What platform? What code?
Can you post your interface config?
Sent from my iPhone
On Dec 16, 2014, at 9:22 PM, Eric A Louie via cisco-nsp
cisco-nsp@puck.nether.net wrote:
I encountered a strange problem that I'm hoping is a bug.
Directly connected routersMTU 9200Works fine with single IP
On 5/19/12 11:24 PM, Tony Varriale wrote:
The first and most important question is: Is this a real datacenter?
If so, 3750xyz is not for you.
Yes, it is. Why not?
Also, the regular 4948s are not much better.
We've been using 4948s for years. Never had any issues with them, beyond
the
In a datacenter environment, we typically deploy 4948 top-of-rack
switches with L2 uplinks to our 6500 core - Systems get connections into
two different switches and rely on OS NIC bonding (mostly Linux) to
support switch failures. Switches running STP and in the last four years
we've had no
What does the output of 'sh int switching' look like?
David
On 7/6/2010 2:39 PM, Troy Beisigl wrote:
Actually, we had a bad PA that I replaced, but did not clear the
counters. The errors are not incrementing. I just now cleared the
counters on this interface to make sure. We installed the
misses 0 - - -
Fast 0 0 0 0
Auton/SSE 0 0 0 0
NOTE: all counts are cumulative and reset only after a reload.
-Troy
On Jul 6, 2010, at 11:50 AM, David
8.0(3) on both Pix515 and ASA5510
On 2/7/10 10:05 AM, David White, Jr. (dwhitejr) wrote:
Hi David,
It sounds like you are running into CSCsj53102. What version are you
running on your 8.0 devices?
Sincerely,
David.
David Coulson wrote:
I have a number of ASAs and Pix devices
I upgraded my 515E pair to 8.0(4) and it appears to have solved the problem.
David
On 2/7/10 10:05 AM, David White, Jr. (dwhitejr) wrote:
Hi David,
It sounds like you are running into CSCsj53102. What version are you
running on your 8.0 devices?
Sincerely,
David.
I have a number of ASAs and Pix devices with interconnected VPNs. From
each LAN I can telnet into the local device, however on both an ASA5510
and Pix515 running 8.0 I am unable to telnet into the device from across
a VPN. An older Pix501 running 6.3 will allow me. I can ping across the
VPNs
It's probably cheaper to pick up an Adtran OC-3 Mux (Opti-3 or
something) and use a traditional PA-MC-T3 and a PA-T3 card in a 7200,
than it is to find a whole new router to do it :)
Tony Varriale wrote:
Can't do it. You'll have to look at another platform for channelized
OC3.
I've noticed weird CPU utilization on a 7513 recently upgraded to
12.4(23) (AdvIP w/ SSH). The two top processes, by CPU usage, are these:
103 5834624 9290243628 2.78% 2.58% 2.50% 0 IPC LC
Message H
3 3708356 10387227357 0.98% 0.87% 0.82% 0 IPC CBus
Justin Shore wrote:
That's not a bad idea. Though wouldn't pointing a default at an
interface force it to ARP constantly? Several hundred CEs ARPing
non-stop could be a load issue on your PE.
It's a serial interface. It doesn't ARP :-)
___
I'm surprised it worked mid 2007 - I've certainly had no success loading
full tables into 256Mb in the last two years without aggressive filtering.
So, my answer would be 'no'. I'd be tempted to use a Linux or BSD box if
you just want a basic route server.
Ang Kah Yik wrote:
Hi all,
Would
Justin Shore wrote:
Morning, Larry. Do you know if the channel-group # is significant to
each DS1 or does the channel-group # have to be unique across the DS3?
I'm thinking that it's unique to the DS1 so that you can create X
number of channel-groups on a DS1 if needed but I'm not 100% on
I always hate this sort of configuration...
Why not just assign Gi1/2 a secondary address from your 192.168 subnet
and make life simple? :)
Ross Vandegrift wrote:
ip route 192.168.100.0 255.255.255.0 GigabitEthernet1/1
ip route vrf foobar 192.168.200.0 255.255.255.0 GigabitEthernet1/2
Yep, they only do ATM. A PA-T3 (or, PA-MC-T3+) is required to do frame
or a plain old DS-3.
That's why a PA-A3-T3 goes for next to nothing on the used market.
Justin Shore wrote:
Is the PA-A3-T3 ATM only? I have to use a DS3 for backhaul from a
small remote POP and would like to avoid the
Paul,
They would need to do two things.
1) AS prepend on the routes they advertise to you, so the AS path is
longer than their path through Cogent. This will force most of their
inbound traffic via Cogent.
2) Local pref setting for routes received from you to make them less
desirable than
Yep, but remember, if you move the serial port adaptor from one USB port
to another, it will end up with a different COM port name - At least on
Windows.
adrian kok wrote:
Hi
I want to connect to the console port
but my laptop is only having the USB without the com
(serial port)
Now i try
You could fix it with a route-map and as-path.
ip as-path access-list 98 permit ^3356$
route-map as-3356-inbound permit 5
match as-path 98
set local-preference 200
Then in the router bgp section, add this:
neighbour 4.53.194.5 route-map as-3356-inbound in
This will solve the problem for the
Roy wrote:
Just to bring everybody up to date, the ISP keeps saying its something
we are doing. To eliminates any quirks, we have a spare router
directly connected to the metro ethernet box now.
I've not really paid much attention to the technical side of this, but
having turned up BGP
We experienced a weird issue today on a Catalyst 6500 (Sup720, 12.2SXF).
The switch has a variety of cef256 and cef720 cards, but there are no
DFCs involved.
Two devices within the same VLAN were talking to each other via TCP -
nothing exciting. Devices are on two different cards within the
The whole router reloads, or just one of the RSPs? Have you tried it
with just a single RSP? Maybe one is dying?
FYI, I have experienced great stability with
rsp-ik91sv-mz.122-25.S12.bin - Some routers have been running it for
almost 18 months. I'm not saying it's perfect, but I would suspect
Robert Boyle wrote:
That is basically true. There are no cards for the VXR which use the
TDM bus. However, a VXR does allow you to use new NPE cards -400 -G1
-G2 and it gets Cisco more money. The other difference is that some
older cards are no longer supported in the VXR chassis.
Ah, so there
Manaf Oqlah wrote:
Routing entry for 10.10.0.0/20
Known via connected, distance 0, metric 0 (connected, via interface)
Routing Descriptor Blocks:
* directly connected, via Vlan111 - Vlan101 is the main vlan
on 7600 router which has the ip address 10.10.10.1 (clients gateway)
Rodney Dunn wrote:
12.0(32)S latest or 12.4(19a) are good places forthe 75xx.
Does 12.4 on the 75xx support SSO/NSF?
David
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at
Eric Kagan wrote:
It
also eliminates the need to get the NON-VXR's out (which you will probably
end up doing sooner than later and quickly regret the NON-VXR move). We did
the same thing about 4 years ago and I swore at myself as I swapped out each
one with a VXR over the past 2 years..
Peder @ NetworkOblivion wrote:
Is anybody using one or more PA-MC-T3 cards with a 7200vxr with NPE300?
In the past.
If so, what kind of performance are you seeing with basic config
(mlppp enabled, but not nat, fw or bgp)?
It seemed happy. I used CEF per-packet rather than MLPPP. I know
Paul Stewart wrote:
Is this because I need to configure
timeslots still on the controller?
Yep.
controller t1 5/1
channel-group 0 timeslots 1-24
Then you'll get a serial 5/1:0
David
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
I am looking at implementing some IP takeover services on a network
behind Pixs (I think it's a pair of 535s running 7.2 - I don't control
it, but I can request config changes). It would appear that Pix does not
handle gratuitous arp responses in any useful way, which as a security
appliance I
What mac is it sending too? where does it get the arp entry from?
--
David Coulson [EMAIL PROTECTED]
Sent from my BlackBerry
-Original Message-
From: Rafael Rodriguez [EMAIL PROTECTED]
Date: Thu, 15 May 2008 19:34:25
To:cisco-nsp@puck.nether.net
Subject: [c-nsp] Set a L3 routed
You have to use an fast ethernet port with a external dsl modem... Run pppoe
client on cisco with modem in bridge mode passing ppp to router.
--
David Coulson [EMAIL PROTECTED]
Sent from my BlackBerry
-Original Message-
From: Scott Granados [EMAIL PROTECTED]
Date: Mon, 12 May 2008 10
Speedstreams do. 5200 or something
--
David Coulson [EMAIL PROTECTED]
Sent from my BlackBerry
-Original Message-
From: Sridhar Ayengar [EMAIL PROTECTED]
Date: Mon, 12 May 2008 13:28:59
To:[EMAIL PROTECTED]
Cc:Scott Granados [EMAIL PROTECTED], cisco-nsp@puck.nether.net
Subject: Re: [c
Any particular you don't want to use a BGP session for this?
Jérôme Fleury wrote:
Hi all,
I'm looking for a way to *dynamically* export routes from a VRF to the
global routing table.
It should be the reverse of that feature:
BGP Support for IP Prefix Import from Global Table into a VRF
I think the 7200 platform is the only one from Cisco where I have never
had a OIR hiccup.
Gert Doering wrote:
7200s perfectly well support PA OIR.
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
Gert Doering wrote:
For 7500s, I can second that - but for the 7200, never ever any problem.
On a 7500, if it was VIP based I would pretty much guarantee that the
router would require a reload - Even manually forcing a bus stall rather
than expecting the card insertion to do it right. The
Assuming everything is dynamic, Framed-Address will set the remote side
IP (you will need to use Framed-Netmask to set it to a /32). Then you
can use Framed-Route to add a route pointing to that /32.
Paul Stewart wrote:
Thanks
So if I go the radius route, if there a way for me to inject
Dracul wrote:
a. Should my configuration involve route reflectors?
Nope.
b. Do I need interconnectivity between the 2 routers? ethernet or serial?
Which ever is the most cost effective way to get the capacity necessary
from one router to the other. IOS doesn't care. As long as your pipe
Jonathan Charles wrote:
Configuration register is 0x2102
What is the output to the console before it drops you to the rommon prompt?
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at
Ted Mittelstaedt wrote:
So, we can run Linux on the Cisco routers,
My understanding is that you run Linux on an x86 device connected to
your switch/router backplane. The NAM is a good example of an existing
Cisco product that fits this model.
Of course, Linux could probably run natively on
Justin M. Streiner wrote:
Does the router crash when you insert any other port adapters?
Does it crash when you insert the card, but boots happily if the card is
already in when you power on?
David
___
cisco-nsp mailing list
Are you using multiple 7206 chassis and multiple NPE-G1s for testing?
Does it happen consistently across all of your devices?
Only time I had a problem similar to this was with a flaky NPE or memory
on the NPE.
Jason Berenson wrote:
Rodney,
When I say pop in, I mean the router is booted and
On a separate note - A long time ago Rodney and others were talking
about SB for 7500s. Did that ever happen?
james edwards wrote:
Is anyone running 122-31.SBxx on the 7206 NPE-400 and/or G2 ? If so, what
SBxx and what is your experience ?
122-31.SB11 is the latest and contains fixes that
Usually when IP takeover occurs, the new 'active' node will send out an
ARP update message to force all devices on the broadcast domain to
update their ARP table. I've run this type of failover (as opposed to a
'virtual MAC') with good success in a variety of configurations.
Especially if you
Dispatch mode should work - You just need to have the virtual IP
configured on the nodes, and make sure they don't ARP for it.
Unless I'm missing something?
Paul Stewart wrote:
Thanks... was going to go down that route previously but the server admin
doesn't want to do NAT and the servers are
You can do:
show run int virtual-access XXX
It probably won't list it in there though.
You can inject it into the interface via RADIUS using the Cisco-AVpair
attribute
Cisco-AVPair = lcp:interface-config#1=service-policy output llq-policy
FYI, those users are technically PPPoVPDN - PPPoE and
Maybe I missed something. Your upstream manages the routers, so can they
not explain the route flaps? I would think the burden would be on them
to demonstrate why your sessions reset?
Was there an event which caused the flaps?
Frank Bulk wrote:
We're not that desperate to monitor BGP flaps to
William Jackson wrote:
Which way is this setup cabled?
1.all 4 pairs of cables going back to a single circuit breaker of
( 6000/48 = 125Amp )
Even if all 4 were on the same breaker, you'd distribute your current
across all four pairs.
I am not an electrical guy but I would have
One of the big advantages of sub-interfaces over VLAN interfaces is that
if 'VLAN 100' on one port is a totally different network to 'VLAN 100'
on another. Using a sub-interface you can configure them as unique L3
interfaces. I've done this a lot with dot1q handoffs, and it works nicely.
Is
Sridhar Ayengar wrote:
Couldn't you do it with some kind of T3 channel bank?
Nope.
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
Hi-
I am looking at a deployment with a pair of 7301s with two DS-3s
connecting them. The intention is to extend an Ethernet segment from one
port across the two DS-3s to a port on the second 7301. Having used
bridge-groups in the past for high bandwidth applications, I realize
that they
Rodney Dunn wrote:
Push more load and the CPU will go up but your overall no drop rate
and performance is much more with that newer processor.
So a similar, if not the same, argument as to CPU usage on the NPE-G2? :)
David
___
cisco-nsp mailing list
Mark Kent wrote:
CPU utilization for five seconds: 54%/53%; one minute: 52%; five minutes: 52%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
462800142161 19 0.08% 0.03% 0.02% 0 Per-Second
Jobs
741108 4356194 0 0.08%
Actually, CEF per-packet usually gives more throughput than MLPPP as
there is less overhead. You ran run the Ts in the group as HDLC, rather
than PPP.
david raistrick wrote:
On Fri, 14 Mar 2008, Nick Voth wrote:
Thanks very much David. That definitely helps. Yes, our 2 T's are on the
Nick Voth wrote:
Thanks again guys. It seems that the consensus from all that I've read and
the replies that I've gotten is that using CEF with per-packet is a great,
low overhead way to do it, BUT with sensitive applications like VoIP, MLPPP
will keep your packets in order better. I'll
Gregory Boehnlein wrote:
Is there any specific reason why you need MLPPP? How about just
using per-packet load balancing? We do that on our PA-MC-T3 via the
following:
I believe MLPPP handles fragmentation better than CEF load sharing, so
you end up with the fragments being received
You should be able to run unnumbered on the Serials and Multilink and
save yourself a boat load of IPs.
Has anyone had problems using /31s with Ciscos recently? I always had
problems with a x.x.x.0/32 loopback, so I'm loathe to try /31s on
anything important :)
Troy Beisigl wrote:
Hi Nick,
Why not make your life easy and just run BGP between them? Do a default
originate towards A B (that is from hub-A, hub-B, A-B, B-A) and
use local preference to handle the best path arrangement. Same for
routes originated at A or B. Should be a pretty brain dead
configuration, I would have
Wayne Lee wrote:
We are currently getting our transit via BGP from 2 seperate
providers, we have our own AS and now we have a customer who wants us
to provide them with BGP transit. The customer also has their own AS.
I have searched the net for example configs but so far all I have
found is
What is in the log for the previous five minutes?
sh log | inc HA
Gregory Boehnlein wrote:
Hello,
We're running a Cisco 7513 w/ Dual RSP 4+s in SSO mode. IOS is
version Version 12.2(25)S12. We received a notification of an SSO failover
from our Master RSP to our Slave. Prior to the
Gregory Boehnlein wrote:
Feb 15 00:49:57: %HA-3-SYNC_ERROR: CCB Playback error.
Feb 15 00:49:57: %HA-5-SYNC_RETRY: Reloading standby and retrying sync
operation (retry 1).
I must have missed this last night..
This is from 12.0 S, but it may still apply.
CSCsd12203
Symptoms: On a
Get a RJ45-RJ45 patch panel - That is, a panel with RJ45 connectors
wired straight through on both sides. Plug your octal cable into one
side, then run patch cables to your devices and use a RJ45-DB9 adapter.
Or you can run a patch cable directly into a device that has a RJ45
console port.
Build an basic IP tunnel or IPSec connection between the two locations
and treat it as a point to point for EIGRP, OSPF or BGP?
Dan Troxel wrote:
The issue is we cannot advertise to the net any sub /24 nets. Thus, we need
to control those some how with an internal mesh - but the old and the
When the GSR stops routing, I'm guessing it doesn't drop IGP
adjacencies? That's usually what I rely on to figure out if a router is
useless, although maybe it won't help for you in this situation.
I'd be more concerned as to why the GSR 'stops routing' than trying to
rebuild the network
BFD supposed to help in these brain-dead cases ?
(IGPs 'dead' timers should also kick-in, but usually BFD would be doing
this much faster).
David Coulson wrote:
When the GSR stops routing, I'm guessing it doesn't drop IGP
adjacencies? That's usually what I rely on to figure out
Maybe I'm missing something, but since when did a 1000BaseSX GBIC
support single mode? You'll probably need a LX GBIC for this.
Sunet Sysadmin wrote:
Hi all,
we have a cisco 7200 series router and we want to terminate ADSL layer2
user on gigabit ethernet.
We have GBIC card in the router
I'm not sure how much memory is required to load 12.4 onto a VIP - I
only run 12.2S on the 7507s/7513s I manage. That said, you can probably
pick up 128Mb of DRAM and 8Mb of SRAM for less than $50 to get the card
up to snuff. Plus, if you're really wanting to run 12.4, you should
probably get
, IL 60901
815-936-4647
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Coulson
Sent: Wednesday, August 01, 2007 3:01 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Terminals within Terminals
Maybe I'm just not with it today, but I keep
Maybe I'm just not with it today, but I keep hitting this problem.
I reverse telnet from one router into another. From the second router I
run a command that runs for a while (e.g. pinging something with 1
packets). if I want to stop it early I would just do Ctrl-Shift-6 x.
Works great
1) Do you have dCEF enabled?
2) Do a 'show int stat' to figure out if it's using distributed
switching or route-cache/process
3) If you're using dCEF, all of the packet switching will be done on the
VIP. Maybe that's part of the issue. I'm assuming you've got a 128Mb/8Mb
VIP?
I've worked with
I do it all the time with routers - Not with a 2800, but with others. I
can't imagine why it would have a problem, unless it's in the middle of
doing something to it while you swap it out.
Jonathan Charles wrote:
So, I am curious, can you pull a CF card from a 2821 while the router
is up and
Nope - Any old Cat5 will do the trick. If you're seeing errors on
multiple circuits, and they're delivered on copper, it might be
something telco related on the backend. They should be able to do tests
against the NIU and CSU and establish if the issue is on the telco
facilities or on the
I have a 7507 that started to do this today - Running 12.2(25)S12, and
has been for about six months without any issues. I turned on a GigE
interface on it today, which I actually physically pulled from the
router after getting this error. Even a switch over to the second RSP
doesn't seem to
Don't forget to divide by two as well. Packet in = packet out (mostly).
Or just count all of the input packets.
Hank Nussbacher wrote:
At 07:11 PM 16-04-07 -0700, Shaun R. wrote:
How can i figure out how many pps a 3750G is processing at a given time?
Use a script to parse and add:
Running full tables in 256Mb is close to impossible - I'd not recommend
it :-) I tried to load a single full table (230ish-thousand) routes the
other day into 256Mb and it didn't work too well. You might be able to
save a little memory by disabling soft reloads, but that's not really a
Just make sure you max out the memory on the VIP2... They support 128Mb
of RAM. I have a few in a 7500 in the same configuration in the event a
DS-3 card goes south and they are happy.
Jeff Crowe wrote:
Hi all,
I am planning on installing a PA-MC-8T1 VIP2-50 into my 7500. Are there
any
We've had good success with the Netgear GSM7328S switches. 1U (but
pretty deep) with 24 10/100/1000 ports (4 SFP ports) and lots of L3
features (OSPF, VRRP, Dot1q, etc). Probably sub-$2k if you buy it from
the right place. We push 100Mbit+ through a pair of them, and they don't
blink.
david
not had problems.
The code ~9 months ago was crappy - I'd give you that. It has improved
significantly since then.
Ed Ravin wrote:
On Tue, Apr 10, 2007 at 06:31:48PM -0400, David Coulson wrote:
We've had good success with the Netgear GSM7328S switches. 1U (but
pretty deep) with 24 10/100/1000
PA-MC-8T1
PA-MC-4T1
Joseph Jackson wrote:
Is there a intregrated CSU/DSU T1 interface for the 7200 series? I hate
having to have DSU's all over the place.
___
cisco-nsp mailing list cisco-nsp@puck.nether.net
Justin M. Streiner wrote:
I've loaded a 7507 up with 2 PA-MC-2T3+ cards in the past and don't recall
having any problems, even back in the RSP4 and VIP2-40 days... Granted,
none of those customers were taking full BGP feeds or anything like that.
Is there any compelling reason to use a VIP4
Phil Banh wrote:
In particular, there is a limitation on the number of multilink PPP
bundles and number of T1s participating in the multilink bundles, that you
may run into:
This raises a point I've not had to face yet - Since we do cisco -
cisco installs, pretty much every T1 we have uses
Paul Stewart wrote:
My question hopefully has a quick and generic answer... if you don't have
enough CPU (RSP or VIP) what would the indicator be that you need to
upgrade? Dropped packets, high CPU??
After spend a lot of time working on 7500s, if you get the configuration
correct there
Pete Templin wrote:
Step back and analyze: do you really need NPE-G1 (a device rated around
1 million pps, so we'll figure 100kpps real-world) to handle ~6-8kpps?
I'm showing about 4kpps on 4xCT3. Consider NPE-225, and you'll see the
price drop significantly. Plus, you won't need Gig
81 matches
Mail list logo