[c-nsp] BGP Filtering Policy with regular expressions

2008-01-21 Thread Michalis Palis
Hello all I am trying to write a BGP policy using regular expressions for outgoing filtering. I need to allow customer AS numbers to be announced by our network as well as any prepends they send or any AS behind our customer's AS. e.g allow 12345 678 9123 12345 12345 etc I did try

Re: [c-nsp] BGP Filtering Policy with regular expressions

2008-01-21 Thread Jonathan Crawford
Your regex should accomplish what you want... as long as you are prefix filtering your peers incoming and/or filtering your outgoing prefix announcements then you should be ok... if you are not then you are leaving yourself open to the possibility of a peer accidentally or intentionally announcing

Re: [c-nsp] BGP Filtering Policy with regular expressions

2008-01-21 Thread John van Oppen
The solution to what you are describing is really using community strings to tag routes coming from customers then filtering announcements based on those tags. Google is your friend here. If not, hit me off-list for some cisco config examples. John van Oppen Spectrum Networks LLC

Re: [c-nsp] Recommendations for T1 Extender

2008-01-21 Thread Robert E. Seastrom
Adam Piasecki [EMAIL PROTECTED] writes: In the past we used Pargain equipment, but it's becoming hard to find that stuff. So we are starting to look for a new product. Basically we want to take a T1 from the LEC extended it 1-4miles and have the receving end connect into our router. You

Re: [c-nsp] Over/Undersubscription on certain12000 Line cards

2008-01-21 Thread David Freedman
See http://cisco.cluepon.net/index.php/Line_Cards webserver is being a bit slow at the moment dave. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Differences between cisco 7606 and 7606-s

2008-01-21 Thread Sebastian Wiesinger
* Ultra [EMAIL PROTECTED] [2008-01-21 16:39]: Can anyone explain me the differences between the Cisco 7606 and the Cisco 7606-s? I can¡t see it in the documentation I downloaded from cisco.com

Re: [c-nsp] Differences between cisco 7606 and 7606-s

2008-01-21 Thread Mark Tinka
On Monday 21 January 2008 23:32, Ultra wrote: Can anyone explain me the differences between the Cisco 7606 and the Cisco 7606-s? I can¡t see it in the documentation I downloaded from cisco.com Some differences taken off the 7606-S's data sheet: * As part of the Cisco 7600 Series, the

[c-nsp] Followup: Re: CoPP crashing one of my lab routers

2008-01-21 Thread Justin Shore
I've just received word that the code to address the CoPP crashing bug in 12.4T has been back-ported to 12.4(15)T2 which was released late last week. I have not had a chance to test T2 in a lab but the 12.4(17)T5 code TAC had me test worked flawlessly. FYI Justin Justin Shore wrote: I

Re: [c-nsp] BGP Filtering Policy with regular expressions

2008-01-21 Thread chip
I've always gone for the Belt Suspenders approach. Filter by ASN: ^(12345_)+ Filter by Prefix: permit ip host xxx.xxx.xxx.0 host 255.255.255.0 Apply Communities: set community YOURASN:CUSTOMER-COMMUNITY --chip -- Just my $.02, your mileage may vary, batteries not included, etc On Jan

[c-nsp] 6500/SRA: vpnv4 vs. equal-cost multipath ?

2008-01-21 Thread Alexandre Snarskii
Hi! Summary: looks like IOS 12.2(33)SRA* can't handle vpnv4 routes which comes from peer reachable via two equal paths. May be it's known issue, just run into it and want to share experience.. Our topology is really simple, RouterA RouterB || ||

[c-nsp] PBR and BGP Question

2008-01-21 Thread Jason Ford
All, I have a need to direct traffic from within our core routers out a specific BGP peer unless that peer is down. Here is the setup.. customer network --- core router 03 and core router 04 border router 01 and border router 02 - our bgp peers.. Basically, the customer is

Re: [c-nsp] Looking for visually impressive server racks

2008-01-21 Thread jp
I'd go for a 2001 A Space Odyssey look rather than the Enterprise look. Rows of red lights like Hal (behind smoked acrylic rack faces), A curved white wall (on a side without glass) like the artificial gravity centrifuge part of the ship, with manequins mounted perpendicular to the wall, some

[c-nsp] Rate-limiting traffic on 3500

2008-01-21 Thread Michael Malitsky
Hello, I am trying to figure out a way to set up some traffic limiters. Specific situation is: I have several VLANs in a 802.1q trunk on one port. I need to control the _outbound_ traffic rate with a different CIR for each VLAN. Traffic-shaping would be nice, but I don't think it's supported.

Re: [c-nsp] PBR and BGP Question

2008-01-21 Thread Pete S.
How are you getting the default route into your core? If your ISP border routers, and core are running iBGP, simply use the local preference variable in BGP to send out the prefered ISP. If that ISP connection goes down, the next highest local pref will become the default. Depending on the

[c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Mark Kent
Hello, I've got a cisco 3560 (WS-C3560G-48TS-S) pulling in (80Mbs, 6500pps) on one switch port, and sending it out a trunk... cpu load is 5%. Another cisco 3560, pulling in that same traffic on a trunk and sending it out a layer3 point-to-point gigE is running at 70 to 80% (cpu hog is IP Input).

Re: [c-nsp] PBR and BGP Question

2008-01-21 Thread Jason Ford
We are sending the default routes via eigrp. BGP only runs on the border routers so using the BGP method probably won't work. I was looking at filtering out a subset of customer outgoing traffic and sending it over a cheaper bandwidth provider but I did not want to send all traffic out one or

Re: [c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Mike Louis
Are both models the WS-C3560G-48TS-S version? The first device you mentioned, is it running layer 2 only, into the L2 access switchport and then out to the L2 trunk? From: [EMAIL PROTECTED] [EMAIL PROTECTED] On Behalf Of Mark Kent [EMAIL PROTECTED]

Re: [c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Mark Kent
Are both models the WS-C3560G-48TS-S version? yes, identical boxes. The first device you mentioned, is it running layer 2 only, into the L2 access switchport and then out to the L2 trunk? Yes. The default gateway for the server hanging off the first switch, which is layer2 only, is on a

Re: [c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Chris Phillips
Mark Kent wrote: Hello, I've got a cisco 3560 (WS-C3560G-48TS-S) pulling in (80Mbs, 6500pps) on one switch port, and sending it out a trunk... cpu load is 5%. Another cisco 3560, pulling in that same traffic on a trunk and sending it out a layer3 point-to-point gigE is running at 70 to

Re: [c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Mike Louis
So this is a layer 2 switching vs layer 3 switching performance issue. Are you running any policies or QOS on either switch? ACLs or anything other than a vanilla routing/switching setup? From: Mark Kent [EMAIL PROTECTED] Sent: Monday, January 21, 2008

Re: [c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Seth Mattinen
Mike Louis wrote: So this is a layer 2 switching vs layer 3 switching performance issue. Are you running any policies or QOS on either switch? ACLs or anything other than a vanilla routing/switching setup? It can do ACL and L3 at line rate - unless you have a logging ACL, or exceeded the

Re: [c-nsp] cisco 3560 layer3 performance

2008-01-21 Thread Mark Kent
a) So this is a layer 2 switching vs layer 3 switching performance issue. Yes (not that I'ld expect them to be comparable, although the 4948 does amazingly well in this regard). Are you running any policies or QOS on either switch? ACLs or anything other than a vanilla routing/switching

[c-nsp] Control plane policy recommendation

2008-01-21 Thread Vikas Sharma
Hi, I am configuring CoPP. If any one previously have implemented the same, pls help me in finding what should be the PPS for different traffic class? Regards Vikas Sharma ___ cisco-nsp mailing list cisco-nsp@puck.nether.net