[c-nsp] Cisco ME-6524 platform architecture

2008-01-23 Thread James Humphris
Dear all, I stumbled across this excellent forum yesterday whilst trying to gain some information on the platform architecture of the Cisco ME-6524. I have been extensively testing this device for a couple of months now, using a mixture of local switching, multiplex-uni and EoMPLS with MPLS-TE

Re: [c-nsp] PIM Split Rules and Multicast over L3 MPLS VPN

2008-01-23 Thread alaerte.vidali
Thanks Oli. I will test today on PFC3xx with SRB2 and post the result. Br, Alaerte -Original Message- From: ext Oliver Boehmer (oboehmer) [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 22, 2008 8:01 PM To: Vidali Alaerte (NSN - BR/Rio de Janeiro); cisco-nsp@puck.nether.net Subject:

Re: [c-nsp] ADSL

2008-01-23 Thread Tom Storey
Would be a bit of a waste of an entire PA slot though wouldnt it? :-) You could always use something like an 857 (on the cheaper side if you want to stick with Cisco, otherwise any el cheapo yum-cha brand) in bridge mode hooked up to an ethernet port to do PPPoE, provided PPPoE client is

Re: [c-nsp] RTBH - anyone using this?

2008-01-23 Thread Jeff Tantsura
Or make it multihop. I got bitten by this many years ago (on both cisco and juniper) but it seems that till now documentation hasn't been changed to reflect it. If you are going to allow your customers to use it (usually done with communities) be sure to filter accordingly, so the customers'd

[c-nsp] ASA 8.0 Webvpn MAPI

2008-01-23 Thread Ben Steele
Howdy, Anyone had any experience with getting MS Exchange to work with a webvpn client on ASA 8.0(2) or greater without using the AnyConnect client (ie clientless) now that MAPI support isn't available? Doesn't look like smart tunnels will do the job either and can't find anything else

[c-nsp] Tacacs+ accounting on ASA/PIX 7.x

2008-01-23 Thread Joseph Jackson
Hey all, I know in the past the pix/asa would not generate account records of what command were entered on the device. Does anyone know if this has changed? I've read some docs that talk about accounting traffic that passes THROUGH the device but not accounting for what commands are entered on

Re: [c-nsp] EzVPN drops packets after first data burst

2008-01-23 Thread Frank Bulk - iNAME
Anything to do with packet size? Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kristofer Sigurdsson Sent: Tuesday, January 22, 2008 7:42 AM To: Cisco NSP Subject: [c-nsp] EzVPN drops packets after first data burst Hi list, I have a Cisco 1841

Re: [c-nsp] access-list question

2008-01-23 Thread Frank Bulk - iNAME
You may be interested in looking aggregate an microflows: http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/prod_white_ paper0900aecd803e5017.html Frank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richey Sent: Tuesday, January 22, 2008

Re: [c-nsp] RTBH - anyone using this?

2008-01-23 Thread Roland Dobbins
On Jan 23, 2008, at 2:15 AM, Drew Weaver wrote: Question: There is simply no reason to be exporting the routes from the edge routers to the triggers if I am reading this document correctly. Rather than using prefix or filter lists, is there a handy way to make the edge routers not send

[c-nsp] Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability

2008-01-23 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability Advisory ID: cisco-sa-20080123-asa http://www.cisco.com/warp/public/707/cisco-sa-20080123-asa.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC (GMT

Re: [c-nsp] Cisco ME-6524 platform architecture

2008-01-23 Thread Rubens Kuhl Jr.
The part I'm struggling with is how this relates to the fixed configuration of the ME-6524. I appreciate that its based upon the SUP-720, and utilises MSFC2A with PFC3C, but I when I issue a show Actually it's closer to SUP-32, as the ME-6524 is a classic-bus only device. KUMA

[c-nsp] Cisco Security Advisory: Default Passwords in the Application Velocity System

2008-01-23 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Default Passwords in the Application Velocity System Advisory ID: cisco-sa-20080123-avs http://www.cisco.com/warp/public/707/cisco-sa-20080123-avs.shtml Revision 1.0 For Public Release 2008 January 23 1600 UTC (GMT

[c-nsp] Cisco PIX Device Manager

2008-01-23 Thread Nangia, Vijay
Classification INTERNAL :The contents of this mail are restricted to being within Patni. Its non-compliance violates the Patni BPO policy Hi, Can you tell me why Cisco PDM(GUI) does not take same credentials from ACS that work for telnet(CLI). Thanks Vijay

Re: [c-nsp] Cisco ME-6524 platform architecture

2008-01-23 Thread Sachin Gupta (sagupta)
Hi James, I am the Product Manager for the ME-6524 platform. I am very interested to hear about your deployment scenario and can help answer your questions. The ME-6524 has a similar architecture to Sup32 with the one key difference that it supports PFC3C rather than the PFC3B on the Sup32.

Re: [c-nsp] Cisco PIX Device Manager

2008-01-23 Thread Jason Gurtz
Classification INTERNAL :The contents of this mail are restricted to being within Patni. Its non-compliance violates the Patni BPO policy Sorry no one is allowed to answer! [REDACTED to protect my innocence!] ~JasonG ___ cisco-nsp mailing list

[c-nsp] MUX

2008-01-23 Thread Mad Unix
Dear ALL We are looking to get a MUX for the Fiber between our 2 buildings... out of your experience , what do you think about getting *Marconi OMS * http://www.ericsson.com/solutions/products/hp/Optical_Networks_pa.shtml since our LAN and WAN built on Cisco and Exterme devices. Thanks --

[c-nsp] VPLS Error Message: Output interface: if-?(0), imposed label stack {}

2008-01-23 Thread alaerte.vidali
In a very simple lab setup, VPLS is not working. I am wondering if it is platform/hardware issue (for example WS-X6548-GE-TX issue). Any idea? Topology: CE1a---PE1-PE2---CE2a Here is result of related command: sh mpls l2transport vc 60 det Local interface: VFI vlan60 VFI up MPLS VC type

[c-nsp] Key-chain and MD5 authentication for IS-IS

2008-01-23 Thread Leonardo Gama Souza
Hello everybody, Do you know whether I have to update the key chain string after an IOS upgrade? Let´s fancy from 12.2S to 12.0S... I'm only using it for IS-IS instance authentication. Have anyone ever run into this situation? I'll appreciate any clue or recommendation. Leonardo.

Re: [c-nsp] MUX

2008-01-23 Thread Arie Vayner (avayner)
Mr. madunix, Not sure what your requirements are, but if all you need is multiple GigE links over the same fiber, take a look at this: http://www.cisco.com/en/US/products/ps6575/index.html Arie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mad Unix

Re: [c-nsp] VPLS Error Message: Output interface: if-?(0), imposed label stack {}

2008-01-23 Thread Peter Rathlev
With the LAN cards, like the 6548, you can only use subinterface or port mode EoMPLS. Local switching (which VFIs provide) needs OSM/SPA/ES card on the backbone side. A debug mpls l2transport vc event should give you a bunch of messages about the switch being unable to find a suitable tunnel

Re: [c-nsp] MUX

2008-01-23 Thread Peter Rathlev
Hi Mad, CWDM is a nice and (relatively) cheap solution, but of course it requires special colour GBICs at each end. The cost of the passive CWDM muxer and special GBICs + stock for a rainy day can sometimes make provisioning an extra physical fiber look more attractive than otherwise, especially

Re: [c-nsp] SXH1 - lab tested/live router

2008-01-23 Thread Richard A Steenbergen
On Tue, Jan 22, 2008 at 12:01:37PM -0600, mack wrote: Has anyone other than cisco lab tested or put SXH1 into production yet? I am still waiting on approval for lab time. The bug fixes most relevant to me are: DOM support for older XENPAKs (supposedly fixed) Stability Improvements (a

Re: [c-nsp] 3560/3750 12.2(44)

2008-01-23 Thread Tom Zingale (tomz)
There is a bug in the release and the command is not available. This will be fixed in the next maintenance release. -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Mike Louis Sent: Tuesday, January 22, 2008 11:49 AM To: Higham, Josh;

[c-nsp] Cisco WIC-1DSU-T1-V2 + 2811 + 12.4(11)T ??

2008-01-23 Thread joe mcguckin
I can't get this combination to bring up a T1. Configured as encaps hdlc service-module t1 clock source line service-module t1 line b8zs service-module t1 frame esf service-module t1 timeslots all Indicator LED on WIC is green, with no alarms. Turning on debugging

Re: [c-nsp] Cisco WIC-1DSU-T1-V2 + 2811 + 12.4(11)T ??

2008-01-23 Thread Jay Hennigan
joe mcguckin wrote: I can't get this combination to bring up a T1. Configured as encaps hdlc service-module t1 clock source line service-module t1 line b8zs service-module t1 frame esf service-module t1 timeslots all Indicator LED on WIC is green, with no

[c-nsp] PA-MC-T3 and T1 config questions

2008-01-23 Thread Nick Voth
Guys, Forgive the rudimentary question, but I'm installing my first PA-MC-T3 for use with 28 point-to-point T1's and I need some config help. We are doing very simple IP for T1 customers. All will terminate on our DS3 in the PA-MC-T3. I'm pretty sure I understand the configuration required for

Re: [c-nsp] Key-chain and MD5 authentication for IS-IS

2008-01-23 Thread Oliver Boehmer (oboehmer)
Leonardo Gama Souza wrote on Wednesday, January 23, 2008 11:10 PM: Hello everybody, Do you know whether I have to update the key chain string after an IOS upgrade? Let´s fancy from 12.2S to 12.0S... I'm only using it for IS-IS instance authentication. Have anyone ever run