Re: [c-nsp] Graph cisco 4948 SVI

2011-07-11 Thread Jiri Prochazka
Dne 8.7.2011 17:33, Nick Ryce napsal(a): Hi, Does anyone know if the 4948 has the ability to be able to graph traffic transiting the SVI of a vlan? I know the 3550/3560's are unable to do this? Nick Hi Nick, it's disabled by default. You have to add statement 'counter' into SVI config.

Re: [c-nsp] 6509/SUP720-3BXL with Enhanced FlexWAN issue.. Any ideas?

2011-07-11 Thread Howard Leadmon
Thanks for the tip, but I am already at the most current ROMMON revision that I am aware of: From my RP: Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXJ1, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c)

Re: [c-nsp] OT: Following Up on Netflow Information

2011-07-11 Thread Ziv Leyes
Well, I can see the similitude, we both try to put a grin on people's face... -Original Message- From: Van Der Meulen, Mark [mailto:mark.vandermeu...@travelex.com.au] Sent: Monday, July 11, 2011 7:31 AM To: Ziv Leyes; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] OT: Following Up on

Re: [c-nsp] Firewalls as-a-service in an MPLS infrastructure...

2011-07-11 Thread Nick Hilliard
On 09/07/2011 17:22, Derick Winkworth wrote: The ASA I think can support up to 500 contexts now, but with contexts enabled I'm hearing there is no crypto support. I'm not sure this is an impediment for us but I can see it being an issue for folks. In multiple context mode, there is no

Re: [c-nsp] Firewalls as-a-service in an MPLS infrastructure...

2011-07-11 Thread Reuben Farrelly
On 11/07/2011 6:00 PM, Nick Hilliard wrote: On 09/07/2011 17:22, Derick Winkworth wrote: The ASA I think can support up to 500 contexts now, but with contexts enabled I'm hearing there is no crypto support. I'm not sure this is an impediment for us but I can see it being an issue for folks.

[c-nsp] Configuring NetFlow from the Catalyst 6500 Card

2011-07-11 Thread Manu Chao
I have configured NetFlow on Catalyst 6500 but i only received packet being proceed by CPU (SNMP, PIM...). Is it normal? I need to see full transit packets in all SVI. ip route-cache flow configured on interface seems not enough. Can you please share your Netflow experience on 6500? I am using

Re: [c-nsp] Configuring NetFlow from the Catalyst 6500 Card

2011-07-11 Thread Peter Rathlev
On Mon, 2011-07-11 at 12:20 +0200, Manu Chao wrote: I have configured NetFlow on Catalyst 6500 but i only received packet being proceed by CPU (SNMP, PIM...). Is it normal? I need to see full transit packets in all SVI. ip route-cache flow configured on interface seems not enough. We use

Re: [c-nsp] Firewalls as-a-service in an MPLS infrastructure...

2011-07-11 Thread Max Pierson
In multiple context mode, there is no support for: - dynamic routing Wow, I knew that crypto was dead when you enable it for vFW, and this was a show stopper for us, but I did not know that dynamic routing was axed as well when you did this. Glad we decided to go the Fortinet route. Why one would

[c-nsp] ASA VPN client update feature...

2011-07-11 Thread Jeff Kell
The ASA VPN in 8.x has an IPsec Client Update feature built-in that I was looking over. Basically it will do a version check and you can provide a URL to download new software, for Windows (general), Win 95/98/ME, WinNT/2000/XP, MacOS, and LInux. There appear to be no provisions for WIndows

Re: [c-nsp] Firewalls as-a-service in an MPLS infrastructure...

2011-07-11 Thread Nick Hilliard
Not wanting to be rude by following up my own posting, but I had several queries about this, public and private. Here are some reference URLs amd quotes for each, all referring to 8.4 software - although this is also true for all previous software versions. Nick On 11/07/2011 09:00, Nick

[c-nsp] NAT over Two different providers

2011-07-11 Thread jacob miller
Hi, Am having the following scenario which I need assistance in solving. I have two Internet service providers each of which has provided a /29 set of public IP addresses. I would like to use Link A (ISP A) as the main link and Link B (ISP B) as my back up. I would like to do this

Re: [c-nsp] NAT over Two different providers

2011-07-11 Thread Jeff Cartier
You could use a combination of NAT and IP SLAs with static routes and track statements. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of jacob miller Sent: Monday, July 11, 2011 9:59 AM To: cisco-nsp@puck.nether.net

Re: [c-nsp] NAT over Two different providers

2011-07-11 Thread David Rothera
One issue that you will run into is that because you will be changing IP address if the user moved over to the other provider due to a failure etc all existing connections would be severed and sometimes cookies would be invalid and users would have to log back into certain services. As long as

Re: [c-nsp] NAT over Two different providers

2011-07-11 Thread Peter Hicks
On 11 Jul 2011, at 14:59, jacob miller wrote: I have two Internet service providers each of which has provided a /29 set of public IP addresses. I would like to use Link A (ISP A) as the main link and Link B (ISP B) as my back up. I would like to do this automatically such that users

Re: [c-nsp] NAT over Two different providers

2011-07-11 Thread -Hammer-
LOL... I was thinking the same. Maybe a google link in a sigline? -Hammer- I was a normal American nerd -Jack Herer On 07/11/2011 09:12 AM, Peter Hicks wrote: On 11 Jul 2011, at 14:59, jacob miller wrote: I have two Internet service providers each of which has provided a /29 set of

Re: [c-nsp] IPv6 neighbor table via SNMP

2011-07-11 Thread Tom Ammon
Hmmm...After generating some IPv6 traffic, then running the walk, it doesn't seem to know about this OID: [root@marchingmenfs ~]# snmpwalk -v 2c -c x inscc-rtr-core-a1-2.redhorn CISCO-IETF-IP-MIB::cInetNetToMediaTable Cannot find module (CISCO-IETF-IP-MIB): At line 0 in (none)

[c-nsp] OSPF trigger updates

2011-07-11 Thread Ranjith R
Hi All , Can someone clarify , how will the OSPF behave when neighbor on a p2p link goes down , although the ethernet interface state still remain in up state. Will it trigger an SPF calculation ? If so is it after 40 seconds ? Thanks, Ranjith ___

[c-nsp] Etherchannel Question

2011-07-11 Thread James Bensley
Hi List, I've been Google'ing around for the answer but I can't find it. I logged into a switch today and this is a snippet of the output from 'show etherchannel summary'; Group Port-channel ProtocolPorts --+-+---+- 2 Po2(SU) LACP Gi0/45(P)

Re: [c-nsp] OSPF trigger updates

2011-07-11 Thread Nick Hilliard
On 11/07/2011 17:54, Ranjith R wrote: Can someone clarify , how will the OSPF behave when neighbor on a p2p link goes down , although the ethernet interface state still remain in up state. Will it trigger an SPF calculation ? If so is it after 40 seconds ? It will assume that the neighbor

Re: [c-nsp] IPv6 neighbor table via SNMP

2011-07-11 Thread Phil Mayers
On 07/11/2011 05:39 PM, Tom Ammon wrote: Hmmm...After generating some IPv6 traffic, then running the walk, it doesn't seem to know about this OID: [root@marchingmenfs ~]# snmpwalk -v 2c -c x inscc-rtr-core-a1-2.redhorn CISCO-IETF-IP-MIB::cInetNetToMediaTable Cannot find module

Re: [c-nsp] OSPF trigger updates

2011-07-11 Thread Ranjith R
Hi Nick , Thank you for the mail , under what scenario does the LSA refresh (30 minutes ) is significant . Thanks, Ranjith On Mon, Jul 11, 2011 at 10:30 PM, Nick Hilliard n...@foobar.org wrote: On 11/07/2011 17:54, Ranjith R wrote: Can someone clarify , how will the OSPF behave when

[c-nsp] sup2T software release notes have hit

2011-07-11 Thread Phil Mayers
...and the first thing that stands out in the release notes: These features are not supported in Release 12.2(50)SY: •Per-VLAN Spanning Tree (PVST) mode Note Release 12.2(50)SY supports these spanning tree protocols: —Rapid Spanning Tree Protocol (RSTP) is enabled by default; —Multiple

Re: [c-nsp] IPv6 neighbor table via SNMP

2011-07-11 Thread Peter Rathlev
On Mon, 2011-07-11 at 10:39 -0600, Tom Ammon wrote: Hmmm...After generating some IPv6 traffic, then running the walk, it doesn't seem to know about this OID: [root@marchingmenfs ~]# snmpwalk -v 2c -c x inscc-rtr-core-a1-2.redhorn CISCO-IETF-IP-MIB::cInetNetToMediaTable

Re: [c-nsp] OSPF trigger updates

2011-07-11 Thread Serguei Bezverkhi
Hello Nick, Playing with OSPF hello/dead timers is possible but not the best approach. If you need fast dead peer detection, BFD is much better option. It uses less CPU and allows much better detection time than OSPF timers. HTH Serguei -Original Message- From:

Re: [c-nsp] Etherchannel Question

2011-07-11 Thread Peter Rathlev
On Mon, 2011-07-11 at 18:30 +0100, James Bensley wrote: Group Port-channel ProtocolPorts --+-+---+- 2 Po2(SU) LACP Gi0/45(P) Gi0/46(P) 3 Po3(SD) PAgP Gi0/13(D) Gi0/14(I) 4 Po4(SD) PAgP Gi0/15(I)

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Gert Doering
Hi, On Mon, Jul 11, 2011 at 07:14:41PM +0100, Phil Mayers wrote: ...and the first thing that stands out in the release notes: These features are not supported in Release 12.2(50)SY: ?Per-VLAN Spanning Tree (PVST) mode Note Release 12.2(50)SY supports these spanning tree protocols:

Re: [c-nsp] IPv6 neighbor table via SNMP

2011-07-11 Thread Phil Mayers
On 07/11/2011 07:24 PM, Peter Rathlev wrote: On Mon, 2011-07-11 at 10:39 -0600, Tom Ammon wrote: Hmmm...After generating some IPv6 traffic, then running the walk, it doesn't seem to know about this OID: [root@marchingmenfs ~]# snmpwalk -v 2c -c x inscc-rtr-core-a1-2.redhorn

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Alan Buxey
Hi, ...and the first thing that stands out in the release notes: These features are not supported in Release 12.2(50)SY: •Per-VLAN Spanning Tree (PVST) mode Note Release 12.2(50)SY supports these spanning tree protocols: —Rapid Spanning Tree Protocol (RSTP) is enabled by default;

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Phil Mayers
On 07/11/2011 07:26 PM, Gert Doering wrote: (Mmmh. Is this IOS? Or IOS XE? I thought the Sup2T was supposed to ship with something modularish?) IOS. I've seen a load of roadmap presentations on this thing, and Cisco have consistently said it would run IOS, and not any of the new variants.

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Phil Mayers
On 07/11/2011 07:32 PM, Alan Buxey wrote: gulp. we use rapid-pvst - is that also not supported?? Well, precisely! Digging further, the IOS config guide does mention rapid-PVST:

Re: [c-nsp] OSPF trigger updates

2011-07-11 Thread Nick Hilliard
On 11/07/2011 19:24, Serguei Bezverkhi wrote: Playing with OSPF hello/dead timers is possible but not the best approach. If you need fast dead peer detection, BFD is much better option. It uses less CPU and allows much better detection time than OSPF timers. This then devolves into a

Re: [c-nsp] Etherchannel Question

2011-07-11 Thread Peter Rathlev
On Mon, 2011-07-11 at 20:26 +0200, Peter Rathlev wrote: find out, what does 'stand-alone' mean and why would these ports say that? Can anyone here explain why? The I means independent here. It means that you configured an etherchannel protocol on this devices, but the neighboring device is

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Gert Doering
Hi, On Mon, Jul 11, 2011 at 07:35:25PM +0100, Phil Mayers wrote: On 07/11/2011 07:26 PM, Gert Doering wrote: (Mmmh. Is this IOS? Or IOS XE? I thought the Sup2T was supposed to ship with something modularish?) IOS. I've seen a load of roadmap presentations on this thing, and Cisco have

Re: [c-nsp] Configuring NetFlow from the Catalyst 6500 Card

2011-07-11 Thread Jon Harald Bøvre
Hi As already indicated, remember to add the mls netflow commands. And watch this video http://www.plixer.com/blog/network-problem-resolution/cisco-catalyst-6509-rap-mix-master-mitch-strikes-again/ Jon Harald Bøvre Sent from my iPad On 11. juli 2011, at 12:20, Manu Chao

[c-nsp] Internet routing in a vendoe MPLS environment

2011-07-11 Thread Rick Martin
This may not be a Cisco specific question but today our network is virtually 100% Cisco so I am throwing this out to this group for input. Our statewide network with 1,800+ CE routers is currently a legacy ATM backbone with primarily ATM IMA or Frame Relay for last mile connections with a

[c-nsp] CTI OS Toolkit

2011-07-11 Thread Mohammad Khalil
Hi all , is there a way i can find cisco CTI OS Toolkit? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Simon Leinen
Thanks for the heads-up! There's some more technical information about the Supervisor 2T in the White Papers section: http://www.cisco.com/en/US/customer/products/hw/switches/ps708/prod_white_papers_list.html -- Simon. ___ cisco-nsp mailing list

Re: [c-nsp] IPv6 neighbor table via SNMP

2011-07-11 Thread Tom Ammon
Good call. Using the numeric OID works, so that confirms what the problem is. I'm going to show some SNMP ignorance here, but how do I translate a name like CISCO-IETF-IP-MIB to a numeric OID? I have read through mib files before but have never been able to figure out how to translate them

Re: [c-nsp] IPv6 neighbor table via SNMP

2011-07-11 Thread Phil Mayers
On 07/11/2011 10:26 PM, Tom Ammon wrote: Good call. Using the numeric OID works, so that confirms what the problem is. FWIW, the netdisco source contains a comprehensive set of MIBS; it's where I get my mib files from, as the guy who assembles them fixes them up so the load in net-snmp

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Peter Rathlev
On Mon, 2011-07-11 at 23:19 +0200, Simon Leinen wrote: Thanks for the heads-up! There's some more technical information about the Supervisor 2T in the White Papers section: http://www.cisco.com/en/US/customer/products/hw/switches/ps708/prod_white_papers_list.html Yeah...: The Supervisor

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Robert Hass
The 6708 card isn't mentioned elsewhere on the page. Specifically not in Table 6. DFC4 Field Upgradable Linecard. Anybody know what that means? Do we have to buy new 6908 cards instead? Or will there be a field upgrade? As 6708 is DFC-only (same as 6716) and cannot work in CFC due to lack of

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Quinn Snyder
dfc-based linecards will require dfc4 to function in sup2t chassis (if supported by software). any 6700-series cards supported in sup2t will need this upgrade. 6708 linecard cleverly omitted from upgrade path -- this, as stated, will need to be replaced with 6908 line-rate card -- or used in

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Peter Rathlev
On Tue, 2011-07-12 at 00:00 +0200, Robert Hass wrote: The 6708 card isn't mentioned elsewhere on the page. Specifically not in Table 6. DFC4 Field Upgradable Linecard. Anybody know what that means? Do we have to buy new 6908 cards instead? Or will there be a field upgrade? As 6708 is

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Saku Ytti
On (2011-07-12 00:00 +0200), Robert Hass wrote: As 6708 is DFC-only (same as 6716) and cannot work in CFC due to lack of some bus ASICs. You cannot it use with 2T due to incompability DFC4 to DFC3. DFC4 is not supported at all at 67xx linecards. But there is special TMP program for 6708

Re: [c-nsp] Internet routing in a vendoe MPLS environment

2011-07-11 Thread Mark Tinka
On Tuesday, July 12, 2011 04:31:02 AM Rick Martin wrote: We advertise 4 full class B networks as /16's and one as two /17's. Our IP assignments are geographically distributed based on the Internet connection the customer will be using. Classful routing is long dead. So the correct notation

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Mark Tinka
On Tuesday, July 12, 2011 05:52:29 AM Peter Rathlev wrote: The Supervisor 2T provides backward compatibility with the existing WS-X6700 Series Linecards (with the exception of the WS-X6708-10G, which will be replaced by the new WS-X6908-10G, discussed later), as well as select WS-X6100

Re: [c-nsp] sup2T software release notes have hit

2011-07-11 Thread Mark Tinka
Having read through the SUP2T architecture, it seems to be shaping up to outperform a 7600 with an RSP720 + ES line cards, assuming everything works as advertised :-). Some of the line card compatibility madness may put a few customers off if they want to move to this new supervisor, but

Re: [c-nsp] IPv6 neighbor table via SNMP

2011-07-11 Thread Bruce D. Sidlinger
You may also find this page helpful: http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en -Bruce On Jul 11, 2011, at 2:26 PM, Tom Ammon wrote: Good call. Using the numeric OID works, so that confirms what the problem is. I'm going to show some SNMP ignorance here, but how do I

[c-nsp] Delivery reports about your e-mail

2011-07-11 Thread cf
Dear user of puck.nether.net, We have received reports that your account was used to send a huge amount of spam messages during the last week. Probably, your computer had been infected and now runs a trojaned proxy server. We recommend that you follow the instructions in order to keep your