Re: [c-nsp] BFD on port channel

2011-10-27 Thread umair saeed
Dear Zaid, You can use LACP for port-chanel failure detection if your router supports it. Thanks Best Regards, Umair SaeedAM IP Operations Core South , Pakistan Telecommunication Company Ltd, Phone # +92 333 2354591 Date: Tue, 25 Oct 2011 06:58:48 -0700 From: zaidoo...@yahoo.com To:

[c-nsp] 15.0(1)SY: IPv6 BGP neighbours remain idle

2011-10-27 Thread Matti Saarinen
I was brave (or stupid?) enough to try 15.0(1)SY on sup2t. It appears to work otherwise ok with our simple setup except IPv6 BGP. The neighbours remain in the idle state. When enabling debug bgp ipv6 unicast I see the algo following line in the logs: nbr global [...] Active open failed - route

Re: [c-nsp] 15.0(1)SY: IPv6 BGP neighbours remain idle

2011-10-27 Thread Phil Mayers
On 27/10/11 09:10, Matti Saarinen wrote: I was brave (or stupid?) enough to try 15.0(1)SY on sup2t. It appears to work otherwise ok with our simple setup except IPv6 BGP. The neighbours remain in the idle state. When enabling debug bgp ipv6 unicast I see the algo following line in the logs:

Re: [c-nsp] 15.0(1)SY: IPv6 BGP neighbours remain idle

2011-10-27 Thread Matti Saarinen
Phil Mayers wrote: Hmm. I just tried it with an iBGP neighbor on our test sup2T running 15.0(1)SY (talking to a sup720 running 12.2(33)SXJ1) Seems to work: Good to know it's not (completely) broken. Then there's quite likely something weird in my configs. Which IOS image are you running?

Re: [c-nsp] 15.0(1)SY: IPv6 BGP neighbours remain idle

2011-10-27 Thread Phil Mayers
On 27/10/11 10:45, Matti Saarinen wrote: Phil Mayers wrote: Hmm. I just tried it with an iBGP neighbor on our test sup2T running 15.0(1)SY (talking to a sup720 running 12.2(33)SXJ1) Seems to work: Good to know it's not (completely) broken. Then there's quite likely something weird in my

[c-nsp] ASR9k and A9K-8T-L architecture

2011-10-27 Thread Anton Turygin
Hello, We have an ASR9k with A9K-RSP-4G and A9K-8T-L installed. As per documentation: There are two fabric interface ASIC on each RSP. Each fabric interface ASIC provides 40 GB of throughput. Each line card (LC) has four 23 GB fabric channels on which to send traffic to the fabric ASICs. The

Re: [c-nsp] ASR9k and A9K-8T-L architecture

2011-10-27 Thread Mikael Abrahamsson
On Thu, 27 Oct 2011, Anton Turygin wrote: Does it mean that the A9K-8T-L will use 4x23=92Gbps to send traffic to the single RSP(limiting by 2x40Gb on the ASICs of the RSP)? Or should we have both RSPs (active and standby) installed to reach linerate throughput? The current generation ASR9K

Re: [c-nsp] 15.0(1)SY: IPv6 BGP neighbours remain idle

2011-10-27 Thread Daniel Verlouw
Hi, On Thu, Oct 27, 2011 at 10:10, Matti Saarinen mjsaa...@cc.helsinki.fi wrote: nbr global [...] Active open failed - route to peer is invalid I can ping the neighbour address from the router. Route and CEF tables agree on where the peer is. What am I missing here? Is there some specific

Re: [c-nsp] 15.0(1)SY: IPv6 BGP neighbours remain idle

2011-10-27 Thread Matti Saarinen
The problem is now solved. Thanks to Oliver Boehmer and also others who helped with this issue. I had fall-over configured for the v6 neighbours (I don't remember doing it so perhaps some IOS version had added it automatically). Because fall-over is not supported for v6 the sessions did not come

Re: [c-nsp] VPLS/Layer2 Egress Policing

2011-10-27 Thread Pavel Skovajsa
This is by design since the WS-6748 cards are for LAN environment. You would need to use either a SPA module, or better the ES cards: http://www.cisco.com/en/US/prod/collateral/routers/ps368/data_sheet_c78-49152.html -pavel On Tue, Oct 25, 2011 at 10:14 AM, ar ar_...@yahoo.com wrote: Hi Guys.

Re: [c-nsp] 6rd on ASR1k

2011-10-27 Thread Ruslan Pustovoytov
Excuse me for a long delay. I check all of my configuration on client and BR. In my lab I have no native 6RD client so I use Windows machine with some hack. My client is Windows7 and I use it's 6to4 adapter to emulate 6RD functionality. When I assign real IPv4 address to Local Area network

Re: [c-nsp] Alternate setup for better HA

2011-10-27 Thread Michele Bergonzoni
Il 27/10/2011 0.04, John Elliot ha scritto: Our usual setup would be to have a 2851 + 2960 as active, and manually copy the config across to the spare 2851+2960, and if one of the primary fails, it would require swapping cablesnot ideal. If the 2851s have independent connections to your

[c-nsp] Unable to transmit tagged frames over q-in-q tunnel

2011-10-27 Thread Gökhan Gümüş
Dear folks, I have an issue with one of our customer service. Gi0/5 Gi0/27 Gi5/13 Fa3/13 Customer SW Customer Edge Switch-A PE1 --MPLS Core --PE 2--Customer Edge

Re: [c-nsp] Unable to transmit tagged frames over q-in-q tunnel

2011-10-27 Thread Keegan Holley
Your diagram got mangled. I think your PE facing interface has to be a tunnel as well depending on the type of router you are connected to. Are you the provider or is the MPLS transport a managed service? Many platforms have a discard counter that may increment if it's dropping frames because

Re: [c-nsp] Unable to transmit tagged frames over q-in-q tunnel

2011-10-27 Thread Laurent Geyer
On Thu, Oct 27, 2011 at 12:41 PM, Keegan Holley keegan.hol...@sungard.comwrote: Your diagram got mangled. I think your PE facing interface has to be a tunnel as well depending on the type of router you are connected to. Assuming that the user port was an access port for vlan 1006 before,

Re: [c-nsp] Unable to transmit tagged frames over q-in-q tunnel

2011-10-27 Thread Keegan Holley
I wasn't the original poster. :) The PE platform and configuration is important here though. It has to know to send double tagged frames from the remote end. I know for Juniper PE routers we have to turn on q-tunneling on the switch to get it to work for example. 2011/10/27 Laurent Geyer

[c-nsp] Incomplete ARP entry

2011-10-27 Thread Faraz Syed
Hello Everyone, We have few wireless devices which connects to Cisco 6500 series router. We manage those wireless devices by using the trunk ports. We lose the management connectivity to certain hosts (wireless devices) for few hours and then it come back up by its own. Interesting thing is that

Re: [c-nsp] Unable to transmit tagged frames over q-in-q tunnel

2011-10-27 Thread Brian Raaen
Try setting the MTU to 1520 and enabling jumbo frames if you can. I had the same issue with q-in-q not passing dot1q and changing the mtu to 1520 solved it. --- Brian Raaen Network Architect Zcorum On Thu, Oct 27, 2011 at 06:28:36PM +0200, Gökhan Gümüş wrote: Dear folks, I have an issue

Re: [c-nsp] Incomplete ARP entry

2011-10-27 Thread Keegan Holley
Is it possible that the devices stop talking if they don't get any traffic? So there are two events that happen. One your device disappears, two the arp times out. They may not be happening at the same time though. Your network description is kind of vague so I'm not sure where to go from there.

[c-nsp] Smaller MPLS/EoMPLS capable router

2011-10-27 Thread Andrew K.
I've been waiting for my SE to get back to me on this but I wanted to ping the community to see what has been successfully used in the field. Proving WAN services in a remote rural area we have several small POP sites providing minimal customers (some 10 or less). We are looking to run MPLS

Re: [c-nsp] Smaller MPLS/EoMPLS capable router

2011-10-27 Thread Lars L. Christensen
You could take a look at the Metro Ethernet switches. Some of them might be suitable for your setup. Regards Lars Christensen CCIE #20292 Den 27-10-2011 20:41, Andrew K. skrev: I've been waiting for my SE to get back to me on this but I wanted to ping the community to see what has been

Re: [c-nsp] Incomplete ARP entry

2011-10-27 Thread Peter Rathlev
On Thu, 2011-10-27 at 13:47 -0400, Faraz Syed wrote: We have few wireless devices which connects to Cisco 6500 series router. s/router/switch/ ;-) We manage those wireless devices by using the trunk ports. We lose the management connectivity to certain hosts (wireless devices) for few hours

Re: [c-nsp] Unable to transmit tagged frames over q-in-q tunnel

2011-10-27 Thread Ivan
Hi, It would be useful to see your PE configuration and have details of the hardware and OS versions. I recently came across an issue like this when using ASR1001s as PEs. As far as I could tell the ASRs wouldn't match up a double tagged packet to an interface defined to match a single tag.

Re: [c-nsp] Smaller MPLS/EoMPLS capable router

2011-10-27 Thread Jon Harald Bøvre
http://www-au.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6557/prod_white_paper0900aecd8051fbdc.html 1841 (I would probably not use this in production as a SP) Also as Lars mentions: ME3600X Jon Harald Bøvre Sent from my iPad On 27. okt. 2011, at 20:59, Lars L. Christensen

Re: [c-nsp] Smaller MPLS/EoMPLS capable router

2011-10-27 Thread Peter Rathlev
On Thu, 2011-10-27 at 14:41 -0400, Andrew K. wrote: From my digging around the smallest device I can see supporting these features would be a 2811. Anyone use anything smaller? The 2801 will do MPLS too, at least with Enterprise Services or larger feature set AFAICT. I assume smaller is

Re: [c-nsp] Smaller MPLS/EoMPLS capable router

2011-10-27 Thread Martin Moens
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Andrew K. Subject: [c-nsp] Smaller MPLS/EoMPLS capable router From my digging around the smallest device I can see supporting these features would be a 2811. Anyone use

[c-nsp] Bulk Transport Between Regional POPs

2011-10-27 Thread cisconsp
Good evening everyone, We are on the verge of expanding our MPLS core outside several metro areas, across the pond into London as well as interconnecting the existing metro areas in the southeast, midwest, and mountain regions in north America. Today within a metro region we have been using

Re: [c-nsp] Alternate setup for better HA

2011-10-27 Thread John Elliot
If the 2851s have independent connections to your core, you can connect the second 2851 to the first 2960 (and the first 2851 to the second 2960), create the SVI interfaces with the same IP address as the first 2851, and keep them in shutdown. 2851's will connect to the rest of our

Re: [c-nsp] Smaller MPLS/EoMPLS capable router

2011-10-27 Thread Blake Dunlap
Ill second the 1921 i have 4 of them as such a function acting as entry core routers. -Blake On Oct 27, 2011 2:41 PM, Martin Moens mo...@carrier2carrier.com wrote: -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of

[c-nsp] Strange Cisco ASA5520 errors - Connection limit exceeded

2011-10-27 Thread Peter Adkins
Hi all, The scenario is that we have two 5520s for this environment configured for fail-over, these devices currently terminate a whopping 2x L2L IPSec VPNs and a handful of SSL VPN sessions. This morning we encountered a strange issue which was originally believed to be due to ACLs not

Re: [c-nsp] Strange Cisco ASA5520 errors - Connection limit exceeded

2011-10-27 Thread Thomason, Simon
Sh activation-key ASA# sh activation-key Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 150perpetual Inside Hosts : Unlimited perpetual Failover :

Re: [c-nsp] Strange Cisco ASA5520 errors - Connection limit exceeded

2011-10-27 Thread Peter Adkins
Hi Simon, There is no Premium Peers listed, the full output is as follows: Licensed features for this platform: Maximum Physical Interfaces: Unlimited Maximum VLANs : 150 Inside Hosts : Unlimited Failover : Active/Active VPN-DES