[c-nsp] Nexus 5000 + Qlogic QLE8042 + VMware ESX 3.5?

2009-06-12 Thread Nate
Has anyone gotten VMware ESX 3.5 Update 4 to recognize the Qlogic QLE8042 CNA with both the 10G Ethernet interface and FC HBA? We're trying to get the server with the CNA installed connected to the Nexus 5000 and while the Ethernet interfaces are shown as up on the N5K, the VFC interfaces are

Re: [c-nsp] Problem with config for 7206 acting as a lns

2009-06-12 Thread Michael Ulitskiy
There's no such policy-maps defined in your config. If you supply an undefined policy-map in radius VSA then cisco just drops the connection. Michael On Thursday 11 June 2009 08:13:24 pm Samantha (Regional Connect) wrote: Hi I have the radius issuing the following attribute (example)

Re: [c-nsp] Problem with config for 7206 acting as a lns

2009-06-12 Thread E. Versaevel
You need to increment the sequence number: lcp:interface-config#1=service-policy output 160 lcp:interface-config#2=service-policy input 2560 also make sure the service policy referred to are in you configuration :) Samantha (Regional Connect) schreef: Hi I have the radius issuing the

[c-nsp] cisco router for internet

2009-06-12 Thread Narma Wahyuadi
Could cisco router 2800 series work under BGP protocol for internet ? thx _ Note: The information contained in this e-mail is intended only for the use of the individual or entity named above and may contain information

Re: [c-nsp] cisco router for internet

2009-06-12 Thread Skeeve Stevens
Yes... just not fast, but if you run a 2821/2852 with a gig of Ram, it can do multiple tables quite fine, it just takes a little while to fully load all the routes. A 2811 with 768 will also be fine. I wouldn't try a 2801... even with 512 it will be slow. ...Skeeve -- Skeeve Stevens,

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Łukasz Bromirski
On 2009-06-11 21:01, Phil Mayers wrote: I would avoid the sup720, the rsp720 has 2x the ram and more Obviously it's worth emphasising that the RSP720 is 7600-only, and from posts on this list it's still not in general availability I think? True, the RSP is 7600-only, but only the RSP720-10GE

[c-nsp] clear ip pool

2009-06-12 Thread Sebastian Ganschow
Hi, we've got our ciscos configured that ip pool configuration is derived from our radius servers. In order to change the ip pool, I change the pool in the radius config. But our ciscos are still using the old ip pool. It seems like some caching issue. Is there any way to let the cisco

Re: [c-nsp] cisco router for internet

2009-06-12 Thread Ryan West
Hi. Depends on what you mean by work. A 2811 with 512 megs of RAM will handle multiple full feeds ok. It chugs when they are first sent, but will handle them fine. The question is really how many routes do you need from your provider. You may only need a default from one provider and

Re: [c-nsp] x6148 vs. x6548

2009-06-12 Thread Geoffrey Pendery
Well, with the 6548, you're still going to be limited to 8 Gbps, rather than 6 Gbps. It's a CEF256 card, which means it has an 8 Gbps fabric connection to the supervisor, instead of just sharing the 32 Gbps like the 6148 does. So if you're looking to drive more than a gig through an

[c-nsp] A question about TACACS+ and controlling command use

2009-06-12 Thread Byrd, William
I've done a lot of thinking and searching on this problem and I haven't been able to figure out any way to solve it. The rest of the Engineers here have come to the conclusion it just can't be done. We have a pretty large deployment of Cisco 7200's with the vast majority being carded out with

Re: [c-nsp] x6148 vs. x6548

2009-06-12 Thread Bill Blackford
Your question is one of mine as well. I plan to from EC's across the 6548 and a 6516-GBIC (yes copper and fiber). So does this essentially mean that every 6 ports has its own gig ASIC? So, I'd have to stagger like: 1/1, 1/7, 1/13, etc.? Now, if what you're reporting is correct (I'm sure it

Re: [c-nsp] A question about TACACS+ and controlling command use

2009-06-12 Thread Ian MacKinnon
Don't know if this would work, but why not bar them from the controller command instead Ie Conf t Controller T3 1/0 -Block this command shut -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Byrd, William Sent: 12

Re: [c-nsp] A question about TACACS+ and controlling command use

2009-06-12 Thread Byrd, William
Unfortunately since they need access to build channel-groups for customer DS1 transport this isn't an option. :-( -Will - Original Message - From: Ian MacKinnon ian.mackin...@lumison.net Sent: Fri, June 12, 2009 9:54 Subject:RE: [c-nsp] A question about TACACS+ and controlling command

Re: [c-nsp] x6148 vs. x6548

2009-06-12 Thread Jared Mauch
On Jun 12, 2009, at 9:51 AM, Bill Blackford wrote: Your question is one of mine as well. I plan to from EC's across the 6548 and a 6516-GBIC (yes copper and fiber). So does this essentially mean that every 6 ports has its own gig ASIC? So, I'd have to stagger like: 1/1, 1/7, 1/13, etc.?

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Kevin Loch
Phil Mayers wrote: Kevin Loch wrote: Unfortunately, Cisco's partners are useless. They propose 6509s without the DFCs, which we know will fall over. Well that depends... The DFC's only do next-hop (tcam) lookups and netflow. All packets are switched on the centralized PFC. Each line

Re: [c-nsp] x6148 vs. x6548

2009-06-12 Thread Pete Templin
Geoffrey Pendery wrote: I have a question of my own, since this subject has come up a time or two - regarding the 6148's, the statement is made a couple times that Etherchannel will get you port redundancy but no extra bandwidth, since the ASIC is only a gig. But if I distribute my channel

Re: [c-nsp] ASA 5510 Configuration Replication Failure

2009-06-12 Thread Jeff Wojciechowski
OK - found the REAL issue now. My standby unit turned into a brick on me :o) I actually SAW it happen. All the link lights went out at once. Thanks again for the help. -Jeff -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On

Re: [c-nsp] A question about TACACS+ and controlling command use

2009-06-12 Thread Ivan Pepelnjak
The obvious answer is to restrict the use of the shutdown command. Unfortunately the technicians that often make the mistakes have to be able to use the command to shut down Serial or Ethernet interfaces in the course of their work. Something along the lines of this EEM Tcl policies:

Re: [c-nsp] x6148 vs. x6548

2009-06-12 Thread Michael Ulitskiy
On Friday 12 June 2009 11:34:14 am Pete Templin wrote: Geoffrey Pendery wrote: I have a question of my own, since this subject has come up a time or two - regarding the 6148's, the statement is made a couple times that Etherchannel will get you port redundancy but no extra bandwidth,

Re: [c-nsp] x6148 vs. x6548

2009-06-12 Thread Tim Stevenson
You are correct. That only applies to the 6148. Originally it also applied to the 6548 as well, but that limitation was removed later by s/w optimizations in the LTL programming scheme. So you *can* get more than 1G thru an etherchannel with 6548s, but of course, you still can only get 1G max

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Jo Rhett
On Jun 12, 2009, at 8:42 AM, Kevin Loch wrote: Łukasz has already addressed this; suffice to say he's right, and the above is not correct. A TCAM lookup *is* the forwarding operation, and the DFC has all information required locally to switch the packet (via the fabric) to the output

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Ross Vandegrift
On Fri, Jun 12, 2009 at 11:42:45AM -0400, Kevin Loch wrote: A 6509 should not fall over without DFC's unless you are doing more than 30mpps. That is 15gbit/s of 64 byte packets or 360gbit/s of 1500 byte packets. Hah, keep drinking the cool aid! I have a pair of 6500s ready to fall over at

[c-nsp] LACP + Wi-Fi = ghettofabulous big wireless pipes?

2009-06-12 Thread Rogelio
I've got several outdoor Wi-Fi radios that I would like to configure in a PtP configuration on multiple 802.11a channels. My question to the list is, Can I use LACP on each end (via a network switch) to aggregate those PtP connections into one virtual connection? e.g.

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Peter Rathlev
On Fri, 2009-06-12 at 12:58 -0700, Jo Rhett wrote: Now let's talk about reality: 1/10 inbound/outbound ratios, 5% of received traffic is Internet cruft requiring (wasted) TCAM lookups, etc and such forth than any provider peering router observes, and you're down to a much lower ratio.

[c-nsp] EEM - action syslog working but action cli command working

2009-06-12 Thread Rishi Kochar
Hi I am trying to develop a small EEM applet to test shut a port when an event on the port occurs. The script i have written is event manager applet EMSHUT event syslog occurs 1 pattern my pattern action 1.0 syslog priority emergencies msg HELLO action 1.1 cli command enable action 1.2 cli

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Tom Lanyon
On 13/06/2009, at 7:33 AM, Peter Rathlev wrote: Now, let's stop talking about non-DFC cards and start talking about equipment which can handle uRPF on every port, full Netflow analysis of up to 8 ports at a time, every port layer 3, every port filtered, colo facility core/peering. If this is

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Roland Dobbins
On Jun 13, 2009, at 3:52 AM, Ross Vandegrift wrote: I have a pair of 6500s ready to fall over at about 150kpps. It sounds as if you've a lot of stuff being punted, which should bear further investigation. --- Roland

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Roland Dobbins
On Jun 13, 2009, at 9:27 AM, Tom Lanyon wrote: Was the original intention of this thread not to find out exactly what *is* the best tool for the above scenario? :) GSR w/E3 or E5 LCs, ASR 1K, CRS-1, or N7K, depending upon the circumstances (note initial FIB-size limitation on N7K; I don't

Re: [c-nsp] EEM - action syslog working but action cli command working

2009-06-12 Thread Ivan Pepelnjak
Could be yet another prompt-related EEM bug. See http://blog.ioshints.info/2008/02/fix-bugs-in-eem-action-cli.html http://blog.ioshints.info/2007/12/execute-cli-commands-with-prompts-in.html Use the EEM debugging (debug event man action cli) to verify what's going on. Ivan

Re: [c-nsp] full routing table / provider-class chassis

2009-06-12 Thread Jo Rhett
Now, let's stop talking about non-DFC cards and start talking about equipment which can handle uRPF on every port, full Netflow analysis of up to 8 ports at a time, every port layer 3, every port filtered, colo facility core/peering. On Jun 12, 2009, at 3:03 PM, Peter Rathlev wrote: If this is