[c-nsp] Optimal MTU Rate ??

2010-02-26 Thread vijay gore
Dear Team, What wiil be the Optimal MTU Rate for wireless Tunnel Network ?? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Strange Time window when running nfdump

2010-02-26 Thread Jens Neu
Dear all, I've encountered a strange behavior of nfdump when running it with the -s and -t options. Sometimes it works as expected, sometimes it gives me strange values in Time window:, e.g. Time window: 2010-01-01 00:00:22 - 2010-03-13 04:34:32 when running with -t

[c-nsp] GSR: 3GE-GBIC-SC v4 traffic influenced by v6 traffic?

2010-02-26 Thread Sascha Pollok
Good day, the 3GE-GBIC-SC card does IPv6 in software on the linecard. Is anyone aware of a problem that IPv6 traffic that is software-forwarded could influence IPv4 hardware forwarding? It looks like a linecard could hit 100% with ~80 Mbit/s of v6 traffic + other tasks like TAG Stats Backgr or

Re: [c-nsp] Dynamic IP VPN clients on a dual-ISP ASA 5505

2010-02-26 Thread Jan Gregor
Hi, from what they tell you, I suspect that they sugest that you should statically route ip adresses of one group of clients (that's the reason why static ip adresses - you need to define them). The feature you are looking for should be acompished with policy based routing, but this is not

Re: [c-nsp] cisco-nsp Digest, Vol 87, Issue 93

2010-02-26 Thread Peter Haag
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Jens, I will look into that. - Peter Dear all, I've encountered a strange behavior of nfdump when running it with the -s and -t options. Sometimes it works as expected, sometimes it gives me strange values in Time window:, e.g.

Re: [c-nsp] Optimal MTU Rate ??

2010-02-26 Thread Gert Doering
Hi, On Fri, Feb 26, 2010 at 04:44:24PM +0530, vijay gore wrote: What wiil be the Optimal MTU Rate for wireless Tunnel Network ?? 417.3 MTU per second. gert -- USENET is *not* the non-clickable part of WWW! //www.muc.de/~gert/ Gert

[c-nsp] PVLANs in a Hosting Environment

2010-02-26 Thread Matthew Melbourne
Hi, We are investigating options to provide a VLAN-per-customer within a hosting environment. Inside each VLAN could be hosting services, e.g. hosted web servers, AD, Exchange (etc). In order to maximum the number of supported VLANs, then the use of Private VLANs has been raised. However,

Re: [c-nsp] GSR: 3GE-GBIC-SC v4 traffic influenced by v6 traffic?

2010-02-26 Thread Jan Sandmaier
Hi Sascha, the 3GE-GBIC-SC card does IPv6 in software on the linecard. Is anyone aware of a problem that IPv6 traffic that is software-forwarded could influence IPv4 hardware forwarding? It looks like a linecard could hit 100% with ~80 Mbit/s of v6 traffic + other tasks like TAG Stats Backgr

Re: [c-nsp] PVLANs in a Hosting Environment

2010-02-26 Thread TCIS List Acct
Matt, We looked at doing this ourselves a few years back. We decided to push L2 responsibility down to the customer rack and do all L3 at the distribution layer. We use the venerable WS-C3550-48-EMI switches for this duty, and they have been rock solid for years. We did have a few

Re: [c-nsp] GSR: 3GE-GBIC-SC v4 traffic influenced by v6 traffic?

2010-02-26 Thread Dobbins, Roland
On Feb 26, 2010, at 6:54 PM, Sascha Pollok wrote: If so, I might go to for 4GE-SFP-LC or similar which does v6 in hardware AFAIK. You should be running E3 or E5 linecards at your edges, as these are required to support NetFlow, uRPF, and ACLs.

[c-nsp] Add IPv6 on Cisco 7301 / BGP

2010-02-26 Thread Stephane MAGAND
Hi actually, i have a small labs: 1 Cisco 6506/Sup720 2 Cisco 7301 1 Cisco 7204 All are connected to the 6500 with IPv4, ISIS and MPLS (MP BGP) The first Cisco 7301 are connected to a ISP A and the Second connected to the ISP B in classic IPv4 Bgp. I want add IPv6 on this network. My

Re: [c-nsp] Comparision between Cisco and Juniper Data Center Switches

2010-02-26 Thread Nick Hilliard
On 25/02/2010 10:36, Muhammad Atif Jauahar wrote: We are going to upgrade our Data Center we need 2 (redundant) core switches with top of rack switches (Edge). We get two Proposals 1. 2 x EX8216 Switches (Core) and few EX4200 Switches (Edge) 2. 2 x Nexus

Re: [c-nsp] Add IPv6 on Cisco 7301 / BGP

2010-02-26 Thread Steve Bertrand
On 2010.02.26 08:51, Stephane MAGAND wrote: Hi actually, i have a small labs: 1 Cisco 6506/Sup720 2 Cisco 7301 1 Cisco 7204 All are connected to the 6500 with IPv4, ISIS and MPLS (MP BGP) The first Cisco 7301 are connected to a ISP A and the Second connected to the ISP B in

Re: [c-nsp] Netflow - GSR engine 5

2010-02-26 Thread Drew Weaver
Hey Roland, You mean if the provider can figure out where the traffic is coming from right? Haven't had too much luck with that so far. thanks, -Drew -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Dobbins, Roland

Re: [c-nsp] Netflow - GSR engine 5

2010-02-26 Thread Drew Weaver
You're of course right, because if it didn't I never would've known this was happening =) The problem now is getting my upstream to figure out what the source is =( -Drew -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de] Sent: Thursday, February 25, 2010 4:37 PM To:

Re: [c-nsp] Netflow - GSR engine 5

2010-02-26 Thread Devon True
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/25/2010 7:28 PM, Dobbins, Roland wrote: Because that's how NetFlow is supposed to work on a real router, vs. the broken implementation on 6500/7600 with current hardware. I am running Netflow v5 on a 7600 with 12.2(33)SRC5 and I see packets

[c-nsp] ASR v VXR

2010-02-26 Thread Philip Davis
Hello, I've got a pair of 7200VXRs w/ NPE400s doing bba for 3 ATM DS3s as well as T-1 aggregation and a server farm. I was looking at my options for upgrading and consolidating these boxes and I think it would either be an 7200VXR-G1 (G2?) or an ASR1002. These two options seem to carry

Re: [c-nsp] ASR v VXR

2010-02-26 Thread Mark Tinka
On Friday 26 February 2010 10:57:41 pm Philip Davis wrote: I've got a pair of 7200VXRs w/ NPE400s doing bba for 3 ATM DS3s as well as T-1 aggregation and a server farm. I was looking at my options for upgrading and consolidating these boxes and I think it would either be an

Re: [c-nsp] PVLANs in a Hosting Environment

2010-02-26 Thread Saxon Jones
We used to use (at a previous job) 3550's, private VLAN's, and local-proxy-arp to achieve this. It would occasionally irritate customers because our 3550 would win the ARP response for traffic going between their hosts, though this usually wasn't an issue since we'd happily push those few

[c-nsp] SecureACS Appliance AD Authentication

2010-02-26 Thread Ryan Lambert
Hi everyone, Figure this is as good a place as any to reach out and see if anyone has some experience with this. I'm currently debating whether I use LDAP or a Remote Agent for Windows with my SecureACS Appliance to authenticate network users via AD. I've read through the documentation a bit,

Re: [c-nsp] ASR v VXR

2010-02-26 Thread Brian Turnbow
Hello, I've got a pair of 7200VXRs w/ NPE400s doing bba for 3 ATM DS3s as well as T-1 aggregation and a server farm. I was looking at my options for upgrading and consolidating these boxes and I think it would either be an 7200VXR-G1 (G2?) or an ASR1002. These two options seem to carry

Re: [c-nsp] SecureACS Appliance AD Authentication

2010-02-26 Thread Scott Keoseyan
Yes Ryan, you can restrict access based on LDAP or AD groups to specific groups of devices and access levels, however, I would STRONGLY recommend the direct LDAP approach, using LDAPS with certificates, as opposed to the AD plugin, which has been rife with memory leaks and other stability

Re: [c-nsp] SecureACS Appliance AD Authentication

2010-02-26 Thread Alan Buxey
Personally i'd go for freeradius or radiator RADIUS server for the backend policy/logic - both work well with AD and handle many EAP types . Proxying etc --- original message --- From: Ryan Lambert thirdfrl@gmail.com Subject: [c-nsp] SecureACS Appliance AD Authentication Date: 26th

Re: [c-nsp] SecureACS Appliance AD Authentication

2010-02-26 Thread James Greig
Hi, Just a note on this one. Within our organisation we have a number of systems, freeradius etc so we decided to consolidate and use Microsoft's Network Policy Server with RADIUS to authenticate against Active Directory. It's all built in to 2008. You can set certain users, or groups to have

[c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Peter Kranz
I have some CF 1 GB modules that are recognized on insert: Feb 25 10:45:11.034 PST: %FILESYS-SP-5-DEV: PCMCIA flash card inserted into disk0 But won't format: xxx#format disk0: Format operation may take a while. Continue? [confirm]y Format operation will destroy all data in disk0:.

Re: [c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Dan Holme
Peter Unfortunately you can't just use any flash card in the 6500/7600. Theoretically all that is required is a standard ATA CF but I have found that not all work. You can find more info on the CF card like so show disk0: filesys I have only had good experiences with: ATA CARD GEOMETRY

Re: [c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Jason Gurtz
Unfortunately you can't just use any flash card in the 6500/7600. Theoretically all that is required is a standard ATA CF but I have found that not all work. You can find more info on the CF card like so show disk0: filesys I have only had good experiences with: ATA CARD GEOMETRY

Re: [c-nsp] GSR: 3GE-GBIC-SC v4 traffic influenced by v6 traffic?

2010-02-26 Thread Sascha E. Pollok
Hello Jan, thanks for your reply. It sheds some light on that annoying problem. forwarding IPv4 traffic or AT LEAST stops responding to ICMP Echo (directed to the interface IP) or loses IP protocols like LDP or OSPF which could point to problems GRP/PRP - Interface. It seems like this happens

Re: [c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Dan Holme
Well, that would fit my experiences Jason. Looking through a few other SUPs running 12.2SR they all seem to have SanDisk CF in. However the ones I have running 12.2SX do not show the vendor of the CF. Not sure whether that is IOS or CF related. On Fri, Feb 26, 2010 at 9:19 PM, Jason Gurtz

Re: [c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Randy McAnally
Ours are SanDisk. They were sold to us by a vendor who assured us of the compatibility. -- Randy www.FastServ.com -- Original Message --- From: Dan Holme dan.ho...@gmail.com To: Jason Gurtz jasongu...@npumail.com Cc: cisco-nsp@puck.nether.net Sent: Fri, 26 Feb 2010 21:34:37

Re: [c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Peter Kranz
And the max capacity for a Sup720 is 1GB right, no 2GB and up modules allowed? Peter Kranz Founder/CEO - Unwired Ltd www.UnwiredLtd.com Desk: 510-868-1614 x100 Mobile: 510-207- pkr...@unwiredltd.com -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Comparision between Cisco and Juniper Data Center Switches

2010-02-26 Thread Devin Kinch
Current Nexus 2148T doesn't support Etherchannel in the strictest sense (you can do 2 port vPC down to the servers) or 100BASE-T. They are strictly 1000BASE-T only -- this may bite you if you need 100BASE-T management ports, etc. Also keep in mind that the fabric extenders do not even perform L2

Re: [c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Ben Basler (bbasler)
As of SXI 2GB Cisco CF is supported: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/features.html#wp4208036 Issue with 3rd party vendor CF's is that each CF has an internal controller that sits before the actual flash memory. Vendors change those internal

Re: [c-nsp] compact flash modules for Sup720-3bxl..

2010-02-26 Thread Tim Durack
On Fri, Feb 26, 2010 at 3:34 PM, Peter Kranz pkr...@unwiredltd.com wrote: I have some CF 1 GB modules that are recognized on insert: I have found these to work consistently on and old and new Sups: SanDisk SDCFB-1024-A10 1GB CF Type 1 Card For some reason, VS-S720-10G sups support a wider

Re: [c-nsp] Comparision between Cisco and Juniper Data CenterSwitches

2010-02-26 Thread Tony Varriale
Not necessarily directed at you Devin... If you consider some of these design features an issue, I would recommend getting with your account team and getting a NDA in place. There will be some changes made very soon that will have a major impact on the flexibility and general architecture of