Re: [c-nsp] BGP path preference

2007-08-29 Thread Andy Dills
On Tue, 28 Aug 2007, Justin Shore wrote: Does anyone have any suggestions on how to work around this? L3 will eventually fix it when they eliminate 19094 but who knows when that will be. I thought about trying to use a regex to match 19094 3356 to raise local pref even higher. I also

[c-nsp] bfd in a VRF

2007-08-29 Thread Gier, Menno de \(Menno\)
All, Between two routers I configured BGP for peering. Both routers are not directly connected, but via a L2 switch. To make the switch-over faster I use bfd (Bidirectional Forwarding Detection) (The timers are set to 300msec with a retry timer of 3.) On my router I need to setup more BGP

[c-nsp] ACS and ASA VPN user authentication

2007-08-29 Thread Brett Looney
Greets, Background: When connecting to an ASA using the Cisco VPN client you've got to build a connection entry (stored as a PCF file) that includes the VPN group name and VPN group shared key. PCF files can be migrated from one machine to another. We have an issue where a tech-savvy user has

Re: [c-nsp] MLPPP over ATM

2007-08-29 Thread Eric Van Tol
Well, the problem is I don't really have a config. Here's what I have the client side: ! interface Multilink1 ip address 10.0.0.2 255.255.255.252 ppp multilink ppp multilink group 1 ! interface Serial0 no ip address encapsulation frame-relay IETF no fair-queue frame-relay lmi-type ansi !

Re: [c-nsp] ACS and ASA VPN user authentication

2007-08-29 Thread John Kougoulos
Hello, I've done this in vpn concentrators with radius: Locking Users into a VPN 3000 Concentrator Group Using a RADIUS Server http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a00800946a2.shtml It applies to VPN concentrators using Radius, but I guess that it will

Re: [c-nsp] bfd in a VRF

2007-08-29 Thread Phil Mayers
On Wed, 2007-08-29 at 10:52 +0200, Gier, Menno de (Menno) wrote: All, Between two routers I configured BGP for peering. Both routers are not directly connected, but via a L2 switch. To make the switch-over faster I use bfd (Bidirectional Forwarding Detection) (The timers are set to

[c-nsp] high cpu usage because of process switching on mlppp interface

2007-08-29 Thread Arda Balkanay
Hi i have a problem about high cpu usage on a 7206 VXR NPE-G1 because of process switching on a multilink ppp interface. I have two E1 interfaces between 7206 and 3845 (below MTP-C72-02 indicates 7206 and ADN-C38-01 indicates 3845). I've bundled these two E1 interfaces. And when the amount of

Re: [c-nsp] Multiple T1 IMA / Channelized DS3

2007-08-29 Thread Robert Blayzor
OCOSA ListAcct wrote: Ok. I spoke with ATT earlier they said that they have other customers taking some T1 IMAs over a channelized DS3 into the same router I was like how they said they would have a tech contact me I was ok. I thought maybe take the DS3 circuit into some sort of mux and

[c-nsp] FWSM 3.1 and Servers with redundant cards

2007-08-29 Thread varaillon
Hi, For redundancy reasons, we have a server with two network cards. Each card belongs to a subnet and each subnet to a different DMZ. The server has two default routes with different metrics, where the prefered default route is in the DMZ_1.

Re: [c-nsp] ACS and ASA VPN user authentication

2007-08-29 Thread mcgrath
Sounds like you have a significant security issue here. IF you have a PKI you can issue machine certificates and check them during the XAUTH phase. So even if the user manages to transfer a .pcf to a unauthorized device the machine cert will be invalid and the XAUTH will fail.You could

Re: [c-nsp] Unrecognized cookie format for WIC-1DSU-T1

2007-08-29 Thread Ed Ravin
On Wed, Aug 29, 2007 at 12:30:41AM -0500, neal rauhauser wrote: Is it a WIC-1DSU-T1? And you need a WIC-1DSU-T1-V2 for the 18xx/28xx/38xx series ... if it came out of an older router this is likely the case. Thanks, that's exactly what happened. Luckily, we have a 1700 router

Re: [c-nsp] MLPPP over ATM

2007-08-29 Thread Eric Van Tol
Figured it out. For anyone going through this in the future, check out: http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_ guide09186a00801149cf.html#wp1048901 Thanks, evt -Original Message- From: Alex Balashov [mailto:[EMAIL PROTECTED] Sent: Tuesday,

Re: [c-nsp] Unrecognized cookie format for WIC-1DSU-T1

2007-08-29 Thread Tim Franklin
On Wed, August 29, 2007 2:37 pm, Ed Ravin wrote: Is there some central router part compatibility page on Cisco's site that lets you catch issues like this before you stick the parts in? I thought I had reviewed the 2801 info and didn't see any warnings about unsupported WICs. As a

[c-nsp] Recommended SNMP trap collectors

2007-08-29 Thread Joe Loiacono
What would you recomend as a good SNMP trap collector and alerter, other than HP OV? Open source or commercial. Thanks, Joe ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] bfd in a VRF

2007-08-29 Thread Aamer Akhter \(aakhter\)
Correct. BFD doesn't work in a VRF. It's annoying. BFD in a VRF works today on the GSR (12.0S) in the newer releases. It will work in future releases on the different platforms. Regards, -- Aamer Akhter / [EMAIL PROTECTED] Ent Commercial Systems, cisco Systems -Original Message-

Re: [c-nsp] Multiple T1 IMA / Channelized DS3

2007-08-29 Thread OCOSA ListAcct
I understand that. I was trying to figure out what the ATT sales guy was talking about. I know it is not possible but was wondering if anyone knew of a way because the ATT sales guy was speaking like they got the pa-mc-t3 and just used that card I was saying I did could not find anything

[c-nsp] TFTP server for LWAPP to Autonomous downgrade

2007-08-29 Thread Edward Iong
Hi, I have read your question today. Have you found out the solution? as you set the tftp server machine to 10.0.0.2, make sure your firewall not blocking the data transfer, use direct cable and in the tftp server settings- make sure will allow sending files out. Better to turn the firewall

Re: [c-nsp] Multiple T1 IMA / Channelized DS3

2007-08-29 Thread OCOSA ListAcct
You are so correct Robert Thanks! Otis Robert Blayzor wrote: OCOSA ListAcct wrote: I understand that. I was trying to figure out what the ATT sales guy was talking about. I know it is not possible but was wondering if anyone knew of a way because the ATT sales guy was speaking like

[c-nsp] Cannot add file to flash on 2811

2007-08-29 Thread Andriy A. Yerofyeyev
Hello group , Just wondering , why I cant add file to flash (CF) filesystem on 2811 without Erasing it ? router#copy tftp://192.168.0.1/2800/ccme40/cme-124-11XJ-chimes/79x1-backgrounds/List79x1.xml flash: Destination filename [List79x1.xml]? Accessing

Re: [c-nsp] Cannot add file to flash on 2811

2007-08-29 Thread Tim Franklin
On Wed, August 29, 2007 4:05 pm, Andriy A. Yerofyeyev wrote: router#copy tftp://192.168.0.1/2800/ccme40/cme-124-11XJ-chimes/79x1-backgrounds/List79x1.xml flash: Destination filename [List79x1.xml]? Accessing tftp://192.168.0.1/2800/ccme40/cme-124-11XJ-chimes/79x1-backgrounds/List79x1.xml...

Re: [c-nsp] Cannot add file to flash on 2811

2007-08-29 Thread Church, Charles
Just answer 'n' or 'no' to the question. It should then start copying, assuming everything else is ok. Chuck Church Principal Network Engineer, CCIE #8776 Harris Information Technology Services EDS Contractor - Navy Marine Corps Intranet (NMCI) 1210 N. Parker Rd. | Greenville, SC 29609

Re: [c-nsp] BGP path preference

2007-08-29 Thread Bob Tinkelman
I'd suggest using route-maps to *lower* the local-pref on routes that contain ASNs from two or your upstreams. - Bob I have a situation with one of our upstreams that I'm trying to fix. We peer with Level3 (3356), specifically we peer with 19094 which is the old Telcove (Adelphia)

[c-nsp] Cisco Security Advisory: XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page

2007-08-29 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: XSS and SQL Injection in Cisco CallManager/Unified Communications Manager Logon Page Advisory ID: cisco-sa-20070829-ccm http://www.cisco.com/warp/public/707/cisco-sa-20070829-ccm.shtml Revision 1.0 For Public Release 2007

Re: [c-nsp] high cpu usage because of process switching on mlppp interface

2007-08-29 Thread Bruce Pinsky
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arda Balkanay wrote: Hi i have a problem about high cpu usage on a 7206 VXR NPE-G1 because of process switching on a multilink ppp interface. I have two E1 interfaces between 7206 and 3845 (below MTP-C72-02 indicates 7206 and ADN-C38-01

Re: [c-nsp] high cpu usage because of process switching on mlppp interface

2007-08-29 Thread Rodney Dunn
Do you have a TAC SR open on this? I just saw someone ask this a few days ago and I told them it's a bug. We support CEF switching of data over a MLPPP bundle with MPLS. Are you running MPLSoMLPPP or are you just running the MLPPP interface in a VRF? MTP-C72-02#sh inter mul 1 switching

Re: [c-nsp] Strange log messages on GSR (MPLS_LABEL_REUSE)

2007-08-29 Thread Rodney Dunn
Aaron, It's a bug. CSCse04192 Internally found cosmetic defect: Resolved (R) NRT:lreuse:Can't write label reuse data to standby RP pdata file was fixed in 12.0(32)SY3. Is this seen on 32SY3? On Thu, Aug 23, 2007 at 09:19:53AM -0400, Aaron Daubman wrote: Greetings, I just saw these two

Re: [c-nsp] Cisco Juniper PPPoE forwarding via L2TP

2007-08-29 Thread Junaid
Gabor, many thanks for such a comprehensive reply and info. I did experience MTU issues while working with Cisco devices however there are a few differences between the described problem and my scenario. Firstly, I am using Cisco as LAC and ERX as LNS. Secondly the error my Cisco device gives is

[c-nsp] 2600XM's and 12.4T

2007-08-29 Thread Kevin Graham
There's no 12.4(15)T images for the 2600XM's on CCO. I haven't checked w/ account team yet, but does anyone know offhand if they got cut off mid-train after their EoSales/Last Shipment earlier this year? With 12.5 mainline just a couple of releases away, this seems rather abrupt (though I seem

[c-nsp] BGP hardware requirements

2007-08-29 Thread Dracul
Hi All is BGP configuration ok for these scenarios? 1MB and 2MB leased line link 1MB and 1MB leased line link (also its a v.35 and fastethernet combo) what would be the best setup? Full routes? Def routes? Here's the show version of the router I will be using. can it support BGP? = Cisco