Re: [c-nsp] ASR1k mlppp speedlimit?

Try: interface Virtual-TemplateX bandwidth x HTH. On 2020-02-19 10:30, Harald Kapper wrote: Hey Brian, thx for coming back. Are you sure the CPE will push over 100Mbps in mlppp? Yep, it already does 200Mbps MLPPP, reaching at most a 50% cpu usage. Now in the meantime we got a theory:

[c-nsp] Cisco 7200's not importing prefixes when RT of ASN:VRF_ID used

Hi all, I am having difficulty with some older Cisco 7200's within a production MPLS network. The others hosts are IOS-XE or IOS-XR based and there are no issues with those. The problem devices, plural, are 7206's with several different versions of IOS, so I do not believe it is a bug but

Re: [c-nsp] PE "Sprawl" - P/Core Router suggestions.

I have not used the 5501 but I've been told to be mindful of the buffers on it, specifically when shifting from higher to lower bps ports. That's SOP for switches, less usual for devices sold as routers though (the ME3600 & ASR920 come to mind). -- Stephen On 2016-12-29 9:19 AM, Phil

Re: [c-nsp] Locating blank faceplates for an ASR1009X

No it was actually new, purchased by a sister company but left unused for almost a year. I've contacted Cisco, waiting on a reply. -- Stephen On 2016-10-19 9:22 AM, Roland Dobbins wrote: On 19 Oct 2016, at 20:21, Stephen Fulton wrote: I've got an ASR1009X which did not come with blank

Re: [c-nsp] Locating blank faceplates for an ASR1009X

Just a follow-up, a kind person sent this link to me directly and the part-numbers are within: http://www.cisco.com/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/guide-c07-731639.html#_Toc462044494 -- Stephen On 2016-10-19 9:51 AM, Stephen Fulton wrote

[c-nsp] Locating blank faceplates for an ASR1009X

Hi all, I've got an ASR1009X which did not come with blank faceplates for two ESP and one SIP slot. Anyone know if there is a Cisco p/n for each of these that I can look up and order? Thanks, -- Stephen ___ cisco-nsp mailing list

Re: [c-nsp] ASR1K forwarding failures on 10G SPA's

...@iphh.net>> wrote: Just to make sure: latest IOS XE version? Its not the NTP processing bug filling up interface queues? How does the input queue look on the affected interfaces? Cheers Sascha Am 4. Oktober 2016 05:33:39 schrieb Stephen Fulton <s

Re: [c-nsp] ASR1K forwarding failures on 10G SPA's

ISIS adjacencies drop as well as BGP sessions on neighboring devices drop. Issue just reoccurred. -- Stephen On 2016-10-03 10:59 PM, Scott Granados wrote: Anything logged while this happens? On Oct 3, 2016, at 10:52 PM, Stephen Fulton <s...@lists.esoteric.ca> wrote: Hi all, I ha

[c-nsp] ASR1K forwarding failures on 10G SPA's

Hi all, I have run into a number of forwarding failure events on ASR1K's with 10G SPA's. These have occurred across a range of IOS-XE versions, using various ROMMON versions and across two different ASR1K platforms (1002's and 1004's). Multiple SPA's have been replaced, IOS-XE versions and

Re: [c-nsp] ASR920 port based xconnect equivalent

Inaccurate documentation?! Never! -- Stephen On 2016-06-03 7:41 AM, Mark Tinka wrote: On 3/Jun/16 13:33, Stephen Fulton wrote: For posterity, here is a link to the relevant docs (at this moment in time): https://www.cisco.com/c/en/us/td/docs/routers/asr920/configuration/guide/mpls/mp-l2

Re: [c-nsp] ASR920 port based xconnect equivalent

For posterity, here is a link to the relevant docs (at this moment in time): https://www.cisco.com/c/en/us/td/docs/routers/asr920/configuration/guide/mpls/mp-l2-vpns-xe-3s-asr920-book/mp-any-transport-xe.html#GUID-FB013E0C-B37F-48CF-B2B0-374A45B9B9EC -- Stephen On 2016-06-03 7:25 AM, Mark

[c-nsp] EEM not triggering on IOS-XE 3.11.1S

Hi all, I'm working on an EEM script which is triggered by an IP SLA down state on an ASR1000 running IOS-XE 3.11.1S. While the IP SLA entry detects the state properly, the EEM does not trigger. I'm not finding anything relevant on the bug toolkit, and I am not seeing anything with my

[c-nsp] ASR9001 5.1.3: Netflow origin AS appears to be missing

Hi all, I have an ASR9001 running 5.1.3, and I've set up netflow to export to an nfsen collector. Netflow itself is exporting fine, but I'm not seeing the origin AS in any of the records (the reported AS is 0 or zero). I have netflow v9 running from an ASR1K to the same collector and it

Re: [c-nsp] ASR9001 5.1.3: Netflow origin AS appears to be missing

Thanks Chip, that worked, much appreciated! -- Stephen On 2015-08-05 1:11 PM, chip wrote: Try 'bgp attribute download' http://www.gossamer-threads.com/lists/cisco/nsp/182943#182943 --chip On Wed, Aug 5, 2015 at 12:59 PM, Stephen Fulton s...@lists.esoteric.ca mailto:s...@lists.esoteric.ca

[c-nsp] ME-3600X-24CX additional 10GE ports activation

Hi all, I have a ME-3600X-24CX here with the 10GE license installed (by Cisco) for the 10GE ports on the switch, and I'm not able to bring the ports into use: Switch#sh license [snip] Index 3 Feature: 10GEUpgrade Period left: Life time License Type: Permanent License

Re: [c-nsp] ME-3600X-24CX additional 10GE ports activation

Thanks Jason and Lukas, much appreciated. Didn't occur to me to look at the SDM section. -- Stephen On 1/22/2015 3:59 PM, Lukas Tribus wrote: Looks like you need to change the SDM profile? Which, FYI, disables 16 SFP GigabitEthernet ports (G0/9 to G0/24), so you better check that you don't

Re: [c-nsp] 4500X help

The 4500X is hardly different from a Catalyst in terms of configuration. IOS-XE looks very much like IOS, so much so I really haven't noticed any cosmetic differences. So, if you can configure a C3560 you can do so on a 4500X. -- Stephen On 12/10/2014 4:34 PM, Bob Fronk wrote: Hello

Re: [c-nsp] Peer pointing default route to us

+ 1 for Nick's suggestions. Depending on how you're receiving traffic from the IX, filtering their MAC is an immediate way of dealing with the issue, but you should inform the IX operators and let them deal with the issue. I had a similar problem arise two years ago during an acquisition and

Re: [c-nsp] SVD disabled by default on XR4.3.x

Adam, The answer is quite straight-forward - SVD burned people who had a large number of prefixes in VRF across multiple LC's, and it was not documented well. Disabling by default with easy-to-find documentation about SVD and how to enable it is a far better option, IMO, and the path chosen

Re: [c-nsp] ME3600 BFD session to A9K breaks after upgrade to 15.3(3)S1a

I upgraded an ME3600 to 15.3(3)S1a an hour ago from 15.3(1)s1, which had a working BFD session with a directly connected 6500. After the upgrade, BFD stopped working. Noticed that ISIS was also done (had previously been up). Had to explicitly define the CLNS MTU on the ME3600X interface

Re: [c-nsp] ME3600 BFD session to A9K breaks after upgrade to 15.3(3)S1a

- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Stephen Fulton Sent: Wednesday, November 13, 2013 1:22 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] ME3600 BFD session to A9K breaks after upgrade to 15.3(3)S1a I upgraded an ME3600 to 15.3(3)S1a an hour ago from 15.3(1

[c-nsp] IP SLB appears to fail on 7200/NPE-G2 running 15.2(4)M4

Hi all, For a few reasons, I had to move an IP SLB configuration off a 6500/Sup720 (where it worked fine) to a 7206/NPE-G2 running 15.2(4)M4 Advanced IP Services. There were no errors when adding the configuration, but sessions appeared to fail. I did run a debug and captured connection

Re: [c-nsp] ME3800X/ME3600X/ME3600X-24CX/ASR903/ASR901 Deployment Simplification Feedback

I'll add my +1 to Mark's suggestions, and request more 10GE ports. We're receiving more requests for 10GE (mostly sub-rate, some line-rate) from our customers and offers from our carrier suppliers for the same. The 3600X-24CX fits part of that bill, but I'd really prefer something with more

Re: [c-nsp] 4500x - SFP-GE-T

+1, but the OEM brand I chose was Fluxlight. I'm otherwise happy with their product, but those do get stuck in the 4500-X. You'll need a very small screw driver to manipulate the bottom of the SFP. -- S. On 4/4/2013 21:40, CiscoNSP List wrote: Hi Guys, Hoping someone out there is using

[c-nsp] VPDN-aware VRF

Hi all, I want to terminate a VPDN tunnel within a VRF, but have the actual sessions exist within the global routing table. For example, provider XYZ has provided RFC1918 addresses for their LAC's, which I do not want to expose in my global table, but my customer's PPPoE sessions which

Re: [c-nsp] Open Source Substitute for Cisco's Secure ACS?

For PPPoE, FreeRADIUS is very worthwhile. The options the software provides on on-par with the best commercial RADIUS software. The downside? It is not GUI based (though you can write your own and link it to SQL/LDAP/etc, we have and I suspect most ISP's do) and also, it does involve a

[c-nsp] Stability of 12.2(33)SRD?

Hi all, I'm looking for thoughts on the stability of 12.2(33)SRD releases (latest is SRD2) in general, as well as any experiences running it on the 7600/RSP720 series. I'm connecting a SIP400/SPA-5x1GEv2 to a CWDM network, and only SRD supports the CWDM SFP's on the SIP400. Yay. Thanks,

Re: [c-nsp] SIP-400 and EoMPLS, VPLS and H-VPLS

For the archives, the answer from my SE is yes, the SIP-400/SPA-(2|5)X1GE-V2 can appropriate in a core and edge facing role, on a per-port basis. -- Stephen Stephen Fulton wrote: According to the SIP/SPA configuration guide for the 7600, the SIP-400 with a SPA-2X1GE-V2 or a SPA-5X1GE-V2, can

Re: [c-nsp] SIP-400 and 10GbE SPA

According to the SIP/SPA compatibility matrix: http://www.cisco.com/en/US/docs/interfaces_modules/shared_port_adapters/install_upgrade/7600series/76intro.html#wp1131939 The SPA-1X10GE-L-V2 is compatible with SIP-400. As always, verify with your Cisco SE. -- Stephen MKS wrote: Hi There

[c-nsp] 12.2 SXI, 12.2 SRC route-map question.

Hi all, I am banging my head against the wall with a particular route-map, and I'm seriously wondering if I drank the stupidity kool-aid today. I'm testing a route-map between two BGP speakers, a 7600 running 12.2(33)SRC1 and an ME6524 running 12.2(33)SXI, and for the life of me I cannot get

Re: [c-nsp] 12.2 SXI, 12.2 SRC route-map question.

Scratch that, I fell off the stupid tree today. -- Stephen Stephen Fulton wrote: Hi all, I am banging my head against the wall with a particular route-map, and I'm seriously wondering if I drank the stupidity kool-aid today. I'm testing a route-map between two BGP speakers, a 7600 running

Re: [c-nsp] SXI out

Gert, et al: No issues here, non-modular, semi-production ME6524. IPv4, SNMP, BGP (full table filtered by RIR allocation), MPLS. IPv6 soon. SCP works. So far, so good. -- S. Gert Doering wrote: Hi, On Thu, Nov 13, 2008 at 10:47:32AM -0500, Jared Mauch wrote: I suspect SXI is

Re: [c-nsp] EoMPLS VC up on one side, not on the other.

Thanks Stoffi, Oli.. The VLAN was SVI-based on the ME6524. I've switched to VLAN-based, attached to the outgoing interface.. The VC is not coming up, so I've included a snippet below, in case I've missed anything. Also, there is a name Cisco refers to adding a sub-interface for xconnect

Re: [c-nsp] EoMPLS VC up on one side, not on the other.

Thanks Rubens, I totally missed that when I reconfigured for mux uni. The VC is now up, and I can pass traffic each way. Thanks :) -- Stephen Rubens Kuhl Jr. wrote: Signaling protocol: LDP, peer 10.200.1.8:0 up MPLS VC labels: local 330, remote 69 Group ID: local 0, remote 0 MTU:

Re: [c-nsp] EoMPLS VC up on one side, not on the other.

Doering wrote: Hi, On Sat, Nov 15, 2008 at 11:58:07AM -0500, Stephen Fulton wrote: MTU: local 9000, remote 1500 Welcome to EoMPLS hell. If MTUs do not match, the VC won't come up. And you can't change the raw MTU on a dot1q subinterface. I seem to remember that there is a knob in recent SR

[c-nsp] EoMPLS VC up on one side, not on the other.

I've got an EoMPLS VC between two devices. Device A is a Cisco 3750 Metro, Device B is a ME6524. There are some intermediary devices in between. The VC is up on the 3750M. The VC is down on the ME6524. There is a targeted LDP session configured on both sides, both are up. Both hosts are

[c-nsp] Error using VFI with local VLAN's on 7600/RSP720 12.2 SRC1

Hi all, I'm testing out VFI's in a lab, and I've run into the following when I attempt to add a second VLAN to the VFI instance. The device is 7600/RSP720 running 12.2 SRC1. The VLAN's are connected to the 7600 via a port-channel interface, physical ports are on a 6748 linecard. Error:

Re: [c-nsp] MPLS PE Routers for a Mobile Carrier?

WAN being SIP (be careful with ES20). Would you mind elaborating on that? I'm leaning toward the ES20 at the moment for our needs.. -- Stephen Saku Ytti wrote: On (2008-08-02 17:52 -0300), Rubens Kuhl Jr. wrote: AFAIK, ASR 1000 or 4500/Sup6-E don't support MPLS in current software

Re: [c-nsp] Giving customers access to your gear.

Richey, We've run into this as well. Generally speaking, a sanitized config providing a SNMP context password with specific SNMP OID's permitted (Interface stats, CPU, memory), and locking down SNMP requests to one IP address on the customer side, have pacified the most demanding. --

Re: [c-nsp] Cat6500 - Support for MPLS and IPv6

Yes, Gert has made an excellent point about Juniper. During the last year our Juniper SE has kept in contact regularly, despite the fact that we only have purchased two J-series routers. I don't remember the last time I met with our Cisco rep, let alone a Cisco SE. It's always conference

Re: [c-nsp] Cat6500 - Support for MPLS and IPv6

Gert, FWIW, I spent a lot of time researching the 6500/7600 BU issue in preparation for our last round of upgrades. The best (and most honest) answer I got about service provider software features on the 6500 series was this: We'll still support MPLS, IPv6 etc, but new feature may be

[c-nsp] 12.2 SRC opinions?

Hi all, It's been 2 months since 12.2 SRC was released, and I'm curious about how it's held up on the 7600 series? I've got a 7600/RSP720 arriving soon, and I'm considering SRC. -- S ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] 7200 and the PA-MC-2T3+ or PA-MC-2T3-EC PAs

Hi Justin, WRT MLPPP, the PA-MC-2T3-EC's can offload MLPPP to the card, rather than the CPU. Depending on which NPE is installed, that can make quite a difference. And yes, the 7200's support multi-chassis MLPPP, with the proper IOS image. -- Stephen Justin Shore wrote: I want to sanity

Re: [c-nsp] Proxy ARP -- To disable, or not to disable..

I can't think of single reason why you'd need proxy-arp, ever. I ran into such a reason, recently. We were migrating a customer from a competitors colo to ours, and the customer had been using a Linux-based L2 firewall as their router. We needed to create a temporary IPSec tunnel so that

[c-nsp] BFD state remains in AdminDown

I have BFD configured between two routers, both running 12.4(15)T3. On router A, BFD cycles between INIT and DOWN. On router B, the state remains AdminDown. Here are the configs for both interfaces: -- snip -- Router A: interface FastEthernet0/0.1000 encapsulation dot1Q 1000 ip vrf

Re: [c-nsp] WS-X6724-SFP and 7600 S Chassis with RSP720-3CXL

Justin, Saku: Here's a comparison of Canadian list pricing (despite parity with the US dollar sigh): ES20-GE3CXL $70,800 ES20-10G3CXL$94,400 ES20-ADVIP-LIC $47,200 SIP-600 $106,200 SPA-5X1GE-V2$21,240 SPA-10X1GE $35,400

Re: [c-nsp] BFD aware VRF

I'm speaking with our account rep today about the ME6524, and I'll bring this up. If anyone with Cisco Process Clue(tm) could share with me the direction I should point her, please let me know off-list. -- Stephen Rubens Kuhl Jr. wrote: I did try with an ethernet link between PE and CE, and

Re: [c-nsp] 6748 compatibility with the 7600/RSP720 series.

I'd like to say a big thank you to everyone who replied, you have assisted me to a great degree. I've been torn between the 6500 and 7600 platforms, and your advice has made that decision much easier. -- Stephen. ___ cisco-nsp mailing list

Re: [c-nsp] Changing vlan numbers

-- Stephen Peter Rathlev wrote: Stephen Fulton [EMAIL PROTECTED] 10/18/07 2:59 AM Does anyone know the restrictions on the number of VLAN mappings possible on the 3750 Metro platform? AFAIK the 3750ME can't do it. You have to have a 6500/7600 with the right interface card. Regards, Peter

Re: [c-nsp] Changing vlan numbers

Does anyone know the restrictions on the number of VLAN mappings possible on the 3750 Metro platform? Asbjorn Hojmark - Lists wrote: Any suggestions, or should I forget about vlan mapping on 6148A? I believe VLAN Tanslation isn't supported on the 6148A, and that is supported by the fact

Re: [c-nsp] DMVPN problem, NHRP: Encapsulation failed for destination ...

A minor correction: When I redacted the details, I changed the tunnel key at each side to a different one. In fact, the keys are identical, just not listed as such in my original e-mail. Thanks to David for pointing that out! -- Stephen Stephen Fulton wrote: Hi all, I've got a set up

[c-nsp] DMVPN problem, NHRP: Encapsulation failed for destination ...

Hi all, I've got a set up which has DMVPN working fine with a dozen remote locations, except for one. The hub is a 2811 running c2800nm-advipservicesk9-mz.124-9.T1.bin, and the problem spoke is an older 1721 running c1700-advipservicesk9-mz.123-23.bin. Essentially the tunnel is not coming