Re: [c-nsp] ASR9K IRB/BVI on MOD80 LC

2012-09-26 Thread Oliver Boehmer (oboehmer)
Claes, Does anyone have a clue about the state of IRB/BVI on MOD80 (Typhoon) linecard? It's not listed as supported in the release notes (4.2.1), but ipv4 unicast seems to be working just fine, but not multicast as far as i have tried. Have someone else tested this? Hmm, it should work, I have

Re: [c-nsp] ASR9K IRB/BVI on MOD80 LC

2012-09-26 Thread Mikael Abrahamsson
On Wed, 26 Sep 2012, Claes Jansson wrote: And if i can't get BVI's to work, my only other option is to use a loop cable between two ports, one that has l3 subinterfaces on one side, and the other l2transport subinterfaces connected to the l2vpn bridge-domains? If this includes MPLS and

[c-nsp] ASR 1001 - CPU issue

2012-09-26 Thread ibogzipper iboge
Hello, we have migrated one 7206 VXR NPE - G2 to ASR 1001 but we have noticed the CPU always showing 0 - 1% ( 7206 VXR 40 - 70%) CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0% PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process 69 312909

Re: [c-nsp] ASR 9K Broadband Licence??

2012-09-26 Thread Frank Norman
Hello Claes I also thought so, but i am unable to find any official document stating this fact for ASR 9000 series. All i can found is this following link which says that BNG feature on ASR can be enabled with A9K-BNG-LIC-8K licence

Re: [c-nsp] ASR 1001 - CPU issue

2012-09-26 Thread Nick Hilliard
On 26/09/2012 10:01, ibogzipper iboge wrote: is it normal to have 1% cpu with 800 Mbps duplex ? just pure routing QOS . is there any other OID's we can monitor ? the asr1k is a hardware forwarding platform. In practice this means that the forwarding mechanism on the router is separate to the

Re: [c-nsp] ASR 1001 - CPU issue

2012-09-26 Thread Tassos Chatzithomaoglou
Use the following to get a better idea. *show platform software status control-processor brief * -- Tassos On 26/9/2012 10:51 ??, Nick Hilliard wrote: On 26/09/2012 10:01, ibogzipper iboge wrote: is it normal to have 1% cpu with 800 Mbps duplex ? just pure routing QOS . is there any other

Re: [c-nsp] ASR 9K Broadband Licence??

2012-09-26 Thread Tassos Chatzithomaoglou
Last time i checked, you had to buy packs of 8k. Probably there will be new packs (Nx8k) after a while, like in asr1k. -- Tassos On 26/9/2012 10:32 πμ, Frank Norman wrote: Hello Claes I also thought so, but i am unable to find any official document stating this fact for ASR 9000 series. All

Re: [c-nsp] ASR 1001 - CPU issue

2012-09-26 Thread ibogzipper iboge
Thanks for the information, Anyone graphing the ESP / RP cpu any hint for the OID . Regards, Ragu I think following links havinging good information , https://supportforums.cisco.com/thread/2133112 http://www.cisco.com/en/US/products/ps9343/products_tech_note09186a0080af2d14.shtml On Wed, Sep

Re: [c-nsp] ASR9K IRB/BVI on MOD80 LC

2012-09-26 Thread Claes Jansson
Well, what I'm trying to do is to route multicast traffic coming from an upstream iptv supplier. And i might be doing something very wrong here, this is my first time configuring an ASR9k :-) In short, recieve it on bvi400 (the peering interface gi0/0/0/9 l2transport connected to a l2vpn

Re: [c-nsp] ASR 1001 - CPU issue

2012-09-26 Thread Lustgraaf, Paul J [ITNET]
Try 1.3.6.1.4.1.9.9.715.1.1.6.1.14.9027.3 for the ESP Quantum Flow processor. That's the one that does all the work. Paul Lustgraafgr...@iastate.edu Change is inevitable. Progress is not. Network Engineer, Iowa State University IT Services

Re: [c-nsp] ASR 9K Broadband Licence??

2012-09-26 Thread Sigurbjörn Birkir Lárusson
If you have two ASR9k in a cluster, both with one 8k license, take one node in the cluster down, can the other one still take 16k users or is there an actual enforcement of this license? Kind regards, Sibbi On 26.9.2012 09:13, Tassos Chatzithomaoglou ach...@forthnetgroup.gr wrote: Last time i

[c-nsp] asr9k forwarding between pw's in a bridge-domain

2012-09-26 Thread Aaron
i'm seeing devices downstream on these 2 pw's seeing each others' stp conf bpdus'ssince one of the devices is locking in on the other as root bridge. I thought pw's didn't allow for certain types of forwarding between them by defaultrecall something related to shg's (split horizon groups

Re: [c-nsp] asr9k forwarding between pw's in a bridge-domain

2012-09-26 Thread Aaron
I think this explains it... By default, split horizon is enabled for pseudowires under the same VFI. However, in the default configuration, split horizon is not enabled on the attachment circuits (interfaces or pseudowires).

[c-nsp] Juniper Independent Domains

2012-09-26 Thread Nick Griffin
Anyone know of the cisco equivlant? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] 7600 lan cards output drop statistics

2012-09-26 Thread MKS
Hi Is there a mib for the following statistic? (drop per queue) sh queueing interface g3/xx ... Packets dropped on Transmit: queue dropped [cos-map] - 120600 [0 ] 2 620 [1 2 ] 3

[c-nsp] server room clearances

2012-09-26 Thread harbor235
Can anyone tell me the requirements for rack clearances in all directions when building server rooms (too small for datacenter size) I seem to remember 3 feet in any direction? Of course you have equipment loading and unloading so front and back clearances may be different? Mike

[c-nsp] Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerability Advisory ID: cisco-sa-20120926-cucm Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability Advisory ID: cisco-sa-20120926-sip Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco IOS Software Malformed Border Gateway Protocol Attribute Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS Software Malformed Border Gateway Protocol Attribute Vulnerability Advisory ID: cisco-sa-20120926-bgp Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco IOS Software DHCP Denial of Service Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS Software DHCP Denial of Service Vulnerability Advisory ID: cisco-sa-20120926-dhcp Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT) +- Summary

[c-nsp] Cisco Security Advisory: Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability Advisory ID: cisco-sa-20120926-ios-ips Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Service Vulnerability Advisory ID: cisco-sa-20120926-ecc Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco IOS Software Tunneled Traffic Queue Wedge Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS Software Tunneled Traffic Queue Wedge Vulnerability Advisory ID: cisco-sa-20120926-c10k-tunnels Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS Software Network Address Translation Vulnerabilities Advisory ID: cisco-sa-20120926-nat Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT) +- Summary

[c-nsp] Cisco Security Advisory: Cisco IOS Software DHCP Version 6 Denial of Service Vulnerability

2012-09-26 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco IOS Software DHCP Version 6 Server Denial of Service Vulnerability Advisory ID: cisco-sa-20120926-dhcpv6 Revision 1.0 For Public Release 2012 September 26 16:00 UTC (GMT

Re: [c-nsp] server room clearances

2012-09-26 Thread Justin M. Streiner
On Wed, 26 Sep 2012, harbor235 wrote: Can anyone tell me the requirements for rack clearances in all directions when building server rooms (too small for datacenter size) I seem to remember 3 feet in any direction? Of course you have equipment loading and unloading so front and back clearances

Re: [c-nsp] server room clearances

2012-09-26 Thread Seth Mattinen
On 9/26/12 8:41 AM, harbor235 wrote: Can anyone tell me the requirements for rack clearances in all directions when building server rooms (too small for datacenter size) I seem to remember 3 feet in any direction? Of course you have equipment loading and unloading so front and back clearances

Re: [c-nsp] server room clearances

2012-09-26 Thread Gert Doering
Hi, On Wed, Sep 26, 2012 at 10:04:57AM -0700, Seth Mattinen wrote: 3' in back and 4' in front. Those being inch, yard, feet, or what? I guess it's feet... so roughly 1m, right? gert -- USENET is *not* the non-clickable part of WWW!

Re: [c-nsp] server room clearances

2012-09-26 Thread Seth Mattinen
On 9/26/12 10:17 AM, Gert Doering wrote: Hi, On Wed, Sep 26, 2012 at 10:04:57AM -0700, Seth Mattinen wrote: 3' in back and 4' in front. Those being inch, yard, feet, or what? I guess it's feet... so roughly 1m, right? My apologizes, ' is an alternate abbreviation for foot.

[c-nsp] Security Advisories for DHCP

2012-09-26 Thread Dirk Woellhaf
Hi, Is there a general problem with Cisco and DHCP? Did get a lot of SA's regarding DHCP and nearly any OS! ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] 6vpe - me3600x

2012-09-26 Thread Aaron
I have 15.2(4)S on my me3600x so I'm ready to test 6vpe. I'm seeing that there isn't really a way to enable ipv6 under the regular vrf definition ip vrf one syntax.. But I do see that vrf definition one has address-family v4 and v6 under it.. I didn't know how to migrate vrf structures of

Re: [c-nsp] 6vpe - me3600x

2012-09-26 Thread Jason Lixfeld
Not sure I quite understand what you're asking, but I'll share some ME3600/6VPE related foo from a similar exercise I went through last week. I found that I had to use 'vrf upgrade-cli multi-af-mode non-common-policies' to get the v6 address-family configurable within a VRF instance. Not sure

Re: [c-nsp] Security Advisories for DHCP

2012-09-26 Thread cnsp
Hi, Is there a general problem with Cisco and DHCP? Did get a lot of SA's regarding DHCP and nearly any OS! Just starting at IOS 12.5 aehm 15.0 , They claim that the 12.0 12.2 12.3 12.4 based releases are not affected. Juergen. ___ cisco-nsp

Re: [c-nsp] 6vpe - me3600x

2012-09-26 Thread Peter Rathlev
On Wed, 2012-09-26 at 15:03 -0500, Aaron wrote: I didn't know how to migrate vrf structures of ip vrf one to vrf definition one so I just went at it to see how smoothly I could make this happen. someone please tell me if there was a better way or if anything I mentioned is misunderstood on my

Re: [c-nsp] 6vpe - me3600x

2012-09-26 Thread Aaron
That's exactly what I was asking! Thanks Jason *** not shown here , I reverted my vrf one definition back to the legacy mode so I could see this process run through very nice...one thing I see is that it added an additional helper under my svi's ... why ? ip helper-address global

Re: [c-nsp] 6vpe - me3600x

2012-09-26 Thread Aaron
Yep, works and no pings dropped when I ran it Thanks Peter Aaron -Original Message- From: Peter Rathlev [mailto:pe...@rathlev.dk] Sent: Wednesday, September 26, 2012 3:23 PM To: Aaron Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 6vpe - me3600x On Wed, 2012-09-26 at 15:03

Re: [c-nsp] 6vpe - me3600x

2012-09-26 Thread Peter Rathlev
On Wed, 2012-09-26 at 15:44 -0500, Aaron wrote: *** not shown here , I reverted my vrf one definition back to the legacy mode so I could see this process run through very nice...one thing I see is that it added an additional helper under my svi's ... why ? ip helper-address global

[c-nsp] 1000BASE-BX

2012-09-26 Thread Tim Durack
1000BASE-BX-U connects to 1000BASE-BX-D, no problem there. Is there a general standard for installation, like 1000BASE-BX-U is installed in the Upstream equipment, 1000BASE-BX-D is installed in the Downstream equipment? That would make sense, but I'd rather not find out I'm deploying these the

Re: [c-nsp] 1000BASE-BX

2012-09-26 Thread Blake Dunlap
Yep that's exactly what u and d mean and why they are used. -Blake On Sep 26, 2012 4:06 PM, Tim Durack tdur...@gmail.com wrote: 1000BASE-BX-U connects to 1000BASE-BX-D, no problem there. Is there a general standard for installation, like 1000BASE-BX-U is installed in the Upstream equipment,

Re: [c-nsp] 1000BASE-BX

2012-09-26 Thread Tim Durack
On Wed, Sep 26, 2012 at 5:09 PM, Blake Dunlap iki...@gmail.com wrote: Yep that's exactly what u and d mean and why they are used. That's what I figured, but I've not found a reference anywhere. Didn't want to find out later that most people took U as meaning facing towards Upstream or something

Re: [c-nsp] 1000BASE-BX

2012-09-26 Thread Peter Rathlev
On Wed, 2012-09-26 at 17:13 -0400, Tim Durack wrote: On Wed, Sep 26, 2012 at 5:09 PM, Blake Dunlap iki...@gmail.com wrote: Yep that's exactly what u and d mean and why they are used. That's what I figured, but I've not found a reference anywhere. Didn't want to find out later that most

Re: [c-nsp] 6vpe - me3600x

2012-09-26 Thread Aaron
Sweet, you can go backwards too! No pings dropped noc-3600#conf t noc-3600(config)#no vrf upgrade-cli multi-af-mode non-common-policies vrf two You are about to downgrade to the single-AF VRF syntax commands. You will lose any IPv6 address configured on interfaces belonging to downgraded VRFs.

Re: [c-nsp] QoS and Router Originated Traffic

2012-09-26 Thread Ivan
Hi, I have had a lot of similar feedback. I have found * Changing the IP precedence via ip local policy route-map doesn't directly set the COS - the locally generated traffic doesn't have a 802.1q header to contain the 802.1p bits. Depending on the platform (and probably other stuff) the IP

[c-nsp] ME3600X Local Connect

2012-09-26 Thread Ivan
Hi, Does anyone know if it is possible to configure local connect on the ME3600X? The closest I have found is hairpinning http://www.cisco.com/en/US/docs/switches/metro/me3600x_3800x/software/release/15.2_4_S/configuration/guide/swevc.html#wp1051612 This uses bride domains and seems to have

Re: [c-nsp] Advanced Metro license, ME-3600

2012-09-26 Thread Ivan
Hi, My experience is that any ME3600Xs ordered with licences have come with the license pre installed. Ivan Hey folks, I'm trying to get the straight scoop on the licensing issue I received an ME 3600x from my reseller, without the Advanced Metro license.  I did order the license from

Re: [c-nsp] ME3600X Local Connect

2012-09-26 Thread Andrew K.
Connect does exist but you can't use it with a bridge domain. The connect command is only used for two service instances. If you need to link three or more that traffic must be switched, so then just use a bridge-group. Connect example Switch (config)# interface gigabitethernet0/2 Switch

Re: [c-nsp] ME3600X Local Connect

2012-09-26 Thread Ivan
Just connecting 2 service instances is all I would like to do. What IOS are you running. I am unable to you the connect command. I am using me360x-universalk9-mz.152-4.S interface GigabitEthernet0/11 switchport trunk allowed vlan none switchport mode trunk service instance 1 ethernet

[c-nsp] Change BGP default-originate to IGP?

2012-09-26 Thread Tom Lanyon
Hi list, In an enterprise network I have a core of 4900Ms with a few ASR1ks hanging off to handle upstream connectivity. As an example: Upstream1 - [ASR1k]--[4900M]--[4900M]--[ASR1k] - Upstream2 || || Servers

Re: [c-nsp] 1000BASE-BX

2012-09-26 Thread Tim Durack
On Wed, Sep 26, 2012 at 5:47 PM, Peter Rathlev pe...@rathlev.dk wrote: On Wed, 2012-09-26 at 17:13 -0400, Tim Durack wrote: On Wed, Sep 26, 2012 at 5:09 PM, Blake Dunlap iki...@gmail.com wrote: Yep that's exactly what u and d mean and why they are used. That's what I figured, but I've not

Re: [c-nsp] ASR IPv6 image

2012-09-26 Thread Tom Lanyon
On 17/09/2012, at 9:41 PM, Nikolay Shopik wrote: Hey, Just wondering does ASR routers need advanced ip services to route IPv6 traffic? Feature navigator report mostly says yes, as IPv6 support on base image is pretty much limited or better say non-existent. Can anyone confirm/deny? We

Re: [c-nsp] Change BGP default-originate to IGP?

2012-09-26 Thread David Prall
Why not use selective advertisement of the default based on receiving a specific route from your carrier or an upstream you know to be stable. http://www.cisco.com/en/US/docs/ios/12_3/iproute/command/reference/ip2_n1g.h tml#wp1037042 David -- http://dcp.dcptech.com -Original Message-

Re: [c-nsp] Change BGP default-originate to IGP?

2012-09-26 Thread Tom Lanyon
Is there a specific order in which BGP updates are sent/exchanged/processed? The concern I have with tracking upstream routes is that the route tracked would need to be one of the last routes received (if not the last) to ensure that the router has full visibility. This seems quite