Re: [c-nsp] Can't pick up ip address--cisco 1200 ap

2009-08-03 Thread Peter Rathlev
AFAIK without BVI interfaces this will not work. You need to reconfigure the subinterfaces of Fa0 to match what Leslie pointed out: interface FastEthernet0.10 encapsulation dot1Q 10 bridge-group 10 bridge-group 10 spanning-disabled ! interface FastEthernet0.20 encapsulation dot1Q 20

[c-nsp] What router to choose instead of 7206VXR-G1/G2 (Ruzhanskaya Olga)

2009-08-03 Thread Ольга Ружанская
Hello List! Questions about platformX vs platformY or what platform to choose is not new for discussion here, but I didn't find mails in archives that directly fits to my needs. So, I would really appreciate any suggestions (or usefull references or links :-)). We are using 7206VXR-G1/G2

Re: [c-nsp] Upgrading IOS core on a 3750 Stack

2009-08-03 Thread Alexander Clouter
Peter Rathlev pe...@rathlev.dk wrote: On Sun, 2009-08-02 at 06:18 -0700, Bill Blackford wrote: The subject line says it all. I have some questions regarding how the upgrade works. 1. Do I only upgrade the master? Technically no, but the master might be able to auto-upgrade the

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-08-03 Thread TJ
-Original Message- From: Jared Mauch [mailto:ja...@puck.nether.net] Anyone can write an informational rfc. See apr 1 as an example. One can easily write up what they do, or survey responses. You can then follow the feedback from your request. That is exactly my point - if /126s are the

[c-nsp] ASA5500 authentication with Kerberos/NT Domain Controler

2009-08-03 Thread Scott Granados
Hi, I have a pair of ASA5500 devices that I wish to use to provide VPN services. I've been googling but all the examples I've found on Cisco.com and other sites are designed for configuration using the ASDM. The ASDM is absolutely awful to use and also almost entirely inaccessible with a screen

Re: [c-nsp] ASA5500 authentication with Kerberos/NT Domain Controler

2009-08-03 Thread Jeremiah Best
Scott, I hope this helps: http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008060f25c.shtml#cli . aaa-server WINDOWS protocol nt aaa-server WINDOWS (inside) host x.x.x.x nt-auth-domain-controller servername group-policy name-vpn-policy internal group-policy

[c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Michael Ulitskiy
Hello, Guys, are there any drawbacks of doing the following: interface Lo0 ip address 10.10.10.1 255.255.255.0 ! interface FastEthernet0/0.1 encapsulation dot1q 1 native ip unnumbered Lo0 ! ip route 10.10.10.0 255.255.255.0 FastEthernet0/0.1 ! as opposed to having ip address configured

Re: [c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Aaron
Loopback interfaces do not go down, so I'm not sure what benefit you are getting besides the ability to blackhole the 10.10.10.0/24 if the ethernet goes down. On Mon, Aug 3, 2009 at 11:09, Michael Ulitskiy mulits...@acedsl.com wrote: Hello, Guys, are there any drawbacks of doing the

Re: [c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Aaron
So you don't want to use another IP for loopback. Sorry, misunderstood. On Mon, Aug 3, 2009 at 11:29, Aaron dudep...@gmail.com wrote: Loopback interfaces do not go down, so I'm not sure what benefit you are getting besides the ability to blackhole the 10.10.10.0/24 if the ethernet goes down.

Re: [c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Rodney Dunn
Don't do it. It's a hack and there are other forwarding plane things that don't like it. Read as..it may or may not always work. Burn another /32 for your loopback. Rodney Aaron wrote: Loopback interfaces do not go down, so I'm not sure what benefit you are getting besides the ability to

Re: [c-nsp] CSC CARD info

2009-08-03 Thread Oliver Boehmer (oboehmer)
Jack, can you define lots of ping drops? primary CSC OIR (or CSC switchover) is expected to cause traffic loss for a few seconds.. What type of fabric is this (2.5, 10 or 40Gbps) and which chassis? Do you see the same traffic loss on all linecard types? If you see more than 10 seconds or so loss,

Re: [c-nsp] DMVPN and OSPF

2009-08-03 Thread Jay Nakamura
To follow up, I have tried 12.4(20)T3, 12.4(24)T, 12.4(24)T1, all of them have the same symptom. I have downgraded back to 12.4(15)T9 and the network is stable again. I need at least 12.4(20)T because we want to implement IOS content filtering. TAC case is pending. I will post again when the

Re: [c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Ivan Pepelnjak
OSPF does not work across unnumbered VLAN subinterfaces. http://wiki.nil.com/Unnumbered_Ethernet_VLAN_interfaces#Limitations Ivan http://www.ioshints.info/about http://blog.ioshints.info/ -Original Message- From: Michael Ulitskiy [mailto:mulits...@acedsl.com] Sent: Monday, August

[c-nsp] Help:Anyone Familar with Cisco L3VPN Inter-AS Option C MPLS Forwarding Model?

2009-08-03 Thread asnoka zhung
Recently I have to configured L3VPN Inter-AS Option C on our network,while I noticed these issue on ASBR: 1.Cisco(7609 router) will allocate Implicit Null(3) label for routes locally generated on ASBR. 2.For routes learned from the PE in the same AS(suppose using LDP in the local AS),when

Re: [c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Michael Ulitskiy
It's not about saving a /32. This is a CPE device and I was just trying to save myself administrative burden of maintaining another per-customer static ip assignment. I don't need dynamic routing protocol to run on those interfaces, but thanks for pointing it out anyway. Ok, if I have to do it

Re: [c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Brian Turnbow
Not sure what's attached to the IP, or what you want to achieve , but a different approach would be to add no keepalive to the ethernet so it is always up. Brian -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of

Re: [c-nsp] What router to choose instead of 7206VXR-G1/G2 (Ruzhanskaya Olga)

2009-08-03 Thread Gert Doering
Hi, On Mon, Aug 03, 2009 at 01:05:03PM +0400, ? ? wrote: We are using 7206VXR-G1/G2 platform as edge router (PE) in our MPLS network. When traffic volume grows, we replace NPE-G1 processor with NPE-G2. But in future we'll need something more powerfull. As far as I understand the

[c-nsp] vlans to customer - good practise / myth to bust !

2009-08-03 Thread vince anton
Hi, I currently have a setup below that works ok, but I'd like some opinions about some unanswered questions ive got. Basically i currently offer IP based services to customers. What i do is run a fibre to a customer site, which on my end terminates in a switch as a vlan or as a trunk allowing

Re: [c-nsp] vlans to customer - good practise / myth to bust !

2009-08-03 Thread Mikael Abrahamsson
On Mon, 3 Aug 2009, vince anton wrote: My concern here is whether this is best practise for delivering such services, or if other ways of doing this are out there and proven better. No, that's a common model. Last but not least, security. what if a customer plugs the fibre link into his

Re: [c-nsp] ISP in US

2009-08-03 Thread Andy William
I decided to go with Internet connection solution but based on your experience as a customer what ISP should i select ? Level3 , Globalcrossing , Verizon , Sparkle , TATA or FLAG? thanks Andy On Sat, Aug 1, 2009 at 5:22 PM, Scott Granados gsgrana...@comcast.netwrote: I still like the heavy

Re: [c-nsp] ISP in US

2009-08-03 Thread Andy William
selection will depend on service relaibility , network stability and support On Mon, Aug 3, 2009 at 9:31 PM, Andy William awilliam1...@gmail.com wrote: I decided to go with Internet connection solution but based on your experience as a customer what ISP should i select ? Level3 ,

Re: [c-nsp] IP unnumbered vlan subinterfaces question

2009-08-03 Thread Tomas Daniska
Antivirus, verzia databazy 4300 (20090803) __ Tuto spravu preveril ESET NOD32 Antivirus. http://www.eset.sk __ Informacia od ESET NOD32 Antivirus, verzia databazy 4300 (20090803) __ Tuto spravu preveril ESET NOD32 Antivirus. http://www.eset.sk

Re: [c-nsp] BGP Multipath and unequal IGP metrics

2009-08-03 Thread David Hughes
Hi By layers are your suggesting building tunnels to match the iBGP topology so the peers all think they are directly connected? Interesting thought but not sure how it'd scale with gre etc. There is mpls configured on the core (just for inter-DC EoMPLS at present) so perhaps mpls-te

Re: [c-nsp] SFC DOWN

2009-08-03 Thread David Hughes
Looking for a well structure web site of info from this list? Just use markmail. David ... On 02/08/2009, at 11:51 PM, e ninja wrote: Gert, So if we apply your thought process, there is no value in capturing and organizing re-usable intellectual capital? I guess you must think

[c-nsp] Retired IOS Releases

2009-08-03 Thread Clayton Zekelman
Looks like Cisco went and removed a bunch of IOS release from the website in May. Not sure if this has already been discussed here. http://www.cisco.com/web/software/SPRIT/swretirement/IOSRetirementTable.html Anyone with older production equipment should probably archive their images from

Re: [c-nsp] Can't pick up ip address--cisco 1200 ap

2009-08-03 Thread snort bsd
Thanks. But I did almost exactly you suggested and still not working. BTW, the command bridge 10 route ip doesn't work since only command bridge 1 route ip works. --- On Mon, 3/8/09, Peter Rathlev pe...@rathlev.dk wrote: From: Peter Rathlev pe...@rathlev.dk Subject: Re: [c-nsp] Can't pick