Re: [c-nsp] ASR901 EoMPLS Customer COS bits trashed

2012-10-10 Thread George Giannousopoulos
Hello Caillin, We have also seen some issues with the ASR901 QoS In fact the config is very restricting at the moment.. What I know for sure is that the ingress cos markings are copied to the MPLS EXP bit, so you can try to remark your customer traffic at the other end George On Wed, Oct 10,

Re: [c-nsp] Half duplex VRF

2012-10-10 Thread Hitesh Vinzoda
Hi Arie, Below is the desired excerpt. We can't see the VRF config being applied to the interfaces but its visible in show ip int virtual-access. I have tried two different way in RADIUS attributes but the results are the same. LNS#show ppp all Interface/ID OPEN+ Nego* Fail- StagePeer

Re: [c-nsp] IOS archive in addition to RANCID

2012-10-10 Thread Michele Bergonzoni
Il 10/10/2012 2.52, Ian Henderson wrote: * Having two methods ensures that if one method breaks, we still have useful logs/archives. This is particularly nice in our environment I particularly appreciate this design principle. Please consider doing a periodic SCP of important files which

Re: [c-nsp] IOS archive in addition to RANCID

2012-10-10 Thread Phil Mayers
On 10/10/2012 01:52 AM, Ian Henderson wrote: Hi folks, I'm working on updating our base templates using some more modern features and am considering if IOS' built in configuration archiver/change logger have a place in our network. Is anybody using the config archiver in addition to/in place

Re: [c-nsp] IOS archive in addition to RANCID

2012-10-10 Thread Ian Henderson
On 10/10/2012, at 8:16 PM, Phil Mayers p.may...@imperial.ac.uk wrote: TBH I'm not really sure what you're asking. Yep, sorry was a bit of a brain dump. :) Thanks for your comments. This basically tells me that archive doesn't have any super awesome features that we don't already get from

[c-nsp] Not a valid host address error

2012-10-10 Thread h bagade
Hi all, I want to know in what condition this error occurres when defining ip addresses on interfaces? I test many IP addresses and diverse error messages happens which I don't know the reasons. Is there any reference which I could find the invalid pattern of ip addresses? some of my tests are:

Re: [c-nsp] Not a valid host address error

2012-10-10 Thread Gert Doering
Hi, On Wed, Oct 10, 2012 at 04:08:03PM +0330, h bagade wrote: I want to know in what condition this error occurres when defining ip addresses on interfaces? I test many IP addresses and diverse error messages happens which I don't know the reasons. Is there any reference which I could find

Re: [c-nsp] IOS archive in addition to RANCID

2012-10-10 Thread heasley
Wed, Oct 10, 2012 at 10:16:09AM +0100, Phil Mayers: * With a sizeable RANCID installation, collection interval needs to be pushed out to 4 hours plus, which means we could miss changes within the interval. Really? We use a home-grown system for this, and back up 1200 devices every hour.

[c-nsp] Traffic shaping does not work (and is not supported) on Port-Channel interfaces on Software based routers

2012-10-10 Thread Joe Maimon
All, FYI, yet another occurrence of Cisco TAC coming to the conclusion that yes it does not work, and no, they dont have to fix it, because they have decided that it is not supported. Is it an unreasonable expectation to expect product features to interoperate unless clearly stated that

Re: [c-nsp] Traffic shaping does not work (and is not supported) on Port-Channel interfaces on Software based routers

2012-10-10 Thread Gert Doering
Hi, On Wed, Oct 10, 2012 at 10:05:50AM -0400, Joe Maimon wrote: Is it an unreasonable expectation to expect TAC support contracts to deliver results and resolutions instead of yet another thing we wont support? But they *do* deliver results. Documentation gets updated all the time,

Re: [c-nsp] Traffic shaping does not work (and is not supported) on Port-Channel interfaces on Software based routers

2012-10-10 Thread Joe Maimon
Gert Doering wrote: Hi, On Wed, Oct 10, 2012 at 10:05:50AM -0400, Joe Maimon wrote: Is it an unreasonable expectation to expect TAC support contracts to deliver results and resolutions instead of yet another thing we wont support? But they *do* deliver results. Documentation gets updated

Re: [c-nsp] Traffic shaping does not work (and is not supported) on Port-Channel interfaces on Software based routers

2012-10-10 Thread Alan Buxey
Of all things Cisco is good at, pissing of its users ranks #1 on the list. I'm hoping that their move to concentrate on switching and core business rather than eg digital cameras (what were they thinking with that? Did John Chambers ask his PA to buy a flip video and it was misheard?) will

Re: [c-nsp] Traffic shaping does not work (and is not supported) on Port-Channel interfaces on Software based routers

2012-10-10 Thread Gert Doering
Hi, On Wed, Oct 10, 2012 at 11:10:55AM -0400, Joe Maimon wrote: Of all things Cisco is good at, pissing of its users ranks #1 on the list. *That* seems to be what they really mastered in the last 10 years. (Now what I'm not sure is what the piss-of-customers-BU is competing with, seeems I

[c-nsp] 7200 npe-g2 lacp

2012-10-10 Thread Darren O'Connor
I can see this platform supports etherchannel, but does it support lacp? I think now, but wanted to check Thanks Darren ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in the Cisco WebEx Recording Format Player

2012-10-10 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Multiple Vulnerabilities in the Cisco WebEx Recording Format Player Advisory ID: cisco-sa-20121010-webex Revision 1.0 For Public Release 2012 October 10 16:00 UTC (GMT

[c-nsp] MPLS on 6500 VSS - Any major issues?

2012-10-10 Thread Dikkema, Michael (Business Technology)
I'm about to setup MPLS and MPLS VPN on a set of 6500 VSS systems shortly. I was wondering if there are any obvious gotchas that I should be concerned about. We're not doing MPLS-TE or QoS here, pretty straight forward setup. Got this error message configuring BGP for a VRF before 'mpls ip' was

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module

2012-10-10 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Multiple Vulnerabilities in Cisco Firewall Services Module Advisory ID: cisco-sa-20121010-fwsm Revision 1.0 For Public Release 2012 October 10 16:00 UTC (GMT) - -- Summary

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

2012-10-10 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20121010-asa Revision 1.0 For Public Release 2012 October 10 16:00 UTC (GMT

Re: [c-nsp] Traffic shaping does not work (and is not supported) on Port-Channel interfaces on Software based routers

2012-10-10 Thread Daniel Verlouw
On Wednesday, October 10, 2012 at 5:21 PM, Gert Doering wrote: (Now what I'm not sure is what the piss-of-customers-BU is competing with, seeems I don't understand the grand master plan yet) JTAC? :P --Daniel. ___ cisco-nsp mailing list

Re: [c-nsp] Traffic shaping does not work (and is not supported) on Port-Channel interfaces on Software based routers

2012-10-10 Thread Phil Mayers
On 10/10/12 15:48, Gert Doering wrote: Hi, On Wed, Oct 10, 2012 at 10:05:50AM -0400, Joe Maimon wrote: Is it an unreasonable expectation to expect TAC support contracts to deliver results and resolutions instead of yet another thing we wont support? But they *do* deliver results.

Re: [c-nsp] Half duplex VRF

2012-10-10 Thread Arie Vayner (avayner)
So basically your PPP connections are in the global routing table... What is the profile you are downloading from RADIUS (debug radius) for them? You most likely should be downloading the ip vrf forwarding U downstream D command using the RADIUS attribute lcp:interface-config=ip vrf forwarding U

[c-nsp] %IPC-2-INVALIDZONE: Invalid IPC Zone 0x60000000 on WS-C3750X-24P-S

2012-10-10 Thread Peter Kranz
Anyone else seeing these on 3750X's from time to time? Running 15.0(1)SE3 Oct 9 19:49:25.728 PDT: %IPC-2-INVALIDZONE: Invalid IPC Zone 0x6000. -Traceback= 545BFCz CDDE70z 5AD80z 5AE68z 284DA88z 28478FCz Peter Kranz Founder/CEO - Unwired Ltd http://www.unwiredltd.com/

[c-nsp] Clocking for T1's on AS5400 virtually guarantees slips?

2012-10-10 Thread Joseph Mays
Okay, so here's where we stand after working on this for a few days. We have several circuits that are coming into an AS5400 that are getting slips, whereas most of them don't. Most of the circuits come in as T1 channels on a T3. Most of those don't get slips, some do. We also have two t1

Re: [c-nsp] Clocking for T1's on AS5400 virtually guarantees slips?

2012-10-10 Thread Scott Granados
I could be smoking crack here so I apologize if I'm wrong but doesn't the local Telco provide clock on all T1s that you can recover? Even in the case where you're providing PRI service doesn't the local loop the carrier provides contain line clocking that you can recover? What am I missing?

Re: [c-nsp] 7200 npe-g2 lacp

2012-10-10 Thread cnsp
-Ursprüngliche Nachricht- Von: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] Im Auftrag von Darren O'Connor Gesendet: mercredi 10 octobre 2012 17:53 An: cisco-nsp@puck.nether.net Betreff: [c-nsp] 7200 npe-g2 lacp I can see this platform supports

Re: [c-nsp] Not a valid host address error

2012-10-10 Thread h bagade
Thanks all. Thanks Gert for your complete answer. It cleared the vague parts but one still remains! what about ip address like 0.2.3.1 255.255.255.0! what's the rule for this one? On Wed, Oct 10, 2012 at 4:25 PM, Gert Doering g...@greenie.muc.de wrote: Hi, On Wed, Oct 10, 2012 at 04:08:03PM

Re: [c-nsp] Change BGP default-originate to IGP?

2012-10-10 Thread Tom Lanyon
Thanks for the tips, we'll have a play with some of the options suggested around originating the default. On 05/10/2012, at 11:52 AM, Anton Kapela wrote: also +1 to inter-border router ibgp sessions over some other layer2 path/port pair/etc -- one should always have that, unless you can't for

Re: [c-nsp] Change BGP default-originate to IGP?

2012-10-10 Thread David Prall
-Original Message- From: Tom Lanyon [mailto:tom+c-...@oneshoeco.com] I'm glad a iBGP session between the ASRs over a GRE tunnel was mentioned, as that's exactly what we have running and I was questioning whether this was a bad practice or not... Thanks, Tom [dprall] It's the Duct Tape

Re: [c-nsp] Not a valid host address error

2012-10-10 Thread Richard Golodner
On Wed, 2012-10-10 at 23:55 +0330, h bagade wrote: what about ip address like 0.2.3.1 255.255.255.0! what's the rule for this one? that one is in the book as well. richard ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Feedback for ES Cards

2012-10-10 Thread Kshitiz Singhal
Hello Friends,   I have recently joined this group and working with telecom company in India.   I would like to know your feedback for Cisco 20 ports ES  Ethernet cards, we are using these cards for trunk connectivity with swich and fould lots of limitation wrt QOS policy, its resources get

Re: [c-nsp] Half duplex VRF

2012-10-10 Thread Hitesh Vinzoda
Hi Arie, This is already in place and the virtual-access interfaces belongs to this vrf and so do their PPP host router. This routes are not visible in upstream vrt U which is great but these routes do appear in Downstream vrf D so that is the reason they route locally and doesnt go towards hub