[c-nsp] ASR9902 fpd upgrade

2023-12-20 Thread Drew Weaver via cisco-nsp
at this point. Does anyone know how to resolve RLOAD REQ on these? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ASR 1000 series replacement

2023-12-16 Thread Saku Ytti via cisco-nsp
On Sat, 16 Dec 2023 at 18:38, Charles Sprickman via cisco-nsp wrote: > > There are hundreds of GRE tunnels. > > I have nothing to offer, and I'm mostly out of the ISP game, but I am so > curious what the use-case is here, especially the "BGP to each CPE". I > unde

Re: [c-nsp] ASR 1000 series replacement

2023-12-16 Thread Charles Sprickman via cisco-nsp
> On Dec 16, 2023, at 4:16 AM, Dragan Jovicic via cisco-nsp > wrote: > > Greeting, > We have a somewhat unusual scenario with thousands of CPE devices each > using cellular interface and gre tunnel to connect to hub router, currently > ASR 1001x. > The hub router de

Re: [c-nsp] ASR 1000 series replacement

2023-12-16 Thread Dragan Jovicic via cisco-nsp
Hi, That's great, because we had the same chassis in mind. The peculiarity comes from the way CPEs are configured, routing, NAT between vrfs, one tunnel limit per CPE, and some other things. Anyway, awesome - thank you. BR On Sat, Dec 16, 2023 at 10:35 AM Tarko Tikan via cisco-nsp < cisco-

Re: [c-nsp] ASR 1000 series replacement

2023-12-16 Thread Tarko Tikan via cisco-nsp
connected to mpls core network. There are hundreds of GRE tunnels. Not really so unusual in SP environment. What would be logical replacement for hub router considering expansion and redundancy. We tried a pair of stacked Cisco 9500, and it performed worse than expected. cat8500 family (non-L

[c-nsp] ASR 1000 series replacement

2023-12-16 Thread Dragan Jovicic via cisco-nsp
connected to mpls core network. There are hundreds of GRE tunnels. What would be logical replacement for hub router considering expansion and redundancy. We tried a pair of stacked Cisco 9500, and it performed worse than expected. One solution we have is another router with same addressing scheme

Re: [c-nsp] ACL to block udp/0?

2023-12-06 Thread Dobbins, Roland via cisco-nsp
nted. ;> I know you know this, just stating it for the record. Concur 100% otherwise, of course. Roland Dobbins ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/l

Re: [c-nsp] ACL to block udp/0?

2023-12-06 Thread Gert Doering via cisco-nsp
Hi, On Wed, Dec 06, 2023 at 09:00:58AM +, Dobbins, Roland wrote: > On Dec 6, 2023, at 04:45, Gert Doering via cisco-nsp > wrote: > > > deny ipv4 any any fragments > > This is approach is generally contraindicated, as it tends to break EDNS0, & > DNSS

Re: [c-nsp] ACL to block udp/0?

2023-12-06 Thread Dobbins, Roland via cisco-nsp
On Dec 6, 2023, at 04:45, Gert Doering via cisco-nsp wrote: deny ipv4 any any fragments This is approach is generally contraindicated, as it tends to break EDNS0, & DNSSEC along with it. If the target is a broadband access network, you can use flow telemetry to measure normal rates of

Re: [c-nsp] ACL to block udp/0?

2023-12-05 Thread Hank Nussbacher via cisco-nsp
XR syntax for fragment blocking is deny ipv4 any any fragments gert To both D'Wayne and Gert - thx! Regards, Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.

Re: [c-nsp] ACL to block udp/0?

2023-12-05 Thread Gert Doering via cisco-nsp
Hi, On Tue, Dec 05, 2023 at 11:27:21PM +0200, Hank Nussbacher via cisco-nsp wrote: > We encountered something strange.  We run IOS-XR 7.5.2 on ASR9K platform. > > Had a user under udp/0 attack.  Tried to block it via standard ACL: > > > ipv4 access-list block-zero >  20

Re: [c-nsp] ACL to block udp/0?

2023-12-05 Thread Saunders, D'Wayne via cisco-nsp
cs/ip/generic-routing-encapsulation-gre/8014-acl-wp.html> D’Wayne Saunders On 6 Dec 2023, at 08:27, Hank Nussbacher via cisco-nsp wrote: [External Email] This email was sent from outside the organisation – be cautious, particularly with links and attachments. We encountered something strange. We r

[c-nsp] ACL to block udp/0?

2023-12-05 Thread Hank Nussbacher via cisco-nsp
 block-zero ingress  ipv4 access-group block-zero egress Yet, based on Kentik, we had no effect and the udp/0 attack just continued - as if the Cisco ACL is totally ignored.  Or am I missing something in the ACL listed above? Thanks, Hank ___ cisco-nsp

Re: [c-nsp] IOS XR filter route from OSPF?

2023-11-30 Thread Aaron via cisco-nsp
Are you running BFD on the link as well? On Thu, Nov 30, 2023 at 8:33 AM Drew Weaver via cisco-nsp < cisco-nsp@puck.nether.net> wrote: > Can you point me towards a hint on how you implement import/export filters > in OSPF on IOS XR? > > Are you referring to 'distribute lists'?

Re: [c-nsp] IOS XR filter route from OSPF?

2023-11-30 Thread Drew Weaver via cisco-nsp
immediately. It seems like it takes 15-20 seconds for the route to be removed entirely from OSPF from when the transport goes down. Thanks, -Drew -Original Message- From: cisco-nsp On Behalf Of Mark Tinka via cisco-nsp Sent: Tuesday, November 28, 2023 10:34 AM To: cisco-nsp

Re: [c-nsp] IOS XR filter route from OSPF?

2023-11-28 Thread Mark Tinka via cisco-nsp
On 11/28/23 17:02, Nick Hilliard via cisco-nsp wrote: prefix filtering is a defining feature of a policy routing protocol. OSPF is a link-state protocol, and doesn't support the concept of having different visibility of prefixes inside the same area.  If you want that with OSPF, you'll

Re: [c-nsp] IOS XR filter route from OSPF?

2023-11-28 Thread Nick Hilliard via cisco-nsp
Drew Weaver via cisco-nsp wrote on 15/11/2023 17:43: Is there a way to prevent that IP address from being seen at all by the IOS XR routers? prefix filtering is a defining feature of a policy routing protocol. OSPF is a link-state protocol, and doesn't support the concept of having

[c-nsp] VPDN CHAP/CLEAR

2023-11-15 Thread Olivier CALVANO via cisco-nsp
Hi i have a question: I have a cisco Router for L2TP/PPP I receive a radius requete from my supplier: rad_recv: Access-Request packet from host xxx port 33696, id=30, length=333 Called-Station-Id = "dataverizon" Calling-Station-Id = "" User-Password = "12345

[c-nsp] IOS XR filter route from OSPF?

2023-11-15 Thread Drew Weaver via cisco-nsp
not to time out as quickly as they should be. Any thoughts? Thanks, -Drew ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Restricting access to NXAPI in NXOS via IPv6

2023-10-19 Thread Drew Weaver via cisco-nsp
-OS_Programmability_Guide_7x/NX_API.html#id_92103 Has anyone seen a similar guide for IPv6 anywhere? I am assuming that this works but with Cisco having documentation is better. ip netns exec management ip6tables -A INPUT -p tcp --dport 443 -j DROP Do you just follow the same instructions

Re: [c-nsp] Netflow vs SNMP

2023-10-02 Thread Saku Ytti via cisco-nsp
On Mon, 2 Oct 2023 at 13:22, Dobbins, Roland via cisco-nsp wrote: > cache timeout inactive 15 > Kentik recommends 15s: > > This is an old, out-of-date recommendation from Cisco should be retired. > > 5s is plenty of time for inactive flows. What is the basis for this recommen

Re: [c-nsp] Netflow vs SNMP

2023-10-02 Thread Dobbins, Roland via cisco-nsp
On 2 Oct 2023, at 17:10, Hank Nussbacher mailto:h...@interall.co.il>> wrote: cache timeout inactive 15 Kentik recommends 15s: This is an old, out-of-date recommendation from Cisco should be retired. 5s is plenty of time for inactive

Re: [c-nsp] Netflow vs SNMP

2023-10-02 Thread Hank Nussbacher via cisco-nsp
, and that the SNMP polling/analysis system is configured with those values. We have set: cache timeout inactive 15 Kentik recommends 15s: https://github.com/kentik/config-snippets/blob/master/Cisco/IOS-XR/netflow-9.conf but I will try 5s based on your feedback. Regards, Hank

Re: [c-nsp] Netflow vs SNMP

2023-10-02 Thread Saku Ytti via cisco-nsp
On Mon, 2 Oct 2023 at 09:14, Hank Nussbacher via cisco-nsp wrote: > Does this make sense to go 1:1 which will only increase the number of > Netflow record to export? Everyone that does 1:1000 or 1:1 > sampling, do you also seen a discrepancy between Netflow stats vs SNMP > st

Re: [c-nsp] Netflow vs SNMP

2023-10-02 Thread Dobbins, Roland via cisco-nsp
On 2 Oct 2023, at 13:13, Hank Nussbacher via cisco-nsp mailto:cisco-nsp@puck.nether.net>> wrote: Does this make sense to go 1:1 which will only increase the number of Netflow record to export? Everyone that does 1:1000 or 1:1 sampling, do you also seen a discrepancy between N

Re: [c-nsp] Netflow vs SNMP

2023-10-02 Thread Gert Doering via cisco-nsp
Hi, On Mon, Oct 02, 2023 at 09:13:55AM +0300, Hank Nussbacher via cisco-nsp wrote: > When comparing traffic stats with SNMP, Netflow stats always appear too low > (see attachment). > > Opened a TAC case and their recommendation is to do 1:1 and I quote: > > "Irrespecti

[c-nsp] Netflow vs SNMP

2023-10-02 Thread Hank Nussbacher via cisco-nsp
nks, Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Midpoint RSVP LSP stats

2023-09-28 Thread Mark Tinka via cisco-nsp
On 9/28/23 09:10, Mohammad Khalil via cisco-nsp wrote: Greetings I am looking for similar command to obtain forwarding information at the midpoint (no te interfaces) https://www.juniper.net/documentation/us/en/software/junos/mpls/topics/ref/command/show-mpls-lsp.html This is on NCS5500

[c-nsp] Midpoint RSVP LSP stats

2023-09-28 Thread Mohammad Khalil via cisco-nsp
. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Extended Route Target Community Bug - Solved!

2023-09-27 Thread Mark Tinka via cisco-nsp
. As with IOS XR, a lot of them seem nice-to-have, for us anyway, in the context of where the Internet is today. I’m a Juniper guy mostly, but, RPL is pretty good I’ve got to admit. I think it's a bit over-the-top, but that's just me :-). -- Nathan Ward [1] I have forgotten what Cisco calls

Re: [c-nsp] Extended Route Target Community Bug - Solved!

2023-09-27 Thread Nathan Ward via cisco-nsp
L, I think that’s a fair trade. I’m a Juniper guy mostly, but, RPL is pretty good I’ve got to admit. -- Nathan Ward [1] I have forgotten what Cisco calls constrained route distribution. rtfilter is a JunOS term and is what I call it. From memory vendors all call it different things. ___

Re: [c-nsp] Q. Is anyone deploying TCP Authentication Option (TCP-AO) on their BGP peering Sessions?

2023-09-27 Thread Gert Doering via cisco-nsp
Hi, On Wed, Sep 27, 2023 at 08:48:44AM +0800, Barry Greene via cisco-nsp wrote: > Q. Is anyone deploying TCP Authentication Option (TCP-AO) on their BGP > peering Sessions? Not me. Not sure if my vendors do support it (IOS XR and Arista EOS), but I do not see significant benefit. TBH

Re: [c-nsp] Extended Route Target Community Bug - Solved!

2023-09-26 Thread Mark Tinka via cisco-nsp
behind the scenes. I have seen this catch out folks in the past, who either expected it to pre-filter like Cisco, or expected it to permit RTs additional to the policy. Agreed - the Juniper option makes more sense to me, even though I first interacted with VRF's in IOS. Cisco have always

[c-nsp] Q. Is anyone deploying TCP Authentication Option (TCP-AO) on their BGP peering Sessions?

2023-09-26 Thread Barry Greene via cisco-nsp
. The Vendors are not supporting yet. Which means a lot of older systems would not be able to support a BGP session with TCP-AO. 2. People have to tried is operationally. Sharing you thoughts would be helpful …... Thanks, Barry ___ cisco-nsp mailing list cisco

Re: [c-nsp] Extended Route Target Community Bug - Solved!

2023-09-23 Thread Nathan Ward via cisco-nsp
On 24/09/2023 at 4:18:23 AM, Mark Tinka via cisco-nsp < cisco-nsp@puck.nether.net> wrote: > This is different from how Junos does it, where import/export maps can > be used without having to explicitly define the RT in the VRF. > Further than that, in JunOS if you define

Re: [c-nsp] Extended Route Target Community Bug - Solved!

2023-09-23 Thread Mark Tinka via cisco-nsp
for it work further down the core. Am I doing something wrong, or is this a bug? System is an ASR1002-X running IOS XE 17.03.04a. For completeness, doing this on Junos works flawlessly. All help appreciated. Thanks. Mark. ___ cisco-nsp mai

[c-nsp] Extended Route Target Community Bug

2023-09-21 Thread Mark Tinka via cisco-nsp
something wrong, or is this a bug? System is an ASR1002-X running IOS XE 17.03.04a. For completeness, doing this on Junos works flawlessly. All help appreciated. Thanks. Mark. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net

Re: [c-nsp] IOS XE BGP Add-Paths Support for VPNv4 + VPNv6 AFI's

2023-09-12 Thread Mark Tinka via cisco-nsp
;bgp additional-paths install" features. However, neither "bgp additional-paths send receive" nor "advertise additional-paths" are supported, making it a fractured and not very useful feature. Mark. _______ cisco-nsp maili

Re: [c-nsp] BGP Extended Communities

2023-09-10 Thread Mark Tinka via cisco-nsp
On 9/10/23 21:22, Mohammad Khalil via cisco-nsp wrote: Greetings Hope all is well. I need to check if Juniper's BGP extended community settings are compatible with Cisco's BGP extended community settings. Is it possible to intercommunicate Juniper's BGP extended community with Cisco BGP

[c-nsp] BGP Extended Communities

2023-09-10 Thread Mohammad Khalil via cisco-nsp
Greetings Hope all is well. I need to check if Juniper's BGP extended community settings are compatible with Cisco's BGP extended community settings. Is it possible to intercommunicate Juniper's BGP extended community with Cisco BGP extended community ? Defining BGP Extended Communities for Use

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-09-02 Thread Mark Tinka via cisco-nsp
. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-09-02 Thread Phil Bedard via cisco-nsp
. If you have one pointing somewhere else, then it will. Some Junos platforms won't do this either BTW, it's somewhat dependent on the forwarding hardware. ABF works but it's more similar to using filter based forwarding in Junos. Thanks, Phil On Tue, Aug 29, 2023 at 12:43 PM Mark Tinka via cisco

Re: [c-nsp] IOS XE BGP Add-Paths Support for VPNv4 + VPNv6 AFI's

2023-08-30 Thread Mark Tinka via cisco-nsp
On 8/30/23 18:14, Mark Tinka via cisco-nsp wrote: Hi all. Does anyone have any definitive info per subject? We don't see support in our CSR1000v units, and my SE seems to have gone fishing. Anyone who has deployed Cat8000v know if there is support there? It's what we are moving

[c-nsp] IOS XE BGP Add-Paths Support for VPNv4 + VPNv6 AFI's

2023-08-30 Thread Mark Tinka via cisco-nsp
is a workaround, but... Mark. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Mark Tinka via cisco-nsp
. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Mark Tinka via cisco-nsp
. One could probably find out, with enough energy, but I've given up on IOS XR... also because BGP Add-Paths setup in IOS XR is unnecessarily complicated if you compare it to IOS XE. Mark. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Gert Doering via cisco-nsp
Hi, On Tue, Aug 29, 2023 at 02:28:53PM +0200, Mark Tinka via cisco-nsp wrote: > So yes, our default routes point to Null0. I changed that to something > useful and it still didn't work. It's almost as if the traffic exiting the > VRF toward the global table wanted to follow a label swit

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Mark Tinka via cisco-nsp
too late to test now. The box has been swapped out. But this is a good tip. I'll ask the next person who runs into this to update this post with their experience. Mark. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailma

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Mark Tinka via cisco-nsp
. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Arie Vayner via cisco-nsp
Would something like this work? https://learningnetwork.cisco.com/s/question/0D53i0KstGrCAJ/ios-xr-leaking-the-routes-between-vrf-and-global-rib On Tue, Aug 29, 2023, 7:49 AM Mark Tinka via cisco-nsp < cisco-nsp@puck.nether.net> wrote: > Hi all. > > I've been racking

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Nathan Ward via cisco-nsp
On 29/08/2023 at 6:48:32 PM, Mark Tinka via cisco-nsp < cisco-nsp@puck.nether.net> wrote: > Hi all. > > I've been racking my brain trying to implement an equivalent feature in > IOS XR 6.7.1 similar to Junos' "next-table" feature. > > Essentially, I am trying

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Mark Tinka via cisco-nsp
n existing router. But we don't use that feature too often because it impacts ultimate PFE performance in a way that a regular "vrf" routing instance does not. Mark. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.

Re: [c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Fraser McGlinn via cisco-nsp
Would this be a case where vasi-left and vasi-right interfaces are appropriate? Essentially same as an LT in Junos. Not as elegant for sure, but should function. Cheers, Fraser > On 29 Aug 2023, at 4:48 pm, Mark Tinka via cisco-nsp > wrote: > > Hi all. > > I've been racki

[c-nsp] "next-table" Equivalent for IOS XR - Default Route into Global Routing Table

2023-08-29 Thread Mark Tinka via cisco-nsp
me up with a working solution, or is IOS XR just deficient in this regard? I don't understand the point of being able to point default to the global table in a VRF, and then not be able to actually use it. Thanks. Mark. _______ cisco-nsp mailing list c

Re: [c-nsp] Problems with A99-8X100GE-TR and IOS XR 6.5.3

2023-08-20 Thread Bryan Holloway via cisco-nsp
Turns out we had a bad backplane ... ended up replacing the chassis. All the LCs were fine. Thanks to everyone who responded on- and off-list! On 6/5/23 16:34, Tom Hill wrote: On 2023-06-01 21:38, Bryan Holloway via cisco-nsp wrote: https://community.cisco.com/t5/xr-os-and-platforms

Re: [c-nsp] add-path on XR

2023-07-18 Thread Mark Tinka via cisco-nsp
On 9/9/22 11:06, Sebastian Neuner via cisco-nsp wrote: Hi all, I got no replies and that might be because nobody cares, or it might be because nobody knows how to do it on XR. Googling for something and finding posts without solution is always annoying, so here's what I found

Re: [c-nsp] add-path on XR

2023-07-18 Thread Mark Tinka via cisco-nsp
hange. And why is the documentation for those products of the last few years in general such a catastrophe? I'm guessing most people don't use Add-Paths as much as they do Multipath, so perhaps why. Mark. _______ cisco-nsp mailing list cisco-nsp@puck.ne

[c-nsp] IPv4 Multicast Service Reflection

2023-07-03 Thread Eugene Grosbein via cisco-nsp
same provider that supports both of IGMP join and PIM. This source comes via single 1Gbps optical L2 port to our 7600 RSP720-3C-GE core router, the port load is 357Mbps at max. We also use several Cisco 7201 routers connected to the same vlan as PIM routers and Multicast Service Reflectors. Each

Re: [c-nsp] Port-channel not working Juniper vs Cisco

2023-06-11 Thread Saku Ytti via cisco-nsp
unobservable to you. On Sun, 11 Jun 2023 at 13:31, james list wrote: > > Hi > I've deactivated the FAST on Juniper but nothing changes... > > As I wrote on Cisco remains down hence you will not see any LACP while on > Juniper it flaps, once I shut on cisco it stop to f

Re: [c-nsp] Port-channel not working Juniper vs Cisco

2023-06-11 Thread james list via cisco-nsp
Hi I've deactivated the FAST on Juniper but nothing changes... As I wrote on Cisco remains down hence you will not see any LACP while on Juniper it flaps, once I shut on cisco it stop to flap I'm not sure it is a cabling issue... we should try to setup a pure L3 p2p link and test that I guess

Re: [c-nsp] Port-channel not working Juniper vs Cisco

2023-06-11 Thread Saku Ytti via cisco-nsp
, 11 Jun 2023 at 10:38, james list via cisco-nsp wrote: > > Dear expert > we've an issue in setting up a port-channel between a Juniper EX4400 and a > Cisco Nexus N9K-C93180YC-EX over an SX 1 Gbs link. > > We've implemented the following configuration but on Juniper side it is &g

[c-nsp] Port-channel not working Juniper vs Cisco

2023-06-11 Thread james list via cisco-nsp
Dear expert we've an issue in setting up a port-channel between a Juniper EX4400 and a Cisco Nexus N9K-C93180YC-EX over an SX 1 Gbs link. We've implemented the following configuration but on Juniper side it is interface flapping while on Cisco side it remains down. Light levels seem ok. Has

[c-nsp] NCS5k - long downtime during optical failover

2023-06-10 Thread Mihai via cisco-nsp
in the right direction? The next stop would be to open a TAC case of course. Thanks! ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Problems with A99-8X100GE-TR and IOS XR 6.5.3

2023-06-05 Thread Tom Hill via cisco-nsp
On 2023-06-01 21:38, Bryan Holloway via cisco-nsp wrote: https://community.cisco.com/t5/xr-os-and-platforms/problems-with-a99-8x100ge-tr-and-ios-xr-6-5-3/td-p/4013668 This chassis has been up and churning packets for several years, so it was presumed to be a possible hardware fail. We acquired

[c-nsp] Problems with A99-8X100GE-TR and IOS XR 6.5.3

2023-06-01 Thread Bryan Holloway via cisco-nsp
RSP880s, same chassis (9904). Sound familiar? Anybody else seen this? Thank you all ... !! ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] 10G Cisco router

2023-05-31 Thread Ted Pelas Johansson via cisco-nsp
ASR920 or NCS540? /Tes Sent from my Phone > On 31 May 2023, at 22:42, harbor235 via cisco-nsp > wrote: > > Hi all, > > Looking for a Cisco CPE that can do up to 2Gbps, basic routing nothing > fancy. > > 4451 w/2Gbps license and 2xSM-X's could do the trick

[c-nsp] 10G Cisco router

2023-05-31 Thread harbor235 via cisco-nsp
Hi all, Looking for a Cisco CPE that can do up to 2Gbps, basic routing nothing fancy. 4451 w/2Gbps license and 2xSM-X's could do the trick, thoughts, better choice? Needs to be Cisco , eng group is finicky Mike ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-05-06 Thread Mike Hammett via cisco-nsp
oincidence, but these seems like a direct line from problem to resolution. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Mike Hammett via cisco-nsp" To: "Cisco Network Service Providers"

Re: [c-nsp] Hiding SCP Password Using Archive Feature

2023-05-03 Thread Tom Hill via cisco-nsp
On 2023-04-29 14:47, Richard Clayton via cisco-nsp wrote: Hi Guys s/Guys/everyone/g archive path scp:// user:password@1.2.3.4/CUSTOMERS/CUSTOMER1/CUSTOMER-LONDON6-ETH1.cfg write-memory time-period 10080 Because the password part of the SCP config is not an IOS recognised password I don't

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-05-02 Thread Mike Hammett via cisco-nsp
w.facebook.com/thebrotherswisp ] [ https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg ] - Original Message - From: "Mike Hammett via cisco-nsp" To: "Cisco Network Service Providers" Sent: Monday, April 3, 2023 12:16:52 AM Subject: [c-nsp] Cisco Nexus 3k Route Selection\Pa

[c-nsp] Hiding SCP Password Using Archive Feature

2023-04-29 Thread Richard Clayton via cisco-nsp
to encrypt it. If that's the case is there a secure fudge, like somehow referencing a local username that does have password encryption. I'm not looking for server based solutions like SolarWinds etc. Thanks Rick ___ cisco-nsp mailing list cisco-nsp

[c-nsp] Basic Cisco Nexus ACL, VRF, etc. Questions

2023-04-16 Thread Mike Hammett via cisco-nsp
I'm fairly new to Cisco routing. I've been using Cisco switching for a few years, but gaps in knowledge aren't apparent when the only layer 3 access to the equipment is internal. I've been using Mikrotik and Linux routing for a very long time. Does Cisco (particularly the Nexus line

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-16 Thread Mike Hammett via cisco-nsp
. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Mike Hammett via cisco-nsp" To: "Cisco Network Service Providers" Sent: Monday, April 3, 2023 12:16:52 AM Subject: [c-nsp]

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-03 Thread Jon Lewis via cisco-nsp
On Mon, 3 Apr 2023, Mike Hammett via cisco-nsp wrote: We have a Nexus 3064 that is setup with partial BGP tables and is routing based on that. I've done a show ip bgp for an IP of interest and it has an expected next hop IP. I show ip arp on that next hop IP and it has the expected

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-03 Thread Mike Hammett via cisco-nsp
The snmp if index reported by the Nexus matches the if index in ElastiFlow. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Raymond Burkholder via cisco-nsp" To: cisco-nsp@puck.nether

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-03 Thread Mike Hammett via cisco-nsp
. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Raymond Burkholder via cisco-nsp" To: cisco-nsp@puck.nether.net Sent: Monday, April 3, 2023 12:31:59 AM Subject: Re: [c-nsp] Cisco Nexus 3k Route Select

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-03 Thread Mike Hammett via cisco-nsp
What started this investigation was a client complained of traffic coming from another upstream instead of our direct connection. - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP - Original Message - From: "Mike Hammett via

Re: [c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-02 Thread Raymond Burkholder via cisco-nsp
On 4/2/23 23:16, Mike Hammett via cisco-nsp wrote: We have a Nexus 3064 that is setup with partial BGP tables and is routing based on that. I've done a show ip bgp for an IP of interest and it has an expected next hop IP. I show ip arp on that next hop IP and it has the expected interface

[c-nsp] Cisco Nexus 3k Route Selection\Packet Forwarding Debugging

2023-04-02 Thread Mike Hammett via cisco-nsp
Internet Exchange The Brothers WISP ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] ios xe amsterdam

2023-03-24 Thread Brian Turnbow via cisco-nsp
Hi Everyone, Posting this as it made for quite an interesting debug, and am hoping to save someone some future grief. When using ASR 1ks and ios XE Amsterdam 17.3.6 we encountered an issue related to pppoe users and radius attributes. We saw issues trying to send cisco AV pair ip:outacl

[c-nsp] Nexus sFlow

2023-03-19 Thread Mike Hammett via cisco-nsp
rface, it is enabled for both ingress and egress. You cannot enable sFlow for only ingress or only egress." Hasn't Cisco fixed this yet? - Mike Hammett Intelligent Computing Solutions Midwest Internet Exchange The Brothers WISP ___

Re: [c-nsp] BGP Routes

2023-03-14 Thread Mohammad Khalil via cisco-nsp
Thanks Saku and Gert for the kind replies , well received. From: cisco-nsp on behalf of Gert Doering via cisco-nsp Sent: Sunday, March 12, 2023 9:58 PM To: Saku Ytti Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] BGP Routes Hi, On Sun, Mar 12, 2023 at 08

Re: [c-nsp] BGP Routes

2023-03-12 Thread Gert Doering via cisco-nsp
Hi, On Sun, Mar 12, 2023 at 08:51:36PM +0200, Saku Ytti via cisco-nsp wrote: > You might want add-path or best-external for predictability and > improved convergence time. Last time we did best-external with ASR9k it only worked in a useful way if you are using labeled-unicast. That wa

Re: [c-nsp] BGP Routes

2023-03-12 Thread Saku Ytti via cisco-nsp
On Sun, 12 Mar 2023 at 20:50, Mark Tinka via cisco-nsp wrote: > ASR9K1 has more routes with better paths toward destinations via its > upstream than ASR9K2 does. Or at worst, race. You might want add-path or best-external for predictability and improved convergence time. --

Re: [c-nsp] BGP Routes

2023-03-12 Thread Mohammad Khalil via cisco-nsp
Thanks for the hint , actually this is what I have been thinking of but was wondering how can I get more details or samples about that as a matter of proof. From: cisco-nsp on behalf of Mark Tinka via cisco-nsp Sent: Sunday, March 12, 2023 9:49 PM To: cisco-nsp

Re: [c-nsp] BGP Routes

2023-03-12 Thread Mark Tinka via cisco-nsp
On 3/12/23 20:21, Mohammad Khalil via cisco-nsp wrote: Greetings I have two ASR9K connected to different providers (Uplinks). I am receiving around 90K routes from each provider , as well , I have iBGP between the ASR9K. What am noticing is that ASR9K1 is advertising around 87K to ASR9K2

Re: [c-nsp] BGP Routes

2023-03-12 Thread Matt Illingworth via cisco-nsp
On Sun, 12 Mar 2023, 18:22 Mohammad Khalil via cisco-nsp, < cisco-nsp@puck.nether.net> wrote: > Greetings > I have two ASR9K connected to different providers (Uplinks). > I am receiving around 90K routes from each provider , as well , I have > iBGP between the ASR9K.

[c-nsp] BGP Routes

2023-03-12 Thread Mohammad Khalil via cisco-nsp
? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Internet border router recommendations and experiences

2023-03-08 Thread Eric Louie via cisco-nsp
to be compassionate today On Thursday, February 23, 2023 at 11:35:35 AM PST, Phil Bedard via cisco-nsp wrote: The original question was around an Internet border router with 10G support.  We have devices like the 55A2-MOD-SE which is similar to some other vendor devices (somewhat of a reference

Re: [c-nsp] Internet border router recommendations and experiences

2023-03-06 Thread Andrey Kostin via cisco-nsp
ery for me. There are packages for 4,8,16,32 and 64 thousand subscribers. They are not very expensive compared to the price of hardware. Hope this is helpful for OP. Kind regards, Andrey Mark Tinka via cisco-nsp писал(а) 2023-02-24 13:18: On 2/24/23 19:51, Lukas Tribus via cisco-nsp wrote: Hello, for the u

Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences)

2023-03-04 Thread James Bensley via cisco-nsp
l get that an execute it. That script can then do whatever you want, i.e. download an image file, a config file, and run the commands to apply/install the image and apply the config. Cheers, James. ___________ cisco-nsp mailing list cisco-nsp@puck.nether.net htt

Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences)

2023-03-04 Thread Tarko Tikan via cisco-nsp
-- tarko ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences)

2023-03-04 Thread James Bensley via cisco-nsp
--- Original Message --- On Wednesday, March 1st, 2023 at 09:43, Tarko Tikan via cisco-nsp wrote: > > My long-term solution to this problem is to install with iPXE. That lets > > you do it via HTTP and without all the nonsense :) > > > Unfortunately this is

[c-nsp] Newbie assistance about filtering netflow export (ascii clean)

2023-03-02 Thread Hank Nussbacher via cisco-nsp
cess-group nf_ex_ing Where in the page was defined nf_ex_ing? I thought it was nf_ex. The only Cisco doc I found that discusses "option filtered" is: https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6-5/netflow/configuration/guide/b-netflow-cg-asr9k-65x/b-netflow-cg-asr9k-

[c-nsp] Newbie assistance about filtering netflow export

2023-03-02 Thread Hank Nussbacher via cisco-nsp
I thought it was |||nf_ex|. The only Cisco doc I found that discusses "option filtered" is: https://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k-r6-5/netflow/configuration/guide/b-netflow-cg-asr9k-65x/b-netflow-cg-asr9k-65x_chapter_010.html Any clue apprec

Re: [c-nsp] Blocking SNMPv3 engine-id discovery [was: Re: How to disable ILMI/SNMP CSCvs33325]

2023-03-02 Thread Nathan Lannine via cisco-nsp
On Wed, Sep 21, 2022 at 6:52 AM Simon Leinen via cisco-nsp < cisco-nsp@puck.nether.net> wrote: > Gert Doering writes: > > On Wed, Sep 21, 2022 at 08:14:30AM +0300, Hank Nussbacher wrote: > >> Indeed the SNMP leaks appear to be exactly CSCtw74132 which we did > >>

Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences)

2023-03-01 Thread Phil Bedard via cisco-nsp
not necessarily something I would advocate. Thanks, Phil From: cisco-nsp on behalf of Tarko Tikan via cisco-nsp Date: Wednesday, March 1, 2023 at 3:56 AM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences) hey

Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences)

2023-03-01 Thread Tarko Tikan via cisco-nsp
upgrades you want all your devices end up in same state and GISO provides that. When doing investigation you don't have to go and compare specific RPM versions that someone might have installed etc. -- tarko ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences)

2023-03-01 Thread Tarko Tikan via cisco-nsp
. -- tarko ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] NCS IOS-XR rant (was:Re: Internet border router recommendations and experiences)

2023-03-01 Thread Mark Tinka via cisco-nsp
then. Mark. _______ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

<    1   2   3   4   5   6   7   8   9   10   >