[c-nsp] Intermittent Port Forwarding Problems with New-Style NAT

2014-05-07 Thread Gary T. Giesen
I have a router (2821, running 15.1(4)M8) with the following config: interface Dialer1 Internet PPPoE mtu 1492 ip address negotiated ip nat enable encapsulation ppp ip tcp adjust-mss 1452 load-interval 30 dialer pool 1 keepalive 5 ppp pap sent-username user.name password pass123 end

[c-nsp] Randomly Dead Sessions with MLPPP(oE)

2012-09-29 Thread Gary T. Giesen
I've got 2x 7206 VXR/NPE-G1 running 12.2(33) SRE6 acting as LNSs being passed PPPoE sessions from an incumbent provider via L2TP. A couple customers (including my personal Internet connection) using Multilink PPPoE (over ADSL) are randomly experiencing dead sessions several times per day. All 3

[c-nsp] Limit CLI Access to a Particular VRF

2011-03-09 Thread Gary T. Giesen
Is there any way to limit a user's access to a particular VRF when logging into the CLI? (either via AAA or locally). I seem to remember it was available, but can't find the feature name. I'm looking for something similar to the way the ASA's contexts work, where the user can only see the

[c-nsp] 4-byte ASN Support on 7600 SRE2

2010-10-08 Thread Gary T. Giesen
Is anyone running SRE2 (or 1) in production on their Cisco 7600s? Any significant gotchas? Currently running SRD4 and I would like to gain 4-byte ASN support.. GG ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] MST Reserved VLANs on Nexus 5010

2010-08-30 Thread Gary T. Giesen
the fix. timeframe for that is approximately late August. cheers, lincoln. On 06/07/2010, at 6:09 AM, Gary T. Giesen wrote: Just a quick update for everyone. It appears the fix is two releases away. The first (Deewhy Plus) is going to be based on 4.2 and should be out in Q3 2010

Re: [c-nsp] PBR

2010-07-28 Thread Gary T. Giesen
I'm inclined to agree. VRF's are much easier to troubleshoot than PBR when you have problems, as they use standard destination-based routing. When you use PBR, looking at the routing table is virtually meaningless. GG On 7/28/10, Jan Gregor jan.gre...@chronix.org wrote: Hi, The 2811 has two

Re: [c-nsp] MST Reserved VLANs on Nexus 5010

2010-07-05 Thread Gary T. Giesen
frame does appear to Q4 2010. I'm pursuing it with my account team to see if I can get it pushed up but I'm not sure if that will go anywhere. GG On Mon, Jun 28, 2010 at 7:22 PM, Lincoln Dale l...@cisco.com wrote: On 29/06/2010, at 12:26 AM, Gary T. Giesen wrote: Any idea on when that might

Re: [c-nsp] SNMP MIB for Receiving Prefix Counts for Individual Peers

2010-06-30 Thread Gary T. Giesen
Seeing as that was published in Feb 2010, I doubt it's supported by anything yet... I guess I'll have to wait and see... On Wed, Jun 30, 2010 at 9:16 AM, Per Carlson pe...@hemmop.com wrote: Hi Gary. Is anyone aware of a MIB that supports querying the number of prefixes (not the individual

[c-nsp] SNMP MIB for Receiving Prefix Counts for Individual Peers

2010-06-29 Thread Gary T. Giesen
Is anyone aware of a MIB that supports querying the number of prefixes (not the individual prefixes) received from a BGP peer? CISCO-BGP4-MIB has this: cbgpPeerTable Support The cbgpPeerTable has been modified to support the enhancements described in this document. The following new table

Re: [c-nsp] MST Reserved VLANs on Nexus 5010

2010-06-28 Thread Gary T. Giesen
to make all externally-facing bugs available in Bug Toolkit to best assist our customers. As a result, the system administrators have been automatically alerted to the problem. GG On Mon, Jun 28, 2010 at 3:33 AM, Lincoln Dale l...@cisco.com wrote: Gary, On 28/06/2010, at 1:04 AM, Gary T. Giesen

Re: [c-nsp] MST Reserved VLANs on Nexus 5010

2010-06-27 Thread Gary T. Giesen
, Gary T. Giesen wrote: I've run into a bit of a problem with a couple of new Nexus 5010 switches we've recently acquired. I've tried to apply our standard MST configuration, and have run into the problem that the Nexus has 81 VLANs that are reserved for system use (3968 to 4047 4094), which

[c-nsp] MST Reserved VLANs on Nexus 5010

2010-06-25 Thread Gary T. Giesen
I've run into a bit of a problem with a couple of new Nexus 5010 switches we've recently acquired. I've tried to apply our standard MST configuration, and have run into the problem that the Nexus has 81 VLANs that are reserved for system use (3968 to 4047 4094), which are not reserved on any of

Re: [c-nsp] file transfer

2009-10-14 Thread Gary T. Giesen
ttcp is also an option. It's a hidden command in most IOS platforms/releases, and allows you to test TCP throughput. There's also a UNIX version you can use to test between a router and a unix box or between unix boxes. You can google for the code.. On Wed, Oct 14, 2009 at 4:42 AM, Garry

Re: [c-nsp] cisco 7206 VXR router

2009-10-13 Thread Gary T. Giesen
It's not only C routers. The J-series have 4x Gig interfaces, and that box definitely can't route 4 Gig of traffic. Though the issue is definitely more prevalent on the C side. The biggest commonality is that they are software routers. Although even on hardware routers, you'll run into things like

Re: [c-nsp] Hardware for 'managed firewall'

2009-10-13 Thread Gary T. Giesen
We use ASA's in context mode plus some sort of IOS box (28xx, 38xx) with VRF for both Client VPN and LAN-to-LAN VPN. Works decently... GG On Tue, Sep 29, 2009 at 11:34 PM, christian christ...@automatick.net wrote: netscreen management (cli/NSM) is one of the worst i've ever encountered as far

[c-nsp] NAT Global to FVRF

2009-08-20 Thread Gary T. Giesen
I've got a customer that requires localized Internet access from their DMVPN router (they currently receive a default route over the VPN). Their router is setup with the customer (inside) network in the global routing table, and their Internet connection sits inside a Front door VRF (FVRF). Has

Re: [c-nsp] QoS Strategy for Cisco 877

2009-05-01 Thread Gary T. Giesen
, M5 3EZ www.netservicesplc.com -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Gary T. Giesen Sent: 30 April 2009 21:17 To: cisco-nsp@puck.nether.net Subject: [c-nsp] QoS Strategy for Cisco 877 Guys, I've been

[c-nsp] QoS Strategy for Cisco 877

2009-04-30 Thread Gary T. Giesen
Guys, I've been trying a bunch of different methods, but nothing seems to achieve what I want. Ideally I'd like to use Priority Queueing (or something that operates the same) on the ATM0 interface of a Cisco 877. I have 3 classes of traffic: Telnet/SSH/ICMP/Management - High Priority General

[c-nsp] L2VPN Pseudowire Redundancy

2008-11-02 Thread Gary T. Giesen
I'm not sure if this is possible, but maybe someone can give me some input on how to best achieve this. I'm labbing EoMPLS using 4x 7206 VXR. I'd like to create a fully redundant pseudowire (from the provider persective). The idea is to put two PE routers at each end of the pseudowire (with a