Re: [c-nsp] RFC5837

2019-01-12 Thread Nikolay Shopik
On 07/01/2019 17:00, Saku Ytti wrote: Hey, I somewhat recently discovered https://tools.ietf.org/html/rfc5837 Exec summary: your traceroute will show the ingress ifindex where packet came in, allowing you to discriminate LAG/bundle/ae interfaces and determine actual path in network with ease.

Re: [c-nsp] ASR 1k vs 9k as a non-transit BGP router with full tables?

2017-08-02 Thread Nikolay Shopik
On 02/08/17 13:10, Patrick M. Hausen wrote: > Hi all, > > >> Am 02.08.2017 um 12:05 schrieb Mark Tinka : >> On 2/Aug/17 11:58, Gert Doering wrote: >>> This is what we currently do for "BGP edge", and I totally love the >>> box. Even though software updates are as annoying,

Re: [c-nsp] ios tcp defaults

2016-04-22 Thread Nikolay Shopik
If no ip tcp path-mtu-discovery set, TCP MSS will be 538, unless you set ip tcp mss. http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp/command/iap-cr-book/iap-i2.html#wp2736852187 It seems it was always was disabled since its introduction. On 22/04/16 16:59, Sebastian Beutel wrote: > Hi

Re: [c-nsp] IOS-XR and interface discards (input)

2015-05-14 Thread Nikolay Shopik
Search list for details, you need to look for output show controllers np ports all location 0/0/CPU0 show controllers np counters np1 location 0/0/CPU0 | i DROP|DISCARD|NOT On 14 мая 2015 г., at 22:04, Hank Nussbacher h...@efes.iucc.ac.il wrote: We have an ASR 9010 running IOS-XR v 5.1.3.

Re: [c-nsp] 7204VXR replacement suggestions needed

2015-04-30 Thread Nikolay Shopik
Go with ASR9001 if you planning to grow. Yes it cost more than ASR1002X but if you need pure border ASR9001 is absolute power house. And we love IOS XR because of readability of long route-policy. Sorry IOS-XE you still suck when there is lots BGP neighbors configuration and config become wall of

Re: [c-nsp] ASR1002-X (2) full BGP feeds

2015-03-20 Thread Nikolay Shopik
It's usually same memory from same vendor/supplier just different label. On 20.03.2015 20:51, Adam Greene wrote: Besides the risk of not being able to obtain support from Cisco (and maybe being billed by them) if a problem is traced to the third-party RAM

Re: [c-nsp] ASR1002-X (2) full BGP feeds

2015-03-19 Thread Nikolay Shopik
1,000,000 limit is FIB which is only best routes(500K+ routes), RIB only consume RAM. You'll be fine with 8Gb memory, but if you plan to use non-cisco memory, just go with 16Gb its cheap. 16Gb will be enough to store 25M routes as Route-Server last I heard from Cisco. IOSd will only consume half

Re: [c-nsp] How can I increase Ethernet MTU?

2015-01-24 Thread Nikolay Shopik
Victor, From last time remember when we do changes on C3560X and any previous models it involves to change system mtu command, and new setting only apply after reboot (ASIC re-init) On 24.01.2015 13:17, Victor Sudakov wrote: Colleagues, I have a network of about twenty C3560X switches

[c-nsp] IOS XR SFP DOM in SNMP

2014-05-12 Thread Nikolay Shopik
Hey, Does anyone have DOM information in SNMP on IOS XR (ASR9001)? All we got is -32768 on all modules. So far we only tested on 4.3.2, just wonder if they actually fixed on more recent releases. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] IOS XR BGP Filters

2014-01-01 Thread Nikolay Shopik
by default IOS XR won't accept or announce anything, unless you configure route-policy. prefix-list and route-map from IOS can be configured in one route-policy just fine. prefix-set AS655535 192.0.2.0/24 end-set Route-policy AS655535 if destination in AS655535 then pass else drop

Re: [c-nsp] sampled v9 netflow

2013-12-24 Thread Nikolay Shopik
On 29/11/13 15:09, Nikolay Shopik wrote: c7201(config-if)#ip flow monitor IPv4 sampler SM input ^ % Invalid input detected at '^' marker. Try this: c7201(config-if)#ip flow monitor IPv4 sampler ? or c7201(config-if)#ip flow monitor IPv4

Re: [c-nsp] cheap core switch for a hacker space (nonprofit association)

2013-12-09 Thread Nikolay Shopik
Only exception is new cat 3650, with 12Mb buffer, which is double amount from previous generation with just 6Mb shared buffer. On 09/12/13 16:54, Phil Mayers wrote: One important thing to bear in mind: All the cheap Catalyst devices, including 3750, have tiny tiny buffers, so tend to drop

Re: [c-nsp] C6500 IPv6 redistribute with route-map?

2013-12-09 Thread Nikolay Shopik
On 09.12.2013 17:55, Patrick M. Hausen wrote: Didn’t IOS 15 introduce a completely new and rather burdensome licensing mechanism? http://etherealmind.com/ios-15-licensing-how-we-work/ Well thing is, that they did have plans and even implement this on their low-end hardware like ISR routers

[c-nsp] sampled v9 netflow

2013-11-29 Thread Nikolay Shopik
Hey, Trying to configure sampled v9 netflow with 15.1S on 7201 and I can't make it sampled, still 1:1. What I'm missing? flow exporter AS-STATS destination 10.10.90.5 transport udp 9000 ! flow monitor IPv4 record netflow ipv4 original-input exporter AS-STATS cache timeout active 300 !

Re: [c-nsp] sampled v9 netflow

2013-11-29 Thread Nikolay Shopik
On 29/11/13 14:37, Dobbins, Roland wrote: On Nov 29, 2013, at 4:24 PM, Nikolay Shopik sho...@inblock.ru wrote: flow monitor IPv4 record netflow ipv4 original-input exporter AS-STATS cache timeout active 300 flow monitor IPv6 record netflow ipv6 original-input exporter AS-STATS cache

Re: [c-nsp] sampled v9 netflow

2013-11-29 Thread Nikolay Shopik
On 29/11/13 14:59, Dobbins, Roland wrote: Any NetFlow, sampled or non-sampled. Set the active timer to 60s, and the inactive timer to 5s. Even when you draw graph in 5 min interval? As lowering values means more flows exported per min so more load. c7201(config-if)#ip flow monitor IPv4

Re: [c-nsp] raspberry pi

2013-11-24 Thread Nikolay Shopik
OOB console access On 20 нояб. 2013 г., at 10:23, Preston Chilcote (pchilcot) pchil...@cisco.com wrote: Hi Everyone, I'm curious: Does anyone use one or more raspberry pis in their network (for networking related stuff)? What kinds of things are they used for? Thanks, Preston

Re: [c-nsp] IPv6 filters

2013-11-15 Thread Nikolay Shopik
Then mark all your and your customers prefixes with community and announce only these marked. On 15/11/13 09:49, Mikael Abrahamsson wrote: Just using prefix-lists has drawbacks as well, since customers who are no longer customers can end up being transited to your network because you now

Re: [c-nsp] Sup2T / IOS15 licensing questions

2013-08-30 Thread Nikolay Shopik
Isn't paperback license exist for this exact reason, as opposite to e-delivery? On 30/08/13 12:30, Rolf Hanßen wrote: Hello Blake, the question was more the other direction: How do I prove/verify I have a valid license if I receive nothing that says here is your Cisco license #xx for

Re: [c-nsp] 6500, 7600 or ASR

2013-08-29 Thread Nikolay Shopik
Its fits same 16Gb memory, if talking about ram :) On 29.08.2013 19:38, Tony Varriale wrote: Also note the memory restriction on the 1001 compared to a RP2 system. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] 6500, 7600 or ASR

2013-08-29 Thread Nikolay Shopik
Its limited to 4Gb memory, even if you able add more, RP1 running i386 image not x86-64. On 29.08.2013 20:05, Antoine Monnier wrote: Could you give me more details on why you would stay away from systems with RP1 such as the 1002? ___ cisco-nsp

Re: [c-nsp] Cisco Wireless IPv6 Management

2013-08-10 Thread Nikolay Shopik
SNMP seems lagging behind, doesn't report any IPv6 addresess on interfaces though on this release. On 10.08.2013 7:40, Tim Durack wrote: Answering my own question: 15.2(4)JA1 is now available, supporting IPv6 management. On Fri, Aug 2, 2013 at 9:13 AM, Tim Durack tdur...@gmail.com wrote:

Re: [c-nsp] Cisco ASR1002 software images in the wild

2013-08-02 Thread Nikolay Shopik
Nick, modular ESP5 and integrated into 1002 have limitation of 512K, while ASR1001 have 1M. On 02/08/13 14:52, Nick Hilliard wrote: On 02/08/2013 11:29, Olga wrote: Correct me if i'm wrong It's more complicated than this on the asr1000 platform. See the archive for more details. Nick

Re: [c-nsp] asr1001 4 full bgp feed

2013-08-01 Thread Nikolay Shopik
It can take 1M routes, you just need at least 8G memory. And if you need 4 full bgp you need 8G memory anyway. You can fit 3 full bgp in 4G memory but it will be 98-99%. On 01/08/13 10:09, Hitesh Vinzoda wrote: i know that it has limitation of 512k for fib

[c-nsp] separate ipv6 prefix delegation

2013-07-12 Thread Nikolay Shopik
Hey, ISP announce two separate /64 prefixes via DHCP-PD. I import them using ipv6 dhcp client pd ISP6_PREFIX. Then using command ipv6 address ISP-PREFIX ::1/64 to assing it on lan interface. And its assign both prefixes on interface and thus all machines have 2 separate IPv6 addresses in both

Re: [c-nsp] ipv6 on dot11radio interface of 1811?

2013-06-25 Thread Nikolay Shopik
No latest 15.1M doesn't allow it too. On 25.06.2013 20:54, David Hubbard wrote: simply an ios issue and that 15.1T possibly adds this feature. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] ASR1002-X vs ASR9001

2013-04-25 Thread Nikolay Shopik
I understand its CPU not that fast as XEON on ASR1K-RP2, but just wondering how fast it is for bgp full view convergence? On 4/25/13 1:26 AM, LavoJM wrote: Anyway, the 9k is a powerhouse and we love them. Highly recommended. ___ cisco-nsp mailing

[c-nsp] ASR1002-X vs ASR9001

2013-04-24 Thread Nikolay Shopik
Hey guys, So we are looking for router which have 10Gbe interfaces (able push 10-20Gbit), with mostly basic stuff, full bgp, dot1.q. So at first I've look into 1002-X, which is seems fit use enough (with license upgrade). Looking into GPL price I see asr9001 will be much cheaper than fully

[c-nsp] increase MTU lowering load?

2013-04-02 Thread Nikolay Shopik
Will increase MTU from standard 1500 to 9000 will lower load on software based routers (ISR/ISR2, 7200)? Lets assume average packet size will be much larger than 1500. And since there less pps, load should be lower or I miss something? ___ cisco-nsp

Re: [c-nsp] ASR1001 which memory RP1 oder RP2 ???

2013-03-22 Thread Nikolay Shopik
ASR1001 have their own designed RP something between RP1 and RP2 by performance of CPU, its Dual-Core 2.2GHz. RP1 is 1.5GHz Freescale 8548 RP2 is Dual-Core 2.66GHz (XEON) On 22/03/13 12:40, Christian Kratzer wrote: Hi, we a have a pair of ASR1001 with 4GB ram and want to max them out with 8

Re: [c-nsp] ASR-100x intro

2013-02-07 Thread Nikolay Shopik
/sites/default/files/seminar_attachments/anidlis.asr_.1000.archtecture.v0.4.pdf On 07/02/13 06:12, Charles Sprickman wrote: On Jan 16, 2013, at 2:41 AM, Nikolay Shopik wrote: http://www.cisco.com/en/US/prod/collateral/routers/ps9343/data_sheet_c78-450070.html cisco.com/go/asr1000 - data sheets

Re: [c-nsp] ASR-100x intro

2013-02-07 Thread Nikolay Shopik
It separately states 24M VPN IPv4 routes, so just 1M less. ;) On 07/02/13 16:04, Adam Vitkovsky wrote: As some presentation PDFs says RP2 can handle 25M as route reflector. Wow so from ASR1004 and upwards we're indeed not limited by the number of VPN routes anymore so goodbye RR Planes (I'm

Re: [c-nsp] ASR-100x intro

2013-01-15 Thread Nikolay Shopik
, Nikolay Shopik wrote: ESP5 comes with 512K FIB, while ASR1001 which has also ESP5 integrated have 1M FIB. I'm still putzing around the Cisco site, where are you finding these detailed specs? I'm trapped in some link loop that's only giving me the most basic specs… And while I'm here

Re: [c-nsp] Memory upgrade for ASR1001 - 3rd party

2013-01-06 Thread Nikolay Shopik
http://www.ebay.com/itm/M-ASR1K-1001-16GB-16GB-4X4GB-Dram-Memory-for-Cisco-ASR-1001-Series-/190654008152?pt=US_Enterprise_Router_Memoryhash=item2c63dd4b58 Working for us just fine On 06.01.2013 4:02, Robert Hass wrote: I want extend ASR1001 memory to 8GB or best 16GB but at low possible cost -

Re: [c-nsp] ASR-100x intro

2013-01-06 Thread Nikolay Shopik
ESP5 comes with 512K FIB, while ASR1001 which has also ESP5 integrated have 1M FIB. On 06.01.2013 16:26, Robert Hass wrote: On Sun, Jan 6, 2013 at 1:16 AM, Scott Pettit spet...@end2end.co.nz wrote: Hmm, perhaps I was incorrect - the old ESP2.5 appears to have been made End of Sale since July

[c-nsp] 7201 gig interface limits

2012-11-29 Thread Nikolay Shopik
Hey, Is there any limitation on integrated gig interfaces? Can I push 900Mbit on it? I know PA-1GE= have such limitation because of PCI bus IIRC, also gig0/3 + fa0/0 have their own weirdness (CSCty34020). We currently doing 700-800Mbit duplex on one of interfaces and I seems hitting invisible

Re: [c-nsp] BGP full table - 7200 NPE-G2

2012-10-17 Thread Nikolay Shopik
We run 3 full tables on 1Gb. On 17/10/12 11:02, CiscoNSP_list CiscoNSP_list wrote: Will 1GB support 2 full tables? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] BGP full table - 7200 NPE-G2

2012-10-17 Thread Nikolay Shopik
Max ram load is about 62%, plus we run about 25K additional routes here. As its software based router, CPU pretty much depend of how much traffic it pass. On 17/10/12 13:05, CiscoNSP_list CiscoNSP_list wrote: Thanks - What is your ram(+CPU) utilisation? Date: Wed, 17 Oct 2012 12:01:34

Re: [c-nsp] cisco 2960 snmp interface description

2012-10-02 Thread Nikolay Shopik
If you have default snmp config on 2960, there nothing additional need to pass interface names. Its in ifAlias not in ifDescr On 02.10.2012 23:46, Michael Sprouffske wrote: What needs to be done in order for the switch to pass the descriptions of the interfaces. I looked at a debug and the

Re: [c-nsp] cisco 2960 snmp interface description

2012-10-02 Thread Nikolay Shopik
.10005 = FastEthernet0/5 ifType.10005 = 6 From: Nikolay Shopik sho...@inblock.ru To: cisco-nsp@puck.nether.net Sent: Tuesday, October 2, 2012 1:11 PM Subject: Re: [c-nsp] cisco 2960 snmp interface description If you have default snmp config

[c-nsp] ASR IPv6 image

2012-09-17 Thread Nikolay Shopik
Hey, Just wondering does ASR routers need advanced ip services to route IPv6 traffic? Feature navigator report mostly says yes, as IPv6 support on base image is pretty much limited or better say non-existent. Can anyone confirm/deny? ___ cisco-nsp

Re: [c-nsp] ASR IPv6 image

2012-09-17 Thread Nikolay Shopik
Sorry forgot to add, ASR1K On 17/09/12 16:11, Nikolay Shopik wrote: Hey, Just wondering does ASR routers need advanced ip services to route IPv6 traffic? Feature navigator report mostly says yes, as IPv6 support on base image is pretty much limited or better say non-existent. Can anyone

Re: [c-nsp] l2tpv3

2012-08-30 Thread Nikolay Shopik
L2TPv3 need data license, while L2TP available even w/o data license, if nothing changed since introduction of ISR G2 licenses. On 30.08.2012 19:56, Arie Vayner (avayner) wrote: You should be able to deploy L2TPv3 with the smaller ISR routers... The 800 series support it (not sure what

Re: [c-nsp] 3560G48TS temperature

2012-07-11 Thread Nikolay Shopik
On 11/07/12 02:19, Peter Rathlev wrote: The yellow threshold, as you probably already know, is 51°C for the WS-C3560G-24PS-S (at least V06). My interpretation is that operating below 51°C means everything is just fine. Well for 48 port version yellow threshold is 56°C at least what it says

[c-nsp] 3560G48TS temperature

2012-07-10 Thread Nikolay Shopik
Hi, Just wondering what's normal temperature for 3560G, we have 3560X-24, with 35°C, and 3560G running at 48-49°C. From thresholds I see it have much higher then -X version, but it still bothers me, if its normal. ___ cisco-nsp mailing list

[c-nsp] SA-ISA on 7200 with 15.1 IOS

2012-04-11 Thread Nikolay Shopik
Hey, SA-ISA EoL few years ago, and announcement[1] says last supported release is 12.4 mainlaine. So I wonder if anyone can confirm/deny will it work on 15.1M release? And doesn't SA-VAM2+ doesn't fits here because of amount of traffic I need to cover, and price. [1]

Re: [c-nsp] Which switch can do what we need?

2012-04-05 Thread Nikolay Shopik
Boot buffersize change size of nvram simulate file, there no nvram all files stored on flash. On 06.04.2012, at 0:43, Tom Storey t...@snnap.net wrote: Hey Skeeve, Re config size, have you thought about using service compress-config? This might help to reduce the config size by about

[c-nsp] 2960s output drops

2012-04-04 Thread Nikolay Shopik
Hi, So we just replaced some aging c3524XL with 2960S and suddenly start seeing output drops on one of port facing client, while 3524 never had output drops to this client. Traffic levels pretty much low like 1-2mbit with 200-300pps levels. I believe this is because uplink now 1Gbit, but

Re: [c-nsp] 2960s output drops

2012-04-04 Thread Nikolay Shopik
0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out On 04.04.2012 21:58, Piotr Wojciechowski wrote: On 4/4/12 18:35 , Nikolay Shopik wrote: Hi, So we just replaced

Re: [c-nsp] 2960s output drops

2012-04-04 Thread Nikolay Shopik
On 04.04.2012 23:08, Piotr Wojciechowski wrote: On 4/4/12 20:54 , Nikolay Shopik wrote: Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 2197 It seems that you might have traffic peaks on this interface. It happens when traffic received from 1000BaseTx interface

Re: [c-nsp] 3745 router crash

2012-03-30 Thread Nikolay Shopik
Well Output Interpreter usually your friend, since I don't have your crashinfo file i just paste your error. This is what it says: %ERR-1-FATAL: Fatal error interrupt Explanation: This error message indicates a Hardware problem in the device. Recommended Action: To troubleshoot try this: 1.

Re: [c-nsp] *** GMX Spamverdacht *** Re: 2960S IOS

2012-03-21 Thread Nikolay Shopik
Pretty much everything is here http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/15.0_1_se/release/notes/OL25301.html On 21/03/12 11:13, Garry wrote: On 21.03.2012 00:52, Thomason, Simon wrote: Not certain if anyone is looking into smart install or vstack but when you

Re: [c-nsp] ASR9k for large scale NAT?

2012-03-06 Thread Nikolay Shopik
On 06/03/12 17:51, Chuck Church wrote: I'm curious what the default NAT timeouts for IOS-XE are. A lot of the normal IOS ones are 24 hours, which is WAY too long for dynamic large scale use. An hour is much more reasonable. As soon IOS NAT sees close/fin or fin/ack bits, it set session to 5

Re: [c-nsp] CBAC and fragmented packets

2012-02-17 Thread Nikolay Shopik
Victor, Because UDP is a connectionless protocol, fragmented UDP packets will be dropped if they arrive at the destination out of order. And most common sense is switch to TCP. And did you tried add ip inspect name FOO fragment? On 17/02/12 09:04, Victor Sudakov wrote: Colleagues, I have

Re: [c-nsp] ASR1000 - Software Redundancy

2012-02-01 Thread Nikolay Shopik
2Gb for internal purpose, it just over-top IMO. I can't think out anything what can use that 2Gb of memory on router, just for internal purposes. On 01/02/12 06:04, Mark Tinka wrote: If you have 4GB DRAM in the router, IOSd itself will take 2GB and the other 2GB will be used for internal

Re: [c-nsp] Flow tools

2012-01-17 Thread Nikolay Shopik
On 18/01/12 10:14, Dobbins, Roland wrote: nfdump/nfsen is a good open-source set of tools to use in getting started with flow telemetry, IMHO. Seconded with Roland words. We find nfdump pretty much solid and with nfsen is good tool for detecting anomalies.

Re: [c-nsp] Catalyst IOS version skip - significant difference or just numbers game?

2012-01-05 Thread Nikolay Shopik
Hi Jeff, Just marketing move to make them sane I believe. If you run pre 12.2.(55)SE releases be aware that (55) release actually huge compare to others, so more memory will be eaten. We running 15.0(1)SE on 3560x, no problem so far we aware of. On 05.01.2012 6:27, Jeff Kell wrote: After

[c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Nikolay Shopik
Hi list, Right now looking for new access switches, with 24 copper 1gig ports + 4 SFP ports. We don't really need any fancy features, and from datasheet I can tell WS-C2970G-24TS, fits us very well. I know this is EOL already and replaced with WS-C2960G-24TC-L, which recently replaced with

Re: [c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Nikolay Shopik
I've noticed WS-C2970G-24TS actually 1,5U, while other model just 1U. So I wonder if there any overheating issues? On 28/12/11 18:01, Joe Maimon wrote: Works for me in a number of locations. I have seen about one out of 20 go bad. So get some spares. Nikolay Shopik wrote: Hi list, Right

Re: [c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Nikolay Shopik
On 28/12/11 23:02, Mike wrote: On 12/28/2011 05:16 AM, Nikolay Shopik wrote: Hi list, Right now looking for new access switches, with 24 copper 1gig ports + 4 SFP ports. We don't really need any fancy features, and from datasheet I can tell WS-C2970G-24TS, fits us very well. I know

Re: [c-nsp] Catalyst 2950 freezing

2011-12-19 Thread Nikolay Shopik
Hey, We had something similar with 2950, which is really bug CSCeb04463. So basically switch working perfectly fine but at some moment (random) it will decide to hang. I cannot say if this is your case, but maybe worth check. On 19/12/11 14:40, Henry-Nicolas Tourneur wrote: Hi all, For

Re: [c-nsp] Catalyst 2950 freezing

2011-12-19 Thread Nikolay Shopik
-Nicolas Tourneur wrote: Hello, And how have you been able to solve this issue/bug? I guess you did an IOS upgrade? To which version? Thanks for your help :) -Original Message- From: Nikolay Shopik [mailto:sho...@inblock.ru] Sent: lundi 19 décembre 2011 11:59 To: Henry-Nicolas Tourneur; cisco

Re: [c-nsp] Recommendation for small GBit router

2011-12-16 Thread Nikolay Shopik
I'd say if he really want to go cheap, IP base probably do fine, only difference is no BGP in it. Adv.IP services license cost half of hardware while ipbase few hundered $. On 16/12/11 12:27, Elmar K. Bins wrote: The cheapest option you have would probably be a WS-3560, but you'll need an

Re: [c-nsp] CISCO 1841

2011-12-08 Thread Nikolay Shopik
You are having faulty patch-cord, replace it and you should be fine. On 08/12/11 14:01, Wakwa Nduati wrote: On the main device I get on both interfaces f0/0 136 unknown protocol drops f0/1 31 unknown protocol drops On the connecting switch Input: 1350 input errors, 0 runts, 0 giants, -

Re: [c-nsp] Cisco Output Interpretor Help

2011-11-29 Thread Nikolay Shopik
Seen these kind problems, I'm just put all sh ver output + traceback, and then it start decoding for me. On 29.11.2011 22:53, Michael Chomicz wrote: I'm trying to perform a traceback decode. This is what I'm inputting: Cisco IOS Software, Catalyst 4500 L3 Switch Software

Re: [c-nsp] IOS 12.2 to 15.1

2011-11-22 Thread Nikolay Shopik
We are upgraded from 12.2 into 15.0 in last year, and few months back upgraded to 15.1 to get some new voice features. We are running on NPE-G1. Only thing we notice is because we upgraded from some old 12.2 image have to rewrite some parts of config, which isn't upgraded automatically. On

[c-nsp] partial prefix load in ibgp

2011-10-26 Thread Nikolay Shopik
Hey, I've got two borders connected via ibgp, both receving full-view via uplinks, and I notice one of borders receiving about 190K prefixes via ibgp. But I'm clearly sure there no filters at all. Configuration between borders are pretty simple and consist just two lines. neighbor x.x.x.x

[c-nsp] bgp bestpath w/o bgp always-compare-med

2011-10-11 Thread Nikolay Shopik
Hi, I have rather strange best path selection. We have 3 uplinks, AS_PATH to one of prefix is same for all 3 prefixes, so my assumption it will use oldest one, because everything else is same. Except one thing I notice one of uplinks send us metric, while two others does not. Here is

Re: [c-nsp] bgp bestpath w/o bgp always-compare-med

2011-10-11 Thread Nikolay Shopik
You sure talking about MED not local preference? And what's point of MED as it non-transitive. No AS behind my uplinks will see these MED anyway only with whom I peer directly. On 11/10/11 14:05, Saku Ytti wrote: Anyhow personally I would not rely on router-id or route-age, but would use MED

Re: [c-nsp] bgp bestpath w/o bgp always-compare-med

2011-10-11 Thread Nikolay Shopik
Nope, only non default command we have under router bgp is no bgp enforce-first-as On 11/10/11 14:29, Андрей Андреев wrote: did you have bgp bestpath med missing-as-worst ? 11.10.2011 13:18, Nikolay Shopik пишет: Hi, I have rather strange best path selection. We have 3 uplinks

[c-nsp] OT: Deferred mails

2011-10-11 Thread Nikolay Shopik
Does anyone receiving such deferred message or/and rejection after 5 days queue expired? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] OT: Deferred mails

2011-10-11 Thread Nikolay Shopik
Status: 4.2.0 Last-Attempt-Date: Tue, 11 Oct 2011 09:39:29 -0500 (CDT) Will-Retry-Until: Sun, 16 Oct 2011 05:30:13 -0500 (CDT) On 11.10.2011 19:05, Nikolay Shopik wrote: Does anyone receiving such deferred message or/and rejection after 5 days queue expired

[c-nsp] [solved] Re: bgp bestpath w/o bgp always-compare-med

2011-10-11 Thread Nikolay Shopik
On 11.10.2011 19:17, Pete Templin wrote: Are you sure the first one is oldest and the second one is youngest? I was under the impression that IOS always presents paths in newest(top) to oldest(bottom) sequence, which explains why the bottom one is chosen. I can't say for sure (cisco doesn't

[c-nsp] policing by mac address

2011-10-07 Thread Nikolay Shopik
Hey, I'm trying to configure basic stuff, like policing by mac address on router and it doesn't match any packets. class-map match-any shopik match access-group 700 policy-map ultraspeed class shopik police 8000 2000 interface FastEthernet1/1 service-policy input ultraspeed access-list

[c-nsp] download IOS for EOL/EOS hardware

2011-10-04 Thread Nikolay Shopik
Hey, I'm wonder what's up with access to IOS software for EOL/EOS hardware for example 3600 router serises EOL is 31 dec 2008. Downdload section still saying I need contract to download, while it's been EOS for years. Maybe I miss something and it not completely EOS? Yes we still using

Re: [c-nsp] switch with 2x 10GBASE-T interfaces

2011-10-02 Thread Nikolay Shopik
Martin, Yes, you right, my mistake, we are using C3KX-NM-10G, and at time when we bough it there no C3KX-NM-10GT modules, so I automatically think them. You probably won't able to do so, because we even had problems with size of regular SFP(not rj45) on C3KX-NM-10G, so we had to replace them

Re: [c-nsp] GRE over IPSEC loss in IOS 15.x / ISR x9xx Routers

2011-09-27 Thread Nikolay Shopik
Hey Dustin, We seen similar issue but with NAT enabled and that was on 12.4(15)T14, where first TCP SYN drops. Check bug CSCti13229. On 26/09/11 02:01, Dustin Schuemann wrote: We have about 200 sites connected to us via GRE tunnels over IPSEC over MPLS for primary connectivity, and GRE over

Re: [c-nsp] limited bgp traps

2011-09-06 Thread Nikolay Shopik
If bgp connection timeout or reset from remote side, it will not try establish it but instead wait other side start TCP connection, am I correctly understood that command? On 06/09/11 14:03, Jon Harald Bøvre wrote: could be transport connection-mode passive will help, for one side of the

[c-nsp] 3560-X qinq support

2011-08-26 Thread Nikolay Shopik
Hi, Does Cat3560-X support qinq? Some old threads says most Cat3K does such support but feature navigator doesn't say so clearly about that. I check if command switchport mode dot1q-tunnel there, but apparently it not. This is lanbase license, do I need ipabase for that?

Re: [c-nsp] 7206VXR NPE-G1 Upgrade from 12.4 to 15.0 High CPU

2011-08-23 Thread Nikolay Shopik
There some defaults changed to something which cause your high CPU. You may take a look for this (Cisco IOS Behavior Changes). http://www.cisco.com/en/US/docs/ios/15_0/release/notes/150MNEWF.html#wp1030987 On 23.08.2011 20:15, Chris Gotstein wrote: Update on this issue: After combing the

Re: [c-nsp] service-policy on 2960 doesn't shape

2011-08-04 Thread Nikolay Shopik
Yeah I miss this one, thanks a lot! On 04.08.2011 22:07, Jean-Etienne Kelly wrote: Do you have this line on the top part of your running-config ? mls qos QoS will not work without it. I've done the same error. ___ cisco-nsp mailing list

[c-nsp] service-policy on 2960 doesn't shape

2011-07-29 Thread Nikolay Shopik
I'm trying to configure service policy on interface but it seems not working at all. While same config working on old 2950. Here is sample of it. 2960 running on 12.2(55)SE3. Any ideas? policy-map 10Mbit class class-default police 1000 512000 exceed-action drop interface

Re: [c-nsp] service-policy on 2960 apply policy

2011-07-29 Thread Nikolay Shopik
: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Andriy Bilous Sent: Friday, July 29, 2011 10:09 AM To: Nikolay Shopik Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] service-policy on 2960 doesn't shape 'show policy-map interface' just doesn't work

[c-nsp] max-conn reject code

2011-07-27 Thread Nikolay Shopik
Hi, Is there way to redefine reject code when max connections reached on voip dial-peer? Currently its no circuit/channel available, but we would like to prefer 17 - user busy. I could re-map all isdb failure codes using isdn network-failure-cause 17, but this seems not so good idea when real

Re: [c-nsp] sup2T software release notes have hit

2011-07-21 Thread Nikolay Shopik
On 21/07/11 03:56, Tony Varriale wrote: No one cares as much as it is a software platform :) I'd say this give almost no benefits for such platform also. And if they decide to give us XE, this is probably cost money on ISR-G2. Most likely XE not happen until ISR-G3 and this is what I call

Re: [c-nsp] memory leaking in IOS 12.2(58)SE1 on 2960's

2011-07-20 Thread Nikolay Shopik
It's kinda sad 2960 switches don't have memory reserve console command, which will allow you to run some diagnostic commands. Sometimes when memory leaks happens there tracerbacks actually logged, so I suggest enable syslog logging on switches, so you can see all logging stuff, before it run

[c-nsp] filter downstreams on upstreams/IX

2011-07-04 Thread Nikolay Shopik
Hey, I wounder what current BCP for filtering AS of our customers? Currently we don't accept announces of our downstreams via uplinks and IX. But I believe this is not ideal scenario, loosing connection to downstream means, our network loosing connection to this network and all AS behind

Re: [c-nsp] filter downstreams on upstreams/IX

2011-07-04 Thread Nikolay Shopik
Yeah, my bad, didn't search propertly. https://puck.nether.net/pipermail/cisco-nsp/2011-May/078711.html On 04/07/11 12:53, Gert Doering wrote: This has been discussed in quite some detail here about 6 weeks ago. ___ cisco-nsp mailing list

Re: [c-nsp] Cisco ISR G2 and comp-lzs

2011-06-30 Thread Nikolay Shopik
Well it's really depends, but I tend to agree, my show crypto engine accelerator statistic, 1.8:1 compression ratio and overall is 1.1:1. On 30/06/11 18:59, P C wrote: Traditional applications of this have been low speed links (Dial-up, ISDN, etc.). I've never tried it on anything faster. I

Re: [c-nsp] OT: Console cables on new platforms

2011-06-29 Thread Nikolay Shopik
-console-ports Hope this helps Ziv -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jim McBurnett Sent: Tuesday, June 28, 2011 7:58 PM To: Nikolay Shopik; cisco-nsp Subject: Re: [c-nsp] OT: Console cables on new platforms

[c-nsp] OT: Console cables on new platforms

2011-06-28 Thread Nikolay Shopik
Hey everyone, We just received our 3560X and no console cables included at all, is this new policy for new platforms? I mean no RS-232-RJ45 or new mini-usb console cable at all. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] OT: Console cables on new platforms

2011-06-28 Thread Nikolay Shopik
On 28/06/11 13:26, Peter Rathlev wrote: They still have a regular console port (RJ45 connector, serial) so the cables used for all other recent Cisco devices can be re-used. Yeah that's not problem, we have spare cables from old device. Rarely but sometimes you need cable/per device. When you

Re: [c-nsp] OT: Console cables on new platforms

2011-06-28 Thread Nikolay Shopik
On 28/06/11 14:05, Tim Franklin wrote: I believe it's now a zero-cost option, along with things like the pack of documentation. So you basically need add another part-number(which on btw?) to your order and this cost you 0$. ___ cisco-nsp mailing

Re: [c-nsp] Dot11Radio0 ipv6 command

2011-06-24 Thread Nikolay Shopik
On 23/06/11 00:46, Gert Doering wrote: Hi, On Wed, Jun 22, 2011 at 08:36:21PM +0400, Nikolay Shopik wrote: Because it's added only in 15.1(2)T http://www.cisco.com/en/US/customer/docs/ios/15_1/release/notes /151-2TNEWF.html#wp43436 Which links here... http://www.cisco.com/en/US/customer

Re: [c-nsp] Dot11Radio0 ipv6 command

2011-06-22 Thread Nikolay Shopik
Because it's added only in 15.1(2)T http://www.cisco.com/en/US/customer/docs/ios/15_1/release/notes /151-2TNEWF.html#wp43436 On 22.06.2011 20:17, Michael K. Smith - Adhost wrote: This is the workaround when you can't put the address on the BVI, which you can't in some cases.

Re: [c-nsp] Average throughput of a Cisco 7200 VXR G1 gig interface?

2011-06-22 Thread Nikolay Shopik
On 22.06.11 22:54, Scott Granados wrote: Hi, I have a basic question about the Cisco 7200 VXR G1 gigabit interfaces? What do people find is the average throughput of the gig interfaces? Assuming normal packet sizes and standard traffic how much milage do you really get out of these? I'm

Re: [c-nsp] 15.0 train on 7206VXR

2011-06-21 Thread Nikolay Shopik
If you talking about new licensing scheme, then no 7206VXR use old licensing scheme same as for 12.4 On 21/06/11 10:45, LM wrote: Does the 15.x IOS needs the licenses to work under the 7206VXR? I am a bit confused. ___ cisco-nsp mailing list

Re: [c-nsp] 15.0 train on 7206VXR

2011-06-21 Thread Nikolay Shopik
On 21.06.2011 20:12, Seth Mattinen wrote: On 6/21/11 4:18 AM, Gert Doering wrote: Hi, On Tue, Jun 21, 2011 at 08:41:13PM +1000, Reuben Farrelly wrote: It's a platform dependent feature, primarily on the newer ISR G2s and 880s/890s. The original ISR's, 870s, 7200 etc have no such

[c-nsp] Dot11Radio0 ipv6 command

2011-06-20 Thread Nikolay Shopik
Does anyone know what's up with ipv6 command on Dot11Radio interfaces? I have CISCO1812W running ADVENTERPRISEK9 15.1(4)M and there no such command at all. Searching Cisco bug toolkit doesn't reveal any bugs for me. Software/hardware limitation? Thanks

Re: [c-nsp] Dot11Radio0 ipv6 command

2011-06-20 Thread Nikolay Shopik
On 20.06.2011 22:02, Seth Mattinen wrote: I believe you have to configure IPv6 for it via a bridge group. I had an 877W a while back with the same problem, but I ended up giving up on it. I seen this around internet while searching, but some people claim that this was fixed in 12.4.(22)T and

  1   2   >