Re: [c-nsp] WS-X6724-SFP SXI = high cpu usage?

2009-05-21 Thread Tassos Chatzithomaoglou
For everyone interested, the outcome is that WS-X6724-SFP or WS-X6748-SFP need to have a lot (~15-20) of SFPs connected in order for the cpu to increase. CSCsr21196: x6724/x6748 SFP enhanced link detection method The link background aggressively polls 24 ports at a poll. There is no toggle

[c-nsp] Dynamic NAT on router and ASA

2009-05-21 Thread Ibrahim Abo Zaid
Hi All i have NAT and PAT configured on ASA 5520 and it works as expcted from ASA , NAT all incoming connection 1:1 untill NAT pool is depepated than PAT all next connections but actually , NAT pool never get depelated and ASA started to use PAT pool although there are free IPs in NAT pool and

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Kevin Hodle
Hi Peter, Another option for load balancing outbound traffic in your scenario would be to do some netflow analysis on your upstream ports and have a look at what the top destination ASNs your outbound traffic is flowing toward. Using this data, you can construct as-path ACLs which you can

Re: [c-nsp] Limits of STP/RSTP/REP?

2009-05-21 Thread Сергій Халавчук
Definitely not more than 20 in a ring.  As far as I know, IOS limits the value of max-hops to 20.  This means you can't have a BPDU traverse more than 20 hops without being thrown away.  If one pair of switches in the ring experienced a total cut, your network would have a diameter of 20, end

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact onSup720-3BXL?

2009-05-21 Thread Brad Hedlund (brhedlun)
Better to use 'ebgp multihop' and peer to provider router's loopback. Then have equal cost static routes to provider's loopback via the two physical interface next hop IP addresses. Cheers, Brad Hedlund bhedl...@cisco.com http://www.internetworkexpert.org On May 20, 2009, at 9:47 PM,

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Phil Mayers
Peter Kranz wrote: Setup is as follows; 2 edge routers, each with a BGP session receiving full routes to the same provider router. The provider is load balancing inbound traffic to our AS nicely, 50/50 between the edge routers.. I would also like to load balance the outbound traffic.. I've

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Ibrahim Abo Zaid
Hi Peter If 2 upstream provider provides exactly same routes with same attributes so BGP will select 2 routes to each destination then TCAM will reach its maximum as installed BGP routes will be doubled but if some destination are preferely reachable from one of them and 2nd route will be backup

Re: [c-nsp] OT: 871W config

2009-05-21 Thread Ziv Leyes
Why do you think this is off topic? This is a config sample of I'm using at home and it's working great, of course you need to change some of the settings to match your needs. ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! interface FastEthernet0 ! interface FastEthernet1 ! interface

Re: [c-nsp] Limits of STP/RSTP/REP?

2009-05-21 Thread Tassos Chatzithomaoglou
I had the impression that STP diameter defined the max number of bridges between 2 points. And the recommended value by the IEEE was 7 (using default timers). -- Tassos ?? wrote on 21/05/2009 12:25: Definitely not more than 20 in a ring. As far as I know, IOS limits the value of

Re: [c-nsp] netflow sampling

2009-05-21 Thread Jon Lewis
On Wed, 20 May 2009, Roland Dobbins wrote: As mentioned earlier, sampled NetFlow is viewed by many as quite accurate enough for accounting/billing. If you're only looking at 1/64th of the packets, how do you accurately bill for traffic? Are you assuming that netflow would be collected on

Re: [c-nsp] Limits of STP/RSTP/REP?

2009-05-21 Thread Tassos Chatzithomaoglou
switch(config)#spanning-tree vlan 7 root primary ? diameter Network diameter of this spanning tree cr switch(config)#spanning-tree vlan 7 root primary diameter ? 2-7 Maximum number of bridges between any two end nodes -- Tassos Tassos Chatzithomaoglou wrote on 21/05/2009 16:43: I had

[c-nsp] Video Network Load Tests

2009-05-21 Thread Dracul
Hi Guys, Can anyone recommend good Video Simulator test tools to be documented inside a cisco network? I want to test the load using streams of HD, SD streams, using simulated clients. iperf seem to be mentioned as one of them. Any idea if there's a standard test script to do this as well? this

[c-nsp] OT: Access Point Automatically shifting between Controller-based and Autonomous Modes?

2009-05-21 Thread Felix Nkansah
Hi, I am looking to deploy a unified wlan solution (controller-based) for a customer with a central office and several remote business branches. The branches are all connected to the head office by radio or vsat links. I am considering placing a controller at the head office to manage all access

Re: [c-nsp] OT: 871W config

2009-05-21 Thread Ziv Leyes
This is a config sample of I'm using at home and it's working great, of course you need to change some of the settings to match your needs. ! bridge irb bridge 1 protocol ieee bridge 1 route ip ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface

Re: [c-nsp] OT: Access Point Automatically shifting between Controller-based and Autonomous Modes?

2009-05-21 Thread A . L . M . Buxey
Hi, The branches are all connected to the head office by radio or vsat links. I am considering placing a controller at the head office to manage all access points including those at the remote locations. However, if the radio or vsat link to the branch should go down (which is quite

Re: [c-nsp] Video Network Load Tests

2009-05-21 Thread Tim Jackson
VLC can stream video in whatever form(s) you want... Also, checkout IQMediaStim from IneoQuest... We use our Geminus probe to generate GigE linerate of duplicated streams, too... Works well... -- Tim On Thu, May 21, 2009 at 2:52 AM, Dracul chris.gar...@gmail.com wrote: Hi Guys, Can anyone

Re: [c-nsp] OT: 871W config

2009-05-21 Thread Jeff Wojciechowski
Thanks Ziv... Exactly what I was looking for as well! Try it out after I unpack my equipment after moving to the new house. -Jeff From: cisco-nsp-boun...@puck.nether.net [cisco-nsp-boun...@puck.nether.net] On Behalf Of Ziv Leyes [z...@gilat.net] Sent:

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact onSup720-3BXL?

2009-05-21 Thread Kevin Loch
I am doing 8 parallel full tables to the same provider on an rsp720 with no issues. You can barely do 6 full tables on a sup720-3bxl. The limitation is processor memory not tcam. Here is what 6 looks like with 12.2SXF16: HeadTotal(b) Used(b) Free(b) Lowest(b)

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact onSup720-3BXL?

2009-05-21 Thread Kevin Hodle
This would be a good solution if both of his sessions terminated on the same edge router, but in Peter's scenario he has 2 sessions, each on a different edge router so multi-hop load-balacing wouldn't be helpful for him. If he had both upstream provider links on the same edge router, I think he

Re: [c-nsp] C4K_PKTPROCESSING-5-NOTAPPLYINGACL

2009-05-21 Thread Ibrahim Abo Zaid
Hi David from Cisco Error MessageC4K_PKTPROCESSING-5-NOTAPPLYINGACL:Not applying [input/output] Acl for packet [packet-info] ExplanationThe software has not taken the ACL actions because it could not determine the correct ACL entry indicated by the hardware. The hardware-provided index

Re: [c-nsp] OT: 871W config - Digest, Vol 78, Issue 63

2009-05-21 Thread Thilak T
On Thu, May 21, 2009 at 5:50 AM, cisco-nsp-requ...@puck.nether.net wrote: Send cisco-nsp mailing list submissions to cisco-nsp@puck.nether.net To subscribe or unsubscribe via the World Wide Web, visit https://puck.nether.net/mailman/listinfo/cisco-nsp or, via email, send a

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Pete Templin
Phil Mayers wrote: I'm not 100% certain about this, but my understanding is that there is still only 1 FIB entry for the route; it just has 1 next hop. However - will this work? For eBGP-multipath, the paths have to be basically identical except next-hop. This won't be the case, since each

Re: [c-nsp] C4K_PKTPROCESSING-5-NOTAPPLYINGACL

2009-05-21 Thread David Freedman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ibrahim: - - No QoS - - V.small outbound ACL - - Low load / CPU - - Low traffic think it may be a CAM programming issue, am going to capture a textual representation of the ACLents in the CAM with the command show platform hardware acl dir entries

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Kevin Hodle
Hi Peter, Another option for load balancing outbound traffic in your scenario would be to do some netflow analysis on your upstream ports and have a look at what the top destination ASNs your outbound traffic is flowing toward. Using this data, you can construct as-path ACLs which you can

Re: [c-nsp] OT: Access Point Automatically shifting between Controller-based and Autonomous Modes?

2009-05-21 Thread Ryan West
Felix, Check into H-REAP for this functionality. http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807cc3b8.shtml -ryan -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Felix Nkansah

Re: [c-nsp] OT: Access Point Automatically shifting between Controller-based and Autonomous Modes?

2009-05-21 Thread Felix Nkansah
Thanks guys. I think that is the solution to my requirement. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Dual homed but no BGP

2009-05-21 Thread Roy
Does anyone have an example of a dual homed router without BGP but with NAT? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Interface descriptions - what do you put in?

2009-05-21 Thread Pete Templin
List, What do you put into your interface descriptions? Do you document circuit ID, far-end equipment/port, near-end equipment/port, and/or anything else? Pete ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Dual homed but no BGP

2009-05-21 Thread Ryan West
Roy, Check this out: http://supportwiki.cisco.com/ViewWiki/index.php/Configuring_dynamic_NAT_with_route-maps You may want to throw in some SLA configs to build in more redundancy. -ryan -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Kevin Hodle
This is correct - the primary benefit of multi-hop in most topologies would be on a downstream iBGP speaker to (for example, a core facing route-reflector) with equal IGP costs to each edge router - this would achieve proper outbound load balancing. Also worth noting is that this will only be

Re: [c-nsp] Interface descriptions - what do you put in?

2009-05-21 Thread Darin Herteen
I always try to put customer name - Circuit ID. I've found ip addressing and bandwidth are too dynamic and become inaccurate over time Darin Herteen Date: Thu, 21 May 2009 10:07:09 -0500 From: peteli...@templin.org To: cisco-nsp@puck.nether.net Send Subject: [c-nsp] Interface

Re: [c-nsp] Dual homed but no BGP

2009-05-21 Thread Ray Burkholder
http://supportwiki.cisco.com/ViewWiki/index.php/Configuring_dynamic_NAT _with_route-maps You may want to throw in some SLA configs to build in more redundancy. Does anyone have an example of a dual homed router without BGP but with NAT? A variation on a theme with zone-based policy

Re: [c-nsp] Video Network Load Tests

2009-05-21 Thread Dracul
THanks guys! But considering the economy, I believe the opensource tools is more practical ;) i've been looking into iperf. it has a server - client scenario for throughput tests. On Thu, May 21, 2009 at 11:52 PM, Chris Boyd cb...@gizmopartners.comwrote: On May 21, 2009, at 2:52 AM, Dracul

[c-nsp] AS5300 Modem Server

2009-05-21 Thread Ray Burkholder
Although they are almost a thing of the past, I still have to maintain a dial up pool. I'd like to replace my Ascends with some used AS5300s. It seems that there is a choice of MICA vs Microcomm modems. Any idea on which would be preferred? Way back when, one bad experience with MICA:

Re: [c-nsp] Dual homed but no BGP

2009-05-21 Thread Ivan Pepelnjak
Pointers to everything you've ever wanted to know (and probably a lot of what you don't want to know :) http://wiki.nil.com/Small_site_multihoming Hope it helps Ivan http://www.ioshints.info/about http://blog.ioshints.info/ -Original Message- From: Roy

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Gert Doering
Hi, On Thu, May 21, 2009 at 12:34:00PM +0300, Ibrahim Abo Zaid wrote: If 2 upstream provider provides exactly same routes with same attributes so BGP will select 2 routes to each destination then TCAM will reach its maximum as installed BGP routes will be doubled but if some destination are

[c-nsp] General performance based routing question?

2009-05-21 Thread Scott Granados
Hi, I have a general question and Google isn't steering me right.;) While BGP contains next hop information and other various knobs for traffic engineering there is no performance metric included. Take the following example, say router A is connected to ISP1 and ISP2 via two equal bandwidth

Re: [c-nsp] Interface descriptions - what do you put in?

2009-05-21 Thread Peter Rathlev
On Thu, 2009-05-21 at 10:07 -0500, Pete Templin wrote: What do you put into your interface descriptions? Do you document circuit ID, far-end equipment/port, near-end equipment/port, and/or anything else? We typically use something like TGE-trunk-HER.CORE-Te6/1 or

Re: [c-nsp] General performance based routing question?

2009-05-21 Thread Brad Hedlund
On 5/21/09 1:33 PM, Scott Granados gsgrana...@comcast.net wrote: What are people doing to factor in traffic performance instead of making purely distance based calculations? Cisco has a unique technology in IOS for this called Performance Routing (PfR). http://www.cisco.com/go/pfr

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Kevin Hodle
Yes - that will be a fine solution for your redundant multi-vendor backbone... er, wait. Sorry, forgot what list I was on :P Also, I had a look at this, and in the QA section, I got a good laugh from this portion: Q. How do I deploy Cisco PfR in networks not running internal BGP (iBGP) within the

Re: [c-nsp] General performance based routing question?

2009-05-21 Thread Scott Granados
/go/pfr Cheers, Brad Hedlund bhedl...@cisco.com http://www.internetworkexpert.org __ Information from ESET NOD32 Antivirus, version of virus signature database 4094 (20090521) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

Re: [c-nsp] General performance based routing question?

2009-05-21 Thread Kevin Hodle
Hi Scott, There are several other 'tried and true' vendor neutral technologies that tackle this problem. Avaya routescience and Internap's Flow Control Platform are two that immediately come to mind, but I'm sure there are others.. Cheers, Kevin Hodle On Thu, May 21, 2009 at 1:33 PM, Scott

Re: [c-nsp] General performance based routing question?

2009-05-21 Thread Brad Hedlund
On 5/21/09 3:05 PM, Scott Granados gsgrana...@comcast.net wrote: Doesn't PFR require that PFR enabled routers be on both ends? No, not at all. PFR runs locally on the router and does not rely on any other routers having PFR enabled (unless you have separated the MC function). PFR makes

Re: [c-nsp] OT: Access Point Automatically shifting between Controller-based and Autonomous Modes?

2009-05-21 Thread Frank Bulk
This functionality is table-stakes in the enterprise wireless market. If someone can't do it, move on to the next vendor. Frank -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Felix Nkansah Sent: Thursday, May 21, 2009

Re: [c-nsp] 3750 Metro - Base MAC addresses

2009-05-21 Thread Oliver Gorwits
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Clinton Work wrote: show ver on a 3750 Metro will tell you the base MAC address, but not the size of the block. Anybody know how many unique MACs are assigned to a 3750ME? No I don't for the ME, but you could start with this for the non-ME:

Re: [c-nsp] ebgp load balancing using maxiumu-paths TCAM impact on Sup720-3BXL?

2009-05-21 Thread Brad Hedlund
Interesting, I thought it was common for service providers to run iBGP. At any rate, yes, Enterprise customers typically do not have iBGP running through their core, just at the Internet and WAN edges, which by the way happens to be the perfect places to run PfR :-) Cheers, Brad Hedlund

Re: [c-nsp] OT: 871W config

2009-05-21 Thread Justin Shore
Thanks for all who replied on and off-list. I see a few things in the configs that were sent to me that I overlooked, like the 'bridge # route ip' commands. That could very well be the problem. All of the configs sent were using only a single default VLAN whereas I've disabled VLAN 1 and am

[c-nsp] 3560 cpu load question

2009-05-21 Thread Cord MacLeod
My graphs show cpu spikes up to 20% every now and again, but the following command shows 100% spikes. Question being is this normal behavior, how would I track the cause (assuming my traffic is relatively stable throughout the day) and should I be worried this may be impacting traffic?

Re: [c-nsp] 3560 cpu load question

2009-05-21 Thread Peter Rathlev
On Thu, 2009-05-21 at 15:18 -0700, Cord MacLeod wrote: My graphs show cpu spikes up to 20% every now and again, but the following command shows 100% spikes. Question being is this normal behavior, how would I track the cause (assuming my traffic is relatively stable throughout the day)

Re: [c-nsp] 3560 cpu load question

2009-05-21 Thread Cord MacLeod
It sits in the middle of a network. Below are layer 2 2960 switches at the top of rack which the machines plug in to. Above are routers announcing BGP default at it in the confederation. The machines use the 3560 to traverse vlans, it is also the root switch in spanning tree and has

[c-nsp] mpls packets were forwarded via software or hardware mode?

2009-05-21 Thread Zhang Huanjie
Our 6509 has SUP720-3B engine, but some modules have DFC3A installed. It support MPLS in test network. I want to known whether the MPLS packets were processed by CPU or switched in hardware mode. #show mod Mod Ports Card Type Model Serial No. --- -

[c-nsp] WCCPv2 - what happens to existing connections when redirect-list is modified?

2009-05-21 Thread Dale Shaw
Hi all, Scenario: WCCPv2 configured and active for WAAS, all TCP traffic redirected (no redirect-list configured for service groups 61 and 62) What happens to active/existing TCP sessions that _are_ being intercepted/redirected if I configure a redirect-list with a 'deny' statement that matches

Re: [c-nsp] WCCPv2 - what happens to existing connections when redirect-list is modified?

2009-05-21 Thread Brad Hedlund
Dale, If the affected flows are NOT being optimized by WAAS (pass-through connections), your result should be #2. If the affected flows ARE being optimized by WAAS, your result should be #3. Cheers, Brad Hedlund bhedl...@cisco.com http://www.internetworkexpert.org On 5/21/09 10:38 PM, Dale

Re: [c-nsp] WCCPv2 - what happens to existing connections when redirect-list is modified?

2009-05-21 Thread Adrian Chadd
On Fri, May 22, 2009, Dale Shaw wrote: Can anyone provide any insight? Adrian Chadd, I'm shining the bat torch towards the sky, are you out there? :-) Sigh. Yes i'm here. :) Unless stuff has changed, WCCPv2 will just still be matching on bits in your packet headers and rewriting next hops.

Re: [c-nsp] Interface descriptions - what do you put in?

2009-05-21 Thread Engelhard Labiro
Pete, for WAN connection we put the Provider name and circuit number, for LAN connection we put the hostname of the other end and its interface number. HTH, Engel On Fri, May 22, 2009 at 12:07 AM, Pete Templin peteli...@templin.org wrote: List, What do you put into your interface

[c-nsp] Redundancy setup - comments please..

2009-05-21 Thread mb
Would like opinions on the following setup - Limited budget, we are attempting to have relatively simple cut-over should we lose primary switch or 7200 7200 w/ NPE-G2 (2 Gb ports in PortChannel) 7200 w/ NPE-400 (2 x 10/100 ports in PortChan) 3560 48 Gb ports (Primary Switch) - 2 Gb ports in

Re: [c-nsp] 3750 Metro - Base MAC addresses

2009-05-21 Thread Clinton Work
Turns out that we have a number of 3750 Metros with adjacent base MAC addresses. The 3750 Metros have 128 MACs assigned per chassis as well. Clinton. Oliver Gorwits wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 No I don't for the ME, but you could start with this for the

Re: [c-nsp] WCCPv2 - what happens to existing connections when redirect-list is modified?

2009-05-21 Thread Dale Shaw
Hi all, On Fri, May 22, 2009 at 1:38 PM, Dale Shaw dale.shaw+cisco-...@gmail.com wrote: Can anyone provide any insight? Thanks for the replies -- that makes sense. I'm proceeding on the basis that by _not_ intercepting/redirecting, the affected flows will barf, as I'm sure that TFO, at least,