[c-nsp] mpls vpn with MTU less than 1500

2007-10-10 Thread Soon Kian
Hi Guys, Wondering if anyone is providing your customers with mpls vpn with MTU less than 1500, due to physical media constraint. i.e equipment unable to support Jumbo frame. By means of running tcp-adjust mss etc. If yes, what's your customer's expectation on this Rdgs Sean

Re: [c-nsp] GE over copper port adapter for a 7206VXR

2007-10-10 Thread Vincent De Keyzer
Yep, we have that on our network and it works fine. Google for cisco WS-G5483 Vincent -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Bob Chan Sent: mercredi 10 octobre 2007 1:14 To: Vincent Aniello Cc: cisco-nsp@puck.nether.net

Re: [c-nsp] GE over copper port adapter for a 7206VXR

2007-10-10 Thread Adrian Chadd
On Wed, Oct 10, 2007, Masood Ahmad Shah wrote: Not Cat5... You need to have Cat 5e or Cat 6... Simple Cat 5 will not work for 1000BaseT I'm sure it works, just not as well as you think.. Quoting Gigabit Ethernet article from Wikipedia (of course, its Wikipedia, so its not an authoritative

Re: [c-nsp] GE over copper port adapter for a 7206VXR

2007-10-10 Thread Masood Ahmad Shah
Not Cat5... You need to have Cat 5e or Cat 6... Simple Cat 5 will not work for 1000BaseT Regards, Masood Ahmad Shah -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bob Chan Sent: Wednesday, October 10, 2007 4:14 AM To: Vincent Aniello Cc:

Re: [c-nsp] DSL router recommendation

2007-10-10 Thread David J. Hughes
Hi, Does the SB 100 series actually terminate IPSec? The doco implies it just offers IPSec pass-through. Thanks David ... On 09/10/2007, at 5:44 AM, Justin M. Streiner wrote: At this point I haven't had that problem, but I haven't deployed tons of them yet. They work in the UK on

[c-nsp] IPSec tunnel between cisco 1841 and D-Link DI-804HV

2007-10-10 Thread Bogdan Radulescu
Hi list, Do you know if it's possible to connect these 2 devices via an ipsec tunnel? Tried to Google about it, but no luck. The topology looks like this: 192.168.x.0/24--DLINK---Internet---C1841--192.168.y.0/24 Actually the C1841 is a hub and has couple of other tunnels, GRE tunnels with a

Re: [c-nsp] DSL router recommendation

2007-10-10 Thread Justin M. Streiner
On Wed, 10 Oct 2007, David J. Hughes wrote: Does the SB 100 series actually terminate IPSec? The doco implies it just offers IPSec pass-through. I have a site-to-site IPSEC tunnel landing on one right now. jms ___ cisco-nsp mailing list

Re: [c-nsp] DSL router recommendation

2007-10-10 Thread Joe Maimon
Dont get any model with builtin dsl/atm. Get the ethernet ones only. Your provider can provide the dsl/atm modem/bridge. Much more flexible and likely to be more reliable, since the key part is that the dsl/atm/bridge device work correctly with the service. Joseph Jackson wrote: Hey all,

Re: [c-nsp] DSL router recommendation

2007-10-10 Thread Jason Gurtz
Get the ethernet ones only. Your provider can provide the dsl/atm modem/bridge. Much more flexible and likely to be more reliable, [...] I can't second that. It is more flexible (what if we switch to cable internet...), but not likely to be more reliable. Add to that the mess of more wires

[c-nsp] Application availability between datacentres

2007-10-10 Thread Ian MacKinnon
Hi all, Does anyone have any suggestions on how to fail over between data centres ? We have 2 data centres with a layer 3 connection between them I need to have a customer in both DCs and announce an ip address from the live DC. This needs to move from the primary to the secondary when either

Re: [c-nsp] Application availability between datacentres

2007-10-10 Thread Alex
Ian, Cisco GSS or Juniper DX GSLB would fit nicely in here. Rgds Alex - Original Message - From: Ian MacKinnon [EMAIL PROTECTED] To: cisco-nsp@puck.nether.net Sent: Wednesday, October 10, 2007 3:45 PM Subject: [c-nsp] Application availability between datacentres Hi all, Does anyone

[c-nsp] Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password

2007-10-10 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Wireless Control System Conversion Utility Adds Default Password Advisory ID: cisco-sa-20071010-wcs http://www.cisco.com/warp/public/707/cisco-sa-20071010-wcs.shtml Revision 1.0 For Public Release 2007 October 10

Re: [c-nsp] mpls vpn with MTU less than 1500

2007-10-10 Thread Lasher, Donn
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Soon Kian Sent: Tuesday, October 09, 2007 11:02 PM Subject: [c-nsp] mpls vpn with MTU less than 1500 Hi Guys, Wondering if anyone is providing your customers with mpls vpn with MTU less than 1500, due to

Re: [c-nsp] DSL router recommendation

2007-10-10 Thread Kevin Graham
Get the ethernet ones only. Your provider can provide the dsl/atm modem/bridge. Much more flexible and likely to be more reliable, [...] I can't second that. Much agreed. The only time I'm comfortable w/ provider-supplied CPE on low-end connections is if we're stuck w/ PPPoE as you know

Re: [c-nsp] DSL router recommendation

2007-10-10 Thread Sridhar Ayengar
Jason Gurtz wrote: Here in the N.E. of the US we get primarily ADSL from or resold from ATT. Bog standard. Over the years, SNET/SBC/ATT has supplied consumer grade speedstream or netopia equipment and neither has been stellar from a quality standpoint. I thought that Verizon was by far the

Re: [c-nsp] DSL router recommendation

2007-10-10 Thread Joe Maimon
Turn it into a bridge device, factory default. Get the pppoe username and password from verizon firts. Church, Charles wrote: Yeah, I agree with that. My father in upstate NY has DSL from Verizon, and they provide a Westell device that acts as a DHCP server and does NAT/PAT, much like a

Re: [c-nsp] C6500 C6KERRDETECT-SP-2-FIFOCRITLEVEL

2007-10-10 Thread John I
Hi Kevin, Try bumping up to a later 12.1E. This had cropped up twice on the same switch for me, the first time TAC recommendation was to reseat the module, the second time it was to swap the chassis. Prior to having time to schedule a fully chassis swap, bumped up to 12.1(27b)E1 from

[c-nsp] dual cbac

2007-10-10 Thread Daniel Staněk
Hi friends, is it ok to have construction like: ip inspect name fw tcp ... etc int dialer1 desc internet ip inspect fw out ip access group from-internet in int vlan1 desc company1 ip inspect fw in ip access group to-company1 out int vlan2 desc company2 ip inspect fw in ip

[c-nsp] fabric counters on 6500s

2007-10-10 Thread Chris Griffin
Can someone point me to some descriptive information about fabric errors and procedures to troubleshoot them. Basically I am looking for descriptive information on: show fabric errors show fabric channel-counters remote command switch show fabric errors For instance, what do rxErrors mean on

Re: [c-nsp] activating MLP on ATM ADSL

2007-10-10 Thread Adam Greene
Hi list, Following up here ... do you think it's possible to run multilink ppp over two lines of a direct PVC from Verizon? I wonder if it's worth it to order the lines and test it ... Thanks, Adam - Original Message - From: Adam Greene [EMAIL PROTECTED] To:

Re: [c-nsp] dual cbac

2007-10-10 Thread Kevin Graham
The idea is to have one router and internet connection for two companys and to have full controll about the communication between the two companys (acl to-company1 and to-company2). There's no graceful way to do this w/ legacy CBAC. Instead, consider the Zone-Based Policy Firewall. I think

Re: [c-nsp] GE over copper port adapter for a 7206VXR

2007-10-10 Thread Andrew Cheng
If you can, get a Gigabit I/O, that way you won't lose any bandwidth points because you're running a G1. I can confirm that Copper GBIC's work fine in the I/O aswell. Andrew On 10/9/07, Vincent Aniello vincent.aniello at pipelinefinancial.com wrote: Does Cisco offer a Gigabit Ethernet

Re: [c-nsp] activating MLP on ATM ADSL

2007-10-10 Thread Robert Boyle
At 06:08 PM 10/10/2007, Adam Greene wrote: Hi list, Following up here ... do you think it's possible to run multilink ppp over two lines of a direct PVC from Verizon? I wonder if it's worth it to order the lines and test it ... We are testing that now. Cisco TAC claims that is a supported