[c-nsp] Cisco to Juniper LAG/LACP - Juniper not sending traffic over both links.

Hey networkers, I have 3 sites connected to a service providers MPLS network. Two of those sites (Dallas and LA) are configured as etherchannel/LACP ports with 2 1gig uplinks in them. On our end we have Catalyst 6506-E switches the provider side is Juniper gear (I don't have model info). The

Re: [c-nsp] Cisco to Juniper LAG/LACP - Juniper not sending traffic over both links.

Sent from a mobile device On 07/09/2012, at 6:58, Joseph Jackson recou...@gmail.com wrote: Hey networkers, I have 3 sites connected to a service providers MPLS network. Two of those sites (Dallas and LA) are configured as etherchannel/LACP ports with 2 1gig uplinks in them. On our end we

Re: [c-nsp] Three ISPs - Three Edge Routers - iBGP Mesh

On Tue, Nov 22, 2011 at 8:41 AM, Mark Mason mma...@jackhenry.com wrote: Two of our DC's are about to get their 3rd internet drop. Each ISP connection has its own edge router. HSRP is running facing on the LAN side. Please see https://supportforums.cisco.com/message/3496562#3496562 for

Re: [c-nsp] QoS configuration conflict for flowmask on SVI interface behind FWSM

On Wed, Nov 16, 2011 at 1:49 AM, Phil Mayers p.may...@imperial.ac.uk wrote: On 11/16/2011 05:08 AM, Joseph Jackson wrote: Hey List, I'm wanting to apply a policy-map to rate limit a port that is a member of a vlan that is configured as a firewalled vlan.  When I apply the service-policy

Re: [c-nsp] Full BGP Feed Convergence Time on ASR 1006 RP2 Setup

On Fri, Nov 11, 2011 at 2:45 AM, Mark Tinka mti...@globaltransit.net wrote: I just brought up an ASR1006 + RP2 + ESP20 + SIP10, peering with 3x route reflectors, receiving a full v4/v6/VPNv4 table from them, simultaneously. For v4, the 1st session was done in about 48 seconds, the other two

Re: [c-nsp] BGP

use a prefix list filter sending only that subnet. 2011/10/20 Mohammad Khalil eng_m...@hotmail.com: Hi all , i have in the attached file br1.hq is the border router which terminates 3 international links i want to advertise the x.x.x.x subnet through the provider terminated to CR1 (the

Re: [c-nsp] need advice to analysis traffic immediately

Enable netflow on the router and export it to a collector. Here's a free one that's pretty. http://www.plixer.com/ -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Deric Kwok Sent: Thursday, December 09, 2010 12:43

Re: [c-nsp] full routes / backup router

On Wed, Dec 8, 2010 at 5:30 PM, Adam Greene maill...@webjogger.net wrote: Hi, I need a backup router for a 7206VXR/NPE-400/512MB RAM than can handle full routes from a single eBGP peer. Router provides transit to an end-user. Remaining configs on router are minimal, max throughput is about

Re: [c-nsp] Multihoming

I currently do this for one of my sites and haven't had any issues. You just get a LOA from the ISP you get your /24 from and send it to the other ISP. Easy Peasy. On Wed, Sep 15, 2010 at 10:30 AM, Heath Jones hj1...@gmail.com wrote: Jon there seems to be a bit of a common belief that

Re: [c-nsp] ouch 7204vxr reloaded

How far apart are these issues geographically? Honestly it sounds like you are just having stuff break. It happens. I've had weeks like that were stuff that has ran for years with out issue starts to fail. None of the problems you are having are never been seen before. I've had a disk array

Re: [c-nsp] BGP - hiding AS

I like that idea. I'm going to do that for a similar type thing. -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Mateusz Blaszczyk Sent: Thursday, April 03, 2008 2:54 PM To: Gary Roberton Cc: cisco-nsp@puck.nether.net Subject: Re:

Re: [c-nsp] Router security defaults (WAS RE: Proxy ARP -- To disable, or not to disable..)

Thanks to everyone for all the great info! -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Rikard Skjelsvik Sent: Monday, March 24, 2008 4:42 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Router security defaults (WAS RE: Proxy

Re: [c-nsp] External Firewall

What are you talking about then? -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Fred Reimer Sent: Monday, March 24, 2008 5:03 PM To: Niels Bakker; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] External Firewall I'm not talking about

[c-nsp] Router security defaults (WAS RE: Proxy ARP -- To disable, or not to disable..)

After reading this message it brought to mind the default steps I take whenever a new router is configured for our network. Here's the list of the stuff I do which I got from the hardening cisco routers book. What do you guys think? Should there be anything else? I also try to run ssh on

Re: [c-nsp] Windows networking across subnets

On 2/17/08, Robert Boyle [EMAIL PROTECTED] wrote: At 01:39 PM 2/14/2008, Mike Blodgett wrote: MS 2000. I am just looking to see if there is a router/network hardware solution for this. The do not want to map drives, they want to see all shares/printers in Network Barrio. Welcome

[c-nsp] Telstra ADSL pix firewall running 6.3

Hey all, Anyone have any experince with setting up a pix firewall with Telstras buisness ADSL? I have a pix in sydney that I've been trying to get online but I am running into some show stoppers. Here is the relavent config from the pix ip address outside 165.228.203.90 255.255.255.0 pppoe

[c-nsp] NAT Detection with netflow or anything.

Hey all, I've been thinking about NAT detection for security purposes (rogue wireless AP's, etc). After some searching on the google I haven't been able to come up with much. Other than a page with a few dead links to papers/tools you can use I've come up empty. Anyone have any solutions to

Re: [c-nsp] PA-2T3+ don't want to use anymore multilinks

Opps I meant PA-MC-T3 interface cards. Silly me. On 2/4/08, Joseph Jackson [EMAIL PROTECTED] wrote: Hey all, I have 2 PA-2T3+ at the end of a DS3. I am currently having to split all the t1's off of it and then reform them in a MPPP bundle. Is there anyway around this with those

[c-nsp] PA-2T3+ don't want to use anymore multilinks

Hey all, I have 2 PA-2T3+ at the end of a DS3. I am currently having to split all the t1's off of it and then reform them in a MPPP bundle. Is there anyway around this with those interface cards? Its not a full DS3 as a few channels are split off for voice but I'd like to take all the

Re: [c-nsp] Line Code Violations on DS3

On 2/1/08, Gregory Boehnlein [EMAIL PROTECTED] wrote: Try putting a 12 db attenuator on the transmit portion, then re-try your loopback. We've found that the PA-MC-T3 cards tend to overdrive the DS3 a bit, and the only way that we've been able to get rid of the errors is

[c-nsp] Top 10 Network Engineering Tools

Hey all, Myself and a coworker are trying to get together a list of the top ten tools any network engineer shouldn't be without. We're looking for vendor neutral tools. So what do you all think are the most haves? Thanks Joseph ___ cisco-nsp

Re: [c-nsp] Top 10 Network Engineering Tools

Thanks for all the great replies. I will complie a list of everything that I've recivied and email the list. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] Tacacs+ accounting on ASA/PIX 7.x

Hey all, I know in the past the pix/asa would not generate account records of what command were entered on the device. Does anyone know if this has changed? I've read some docs that talk about accounting traffic that passes THROUGH the device but not accounting for what commands are entered on

Re: [c-nsp] multilink bundle

It is coming out of a adtran T3su. I will give this a shot. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Weis Sent: Wednesday, December 05, 2007 8:52 AM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] multilink bundle Bill Nash

[c-nsp] multilink bundle

Would it be considered retarded to put 23 T1's into a multilink bundle? Joseph ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] multilink bundle

PROTECTED] Sent: Tuesday, December 04, 2007 5:10 PM To: Joseph Jackson Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] multilink bundle On Dec 4, 2007 4:49 PM, Joseph Jackson [EMAIL PROTECTED] wrote: Would

[c-nsp] DSL router recommendation

Hey all, We are starting to look at a standard DSL router / VPN device for our remote engineering workers. I was wondering if any of you have any recommendations on what router from cisco would be the best setup. I'm looking at the product page for the 857 which looks pretty good but was

Re: [c-nsp] DSL router recommendation

Have you ever run into any problems with connecting them to a DSL network? Our users are all over the country and it wouldn't be fun to find out that DSL provider A supports our routers but DSL provider B doesn't. Anyone ever run into that problem? -Original Message- From: [EMAIL

Re: [c-nsp] Configure two AS on one BGP router

You could do it inside a VRF, but I don't know if it would work for what you want since it makes seprate routing tables. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alex Haan Sent: Tuesday, July 03, 2007 10:34 AM To: cisco-nsp@puck.nether.net

Re: [c-nsp] Configure two AS on one BGP router

Oh yep you guys are correct. There is no option to do bgp within a VRF. Atleast not on any of the hardware I am running. Sorry! Joseph -Original Message- From: Skeeve Stevens [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 03, 2007 10:58 AM To: 'Paul Stewart'; Joseph Jackson

Re: [c-nsp] Private ASN

You should be able to do it easily (sounds like you have it already setup). Check out this link http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a008009 3f27.shtml It explains what you are wanting to do. Joseph -Original Message- From: [EMAIL PROTECTED]

[c-nsp] Cisco PIX IPSEC remote access vpn stability

to be DPD disconnects. If it was just one user on a certain ISP I wouldn't even ask the list but have any of you noticed that the remote access IPSec vpn seems to be VERY latency sensitive. Thanks all! Joseph Jackson ___ cisco-nsp mailing list cisco-nsp