Re: [c-nsp] L2 car/policing on C3560X (IOS 15.0(1)SE3, ip services licence)

2013-01-14 Thread Terry Cheema
Yes, you should be able to do that, but on 3560/3750 I think there's a limitation, it's not going to show the output of show policy-map interface correctly. You can use show mls qos int g0/4 instead - it should give you a view of whats going on... Another thing, By default qos is disabled on

Re: [c-nsp] CLNS/IS-IS routes

2013-01-14 Thread Adam Vitkovsky
But Oran does not seem receive from Algiers any of its 6 CLNS neighbors (and that includes the server): I'd check the ISIS database on Oran to see whether it received an LSP from each of the Algiers. Than you can check for the verbose output to see whether the particular LSP contains all

Re: [c-nsp] CLNS/IS-IS routes

2013-01-14 Thread Vincent De Keyzer
Hi Adam, thanks for the quick answer. About the ES role of the server: Alcatel confirmed that their servers indeed need to be configured as ISes (which I agree sounds strange). By each of the Algiers, you mean that I should see rtrnal01 more than once in the list below, like rtrmar01 and

Re: [c-nsp] CLNS/IS-IS routes

2013-01-14 Thread Peter Lothberg
Hello all, We are currently troubleshooting an old, badly-documented, non-supported, CLNS/IS-IS network (for management of Alcatel NEs). One of the issues we have identified is IS-IS routes not being announced by one router to another (this might or might not explain the overall

Re: [c-nsp] show command for active multicast kbps rate

2013-01-14 Thread Erçin TORUN
the command is show mrib route rate. I've forgot to add rate to the end tp# show mfib route rate 233.88.168.176 IP Multicast Forwarding Rates Source Address, Group Address HW Forwarding Rates: bps In/pps In/bps Out/pps Out (x.x.x.x 233.88.168.176) bps_in /pps_in /bps_out /pps_out 1898751 / 175

Re: [c-nsp] CLNS/IS-IS routes

2013-01-14 Thread Adam Vitkovsky
I'm sorry to confuse you I thought there are more ALG routers On ORA you can see that ALG originated and advertised 3 LSPs I see you mentioned some LSPs are not being propagated I'm thinking maybe some area discrepancy in the net id Please note the 49. or 47. should be the same on

[c-nsp] unable to route traffic over ipsec/gre tunnels - HELP!

2013-01-14 Thread false
I have an issue where I can get traffic to pass from HDQ to two branch offices over our ipsec/gre tunnels even though the tunnels appear to be UP. The HDQ is a 2811, branch 1 is a home office using an 871W and branch 2 runs a 2801 router. I initially had HDQ working fine with the 871W

Re: [c-nsp] unable to route traffic over ipsec/gre tunnels - HELP!

2013-01-14 Thread Nick Hilliard
On 14/01/2013 14:59, false wrote: I initially had HDQ working fine with the 871W (Branch-1) but when I configured branch2 (2801), they both broke. Can you ping the endpoints of each tunnel? Nick The tunnels appear to be up but traffic is not routing across them. The two 2801 routers run

[c-nsp] default policing interval in ms on cisco devices

2013-01-14 Thread Adam Vitkovsky
My google foo let me down on this one, so I thought maybe someone here would know the answer I'm specifically interested in integrated services routers and me3600x/cx Appreciate any pointers Thanks upfront adam ___ cisco-nsp mailing list

Re: [c-nsp] show command for active multicast kbps rate

2013-01-14 Thread Aaron
Sh mfib route rate Thanks! Aaron From: Erçin TORUN [mailto:ercinto...@gmail.com] Sent: Monday, January 14, 2013 6:18 AM To: John Neiberger Cc: Aaron; Adam Vitkovsky; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] show command for active multicast kbps rate the command is show mrib

Re: [c-nsp] default policing interval in ms on cisco devices

2013-01-14 Thread Aaron
Isn't that the tc value? I don't believe tc (time interval) is able to be directly configured but rather indirectly configured via bc and/or cir values within the mqc contracts and such. tc=bc/cir something about a policing/shaping value of 10 ms or 125 ms rings a bell but I don't know for sure

[c-nsp] N7K QoS with FEXes

2013-01-14 Thread Pavel Vraštiak
Hi list, suppose you have two n7ks (F2 modules) connected to each other (vpc) and several FEXes directly connected to them. Now, is it neccesary/possible to configure any qos-related stuff on the link between fex and n7k? I was not successful with that. I read somewhere that there are pause

Re: [c-nsp] unable to route traffic over ipsec/gre tunnels - HELP!

2013-01-14 Thread false
Nick, Are you referring to the real public ip addresses? Or the Tunnel 172.16.x.x addresses? Originally, the real public ip addresses could all ping each other but right now I cannot ping the public peers. I can't even ping anything on the internet from the 871W (Branch-1) and it doesn't

Re: [c-nsp] unable to route traffic over ipsec/gre tunnels - HELP!

2013-01-14 Thread false
Update. More data. If I remove the crypto map for Branch-2 (vpnmap 31) then the tunnel for Branch-1 (crypto map 10) comes back up. It apears that having both crypto maps like below causes int fa0/1 to not be aware of what traffic to send down what tunnel. See example of problematic config

Re: [c-nsp] N7K QoS with FEXes

2013-01-14 Thread Tóth András
The four ports on the Cisco Nexus 7000 Series switch that connect to the uplink ports are fabric ports. Only QoS policies can be configured on the server-facing FEX ports. Currently, queuing on the FEX interfaces is not supported.

[c-nsp] (no subject)

2013-01-14 Thread Markus H
Hi, I want to add VPN support to a cisco 7200 (w/ NPE300). Use case would be secure remote management (of the 7200 and other gear at the site) from a Linux-based computer. Pretty much my only requirement would be that the VPN is usable out of the box with standard Linux tools or the open-source

Re: [c-nsp] VPN on 7200

2013-01-14 Thread Markus H
Sorry, it seems the title somehow got lost. On Mon, Jan 14, 2013 at 10:21 PM, Markus H hauschild.mar...@gmail.com wrote: Hi, I want to add VPN support to a cisco 7200 (w/ NPE300). Use case would be secure remote management (of the 7200 and other gear at the site) from a Linux-based computer.

Re: [c-nsp] unable to route traffic over ipsec/gre tunnels - HELP!

2013-01-14 Thread Nick Hilliard
On 14/01/2013 18:38, false wrote: I'm pretty sure I remember doing it this way several years ago. What changes need to be made to allow these multiple crypto maps and using just one crypto map tag on fa0/1 (isp interface)? This looks wrong: access-list 141 permit gre any any When the

Re: [c-nsp] VPN on 7200

2013-01-14 Thread Richard Clayton
You could forget supporting the VPN on the 7200 and run an openvpn tunnel between a Linux host at the site and one where you are, a simple p2p would work between the two servers (I use an inexpensive Linux plug server as its only management traffic), it would be secure as far as the wan is

[c-nsp] Fwd: 2960s-48fps-l flex stack

2013-01-14 Thread Scott Voll
I have a 2960s-48fps-l and when I inserted the flex stack module I get: %PLATFORM-6-FLEXSTACK_UNSUPPORTED_MODULE: Unsupported FlexStack module inserted in Switch 1. C2960S-F-STACK Is this not supported? I'm running 15.0.2se1. How do I get it talking to the other switches? TIA Scott

Re: [c-nsp] Fwd: 2960s-48fps-l flex stack

2013-01-14 Thread Ryan West
On Mon, Jan 14, 2013 at 18:58:18, Scott Voll wrote: Subject: [c-nsp] Fwd: 2960s-48fps-l flex stack I have a 2960s-48fps-l and when I inserted the flex stack module I get: %PLATFORM-6-FLEXSTACK_UNSUPPORTED_MODULE: Unsupported FlexStack module inserted in Switch 1. C2960S-F-STACK Looks

[c-nsp] list wisdom please, Cisco switches

2013-01-14 Thread John Brown
Hi, We are looking to install cisco switches to feed an apartment complex with internet. Each unit has a Cat5e cable back to a common room. We have our own fiber into the common room that goes back to our pop. We want to provide 10/100/1000 service options to the tenants. The backhaul today

Re: [c-nsp] list wisdom please, Cisco switches

2013-01-14 Thread Andrew Miehs
How long is a piece of string? You need to work out your architecture first - then you can find your switches. Are you sure you want L3 functionality in the common room, or would it not be enough to run the SVIs from the PoP? I would probably use a 2960S in the common rooms, and run VSS 6500s in

Re: [c-nsp] list wisdom please, Cisco switches

2013-01-14 Thread Andrew Miehs
The reason I suggested the 2960s is as I would probably not do layer3 to the edge - it would probably be too expensive . Does IPv6 with 24x SVIs and CoPP work on a ME3600? I may use something like an ME though if John is using MPLS... Really depends on what the rest of the network looks like, what