Re: [c-nsp] IPV6 in general was Re: Large networks

There are DHCP parameters we rely on every single day. Phones: Voice VLAN assignment, plus boot server DNS-Hostname mapping (having the DHCP server dynamically register the host/device in DNS) DNS Domain Name NTP/Time offset Legacy WINS servers (yes, I have networks unwilling/unable to get rid of

Re: [c-nsp] What cisco line cards support DS3 over RJ45 interface

None. A DS3 would be handed off with a pair of coax for all native DS3 interfaces. You would likely need an external transceiver to handle the conversion, assuming there is similar gear on the remote end (I have seen ethernet over DS3 transceivers, requires one on each end, then normal ethernet

Re: [c-nsp] Inventory tool

RANCID includes various hardware output with serial numbers and revisions, along with full configurations: http://www.shrubbery.net/rancid Netdot does some of this as well: http://netdot.uoregon.edu -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] BGP Cease - Connection collision resolution

Have you checked the capabilities being negotiated with that peer to see if anything new was negotiated up after the change? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Paul Stewart Sent: Friday, April 03, 2009 09:02

Re: [c-nsp] Exceeding the bandwidth points on a 7200

Yep, the part number is C7200-JC-PA. Details: http://www.cisco.com/en/US/prod/collateral/routers/ps341/product_data_sh eet0900aecd804419c6.html -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Walter Keen Sent: Monday,

Re: [c-nsp] mpls bgp forwarding ?

Do you have the VRF configured in your eBGP router? If not, add this to your BGP configuration to keep it from filtering those out: no bgp default route-target filter The prefixes will be filtered out if there is no local VRF to import to. Some more details on this setup:

Re: [c-nsp] temporary static routes

If you were not required to confirm your destination interactively, you could store your configuration on an TFTP server and schedule a 'copy tftp running-config'. Unless someone knows a way around this. Otherwise, you're probably better off scripting this via telnet/ssh from another host.

Re: [c-nsp] temporary static routes

, Darryl Dunkin ddun...@netos.net wrote: If you were not required to confirm your destination interactively, you could store your configuration on an TFTP server and schedule a 'copy tftp running-config'. Unless someone knows a way around this. Otherwise, you're probably better off scripting

Re: [c-nsp] DS3 mux issues

The line code for individual T1s is handled on the MUX. Based on the counters of line code violations, I'd check there first and see what it is set to. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin Shore Sent: Tuesday, December 09, 2008 13:29 To:

Re: [c-nsp] QoS help on Cisco 1841 from Covad

What host is xxx.xxx.xxx.xxx? Is that your VOIP gateway? You are matching both protocol and the destination IP address (match-all). If this is not the destination of your packets, they won't match and go to the class-default. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [c-nsp] Multilink Bundle Name Problems

Look at the global config option 'multilink bundle-name authenticated' to avoid using the endpoint names. Some more details are here: https://www.cisco.com/en/US/tech/tk713/tk507/technologies_tech_note09186 a0080093c49.shtml#authen -Original Message- From: [EMAIL PROTECTED]

Re: [c-nsp] Strange bug doing telnet to a switch

It is likely someone pasted a configuration improperly. You probably have a banner section in the config like this: banner motd ^C peed 100 duplex full no cdp e ^C Run a 'no banner motd' in config mode to clear the banner. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [c-nsp] route-map ftp connection

This is a good reference for matching active vs passive FTP connections: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_e xample09186a0080100548.shtml#passiveftp Basically: permit tcp any any eq ftp permit tcp any any gt 1024 However, this has the potential to grab

Re: [c-nsp] ebgp and ibgp

IBGP sends the best route to the other IBGP peers, not both. Border2 knows about the multiple routes itself, but only sends the one best path to Border1. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaun R. Sent: Wednesday, October 01, 2008 16:04 To:

Re: [c-nsp] DSCP / NAT

Correct, it should just go straight through, NAT translates the address/port only. It should not touch the rest of the packet unless otherwise configured. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Church, Charles Sent: Monday, August 04, 2008 18:06

Re: [c-nsp] 7206 misreporting ifSpeed via SNMP on ATM fiber interface

This is normal behavior from what I've seen, as you don't have a PVC configured for the main interface so it has no bandwidth on the ATM layer. This is the view from a 7500, but I see the same results. Look at the 0.0 interface instead. ifIndex IfDescr ifType ifMtu ifSpeed 5 ATM0/0/0-atm

Re: [c-nsp] Expression to match 1, 2, or 3 AS paths

You would have to specify the AS, as using wildcard digits won't identify repetition. If you had 500 500 500 400, or 500 500 400 400, where 500 was connected to you: ^500(_500)*(_400)*$ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Diogo Montagner

Re: [c-nsp] SSH Authoized Keys?

This is what local backup logins are for, you can revert to passwords in the rare case it is needed (while having the convenience the other 99.9% of the time). Same deal with TACACS, if your servers are unreachable, you can still login using a local login/password from the NVRAM. -Original

Re: [c-nsp] ETH spikes

Did anyone reset the counters on the router interface or reboot it? If so, MRTG/rrdtool will assume the counter wrapped back to zero and assume bytes were transferred up to the 32-bit barrier or up to the maximum speed of the interface (32-bits assuming SNMPv1 and MaxBytes is set in the MRTG

Re: [c-nsp] System MTU on trunks for Q in Q

I tend to run into this table often and has been a good reference for me. This table relates specifically to system MTU: http://www.cisco.com/en/US/products/hw/switches/ps663/products_tech_note 09186a00801350c8.shtml#topic2 This would suggest 'system mtu 1504' would be appropriate.

Re: [c-nsp] T1 Bonding with PA-MC-T3

As opposed to burning up IPs for those links, just for monitoring, you can monitor the interface oper state via SNMP. I'm using indexing via description. Example nagios configuration from my system: First monitor the IP of the bundle: define host{ use generic-host

Re: [c-nsp] Not Understanding How External IPs Are Appearing In Show IPNAT Statistics Output

Try show ip nat translations instead (if too much, add | i 218.233.198.25 to that). You'll get a raw output on the source and destination. Chances are these will match up to your static translation with 172.30.50.207. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

Re: [c-nsp] Best Cisco 3620 IOS

You can figure out the memory/flash requirements from the IOS upgrade planner easily enough: http://www.cisco.com/cgi-bin/Software/Iosplanner/Planner-tool/iosplanner .cgi? Your memory requirements are a mix of major revision and feature set. Since you've got 40/8, looks like latest 12.2.46a

Re: [c-nsp] OAM pings on 3662 with NM-1A-T3 and a 7100 question

You can find a list of which IOS supports it here: http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_ chapter09186a008045bf88.html The feature navigator is more useful usually: http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp The feature is labeled 'ATM OAM Ping'. Looks

[c-nsp] EIGRP Distribute-list w/Address-family

I've noticed that you cannot specify an interface in address family configuration mode for a distribute list. I also confirmed this is specifically stated in the IOS documentation as such. However, I have a single interface in a VRF instance of EIGRP I need to filter updates in on, while leaving

Re: [c-nsp] ip helper address on pix

No, the only command supported is 'dhcprelay'. http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/df.html#wp1084795 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bagosi Rómeó Sent: Thursday, December 20, 2007 05:25 To:

Re: [c-nsp] ACL Filtering for Passive FTP Server..

This one is pretty common. Here is a good reference: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_e xample09186a0080100548.shtml#passiveftp Shows examples for both incoming and outgoing ACLs, active/passive, etc. -Original Message- From: [EMAIL PROTECTED]

Re: [c-nsp] multilink bundle

I've received warnings from IOS when bundling 4 T1s (on a VIP2-50) before, but this was in the past and probably due to SRAM on that card. I've never seen actual limitations on the maximum allowed in a bundle. If you're worried about distributing to a VIP, check this document for the limitations:

Re: [c-nsp] VTP Pruning point .

Pruning is not to prune the configuration, but to prune the forwarding of traffic between switch ports (VLANs forwarded on the trunk itself) when that VLAN is not active on the neighboring switch. Even if the traffic is pruned, the switches will still know about all VLANs in the domain but not

Re: [c-nsp] IP blocks from Asian RIRs?

Nothing like taking the service out of service provider :) You might as well start here: http://www.iana.org/assignments/ipv4-address-space -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Balashov Sent: Thursday, November 29, 2007 09:50 To:

Re: [c-nsp] 100 meg links - VIP2-50 or VIP4-50?

12.2S, VIP2-50, 128MB, dCEF w/full routes. Here is the tech output from the VIP itself: HeadTotal(b) Used(b) Free(b) Lowest(b) Largest(b) Processor 60AE49C0 122795584787818444401374043953028 32807708 PCI 3000 4194312 4193848

Re: [c-nsp] redirect nexthop on ASA 5510

The flaw here is that your packets are not bi-directionally being passed through your ASA, so it never sees any TCP session come up as only one direction of traffic is passing through it. If your source is 192.168.1.59, and you redirect the packet back to your LAN via 192.168.1.2, the router at

Re: [c-nsp] mpls and BGP question

This may be obvious, but have you fully meshed BGP between all of your routers? Is PE1 peering with PE3? If fully meshed, you should not have to bother with route reflectors in this setup. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Hickey Sent: