Re: [c-nsp] SPA-1X10GE-WL-V2 vs SPA-1X10GE-L-V2

2013-04-24 Thread Ryan Hughes
>From the CLI guide it explains it to be only for POS. save yourself a few >bucks :) Sent from my iPhone On Apr 24, 2013, at 7:12 PM, Lee Starnes wrote: > Hello, > > I was wondering if anyone here has used the SPA-1X10GE-WL-V2 and if so how > it differs with the non "W" version with relation

Re: [c-nsp] Nexus 7000 and 6.x

2012-06-10 Thread Ryan Hughes
I've had mix luck with 6.0 - some really stable (fabricpath / ipv6 / ospf ) on F2 and some really bad. 5.2.4 or better is whats safest if possible as its a long running train. 6.1 will be out shortly to support the new SUPs and M2 line cards. Sent from my iPad On Jun 7, 2012, at 9:06 AM, "N.

Re: [c-nsp] nexus 7K COPP ARP traffic?

2012-03-26 Thread Ryan Hughes
Immediate recommendation to move to 5.2.3a or 5.2.4 - lots of catastrophic fun to be had on 5.2.1 / 5.2.2 ... Contact your account team for more details but I'm pretty sure one of the cases was shared on list a few months back. Ryan On Mon, Mar 26, 2012 at 11:54 AM, Jeffrey G. Fitzwater wrote: >

Re: [c-nsp] HEADS UP: vlan_mgr crashing in NX-OS 5.2(3)

2011-12-18 Thread Ryan Hughes
Looks like 5.2.3 has been deferred, 5.2.3a has been posted because of this bug identified last week: http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/deferral/Deferral_Notice_N7K_523.html Reason for Deferral: DDTS No(s): CSCtw89936

Re: [c-nsp] Nexus equipment in corporate networks

2011-03-12 Thread Ryan Hughes
i personally think the biggest benefit to using vdc is to separate the configurations from a management standpoint. it's very much like using contexts on an ASA - where you can separate and isolate problematic configurations. that being said - if your team can support vrf - that's a very valid app

Re: [c-nsp] n5k caches usernames logged in

2010-09-19 Thread Ryan Hughes
4.2.6 is recommended for vPC deployments. Has some of the new features that were included in 5.0 release. Sent from my iPhone On Sep 19, 2010, at 10:32 AM, Chris Evans wrote: > Thanks. We are working with ECATS to test 4.2(4) for our 7ks and 4.2(1)n1 > for the 5ks. I will bring this up with

Re: [c-nsp] Nexus 7k support for Twin-ax cables with N7K-M132XP-12 line card

2010-06-16 Thread Ryan Hughes
Check the archive. It's come up before; they're not supported at this time but yea they do "work". Sho int capability shows it as 10g unkown if memory serves. Sent from my iPhone On Jun 16, 2010, at 7:57 AM, Matthew Melbourne wrote: Hi, Does anyone know if the copper Twin-ax cables (e

Re: [c-nsp] ISR G2 "multicore"?

2009-10-27 Thread Ryan Hughes
I think they'd like to in the future but the problem still exists that IOS is monolithic based and has a horrible time making good use of SMP, One of the reason they've stepped away from IOS for the Nexus/ASR platforms. On Mon, Oct 26, 2009 at 11:38 PM, Kevin Graham < kgra...@industrial-marshmallo

Re: [c-nsp] Monitoring Nexus 7000 platform

2009-08-13 Thread Ryan Hughes
>From what I've seen on much of the new DC equipment, Cisco focused more on XML than SNMP for the monitoring hook into the Nexus gear. I know many of the features you're asking for were bolted on per customer requests but I haven't seen any specific templates out there around this. I'd be intereste

Re: [c-nsp] IPTV Switch Recommendation

2009-06-10 Thread Ryan Hughes
It "depends" - largely on the type of Multicast you're rolling out. I had mixed results with 3560's running IP Base versus IP Services for SSM/AutoRP roll out. Depending on your requirements you could maybe get IP Base to work but best results were with IP Services. Ryan On Wed, Jun 10, 2009 at

Re: [c-nsp] Nexus 7010 Racking

2009-05-22 Thread Ryan Hughes
Same experience as Justin - get a lift! And make sure you're running enough power to it. On Fri, May 22, 2009 at 12:37 PM, Justin C. Darby wrote: > These things are heavy - I know from experience. Get a mechanical lift or > be prepared with 4-6 people to lift. I did not have a lift, and we got

Re: [c-nsp] Trouble in an ASA migration from CheckPoint

2009-05-09 Thread Ryan Hughes
Then you should use an access-list for interesting traffic to match on those specific conditions. This is static policy nat. See the ASA 8.0 config guide: http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/cfgnat.html#wp1042553 static (inside,outside) 80.1.1.1 access-list COND

Re: [c-nsp] Nexus 5000?

2009-05-06 Thread Ryan Hughes
The other con to deploying N2K/N5K today is that they don't yet support port channeling of 1G connections down to the hosts which is sometimes common for Oracle RAC clusters or VMware ESX environments. This will be resolved when they start supporting virtual Port-Channels in the N5K series sometime

Re: [c-nsp] PIX/ASA full tunnel for clients

2009-04-29 Thread Ryan Hughes
Not really - simply don't specify a split tunnel policy under the group-policy for the Remote Access group on the ASA. group-policy RAS attributes dns-server value X.X.X.X vpn-tunnel-protocol IPSec split-tunnel-policy excludespecified ! don't need split-tunnel-network-list va

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Ryan Hughes
Generally my experience with Ethernet handoffs has been hit or miss depending on what the carrier is delivering for the hand off - I've dealt with some gear as you alluded to that doesn't down the CE hand off when the circuit goes which turns into an interesting game of routing protocol timers and

Re: [c-nsp] Redundant switch fabric

2009-04-02 Thread Ryan Hughes
To clarify the issue on the upgrade from 4.0.4 to 4.1.3 - there was more of a "distribution" error in that the CMP module was shipped read-only. Required assistance from a DE to resolve and work around which basically involved flashing the rom to make it read-write and then I was able to upgrade th

Re: [c-nsp] SXI1 is out

2009-04-02 Thread Ryan Hughes
I believe that SXI introduces eFSU and not ISSU - which requires a linecard reload if the line card is not supported. * http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/issu_efsu.html The following modules support eFSU preload: –WS-X67*xx* modules –SIP-40

Re: [c-nsp] 3750/3750E stack upgrade downtime?

2009-03-30 Thread Ryan Hughes
This was discussed a few months back on list. ISSU isn't supported on the 3750's and to be honest, quite a few people have issues with stacks as is. Cisco is driving ISSU with the modular switching platforms (4500/6500/Nexus). What Peter describes with using the 10G links on the -E series is defini

[c-nsp] EIGRP Neighbor tracking

2009-03-25 Thread Ryan Hughes
Hi, Just wondering if anyone on list has run into issues where their routed Metro-E links will sometimes stay up as the mux isn't properly downing the interface ( cheap gear without interface tracking per se) when the circuit goes down. Pinging the interface doesn't really apply in this situation

Re: [c-nsp] Opinions of DDoS appliances, other techniques, most notably Cisco Guard

2009-03-19 Thread Ryan Hughes
MARS really isn't positioned to be a Netflow anomaly detection with the likes of Arbor and others previously mentioned. It's simply a feature that's in there to help bring into perspective of what's going on with your Cisco infrastructure from a threat perspective. And I would definitely be careful

Re: [c-nsp] Cisco ASA ASDM

2008-11-17 Thread Ryan Hughes
You need to connect to the management instance in order for admin both contexts through ASDM. Typically this is over the management interface or sub vlan interface allocated to the management instance. From there you should be able to see/admin all 3 contexts. On Mon, Nov 17, 2008 at 9:51 AM, Ibra

Re: [c-nsp] 6500-sup-stdby

2008-11-11 Thread Ryan Hughes
Check to make sure the exact same image is on the bootflash of both supervisors. I've seen it where the primary sup boots up and when it tries to boot the second, the image is not available and it will sit in rommon. The boot variable from the primary is passed to the second and if it can't find th

Re: [c-nsp] HWIC-3G-* experience?

2008-11-03 Thread Ryan Hughes
Site survey, site survey, site survey. I've had limited exposure with the 3G's and haven't enjoyed it. Make sure whichever carrier you're evaluating/planning with perform site surveys for each and every location; this will help put some of the burden on them to prove that your specific facility is

[c-nsp] FWSM: secondary not writing to flash

2008-10-30 Thread Ryan Hughes
Anyone ever run into this error with an FWSM? 3.2(8) code on a sup720 with 12.2(33)SHX2a code.. Essentially the secondary doesn't want to write to disk when the primary replicates to it. %Error copying flash:/startup-config (Cannot overwrite image (asdm) file with ascii text file.) %Error writing

Re: [c-nsp] ASR1002

2008-10-20 Thread Ryan Hughes
I've got one customer running a ASR 1006 and seems to be working just fine on their 100 mb metro-e link; running 12.2(33) XNA - using basic EIGRP and QoS features.. I've heard unconfirmed claims of some software instability but maybe there's more people out there who have run into them. On Mon, O

Re: [c-nsp] FWSM breaks router ACL

2008-09-30 Thread Ryan Hughes
This sounds like similar issues one of my customers has had on this code train with the FWSM's. Here's the bug id: CSCsI39710. We had to upgrade the code to SXH4 to resolve this. It may be something else but the experience sounds similar to what he was experiencing. On Tue, Sep 30, 2008 at 9:41 A

Re: [c-nsp] Cisco ASA VPN Active/Standby - license requirements

2008-09-18 Thread Ryan Hughes
You have to buy licenses for both boxes in order to do SSLVPN in Active/Standby failover. ASA 5550 is a nice box; read the getting started guide as you'll want to understand the caveats of having a dual bus for the interfaces (link below). http://www.cisco.com/en/US/docs/security/asa/asa72/gettin