Re: [c-nsp] Leaking specific routes from a VRF

2009-09-07 Thread luismi
Hi all, We are doing some tests here with the code provided by Tomas. We have several questions that we were not able to find a proper answer over internet that we would like to share with you to see if we can understand everything correctly: a) ip prefix-list has a parameter called le so we can

[c-nsp] MIBs and OIDs

2009-09-07 Thread Mohammad Khalil
hey all what is the way to transform the MIBs to OIDs ? _ Show them the way! Add maps and directions to your party invites. http://www.microsoft.com/windows/windowslive/products/events.aspx

Re: [c-nsp] MIBs and OIDs

2009-09-07 Thread Kaj Niemi
Take a look at snmptranslate from net-snmp. :) Kaj From: Mohammad Khalil eng_m...@hotmail.com Date: Mon, 7 Sep 2009 01:36:23 -0700 To: cisco-nsp@puck.nether.net Subject: [c-nsp] MIBs and OIDs hey all what is the way to transform the MIBs to OIDs ?

Re: [c-nsp] VPN traffic to the Internet ... (ASA)

2009-09-07 Thread Alan Buxey
Hi, What am I missing here? your ASA cannot be that IP - so is probably just dropping those packets as invalid... what you need to do is set up a proxy (eq squid) on your internal network that has an address within the 'allowed IP range' and then configure the ASA to use that proxy - your

Re: [c-nsp] Leaking specific routes from a VRF

2009-09-07 Thread Victor Cappuccio
Hi Luisi, while I am not aware of the complete thread, I see that you are trying to match VRF route information, using prefix-list or access-list: For question A: Basically the le parameter in the prefix list you show us, ip prefix-list FTP_NET seq 1 permit 10.53.0.224/29 le 32 For me it

Re: [c-nsp] Leaking specific routes from a VRF

2009-09-07 Thread Brian Turnbow
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of luismi Sent: lunedì 7 settembre 2009 10.17 To: Tomas Caslavsky Cc: ivan.d...@raxon.es; cisco-nsp@puck.nether.net; Daniska Tomas Subject: Re: [c-nsp] Leaking specific routes

Re: [c-nsp] Leaking specific routes from a VRF

2009-09-07 Thread Victor Cappuccio
Typo in my email What is in parenthesis should be (32,31,30,29) Sorry for the SPAM -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of vcapp...@cisco.com Sent: lunes, 07 de septiembre de 2009 12:28 To: 'luismi' Cc:

[c-nsp] 6500 ipsec vpn

2009-09-07 Thread ying-xiang
hi may i config ipsec vpn between two 6500 chassis without vpn service module? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Cisco ACS related

2009-09-07 Thread Mohammad Khalil
can i deny a certain command under configuration mode for certain authorization shell ? _ With Windows Live, you can organize, edit, and share your photos.

Re: [c-nsp] MIBs and OIDs

2009-09-07 Thread Lee
On 9/7/09, Mohammad Khalil eng_m...@hotmail.com wrote: hey all what is the way to transform the MIBs to OIDs ? as already mentioned, snmptranslate from http://net-snmp.sourceforge.net/ http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en get the file

Re: [c-nsp] VPN traffic to the Internet ... (ASA)

2009-09-07 Thread Garry
Alan Buxey wrote: Hi, What am I missing here? your ASA cannot be that IP - so is probably just dropping those packets as invalid... what you need to do is set up a proxy (eq squid) on your internal network that has an address within the 'allowed IP range' and then configure the ASA to

Re: [c-nsp] Syslog Solutions

2009-09-07 Thread Mario Spinthiras
Zenoss has syslog and snmp traps , its actually quite nice due to it's integration with the rest of the monitoring system (hierarchies , notification settings) and it also takes repetitions in a time lapse in order to avoid sending you hundreds of notifications and just sends a more reasonable

Re: [c-nsp] cisco-nsp Digest, Vol 82, Issue 34

2009-09-07 Thread Thilak T
IPSeC VPN termination 6500 chassis with SPA module is not supported. You can bring up IPSec Tunnel , however it wont work as expected , I have seen sup720 cpu hitting 80 to 90 % even for 1Mbps traffic.IPSec connection w/o SPA is not reliable and supported. Thanks Thilak Thankappan On Mon, Sep

Re: [c-nsp] VPN traffic to the Internet ... (ASA)

2009-09-07 Thread Ryan West
It can. You need allow same interface traffic and configure nat outside. Sent from handheld. On Sep 7, 2009, at 9:31 AM, Garry g...@gmx.de wrote: Alan Buxey wrote: Hi, What am I missing here? your ASA cannot be that IP - so is probably just dropping those packets as invalid... what you

Re: [c-nsp] VPN traffic to the Internet ...

2009-09-07 Thread Ryan West
Garry, I sent this to you on the 2nd, did you ever try it? http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805734ae.shtml -ryan -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Ryan

[c-nsp] primary and backup routing with ISIS

2009-09-07 Thread Arne Larsen / Region Nordjylland
Hi all. Can someone give me at hint how to configure routing in an MPLS network that carries VPN's. We are using ISIS as IGP and MBGP to announce VPN routes. The problem is, our PE-routers have one 10Gb and one 1Gb uplink on 5 sites. We would like to be sure that the traffic is routed via the

Re: [c-nsp] primary and backup routing with ISIS

2009-09-07 Thread sthaug
Can someone give me at hint how to configure routing in an MPLS network that carries VPN's. We are using ISIS as IGP and MBGP to announce VPN routes. The problem is, our PE-routers have one 10Gb and one 1Gb uplink on 5 sites. We would like to be sure that the traffic is routed via the 10G

Re: [c-nsp] VPN traffic to the Internet ...

2009-09-07 Thread Garry
Ryan, Scott, Ryan West wrote: Garry, I sent this to you on the 2nd, did you ever try it? http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805734ae.shtml This function did fix it ... I didn't see that option as relevant for the VPN connection, but I can