Re: [c-nsp] Cisco VPN intermittent disconnects

2012-10-26 Thread John Kougoulos
It looks a bit strange that it takes 40 seconds to respond to the DPD requests and then they all come together? Is there any kind of QoS / wan accelerators in the path? Is this Ipsec over TCP? have you tried UDP? Regards, John On Thu, 25 Oct 2012, Joseph Mays wrote: We have a client on a

Re: [c-nsp] Cisco VPN intermittent disconnects

2012-10-26 Thread Matt Bettis
This one is a stretch... Where I had intermittent disconnects when using the vpn client. The location had wired and wireless. The user was connected to both and the vpn client worked great, execpt for random drops of the connection. Had them disconnect one of the connections and works great.

[c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Eric A Louie
Are sub-interfaces supported on the ME3600x? Or is there some special formula that I need to enable them? Cisco IOS Software, ME360x Software (ME360x-UNIVERSALK9-M), Version 15.2(4)S, RELEASE SOFTWARE (fc1) License Level: AdvancedMetroIPAccess License Type: Permanent interface

Re: [c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Jason Lixfeld
Service instances are Cisco's 2012 way of doing subinterfaces: conf t int g0/1 switchport mode trunk switchport trunk allowed vlan none service instance 100 ethernet encap dot1q 100 stuff things service instance 200 ethernet encap dot1q 200 stuff things On 2012-10-26, at 1:37 PM, Eric A Louie

Re: [c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Thomas Braun
Hi Eric, this is a switch. You have to configure a SVI Interface. conf t vlan 55 int vlan 55 ip add X.X.x.X if you want to use more vlans on a port you have to use switchport mode trunk and you should remobe the comannd switchport access vlan 55. Regards Thomas Are sub-interfaces supported

Re: [c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Waris Sagheer (waris)
sub interface is not supported but you can use SVI to achieve the same. -Waris On Oct 26, 2012, at 10:41 AM, Eric A Louie elo...@yahoo.com wrote: Are sub-interfaces supported on the ME3600x? Or is there some special formula that I need to enable them? Cisco IOS Software, ME360x

Re: [c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Eric A Louie
ok, that's great, thanks Jason. me3600-2(config-if)#service instance 55 eth me3600-2(config-if-srv)#ip addr 192.168.112.1 255.255.255.0 ^ % Invalid input detected at '^' marker. me3600-2(config-if-srv)#ip ? access-group Specify access control for packets dhcp

Re: [c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Jason Lixfeld
IIRC, you have to map a service instance to a bridge domain and create an SVI of the same BD value and apply the ip there. -- Sent from my mobile device On 2012-10-26, at 2:01 PM, Eric A Louie elo...@yahoo.com wrote: ok, that's great, thanks Jason. me3600-2(config-if)#service instance

Re: [c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Andrew K.
A downfall for using the SVI on the ME3600 is you can not apply an inbound/outbound policy map to the SVI. We are applying them on the layer 2 trunk interface, gets annoying when you can to aggregate the rate-limit between multiple interfaces. (as for version

[c-nsp] Config management

2012-10-26 Thread Dan Letkeman
Hello, Curious as to what everyone is using for config management for switches. I have a few hundred 2960's and 3560's to manage on a regular basis, and I would like to have something that can make mass config changes. Not really looking for anything to monitor them as I have that part covered.

Re: [c-nsp] Config management

2012-10-26 Thread Scott Voll
Solarwinds or Rancid. Scott On Fri, Oct 26, 2012 at 12:51 PM, Dan Letkeman danletke...@gmail.comwrote: Hello, Curious as to what everyone is using for config management for switches. I have a few hundred 2960's and 3560's to manage on a regular basis, and I would like to have something

Re: [c-nsp] Config management

2012-10-26 Thread Alan Buxey
Thousands of switches...we use our own local scripts to put config/verify/audit alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Config management

2012-10-26 Thread Michael Loftis
On Fri, Oct 26, 2012 at 1:01 PM, Scott Voll svoll.v...@gmail.com wrote: Solarwinds or Rancid. RANCID is really only good for config change monitoring out of the box...and it'd be a pretty big leap I think to get it to do actual configuration management. However, the clogin tool would be a place

Re: [c-nsp] Config management

2012-10-26 Thread Josh Baird
KIWI CatTools (now owned by Solarwinds, I think). On Fri, Oct 26, 2012 at 4:06 PM, Michael Loftis mlof...@wgops.com wrote: On Fri, Oct 26, 2012 at 1:01 PM, Scott Voll svoll.v...@gmail.com wrote: Solarwinds or Rancid. RANCID is really only good for config change monitoring out of the

Re: [c-nsp] Config management

2012-10-26 Thread Martin Clifton
Hi, As mentioned by others, Rancid is a popular tool for keeping track of configs. Someone wrote a simple script which hooks into components (clogin in particular) of Rancid to enable changes to multiple devices. You define a list of devices and create a command file where you put your required

Re: [c-nsp] Config management

2012-10-26 Thread Andrey Petrenko
Wrong url -- With best regards, Andrey 'sshd' Petrenko xmmp\gtalk: andy.petrenko at gmail.com skype: andy.petrenko web: http://sshd.by 26.10.2012, в 23:46, Martin Clifton martin.clif...@vu.edu.au написал(а): Hi, As mentioned by others, Rancid is a popular tool for keeping track of configs.

Re: [c-nsp] ME3600x sub-interfaces

2012-10-26 Thread Reuben Farrelly
On 27/10/2012 5:58 AM, Andrew K. wrote: A downfall for using the SVI on the ME3600 is you can not apply an inbound/outbound policy map to the SVI. You can apply inbound and outbound policy maps to a Service Instance though (which are the ports that are facing your customer): policy-map

Re: [c-nsp] LAG - Mode LACP Active on Cisco 7301 ?

2012-10-26 Thread .....::::[Gardener] ::::.....
http://www.ciscozine.com/2008/11/04/configuring-link-aggregation-with-etherchannel/ -- Zello: Garden4ever NO STRESS ECO ATTITUDE :D On Thu, Oct 25, 2012 at 11:50 AM, Olivier CALVANO o.calv...@gmail.comwrote: Hi One of my supplier want that i active LAG on my Cisco Router