Re: [c-nsp] clear ip pool

2009-06-17 Thread Oliver Boehmer (oboehmer)
Sebastian Ganschow wrote on Friday, June 12, 2009 11:55: Hi, we've got our ciscos configured that ip pool configuration is derived from our radius servers. In order to change the ip pool, I change the pool in the radius config. But our ciscos are still using the old ip pool. It seems

Re: [c-nsp] ME-4924-10GE mgt port

2009-06-17 Thread Arie Vayner (avayner)
Victor, Try taking a look here: http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.2/52sg/conf iguration/guide/sw_int.html#wp1110617 Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of victor Sent: Wednesday,

Re: [c-nsp] Global Route Leaking on same PE

2009-06-17 Thread Fässler , Ronny
Just additional Info Here's what my Cisco Technical sayed last time i looked at it... You can not point the next-hop to the local routers interface. Development does not plan on supporting this configuration. Looks bad - I did it with a golden Cable - Physcal crossover loop...

Re: [c-nsp] ME-4924-10GE mgt port

2009-06-17 Thread victor
Like I said there is nothing like interface FastEthernet1 in the running-config Maybe I need to enable it somewhere? When I plug in a patch-cord the link ON THE OTHER SIDE goes up but the light beneath mgt port doesn't light up. BTW, sho int doesn't list Fe1 as a possible option. On Wed, 17

Re: [c-nsp] ME-4924-10GE mgt port

2009-06-17 Thread Euan Galloway
On Wed, Jun 17, 2009 at 11:54:03AM +0400, victor wrote: Like I said there is nothing like interface FastEthernet1 in the running-config Maybe I need to enable it somewhere? When I plug in a patch-cord the link ON THE OTHER SIDE goes up but the light beneath mgt port doesn't light up. BTW,

Re: [c-nsp] ME-4924-10GE mgt port

2009-06-17 Thread Steve McNamara
From http://www.cisco.com/en/US/docs/switches/metro/me4924-10ge/hardware/installation/guide/HIGOVEW.html#wp1161221 Management Port The management port is used (in ROMMON mode only) to recover a switch software image that has been corrupted or destroyed due to a network catastrophe. This port is

Re: [c-nsp] Global Route Leaking on same PE

2009-06-17 Thread Joe Maimon
Tim Durack wrote: Amen to that. I've played around with the various loopback strategies, including using a gre tunnel that originates/terminates on the same PE. It worked, but didn't seem like a scalable solution. A dot1q trunk between two ports (if your not using a switch platform as

Re: [c-nsp] clear ip pool

2009-06-17 Thread Sebastian Ganschow
Hmm, it's been a while since I dealt with that sort of stuff, and there is an AVP (cisco-avpair = ip:pool-timeout=minutes) you can (and should) send along with the pool definition. I fear the default is no timeout, and I'm not aware how to manually clear this. Maybe you can try no ip local

Re: [c-nsp] clear ip pool

2009-06-17 Thread Oliver Boehmer (oboehmer)
Sebastian Ganschow mailto:s.gansc...@buelow-masiak.de wrote on Wednesday, June 17, 2009 12:49: Hmm, it's been a while since I dealt with that sort of stuff, and there is an AVP (cisco-avpair = ip:pool-timeout=minutes) you can (and should) send along with the pool definition. I fear the default

Re: [c-nsp] clear ip pool

2009-06-17 Thread Sebastian Ganschow
hmm, where is this documented? If I recall correctly, the router tries to fetch the pool from Radius when a user logs in whose authorization information reference this pool and the pool is not yet defined (or has expired when you sent ip:pool-timeout along with the pool) We had no timeout

Re: [c-nsp] Global Route Leaking on same PE

2009-06-17 Thread Clue Store
It would be great to have a simple global-vrf route exchange feature though. Anyone using a vrf for their global tables?? This solution could possibly work for me but not sure what insane issues would come up by doing this. ___ cisco-nsp mailing

Re: [c-nsp] Network Perefromance

2009-06-17 Thread harbor235
I am definitely aware of IP SLA and also agree that it is very useful, however, this customer's network is Juniper so I will be unable to uitlize that feature. MTR looks like it is doable, however, it uses icmp. I doubt that you can get an accurate picture of the network using icmp, can it be

Re: [c-nsp] Global Route Leaking on same PE

2009-06-17 Thread Jeff Kell
Clue Store wrote: Anyone using a vrf for their global tables?? This solution could possibly work for me but not sure what insane issues would come up by doing this. After trying several other approaches and failing, if you can't beat them, join them... We use the global table only for

Re: [c-nsp] Network Perefromance

2009-06-17 Thread Eric Van Tol
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of harbor235 Sent: Wednesday, June 17, 2009 9:58 AM To: Matthew Huff Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Network Perefromance I am definitely aware of

[c-nsp] 10GE blade questions

2009-06-17 Thread Paul Stewart
We have a 6509 sup2/msfc2 switch which only does layer2 services - is there 10GE options available for this platform? The WS-X6708-10G-3CXL blades are also of interest for Sup720 platform - if they are only doing VLAN trunks out to remote switches and any routing would be done on SVI

[c-nsp] NPE-G2 Management interface limitation

2009-06-17 Thread Robert Blayzor
The NPE-G2 fact states: Q. Are routing protocols supported on the 10/100BASE-T management interface? A. Yes, routing protocols are supported on the management interface. However, the management interface is strictly for management purposes only, with limited packet forwarding. We use

Re: [c-nsp] 10GE blade questions

2009-06-17 Thread Gert Doering
Hi, On Wed, Jun 17, 2009 at 01:05:33PM -0400, Paul Stewart wrote: We have a 6509 sup2/msfc2 switch which only does layer2 services - is there 10GE options available for this platform? None of the WS-X67xx boards will work with a Sup2 (they need Sup720 fabric connections). I seem to remember

Re: [c-nsp] 10GE blade questions

2009-06-17 Thread Tim Stevenson
At 10:29 AM 6/17/2009, Gert Doering blurted out: Hi, On Wed, Jun 17, 2009 at 01:05:33PM -0400, Paul Stewart wrote: We have a 6509 sup2/msfc2 switch which only does layer2 services - is there 10GE options available for this platform? None of the WS-X67xx boards will work with a Sup2 (they

Re: [c-nsp] 10GE blade questions

2009-06-17 Thread Paul Stewart
Thanks folks.. I figured the 720 upgrade would come along as part of this..;) Cheers, Paul From: Tim Stevenson [mailto:tstev...@cisco.com] Sent: Wednesday, June 17, 2009 1:51 PM To: Gert Doering; Paul Stewart Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 10GE blade questions

Re: [c-nsp] 10GE blade questions

2009-06-17 Thread Richard A Steenbergen
On Wed, Jun 17, 2009 at 07:29:09PM +0200, Gert Doering wrote: I seem to remember that there was an earlier 10G blade (something like 1 ports, no XENPAKs), but can't find any details about it - the board name was WS-X6502-10GE, and even that one would require a fabric board for your Sup2

[c-nsp] NAT issue

2009-06-17 Thread c0re dumped
Hello guys, I have following scenario: I receive a packet in ATM0/0 interface. The packet has the following addresses: SRC A.A.A.A and DST B.B.B.B. I must translate the packet and send it out the *same* interface (ATM0/0), *but* with the following addresses: SRC X.X.X.X DST Y.Y.Y.Y What NAT

Re: [c-nsp] Global Route Leaking on same PE

2009-06-17 Thread Pshem Kowalczyk
Hi, Yes, everything - including internet table, only infrastructure runs in the global one. As many have noticed the pain of getting anything going between the global table and the vrfs is just too much. All I miss now is ability to do a static route from vrf to another vrf ;-) but for now vrf

Re: [c-nsp] NAT issue

2009-06-17 Thread Rodney Dunn
What does your routing look like to get it in/out the same ATM interface? On Wed, Jun 17, 2009 at 04:55:04PM -0300, c0re dumped wrote: Hello guys, I have following scenario: I receive a packet in ATM0/0 interface. The packet has the following addresses: SRC A.A.A.A and DST B.B.B.B. I

Re: [c-nsp] full routing table / provider-class chassis

2009-06-17 Thread Jo Rhett
On Jun 15, 2009, at 11:29 AM, Kevin Graham wrote: Given the 192 ports of 10/100/1000, presumably this is aggregating customers, in which case it'd be best to roll these up on 7600/RSP720 (along with their associated BGP, since most of them would probably be suitable for peer-groups). uRPF

[c-nsp] Redirects / hair-pinning traffic vs. performance

2009-06-17 Thread Peter Rathlev
Hi, I have the need to introduce some PBR to solve a hopefully temporary problem. Some of the traffic being routed will leave the same interface as it arrives on. My worry is if this would have any performance impact the traffic arrives on and leaves from the same interface. I could imagine that

Re: [c-nsp] full routing table / provider-class chassis

2009-06-17 Thread Ray Burkholder
We don't have core and edge -- our switches do both. Every port on the switch is either a BGP peer/uplink/downlink or a customer. Every port layer3-routed with only a few handfuls of customers with dual links. Purchasing a switch to be the edge and then another to handle BGP

Re: [c-nsp] full routing table / provider-class chassis

2009-06-17 Thread Roland Dobbins
On Jun 18, 2009, at 6:59 AM, Jo Rhett wrote: I'd prefer something that can handle both edge and core duties. GSR w/E3 or E5 LCs, CRS-1, or ASR 1K. --- Roland Dobbins rdobb...@arbor.net // http://www.arbornetworks.com

[c-nsp] BGP quandry

2009-06-17 Thread Justin Shore
I'm scratching my head on a BGP problem. I have a pair of core routers and a pair of distribution routers in our data center. The DC routers each have a single connection to the core routers (1 connection per pair). Previously the DC routers were configured as route-reflector clients with a

Re: [c-nsp] BGP quandry

2009-06-17 Thread Justin Shore
Justin Shore wrote: Core: ! address-family vpnv4 neighbor ibgp-peer send-community extended neighbor 10.64.0.34 activate exit-address-family I added the last activate for grins but it didn't help. peer-groups are auto-activated which is why it's not explicitly spelled out in the