[c-nsp] 7206 and STM-1

2010-07-06 Thread RAZAFINDRATSIFA Rivo Tahina
Hi all, We plan to use a 7204 NPE-G2 with 3 STM-1 (PA-POS-OC3SMI ), will the 7206 NPE-G2 support 3x155Mbps traffic? Regards. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] 7206 and STM-1

2010-07-06 Thread Mikael Abrahamsson
On Tue, 6 Jul 2010, RAZAFINDRATSIFA Rivo Tahina wrote: Hi all, We plan to use a 7204 NPE-G2 with 3 STM-1 (PA-POS-OC3SMI ), will the 7206 NPE-G2 support 3x155Mbps traffic? According to my interpretation of

Re: [c-nsp] 7206 and STM-1

2010-07-06 Thread Bøvre Jon Harald
Here is a show version from one of our 7200 G2: ATM STM-1 card placed in slot 2 and 3 PCI bus mb1 (Slots 1, 3 and 5) has a capacity of 600 bandwidth points. Current configuration on bus mb1 has a total of 300 bandwidth points. This configuration is within the PCI bus capacity and is supported.

[c-nsp] snmp config in PIX

2010-07-06 Thread Edward Iong
Dear all, I am trying to set snmp agent in my PIX 506E FW(192.168.1.1). I am not good in PIX FW. The following is my configuration PIX506# sh snmp-server no snmp-server location no snmp-server contact snmp-server community mosnmpcommunity no snmp-server enable traps After command, I can ping

Re: [c-nsp] Bandwidth usage per Queue (7600)

2010-07-06 Thread Ruslan Pustovoytov
This is not possible on 67xx line card. This card have only dropped statistics via show queueing int XXX ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] snmp config in PIX

2010-07-06 Thread Peter Rathlev
On Tue, 2010-07-06 at 09:50 +, Edward Iong wrote: I am trying to set snmp agent in my PIX 506E FW(192.168.1.1). I am not good in PIX FW. The following is my configuration PIX506# sh snmp-server no snmp-server location no snmp-server contact snmp-server community mosnmpcommunity no

[c-nsp] Bandwidth shape on OSI Layer2

2010-07-06 Thread Tseveendorj Ochirlantuu
Dear all, How to make a bandwidth shape with upload and download side on Cisco 3750 Catalyst at OSI Layer2 ? Best regards, ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Bandwidth usage per Queue (7600)

2010-07-06 Thread Andriy Bilous
show queueing int xxx detailed in SXI seems to know about 5-min average bps and 30-s bytes counters On Tue, Jul 6, 2010 at 12:16 PM, Ruslan Pustovoytov ru...@inbox.ru wrote: This is not possible on 67xx line card. This card have only dropped statistics via show queueing int XXX

Re: [c-nsp] Cisco 6509 reboots on its own... again...

2010-07-06 Thread krunal shah
There must be two crashinfo files for SP and RP and show tech-support. You need to collect it when you contact tech support. TAC usually has decoders from their developer to decode hex values in traceback. -Traceback= 41183348 41180F04 40DADF40 40FFA1CC 40FFA4D8 40752F58 40752F44 Krunal On

Re: [c-nsp] Bandwidth shape on OSI Layer2

2010-07-06 Thread Ziv Leyes
conf t mls qos ! class-map match-all CLASSNAME match ip dscp 0 ! policy-map POLICYNAME class CLASSNAME police 100 187500 exceed-action drop ! interface GigabitEthernet0/1 service-policy input POLICYNAME service-policy output POLICYNAME ! end The numbers in the policy are CIR and BC

Re: [c-nsp] [rancid] Cisco L2tp class with password and rancid

2010-07-06 Thread Martin Moens
Thanks guys... I was afraid I would hear your solutions I think I will try to persuade Cisco to solve this issue, and in the mean time have Rancid ignore the level 7's :-( Martin -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net]

[c-nsp] iBGP Route Reflection

2010-07-06 Thread Thierry
Hello, We would like to get some advices from you regarding the configuration of iBGP Route Reflection. To prevent too many iBGP sessions inside our network, here is what we would like to do: 1. The two main routers connected to the upstreams (both get full internet table from

Re: [c-nsp] Cisco 6509 reboots on its own... again...

2010-07-06 Thread Youssef Bengelloun-Zahr
Hello, Small update on this one, got the crashfile info found this : Cache error detected! CPO_ECC (reg 26/0): 0x00BE CPO_CACHERI (reg 27/0): 0xA000 CP0_CAUSE (reg 13/0): 0x0400 Real cache error detected. System will be halted. Error: Primary data cache, fields: data,

Re: [c-nsp] Cisco 6509 reboots on its own... again...

2010-07-06 Thread Youssef Bengelloun-Zahr
Looks like some of you folks were already hit by this : http://www.gossamer-threads.com/lists/cisco/nsp/108155 Hum Y. 2010/7/6 Youssef Bengelloun-Zahr yous...@720.fr Hello, Small update on this one, got the crashfile info found this : Cache error detected! CPO_ECC (reg

Re: [c-nsp] Bandwidth usage per Queue (7600)

2010-07-06 Thread Peter Rathlev
On Tue, 2010-07-06 at 14:05 +0200, Andriy Bilous wrote: On Tue, Jul 6, 2010 at 12:16 PM, Ruslan Pustovoytov wrote: This is not possible on 67xx line card. This card have only dropped statistics via show queueing int XXX show queueing int xxx detailed in SXI seems to know about 5-min

Re: [c-nsp] snmp config in PIX

2010-07-06 Thread Ryan West
-Original Message- Sent: Tuesday, July 06, 2010 5:51 AM To: cisco-nsp@puck.nether.net; sunny.ie...@esprit.com Subject: [c-nsp] snmp config in PIX Dear all, I am trying to set snmp agent in my PIX 506E FW(192.168.1.1). I am not good in PIX FW. The following is my

[c-nsp] Cisco VPN Client with TACACS

2010-07-06 Thread Mohammad Khalil
i have cisco router 1841 configured for dial in using vpn client the user obtains an IP address from a local pool configured on the router i want to be able to assign a username from the tacacs and each user obtain a specific ip address

[c-nsp] Same MAC address on PPPoE CPE

2010-07-06 Thread Rin
Hi group, A portion of our metroE network is as below: CPE1---DSLAM1--(Gi9/19)PE CPE2---DSLAM2--(Gi9/20)PE The two DSLAM assign the same vlan 147 to traffic sending from CPE1 CPE2, port G9/19 G9/20 on PE are configured as trunk that allow vlan 147,

Re: [c-nsp] how to remove a set ip route cmd

2010-07-06 Thread Michael K. Smith - Adhost
You might want to try clear ip route all Mike -- Michael K. Smith - CISSP, GSEC, GISP Chief Technical Officer - Adhost Internet LLC mksm...@adhost.com w: +1 (206) 404-9500 f: +1 (206) 404-9050 PGP: B49A DDF5 8611 27F3 08B9 84BB E61E 38C0 (Key ID: 0x9A96777D) -Original Message- From:

[c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Troy Beisigl
Hi. We are seeing a problem with high cpu usage on a VIP4/80 card when traffic hits above 10Mbps. Has anyone seen this type of behavior? Details are below. The IOS version is rsp-pv-mz.124-23. GigabitEthernet6/0/0 is up, line protocol is up Hardware is cyBus GigabitEthernet Interface,

Re: [c-nsp] Same MAC address on PPPoE CPE

2010-07-06 Thread John Kougoulos
On Tue, 6 Jul 2010, Rin wrote: I have two questions here: 1. Is there any method that the router does not additional configuration on port configured with port-security MAC sticky? 2. Anyone has other idea rather than configure port-security to detect same MAC address on CPE?

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Michael K. Smith - Adhost
It looks like you have a physical-layer problem, given the number of framing errors in the output you provided. Mike -- Michael K. Smith - CISSP, GSEC, GISP Chief Technical Officer - Adhost Internet LLC mksm...@adhost.com w: +1 (206) 404-9500 f: +1 (206) 404-9050 PGP: B49A DDF5 8611 27F3 08B9

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Troy Beisigl
Actually, we had a bad PA that I replaced, but did not clear the counters. The errors are not incrementing. I just now cleared the counters on this interface to make sure. We installed the VIP4/80 to replace the VIP2/50 that was in there with the same issue except that it was at 99% CPU

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Michael K. Smith - Adhost
Ahh, okay. Are you running DCEF globally and CEF switching on the interface? Mike -- Michael K. Smith - CISSP, GSEC, GISP Chief Technical Officer - Adhost Internet LLC mksm...@adhost.com w: +1 (206) 404-9500 f: +1 (206) 404-9050 PGP: B49A DDF5 8611 27F3 08B9 84BB E61E 38C0 (Key ID: 0x9A96777D)

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Troy Beisigl
Yep. We saw this with another VIP2/50 in the chassis as well that had a 100BaseTX card in it and upgraded it to a VIP4/80 and that problem went away, but this one still has issues. -Troy On Jul 6, 2010, at 11:40 AM, Michael K. Smith - Adhost wrote: Ahh, okay. Are you running DCEF

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread David Coulson
What does the output of 'sh int switching' look like? David On 7/6/2010 2:39 PM, Troy Beisigl wrote: Actually, we had a bad PA that I replaced, but did not clear the counters. The errors are not incrementing. I just now cleared the counters on this interface to make sure. We installed the

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Michael K. Smith - Adhost
Could you send a sanitized configuration of the port? Mike -- Michael K. Smith - CISSP, GSEC, GISP Chief Technical Officer - Adhost Internet LLC mksm...@adhost.com w: +1 (206) 404-9500 f: +1 (206) 404-9050 PGP: B49A DDF5 8611 27F3 08B9 84BB E61E 38C0 (Key ID: 0x9A96777D) -Original

Re: [c-nsp] 7204XVR Edge Router Issues

2010-07-06 Thread Chris Gotstein
Turns out to be an issue with the one of the upstream providers. They were able to re-create the problem and are working on a fix. Chris Gotstein, Network Engineer, U.P. Logon/Computer Connection U.P. http://uplogon.com | +1 906 774 4847 | ch...@uplogon.com On 7/5/2010 7:46

Re: [c-nsp] BGP VPNv4 scanner wedgy

2010-07-06 Thread Tim Durack
On Thu, Jul 1, 2010 at 3:11 PM, Tim Durack tdur...@gmail.com wrote: Anyone run into BGP VPNv4 scanner wedgies? I appear to have 4 boxes, SUP720-3C running 12.2(33)SXI3 with this problem: RTR-1#sh bgp vpnv4 unicast all pending-prefixes ... 1050 pending network entries using 143850 bytes of

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Troy Beisigl
GigabitEthernet6/0/0 feed to cat1.5/6 Throttle count 1352 Drops RP 38775 SP 0 SPD Flushes Fast 81140SSE 0 SPD Aggress Fast 0 SPD Priority Inputs

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread David Coulson
What about the other interfaces? It's not using dCEF for a lot of packets. Are there some non-dCEF capable interfaces on that router? David On 7/6/2010 4:05 PM, Troy Beisigl wrote: GigabitEthernet6/0/0 feed to cat1.5/6 Throttle count 1352 Drops RP

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Troy Beisigl
Not much to the config. I have included both sides of the connection. the other end is a 6500 7507: interface GigabitEthernet6/0/0 description feed to cat1.3/6 bandwidth 100 ip address X.X.X.X 255.255.255.240 load-interval 30 negotiation auto end 6500: interface GigabitEthernet3/6

Re: [c-nsp] MACFLAP Message

2010-07-06 Thread Rutis, Cameron
We've seen this in the past when 'per packet' or 'round robin' load balancing (sometimes called 'operating mode') was turned on on the host. The host would send alternate packets down each NIC in their team thus causing the flapping. This round robin mode is the default for at least some

Re: [c-nsp] high cpu on VIP in 7507

2010-07-06 Thread Troy Beisigl
Yes. There are several multilink PPP and multilink frame-relay interfaces that are across two VIPs that would not do dCEF, but the rest of the traffic in and out of this chassis would/should be. There are 5 PA-MC-T3 cards and 2 PA-2T3 cards in the chassis along with this interface and a

Re: [c-nsp] iBGP Route Reflection

2010-07-06 Thread Steve Bertrand
On 2010.07.06 08:53, Thierry wrote: 1.The two main routers connected to the upstreams (both get full internet table from them) will be Route Reflectors. We will create a cluster on these two routers. Since nobody responded yet, I'll put my neck on the line... Personally, I wouldn't use

Re: [c-nsp] iBGP Route Reflection

2010-07-06 Thread Michael Bowe
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Steve Bertrand My network has to be this way (at this time). Many of my routers don't have enough interfaces to full-mesh. I used to put a switch in front of many of

Re: [c-nsp] [rancid] Cisco L2tp class with password and rancid

2010-07-06 Thread john heasley
Mon, Jul 05, 2010 at 06:49:04PM +0100, Alan Buxey: Hi, I have an issue when I configure a l2tp-class with a password in it, every time I do a sho run the level 7 encrypted password is shown differently. When using Rancid for config backups, every time Rancid runs I receive a