, I am having an issue with policers on a 6500 not actually doing any policing. Running 12.2(33)SXH I have config like :- interface Vlan666 ip address 10.10.10.1 255.255.255.252 no ip redirects logging ip access-list cache out service-policy input 2MegPolice service-policy output

[c-nsp] ASA O/S version 8

2009-02-02 Thread John Aldrich
Hi, we just installed a new ASA, and the folks who sold it to us and configured it for us (I don't know the first thing about configuring it! G) said they had upgraded it to version 7.4 or something like that, but that there was a new O/S version 8 available. I'm wondering if this is something we

Re: [c-nsp] show dsl int atm 0

2009-02-02 Thread Tim Franklin
Ziv Leyes wrote: Setting interleave in the DSLAM will do automatically what I proposed before, lowering the speed of the link in order to improve line quality. Be careful with what you mean by speed in this instance. Interleaving typically increases latency, rather than reducing bandwidth.

Re: [c-nsp] Policers on 6500 Sup-32

2009-02-02 Thread Gergely Antal
did you set qos to vlan based? http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/qos.html#wp1726124 Ian MacKinnon wrote: Hi All, I am having an issue with policers on a 6500 not actually doing any policing. Running 12.2(33)SXH I have config like

[c-nsp] Netconf (over SSHv2) in SXI

2009-02-02 Thread Phil Mayers
All, Does anyone have working examples talking to the netconf implementation in 12.2(33)SXI? Or pointers to libraries / code that works? I've tried the examples from the cisco website: www.tinyurl.com/aeof6v ...but I just get back all kinds of invalid XML messages and so forth. I can do a

Re: [c-nsp] OSPF not propagating - But for only one route...?

2009-02-02 Thread Antonio Querubin
On Mon, 2 Feb 2009, ChrisSerafin wrote: I have 2 L3 devices (2811/3750) which are running OSPF and redistributing statics/connected networks. For some reason 1 static route will not redistribute from the switch to the router and vice versa, redistribute connected redistribute static ip

Re: [c-nsp] Policers on 6500 Sup-32

2009-02-02 Thread Phil Mayers
On Mon, Feb 02, 2009 at 10:21:11AM +, Ian MacKinnon wrote: Hi All, I am having an issue with policers on a 6500 not actually doing any policing. Running 12.2(33)SXH Silly question, but you do have the global mls qos set? ___ cisco-nsp mailing

[c-nsp] login

2009-02-02 Thread ann kok
Hi all I have the running config but don't understand the meaning Could you explain to me? line con 0 exec-timeout 0 0 transport input none line vty 0 4 line vty 5 15 Thank you __ Connect with friends from any web

[c-nsp] reacheability issue in MEL link

2009-02-02 Thread Ahmed Mohamed
Hello, this is a real life problem still occuring, and have no idea what may be causing it .. we are providing an internet direct service to our customer vial MEL (Metro Ethernet Link) CE (CS-7206 VXR) fe2/0.36 --Etherlink(local carrier)

[c-nsp] Initiating Connections to VPN Clients

2009-02-02 Thread Aaron Riemer
Hi guys, I am trying to work out why I cannot initiate connections to our VPN clients. ICMP seems to be okay and I can see that there is nothing in the log indicating the connections are denied. What could I be missing here? Connections inbound from the VPN clients work flawlessly. Thanks for

Re: [c-nsp] login

2009-02-02 Thread Aaron Riemer
These are your console and VTY lines for managing the device. Con being out of band management. VTY being in band management.. i.e. telnet and SSH. Aaron. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of ann kok Sent:

[c-nsp] core OSPF configurations

2009-02-02 Thread Brian Spade
Hi, Let's say you have a core router with 50+ SVIs and 4 uplinks to two other OSPF routers in the same area. What is the best way to configure OSPF to inject all 50+ SVIs into the routing domain? Would you configure network statements for all SVI networks and passive the interfaces? Would you

Re: [c-nsp] core OSPF configurations

2009-02-02 Thread Pete S.
Many ways to go about it. I'm not sure any is more correct than another. As long as you aren't wasting the router's CPU sending ospf hello's out all of the SVI interfaces. For my personal preference, I try to enumerate the networks in the the ospf process. This allows me to quickly see all the

[c-nsp] Fast UDLD timers in SXI?

2009-02-02 Thread David Hughes
Hi My trawling around CCO doco hasn't helped - I'm obviously running short of CCO foo today. Can someone verify if 12.2(33)SXI offers fast UDLD timers (i.e. down to 1 second) or if we are still stuck with the old 7 sec timers. We can do 1 sec UDLD on 2900 class switches so I hope we see

Re: [c-nsp] Netconf (over SSHv2) in SXI

2009-02-02 Thread Jeffrey Ollie
This piqued my interest, so I whipped up a quick program to do some testing. I've attached the resulting program, which when run against my 6500 running 12.2(33)SXI produces a copy of the running config. Some things I observed: 1. Netconf over SSHv2 (http://www.rfc-editor.org/rfc/rfc4742.txt)

Re: [c-nsp] Fast UDLD timers in SXI?

2009-02-02 Thread Gert Doering
Hi, On Tue, Feb 03, 2009 at 04:30:50PM +1000, David Hughes wrote: Can someone verify if 12.2(33)SXI offers fast UDLD timers (i.e. down to 1 second) or if we are still stuck with the old 7 sec timers. We can do 1 sec UDLD on 2900 class switches so I hope we see it in the premier