Re: [c-nsp] Spanning tree limits on 4500

2009-11-24 Thread John Wilkes
On Mon, Nov 23, 2009 at 8:15 PM, Clinton Work clin...@scripty.com wrote: The Catalyst 4500 supports 3000 logical instances with the SupV from what I was able to find.  With MST, the capacity is further increased: MST logical instances = access ports + ( trunk ports * MST instances) So as long

Re: [c-nsp] Flow Control and 10GE interfaces

2009-11-24 Thread Marian Ďurkovič
On Mon, 23 Nov 2009 11:40:17 -0800 (PST), Kevin Graham wrote The answer is very simple: if someone thinks that ethernet flow control is the answer, the burden of proof is on them to answer difficult questions about what the actual problem is, what flow control is going to solve, and why

Re: [c-nsp] delay eBGP sessions on startup?

2009-11-24 Thread Bill Desjardins
On Tue, Nov 24, 2009 at 2:25 AM, Gert Doering g...@greenie.muc.de wrote: Hi, On Mon, Nov 23, 2009 at 07:03:07PM -0500, Bill Desjardins wrote: the idea is that the border routers peer with the ibgp RR's and use a bgp conditional statement to advertise your aggregate upstream only upon

[c-nsp] Runts in the network

2009-11-24 Thread Antonio Soares
Hello Group, I have 7200's acting as PE's and running 12.4.23 that show an abnormal numbers of runts. The interfaces where this can be seen are E1 channel-groups configured for frame-relay. This is the typical configuration: ! frame-relay switching ! controller E1 x/y channel-group 0 timeslots

[c-nsp] Metro Ethernet Switches

2009-11-24 Thread Mohammad Khalil
hey all i have a cisco metro switch with IOS 12.2 35SE when i upgraded the IOS image to 12.2 52 SE the tacacs could not work well as it was in the previous image even though i had the same configuration any thoughts ?

Re: [c-nsp] Metro Ethernet Switches

2009-11-24 Thread Ian Henderson
On Tue, 24 Nov 2009, Mohammad Khalil wrote: the tacacs could not work well as it was in the previous image even though i had the same configuration any thoughts ? Try adding the plaintext key again ('tacacs-server key xxx'). I've seen some IOS upgrades need it re-obfuscated to make it work.

[c-nsp] MPLS VPNs on University Campus

2009-11-24 Thread Brant I. Stevens
Hello all, I would like to talk to anyone who has deployed MPLS VPNs for their University Campus Network. Specifically, I'd like to know about their design, operational pitfalls, what you would do again, what wouldn't you do again, etc. Offlist is fine. This information will be kept

[c-nsp] Basic QoS on ATM subinterfaces

2009-11-24 Thread Dave Weis
Hello All I've got a PA-A3-OC3 that is terminating a large number of PPPoA connections. I need to do basic QoS/prioritization for voice traffic. I am using a subinterface per VPI with a vc-class to reference the virtual-template. I have set up a parent/child policy-map as the documentation

Re: [c-nsp] Metro Ethernet Switches

2009-11-24 Thread Matlock, Kenneth L
Another thing to look at is the tacacs source-interface. If you don't have it in there, tie it to a loopback. If you do have it in there, verify the IP of the interface, and also try removing it. I've seen a few times after an upgrade that either removing it, or adding it 'magically' fixed the

Re: [c-nsp] 3550 High CPU - nothing in proc cpu

2009-11-24 Thread Matlock, Kenneth L
Heh ,or the old ACC boxes (I think the Danube), where the original design was to not have ANY front-panel LEDs. The 'managers' didn't like that, so all they did was create a simple oscillator circuit that blinked an LED. The LED has NO correlation to the real status of the chassis. The chassis

Re: [c-nsp] Basic QoS on ATM subinterfaces

2009-11-24 Thread Tim Franklin
Hi Dave, I've got a PA-A3-OC3 that is terminating a large number of PPPoA connections. I need to do basic QoS/prioritization for voice traffic. I am using a subinterface per VPI with a vc-class to reference the virtual-template. I have set up a parent/child policy-map as the

Re: [c-nsp] Basic QoS on ATM subinterfaces

2009-11-24 Thread Dave Weis
Tim Franklin wrote: I've got a PA-A3-OC3 that is terminating a large number of PPPoA connections. I need to do basic QoS/prioritization for voice traffic. I am using a subinterface per VPI with a vc-class to reference the virtual-template. I have set up a parent/child policy-map as the

Re: [c-nsp] 3550 High CPU - nothing in proc cpu

2009-11-24 Thread Jeff Kell
From: sth...@nethelp.no Normally, hardware-forwarding boxes should never show significant CPU load. With the exception of the old 3500XL series using 50% or more of the CPU to drive the front panel LEDs :-) Yes, a 3500XL... PCP-2000-IDF-3-2#show proc cpu | e 0.00.*0.00.*0.00 CPU

Re: [c-nsp] Flow Control and 10GE interfaces

2009-11-24 Thread Ross Vandegrift
On Tue, Nov 24, 2009 at 09:00:51AM +0100, Marian ??urkovi?? wrote: On Mon, 23 Nov 2009 11:40:17 -0800 (PST), Kevin Graham wrote My understanding of this must be broken... If the pause frame is sent only sent when or immediately before RX buffers are exhausted, then TX queuing is triggered

[c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Drew Weaver
Howdy, I've been having some issues with queue drops/CLI sluggishness on a 6500 and I wanted to check what kind of volume of traffic I was getting punted to the RP. I made a span session and began checking out the traffic with tethereal. It seems like a huge (30,000) or so packets every few

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Sebastian Wiesinger
* Drew Weaver drew.wea...@thenap.com [2009-11-24 17:34]: I've been having some issues with queue drops/CLI sluggishness on a 6500 and I wanted to check what kind of volume of traffic I was getting punted to the RP. I made a span session and began checking out the traffic with tethereal.

Re: [c-nsp] Basic QoS on ATM subinterfaces

2009-11-24 Thread Tim Franklin
Hi Dave, interface Virtual-Template1 ip unnumbered Loopback0 ip accounting output-packets no logging event link-status peer default ip address pool adsl1 ppp authentication pap chap radius-ppp ppp authorization radius-ppp ppp link reorders ppp multilink ppp multilink

Re: [c-nsp] Metro Ethernet Switches

2009-11-24 Thread Bill Blackford
I recall having some of my aaa config options slightly changing syntax after upgrading. Sounds like you've verified this, but it may be worth double-checking. -b -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of

Re: [c-nsp] Flow Control and 10GE interfaces

2009-11-24 Thread Marian Ďurkovič
On Tue, Nov 24, 2009 at 11:24:26AM -0500, Ross Vandegrift wrote: Yes, what you described is basically a case where the interface runs at faster speed than the data path behind it. Some examples: oversubcribed 10GE card with only 8 Gbps bandwidth to the switch fabric or system bus,

Re: [c-nsp] Flow Control and 10GE interfaces

2009-11-24 Thread Kevin Graham
This is exactly the *only* situation, where classic flow control makes sense and does really help, since it properly triggers output queueing at the sending side when the real data-path speed is reached. OK, the vitriol towards .3x in this thread was so strong I was concerned I had

Re: [c-nsp] Basic QoS on ATM subinterfaces

2009-11-24 Thread Dave Weis
Hello Tim Tim Franklin wrote: interface Virtual-Template1 ip unnumbered Loopback0 ip accounting output-packets no logging event link-status peer default ip address pool adsl1 ppp authentication pap chap radius-ppp ppp authorization radius-ppp ppp link reorders ppp multilink

Re: [c-nsp] Basic QoS on ATM subinterfaces

2009-11-24 Thread Brian Turnbow
You can't do it with ubr/ubr+ interfaces ,you need to set a different class of service. Here is an example technote http://www.cisco.com/en/US/tech/tk39/tk824/technologies_configuration_example09186a0080094cf6.shtml Brian -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Drew Weaver
Hi, Yeah I followed the exact same instructions you posted when creating the RP span session. Source Port-VLAN Info - Ingress Source Ports: 4/23 15/1 Egress Source Ports : 4/23 Ingress Source Vlans: null Egress Source Vlans : null Ingress Filter Vlans : null

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Drew Weaver
Sure, example #1 example #1 2.012467 local.ip - internet.ip UDP Source port: isdd Destination port: 51472 2.012516 local.ip - internet.ip UDP Source port: isdd Destination port: 51472 2.012566 local.ip - internet.ip UDP Source port: isdd Destination port: 51472 2.012616

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Drew Weaver
Hi Lee, I believe you're referring to show 'platform hardware capacity' and nothing looks extremely out of the ordinary. -Drew From: Lee [mailto:ler...@gmail.com] Sent: Tuesday, November 24, 2009 1:14 PM To: Drew Weaver Cc: Cisco-nsp Subject: Re: [c-nsp] 6500 - What determines whether certain

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Lee
Hi Drew, On Tue, Nov 24, 2009 at 11:33 AM, Drew Weaver wrote: Howdy, I've been having some issues with queue drops/CLI sluggishness on a 6500 and I wanted to check what kind of volume of traffic I was getting punted to the RP. I made a span session and began checking out the traffic with

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Lee
On Tue, Nov 24, 2009 at 1:03 PM, Drew Weaver drew.wea...@thenap.com wrote: Hi, Yeah I followed the exact same instructions you posted when creating the RP span session. Well.. it was worth a shot :) Have you seen any syslog messages about a fib or tcam table overflow? Someone else will

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Drew Weaver
Hi, No HSRP, VRRP or GLBP on this box. #sh mac-address-table aging-time VlanAging Time -- Global 300 no vlan age other than global age configured Routed MAC aging time: 300 seconds This is on our core, though so there are no hosts connected here. -Drew -Original

Re: [c-nsp] OT: VSS + MEC - port-channel dynamically cloned?

2009-11-24 Thread Kevin Graham
[...taking this from nanog to c-nsp...] Essentially, for all of the MEC connections, the VSS has created a clone of the configured port-channel to bind the actual physical connections, rather than binding them under the configured port-channel (and suffixed the port-channel number with A or

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Matthew Huff
Are you using first-hop redundancy like hsrp, glbp, vrrp? This can cause asymmetrical MAC based FIB timeouts which leads to unicast flooding. I didn't think these were RP switched, but it could be. If so, what is your setting for mac-address-table aging-time ? We have ours set fib

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Justin Shore
Drew Weaver wrote: Hi, No HSRP, VRRP or GLBP on this box. #sh mac-address-table aging-time VlanAging Time -- Global 300 no vlan age other than global age configured Routed MAC aging time: 300 seconds This is on our core, though so there are no hosts connected here.

Re: [c-nsp] delay eBGP sessions on startup?

2009-11-24 Thread David Hughes
On 24/11/2009, at 5:19 PM, Gert Doering wrote: Well, the two routers mentioned above are the core and the border routers. There *is* only these two :-) Well, in that case the only thing I can think of is conditional advertisement based on the visibility of an iBGP prefix that you receive

Re: [c-nsp] OT: VSS + MEC - port-channel dynamically cloned?

2009-11-24 Thread Tassos Chatzithomaoglou
I have seen (very frequently) cloned A and B port-channels (debug calls them secondary aggregators if i remember right) created on a 6500 after reloading the peer router (C10k). Quite annoying, since the cloned interface is a new interface and snmp counters do not work anymore (neither our eem

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Phil Mayers
Drew Weaver wrote: Howdy, I've been having some issues with queue drops/CLI sluggishness on a 6500 and I wanted to check what kind of volume of traffic I was getting punted to the RP. I made a span session and began checking out the traffic with tethereal. It seems like a huge (30,000) or so

Re: [c-nsp] 6500 - What determines whether certain traffic is punted or not?

2009-11-24 Thread Dean Smith
Having spent the day chasing something identical.for us is was that the traffic was being redirected to another router on the inbound VLAN - every packet needing a redirect gets punted. A few changes to topology and the redirect requirement was removed and the traffic returned to being

Re: [c-nsp] delay eBGP sessions on startup?

2009-11-24 Thread Gert Doering
Hi, On Wed, Nov 25, 2009 at 05:50:45AM +1000, David Hughes wrote: On 24/11/2009, at 5:19 PM, Gert Doering wrote: Well, the two routers mentioned above are the core and the border routers. There *is* only these two :-) Well, in that case the only thing I can think of is conditional

Re: [c-nsp] OT: VSS + MEC - port-channel dynamically cloned?

2009-11-24 Thread Mark Tinka
On Wednesday 25 November 2009 04:01:47 am Tassos Chatzithomaoglou wrote: According to tac, this is expected behavior for LACP if there is a misconfiguration (typically when two links of the same channel are attempted to be connected on two different devices on the remote end, like in this

Re: [c-nsp] delay eBGP sessions on startup?

2009-11-24 Thread David Hughes
On 25/11/2009, at 6:46 AM, Gert Doering wrote: Sounds like a plan - Router A down - prefix missing on Router B, remove external announcement there as well. How to build a redundant network that falls off the 'net if *either* router dies :-)) LOL. Didn't think that one through to its

[c-nsp] is a DWDM SFP a DWDM SFP?

2009-11-24 Thread Jeff Bacon
Will the SFPs from the ONS systems work in a cat6500? There's a plethora of ONS-SC-2G SFPs out there, but not so many DWDM-SFP- modules. I'm guessing that the disparity in supply means they don't work, but would like some confirm. (Have a temporary need to run a gig over a DWDM wave, looking

Re: [c-nsp] is a DWDM SFP a DWDM SFP?

2009-11-24 Thread Justin Shore
Jeff Bacon wrote: Will the SFPs from the ONS systems work in a cat6500? There's a plethora of ONS-SC-2G SFPs out there, but not so many DWDM-SFP- modules. I'm guessing that the disparity in supply means they don't work, but would like some confirm. (Have a temporary need to run a gig over

[c-nsp] Nat Issues With cisco Routers

2009-11-24 Thread Lin
Hi Everyone, I am using a Cisco 1841 router, and behind the router are Polycom IP phones with private ips. When nat is enabled, most of the phones register just fine. However, a few fail to register. The SBC on the Telco end responds with an 482 Loop Detected. It appears the Cisco router is

Re: [c-nsp] New feature, can't find it documented - NTP using DNS

2009-11-24 Thread Jared Mauch
There is also the issue of the fact that the parser has a startup mode vs a running mode that may contribute to the error seen. Another case where this random experience has hurt operators. Jared Mauch On Nov 24, 2009, at 10:49 PM, Justin Shore jus...@justinshore.com wrote: I talked

Re: [c-nsp] New feature, can't find it documented - NTP using DNS

2009-11-24 Thread Gert Doering
Hi, On Tue, Nov 24, 2009 at 09:49:37PM -0600, Justin Shore wrote: At boot the 'ntp source' command is stripped out every time. During the boot sequence right before the Press RETURN to get started line this error is printed: ntp source Loopback0 ^ % Invalid input

Re: [c-nsp] ASR1004 vs 7606(RSP720-CXL)

2009-11-24 Thread Gert Doering
Hi, On Tue, Nov 24, 2009 at 08:58:27AM +0800, Mark Tinka wrote: Hopefully, the next EARL will resolve these issues, but who knows what other limitations it may have, when they may be resolved, or if support will come both to the 6500 and 7600, or just one of these? We might see a Cisco