Re: [c-nsp] Weird Traceroute Issue to Specific Destination

On 09/21/2010 08:48 PM, Paul Stewart wrote: Ok... so here's the latest. I put a static route at our Internet edge - we redistribute static into OSPF so now this /32 destination is able to be seen in the routing table (other than the default originated route). This solves the issue if I

Re: [c-nsp] Operational impact of switching from ingress to egress replication mode

On 09/22/2010 08:31 AM, Phil Mayers wrote: On 09/22/2010 01:00 AM, Peter Rathlev wrote: On Tue, 2010-09-21 at 22:12 +0100, Phil Mayers wrote: 2. Use CoPP for everything else; DO NOT use the glean or cef receive limiter I'm confused here: Why not use the glean limiter? As I understand it you

[c-nsp] Check command history on CISCO

HI, I want to check which command's are executed on cisco router in last two days . how to do that . ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Check command history on CISCO

On 09/22/2010 09:20 AM, vijay gore wrote: HI, I want to check which command's are executed on cisco router in last two days . how to do that . Enable command logging: archive log config logging enable notify syslog contenttype plaintext ...or configure TACACS, and examine the

[c-nsp] SIP not working behind NAT

Dear all, I have just configured a Cisco 1811 with c181x-advipservicesk9-mz.124-15.T10. If I put my ATA on public IP it works fine but if I put behind NAT it doesn't work. Proxy registration works fine and I can get Call from other end. But I can't make call to other end. Please help.

Re: [c-nsp] Check command history on CISCO

kindly send me complete procedure .. On Wed, Sep 22, 2010 at 1:59 PM, Maarten Carels li...@carels.net wrote: On 22 Sep 2010, at 10:20 , vijay gore wrote: HI, I want to check which command's are executed on cisco router in last two days . how to do that . Rewind time 2 days.

Re: [c-nsp] SegV exception On 7206 LNS

My Cisco 7206VXR with NPE-G2 runs as an LNS terminating PPPOE sessions. It also terminates a DS3 used for data T1s. About once a week or so, a SegV exception happens, and the router resets itself. I have no idear why. There seems to be no pattern to it, and I can't figure out for

Re: [c-nsp] Check command history on CISCO

show history all Oliver -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of vijay gore Sent: Wednesday, 22 September 2010 6:21 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Check command history on CISCO HI, I

Re: [c-nsp] Check command history on CISCO

On 22 Sep 2010, at 10:45 , vijay gore wrote: On Wed, Sep 22, 2010 at 1:59 PM, Maarten Carels li...@carels.net wrote: On 22 Sep 2010, at 10:20 , vijay gore wrote: HI, I want to check which command's are executed on cisco router in last two days . how to do that . Rewind time 2

Re: [c-nsp] Weird Traceroute Issue to Specific Destination

We did reboot the equipment and no difference - it's also older sup2 based 6500 there;) -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Phil Mayers Sent: September-22-10 3:40 AM To: cisco-nsp@puck.nether.net Subject:

Re: [c-nsp] Check command history on CISCO

+1 :) Go to Google, type in how to build a time machine, read. gert ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Weird Traceroute Issue to Specific Destination

Have you checked the Cisco bugtool for your hardware/IOS? Regards Roger On Wed, Sep 22, 2010 at 11:20 AM, Paul Stewart p...@paulstewart.org wrote: We did reboot the equipment and no difference - it's also older sup2 based 6500 there;) -Original Message- From:

Re: [c-nsp] Check command history on CISCO

+2 :-) On Wed, Sep 22, 2010 at 3:02 PM, Heath Jones hj1...@gmail.com wrote: +1 :) Go to Google, type in how to build a time machine, read. gert ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Check command history on CISCO

Actually, Its a pretty good read! http://www.dailymail.co.uk/home/moslive/article-1269288/STEPHEN-HAWKING-How-build-time-machine.html Go to Google, type in how to build a time machine, read. gert ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Check command history on CISCO

Hi, On Wed, Sep 22, 2010 at 03:48:57PM +0530, vijay gore wrote: then give proper answer, if you dont't like to give proper answer . then don't reply You have been given answers: setup a TACACS server. If you don't want to bother doing a *bit* of the research yourself, then don't be surprised

[c-nsp] Odd BGP AS Path

Hi all, Probably a silly question, but can anyone explain to me this: 3561 3356 9031 {35821,35821,35821,35821} i This one makes sense because 24863 is doing aggregation, and all the AS's are different: 10026 3356 24863 {6127,45246} i Cheers Heath ___

Re: [c-nsp] Odd BGP AS Path

Probably a silly question, but can anyone explain to me this: 3561 3356 9031 {35821,35821,35821,35821} i To explain it a bit better, I'm looking at real routing information from routeviews (#3). According to RFC 4271 (9.2.2.2 Aggregating Routing Information): For the purpose of aggregating

[c-nsp] (no subject)

Dear All, Anyone now how to connect the ALU's console (Alcatel ISAM 7330) port to cisco aux port or vice versa ? Anyone tried this before? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Embeded Packet Capture for DHCP Troubleshooting [SEC=UNCLASSIFIED]

0n Tue, Sep 21, 2010 at 05:12:10PM +0100, Heath Jones wrote: Well I think your on the right track with the packet capture then. It looks as if the client either never sees the dhcp proposal, or the proposal itself is unacceptable to the client. (there are more potential

Re: [c-nsp] Check command history on CISCO

This link should save some time and keystrokes: http://lmgtfy.com/?q=how+to+build+a+time+machine (sorry couldn't help myself!! :) ) Thanks, -Jeff -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gert Doering Sent:

Re: [c-nsp] Embeded Packet Capture for DHCP Troubleshooting [SEC=UNCLASSIFIED]

Thanks for the suggestion. Problem is it's a remote site and I don't have a box there (yet) that I could sniff from. Thanks again for everyone elses help/suggestions. Will update the list when I am able to make any headway on the issue. -Jeff -Original Message- From:

[c-nsp] BFD expectations

It's my understanding that BFD can provide failure detection and recovery similar to that found in POS. To that end, I'd like to use BFD with ISIS to design an L3 network that has failure detection and recovery mechanisms which rival L2 mechanisms like REP/G.8023/STP's various incarnations,

Re: [c-nsp] Check command history on CISCO

On 09/22/2010 09:20 AM, vijay gore wrote: HI, I want to check which command's are executed on cisco router in last two days . how to do that . First, TACACS is the real answer here, but if you don't have that option and your IOS is recent enough: archive log config logging enable

Re: [c-nsp] BFD expectations

Keep in mind that bfd is just a trigger method. You have to also take into fact that it still takes time for your protocols to converge. What are your bfd timers set to? How many prefixes? Etc It's my understanding that BFD can provide failure detection and recovery similar to that found in

Re: [c-nsp] BFD expectations

On 2010-09-22, at 10:50 AM, Chris Evans wrote: Keep in mind that bfd is just a trigger method. You have to also take into fact that it still takes time for your protocols to converge. Absolutely. That's why I'm wondering if 2-3 seconds is realistic in the real world. What are your bfd

Re: [c-nsp] Check command history on CISCO

One addition that I have on my gear: Path tftp://ip of tftp server/site name/$h Write-memory This way I can use WinMerge on configs to easily see what differences are and each sites devices (switches and routers - when will ASA support this pleaseee??) Every time I wr mem a fresh copy of the

[c-nsp] Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100922-cucmsip http://www.cisco.com/warp/public/707/cisco-sa-20100922-cucmsip.shtml Revision 1.0 For Public Release 2010

[c-nsp] Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco IOS SSL VPN Vulnerability Advisory ID: cisco-sa-20100922-sslvpn http://www.cisco.com/warp/public/707/cisco-sa-20100922-sslvpn.shtml Revision 1.0 For Public Release 2010 September 22 1600 UTC (GMT

[c-nsp] STM querry

Hi guys, Please help me with understanding if I have channelised STM1 card - 1) I can configure 3xDS3 2) I can configure 63xE1 CAN I configure on same channelised STM1 2xDS3 and rest E1. Regards Jack ___ cisco-nsp mailing list

[c-nsp] AUTO: Tarig Hamdi is out of the office. (returning 10/01/2010)

I am out of the office until 10/01/2010. If there are any urgent issues please call me or text me on my mobile. Note: This is an automated response to your message cisco-nsp Digest, Vol 94, Issue 72 sent on 9/21/10 6:59:17 PM. This is the only notification you will receive while this person

Re: [c-nsp] STM querry

I think you have to stay with the SDH standand so, E3 not DS3 but you should be able to mix and match E3 and E1. On Wed, Sep 22, 2010 at 12:28, jack daniels jckdaniel...@gmail.com wrote: Hi guys, Please help me with understanding if I have channelised STM1 card - 1) I can configure 3xDS3

[c-nsp] IPSec = Speed problems ?

Hi i request your help because we have a problems of speed between two site. First, connected at 100 Mbits full internet access : Config (it's a 2821 with AIM card) crypto isakmp key k5JJ address 62.aa.bb.cc crypto isakmp profile VPN001 keyring default match identity address

Re: [c-nsp] IPSec = Speed problems ?

i request your help because we have a problems of speed between two site. What is the problem, exactly? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] DS3 Length over RG-6 or RG-59

Does anybody have a good rule of thumb as to what type of coax to use for DS3 over various distances? I know it has to be 75ohm, but have read it can be RG-59 or RG-6. Also, on the RG-59 I have seen solid core and braided. We have to run a cable about 250' to the telco equipment thru a messy

[c-nsp] 10G DWDM UP/DOWN

I have a 10G circuit over DWDM which is flapping very frequently occasionally. DOWN to UP state takes 5 second most of the time, just wondering what could be causing this. Sep 22 21:47:46 T12 mib2d[2061]: SNMP_TRAP_LINK_DOWN: ifIndex 117, ifAdminStatus up(1), ifOperStatus down(2),

Re: [c-nsp] 10G DWDM UP/DOWN

Could be a bunch of things - has it always happened, or only just started. - Fibre - RX strength too high - RX strength too low What issues are you seeing on the other end? On 22 September 2010 22:43, Good One go...@live.com wrote: I have a 10G circuit over DWDM which is flapping very

Re: [c-nsp] 10G DWDM UP/DOWN

Do you have the ability to see the DWDM stats? Is the 10G interface configured to drop when wavelength goes down? We need to figure out if the DWDM equipment, the actual fiber connection, or the router interfaces is the issue here. I'll bank initially on a problem with the DWDM based connection

Re: [c-nsp] BFD expectations

Hello Jason, The BFD timers are set to their lowest values: bfd interval 50 min_rx 50 multiplier 3 Interesting thing is that bfd neigh det doesn't seem to reflect that: you mean the MinRx/Tx timers of 1sec? That's fine as you use echo mode. MinRx/Tx is for the control packets which run

Re: [c-nsp] BFD expectations

On 09/22/2010 03:22 PM, Jason Lixfeld wrote: It's my understanding that BFD can provide failure detection and recovery similar to that found in POS. To that end, I'd like to use BFD with ISIS to design an L3 network that has failure detection and recovery mechanisms which rival L2 mechanisms

Re: [c-nsp] BFD expectations

Phil you bring up a great point. Until sxi bfd code was crap on the 6500.. We have done exstensive testing at the ECATS lab. We concluded that 450ms is a good number on this platform with its centralized architecture. We tested this with approx 35 peers and had no issues under heavy CPU load. As

[c-nsp] QoS on the 2960

I'm trying to figure out QoS on a 2960 - something I've read about a lot but never had to do before. I'm very simply attempting to limit a customer to speed X, 8M for example. So far I have this: ! mls qos srr-queue input bandwidth 100 1 mls qos srr-queue input buffers 100 0 mls qos srr-queue

Re: [c-nsp] BFD expectations

The forwarding on the 6k can be decentralized but as of today I believe that BFD is still a centralized process. That is, it is punted to the CPU and control plane issues can give false positives as Phil mentioned. I think there are plans to make BFD distributed in the future but I have no idea

Re: [c-nsp] STM querry

Thanks Aaron , if you have any supporting doc for same it will be very helpful for me. On Wed, Sep 22, 2010 at 11:13 PM, Aaron dudep...@gmail.com wrote: I think you have to stay with the SDH standand so, E3 not DS3 but you should be able to mix and match E3 and E1. On Wed, Sep 22, 2010 at

[c-nsp] Configuration register 0x2 sanity check

We're upgrading several 4948 and 4948-10GEs and we noticed some weirdness. Sometimes the switch would load to the old IOS even though we had the correct boot command. We ran into an unrelated issue that forced me to open a TAC case. The engineer said that on all Cat 4K devices, we should be using

Re: [c-nsp] BFD expectations

Yes. This is what I was referring to. This is centralized on the 6500 even tho it can be implemented with distributed forwarding cards. You also need to enable no ip redirects on the interfaces to reduce CPU load. As I mentioned we tested with Cisco ECATS and our htts team with sxi3. We tested

Re: [c-nsp] 10G DWDM UP/DOWN

On 23/09/2010, at 7:43 AM, Good One wrote: I have a 10G circuit over DWDM which is flapping very frequently occasionally. DOWN to UP state takes 5 second most of the time, just wondering what could be causing this. Sep 22 21:47:46 T12 mib2d[2061]: SNMP_TRAP_LINK_DOWN: ifIndex 117,

Re: [c-nsp] Configuration register 0x2 sanity check

Hi John, On Thu, Sep 23, 2010 at 2:13 PM, John Neiberger jneiber...@gmail.com wrote: The engineer said that on all Cat 4K devices, we should be using 0x2 as the configuration register. I told her that I normally used 0x2102, but she said not to use that on these switches, that 0x2 was the

Re: [c-nsp] Configuration register 0x2 sanity check

The engineer said that occasionally the 4K will boot to the first image in flash instead of the one specified by the boot variable, which is something our engineers have seen before. In fact, we saw it last night, but I suspect that is because someone had the register set to 0x2101. I guess I