Re: [c-nsp] Cat 6509 Power supplies

2009-05-26 Thread Childs, Aaron
-- --- -- --- -- --- -- -- 4WS-F6K-FE48-AF- -- - 34.61 0.82 On Have a good day, Aaron - Aaron Childs Assistant Director, Networking Westfield State College http://www.wsc.ma.edu/it/ -Original Message- From: cisco-nsp-boun

Re: [c-nsp] is-is question

2009-05-14 Thread Aaron
There are several Tier 1 isps that just run Level-1 only. Aaron On Thu, May 14, 2009 at 16:56, Mark Tinka mti...@globaltransit.net wrote: On Wednesday 14 May 2008 03:31:00 am victor wrote: Because of a recent change of the organizational structure of the company I'm employed by I

Re: [c-nsp] MRTG on SONET APS?

2009-05-09 Thread Aaron
Just monitor both ports as normal. One for each. That's what we used to do. Aaron On Fri, May 8, 2009 at 17:25, Pete Templin peteli...@templin.org wrote: List, I'm in the process of bringing up my first SONET APS-protected (single-router APS) link, and it's been an adventure. Aside from

Re: [c-nsp] GSR12008|GRP-B|4OC12/ATM-MM-SC|3GE-GBIC-SC throughput?

2009-04-15 Thread Aaron
whats the traffic flow? whats the input and the output? On Wed, Apr 15, 2009 at 10:11, Jason Lixfeld ja...@lixfeld.ca wrote: On 15-Apr-09, at 10:04 AM, Pete Templin wrote: Jason Lixfeld wrote: CPU doesn't seem to be running too hot: CPU utilization for five seconds: 6%/0%; one minute:

Re: [c-nsp] GSR OC3 Eng0 to Eng3

2009-04-14 Thread Aaron
but are an annoyance. Aaron On Tue, Apr 14, 2009 at 14:01, Pete Templin peteli...@templin.org wrote: Lamar Owen wrote: What sort of failures prompted the card switch? Ugh. Card #1 went offline following an IOS upgrade reboot. Syslog messages suggested memory problems. After being swapped out

Re: [c-nsp] Possible timing problems

2009-04-14 Thread Aaron
Why are you configured for internal and not line clocking? On Tue, Apr 14, 2009 at 12:46, james edwards lists.james.edwa...@gmail.comwrote: This is on the 3700 and a DS3 card. Looks like I am losing timing, which is derived from the line. I have searched on clock change... and have not pulled

Re: [c-nsp] SIP-400 and 10GbE SPA

2009-04-08 Thread Aaron
It might be supported but you don't get 10GB with it. Aaron On Mon, Apr 6, 2009 at 21:12, Stephen Fulton s...@lists.esoteric.ca wrote: According to the SIP/SPA compatibility matrix: http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/7600series

Re: [c-nsp] Max length of 9600 serial over CAT5e

2009-04-08 Thread Aaron
Nom. Capacitance @ 1 KHz:15 pF/ft. for cat 5e On Wed, Apr 8, 2009 at 07:31, Richard Halfpenny richard.halfpe...@exa-networks.co.uk wrote: Sam Stickland wrote: Hi, What's the maximum length of you can run async-serial (9600 baud) over CAT5e (from a terminal server to console port).

Re: [c-nsp] 2600 series for 100M

2009-04-08 Thread Aaron
You don't say want services you are planning on running. Full-bgp? That would have an impact on memory requirements. On Wed, Apr 8, 2009 at 08:09, Deric Kwok deric.kwok2...@gmail.com wrote: Hi Do you know Cisco 2651XM is fine for 100M network? If the memory is 256M, it is ok? Can it

Re: [c-nsp] Monitoring External Web Server

2009-04-06 Thread Aaron Riemer
Thanks for the tips guys. Aaron. -Original Message- From: Ted Mittelstaedt [mailto:t...@toybox.placo.com] Sent: Sunday, 5 April 2009 11:25 PM To: Aaron Riemer Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Monitoring External Web Server Aaron Riemer wrote: Hey guys, We have

[c-nsp] Monitoring External Web Server

2009-04-02 Thread Aaron Riemer
to establish a TCP connection to the web server and report the statistics somehow. I don't want to place a machine outside for the monitoring so would prefer to do it from our router if possible. Any thoughts? Thanks, Aaron. LEGAL DISCLAIMER: This message contains confidential information

[c-nsp] Policy routing on a 3750 - What am I doing wrong?

2009-03-19 Thread Aaron Gifford
packets to the 255.255.255.255 broadcast being matched? What am I doing wrong? Thanks in advance for any/all help, advice, pointers, tips, etc. Aaron out. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] Cisco Refurbished Equipment Program

2009-02-20 Thread Aaron
Bad timing? On Fri, Feb 20, 2009 at 18:03, Gert Doering g...@greenie.muc.de wrote: OHi, On Fri, Feb 20, 2009 at 04:54:09PM -0500, Chris Wallace wrote: We purchased a Cisco 6509 through this program a couple years ago. When we first got it up and running we found out it had a failed fan

Re: [c-nsp] Sprint ATT BGP multihoming

2009-02-11 Thread Aaron
Sprint has a world wide network. They do not by transit from anybody. Aaron On Wed, Feb 11, 2009 at 10:05, Stephen Kratzer kratz...@ctinetworks.comwrote: Deleted the original post, so I'll reply to this leaf... ATT is fine. Make sure that Sprint, at that particular location, has multiple

Re: [c-nsp] Sprint ATT BGP multihoming

2009-02-11 Thread Aaron
.do not buy transit. You should have been able to figure out the misspelling of by vs buy On Wed, Feb 11, 2009 at 12:24, Brian Wallingford br...@meganet.net wrote: They don't what? On Wed, 11 Feb 2009, Aaron wrote: :Sprint has a world wide network. They do not by transit from anybody

[c-nsp] FWSM w/v4 code

2009-02-11 Thread Childs, Aaron
an answer. Could someone please direct me to the proper documentation? Thank you, Aaron - Aaron Childs Assistant Director, Networking Westfield State College http://www.wsc.ma.edu/it/ http://www.wsc.ma.edu/it/ smime.p7s Description: S/MIME cryptographic signature

[c-nsp] Initiating Connections to VPN Clients

2009-02-02 Thread Aaron Riemer
for any suggestions, Aaron. LEGAL DISCLAIMER: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have

Re: [c-nsp] login

2009-02-02 Thread Aaron Riemer
These are your console and VTY lines for managing the device. Con being out of band management. VTY being in band management.. i.e. telnet and SSH. Aaron. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of ann kok Sent

Re: [c-nsp] Cisco's NetFlow

2009-01-29 Thread Aaron Riemer
Hi, Have you tried IP accounting? Go to the interface in question and issue the ip accounting output-packets command. You can then view the connections with sh ip accounting. Cheers, Aaron. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun

[c-nsp] Cisco Tools

2009-01-20 Thread Aaron Riemer
Hey guys, I have found quite a useful website for different cisco configurations etc.. If anyone has any similar feel free to post in this thread :-) http://www.bradreese.com/cisco-tools.htm Props to Brad. Cheers, Aaron. LEGAL DISCLAIMER: This message contains confidential

Re: [c-nsp] BGP Question

2009-01-19 Thread Aaron
and a static route pointing to the outgoing interface On Thu, Jan 15, 2009 at 17:24, Arne Larsen / Region Nordjylland a...@rn.dkwrote: If an EBGP peer is more than one hop away from the local router, you must specify the next hop to the peer so that the two systems can establish a BGP

[c-nsp] PIX IP Options

2009-01-12 Thread Aaron Riemer
x.x.x.x to x.x.x.x, IP options: Record Route PIX-506E - Pix 6.3(4) Cheers, Aaron. LEGAL DISCLAIMER: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please

Re: [c-nsp] Softnet replacement?

2009-01-11 Thread Aaron Daniels - Lists
to the Cisco TAC. I believe you can get SW only as well. Thanks, Aaron Daniels ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] MPLS-VPN migration

2009-01-06 Thread Aaron Daniels - Lists
and there was something else that was qwerky but I can't remember currently. Also, the TAC advised that PE-CE iBGP was not a supported configuration. Thanks, Aaron ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco

[c-nsp] Policing Confusion

2009-01-04 Thread Aaron Riemer
conform-action transmit exceed-action drop violate-action drop class class-default fair-queue random-detect ! Interface Serial0/0 ip address x.x.x.x/x service-policy output mission-critical I hope this makes sense. Thanks in advance. Aaron. LEGAL DISCLAIMER

Re: [c-nsp] MPLS-VPN migration

2008-12-18 Thread Aaron Daniels - Lists
config's tomorrow. Thanks, Aaron -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Tim Durack Sent: Thursday, 18 December 2008 1:54 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] MPLS-VPN migration Looking

[c-nsp] 1751 no flash directory

2008-12-18 Thread Aaron Riemer
the flash has! Any hints? Thanks, Aaron. LEGAL DISCLAIMER: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e

Re: [c-nsp] MPLS-VPN migration

2008-12-18 Thread Aaron Daniels - Lists
I have had a few requests for this so I thought i'd put it on-list. Thanks, Aaron Daniels -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Aaron Daniels - Lists Sent: Thursday, 18 December 2008 6:13 PM To: 'Tim

Re: [c-nsp] suddenly lost telnet connection in switch

2008-12-12 Thread Aaron Fabiani
Implicit deny at the end of the ACL...You didn't specifically permit telnet access so it is denied. chloe K wrote: Hi I am doing the following access-list for www to restrict to switch http access but when I apply it in the interface, i suddenly lost telnet connection. Why?

[c-nsp] 1700 Series WIC Modules

2008-12-08 Thread Aaron Riemer
Hey guys, Is there any easy way to work out which IOS is required for the different WIC's available?? I have a 1751 series router that I am trying to get a 4 port FXS card working with and I would like to know what IOS will support it as it is currently not detected. Cheers, Aaron

Re: [c-nsp] Allowing VPN clients to access L2L tunnels terminating on the same outside interface

2008-11-26 Thread Aaron Riemer
Hi Guys, We have resolved this by simply putting a static route pointing out to the spoke VPN site's internal addressing pointing to the outside interface on our firewall. I believe changing the addressing of the VPN clients would have done the same thing though. Thanks, Aaron -Original

[c-nsp] Allowing VPN clients to access L2L tunnels terminating on the same outside interface

2008-11-25 Thread Aaron Riemer
(10.100.1.101/2523) to Inside:172.16.1.10/80 (172.16.1.10/80) 2008/11/26 15:08:48 %ASA-6-302013: Built outbound TCP connection 137555838 for Outside: 172.16.1.10/80 (172.16.1.10/80) to Inside:10.100.1.101/2523 (10.100.1.101/2523) Thanks in advance. Aaron. LEGAL DISCLAIMER

Re: [c-nsp] Allowing VPN clients to access L2L tunnels terminating on the same outside interface

2008-11-25 Thread Aaron Riemer
set. Sysopt connection tcpmss?? Thanks! Aaron. -Original Message- From: Tony [mailto:[EMAIL PROTECTED] Sent: Wednesday, 26 November 2008 4:48 PM To: cisco-nsp@puck.nether.net; Aaron Riemer Subject: Re: [c-nsp] Allowing VPN clients to access L2L tunnels terminating on the same outside

Re: [c-nsp] tftp

2008-11-17 Thread Aaron
What do you mean verify? Assuming you mean verify the image was copied correctly, you can look at the MD5 signature via the verify command. To verify the checksum of a file on a flash memory file system or compute a Message Digest 5 (MD5) signature for a file, use the *verify* command in

Re: [c-nsp] 3750 HSRP question

2008-11-13 Thread Aaron Riemer
Yes it would be nice if you could control where the HSRP advertisements are sent out. Something similar to the passive-interface command with EIGRP would be nice. Let me know if you work this one out. I don't like the idea of HSRP spamming our Ethernet VLAN's either. Aaron Riemer -Original

Re: [c-nsp] Setting up Cisco 1811 for dial in access

2008-11-11 Thread Aaron Riemer
Hi Brian, You need to configure the async interface on your 1811. Take a look here http://www.cisco.com/en/US/docs/routers/access/1800/1801/software/config uration/guide/dialbkup.html#wp1031537 Aaron Riemer Network Engineer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [c-nsp] Configuring a channelized STM-1/OC3 SPA as a full STM-1

2008-11-09 Thread Aaron
Nope. http://www.cisco.com/en/US/prod/collateral/modules/ps6267/product_data_sheet0900aecd80350c53.html On Sun, Nov 9, 2008 at 9:24 AM, tt tt [EMAIL PROTECTED] wrote: Hi All, Does anyone know if the channelized SPA-1XCHSTM1/OC3 can be configured as a full STM-1 (SDH)? We need to terminate a

Re: [c-nsp] Catalyst LAN Input Errors Query...

2008-11-06 Thread Aaron Riemer
if the ASIC is being oversubscribed. Refer here - http://www.cisco.com/en/US/products/hw/switches/ps700/products_tech_note 09186a00801751d7.shtml#ASIC Cheers, Aaron Riemer -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Leadmon Sent: Friday, 7 November

Re: [c-nsp] Accounting VPN PIX and ACS

2008-11-05 Thread Aaron R
Hi, You can use netflow on your external router if you have one. ESP protocol or Protocol 50. Take a look at what protocols your VPN client is using for transport and filter netflow based on this info. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

[c-nsp] EIGRP flapping

2008-10-30 Thread aaron
similar issues? Cheers, Aaron. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] 12000 SIP-401: datasheet typo?

2008-10-29 Thread Aaron
401, 501, and 601 are all based of the same engine 5. They are bw limited to the speeds (2.5/5/10). Aaron On Wed, Oct 29, 2008 at 10:52 AM, Pete Templin [EMAIL PROTECTED]wrote: http://www.cisco.com/en/US/prod/collateral/routers/ps167/product_data_sheet0900aecd80465682.html In Table 2

Re: [c-nsp] Dark fiber Termination requirements

2008-10-14 Thread Aaron
you also might require licensing to use transmission equipment. It has been awhile since I dealt with this issue in AsiaPac. I remember some countries had requirements to light fiber. On Fri, Oct 10, 2008 at 7:04 AM, Dirk-Jan van Helmond [EMAIL PROTECTED]wrote: We will be using single mode

Re: [c-nsp] Forcing VLAN interface to UP state

2008-10-01 Thread Aaron R
All vlan's are trunked by default? I know for routing you can put a static in with a high AD pointing to the null interface.. I don’t believe this will bring up the interface though. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff

Re: [c-nsp] Weird Port Loopback Issues with 3750 and ESX 3.5

2008-09-27 Thread Aaron R
or its inability to negotiate duplex/speed with the switch. (Hard setting duplex/speed does not resolve the issue!) Anyway that is for the server guys to work out. I have no control of the ESX box :) Thanks mate, Aaron. -Original Message- From: Justin Shore [mailto:[EMAIL PROTECTED] Sent

Re: [c-nsp] SNMP Monitoring VPN Traffic

2008-09-26 Thread Aaron Riemer
Thanks Howie, I will have to give it a go :) Aaron. -Original Message- From: Howard Jones [mailto:[EMAIL PROTECTED] Sent: Friday, 26 September 2008 3:33 PM To: Aaron Riemer Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] SNMP Monitoring VPN Traffic Aaron Riemer wrote: Hey guys

[c-nsp] Weird Port Loopback Issues with 3750 and ESX 3.5

2008-09-25 Thread aaron
? Thanks, Aaron. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Maximum number of class-map supported

2008-09-25 Thread Aaron Riemer
AFIAK it's 256 mate. Could be different for the different IOS versions though. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Granzer Sent: Thursday, 25 September 2008 4:00 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Maximum

[c-nsp] SNMP Monitoring VPN Traffic

2008-09-25 Thread Aaron Riemer
see bandwidth statistics with each of these tunnels. Would there be some SNMP OID that I could graph for this? Thanks again guys, Aaron. LEGAL DISCLAIMER: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you

Re: [c-nsp] Cisco 10720 Router?

2008-09-22 Thread Aaron
There was a kit to upgrade to 512mb which also requires a IOS upgrade. We used it for gige and fe access in some pops. Aaron On Mon, Sep 22, 2008 at 1:16 PM, Kyle Duren [EMAIL PROTECTED] wrote: I have an opportunity to get a Cisco 10720 router for very cheap, but I'm rather unfamiliar

Re: [c-nsp] Static Route based on next hop reachable

2008-09-17 Thread Aaron Riemer
Hi Paul, Take a look at Policy based routing with object tracking. http://www.cisco.com/en/US/tech/tk364/technologies_configuration_example 09186a0080211f5c.shtml Cheers, Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul Stewart Sent: Thursday

Re: [c-nsp] Filter Material

2008-09-13 Thread Aaron
Cisco. The replacement parts are cheap. On Fri, Sep 12, 2008 at 8:24 PM, Troy Beisigl [EMAIL PROTECTED] wrote: This may sound like a dumb question, but does anyone know where the filter material can be acquired that is used on the 7500 and 12008 routers chassis? Thanks, -Troy

Re: [c-nsp] Dashboard Network Monitoring Software

2008-09-05 Thread Aaron Daniels - Lists
Also take a look at Zenoss www.zenoss.org Aaron -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Daniel Hooper Sent: Friday, 5 September 2008 12:55 PM To: Aaron Riemer Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Dashboard Network

Re: [c-nsp] latest stable...

2008-09-05 Thread Aaron
for the 7200 with just bgp why not use 12.0S? On Fri, Sep 5, 2008 at 6:01 PM, Gert Doering [EMAIL PROTECTED] wrote: Hi, On Fri, Sep 05, 2008 at 01:54:07PM -0400, Jim McBurnett wrote: Great... For the G1-- all we need is BGP and Ethernet-- Nothing special.. Metro E fiber inbound and

Re: [c-nsp] Dashboard Network Monitoring Software

2008-09-05 Thread Aaron Daniels - Lists
Zenoss is open source. But you are able to purchase a support contract if your organisation requires that kind of thing (ours does) Thanks, Aaron -Original Message- From: Aaron Riemer [mailto:[EMAIL PROTECTED] Sent: Friday, 5 September 2008 6:50 PM To: Aaron Daniels - Lists; cisco

Re: [c-nsp] Dashboard Network Monitoring Software

2008-09-05 Thread aaron
Yep weathermap looks awesome. Do you know if its possible for the map to change the icon of a site if it is down or unreachable? That would be awesome :) Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Christian Koch Sent: Saturday, September 06

Re: [c-nsp] 6500 WS-SUP32-GE-3B failure

2008-09-04 Thread Aaron Riemer
Thanks Pete, Non disruptive tests haven't indicated anything as yet. Will try when we go down for outage. Cheers, Aaron. -Original Message- From: Peter Rathlev [mailto:[EMAIL PROTECTED] Sent: Thursday, 4 September 2008 3:22 AM To: Aaron Riemer Cc: cisco-nsp@puck.nether.net Subject: Re

Re: [c-nsp] silly qos question

2008-09-04 Thread Aaron Riemer
this clear or if the interface is later upgraded etc. You can remove the class-default 25% restriction by the way but I cannot remember the command to do it sorry :) I am sure google will have the answer for you :) Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [c-nsp] silly qos question

2008-09-04 Thread Aaron Riemer
Further to my original post the way to get around the 25% class-default limit is to use the interface command max-reserved-bandwidth. HTH. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ryan Sent: Thursday, 4 September 2008 3:07 PM

[c-nsp] Dashboard Network Monitoring Software

2008-09-04 Thread Aaron Riemer
are not willing to shell out the money just for a dashboard. Cheers, Aaron. LEGAL DISCLAIMER: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy

Re: [c-nsp] Dashboard Network Monitoring Software

2008-09-04 Thread Aaron Riemer
Hi James, Yes I thought about nagios. Is it possible to put your own background map in and then position nodes on the map? Thanks for the suggestion. Cheers, Aaron. -Original Message- From: James Baker [mailto:[EMAIL PROTECTED] Sent: Friday, 5 September 2008 10:17 AM To: Aaron Riemer

[c-nsp] 6500 WS-SUP32-GE-3B failure

2008-09-03 Thread Aaron Riemer
with another identical SUP and then possibly rebooting before lodging a TAC case. Any suggestions welcome :-) Cheers, Aaron. LEGAL DISCLAIMER: This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should

Re: [c-nsp] Running MPLS across non-MPLS networks

2008-09-02 Thread Aaron
l2tpv3 On Tue, Sep 2, 2008 at 1:22 PM, Greg Schwimer [EMAIL PROTECTED] wrote: I have a situation where I need to run MPLS across a non-MPLS network (the Internet) to connect two of my networks together. We have looked at GRE, but ran into issues and were later told by Cisco that running MPLS

Re: [c-nsp] Interdomain Multicast Routing

2008-09-01 Thread Aaron
The large ones do. I know Sprint has been doing it for over 11 years. I would say that most do not charge or if they do it is minimal. NOC support may vary from provider to provider. On Mon, Sep 1, 2008 at 11:45 AM, Mike Louis [EMAIL PROTECTED] wrote: This has been a confusing subject for me.

Re: [c-nsp] DMVPN breaks when IPSEC protection is applied to tunnels

2008-08-26 Thread Aaron
How about putting on the outbound to make sure that you are sending it the the hub? On Tue, Aug 26, 2008 at 1:37 AM, Nic Tjirkalli [EMAIL PROTECTED] wrote: Howdy ho, Maybe try to put in an ACL or could use netflow for this as well... ip access-list extend check_packets_in permit esp any

[c-nsp] Extending MPLS over external providers cloud

2008-08-05 Thread Aaron Daniels - Lists
. Thanks, Aaron Daniels ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] mGRE support for IPv6?

2008-07-18 Thread Aaron Daubman
Greetings, Has anybody heard of upcoming (or current, that I totally missed) support for mGRE with IPv6 (mGRE over native IPv6 core)? Thanks, Aaron ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo

Re: [c-nsp] 'multiplexing netflow?

2008-07-03 Thread Aaron Glenn
On Thu, Jul 3, 2008 at 4:46 AM, Drew Weaver [EMAIL PROTECTED] wrote: Now I remember why I can't use this (sorry it's been a while since I've examined this) The appliance we are sending our flows to can only handle maybe 1% of our actual flows (sampled) (and only from 2 out of 10 of our

Re: [c-nsp] Telnet FROM a PIX Appliance?

2008-07-01 Thread Aaron R
? Cheers, Aaron. -Original Message- From: Joerg Mayer [mailto:[EMAIL PROTECTED] Sent: Monday, June 30, 2008 7:21 PM To: Aaron R Cc: 'Felix Nkansah'; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Telnet FROM a PIX Appliance? On Mon, Jun 30, 2008 at 06:30:59PM +0800, Aaron R wrote

Re: [c-nsp] Telnet FROM a PIX Appliance?

2008-06-30 Thread Aaron R
It is disabled as a security feature. I have also wanted to do the same for troubleshooting purposes. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Felix Nkansah Sent: Monday, June 30, 2008 6:11 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Telnet

Re: [c-nsp] BGP sessions won't establish.

2008-06-30 Thread Aaron
Do you have static routes pointing to both loopbacks? 1 for you and on the isp side, 1 back to you? On Sat, Jun 28, 2008 at 3:29 AM, Lincoln Dale [EMAIL PROTECTED] wrote: Roy wrote: Just to bring everybody up to date, the ISP keeps saying its something we are doing. did you try any of

Re: [c-nsp] Possible security issue with CDP

2008-06-29 Thread Aaron
I believe BP is to turn it off globally and turn it on per specific interface. I do concur that changing encap types should not reenable anything. Aron On Sat, Jun 28, 2008 at 3:03 PM, Hank Nussbacher [EMAIL PROTECTED] wrote: On Sat, 28 Jun 2008, Gert Doering wrote: Hi, On Fri, Jun 27,

Re: [c-nsp] Possible security issue with CDP

2008-06-26 Thread Aaron
Curious. Was CDP globally disabled? Don't want to make any assumptions. Aaron On Thu, Jun 26, 2008 at 12:12 PM, Hank Nussbacher [EMAIL PROTECTED] wrote: On Thu, 26 Jun 2008, Jared Mauch wrote: Of course. This was opened with PSIRT (PSIRT-0642590629) on March 26 and was discussed internally

Re: [c-nsp] GRE/MPLS

2008-06-24 Thread Aaron Daniels - Lists
that this command defines which routing table the router will use to reach the 'tunnel destination', but I had similar symptoms to you (one way traffic) and this fixed me right up... HTH Thanks, Aaron Daniels ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] Need some help troubleshooting l2tpv3 tunnel

2008-06-13 Thread Aaron
It looks like you have the incorrect ip address on the remote site or the tunnel xconnect pointing to the wrong interface on the local side (FE2/0 instead of FE0/0) Aaron On Fri, Jun 13, 2008 at 9:27 AM, Steven Pfister [EMAIL PROTECTED] wrote: I've got a project I'm trying to use an l2tpv3

Re: [c-nsp] eBGP via loopback

2008-06-13 Thread Aaron
on each end pointing to the remote loopback? Aaron On Thu, Jun 12, 2008 at 7:53 PM, Steve Bertrand [EMAIL PROTECTED] wrote: Hi everyone, I'm having an issue delivering packets in a test environment that I have. To make it as simple as possible, I'll describe what I have with all links

[c-nsp] Cisco ASA IPS Module

2008-06-09 Thread aaron
in this area that would be great. Many thanks in advance, Aaron. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Cisco ASA IPS Module

2008-06-09 Thread Aaron R
No difficulty just wanting to hear from other peoples experiences and if I am reading the right text. Thanks, Aaron. -Original Message- From: Fred Reimer [mailto:[EMAIL PROTECTED] Sent: Monday, June 09, 2008 8:13 PM To: aaron; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Cisco ASA

Re: [c-nsp] Single-mode GBIC question

2008-06-06 Thread Aaron
If you stay within specs you should be fine. We've used SM in the lab with no ill effects. Attenuators also don't cost much either. Aaron On Fri, May 30, 2008 at 2:18 PM, les [EMAIL PROTECTED] wrote: I've combed the web with no luck to the answer of my simple question If you use SINGLE

[c-nsp] Finding the SNMP OID!

2008-05-25 Thread aaron
tried to grab the MIB but my MIB viewer complains that I need all the parent MIB's. I am not interested in downloading all these MIB's. Is there anyone with any thoughts? Cheers, Aaron. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Finding the SNMP OID!

2008-05-25 Thread Aaron R
Hi Arie, Yep I've used this tool, but it doesn't really help me.. I guess because there are that many OID's it can seem like looking for a needle in a haystack. Thanks for your help. Aaron. -Original Message- From: Arie Vayner (avayner) [mailto:[EMAIL PROTECTED] Sent: Sunday, May 25

[c-nsp] ASA SSL VPN License

2008-05-23 Thread aaron
Hey Guys, Is there a Cisco feature such as the feature navigator for the Cisco ASA series appliances? I am trying to determine the features that we are licensed for, in particular the amount of VPN SSL connections that are allowed with our current license. Cheers, Aaron

Re: [c-nsp] ASA SSL VPN License

2008-05-23 Thread Aaron R
Ahh of course Web VPN peers :) Thanks mate. Aaron. -Original Message- From: Alasdair Gow [mailto:[EMAIL PROTECTED] Sent: Friday, May 23, 2008 3:21 PM To: aaron Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] ASA SSL VPN License Show Ver tells you eg Licensed features

Re: [c-nsp] Prove it's not the network!

2008-05-14 Thread Aaron R
I have heard of NetQoS. Is this an appliance or a piece of software? Where does it run? The site does not give much away. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Loiacono Sent: Tuesday, May 13, 2008 11:56 PM To: Rick Martin Cc

Re: [c-nsp] Univercd

2008-05-08 Thread Aaron
Provide feedback on the website. I always do. On Thu, May 8, 2008 at 11:45 AM, Lamar Owen [EMAIL PROTECTED] wrote: On Thursday 08 May 2008, Kevin Graham wrote: As much as I'm disappointed to see /univercd become deprecated, the new documentation site at least looks OK once you can find the

Re: [c-nsp] Getting BGP peer route information using SNMP

2008-05-05 Thread Aaron Glenn
On Mon, May 5, 2008 at 12:18 PM, Diogo Montagner [EMAIL PROTECTED] wrote: Hi All, I was asking me if is there a way to get routes information from a BGP peer using SNMP ? It's been a while but I believe 1.3.6.1.4.1.9.9.187.1.2.1.1.4 will do the trick for you. *should* be supported on your

Re: [c-nsp] If BGP is running on a circuit, if you ping the other end you get loss. kill the BGP (and thus the traffic..) no more loss.

2008-04-29 Thread Aaron
Can you post show version and the show diag (looking for engine and memory only) of the affected cards. Also what is the current utilization of the circuits that you are seeing issues on? On Tue, Apr 29, 2008 at 8:13 AM, Drew Weaver [EMAIL PROTECTED] wrote: Hi there, I've seen

[c-nsp] Switch Protocol Filtering

2008-04-28 Thread aaron
Hi Guys, I have been doing some reading and I am interested in the topic of switch protocol filtering. It seems this was a feature on the old Catalyst switches. Has this functionality been removed now in IOS? I see no mention of it anywhere. Thanks in advance, Aaron

Re: [c-nsp] Cisco ISP Essentials?

2008-04-17 Thread Aaron
There isn't an 2nd ed. The MPLS VPN arch book is really good too. Aaron On Thu, Apr 17, 2008 at 11:27 AM, Howard Jones [EMAIL PROTECTED] wrote: Hi, I've just been looking through Cisco ISP Essentials, which seems like an interesting, if dated (2001), read. There doesn't seem to be a second

Re: [c-nsp] Catalyst 3750 failure - marsupial interference

2008-04-02 Thread Aaron Daniels - Lists
the switch lowest in the stack, and the precariously positioned leads on the power strip. That's how we were first alerted to the, er, problem. So in addition to Zinc Whiskers, we now have Possum Whiskers filling up our datacentres :) Thanks, Aaron Daniels

Re: [c-nsp] Logging remote access logins

2008-03-05 Thread Aaron R
Thanks guys, I shall give it a go tomorrow. Cheers, Aaron. -Original Message- From: shadow floating [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 05, 2008 5:29 PM To: Arie Vayner (avayner) Cc: Aaron R; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Logging remote access logins Hi

[c-nsp] Logging remote access logins

2008-03-04 Thread Aaron R
Hey guys, Is there an easy way to log remote access login attempts on the cisco kit? I see there is a way to enable configuration change logs but I don't see an option to log accepted logins / failed logins etc. Cheers! Aaron. ___ cisco-nsp

Re: [c-nsp] Logging remote access logins

2008-03-04 Thread Aaron R
Hi Guys, I am using a local username and password configured on my devices and yes I know how to log with an ACL cheers for that tho. Thanks, Aaron. -Original Message- From: Hank Nussbacher [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 05, 2008 4:15 PM To: Aaron R; cisco-nsp

Re: [c-nsp] Logging remote access logins

2008-03-04 Thread Aaron R
someone connects to the device. Doesn't seem like a tall order :) Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron R Sent: Wednesday, March 05, 2008 4:39 PM To: 'Hank Nussbacher'; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Logging

Re: [c-nsp] temperature reading GSR

2008-03-03 Thread Aaron
Or clogged air filter which will reduce the amt of air able to be pulled in. You should change it at least once a year, more often if there is a lot of construction going on. Aaron On Mon, Mar 3, 2008 at 2:33 PM, Pete Templin [EMAIL PROTECTED] wrote: eliran h wrote: I've typed the command

Re: [c-nsp] how to secure a vlan?

2008-03-01 Thread Aaron R
applying this in a production environment simply add a permit ip any any at the end of the ACL and log the other traffic to see if the ACL is being matched. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Letkeman Sent: Saturday, March 01

Re: [c-nsp] SNMP traffic monitoring / alerting

2008-02-15 Thread Aaron R
Guys, I don't want rate I want totals per month. I am going to give thold for cacti a go but im having problems with the plugin atm.. will give it a go next week. Cheers, Aaron. -Original Message- From: Peter Rathlev [mailto:[EMAIL PROTECTED] Sent: Friday, February 15, 2008 1:56 AM

Re: [c-nsp] SNMP traffic monitoring / alerting

2008-02-14 Thread Aaron R
, Aaron. -Original Message- From: Howard Jones [mailto:[EMAIL PROTECTED] Sent: Thursday, February 14, 2008 5:36 PM To: Aaron R Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] SNMP traffic monitoring / alerting Aaron R wrote: Hey Guys, Has anyone come across a good app (open source

[c-nsp] SNMP traffic monitoring / alerting

2008-02-13 Thread Aaron R
a script in perl as I can see there will be headaches with keeping track of the interface counter resets. Thanks for any advice as always. Aaron. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] SNMP traffic monitoring / alerting

2008-02-13 Thread Aaron R
that makes sense. Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Boyd Sent: Thursday, February 14, 2008 3:31 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] SNMP traffic monitoring / alerting recent versions of MRTG do

Re: [c-nsp] SNMP traffic monitoring / alerting

2008-02-13 Thread Aaron R
That looks like it will do the trick! Cheers! Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brett Looney Sent: Thursday, February 14, 2008 3:23 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] SNMP traffic monitoring / alerting Has

<    3   4   5   6   7   8   9   >