Re: [c-nsp] Same static-route to different destination / Port-chanel

2013-07-18 Thread Ahmed Hilmy
Hello, How can i check it ? bundle mode on. at R1 ( 7606 ) interface Port-channel10 description To-ASR ip address 192.168.70.17 255.255.255.252 ip tcp adjust-mss 1400 speed nonegotiate end interface GigabitEthernet1/20 description To-ASR-MEMBER-1 no ip address speed nonegotiate no cdp

Re: [c-nsp] vrf-lite routing

2013-07-18 Thread Mattias Gyllenvarg
You will still need a vlan for every vrf between the relevant machines with vrf-lite. Only MPLS or tunnels solve that. If it is internet traffic you dont need more then Layer2 separation, you have that with a vlan/customer. So building VRFs will separate Layer3 and the you have too short circuit

Re: [c-nsp] blocking icmp type 3 code 3

2013-07-18 Thread Phil Mayers
On 07/17/2013 08:22 PM, Aaron wrote: Are there well-known attacks that produce a mass amount of icmp type 3 (destination unreachable) code 3 (port unreachable) ? As you suggest, spoofing which is blocked at the target with some kind of ACL/filter that is rejecting rather than dropping. If

Re: [c-nsp] multicast issue

2013-07-18 Thread Phil Mayers
On 07/17/2013 05:28 PM, Chris Marget wrote: Span mode? Nope. Just an optical splitter at the carrier handoff. Just to add a +1 - tap rather than SPAN is important, because SPAN has some distinctly screwy behaviours w.r.t multicast traffic on some platforms.

Re: [c-nsp] blocking icmp type 3 code 3 [no, but type 3 code 4 yes!]

2013-07-18 Thread Giles Coochey
On 17/07/2013 20:22, Aaron wrote: Are there well-known attacks that produce a mass amount of icmp type 3 (destination unreachable) code 3 (port unreachable) ? I've seen things like this in netflow lately. NO prior communications from my host(s) BUT I see the response of icmp 3 3. Leads

[c-nsp] GNS3 TFTP

2013-07-18 Thread M K
Hi all , am trying to test tftp with gns3 but its not working ? what is the exact path for the IOS image?? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

[c-nsp] PPPoE static IP w/o RADIUS

2013-07-18 Thread Jason Lixfeld
Hi all, Is it possible to assign a static IP to a PPPoE user using local authentication; without the likes of RADIUS, TACACS, LDAP, etc? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] 7k EPLD version in I/O mods

2013-07-18 Thread Jeffrey G. Fitzwater
We have a 7k chassis that has a SUP-1 and FAB-1 that will be upgraded with SUP-2 and FAB-2, but while I am testing in a spare chassis I don't want to prohibit the spare modules from being used in chassis with SUP-1 if the EPLD is incompatible. Q1. Is the EPLD version that I load into an

[c-nsp] time warner outage (around the central texas - san antonio / austin areas) ?

2013-07-18 Thread Aaron
Anyone see anything weird bgp related or internet related with time warner 2 hours ago ? and seems to be fixed now Aaron ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at