Re: [c-nsp] Catalyst 6880-X and GLC-T

2015-09-14 Thread Hughes, Scott GRE-MG
I think no. I have only found that SFP to do 1Gbps on any platform. On Sep 13, 2015, at 1:27 PM, Robert Hass > wrote: EXTERNAL Hi I have question are speeds 10M and 100M supported on GLC-T SFP (RJ45 10/100/1000) on Catalyst 6880 ? Rob

[c-nsp] IPsec Tunnel Hairpinned to GRE-over-IPsec tunnel

2014-05-14 Thread Hughes, Scott GRE-MG
Hello, I have a router terminating two tunnels, one is a regular IPsec tunnel, and one is a GRE tunnel with IPsec protection. Both tunnels work by themselves, but they cannot communicate with each other. I remember reading somewhere that you cannot hairpin an IPsec tunnel to a DMVPN tunnel,

Re: [c-nsp] IPsec Tunnel Hairpinned to GRE-over-IPsec tunnel

2014-05-14 Thread Hughes, Scott GRE-MG
Erm, nevermind. My lack of connectivity was due to a routing protocol issue. The scenario below seems to work (at least in GNS3) On May 14, 2014, at 9:16 PM, Hughes, Scott GRE-MG shug...@grenergy.com wrote: Hello, I have a router terminating two tunnels, one is a regular IPsec tunnel

Re: [c-nsp] Cisco ACS/ASA/RSA SecurID with Group Locking

2013-01-15 Thread Hughes, Scott GRE-MG
In ACS 5.2, you can configure an Identity Store Sequence which will authentication via RSA, and then pull additional attributes from AD (like group membership). Your usernames need to match between systems. You can then send back RADIUS attributes to your ASA based on AD group membership.

Re: [c-nsp] Small, Low Power Cisco Router Recommendation

2012-07-19 Thread Hughes, Scott GRE-MG
Have you seen the 819 routers? http://www.cisco.com/en/US/products/ps11615/index.html On Jul 19, 2012, at 7:23 PM, Rusty Dekema rdek...@gmail.com wrote: Good evening, This question is a bit far afield for this list, but I need a reliable, quiet-or-silent, low-power-consumption Cisco

[c-nsp] Cisco IOS certificate enroll with Microsoft CA

2011-12-16 Thread Hughes, Scott GRE-MG
I'm trying to get a Cisco IOS router to enroll with a Windows 2008 R2-based CA. I'm partially successful. What I'd like to do: 1. Router enrolls via SCEP, no challenge password required. 2. Certificate goes into pending status and approved by a certificate manager 3. Router can automatically

Re: [c-nsp] FWSM failover question...

2011-10-15 Thread Hughes, Scott GRE-MG
OSPF doesn't run on the failover.. Is that causing you issues? On Oct 14, 2011, at 6:49 PM, Jeff Kell jeff-k...@utc.edu wrote: Just finished configuration/installation of a secondary FWSM for failover (active/standby), but it is not behaving as expected (I have ASAs in similar

Re: [c-nsp] ZBFW and DHCP

2011-09-12 Thread Hughes, Scott GRE-MG
Did you setup any zone-pairs involving the 'self' zone? If you don't use self zones, no additional configuration should be necessary for DHCP packets. On Sep 12, 2011, at 9:43 AM, Scott Voll svoll.v...@gmail.com wrote: So I'm setting up a GRE IPSEC tunnel as my backup link with a 2821. I

Re: [c-nsp] using RANCID in a CCIE lab

2011-05-29 Thread Hughes, Scott GRE-MG
I think RANCID is available in EPEL for RHEL, which is a product of the Fedora project. http://fedoraproject.org/wiki/EPEL There's also a few other useful things in there for network/Cisco types (netdisco comes to mind). On May 29, 2011, at 3:46 PM, Keegan Holley keegan.hol...@sungard.com

Re: [c-nsp] 2911 Terminal Server 8bits character problem

2011-03-25 Thread Hughes, Scott GRE-MG
Try using tcp port 400x instead of port 200x. On Mar 24, 2011, at 9:17 PM, Chubby chubby_cri...@yahoo.com wrote: Hi Andrew, This is a reverse telnet session that communicate using Serial TCP 0xFF is part of data payload, and I can not find a way to double the content of payload ie:

Re: [c-nsp] Coax E1 over IP

2009-11-19 Thread Hughes, Scott GRE-MG
We use the CEM modules. They are quite cool. We use them to provide DR for analog T1's. I wrote a small tutorial. http://www.scotthughes.org/cem-failover 2 things to consider: -The cards don't work in the G2 (3945, etc) ISR routers. Haven't tried it, but that's what I've been told. -Ask

Re: [c-nsp] Issue with secondary ip address

2009-11-04 Thread Hughes, Scott GRE-MG
You need to setup a superscope on the windows box that includes both the primary and secondary subnets. Even if you don't hand out any addresses in the primary subnet, it needs to exist and bound to the same superscope as your secondary subnet. Sent from my iPhone. On Nov 3, 2009, at 11:19

Re: [c-nsp] OT: Router//Switches Hardware inventory

2009-09-29 Thread Hughes, Scott GRE/MG
Netdisco does a tremendous job of hardware inventory. It discovers new devices via CDP and stores it's data in a database. It knows about blades, wics, and NM modules (with serial numbers for all) http://www.netdisco.org Sent from my iPhone. On Sep 29, 2009, at 5:39 PM, omar parihuana

[c-nsp] VRF-aware Circuit emulation?

2009-07-24 Thread Hughes, Scott GRE/MG
Does anyone know if Circuit emulation using NM-CEM-4TE1 cards supports the xconnects inside a VRF? Scott NOTICE TO RECIPIENT: The information contained in this message from Great River Energy and any attachments are confidential and intended only for the named recipient(s). If you have received

Re: [c-nsp] VRF-aware Circuit emulation?

2009-07-24 Thread Hughes, Scott GRE/MG
) -Original Message- From: Lars Lystrup Christensen [mailto:l...@dansketelecom.com] Sent: Friday, July 24, 2009 3:36 PM To: Hughes, Scott GRE/MG; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] VRF-aware Circuit emulation? Hi Scott, To some degree, this would be rather odd to do as CES is a point

Re: [c-nsp] Questions about upgrading and image of a Modular IOS

2009-07-23 Thread Hughes, Scott GRE/MG
Yes, you need to install to a different (non-existing) directory for the new image. The 'install bind' *should* do the work of adding the proper boot commands. If you have dual-supervisors, you can simply force a switchover instead of a full reload for decreased downtime. If you have

Re: [c-nsp] PIX/ASA Change Control

2009-06-26 Thread Hughes, Scott GRE/MG
Websvn is very slick. RSS feeds, colorized diffs. On Jun 26, 2009, at 8:04 AM, Ryan West rw...@zyedge.com wrote: If you're ever run a ./configure script on a *nix system, you'll be more than qualified to install RANCID. It's pretty straightforward. I'm curious to see what others are

Re: [c-nsp] Incorrect netflow data from 7600/6500?

2009-06-18 Thread Hughes, Scott GRE/MG
I had this problem as well, and was able to solve it with the following config: mls flow ip interface-full From: cisco-nsp-boun...@puck.nether.net [cisco-nsp-boun...@puck.nether.net] On Behalf Of ML [...@kenweb.org] Sent: Thursday, June 18, 2009 7:36 PM