Re: [c-nsp] iBGP Route Reflection

2010-07-12 Thread Mark Tinka
On Tuesday 06 July 2010 08:53:54 pm Thierry wrote: 1.The two main routers connected to the upstreams (both get full internet table from them) will be Route Reflectors. We will create a cluster on these two routers. If you can, try and have other routers running as your route

Re: [c-nsp] 7606 config issue !!!

2010-07-12 Thread David Hughes
On 22/06/2010, at 10:42 PM, Gert Doering wrote: On Tue, Jun 22, 2010 at 08:03:22AM -0400, Jared Mauch wrote: The bug is CSCth43783. The control plane comes up but the data plane is not forwarded properly. The mls appears to be populated as drop. Once it's resolved we are going to ask for

Re: [c-nsp] 7606 config issue !!!

2010-07-12 Thread Raheel Muhammad
Guys, This time i lost rip section only, other than that whole config was there. I am lost, not getting anything out of it. What could be the issue, cisco partners not giving any solution. Regards, Raheel On Mon, Jul 12, 2010 at 11:09 AM, David Hughes da...@hughes.com.au wrote: On

Re: [c-nsp] 7606 config issue !!!

2010-07-12 Thread Phil Mayers
On 12/07/10 11:02, Raheel Muhammad wrote: Guys, This time i lost rip section only, other than that whole config was there. I am lost, not getting anything out of it. What could be the issue, cisco partners not giving any solution. You never answered (several) questions people asked you:

[c-nsp] BGP Update Timers

2010-07-12 Thread ANSW (Anders Schwartzbach)
Hi all I am having a small testup, where I am playing with BGP update timers I have one thing, which is driving me insane - CISCO2851 nr 1 Running BGP (local AS number 65412) 250 loopback interfaces distributed into BGP | Cisco 7609 nr 1 Running BGP (local AS number 65500) interface

[c-nsp] ATOM problems with vss144

2010-07-12 Thread Arne Larsen / Region Nordjylland
Hi all Can someone give me a hint. I'm having problems with eompls on an vss setup. I have central site with the vss and to external sites. One site with a WS-SUP720-3BXL , and another site with a WS-SUP720-3B. From the site with WS-SUP720-3B I have tengig uplink to the vss, and from the Site

[c-nsp] Multiple E1s on 2821

2010-07-12 Thread Peter Hicks
All, We have three E1 voice circuits on a 2821 - two from the same provider on on E1 0/0/0 and E1 0/0/1, and a third from a different provider on a E1 0/1/0 - a separate VIC. After fixing a broken fan on the router, the third E1 is experiencing slip seconds. The other two are clean, and I

Re: [c-nsp] Zone Based Firewall default-class

2010-07-12 Thread Steve McCrory
Hi Jay, The action 'pass' on the class-default is different from 'inspect' as it does not perform stateful inspection and, therefore, there is no state table for return traffic to be compared against. As such, even though traffic was initiated from inside, the router thinks the return traffic is

Re: [c-nsp] ATOM problems with vss144

2010-07-12 Thread Benjamin Lovell
Can you show us show ip route x.x.x.x, show ip cef x.x.x.x, and show mpls l2 vc vc-id detail from each end of the non-working VC. x.x.x.x should be VC endpoints. -Ben On Jul 12, 2010, at 6:52 AM, Arne Larsen / Region Nordjylland wrote: Hi all Can someone give me a hint. I'm having

Re: [c-nsp] Multiple E1s on 2821

2010-07-12 Thread David Freedman
Peter Hicks wrote: All, We have three E1 voice circuits on a 2821 - two from the same provider on on E1 0/0/0 and E1 0/0/1, and a third from a different provider on a E1 0/1/0 - a separate VIC. After fixing a broken fan on the router, the third E1 is experiencing slip seconds. The

Re: [c-nsp] Cisco L2tpv3

2010-07-12 Thread Vincent C Jones
According to your show run all interfaces on the router are in shutdown state, so nothing is going to work. One you have interfaces up, you also need to have working routes at each end to the IP address of the pseudowire endpoint at the other end. -- Vincent C. Jones Networking Unlimited, Inc.

Re: [c-nsp] Multiple E1s on 2821

2010-07-12 Thread Brian Turnbow
Peter Hicks wrote: All, We have three E1 voice circuits on a 2821 - two from the same provider on on E1 0/0/0 and E1 0/0/1, and a third from a different provider on a E1 0/1/0 - a separate VIC. After fixing a broken fan on the router, the third E1 is experiencing slip seconds. The

Re: [c-nsp] Cisco L2tpv3

2010-07-12 Thread Anthony V. Daroqui
Sorry to take so long for the the update. I can't believe the interfaces were shutdown... but over the weekend I retried it and had success in getting the setup exactly how we wanted, which was dot1q over the T1. HQ-Switch#show run vlan 1998 ! ! interface FastEthernet1/0/1 switchport trunk

[c-nsp] Weird crash on a SUP32

2010-07-12 Thread Alexander Fossa
Hi, The other day we had a weird crash, with no crashlog written. System returned to ROM by power on at 11:14:29 UTC Thu Jun 17 2010 (SP by watchdog NMI at PC 0x40A09538, address 0x0) System restarted at 15:58:57 BST Thu Jul 1 2010 System image file is

[c-nsp] nssa area's and static default route

2010-07-12 Thread Michael Sprouffske
Quick question to all.  When I configure the nssa area it removes the static default route I setup on my remote router. I configured a static route of 0.0.0.0 0.0.0.0 x.x.x.x on the remote router and it has a metric of 1 and a cost of 0.  When the nssa commands are put in place on the head end

[c-nsp] per user filtering on pix 506E

2010-07-12 Thread dalton
Hi, I'm wondering if there is an elegant way to do per user filtering for remote access accounts on a pix 506E running 6.3.(x)? I know i can create seperate groups with different access defined, however, this is not a solution that would scale neatly. Though it may be my only option. Thanks.

Re: [c-nsp] per user filtering on pix 506E

2010-07-12 Thread Tony
Hi Dalton, Using RADIUS to assign either group policy or a direct ACL is supported on newer versions of the ASA software (ie. 7.x 8.x). I don't think you can upgrade a 506E beyond 6.x though. You could always try these options and see if they work on 506E 6.3.x

[c-nsp] remote 7600 ISSU

2010-07-12 Thread Tony
Hi all, I am contemplating upgrading a 7600 with redundant SUP720-3B's from 12.2(33)SRD1 to SRD4 using ISSU (which is something I haven't played with before). I've read the doco and it seems reasonably straightforward. The question I have is can I run the upgrade remotely on a VTY session