Re: [c-nsp] Best IOS train for GSR128xx/PRP-2

2011-09-12 Thread David Freedman
On 10/09/11 00:39, Drew Weaver wrote: Howdy, I know the age of this router almost makes this an off-topic post =) I was wondering which version the few remaining folks that are running these beasts have found to be stable? Last I heard for straight IOS 12.0(33)S (latest number) was the

Re: [c-nsp] Basic IOS questions

2011-09-12 Thread Nick Hilliard
On 10/09/2011 14:09, Rolf Hanßen wrote: Isn't there a way just to switch the order ? pipe it to tail -r on unix. Obviously somebody at Cisco also thinks it could be comfortable, sh ip ospf events is ordered descent for example. ;) I'm not quite sure why you expect command consistency from a

Re: [c-nsp] etherchannel load-balancing WS-X6708 issue

2011-09-12 Thread Nick Hilliard
On 09/09/2011 12:33, Jiri Prochazka wrote: Primary box is 6500-1 (several hunderd Vlans and SVI's) and under standard circumstances Po1 is the only path utilized, but even if I freak out, I am not able to push more than aproximately 25 Gbps from 6500 over Po3 to edge-2. My initial guess was

Re: [c-nsp] IOS XR

2011-09-12 Thread Vitkovsky, Adam
Well you can always pay some extra $$$ for the 1+1 APS to improve the convergence times on the long-haul systems But still if the first aplifier on the TX path fails you'd still have to wait some time till the blackout reaches the RX site at the oter end of Pacific Than you'd just need to relay

[c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Persio Pucci
Hi folks, I am having some problems trying to figure out what could be causing UDP packets get out-of-sequence on some multicast streams (market data) between Sao Paulo and New York. There is no part of this path with parallel, load-balanced connections, which could be a obvious cause. What else

Re: [c-nsp] IOS XR

2011-09-12 Thread Rob Shakir
On 12 Sep 2011, at 11:45, Vitkovsky, Adam wrote: Well you can always pay some extra $$$ for the 1+1 APS to improve the convergence times on the long-haul systems But still if the first aplifier on the TX path fails you'd still have to wait some time till the blackout reaches the RX site at

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread David Rothera
How are you certain that there are no load balanced paths along the way? Even if there are none shown in your traceroutes there may still be routes in your providers network that are doing this (MPLS with propogate-ttl disabled) that would mean you wouldn't see it happening. Just my 2 cents...

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Persio Pucci
David, it's a POS OC12 SDH circuit we have, so unless the carrier is doing something funny SDH-wise, it's a sigle path... :/ On Mon, Sep 12, 2011 at 10:24 AM, David Rothera david.roth...@gmail.comwrote: How are you certain that there are no load balanced paths along the way? Even if there

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread David Rothera
kk, just wanted to check :) Sent from my iPad On 12 Sep 2011, at 14:28, Persio Pucci wrote: David, it's a POS OC12 SDH circuit we have, so unless the carrier is doing something funny SDH-wise, it's a sigle path... :/ On Mon, Sep 12, 2011 at 10:24 AM, David Rothera

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Dobbins, Roland
On Sep 12, 2011, at 6:38 PM, Persio Pucci wrote: Any ideas or tips? Is this across the Internet, or a WAN/VPN? Is there any intermediate device other than a router? --- Roland Dobbins rdobb...@arbor.net //

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Persio Pucci
Chris, there's no QoS anywhere on the path to avoid this kind of problems. As for the sequence being received right int the first place, we do have servers monitoring the channels in Sao Paulo and NY and we see gaps (out-of-sequence packets) only in NY. Giving a quick look at live capture I see

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Persio Pucci
Roland, it is a router-sdh-atlantic ocean-sdh-router circuit :) On Mon, Sep 12, 2011 at 10:41 AM, Dobbins, Roland rdobb...@arbor.netwrote: On Sep 12, 2011, at 6:38 PM, Persio Pucci wrote: Any ideas or tips? Is this across the Internet, or a WAN/VPN? Is there any intermediate device

[c-nsp] ZBFW and DHCP

2011-09-12 Thread Scott Voll
So I'm setting up a GRE IPSEC tunnel as my backup link with a 2821. I have also setup ZBFW on the outside interface. So far so good. BUT now the outside interface will not get a DHCP address from the ISP. How do I allow the Router to get a DHCP address? Did I miss something on the ZBFW

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Christopher.Marget
There is no part of this path with parallel, load-balanced connections, which could be a obvious cause. What else could I check? The packets do arrive, so they are not being dropped on the way, but they arrive out of sequence, being useless to the application. I've seen UDP packets (also

[c-nsp] Question about object tracking for failover on 1800 series

2011-09-12 Thread Scott Granados
Hi, I have the following basic setup. I have two different upstream paths one over ethernet which will not show a down interface if there's a failure. I am wanting to use object tracking on an 1800 series to remove the default route in the event of an upstream failure. I built the IP SLA

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Aaron
Might be something funny going on with APS, and if you are only seeing it at the NY end, then I would start at the NY landing station sonet equipment. Reason is, the NY Sonet equipment may be passing both data streams (working + protect) on occasion. I am making assumptions here that the local

Re: [c-nsp] Question about object tracking for failover on 1800 series

2011-09-12 Thread Peter Rathlev
On Mon, 2011-09-12 at 11:16 -0400, Scott Granados wrote: the command track 1 rtr reachability as suggested errors out and isn't even a valid set of options as suggested by the documentation. There are several configurations for differing software versions presented and none work. Have you

Re: [c-nsp] Question about object tracking for failover on 1800 series

2011-09-12 Thread Scott Granados
Just gave this a shot, no go. All I have is track 1 ip then the option route no sla here when selecting route it wants to have me add a route in cidr form with / notation. On Sep 12, 2011, at 1:07 PM, Peter Rathlev wrote: On Mon, 2011-09-12 at 11:16 -0400, Scott Granados wrote: the

Re: [c-nsp] Question about object tracking for failover on 1800 series

2011-09-12 Thread Peter Rathlev
On Mon, 2011-09-12 at 13:25 -0400, Scott Granados wrote: Just gave this a shot, no go. All I have is track 1 ip then the option route no sla here when selecting route it wants to have me add a route in cidr form with / notation. What software version and feature set are you using?

Re: [c-nsp] Question about object tracking for failover on 1800 series

2011-09-12 Thread Klaus Kastens
Hi Scott, track 1 ip then the option route no sla here What feature-set are you running? IIRC enhanced object tracking isn't supported in IP Base, you need at least Advanced Security. Best regards, Klaus Kastens -- Klaus Kastens NetUSE AG

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Lamar Owen
On Monday, September 12, 2011 07:38:38 AM Persio Pucci wrote: I am having some problems trying to figure out what could be causing UDP packets get out-of-sequence on some multicast streams (market data) between Sao Paulo and New York. You may know all of what I'm going to say below... but just

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Dobbins, Roland
On Sep 13, 2011, at 3:08 AM, Lamar Owen wrote: If the application relies on 100% in-order delivery, it shouldn't be using straight UDP. Or, it should have reasonable error-correction/tolerance for out-of-order packets. ;

Re: [c-nsp] ZBFW and DHCP

2011-09-12 Thread Hughes, Scott GRE-MG
Did you setup any zone-pairs involving the 'self' zone? If you don't use self zones, no additional configuration should be necessary for DHCP packets. On Sep 12, 2011, at 9:43 AM, Scott Voll svoll.v...@gmail.com wrote: So I'm setting up a GRE IPSEC tunnel as my backup link with a 2821. I

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Matthew Huff
I have also run into some hosts with optimized udp offloading and/or streams offloading that will send a small percentage of packets outbound out of order, especially on hosts that have IRQ balancing algos. So if the host is out of order -Original Message- From:

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Nick Hilliard
On 12/09/2011 21:08, Lamar Owen wrote: Quoting RFC 768 (User Datagram Protocol): This protocol provides a procedure for application programs to send messages to other programs with a minimum of protocol mechanism. The protocol is transaction oriented, and delivery and duplicate

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Persio Pucci
I'd like to thank you all for the input, although it really did not help much on getting those ducks in a row... :) This multicast stream is for market data, flowing from Brazil to the US, and although UDP was really not designed to ensure ordered, error-free packets, it looks like that the

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread cisconsp
Or someone should be out there developing mTCP (Multipoint TCP for multicast applications) requiring reliable delivery. There is a need for both reliable delivery, and multicast in the case of financial etc. John -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Troubleshoot UDP out-of-sequence

2011-09-12 Thread Kevin Loch
Persio Pucci wrote: Hi folks, I am having some problems trying to figure out what could be causing UDP packets get out-of-sequence on some multicast streams (market data) between Sao Paulo and New York. Are there any Juniper M160's in the path of the packets? Those were notorious for

Re: [c-nsp] RSP720 dropping ipsec packets

2011-09-12 Thread Cassidy Larson
Kevin, I had the exact same problem. We actually swapped out our RSP720 for a replacement. Unfortunately, the second one exhibited the same problems. Our third RSP720 did not, however. My vendor said he got both of the original two from the same dealer. I wonder if there was a bad batch of