[c-nsp] Difference between Available Bandwidth and Net bandwidth

2007-07-11 Thread Amit Dave
Can anybody help me explaining difference between Available Bandwidth and net Bandwidth as per command outputs below ; RTR-1#sh int Serial0/0/0 Serial0/0/0 is up, line protocol is up Hardware is GT96K with integrated T1 CSU/DSU Description: to VILCHI1-AHRESTY-v1 Internet address is

Re: [c-nsp] SFP-GE-S/L vs GLC-SX/LX

2007-07-11 Thread gmb
What do the SFP-GE optics give me that the GLCs don't? The SFP-GE-* ones are newer, and support DOM. It makes no sense that two different parts exist and customers are forced to keep spares from each. GLCs should have disappeared long time ago. Yes, DOM doesn't work on 6748 cards yet. It's a

[c-nsp] BGP leak prefixes over IPv4 tunnel

2007-07-11 Thread Nick Kraal
Hi all, A memory loss problem here. We/ISP_A are trying to leak prefixes (which are not seen on the public Internet) to a remote network/ISP_B via BGP. At this point of time we are planning to build this via BGP over a IPv4 tunnel interface. ISP_A---Transit_Provider---ISP_B

Re: [c-nsp] BGP leak prefixes over IPv4 tunnel

2007-07-11 Thread Stephen Wilcox
On Wed, Jul 11, 2007 at 03:49:24PM +0800, Nick Kraal wrote: Hi all, A memory loss problem here. We/ISP_A are trying to leak prefixes (which are not seen on the public Internet) to a remote network/ISP_B via BGP. At this point of time we are planning to build this via BGP over a IPv4

Re: [c-nsp] Sup32 Active Standby Switchover

2007-07-11 Thread xdsgrrr
We using c7600s3223-adventerprisek9-mz.122-33.SRB1.bin and i allready have configured LDP GR and Yes the ports are on engines can this be a problem ? 2 on first one and other 2 on the second one , this is a logical becouse i loose and line card too but to be sure . im going to resolve this

Re: [c-nsp] SLB Question

2007-07-11 Thread Robert Blayzor
Paul Stewart wrote: Is there a way to have SLB answer a virtual address that is forwarded to the real IP of *one* of the servers while maintaining an active/standy configuration? The docs only talk about load balancing itself. Sorry, forgot to answer the second part of this... Yes, you

[c-nsp] pix failover config

2007-07-11 Thread Ahmad Cheikh Moussa
Hi Guys, is it a good idea to use the virtual mac adress feature in a failover configuration ? How is you experience with that ? I have PIX515E cluster with PIXos 7.2(2) . If I want to use that, should I always use the same virtuall mac addresses on all interfaces, or should every interface have

Re: [c-nsp] SLB Question

2007-07-11 Thread Paul Stewart
Thanks there's a lot of other servers in the same subnet (layer2 adjacent as well) and they must be able to talk that confirms what I thought I was understanding from the docs... We can of course do this server level...;) My last question would then be if we ran NAT with SLB then the

Re: [c-nsp] SLB Question

2007-07-11 Thread Robert Blayzor
Paul Stewart wrote: My last question would then be if we ran NAT with SLB then the servers having to cross layer3 comes out of the equation correct... because with NAT, there would be a translation happening which would handle the actual SLB portion? I personally have not found NAT based SLB

Re: [c-nsp] SLB Question

2007-07-11 Thread Robert Blayzor
Seth Mattinen wrote: My understanding is that traffic can't traverse the same interface for or be on the same L2 in any form for SLB to work. Correct. As stated in previous message, there must be an L3 hop between the clients and the virtual servers/server farms. -Robert

Re: [c-nsp] SLB Question

2007-07-11 Thread Paul Stewart
Thanks Robert and everyone... this seems like it's going to get complicated as these are mail servers in particular So, what's a good hardware solution (bearing in mind that we can still do this in software on the servers)?? Cisco used to make load balancing hardware at one time but I don't

Re: [c-nsp] SLB Question

2007-07-11 Thread Robert Blayzor
Paul Stewart wrote: So, what's a good hardware solution (bearing in mind that we can still do this in software on the servers)?? Cisco used to make load balancing hardware at one time but I don't think they are involved with that any longer?? Open to hardware suggestions.. preferably

Re: [c-nsp] SLB Question

2007-07-11 Thread Arie Vayner (avayner)
Paul, I recommend that you look at the ACE module. It's the latest and greatest HW based SLB solution (a blade on the 6500): http://www.cisco.com/en/US/products/ps6906/index.html If you really need to be able to provide access to the VIP from the same L2 domain where the real servers are

[c-nsp] Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities

2007-07-11 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Overflow Vulnerabilities Document ID: 92015 Advisory ID: cisco-sa-20070711-cucm http://www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtml Revision 1.0 For Public Release 2007

Re: [c-nsp] SLB Question

2007-07-11 Thread Arie Vayner (avayner)
Hmm... I am writing from (long term) memory here... I can't test it right now, but what most likely has to be done is to build 2 different vservers, and use the vlan num classifier (with a different vlan ID per vserver). Both vservers can use the same servergroup... Saying that, I am quite

[c-nsp] NTP Config

2007-07-11 Thread Hitesh Vinzoda
I have got 4 6509 cisco in mesh for the core and i want to enable NTP on those to act as a master. i went thru the config, the only option there is configntp master stratum 8 ( 8 is the default value ) does only this command will enable the device to act as a NTP server and suggestions are

Re: [c-nsp] SLB Question

2007-07-11 Thread Robert Blayzor
Arie Vayner (avayner) wrote: Hmm... I am writing from (long term) memory here... I can't test it right now, but what most likely has to be done is to build 2 different vservers, and use the vlan num classifier (with a different vlan ID per vserver). Both vservers can use the same

[c-nsp] L2TPv3 Newbie Questions

2007-07-11 Thread Bernd Ueberbacher
Hi everybody! Right now I'm educating myself with 2 Ciscos and made a L2TPv3 xconnection between them. Works fine, but I'm wondering if there is a way to show a status about the tunnel. Something more informative than sh l2tun The second question is how I could do rate-limiting for the

Re: [c-nsp] NTP Config

2007-07-11 Thread Sridhar Ayengar
Justin Shore wrote: 1) Always use authentication between your local peers. Ideally you would also take advantage of NIST's offer of authenticated NTP (or make arrangements with another provider with whom you peer). This isn't a big deal if all of the devices are behind a firewall. You can

Re: [c-nsp] NTP Config

2007-07-11 Thread Tony Li
I tend to use tick and tock (.usno.navy.mil) for my stratum-2 servers. There are others which allow public access, but why not just go to the horse's mouth? The horse can pretty far away. If you're topologically distant, then access to tick and tock might have substantial amounts of

[c-nsp] BGP log disable bgp logging

2007-07-11 Thread Murali Krishna
Hi, Below are the logging messages in the routers Jul 11 17:42:59.052 EDT: BGP: Applying map to find origin for Jul 11 17:42:59.052 EDT: BGP: Applying map to find origin for Jul 11 17:42:59.052 EDT: BGP: Applying map to find origin for Jul 11 17:42:59.052 EDT: BGP: Applying map to find origin

Re: [c-nsp] BGP log disable bgp logging

2007-07-11 Thread Seth Mattinen
Murali Krishna wrote: Hi, Below are the logging messages in the routers snip can any one tell me how to disable BGP debug messages to from the router log? it's filling-up router logging buffer in 15 minutes. no debug all ? ___ cisco-nsp

[c-nsp] Opportunistic LACP/PaGP bundling?

2007-07-11 Thread Kevin Graham
While I don't know of where Cisco does it at all presently, is anyone aware of vendors doing opportunistic formation of link bundles? With port-channels already enforcing identical configurations before accepting members and negotiation options available, it would seem like this would be a safe

[c-nsp] SSO/NSF and mpls time for switchover

2007-07-11 Thread xdsgrrr
Hi networkers , I just found that when SSO/NSF is using with Mpls it slowing down a lot SSO/NSF im currently switch for testing purposes mpls off on interfaces of my routers 7606 and SSo/NSF work like a charm 0% packet loss , i have changed sup32 to sup720 but the result is the same the sups

[c-nsp] ASA - packets tripping on NAT rule?

2007-07-11 Thread Justin M. Streiner
I'm configuring a new ASA 5505 at a remote site and have a site-to-site VPN working between the main office and the remote site. Users were experiencing problems reaching a server at the remote office over the VPN tunnel, and when I did a packet trace, I saw traffic failing at the last step,