Re: [c-nsp] Netconf (over SSHv2) in SXI

2009-02-23 Thread Teller, Robert
When I was working on an application to post xml code to my ace modules I found the xml info on the ace module, have you tried enabling http/https and browsing to the device? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf

Re: [c-nsp] VTP domain.

2009-02-10 Thread Teller, Robert
What is the current vtp mode of the switch? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Keith Sent: Tuesday, February 10, 2009 11:03 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] VTP domain. Have a 3560 I am

Re: [c-nsp] Combining multiple vlans into a single vlan.

2008-12-15 Thread Teller, Robert
Could you also use private vlans? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Peter Rathlev Sent: Sunday, December 14, 2008 12:33 PM To: Jeff Cartier Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Combining

Re: [c-nsp] OPSF over a Lan-to-Lan VPN tunnel

2008-12-15 Thread Teller, Robert
You are going to have to use a combination of GRE and ISAKMP to get this to work. Routing updates are not passed through vpns natively. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Per A Sent: Monday, December 15,

Re: [c-nsp] Cat6500 sup2 boot from PCMCIA

2008-12-12 Thread Teller, Robert
I ran into a similar problem and had to RMA a new sup/cf card from cisco. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of David Lima Sent: Friday, December 12, 2008 7:41 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp]

Re: [c-nsp] suddenly lost telnet connection in switch

2008-12-12 Thread Teller, Robert
Try this Extended IP access list 110 permit tcp 192.168.0.0 0.255.255.255 [Vlan 1 ip] eq www permit tcp 172.16.0.0 0.255.255.255 [Vlan 1 ip] eq www permit tcp 10.0.0.0 0.255.255.255 [Vlan 1 ip] eq www permit tcp [ip address] [Vlan 1 ip] eq telnet deny tcp any eq www any log

[c-nsp] Cisco WCS, Radius, and Guest Administration

2008-12-09 Thread Teller, Robert
Whenever I attempt to administer Guest Users under WCS using an account that was authenticated against radius I get a http 500 error. It doesn't matter what level (group membership) the account has. Has anyone else experienced this problem?

Re: [c-nsp] any way to check the cisco interface to output to file

2008-11-26 Thread Teller, Robert
Snmp probes to the interface -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chloe K Sent: Wednesday, November 26, 2008 4:56 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] any way to check the cisco interface to output to file Hi I realize

Re: [c-nsp] no implementation plans

2008-11-26 Thread Teller, Robert
Why do you say vss will die a horrible death? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tim Durack Sent: Wednesday, November 26, 2008 7:12 AM To: [EMAIL PROTECTED]; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] no implementation plans On Wed, Nov

Re: [c-nsp] no implementation plans

2008-11-26 Thread Teller, Robert
That's where I am at, now that VSS supports fwsm and ace I'll probably be looking at migrating in January or February. -Original Message- From: Tim Durack [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2008 7:43 AM To: Teller, Robert Cc: [EMAIL PROTECTED]; cisco-nsp

Re: [c-nsp] can't ping - please help

2008-11-25 Thread Teller, Robert
Try adding the following command in stead of using the ip default-gateway command Ip route 0.0.0.0 0.0.0.0 192.168.0.113 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard N. Ingram Sent: Tuesday, November 25, 2008 4:23 AM Cc:

[c-nsp] 4402 guest wireless access

2008-11-25 Thread Teller, Robert
I am trying to configure a 4402 controller to allow basic web authentication to guess users. I am using Cisco 1131 aps and a 4402 wlc. If the guest connects with a wpa key it works but as soon as I require web authentication it just hangs at the redirect screen. Any suggestions?

Re: [c-nsp] Alternatives to Cisco's TACACS server?

2008-11-25 Thread Teller, Robert
I am using radius and Microsoft's IAS server and that works just fine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yuval Ben Ari Sent: Monday, November 24, 2008 11:48 AM To: Tom Simes Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Alternatives to

Re: [c-nsp] 4402 guest wireless access

2008-11-25 Thread Teller, Robert
The issue was resolved by updating the dns entry for the hostname of the device to reflect the virtual ip address instead of the management ip address. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Teller, Robert Sent: Tuesday, November 25, 2008 6:52

[c-nsp] Wireless Spectrum Analyzers

2008-10-14 Thread Teller, Robert
I am getting ready to deploy a wireless networking and was curious which spectrum analyzer people have had better luck with. I will be using 4402 WCS (With the location software add-on) and 1131AG lwapp. It looks like the Cisco spectrum analyzer integrates with the WCS but I'm not sure how

Re: [c-nsp] command or third party software about switch port

2008-10-09 Thread Teller, Robert
One way is to connect to the device and type show mac address-table interface gigabitEthernet 1/12 This will give you all mac addresses associated to an interface, copy the mac address and connect to your core router and type show ip arp 000b.cd42.4a1c this will then give you the ip address that

Re: [c-nsp] problem with serial number on cisco 7200 routers/maintenance contract

2008-10-02 Thread Teller, Robert
For my 6509's I use show idprom backplane I don't know if it is the same for 7200's -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Weber, Markus Sent: Thursday, October 02, 2008 10:24 AM To: Matlock, Kenneth L; Christian Koch; Stephan Lochner Cc:

Re: [c-nsp] Configure Cisco Ace using XML

2008-09-24 Thread Teller, Robert
I took a look at those and couldn't make heads or tails of the cisco_ace.dtd file -Original Message- From: Ramcharan, Vijay A [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 24, 2008 6:52 AM To: Teller, Robert; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Configure Cisco Ace using

[c-nsp] Configure Cisco Ace using XML

2008-09-23 Thread Teller, Robert
I know it was possible to configure Cisco CSS devices by posting an xml file to them. After migrating from the CSS to the ACE module I will need to do the same thing but I am having problems finding example xml files. Anyone have anything that I could use to get started? Robert Teller

[c-nsp] DHCP and HSRP

2008-09-03 Thread Teller, Robert
Is it possible to configure two 6509's to share DHCP information so that if the active HSRP router goes down and the standby comes up it doesn't generate a bunch of ip conflicts? Or do I need to maintain a separate scope on each HSRP member? Robert Teller Washington Dental Service Network

Re: [c-nsp] Web Caches

2008-08-23 Thread Teller, Robert
I am using securecomputings webwasher and the setup works really well. It's a little more then bluecoat but cheaper if you go for an HA setup. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lala Lander Sent: Saturday, August 23, 2008 1:43 AM To:

Re: [c-nsp] Cisco ACE Context

2008-08-22 Thread Teller, Robert
- Original Message - From: Teller, Robert [EMAIL PROTECTED] To: Christian Koch [EMAIL PROTECTED] Cc: Tony Varriale [EMAIL PROTECTED]; cisco-nsp@puck.nether.net Sent: Thursday, August 21, 2008 6:53 PM Subject: RE: [c-nsp] Cisco ACE Context Sea-6509-B#sh svclc vlan-group Display vlan-groups created

Re: [c-nsp] Cisco ACE Context

2008-08-22 Thread Teller, Robert
So it looks like the problem is that the interface associated to the ace is configurable. Does anyone know how to remove it without rebuilding the chassis? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Teller, Robert Sent: Friday, August 22, 2008 9:08

Re: [c-nsp] Cisco ACE Context

2008-08-22 Thread Teller, Robert
and nothing happens. Anyone else experience this? -Original Message- From: Justin Shore [mailto:[EMAIL PROTECTED] Sent: Friday, August 22, 2008 11:23 AM To: Teller, Robert Cc: Tony Varriale; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Cisco ACE Context I haven't worked with an ACE yet

Re: [c-nsp] Cisco ACE Context

2008-08-22 Thread Teller, Robert
So what is this dreaded cold standby you speak of because I think I am experiencing it. -Original Message- From: Ramcharan, Vijay A [mailto:[EMAIL PROTECTED] Sent: Friday, August 22, 2008 1:28 PM To: Teller, Robert Cc: cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Cisco ACE Context

[c-nsp] Cisco ACE Context

2008-08-21 Thread Teller, Robert
I have two cisco 6509 chassis with ace and fwsm modules. I have configured the ace blades to use an internal and external conext. On ACE-A I am able to bring up both contexts and everything talks just fine but on ACE-B I can't bring up vlan 138. Is there something I'm missing?

Re: [c-nsp] Cisco ACE Context

2008-08-21 Thread Teller, Robert
vlan999 Sea-ACE-B/Admin# show vlans Vlans configured on SUP for this module vlan100 vlan200 vlan210 vlan235 vlan238 vlan555 vlan801-803 -Original Message- From: Tony Varriale [mailto:[EMAIL PROTECTED] Sent: Thursday, August 21, 2008 4:16 PM To: Teller, Robert; cisco-nsp

Re: [c-nsp] Cisco ACE Context

2008-08-21 Thread Teller, Robert
PROTECTED] Sent: Thursday, August 21, 2008 4:53 PM To: Teller, Robert Cc: Tony Varriale; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Cisco ACE Context what do you see when you do a 'sh svclc vlan-group' on the 6500 that ace-b is installed in? On Thu, Aug 21, 2008 at 7:32 PM, Teller, Robert

Re: [c-nsp] Cisco ASA - Export rules

2008-08-19 Thread Teller, Robert
I use this script to parse my pix acls and export them to an excel file. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Artur Renato Araujo da Silva Sent: Tuesday, August 19, 2008 1:57 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Cisco ASA - Export

Re: [c-nsp] Cisco ASA - Export rules

2008-08-19 Thread Teller, Robert
'Created by Robert Teller WScript.Echo This script will take a minute or two to run vbCrLf Please be patient Const ForReading = 1 'Looks for CF acl query WSArg = Wscript.arguments.Count If WSArg 1 Then WScript.Echo Please select a valid source WScript.Quit End If PixACL =

[c-nsp] VMPS and 6500

2008-08-13 Thread Teller, Robert
I was thinking about playing with VMPS but from what I can tell it's not supported on IOS, is that correct? Robert Teller Washington Dental Service Network Administrator (206) 528-2371 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] #

[c-nsp] Ace Module Troubleshooting

2008-08-07 Thread Teller, Robert
So i have a wierd issue going on with my ACE module. I am sure it is a configuration issue but since i am making it up as i go i can only do so much. I am able to browse to a load balanced website from one computer but if i try to browse to it from another computer the website is unavailable.

Re: [c-nsp] Ace Module Troubleshooting

2008-08-07 Thread Teller, Robert
XXX.XXX.XXX.134 tcp eq 9090 3 match virtual-address XXX.XXX.XXX.134 tcp eq 1 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Teller, Robert Sent: Thursday, August 07, 2008 10:54 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Ace Module

Re: [c-nsp] Ace Module Troubleshooting

2008-08-07 Thread Teller, Robert
This issue was resolved by adding pat to the end of my nat statements -Original Message- From: Tony Varriale [mailto:[EMAIL PROTECTED] Sent: Thursday, August 07, 2008 1:46 PM To: Teller, Robert; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Ace Module Troubleshooting A few questions

[c-nsp] 6500 ACE/FWSM

2008-08-06 Thread Teller, Robert
Is it possible to automatically replicate what vlan's re associated to a vlan group between two chassis? Robert Teller Washington Dental Service Network Administrator (206) 528-2371 [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] # The

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

2008-07-30 Thread Teller, Robert
I am going for a collapsed core design and using 4948's for top of rack access. From: Mike Louis [mailto:[EMAIL PROTECTED] Sent: Tue 7/29/2008 7:56 PM To: Teller, Robert; Tony Varriale; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] 6509 ACE/FWSM Modules

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

2008-07-30 Thread Teller, Robert
I already have the hardware and I am prepping for migration. -Original Message- From: Kevin Graham [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2008 9:57 AM To: Gert Doering; Teller, Robert Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 6509 ACE/FWSM Modules?? My

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

2008-07-29 Thread Teller, Robert
Yeah I am going to have a contractor come in for a day to work on some of the best practices type stuff but was looking for a book to read on the side. -Original Message- From: Tony Varriale [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2008 4:11 PM To: Teller, Robert; cisco-nsp

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

2008-07-29 Thread Teller, Robert
, July 29, 2008 4:27 PM To: Teller, Robert; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 6509 ACE/FWSM Modules?? If you want something somewhat Cisco centric, the Networkers slides on the ACE blades are ok. They cover some nice basics about load balancing and about the ACE blades

Re: [c-nsp] 6509 ACE/FWSM Modules??????????

2008-07-29 Thread Teller, Robert
I will be replacing the 3750 with the 6509's -Original Message- From: Mike Louis [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 29, 2008 6:19 PM To: Teller, Robert; Tony Varriale; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] 6509 ACE/FWSM Modules?? Last time I checked the 3750

[c-nsp] Cisco 6500 Chassis PDU

2008-07-22 Thread Teller, Robert
I am in the process of installing two Cisco 6500 chassis and was curious what types of PDU's people are using. # The information contained in this e-mail and subsequent attachments may be privileged, confidential and protected from

Re: [c-nsp] Cisco 6500 Chassis PDU

2008-07-22 Thread Teller, Robert
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin M. Streiner Sent: Tuesday, July 22, 2008 5:47 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Cisco 6500 Chassis PDU On Tue, 22 Jul 2008, Teller, Robert wrote: I am in the process of installing two Cisco

Re: [c-nsp] Cisco 6500 Chassis PDU

2008-07-22 Thread Teller, Robert
Subject: Re: [c-nsp] Cisco 6500 Chassis PDU On Tue, 22 Jul 2008, Teller, Robert wrote: I am in the process of installing two Cisco 6500 chassis and was curious what types of PDU's people are using. If you do want your 6509s to be fed from PDUs, there are several vendors out

[c-nsp] Cisco 2851 bug ?

2008-07-11 Thread Teller, Robert
Is anyone aware of a bug or configuration that could cause a sudden spike in IP input? uptime is 26 weeks, 3 days, 10 hours, 54 minutes System returned to ROM by reload at 01:40:08 PST Tue Jan 8 2008 System restarted at 01:41:34 PST Tue Jan 8 2008 System image file is

Re: [c-nsp] 3750 stack member failure detection

2008-07-09 Thread Teller, Robert
You could count how many interfaces are available. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Anthony GUENEAU Sent: Sunday, July 06, 2008 9:11 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] 3750 stack member failure detection Hi, Does anybody