Re: [c-nsp] Port-Channel interface as the source for SPAN

2017-08-17 Thread Scott Granados
What you mean all hardware isn’t the same? ;) > On Aug 17, 2017, at 3:18 PM, Gert Doering wrote: > > Hi, > > On Thu, Aug 17, 2017 at 02:01:07PM +0200, Andriy Bilous wrote: >> Just a follow-up. Po interface is a L3 channel with subinterface po631.2310 >> configured, adding

Re: [c-nsp] OT Solarwinds Alternatives

2017-07-27 Thread Scott Granados
Hi Nick, In my opinion anything is better than Solar Winds but that’s me. I don’t understand how any serious network monitoring company only offers their products for the windows environment and has no Unix variants. That’s just goofy to me but that aside here are some alternatives I have

[c-nsp] Basic IP to Port finding question on Cisco 3850

2017-07-26 Thread Scott Granados
I think this is a basic question but Googling has not helped me much so I’m hopeful someone can shed the clue light on me a bit. I’m trying to find the specific port an IP address is attached to on a 3850 in L3 mode with SVI interfaces. SO for example if I do a show arp a.b.c.d I’ll get the

Re: [c-nsp] STP and PVST..

2017-04-20 Thread Scott Granados
As I recall and I’m happy to be corrected but when you exceed the 253 VLAN limit with PVST the VLANs starting with the 254th added and on revert to RSTP. > On Apr 20, 2017, at 10:18 AM, Gert Doering <g...@greenie.muc.de> wrote: > > Hi, > > On Thu, Apr 20, 2017 at 12

Re: [c-nsp] STP and PVST..

2017-04-20 Thread Scott Granados
Oh boy, I’ve seen that 253 VLAN thing bite a big customer in the back side. You add number 254 and whammo! I’m surprised that’s not been changed since I first saw that issue back in 2013 > On Apr 20, 2017, at 5:51 AM, Sebastian Wiesinger > wrote: > > * Gert Doering

Re: [c-nsp] Ode to the old days

2016-12-08 Thread Scott Granados
That’s so true. I had old Sun equipment with multi year uptime numbers. I remember when uptime was a real bragging point among admins.:) > On Dec 8, 2016, at 10:06 AM, Steve Mikulasik > wrote: > > Make sure you tell all the young techs "They don't make 'em like

Re: [c-nsp] ASR1K forwarding failures on 10G SPA's

2016-10-03 Thread Scott Granados
Anything logged while this happens? > On Oct 3, 2016, at 10:52 PM, Stephen Fulton wrote: > > Hi all, > > I have run into a number of forwarding failure events on ASR1K's with 10G > SPA's. These have occurred across a range of IOS-XE versions, using various > ROMMON

Re: [c-nsp] Pre-owned equipment vender

2016-05-19 Thread Scott Granados
I believe, willing to be corrected, that you have to pay for the software license as a line item. > On May 19, 2016, at 12:26 PM, Satish Patel wrote: > > One thing i have confusion we have ask for quotation and they put > Software charges like ASAR1R2-AESK9-316S > > We

Re: [c-nsp] Pre-owned equipment vender

2016-05-18 Thread Scott Granados
A big +1 for Curvature / Network hardware resale. I’ve been working with them since 2003 or so and it’s always been a very positive experience both buying and selling to them. I forget the spelling of the last name of the guy I worked with there but his name was something like Sam Cheslic and

[c-nsp] Really strange SIP (I think issue) on an ASR 1001X

2016-02-06 Thread Scott Granados
Hi, this is a really strange problem for me and I’m hoping some others might have a clue because I’m a bit confused. It’s also long and involved so anyone busy or not interested stop here. I have an IPVPN service from a carrier delivered presently over a pair of 2921 managed routers that

Re: [c-nsp] BGP peering visibility

2015-11-03 Thread Scott Granados
Route servers are your friend here. There are things like the U Oregon route server where you basically log in to a Cisco like prompt and can use all your show commands and various match criteria to display the parts of the table you care about. These servers usually have many peers and have

Re: [c-nsp] WDM (wave division multiplexing) fiber question

2015-10-02 Thread Scott Granados
and also got some great info here so chalk it up to a valuable learning experience. Thank you > On Oct 1, 2015, at 5:01 PM, Gert Doering <g...@greenie.muc.de> wrote: > > Hi, > > On Thu, Oct 01, 2015 at 05:15:40PM +, Scott Granados wrote: >> Nick, this is a big help as w

[c-nsp] WDM (wave division multiplexing) fiber question

2015-10-01 Thread Scott Granados
Hi, As someone who knows very little about the finer points of optics I have a basic question and googling is just making me more confused with the part numbers. One of my upstream carriers is asking me to use WDM optics to attach. Would this be a different part numbered SFP for the

Re: [c-nsp] WDM (wave division multiplexing) fiber question

2015-10-01 Thread Scott Granados
Nick, this is a big help as were all the other responses. I’m told it’s 1310 NM, 2 strands. I did not get a KM number which I will request. Thank you! > On Oct 1, 2015, at 1:11 PM, Nick Hilliard <n...@foobar.org> wrote: > > On 01/10/2015 5:18 p.m., Scott Granados wrot

Re: [c-nsp] Peering + Transit Circuits

2015-08-25 Thread Scott Granados
If you’re not enabling URPF at the peering routers and edges how do you handle things like RTBH? On Aug 25, 2015, at 7:56 AM, Mark Tinka mark.ti...@seacom.mu wrote: On 18/Aug/15 22:43, Nick Hilliard wrote: i'd advise being careful with this approach: urpf at ixps is a nightmare. We

Re: [c-nsp] MTU / BGP

2015-07-20 Thread Scott Granados
I’ve run in to this problem before. Do something like show neighbor a.b.c.d | inc data or | inc mss You want to see what the maximum size is compared to MTU. For example, on a 1500 MTU this number should be 1460. In my case the issue was the interface MTU was set to 1522 to include QinQ tags

[c-nsp] Remote management console servers?

2015-07-14 Thread Scott Granados
Hi, Wondering what people are doing / best practices for remote management generally in datacenter environments. We have several datacenter with a mix of Cisco, F5, Juniper and Palo Alto equipment in each. All have a similar RJ45 type console port and all are pretty much your garden variety

[c-nsp] Network monitoring / NMS software

2015-07-09 Thread Scott Granados
I know this question comes up from time to time and I’ve myself asked it before but it was a while ago and some recent googling seems to indicate the landscape has changed a lot. I’m looking for recommendations for monitoring software. Basic alerting, SNMP polling, trap handling, reporting,

[c-nsp] Issues with 2921, NAT and Skype?

2015-06-11 Thread Scott Granados
Hi, I have a strange problem and I’m not familiar with the inner workings of Skype to know for sure but I believe I have a problem caused by my NAT config. In some instances, after 1 minute the video will freeze especially when using a Skype gateway to another service. Point to point Skype

Re: [c-nsp] Black hole routing dynamically

2015-05-08 Thread Scott Granados
Look for loose mode URPF and RTBH or remote triggering of blackholes. The idea here you announce the routes you wish to block tagged with the correct community and you instruct your edges to route these addresses to null or you tag a community that your upstreams have provided that has the

Re: [c-nsp] Monitoring Routing Protocol Neighborships to clients

2015-05-06 Thread Scott Granados
NagIOS here and using SNMP traps to track neighbor and link state. Also have a test instance of open NMS under evaluation which so far is doing well. On May 6, 2015, at 10:05 AM, Christopher Hunt dharmach...@gmail.com wrote: I work at a small shop and only have a few customer BGP sessions,

[c-nsp] Good edge routers for Transit connections?

2015-05-05 Thread Scott Granados
Hi, I’m looking at the Cisco web site and trying to figure which direction to go in to for a multi home access project I have coming up. The goal will be to terminate 2 carriers with full BGP feeds each providing 2 1G connections from diverse data centers and announce a small number of blocks.

Re: [c-nsp] Question for TAC

2015-04-30 Thread Scott Granados
I’ve had the same experiences although to be totally fair I was working for the other guys as an RE but I observed the same behavior with a very large customer. It got so bad that even though I was working for a certain company that starts with a J I had to help build the cisco test

Re: [c-nsp] BGP doesn't advertise prefixes

2015-04-28 Thread Scott Granados
It could be a bug but most likely a configuration issue. The bugs on the 65xx platform are normally more like the supervisor will crash when the BGP table counter reaches a certain threshold or similar to that not just the lack of advertisement to a single peer. It’s possible but if you could

Re: [c-nsp] Slightly off-topic - Network Monitoring software

2015-04-28 Thread Scott Granados
to their liking. From: Adam Greene maill...@webjogger.netmailto:maill...@webjogger.net To: 'Scott Granados' sc...@granados-llc.netmailto:sc...@granados-llc.net; 'CiscoNSP List' cisconsp_l...@hotmail.commailto:cisconsp_l...@hotmail.com Cc: cisco-nsp

Re: [c-nsp] Slightly off-topic - Network Monitoring software

2015-04-24 Thread Scott Granados
I would also add Nagios to the list. Open NMS has also been useful in the past and groundwork was interesting all be it expensive for the fully baked commercial version. On Apr 24, 2015, at 12:00 AM, CiscoNSP List cisconsp_l...@hotmail.com wrote: Hi Everyone, Slightly off-topic, but we

Re: [c-nsp] ASR1002-X (2) full BGP feeds

2015-04-23 Thread Scott Granados
Kingston all the way. At least for a while I know they were the company having their memory rebranded. Not sure if this is still the case but have had very good luck with their memory modules in Cisco devices. On Apr 23, 2015, at 10:48 AM, Adam Greene maill...@webjogger.net wrote: Hi

Re: [c-nsp] OT: NTP windows servers

2015-03-26 Thread Scott Granados
You can never assume that windows does anything correctly. :) On Mar 26, 2015, at 2:10 PM, Chuck Church chuckchu...@gmail.com wrote: I guess I assumed windows using DNS correctly was wrong. There is a way to flush dns (I think it’s ipconfig /flushdns) but it really shouldn’t be necessary.

Re: [c-nsp] IP SLA?

2015-03-24 Thread Scott Granados
+1 for using a routing protocol. BGP with a private AS is a decent fit here. On Mar 24, 2015, at 8:48 AM, Gert Doering g...@greenie.muc.de wrote: Hi, On Tue, Mar 24, 2015 at 08:27:59AM -0400, Dan Brisson wrote: I'm curious what folks do in the situation where you have redundant links to

[c-nsp] Recommended software version for ASR1000

2015-03-24 Thread Scott Granados
Hi, I have a pair of ASR routers that had the following installed when unpacked. Looking for recommendations of which software to upgrade to and use. Basic requirements are BGP, HSRP and a very basic set of features. Here’s the truncated show ver output PROLevel3#show ver Cisco IOS XE

Re: [c-nsp] BGP Outbound Traffic

2015-03-23 Thread Scott Granados
Use local pref on learned routes. Something like ip prefix-list prefered-route seq 5 a.b.c.d/20 route-map preferred-routes permit 10 match ip address prefix-list prefered-route set local-pref 200 and apply to the inbound side of your neighbor you want to gorse the traffic through. On Mar

Re: [c-nsp] Cisco ASR9001 - Fan Tray

2015-03-20 Thread Scott Granados
I suppose that makes sense and you could buy spare fan trays so in the event of the loss of cooling you could swap it out and be back in business. I buy that argument, that’s a very good point. On Mar 20, 2015, at 9:20 AM, Nick Hilliard n...@foobar.org wrote: On 20/03/2015 13:09, Scott

Re: [c-nsp] Cisco ASR9001 - Fan Tray

2015-03-20 Thread Scott Granados
Fan trays are for the weak.:) Seriously though, wouldn’t you think a vendor would build in the proper cooling and put the fans in the box instead of an extra tray? Oh wait, then they wouldn’t have an extra accessory that you must have to sell as another highly marked up line item.

Re: [c-nsp] ASR1002-X (2) full BGP feeds

2015-03-20 Thread Scott Granados
I have never used Cisco’s ram for upgrades and never been bitten by this. The memory is usually the same memory. At one point I remember seeing a Kingston rebranded Cisco memory module for sale for several thousand dollars and the Kingston equivalent was 100 and change. Cisco memory is one

Re: [c-nsp] OT: NTP windows servers

2015-03-17 Thread Scott Granados
Remove Windows and run Linux.;) Seriously, insure that the ntp server is correct under control panel, time and internet time tab. Also, if these are in a domain make sure the DHCP process isn’t handing out the wrong NTP or what ever your DHCP source might happen to be. That’s all I can

Re: [c-nsp] Cisco console port to USB

2015-03-02 Thread Scott Granados
I just use a serial to USB convertor and then the cable provided by Cisco. The Keyspan WUSB line isn’t bad and inexpensive. On Mar 2, 2015, at 11:21 AM, Matthew Huff mh...@ox.com wrote: Since Newer PC laptops and all Mac Laptops no longer have a serial port, what are people using to

Re: [c-nsp] OT: Wireless 2.4ghz

2015-02-04 Thread Scott Granados
Depends on what your application is and how much you control the network and hardware selection. If you have the choice to use only 5GHZ gear you can switch now. If you have to support random equipment and in a more public setting then it will be a while, there are still 2.4GHZ only devices

[c-nsp] Primer for IOS-XR

2014-12-16 Thread Scott Granados
Good morning, I have recently been exposed to some of the ASR hardware for the first time and while I’m well versed in standard IOS I haven’t done much work with XR. Can anyone suggest a good pointer for getting up to speed. I’m most specifically interested in the new policy construction and

Re: [c-nsp] Primer for IOS-XR

2014-12-16 Thread Scott Granados
Thank you for the pointer, really appreciated On Dec 16, 2014, at 10:59 AM, Warren Jackson wrjack1...@gmail.com wrote: http://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs_r4-2/routing/configuration/guide/b_routing_cg42crs.pdf On Tue, Dec 16, 2014 at 10:49 AM, Scott Granados sc

Re: [c-nsp] Primer for IOS-XR

2014-12-16 Thread Scott Granados
in no time. On Tue, Dec 16, 2014 at 10:49 AM, Scott Granados sc...@granados-llc.net wrote: Good morning, I have recently been exposed to some of the ASR hardware for the first time and while I’m well versed in standard IOS I haven’t done much work with XR. Can anyone suggest a good

Re: [c-nsp] VZW 4G LTE Interface Card

2014-12-12 Thread Scott Granados
+1 on the VZW card. I’ve used both this card and other VZW data delivery devices with good success. LTE is quite fast especially if you can connect on the UMTS band with your device. I tried the VZW card before XLTE was rolled out so can’t speak to whether this works or not but I have used

Re: [c-nsp] Weird ADSL bridging issue

2014-12-12 Thread Scott Granados
I’m wondering if you need a no proxy arp on your interface. I don’t see it in the included config. On Dec 12, 2014, at 11:03 AM, chris tknch...@gmail.com wrote: Hello, We have a small site we inherited that is still on ADSL on legacy sprint in the northeast. The ILEC is using aal5snap

Re: [c-nsp] BGP Communities

2014-12-03 Thread Scott Granados
A soft reset will do the trick. The issue is you need to reprocess the routes based on your new route-map but you don’t have to completely clear the session. Route refresh will take care of this so a clear soft should do the trick. On Dec 2, 2014, at 9:01 PM, CiscoNSP List

Re: [c-nsp] Full Routes / iBGP Issue Question

2014-09-25 Thread Scott Granados
Make sure that each router know’s about the other routers interfaces and can reach the next hop. I’m betting that router A can’t reach a given network via router B because A can’t get to B’s next hop. You have to make sure that /30 is distributed in to each somehow either via IGP or BGP

Re: [c-nsp] Silly question regarding C3K-NM-10G

2014-09-11 Thread Scott Granados
Carefully as apposed to what, recklessly press the tab with a hammer? ;) On Sep 11, 2014, at 10:12 AM, Drew Weaver drew.wea...@thenap.com wrote: In the instructions for removing a network module from a 3560x it states 'carefully press the tab on the right side of the module'. I can't seem

Re: [c-nsp] Old Cisco VXR

2014-08-27 Thread Scott Granados
If you have the old 25 pin mod tap that comes with the console cables you can use that which converts you to RJ45 and then you can use your normal 9 pin on the other end. Else you need a regular null modem type cable which are readily available. As someone else mentioned, if you’re using a G1

Re: [c-nsp] Galvanic isolation for Ethernet?

2014-08-19 Thread Scott Granados
What about powering your cameras and such with POE so you don’t have different grounds via the power cable at the camera end and at the building end. This way you provide power from the remote source and have everything on a more common basis. Even though your camera might not have a specific

Re: [c-nsp] Galvanic isolation for Ethernet?

2014-08-18 Thread Scott Granados
This problem sounds a lot like a dissimilar grounding issue. Sounds like a potential between buildings is causing problems. I don’t know if this is feasible but a common ground might solve some of the problems. On Aug 18, 2014, at 10:20 AM, Sander Steffann san...@steffann.nl wrote: Hi,

Re: [c-nsp] Galvanic isolation for Ethernet?

2014-08-18 Thread Scott Granados
Well let’s be current, most POTS providers run the wire as little as possible meaning they deploy a remote terminal to the neighborhood and then just run the cables from that point to the homes etc. Even there you have gas discharge cans on each punch down that protect the shelves. I’ve had

Re: [c-nsp] TACACS+ exec authorisation no working on Cisco 2960CG

2014-07-30 Thread Scott Granados
If you’re running windows you might try http://tacacs.net. Thanks Scott On Jul 30, 2014, at 3:15 PM, Andrew Wentzell awentz...@gmail.com wrote: On Wed, Jul 30, 2014 at 3:01 PM, Rich Lewis rle...@sis.tv wrote: And if so, is there a way (that people are happy implementing) to get TACACS+

Re: [c-nsp] sdn/nfv

2014-06-20 Thread Scott Granados
I don’t think equipment vendors are scared by the idea of software networks because they are participating in that space in a big way. Look at what Cisco is doing or Juniper for that matter with contrails. I haven’t worked with the Cisco virtualized objects but I have used Junipers VFirefly

Re: [c-nsp] IOS: catch 22 when enabling new bgp neighbors

2014-06-20 Thread Scott Granados
So this is not a stupid question at all. I’ve wondered about this myself. I suspect the reason your terminal slows is the CPU spikes when adding a new neighbor and the session establishes. (I could be wrong that’s just a guess) In my case I never had the slow down problem so I would cut and

Re: [c-nsp] more net flow, which interfaces to monitor and in which direction?

2014-05-22 Thread Scott Granados
So for a little more clarification on this, I would want to monitor say ingress on my transit links and then ingress on say my input links from my server farm ports and capture the data that way instead of monitoring ingress and egress on the same transit only interfaces? So in other words

[c-nsp] more net flow, which interfaces to monitor and in which direction?

2014-05-21 Thread Scott Granados
Hi, First, thanks for all the great input on analyzers and their strong and weak points. It looks like from the comments I’m going to give nfsen a shot. My followup question concerns selection of interfaces and the direction to monitor. While googling I find that almost all examples I

[c-nsp] Netflow analysis tools?

2014-05-16 Thread Scott Granados
Good morning, I’m starting to work with Net Flow data and am looking for both good background documentation to get more familiar and suggestions for an analyzer. I already have data collection working so I’m looking for suggestions for something to turn that data in to something

Re: [c-nsp] cheap core switch for a hacker space (nonprofit association)

2013-12-09 Thread Scott Granados
+1 on the EX 4200. Good, configurable with VC cables or optics for bundling in to a chassis over a larger physical area, decent horse power and decent features. On Dec 9, 2013, at 11:19 AM, Doug McIntyre mer...@geeks.org wrote: On Mon, Dec 09, 2013 at 05:17:58PM +0200, Mark Tinka wrote: On

Re: [c-nsp] eBGP with internet provider from DataCenters

2013-11-15 Thread Scott Granados
I can’t think of any reason to use more than 1. If you have a meshed network and announce space to the public network then you need a real AS. For your application if you’re using provider space and just looking for redundancy with in the DC you could get away with using a private AS. I

Re: [c-nsp] How to prevent https facebook from the cisco router 1841

2013-11-14 Thread Scott Granados
Another +1 Open DNS is a great work around and allows for easy management in the event you wish to block further sites. On Nov 14, 2013, at 10:40 AM, Pablo Lucena pluc...@coopergeneral.com wrote: You can do something like this on a 1841: class-map match-any BLOCKED-WEBSITES match

Re: [c-nsp] Configuring Multiple Cisco Devices

2013-10-31 Thread Scott Granados
RANCID is your friend here. Available for most platforms and lets you script what ever you need. On Oct 31, 2013, at 8:02 AM, Ahmet Uncu uncuah...@gmail.com wrote: Hello all, I need to configure about 300 cisco routers/switches same time. Could you offer me a free software that can do

Re: [c-nsp] BGP re-announcement question

2013-07-29 Thread Scott Granados
This is correct, in your set up, the customer learned route is not the best route. If you want to preserve the prepends I would increase the pref of your learned customers so you install them as the most preferred. Thanks Scott On Jul 29, 2013, at 6:53 PM, Adam Greene maill...@webjogger.net

[c-nsp] REGEX tool?

2013-06-25 Thread Scott Granados
Wondering if anyone has any good suggestions for a tool for creating and managing complex regular expressions? I'm especially looking for a good way to generate / expand the members of a complex expression or to do a diff and generate a expression from that diff. Any pointers would be most

Re: [c-nsp] REGEX tool?

2013-06-25 Thread Scott Granados
PM, Nick Hilliard n...@foobar.org wrote: On 25/06/2013 20:44, Scott Granados wrote: Wondering if anyone has any good suggestions for a tool for creating and managing complex regular expressions? I'm especially looking for a good way to generate / expand the members of a complex expression

Re: [c-nsp] bgp from scratch

2013-05-01 Thread Scott Granados
Honestly, I wouldn't use network statements and simply tag everything through static or connected redistribution and communities. Allows you more flexibility later and requires little more understanding up front but you'll be better off down the road. something like router bgp abcd no sync

[c-nsp] BFD interval on a CRS3

2013-04-02 Thread Scott Granados
Hi list, Quick question, on a cisco CRS what is the lowest / shortest BFD interval that can be set? Is 10MS possible and or what are the minimum settings that are able to be configured? Thanks Scott ___ cisco-nsp mailing list

Re: [c-nsp] Cisco to support flow spec?

2013-03-22 Thread Scott Granados
filters automatically across both C and J's devices. Your thoughts about an ASA implementation are also on the mark. THanks Scott On Mar 21, 2013, at 4:30 PM, Justin M. Streiner strei...@cluebyfour.org wrote: On Thu, 21 Mar 2013, Scott Granados wrote: Just a general question for the group. Has

[c-nsp] Cisco to support flow spec?

2013-03-21 Thread Scott Granados
Just a general question for the group. Has there been announcements of Cisco supporting BGP Flowspec in IPV4 and IPV6 on any of their platforms? My understanding is that it is not yet supported but wondered if there was any update to this. Thanks Scott

Re: [c-nsp] BGP advertisements more specific than IGP

2013-02-28 Thread Scott Granados
So more specifics are sort of a sledge hammer approach. If you announce more specifics over one link, assuming a prefix that long is widely readvertised, you'll reroute all the traffic not just have a small effect. (more specifics always win) (also it's bad form to not announce unified

Re: [c-nsp] Level 3 issues

2012-11-28 Thread Scott Granados
You know, this is probably a question that could be directed to nanog.. I haven't noticed anything here but I have them in a more secondary capacity. Thanks Scott On Nov 28, 2012, at 7:23 PM, harbor235 harbor...@gmail.com wrote: Can anyone shed some light on the Level 3 issues ? I see the

Re: [c-nsp] Clocking for T1's on AS5400 virtually guarantees slips?

2012-10-10 Thread Scott Granados
I could be smoking crack here so I apologize if I'm wrong but doesn't the local Telco provide clock on all T1s that you can recover? Even in the case where you're providing PRI service doesn't the local loop the carrier provides contain line clocking that you can recover? What am I missing?

Re: [c-nsp] Sharing router uplinks?

2012-08-02 Thread Scott Granados
I second this, I think that point to point links make for the best connection type in this use for all the reasons mentioned ands also for the simplicity. There's something to be said for keeping the core (and network) as simple as possible as long as the functionality is there. I don't see

Re: [c-nsp] Unsupported SFP on Cisco 2960

2012-07-25 Thread Scott Granados
The only problem you're likely to have is with your wallet if you buy Cisco branded optics.:) Others may disagree but I have never had any problem with 3rd party transceivers in lots of products including the 2900 series. On Jul 25, 2012, at 2:02 PM, pamela pomary ppom...@gmail.com wrote:

Re: [c-nsp] Small, Low Power Cisco Router Recommendation

2012-07-23 Thread Scott Granados
I'd have to second this, the 1841 is a pretty good way to go and you can pick them up sec on hand inexpensively. Non Cisco you could check out Mikrotik if you want some decent features on an extreme budget but in all things, you get what you paid for. If you need reliability I'd stick with

Re: [c-nsp] ASA wild card cert...

2012-07-05 Thread Scott Granados
I Second that, Ryan has helped me get unwedged on many ASA issues. (including one similar to yours) Much appreciated! On Jul 5, 2012, at 1:19 PM, Scott Voll wrote: Thanks. Perfect command. I was able to find the wrong Cert and fix it. you rock Ryan. Scott On Thu, Jul 5, 2012 at

Re: [c-nsp] BGP Local Preference Question

2012-06-05 Thread Scott Granados
What about something like fixed orbit that gives you a ranked listing. THere's probably sources of this data that are in more easily available for so you could write scripts but that might give you a starting point. I'm not sure how good the data is but it should be at least a rough starting

Re: [c-nsp] 7606 to 6509 [BGP hold time issue]

2012-05-03 Thread Scott Granados
You have an MTU mismatch.:) THis is my guess anyway because it really matches closely your issue. I ran in to this with almost the same set up using larger MTU sizes for the ethernet + tags. I had to use the IP MTU command under the actual interface (or subiff depending) and set to 1500. You

Re: [c-nsp] lsd

2012-04-25 Thread Scott Granados
Gee and I thought LSD was for the operator and not a feature. Nice, no reason the gear shouldn't share in the fun. :) On Apr 25, 2012, at 11:10 AM, Peter Rathlev wrote: On Wed, 2012-04-25 at 09:44 -0500, Aaron wrote: Is there something similar in IOS to lsd (label switch db) found in IOS

Re: [c-nsp] lsd

2012-04-25 Thread Scott Granados
make this even better. Now I know - MPLS! Chuck -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Robert E. Seastrom Sent: Wednesday, April 25, 2012 1:32 PM To: Scott Granados Cc: cisco-nsp@puck.nether.net Subject: Re

Re: [c-nsp] Config Backups

2012-03-02 Thread Scott Granados
It's all about RANCID. Easy, very easy to modify and just works. That's my opinion anyway. Thanks Scott On Mar 2, 2012, at 2:57 PM, Erik Sundberg wrote: Quick question/poll What is everyone using for router/switch/firewall config backups? Is rancid still the one to use? Thanks

Re: [c-nsp] Megapath frame relay question

2012-02-24 Thread Scott Granados
to provide configuration support. -Original Message- From: Scott Granados [mailto:sc...@granados-llc.net] Sent: Thursday, February 23, 2012 2:02 PM To: Bill D'Anjou Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Megapath frame relay question Ok, few points. FIrst, yes, Megapath

Re: [c-nsp] Megapath frame relay question

2012-02-23 Thread Scott Granados
Ok, few points. FIrst, yes, Megapath is going to assign you a 172.16 address to your wan interface. This is a pretty standard Covad / Megapath thing. Next, when I've done this is memory served I had to use a dialer interface for the actual interface and bind that to a sub interface using a

Re: [c-nsp] dumb BGP question

2012-01-31 Thread Scott Granados
Remember that pref is non transitive. If you could, could you do a show ip bgp prefix and paste the output? Then we might be able to expand more. Thanks On Jan 31, 2012, at 3:42 PM, John Brown wrote: Hi, I'm suffering from driving spreadsheets instead of routers. Have a customer that has

[c-nsp] Strange 7200 Ethernet issue over Metro E

2011-11-22 Thread Scott Granados
So I'm not sure where to start with this one, any pointers would be appreciated. I'd be happy to google but I'm not sure what the condition is here at all, I'm pretty baffled. Here's the setup. A Single 7200 with an NPE400 and a few fast E interfaces. I have two metro Ethernet pretty

Re: [c-nsp] Maximum traffic on Gigabit Ethernet

2011-10-03 Thread Scott Granados
Depends on the traffic type, packet sizes and what features you have enabled. Can you detail the port configurationa bit more? -Original Message- From: Manaf Al Oqlah Sent: Monday, October 03, 2011 9:47 AM To: Group Study ; cisco-nsp@puck.nether.net Subject: [c-nsp] Maximum traffic

Re: [c-nsp] ASA VPN groups... pointer/howto/cookbook?

2011-09-28 Thread Scott Granados
Sounds like what you want is the anyconnect client. You can have your users browse to a URL and install the clients that way instead of having to push out pcf files. Infact I believe this is the preferred method. You can also control group access or have groups available from a pulldown.

Re: [c-nsp] what is best data center vendor ?

2011-09-24 Thread Scott Granados
I'd have to second this! Also and this may be a preference thing but JunOS in general is easier for me to connect with mentally for some reason. I think it's just because there's so much BSD under the hood and it just feels more natural in terms of operating and configuring. You have to be

Re: [c-nsp] BGP Required MTU Size Between Cisco Devices

2011-09-22 Thread Scott Granados
I think you're mixing apples and oranges a bit. Do you mean the BGP session would come up and not stay up? If so you need to do a show ip bgp neighbor a.b.c.d | inc data and view the mss size, make sure that packets of that negotiated size can pass over the link. What you'll see in this case

Re: [c-nsp] BGP neighbor route-map or prefix-list ?

2011-09-16 Thread Scott Granados
Honestly, community tags might be the best in combination with route maps. Something like route-map transit-out perm 10 match community 15 yada yada yada The basic answer to your question though as far as I know is that this should be fine. You would be using the route-map to control your

[c-nsp] Very slow page load / DNS response on Cisco 1841

2011-09-15 Thread Scott Granados
Hi, I’ve been googling and finding a lot of matches but none of them seem to have a definite solution or at least none that have worked so far. Wonder what I’ve missed or if anyone has some good ideas. Here’s the background. I have a Cisco 1841 router with 2 fast E interfaces configured, one

Re: [c-nsp] Routers and switches backup tools..

2011-09-13 Thread Scott Granados
It's all about rancid. Will do exactly what you want to do and can be scheduled right in cron. -Original Message- From: Ambedkar Sent: Tuesday, September 13, 2011 3:10 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Routers and switches backup tools.. Hi, Is there any free

[c-nsp] Question about object tracking for failover on 1800 series

2011-09-12 Thread Scott Granados
Hi, I have the following basic setup. I have two different upstream paths one over ethernet which will not show a down interface if there's a failure. I am wanting to use object tracking on an 1800 series to remove the default route in the event of an upstream failure. I built the IP SLA

Re: [c-nsp] Question about object tracking for failover on 1800 series

2011-09-12 Thread Scott Granados
Just gave this a shot, no go. All I have is track 1 ip then the option route no sla here when selecting route it wants to have me add a route in cidr form with / notation. On Sep 12, 2011, at 1:07 PM, Peter Rathlev wrote: On Mon, 2011-09-12 at 11:16 -0400, Scott Granados wrote

[c-nsp] Stig! Not just a race driver! Re: WARNING: Netflow Data Export Hardware assisted NAT not supported on 76xx/65xx on the same interface

2011-08-28 Thread Scott Granados
Some say that he wears a suit and never shows who's under the helmet and continuously pushes playing cards with the picture of Rubins Barriccelo through his desk fan! Other's say that he moon lights as a mild mannered Network Engineer familiar with the finer points of routing and switching.

Re: [c-nsp] Inter router BGP network tuning pointer?

2011-08-23 Thread Scott Granados
Are the Cisco books (I believe this is a Cisco press book if memory serves) available in electronic form or different formats for we who can't use standard print? -Original Message- From: Vitkovsky, Adam Sent: Tuesday, August 23, 2011 5:22 AM To: Scott Granados ; cisco-nsp

Re: [c-nsp] Inter router BGP network tuning pointer?

2011-08-23 Thread Scott Granados
is not available for all books however the one you list below is available from the link above. On 08/23/2011 01:36 PM, Scott Granados wrote: Are the Cisco books (I believe this is a Cisco press book if memory serves) available in electronic form or different formats for we who can't use standard print

[c-nsp] 7200 NPE-400 very high CPU (bgp scanner never settles down)

2011-08-23 Thread Scott Granados
Hi, Have the following problem. I have a Cisco 7200 NPE-400 (yes I know seriously outdated) running 12.4-25C that has two BGP peers delivered over fast E. It’s pretty garden variety. The only real different from stock config bits I have are the hold in queues on the interfaces boosted

[c-nsp] Inter router BGP network tuning pointer?

2011-08-22 Thread Scott Granados
Hi, The topic of tuning the network for BGP route exchange has been on the list lately and I’ve been doing some googling but not finding anything that really seems to fit what was discussed here. Does anyone have any pointers (either 7200 NPE-G1 specificor non router specific) that they can

Re: [c-nsp] 7206VXR NPE-G1 Upgrade from 12.4 to 15.0 High CPU

2011-08-22 Thread Scott Granados
Are you process switching traffic instead of fast or CEF? -Original Message- From: Chris Gotstein Sent: Monday, August 22, 2011 4:08 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 7206VXR NPE-G1 Upgrade from 12.4 to 15.0 High CPU Backed down to SRE, but still seeing high

Re: [c-nsp] BGP question : What's the best way for filtering outgoingprefixes?

2011-08-18 Thread Scott Granados
Go with option A, community tags are your friend. It also removes the need for any network statements in your config thus reducing the work in the long term. Something like this ip prefix-list customer-prefixes seq 5 permit a.b.c.d/19 ip prefix-list not-to-specific seq 5 permit 0.0.0.0/0

Re: [c-nsp] BGP question : What's the best way for filtering outgoingprefixes?

2011-08-18 Thread Scott Granados
] BGP question : What's the best way for filtering outgoingprefixes? On Thu, 18 Aug 2011, Scott Granados wrote: Go with option A, community tags are your friend. It also removes the need for any network statements in your config thus reducing the work in the long term. You'll probably still

Re: [c-nsp] BGP router upgrade

2011-08-17 Thread Scott Granados
In what configuration does an NPE G1 load tables in under a minute? I haven't seen one load a full table in anywhere near sub 1 min. G2 yes, G1 really? -Original Message- From: Saku Ytti Sent: Wednesday, August 17, 2011 7:54 AM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] BGP

  1   2   3   >