Re: [c-nsp] MSDP and my limited knowledge question

2012-09-04 Thread Phil Mayers
On 09/04/2012 09:12 AM, Adam Vitkovsky wrote: As Paul said IGMP register messages are supposed to be handled by the router elected as designated querier for the local subnet Though AFAIK IGMP register process is only used by the m-cast receivers not the sources For clarity, because I think you

Re: [c-nsp] MSDP and my limited knowledge question

2012-09-04 Thread Phil Mayers
On 09/03/2012 07:12 PM, Mihai Tanasescu wrote: b) if I put: 10.10.10.1/29 or /32 configured on S on a Loopback interface and on C4900: ip route 10.10.10.0 255.255.255.240 192.168.1.2 So, to be clear, you're doing this i.e. trying to source the multicast from a virtual IP: Linux: ip addr

[c-nsp] SFP port in 2960 series

2012-09-04 Thread Ataklti Teklehaymanot
I want to use the SFP port I have cisco switch 2960 with Version 12.2(50)SE and I have also GLC-LH-SM SFP transceiver When I plug the SFP transceiver without anything it gives me an error %GBIC_SECURITY_CRYPT-4-ID_MISMATCH: Identification check failed for GBIC in port Gi0/1

Re: [c-nsp] SFP port in 2960 series

2012-09-04 Thread Maarten Carels
On 4 Sep 2012, at 11:45 , Ataklti Teklehaymanot wrote: I want to use the SFP port I have cisco switch 2960 with Version 12.2(50)SE and I have also GLC-LH-SM SFP transceiver When I plug the SFP transceiver without anything it gives me an error %GBIC_SECURITY_CRYPT-4-ID_MISMATCH:

Re: [c-nsp] SFP port in 2960 series

2012-09-04 Thread Phil Mayers
On 04/09/12 10:52, Maarten Carels wrote: On 4 Sep 2012, at 11:45 , Ataklti Teklehaymanot wrote: I want to use the SFP port I have cisco switch 2960 with Version 12.2(50)SE and I have also GLC-LH-SM SFP transceiver When I plug the SFP transceiver without anything it gives me an error

Re: [c-nsp] MSDP and my limited knowledge question

2012-09-04 Thread Adam Vitkovsky
Oh yes I'm sorry for confusion thank you Phil for pointing that out What I meant when I said IGMP register messages was actually IGMP membership report message (commonly known as IGMP joins) IGMP membership report messages from local subnet are translated by the designated forwarder into PIM

Re: [c-nsp] MSDP and my limited knowledge question

2012-09-04 Thread Phil Mayers
On 04/09/12 12:00, Adam Vitkovsky wrote: What I meant when I said IGMP register messages was actually IGMP membership report message (commonly known as IGMP joins) Yeah, I guessed that ;o) Also to clarify IGMP querier is the router elected by PIM(igmp ver2/3) as a router that sends IGMP

Re: [c-nsp] NAT issue on ASR1K

2012-09-04 Thread M.Ahsan Khan
add extendable keyword for each command. ip nat inside source static tcp x.x.7.42 1720 interface Loopback12 1720 extendable Regards, M. Ahsan Khan. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Nasir Shaikh Sent:

Re: [c-nsp] ME3600X - Bridge Domain Routing with SVI

2012-09-04 Thread Reuben Farrelly
Hi Steve A few things to check: 1. You have vlan 200 created on the 3524 (the commands you have in the diagram will be permitted without the actual vlan existing on the switch) 2. You may need to set the q-in-q outer tag on the 3524 with the following commands on the Fa0/1 port:

Re: [c-nsp] MSDP and my limited knowledge question

2012-09-04 Thread Adam Vitkovsky
Ah I see :) guess I didn't remember that one correctly So it must have both been PIM responsibilities in IGMPver1 and since IGMPver2 - PIM is responsible for Designated Forwarder election and IGMP for Querier election adam -Original Message- From: Phil Mayers

[c-nsp] mpls label stack limit ???

2012-09-04 Thread Adam Vitkovsky
Is there an upper limit on the number of labels in the label stack on Cisco boxes please? Specifically ASRs and CRSs It appears there's a limit of on Juniper Thanks adam ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] ME3600X - Bridge Domain Routing with SVI

2012-09-04 Thread sthaug
2. You may need to set the q-in-q outer tag on the 3524 with the following commands on the Fa0/1 port: switchport mode dot1q-tunnel switchport access vlan 200 I don't believe the old 3500XL series (including the 3524) support QinQ. It may *work* :-) Steinar Haug, Nethelp consulting,

Re: [c-nsp] NAT issue on ASR1K

2012-09-04 Thread M.Ahsan Khan
Open TAC Case if failed after trying this. Regards, M. Ahsan Khan -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of M.Ahsan Khan Sent: Tuesday, September 04, 2012 4:25 PM To: 'Nasir Shaikh'; cisco-nsp@puck.nether.net

[c-nsp] Shared Secret Key Encryption in ACS appliance

2012-09-04 Thread Farooq Razzaque
Hi All, While adding AAA client in ACS there is a filed to put shared secret key which should be same on AAA client (Router,switch) as well. In ACS device, shared secret key is appared in plain text, I want to know is there any way to encrypt this key means shared secret key should be

Re: [c-nsp] ME3600X - Bridge Domain Routing with SVI

2012-09-04 Thread Steve McCrory
Hi Reuben, Thanks for the pointers. I can confirm that vlan 200 has been defined on the 3524. I can also confirm that the 3524 doesn't support q-in-q and I'm currently looking for at least a 3550 that may be lurking in stores somewhere. However, I'll provide a bit more information on what I'm

[c-nsp] bridging to second-dot1 vlan

2012-09-04 Thread Tony
Hi all, I have a situation where I would like to configure bridging on a 7609 from a normal VLAN interface to a double-tagged WAN interface. Configuration is like this: === int gig7/7 switchport trunk encap dot1g switchport trunk allowed vlan 202 int gig1/2/4.30570202  encapsulation dot1Q

Re: [c-nsp] mpls label stack limit ???

2012-09-04 Thread Pete Lumbis
If you are just talking about stack size, I think your only limit is MTU. If you are talking about the number of label that can be operated on, on a single device, that is going to be a limit of the platform/forwarding engine. -Pete On Tue, Sep 4, 2012 at 8:01 AM, Adam Vitkovsky

Re: [c-nsp] NAT issue on ASR1K

2012-09-04 Thread Brian Turnbow
Hi My inside local and inside global are unique addresses so the extendable keyword doesn't seem to be the solution. It is the port that the router is complaining about. Looks like it does not want to use the same port again even if it is associated with a separate IP address. Actually

Re: [c-nsp] bridging to second-dot1 vlan

2012-09-04 Thread Brian Turnbow
Hi Tony, -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Tony Sent: martedì 4 settembre 2012 15:24 To: cisco-nsp@puck.nether.net Subject: [c-nsp] bridging to second-dot1 vlan Hi all, I have a situation where I

Re: [c-nsp] NAT issue on ASR1K

2012-09-04 Thread Brian Turnbow
Hi -Original Message- From: Nasir Shaikh [mailto:na...@nasirshaikh.com] Sent: martedì 4 settembre 2012 16:19 To: Brian Turnbow; 'M.Ahsan Khan'; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] NAT issue on ASR1K Hi Brian, Thanks for your input. The router accepts the first two

[c-nsp] having a one-way vlan 1 stp issue....

2012-09-04 Thread Aaron
ce2 can't see ce1's stp config bpdu's. vtp and cdp are working however. ce2 and ce1 are connected via a mpls l2vpn (vpws)via me3600x and asr9k. -- ce1 -- ce1-top-crml#sh

Re: [c-nsp] having a one-way vlan 1 stp issue....

2012-09-04 Thread Aaron
I *can* ping and telnet from ce2 to ce1 over vlan 1...stp just not working. Appreciate any assistance Aaron ce2-realnocsh ip int br vl 1 Interface IP-Address OK? Method Status Protocol Vlan1 1.1.1.2 YES manual upup ce2-realnoc

Re: [c-nsp] bridging to second-dot1 vlan

2012-09-04 Thread Tony
Hi Brian, The 3750 would be the device removing the vlan tag If you want the 6500 to remove the tag the port needs to be an access port, not a trunk port. My assumption that the inner tag is not being manipulated properly is based on sniffing traffic on the 3550 (sorry, it's a 3550, not

Re: [c-nsp] NAT issue on ASR1K

2012-09-04 Thread M.Ahsan Khan
Yes you are right I overlooked your statements. I think you are hitting a bug here, try upgrading your ios as brian suggested. Regards, M. Ahsan Khan. -Original Message- From: Nasir Shaikh [mailto:na...@nasirshaikh.com] Sent: Tuesday, September 04, 2012 6:41 PM To: 'M.Ahsan Khan';

Re: [c-nsp] mpls label stack limit ???

2012-09-04 Thread Oliver Boehmer (oboehmer)
There is a limit how far an LSR can peek into the frame for loadsharing hash decisions (I recall 10 labels deep on the CRS). Other than that, the MTU is the limit. CRS can push a max of 7 labels onto the stack, ASR9k does 6.. Don't think there is any use-case (yet?) that would need to push that