Re: [c-nsp] ME Series for a LAN/Server Farm

2010-12-09 Thread Keegan Holley
I'm not sure I really care about all the features. From the pricing I saw it's dirt cheap for what it does. I just want something that operates close enough to a real switch that I can use it in a LAN environment and not become a human FAQ. On Thu, Dec 9, 2010 at 2:12 AM, Mark Tinka

Re: [c-nsp] ME Series for a LAN/Server Farm

2010-12-09 Thread Per Carlson
Hi. I'm looking at the new 3600X series it was just released in Sept.  I noticed the no local switching for UNI ports.  Is there a way to disable the UNI/NNI relationship completely or enable local switching for UNI ports? That might be true if you run the UNI-ports as switchports. OTOH you

Re: [c-nsp] ME Series for a LAN/Server Farm

2010-12-09 Thread Mark Tinka
On Thursday, December 09, 2010 03:56:22 pm Keegan Holley wrote: I'm not sure I really care about all the features. From the pricing I saw it's dirt cheap for what it does. I just want something that operates close enough to a real switch that I can use it in a LAN environment and not

Re: [c-nsp] 4900M with QoS on a portchannel

2010-12-09 Thread Jorge L. Rodriguez Aguila
QOS can never be applied on Port Channels because they are logical interfaces. The QoS on most Cisco Devices is done at the ASIC level and so it can only be done on physical interfaces, the port channel will pass the packets to the Physical Ifs and these in turn will apply the service policy on

Re: [c-nsp] full routes / backup router

2010-12-09 Thread Jorge L. Rodriguez Aguila
We have a Customer with a 45-60 Mbps Constant Throughput from the internet on a 100Mbps link on a 2851 with 1GB of ram for the full Internet Routes + about 2K internal Routes. We have one of these per each(2) ISP connection. Jorge Rodriguez,CCNP-Voice Senior Voice/Data Consultant Netxar

Re: [c-nsp] IOS DHCP Server - dynamic and static in one subnet

2010-12-09 Thread Artyom Viklenko
08.12.2010 17:35, Ramcharan, Vijay A пишет: Since you mentioned one subnet with static allocations from a portion of that subnet I assume that you don't want the DHCP server handing out your static allocations. You can configure exclusions (i.e. don't give out these addresses) with ip dhcp

Re: [c-nsp] ME Series for a LAN/Server Farm

2010-12-09 Thread Abello, Vinny
JFYI, all ports (with the exception of GigiabitEthernet0 which is the management port and doesn't have uni/nni) on the ME3600X are defaulted to nni in the running-config. interface GigabitEthernet0 no ip address shutdown negotiation auto ! interface GigabitEthernet0/1 port-type nni !

Re: [c-nsp] ME Series for a LAN/Server Farm

2010-12-09 Thread Phil Bedard
Yeah hence the ellipses and the recommendation to maybe look elsewhere. :) It is definitely feature overkill for someone looking for a L2 switch with ample fiber termination, but if you are dead set to go Cisco and do not want something chassis based... Phil On 12/9/10 2:12 AM, Mark Tinka

[c-nsp] Flexible Packet Match

2010-12-09 Thread Dennis Bohn
Hello: I have been going back and forth with Cisco TAC about Flexible Packet Matching (FPM). At the moment, I am trying to configure a nested class in the tcdf file. In the future, I am interested in defining specific packet matches to drop. I have read all documentation that I can find on

Re: [c-nsp] full routes / backup router

2010-12-09 Thread Adam Greene
Thanks Gert, Joseph and Jorge. We need to pass the full routing table to a customer who is load balancing between us and another upstream provider. As far as data throughput goes, yes, the 2911 looks like a good fit. But I was concerned about whether the CPU would be able to handle the

Re: [c-nsp] Flexible Packet Match

2010-12-09 Thread Rob Taylor
Dennis, I dont see ccenternat defined anywhere, though you are calling it in the nested class thisone. The XML DOES validate, but I believe you must define the class ccenternet before you can match against ccenternat. Hope this helps, Rob On 12/9/2010 11:13 AM, Dennis Bohn wrote: Hello:

[c-nsp] BGP MRAI

2010-12-09 Thread selamat pagi
For faster convergence, our service provider suggested to disable the BGP min advertisement interval (set it to 0). Is this really a good idea, even as we receive the full Internet table ? cheers, keti ** ___ cisco-nsp mailing list

[c-nsp] need advice to analysis traffic immediately

2010-12-09 Thread Deric Kwok
Hi When the bandwidth is high / spike, how can I be easy way to identify the traffic coming from in cisco In linux, I can run the iftop -i int Thank you ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] need advice to analysis traffic immediately

2010-12-09 Thread Joseph Jackson
Enable netflow on the router and export it to a collector. Here's a free one that's pretty. http://www.plixer.com/ -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Deric Kwok Sent: Thursday, December 09, 2010 12:43

Re: [c-nsp] 4900M with QoS on a portchannel

2010-12-09 Thread Mack McBride
QOS is generally applied on the input direction for port channels and that works fine. Output QOS is generally much more limited. Ie. You can't do classification on output and those kinds of things. This is very platform specific. Mack McBride Network Architect -Original Message- From:

Re: [c-nsp] full routes / backup router

2010-12-09 Thread Reuben Farrelly
A 2900 would cope fine with this, for sure. Just for kicks I ran a full BGP feed to an 1841 one day a few years back and after the initial onslaught of populating the routing table it coped fine with the incremental BGP updates coming in after that. Not that I would ever recommend it but

Re: [c-nsp] HSRP/VRRP, IPv6 and IOS XE?

2010-12-09 Thread Arie Vayner (avayner)
Gert, I was just updated by the BU that this feature is now listed in FN... Thanks Arie -Original Message- From: Gert Doering [mailto:g...@greenie.muc.de] Sent: Monday, November 29, 2010 12:05 To: Arie Vayner (avayner) Cc: Gert Doering; cisco-nsp@puck.nether.net Subject: Re: [c-nsp]

Re: [c-nsp] need advice to analysis traffic immediately

2010-12-09 Thread Johan Grip
I generally use top-talkers for that. ip flow-top-talkers top 50 sort-by bytes Then put ip flow ingress/egress on interfaces as needed. On Thu, 09 Dec 2010 19:43:03 +0100, Deric Kwok deric.kwok2...@gmail.com wrote: Hi When the bandwidth is high / spike, how can I be easy way to

Re: [c-nsp] Handling the inbound ACL's with dynamic pd ipv6 prefix from the ISP

2010-12-09 Thread George Manousakis
-Original Message- From: Per Carlson [mailto:pe...@hemmop.com] Sent: Monday, December 06, 2010 12:58 PM To: George Manousakis Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Handling the inbound ACL's with dynamic pd ipv6 prefix from the ISP But let's say now that you got

Re: [c-nsp] BGP MRAI

2010-12-09 Thread Oliver Boehmer (oboehmer)
For faster convergence, our service provider suggested to disable the BGP min advertisement interval (set it to 0). Is this really a good idea, even as we receive the full Internet table ? the main benefit of MRAI in the Internet context is to reduce the number of updates/withdraws

Re: [c-nsp] Handling the inbound ACL's with dynamic pd ipv6 prefix from the ISP

2010-12-09 Thread Per Carlson
Hi George. My suggestion is to put all those hosts with public accessible services on one subnet, and all clients on another subnet. You can then have different ACL's protecting the different subnets (allow any - tcp/80 on the www-server subnet, deny any on the client subnet). If you would

[c-nsp] 3550 layer 3 switch replacement for v6

2010-12-09 Thread Jon Lewis
I need to start looking at replacing 3550-48 switches with something comparable that supports ipv6. I tried using feature navigator, but the info it was giving me was so suspect I won't even bother repeating it. My impression from past looks into this issue is that the 3560-48TS (which

Re: [c-nsp] HSRP/VRRP, IPv6 and IOS XE?

2010-12-09 Thread Gert Doering
Hi, On Thu, Dec 09, 2010 at 08:54:27PM +0100, Arie Vayner (avayner) wrote: I was just updated by the BU that this feature is now listed in FN... Confirmed! HSRP for IPv6 is now listed for IOS XE 3.1S thanks, gert -- USENET is *not* the non-clickable part of WWW!

Re: [c-nsp] 3550 layer 3 switch replacement for v6

2010-12-09 Thread Seth Mattinen
On 12/9/2010 12:54, Jon Lewis wrote: I need to start looking at replacing 3550-48 switches with something comparable that supports ipv6. I tried using feature navigator, but the info it was giving me was so suspect I won't even bother repeating it. My impression from past looks into this

Re: [c-nsp] HSRP/VRRP, IPv6 and IOS XE?

2010-12-09 Thread Grzegorz Janoszka
On 09-12-10 22:22, Gert Doering wrote: On Thu, Dec 09, 2010 at 08:54:27PM +0100, Arie Vayner (avayner) wrote: I was just updated by the BU that this feature is now listed in FN... Confirmed! HSRP for IPv6 is now listed for IOS XE 3.1S Please pay attention whether this is HSRP on link-local

Re: [c-nsp] HSRP/VRRP, IPv6 and IOS XE?

2010-12-09 Thread Gert Doering
Hi, On Thu, Dec 09, 2010 at 10:44:14PM +0100, Grzegorz Janoszka wrote: On 09-12-10 22:22, Gert Doering wrote: On Thu, Dec 09, 2010 at 08:54:27PM +0100, Arie Vayner (avayner) wrote: I was just updated by the BU that this feature is now listed in FN... Confirmed! HSRP for IPv6 is now

Re: [c-nsp] Compressed IPv6 ACLs on Cat6500

2010-12-09 Thread Saku Ytti
On (2010-12-08 17:39 -0800), Mack McBride wrote: The misunderstanding is anything with a prefix longer than /88 includes discarded bits in the subnet portion as opposed to the host portion. The missing bits are never/rarely going to lead to expected behaviour. Anything more specific than

Re: [c-nsp] 3550 layer 3 switch replacement for v6

2010-12-09 Thread Mack McBride
The 4948E may be a good fit but the full enterprise image is pricy. It has better QOS and 1G/10G SPF+ uplinks. Mack.McBride Network Architect -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Seth Mattinen Sent: Thursday,

Re: [c-nsp] Compressed IPv6 ACLs on Cat6500

2010-12-09 Thread Saku Ytti
On (2010-12-09 23:59 +0200), Saku Ytti wrote: Ugh. The missing bits are never/rarely going to lead to expected behaviour. Anything more specific than /88 should just be used. /just not/ deny tcp F00F::C7C9:0/120 eq www host 2001:DB8::1 eq 42 sequence 30 deny tcp

Re: [c-nsp] BFD and no ip redirects ?

2010-12-09 Thread Benjamin Lovell
Agree but so does BFD in echo mode but echo also proves that the IP punt path to the CPU is working. So not that I see no value in BFD but I do not see any additional value of this mode over echo. -Ben On Dec 7, 2010, at 5:09 PM, Gert Doering wrote: hi, On Tue, Dec 07, 2010 at 11:40:51AM

Re: [c-nsp] 3550 layer 3 switch replacement for v6

2010-12-09 Thread Phil Mayers
On 12/09/2010 08:54 PM, Jon Lewis wrote: I need to start looking at replacing 3550-48 switches with something comparable that supports ipv6. I tried using feature navigator, but the We use the 3750s with IPv6 very satisfactorily. But as you suggest, they probably won't meet your policing

[c-nsp] Multiple EIGRP processes (ASNs)

2010-12-09 Thread Yuri Bank
Does anyone know of a way to make IOS see two distinct EIGRP processes ( Different ASNs ) equally. The standard behavior (On my version of IOS at least) is to choose the route which was learned from the lower EIGRP ASN regardless of metric. I can influence which routes are chosen by manipulating

[c-nsp] 4G 4rd party flash drive for XR-12k

2010-12-09 Thread Mikael Abrahamsson
Hello. Flash drives for XR on Cisco 12000 are quite expensive if bought from Cisco. XR writes a lot to the drive so thus there are other requirements than for running IOS which basically never writes to the drive at all. What do people do out there? I found some industrial grade flash such