[c-nsp] Two Cisco 8xx, point to point multicast??

2011-05-26 Thread Neal Rauhauser
I have a friend who has been gifted with two new Cisco 881s and strict orders to get multicast flowing between two locations using a GRE tunnel. We're happy with our IP routing, tunnel protection won't be a problem, but it's been forever since I touched multicast and these things show no signs

[c-nsp] Troubled 6509s, can't get BGP session ENCORE

2011-04-01 Thread Neal Rauhauser
These two machines are connected direct over a hundred yards of single mode fiber. The link is up, carrying a lot of traffic, no errors, no log entries. I recently wiped out NAT on one of them and I have scrubbed redistribution on both, so only the connecteds that needed it are handled in

[c-nsp] Trouble 6509s, can't establish BGP on point to point link

2011-03-30 Thread Neal Rauhauser
I have the following two 6509s connected via a short single mode fiber run - they're about a hundred yards apart. BGP sessions between them bounce on the BGP timer and never properly establish. This link carries a lot of traffic and it never stumbles, not in terms of anything in logs, no errors on

Re: [c-nsp] Trouble 6509s, can't establish BGP on point to point link

2011-03-30 Thread Neal Rauhauser
: On Wed, Mar 30, 2011 at 1:33 PM, Neal Rauhauser neal.rauhau...@gmail.comwrote: I have the following two 6509s connected via a short single mode fiber run - they're about a hundred yards apart. Are you sure the fiber and path are ok? patch panels, sfp's etc.. I've replaced good fiber

[c-nsp] WS-C2950-EI as ISP access, best practices

2011-03-16 Thread Neal Rauhauser
I've just inherited a plant with a few dozen WS-C2950-EI doing access duty - an apartment complex. We've had just ridiculous stuff, like certain models of customer NAT device that will helpfully reforward an unknown unicast frame(!), and I've pretty well had my fill of Windows antics on this

Re: [c-nsp] WS-C2950-EI as ISP access, best practices

2011-03-16 Thread Neal Rauhauser
well here. HTH, On Wed, Mar 16, 2011 at 2:13 PM, Neal Rauhauser neal.rauhau...@gmail.comwrote: I've just inherited a plant with a few dozen WS-C2950-EI doing access duty - an apartment complex. We've had just ridiculous stuff, like certain models of customer NAT device

[c-nsp] L2TPv3 - which image for 7200? 7100?

2010-04-09 Thread Neal Rauhauser
I have to do an L2TPv3 link (hoping it can move entire 802.1Q streams) and I'm puzzling over which version of IOS is best. I have a 7206 /w NPE 300 on one side and a 7140 on the other, would like to use the same code on both. And where the heck can I get schooled on the plethora of trains

[c-nsp] two 72xx, bridging via POS link?

2010-03-27 Thread neal rauhauser
I have a pair of 7200s at two locations with a 155mbit radio link between them. We're hooking up PA-POS across this and I am wondering how to best bridge across the link. Yes, I have to bridge. I've looked at it every which way, we're replacing a metro fiber transport for another provider so

[c-nsp] Cisco 6509 SUP2-2GE /w PFC2 - which code?

2010-03-16 Thread neal rauhauser
I have just received a couple of Catalyst 6509s that are destined for a small exchange point. They've got SUP2-2GE /w PFC2, eight port 6408 GBIC blades, and flexwan blades that will be taking POS ATM WAN interfaces. They'll be running BGP+OSPF and not much else. I see one has 8.6.4 CatOS

[c-nsp] UBR 7223 mysteries - which cable card?

2009-08-28 Thread neal rauhauser
I have a UBR 7223 under my care and I've got the following code on it: 1 -rw-19770888 Aug 17 2006 21:19:32 -05:00 ubr7200-k8p-mz.123-9a.BC9.bin 2 -rw-23077708 Jul 16 2009 10:47:46 -05:00 ubr7200-ik9su2-mz.123-23.BC7.bin The machine has this linecard in it: Slot 2:

[c-nsp] disable break on boot for IOS??

2009-07-13 Thread neal rauhauser
I have a situation with a former employee who still has legitimate physical access to a shared space where we have some Cisco equipment. Today one of our field guys located a UBR924 attached to our cable modem plant with the cutest little rogue Linux machine attached to its ethernet port. I

Re: [c-nsp] disable break on boot for IOS??

2009-07-13 Thread neal rauhauser
://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff | Fax: 914-460-4139 -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of neal rauhauser Sent: Monday, July 13, 2009 5:11 PM To: cisco-nsp@puck.nether.net Subject

[c-nsp] PA-POS-OC3 to Juniper, how to configure?

2009-06-23 Thread neal rauhauser
I have a Cisco 7507 with a PA-POS-OC3 in a VIP. This is attached to some sonet transport that ends at some sort of Juniper router. I think the tech I got is pretty new to the large boxes and we've spent some time wrestling with turn up. I don't know Juniper but this is what I've been sent as the

[c-nsp] finding bad actors on Cat 2924 ports

2009-03-02 Thread neal rauhauser
I have a Cat 2924 with a port facing an old Waverider radio. I've got about 80 MACs live on the interface, it's got a steady 5% error rate, and the net effect is that it's behaving like WRED with a nearly full cue - traffic for all slows to a crawl. I've been fiddling with it a bit trying to

[c-nsp] 7507s: which image for production? For IPv6?

2009-02-18 Thread neal rauhauser
I do believe we'll be seeing new code from Cisco before too long and I'm starting to get ready for that. We've got 12.0S in the field now and I'm bringing one machine up to 12.2.46a to see how it acts. I've got 256 meg RSP4s, VIP 2-50 that are getting upgraded to VIP4-80 this week, OC3 and DS3

[c-nsp] 1k customers down, radius auth on ubr7223

2009-01-03 Thread neal rauhauser
I've just stepped into a real mess - cable modem provider who lost their techs ten days ago ... and on Thursday their entire FreeRadius setup just mysteriously vanished ... on two different boxes(!) Can someone quickly tip me as to how to let cable modems work without requiring radius auth?

[c-nsp] QoS problems on ATM pvc - IOS bug?

2008-03-26 Thread neal rauhauser
This one is a real head scratcher for me. I've got two 7206s, both running c7200-p-mz.123-22.bin, both with identical PAs. One is in production, the other is a hot spare. I got frustrated enough with trying to get QoS set up that I pulled this config line for line from an example on CCO:

Re: [c-nsp] GRE vs IPIP

2008-03-08 Thread neal rauhauser
Felix, The IP in IP encapsulation slips right through any provider, while GRE is protocol 47 and may be filtered (just like PPTP). I use both with primarily EIGRP as the IGP in the tunnel and they both work fine. Do look into the tunnel protection mode stuff - much easier than

Re: [c-nsp] [2nd Try] Decent Network Documentation and Topology

2008-02-19 Thread neal rauhauser
I would say the first step is determining who the target audience is for the documentation - what are the business drivers behind it? I've got a customer who happily pays for me to drawn pictures, comment up configs, label cables, write maintenance procedures intended to cover them if

Re: [c-nsp] Windows networking across subnets

2008-02-14 Thread neal rauhauser
My knowledge is rather dated, but if I recall correctly RFC 1001/1002 govern NetBIOS over TCP networking. The systems have four modes of resolution - broadcast, point to point, and then the two methods combined with either broadcast or point to point primary. This has likely changed with the M$

Re: [c-nsp] IPv6 on C3550, finally? (12.2(44)SE)

2008-02-01 Thread neal rauhauser
Actually you might be pleasantly surprised with an IPv6 attack on a 3550 - I suspect the IPv4 traffic would just keep on truckin', less any routing updates that might arrive during the event. I had a customer with about 14k public IP addresses passing through a 3550. The machine was crazy

Re: [c-nsp] telecommuting support jobs for BGP guys?

2008-01-25 Thread neal rauhauser
situation, I would expect there are a number of network engineer types that would love a telecommute position. Roy neal rauhauser wrote: Seven months ago I limped home to momma, nursing a back injury and intending to help get the farm ready for sale, as she is ready to move to town. Now

[c-nsp] telecommuting support jobs for BGP guys?

2008-01-25 Thread neal rauhauser
Seven months ago I limped home to momma, nursing a back injury and intending to help get the farm ready for sale, as she is ready to move to town. Now that I've been here a while I'm inclined to stick around, but not even the ISPs up here are multihomed. Right now I help drive a regional

Re: [c-nsp] problem of both ip route 0.0.0.0 and ip default-gateway configured

2008-01-12 Thread neal rauhauser
The ip route 0.0.0.0 0.0.0.0 is to allow the machine to forward traffic. The ip default-gateway allows the management module of a device to send traffic for nonlocal destinations - a machine that does not route such as L2 switches or am achine that has routing turned off will use the

[c-nsp] RSP redundancy with SSO?

2007-12-18 Thread neal rauhauser
Can anyone comment on RSP redundancy with SSO mode? I have a test 7507 with rsp-k4pv-mz.120-32.S8.bin on both RSP2s. I've done this: service single-slot-reload-enable redundancy no keepalive-enable mode sso And it doesn't seem to ever sync the slave ranttest#show red Redundant System

Re: [c-nsp] Building New office Building

2007-12-05 Thread neal rauhauser
Is Cisco-NSP really the place to ask a class project type question? I would think you'd get more play on the Groupstudy Cisco certification mailing list. On Dec 6, 2007 12:18 AM, Mad Unix [EMAIL PROTECTED] wrote: Building New office Building We are in the planning stage of a new building

[c-nsp] small box for switching POS link?

2007-11-20 Thread neal rauhauser
Ladies Gentlemen, I have a customer with PA-POS-OC3 cards installed in a pair of Cisco 7507s. Right now they can physically remove the line from the first machine, plug it into the second, and things neatly switch over. They've asked me to come up with a remote control method of

[c-nsp] Internap Flow Control Platform?

2007-11-02 Thread neal rauhauser
I imagine some of you are using the Internap FCP product. How do you find it? I've just spoken with their sales and technical staff - got a customer evaluating it - I wanted to hear real world stories. My guys have a couple of routers, a couple of upstreams, and they're about to add a couple of

[c-nsp] 100 meg links - VIP2-50 or VIP4-50?

2007-10-30 Thread neal rauhauser
I have a customer who is going to provide peering links from a 7507 to two different customers. They're going to take full routes and we're expecting 25 - 50 mbits of traffic from each. Is a VIP2-50 with two PA-FE-TX going to handle this or will the extra juice of the VIP4-50 be required?

Re: [c-nsp] Where do you put the optical attenuators?

2007-10-26 Thread neal rauhauser
Well, BOFH style, I would say you put them where you need them :-) We had a problem with this last month - burned up a PA-POS-OC3 due to having it on only 800' of dark fiber. We bought 3dB through 15dB attenuators from Fiber Instrument Sales along with an inexpensive test kit ($1,000 or so)

[c-nsp] pruned routes, memory still low on Cisco 7507

2007-10-14 Thread neal rauhauser
I have some 7507s under my care with RSP4s taking full routes from Sprint and McLeod. We were getting tight on memory so we stopped accepting all /24s except 192.0.0.0/7. The memory usage reported by sh ip bgp su dropped from about 57 meg to half of that, but show proc mem still appears to be

Re: [c-nsp] pruned routes, memory still low on Cisco 7507

2007-10-14 Thread neal rauhauser
I cleared them soft when I made the changes. I'll try a hard clear next - thanks. On 10/14/07, Oliver Boehmer (oboehmer) [EMAIL PROTECTED] wrote: neal rauhauser wrote on Sunday, October 14, 2007 6:40 PM: I have some 7507s under my care with RSP4s taking full routes from Sprint

Re: [c-nsp] 3550 as a BGP Router

2007-09-12 Thread neal rauhauser
BGP requires memory to store routes. The 2610 maxes out at 64 meg. The 3550 is hardwired with 64 meg. They're equivalent in terms of storage space and I think roughly equivalent in processing power. I think a 64 meg box starts to have trouble around 50k routes if I'm recall correctly. If all the

Re: [c-nsp] Unrecognized cookie format for WIC-1DSU-T1

2007-08-28 Thread neal rauhauser
Is it a WIC-1DSU-T1? And you need a WIC-1DSU-T1-V2 for the 18xx/28xx/38xx series ... if it came out of an older router this is likely the case. On 8/28/07, Ed Ravin [EMAIL PROTECTED] wrote: We just stuck a WIC-1DSU-T1 removed from service on a different router into a 2801. The router says

[c-nsp] 12.3.22 lawful intercept on 7206 - DHCP bug eats 2, 000+ customers

2007-05-17 Thread Neal Rauhauser
I have a 7206 with NPE-G1, upgraded from 12.2.15T11 last night to 12.3.22 lawful intercept and simultaneously taking from 256m to 1024m of memory. The system has BGP peers and a couple of thousand DSL customers attached (I know, I know, OS and memory upgrade are part of me splitting it