[c-nsp] FWSM Deployment

2007-04-12 Thread Mark Tohill
Hi, We have 2 x 6500's with single Sup720's running native IOS 12.2(18)SXF4 and intend to deploy the FWSM running 3.2 software. Despite the 3.2 configuration guide being fairly good at describing the placement of MSFC with regard to FWSM etc., can any one help regarding the following: 1.

[c-nsp] FWSM migration...

2007-04-12 Thread Mark Tohill
Hi, We have 6509/720-3A's acting as aggregation switches in a small Internet Data Centre doing L3, L2 Vlaning, OSPF etc. The boxes seem to be well capable of handling current traffic loads. With the 6509's capablity to implement ACL's/VACL's in the PFC, what extra would a FWSM give us? The

[c-nsp] 7600 IOS Version choice ....

2007-04-12 Thread Gordon Bezzina
Hello, It seems I need some advise. As you remember some months ago I mention to you the intention of moving Up from the 7500 to the 7600. I am now happy to tell you that I have a 7600 + SUP720-3BXL standing besides My desk. I now need some advise on choosing the right IOS. I was thinking to

Re: [c-nsp] 7600 IOS Version choice ....

2007-04-12 Thread Rodney Dunn
On Thu, Apr 12, 2007 at 09:05:38AM +0200, Gordon Bezzina wrote: Hello, It seems I need some advise. As you remember some months ago I mention to you the intention of moving Up from the 7500 to the 7600. I am now happy to tell you that I have a 7600 + SUP720-3BXL standing besides My desk. I

Re: [c-nsp] PA-MC-8T1 into 7500

2007-04-12 Thread David Coulson
Just make sure you max out the memory on the VIP2... They support 128Mb of RAM. I have a few in a 7500 in the same configuration in the event a DS-3 card goes south and they are happy. Jeff Crowe wrote: Hi all, I am planning on installing a PA-MC-8T1 VIP2-50 into my 7500. Are there any

Re: [c-nsp] FWSM migration...

2007-04-12 Thread Voll, Scott
Stateful inspection. If you just want a FW you would not need the IDSM. Depending on application you might also want the IDSM. (depends) Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Tohill Sent: Thursday, March 01, 2007 1:40 AM To:

[c-nsp] 802.1q - Max Number of Subinterfaces

2007-04-12 Thread J Springer
I am interested in recommendations on a Cisco unit that will terminate a minimum of 2000 (preferably 4096) VLANs. The ethernet (Gig or Fast) will be set to trunk. I've tested SVI on a couple of switches and 802.1Q subints on routers but am finding conflicting documentation regarding the maximum

[c-nsp] OT ACS 4.1

2007-04-12 Thread Nick Griffin
Does anyone have any experience installing ACS 4.1 on a drive other than the c: drive? I'm attempting to and getting ODBC errors before the installation finish. Perhaps someone has seen this. Thanks in advance, Nick Griffin ___ cisco-nsp mailing list

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System

2007-04-12 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System Advisory ID: cisco-sa-20070412-wcs http://www.cisco.com/warp/public/707/cisco-sa-20070412-wcs.shtml Revision 1.0 For Public Release 2007 April 12 1600 UTC (GMT

[c-nsp] HSRP hellos using only one interface of bundle

2007-04-12 Thread Alaerte Vidali
Have you seen this condition? All HSRP groups between 2 7609 connected through 4 giga interfaces configured as trunk/layer 2 channel uses only one interface for HSRP hellos. Comments? Rgds, Alaerte ___ cisco-nsp mailing list [EMAIL PROTECTED]

Re: [c-nsp] 802.1q - Max Number of Subinterfaces

2007-04-12 Thread Aivars
Depending on the features and speed you require, you might also take a look at 7304 NSE-100 or even NSE-150. This box can handle even more that 4k vlans. Aivars Thursday, April 12, 2007, 6:17:42 PM, you wrote: JS I am interested in recommendations on a Cisco unit that will terminate a minimum

Re: [c-nsp] 802.1q - Max Number of Subinterfaces

2007-04-12 Thread Michael K. Smith - Adhost
Hello: -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of J Springer Sent: Thursday, April 12, 2007 8:18 AM To: [EMAIL PROTECTED] Subject: [c-nsp] 802.1q - Max Number of Subinterfaces I am interested in recommendations on a Cisco unit

Re: [c-nsp] 7600 IOS Version choice ....

2007-04-12 Thread Asbjorn Hojmark - Lists
If you want to prepare for what will be coming down the road you need to go with SRB. I agree. A lot of customers are parked on 12.2(18)SXF because it is still being rebuilt. A lot of customers are parked on SXF, because that's basically the only thing there is. (The only software that

Re: [c-nsp] FWSM migration...

2007-04-12 Thread Asbjorn Hojmark - Lists
With the 6509's capablity to implement ACL's/VACL's in the PFC, what extra would a FWSM give us? Stateful filtering and high-performance NAT comes to mind. They'll also buy you some application intelligence (L5, as you mentioned). -A ___ cisco-nsp

Re: [c-nsp] FWSM Deployment

2007-04-12 Thread Asbjorn Hojmark - Lists
1. Placement of FWSM with regard to MSFC, the pros and cons. Check out the Data Center SRNDs at www.cisco.com/go/srnd -A ___ cisco-nsp mailing list [EMAIL PROTECTED] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] vlan configuration for video system

2007-04-12 Thread Dan
Hello We are implementing a video conferencing system on our system and I was wondering if anyone had recommendations for how to setup the vlan's for data/video/voice. We currently have one 3560 in each of the buildings and 2-10 2960's behind the 3560. All of the buildings are connected via

Re: [c-nsp] 802.1q - Max Number of Subinterfaces

2007-04-12 Thread sthaug
Something to be aware of is the per-interface sub-interface limits for the various cards. Perhaps someone has a pointer to an official Cisco document, but I *think* almost all of the FE/GE interfaces on the 7200-series support up to 256 sub-interfaces. Thus, you'd have to have multiple

Re: [c-nsp] vlan configuration for video system

2007-04-12 Thread Voll, Scott
What kind of video system? Does it mark packets with DSCP / IP Prec by default? My guess is that if your going to make a separate video vlan, you will have to assign the port to the video vlan manually. ( more Management :-( Scott -Original Message- From: [EMAIL PROTECTED]