Re: [c-nsp] Alignment erros on 2801 with 12.4(18)

2008-03-12 Thread e ninja
Ahmad, Alignment errors are _always_ software bugs. You don't have to wait for a CCO image. Call the TAC and have them publish an image with the fix for you in the interim. Alignment corrections are pretty CPU intensive and depending on the platform, this can impact system performance. /eninja

Re: [c-nsp] Prepare for router Wednesday

2008-03-12 Thread Gert Doering
Hi, On Tue, Mar 11, 2008 at 09:43:30PM -0500, Frank Bulk - iNAME wrote: By not making the update available until the 6 month mark has been met, service providers are not able to choose their own update cycle. Rather, by restricting the updates to every 6 months, Cisco has reduced the update

Re: [c-nsp] 12008 GRPB memory problem.

2008-03-12 Thread e ninja
looking at the log messages, the mallocfails were reported by the RP and not the linecards. /eninja On Mon, Mar 10, 2008 at 11:21 AM, Matt Liotta [EMAIL PROTECTED] wrote: You need to check each line card for memory using attach. Older GSRs had line cards with 128M, which will certainly not

Re: [c-nsp] Cisco 7206VXR - IOS 12.4(12) - Bus Error Crash

2008-03-12 Thread Werner Detter
Hi again, crashed due to a bus error (bus error at PC 0x6013C4D8, address 0x64588700). As described in the Cisco document Troubleshooting Bus Error Crashes [1] I've tried to figure out to which memory location the address 0x64588700 corresponds to. 'show region' shows, that the address

[c-nsp] show ip bgp community (not X) ?

2008-03-12 Thread Peter Rathlev
Hello all, When browsing BGP RIB, it's nice to be able to do a show ip bgp community X in global exec. But sometimes I of course want to show something more complex, like everything _without_ a specific community. The only way I know about is creating a community-list and using that for

[c-nsp] WAAS and SNMP-based measurements for such

2008-03-12 Thread Netfortius
Is anybody using WAAS and monitoring its various performance functions via SNMP? If so - which OIDs are you using? I had a TAC call open about this subject, and the answer was that whatever GUI-based measurements Cisco provides with WAAS are not available/have no equivalents in SNMP OIDs (?!?).

[c-nsp] MLPPP product from the provider point of view

2008-03-12 Thread Joe Maimon
Hey all, Thought I would ping the list and try to benefit from the collective experience. - We show that testing can leave 15-30% bandwidth on the table per link, should this be acceptable or should more troubleshooting be done? - Is it really neccessary to utilize Mutltilink interfaces on

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Rodney Dunn
Look for intput drops on the 'sh int'. If you don't see any you probably need a sniffer trace on the ethernet segment. On Tue, Mar 11, 2008 at 03:53:30PM -0400, Jason Berenson wrote: Greetings, We have a few 7206's running OSPF/BGP for routing. All of the routers are fine except for one -

Re: [c-nsp] Can power-on mean anything other than power on?

2008-03-12 Thread Justin Shore
I second the UPS option or simply connecting 1 of the switches to any other power source (ie, extension cord down the hall to another room). Another trick that I've used to diagnose a faulty UPS (at a job with a need but no money) was to pick up a couple $5 digital alarm clocks at Wal-Mart. I

Re: [c-nsp] Prepare for router Wednesday

2008-03-12 Thread Clay Seaman-Kossmey
Hi Justin - Nope, this PSIRT Advisory schedule change doesn't affect how or when IOS is built, only when our Security Advisories are published. Regards, Clay On Mar 12, 2008, at 10:05 AM, Justin Shore wrote: Clay, Forgive me if this was previously asked and answered. Does the new

Re: [c-nsp] Can power-on mean anything other than power on?

2008-03-12 Thread Eric Van Tol
-Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Howard Jones Sent: Tuesday, March 11, 2008 8:10 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Can power-on mean anything other than power on? Hi, Please could I get the confirmation

Re: [c-nsp] Prepare for router Wednesday

2008-03-12 Thread Justin Shore
Clay, Forgive me if this was previously asked and answered. Does the new 6-month schedule affect the regular 4-month updates to the latest T-train releases? Thanks Justin Clay Seaman-Kossmey wrote: Hello Folks - Clay Kossmeyer here from the Cisco PSIRT. I can see there's a lot of

Re: [c-nsp] Can power-on mean anything other than power on?

2008-03-12 Thread Dracul
Hi, Just curious, what kind of bad device have you encountered? And are there any similar devices like that, that we should be careful of plugging in? chris On Wed, Mar 12, 2008 at 10:24 PM, Eric Van Tol [EMAIL PROTECTED] wrote: -Original Message- From: [EMAIL PROTECTED]

Re: [c-nsp] Can power-on mean anything other than power on?

2008-03-12 Thread Eric Van Tol
From: Dracul [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 12, 2008 10:42 AM To: Eric Van Tol Cc: Howard Jones; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Can power-on mean anything other than power on? Hi, Just curious, what kind of bad device have you encountered? And are there any

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Jason Berenson
Rodney, The interface is clean. No errors/drops at all. I think I'll have to snoop that segment like you suggested and wait for it to flap again. Thanks, Jason Rodney Dunn wrote: Look for intput drops on the 'sh int'. If you don't see any you probably need a sniffer trace on the

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Joe Freeman
If OSPF is flapping, you should see it on the neighbor attached to that interface as well, so you might look there for issues. Joe On 3/12/08, Jason Berenson [EMAIL PROTECTED] wrote: Rodney, The interface is clean. No errors/drops at all. I think I'll have to snoop that segment like you

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Jason Berenson
Joe, I checked the neighbors too. I do see the session flap there but again, no errors on the ethernet and nothing really obvious as to why it flapped. This just started in the past few days. I do see some CPU spikes to 100% but it doesn't correlate exactly to when the flap occurred.

[c-nsp] Cisco Security Advisory: Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities

2008-03-12 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Secure Access Control Server for Windows User-Changeable Password Vulnerabilities Advisory ID: cisco-sa-20080312-ucp http://www.cisco.com/warp/public/707/cisco-sa

Re: [c-nsp] Cisco ASA 5520 and DHCP relay

2008-03-12 Thread Alasdair Gow
Have you tried taking the asa out of the equation? Use a switch (or crossover depending on your setup) and once you know the linux box is doing dhcp correctly put the asa back in. Or have you done this already? What are the logs on the asa saying? Whats the MTU set at, everything the same?

Re: [c-nsp] MLPPP product from the provider point of view

2008-03-12 Thread Gert Doering
Hi, On Wed, Mar 12, 2008 at 09:07:51AM -0400, Joe Maimon wrote: - Is it really neccessary to utilize Mutltilink interfaces on the provider side if using a 7200 as opposed to 7500 which seem to only require a Virtual-Template? Multilink interfaces are (for statically configured link) vastly

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Rodney Dunn
What is the physical topology? Is it back to back ethernet? On Wed, Mar 12, 2008 at 11:37:42AM -0400, Jason Berenson wrote: Joe, I checked the neighbors too. I do see the session flap there but again, no errors on the ethernet and nothing really obvious as to why it flapped. This just

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Jason Berenson
Rodney, They connect back to a cisco switch. No errors anywhere along the ethernet and no packet loss. It also only flapped 3 times yesterday and 2 times 5 days ago, so it's not a constant flap. It hasn't flapped yet today, so I'll turn on debugging and setup a snoop and write back when I

Re: [c-nsp] Cisco 7206VXR - IOS 12.4(12) - Bus Error Crash

2008-03-12 Thread e ninja
Good analysis. Looks like we tried to read from a valid address. main:text,(r/o), main:data (r/w) and main:bss (r/w) are subregions of the local memory used for IOS. main:heap is what is left after IOS image is loaded. main:bss contains uninitialized variables. /eninja On Wed, Mar 12, 2008

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Ben Steele
Are any other hosts affected off the switch during this period aswell? Ben On 13/03/2008, at 8:05 AM, Jason Berenson wrote: Rodney, They connect back to a cisco switch. No errors anywhere along the ethernet and no packet loss. It also only flapped 3 times yesterday and 2 times 5 days

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Jason Berenson
Ben, We have 3 7206's used as edge routers. PA-MC-T3 in from our DAX and ethernet out to our transport. So there are a few adjacencies along with iBGP and eBGP. It seems like the router that goes down (flaps OSPF/BGP instance 1) is the only one that takes a hit out of all of them connected

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-12 Thread Ben Steele
Going by the fact you see nothing obvious in the logs on the routers I was just curious to see whether it may be something on the switch like someone randomly plugging in a cable or interface that is causing a brief SPT loop or other various layer 2 issue, nothing in the switch logs I

[c-nsp] MPLS VPN EIGRP tag/route redistribution ideas at PE

2008-03-12 Thread Ben Steele
Scenario: cluster of PE's terminating DSL CE's running EIGRP between CE and PE in MPLS VPN's, so the CE's could terminate on any one of the PE's. Problem: would like to identify EIGRP routes from certain neighbors for BGP redistribution to use set extcommunity cost pre-bestpath x x for