Re: [c-nsp] MPLS VPN EIGRP tag/route redistribution ideas at PE

2008-03-13 Thread Diogo Montagner
Hi Ben, Did you tried to use the Site of Origin feature ? http://www.cisco.com/en/US/docs/ios/12_3t/12_3t8/feature/guide/gtmvesoo.html Best regards, Diogo On Thu, Mar 13, 2008 at 2:28 AM, Ben Steele [EMAIL PROTECTED] wrote: Scenario: cluster of PE's terminating DSL CE's running EIGRP between

Re: [c-nsp] show ip bgp community (not X) ?

2008-03-13 Thread Peter Rathlev
Hi Neil, Thanks, but that was exactly what I was trying to avoid: Having to configure (conf t) the box every time I need to view something a little more exotic than just prefixes with this community. But I guess there's no way around at the moment. :-) Regards, Peter On Thu, 2008-03-13 at 08:54

[c-nsp] SXH on a ME6524 crashing?

2008-03-13 Thread Justin Shore
Is anyone experiencing any SXH issues on a ME6524? I just had the RP in one of mine crash. The SP automatically rebooted the RP but when it came back up it couldn't write configs. Writing the config would result in this errp: startup-config file open failed (Device or resource busy) Syslog

Re: [c-nsp] Cisco 7206VXR - IOS 12.4(12) - Bus Error Crash

2008-03-13 Thread Werner Detter
Hi again, Looks like we tried to read from a valid address. Thanks you for your comments. I suppose changing the memory isn't a bad idea. regards, Werner ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] MPLS VPN EIGRP tag/route redistribution ideas at PE

2008-03-13 Thread Ben Steele
Ah looks just like what I was after, thanks a lot Diogo! Ben On 13/03/2008, at 8:23 PM, Diogo Montagner wrote: Hi Ben, Did you tried to use the Site of Origin feature ? http://www.cisco.com/en/US/docs/ios/12_3t/12_3t8/feature/guide/gtmvesoo.html Best regards, Diogo On Thu, Mar 13,

[c-nsp] WS-X6148-RJ-21 performance check

2008-03-13 Thread Diogo Montagner
Hi all, how I can check if a C6513/WS-X6148-RJ-21 module reached the maximum forward capacity (in this case 15 Mpps) ? Best regards, Diogo -- ./diogo -montagner ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Justin Shore
I've never used a 10k so someone else will have to speak to that. You might want to consider looking at the new ASR 1000 series though. http://www.cisco.com/go/asr They are supposed to be positioned between the 7200s and the 7600s so they might be able to do what you want. I imagine they can

[c-nsp] pvlans and scalability

2008-03-13 Thread Jimmy Stewpot
Hi All, I am wondering what peoples experience is with pvlans. We currently have a large pvlan deployment for our backup network, we have our backup servers on promisc ports and everything else is isolated. The problem we have is that the servers do not have support for 10GbE cards (PCI-X only

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Jason Berenson
Mathew, Thanks for your input. We've looked at the Turin solution already, it looks really good except they're a year off on getting the blade out to customers. If we went that route we would want to use a blade instead of separate boxes. -Jason Matthew Crocker wrote: Jason, If you

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Jason Berenson
Can you elaborate on that a bit? Thanks, Jason e ninja wrote: c10k is a beast. You're better of with the VXRs. /eninja On Wed, Mar 12, 2008 at 8:40 PM, Jason Berenson [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Greetings, We currently have 3 7206VXRs with NPE-300's in

Re: [c-nsp] Can power-on mean anything other than power on?

2008-03-13 Thread Robert Harris
I'm no genius, but Last reset from warm-reset indicates to me there was no power loss. Robert Howard Jones wrote: Hi, Please could I get the confirmation of your collective experience? We have a group of three older Catalysts at a customer site that apparently reboot all together

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Sridhar Ayengar
Jason Berenson wrote: Can you elaborate on that a bit? I believe he might be referring to the power consumption. Peace... Sridhar e ninja wrote: c10k is a beast. You're better of with the VXRs. /eninja On Wed, Mar 12, 2008 at 8:40 PM, Jason Berenson [EMAIL PROTECTED] mailto:[EMAIL

Re: [c-nsp] pvlans and scalability

2008-03-13 Thread Ramcharan, Vijay A
I assume the 10Gbps connections are needed on the backup servers? How about connecting more 1Gbps NICs on the backup servers to the same PVLAN and using different subnets on each new NIC; thereby splitting up the load among each backup server's NICs. It would complicate the IP addressing

Re: [c-nsp] WS-X6148-RJ-21 performance check

2008-03-13 Thread Peter Rathlev
Hi Diogo, On Thu, 2008-03-13 at 10:59 -0300, Diogo Montagner wrote: how I can check if a C6513/WS-X6148-RJ-21 module reached the maximum forward capacity (in this case 15 Mpps) ? You can check the forwarding engine load with show platform hardware capacity forwarding, it shows up at the

[c-nsp] CVR-X2-SFP

2008-03-13 Thread Michail Litvak
Hi, Does anyone try to use CVR-X2-SFP (Cisco TwinGig Converter Module) with cat6500 WS-X6708-10GE module. I try to insert it but have bad EEPROM. -- MYL2-RIPE ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] WS-X6148-RJ-21 performance check

2008-03-13 Thread Sukumar Subburayan (sukumars)
Since, the 6148 linecard does not have a DFC, and relies on central forwarding from the EARL on the sup, you could check the current forwarding rates of the Central EARL using either: sup-720#show mls statistics Statistics for Earl in Module 6 L2 Forwarding Engine Total packets Switched

Re: [c-nsp] Cisco 7600, bgp neighbor default-originate breaks

2008-03-13 Thread Rodney Dunn
What code did you see this on? Here is one I just saw this one come by. CSCsf20947 BGP 'neighbor default-originate' advertisement ignored after link flap. 012.004(012.004) 12.0(32)SY04d 12.0(32)SY05 12.0(32.02)S04 12.2(18)SXF08 12.2(18)ZY01 12.2(18.07.02)SXF 12.2(31)SB10 12.2(32.08.11)SX34

Re: [c-nsp] Cisco 7206VXR OSPF

2008-03-13 Thread Rodney Dunn
No. Good idea to just turn off logging to the console via no logg con Rodney On Wed, Mar 12, 2008 at 05:35:12PM -0400, Jason Berenson wrote: Rodney, They connect back to a cisco switch. No errors anywhere along the ethernet and no packet loss. It also only flapped 3 times yesterday and

Re: [c-nsp] WS-X6148-RJ-21 performance check

2008-03-13 Thread Diogo Montagner
Thanks for all replies. Diogo On Thu, Mar 13, 2008 at 2:32 PM, Sukumar Subburayan (sukumars) [EMAIL PROTECTED] wrote: Since, the 6148 linecard does not have a DFC, and relies on central forwarding from the EARL on the sup, you could check the current forwarding rates of the Central EARL

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Jason Berenson
Justin, I'm not worried too much about the size, I have room and on top of that it will replace 3+ 7206's. I do however have the option of just upgrading the 7206's to NPE-G1's, adding more chassis as needed and calling it a day. I'm trying to make a decision now before things get too out of

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Justin M. Streiner
On Thu, 13 Mar 2008, Jason Berenson wrote: The big advantages I can see is moving to a single chassis (one router to manage), it's a much more powerful router then the 7206's and on a per channelized DS3 port basis, it's half the price per port. With all that in mind, would you suggest

[c-nsp] ip mroute OIF count through snmp

2008-03-13 Thread Tassos Chatzithomaoglou
I'm trying to find a way to get the OIF count per (*,G) and (S,G) entry. routersh ip mroute sum IP Multicast Routing Table Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected, L - Local, P - Pruned, R - RP-bit set, F - Register flag, T - SPT-bit set, J -

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Jason Berenson
Justin, Thanks for your input. That's a good point and something I will have to research before going any further with this. Thanks, Jason Justin M. Streiner wrote: On Thu, 13 Mar 2008, Jason Berenson wrote: The big advantages I can see is moving to a single chassis (one router to

Re: [c-nsp] CVR-X2-SFP

2008-03-13 Thread Dale W. Carder
On Mar 13, 2008, at 11:55 AM, Michail Litvak wrote: Does anyone try to use CVR-X2-SFP (Cisco TwinGig Converter Module) with cat6500 WS-X6708-10GE module. I try to insert it but have bad EEPROM. I would not expect them to work anywhere but on the 3750E, at least for now. Dale

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Pshem Kowalczyk
Hi We migrated from 7206 VXRs to 10k for broadband termination. I must say that that caused us a lot of trouble. The 10k proved to be very unstable, leaking memory etc. Of course that might be just our experience. We tried different IOSes, opened a few TAC cases, but ultimately decided to go with

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Matthew Crocker
Doesn't the 10k use Ciscos FPGA chips (aka PXF)? So if a feature isn't in the FPGA code it gets punted to the main CPU and performance goes to hell? Isn't Cisco doing away with all the routers based off the FPGA code? NSE-100, 7301, NSE-1 *very* fast when the packets can be handled in

Re: [c-nsp] VS broadcast address relaying from Vlan to Vlan

2008-03-13 Thread Alex
Hi there, Have a look into UDP broadcast flooding http://www.cisco.com/en/US/tech/tk1330/technologies_case_study_chapter09186a0080759920.html#wp3321 and bridging between 802.1Q VLANs http://www.cisco.com/en/US/docs/ios/12_1t/12_1t3/feature/guide/dtbridge.html The second is required if you wish

Re: [c-nsp] pvlans and scalability

2008-03-13 Thread Jimmy Stewpot
Hi, We have attempted this only to find that we essentially ended up with what appeared to be a broadcast of all unicast traffic to all promiscuous pvlan ports across the entire network. Unfortunately netbackup does not appear to handle the multiple IP addresses very well particularly with

[c-nsp] Securing virtual networks

2008-03-13 Thread Higham, Josh
What methods are available for making sure that no traffic leaks between virtual networks? I am looking at doing some sort of virtualization for a small enterprise network (so no software based provisioning) and want to either prevent or detect misconfigurations. If I restrict the address ranges

Re: [c-nsp] CVR-X2-SFP

2008-03-13 Thread Simon Lockhart
Does anyone try to use CVR-X2-SFP (Cisco TwinGig Converter Module) with cat6500 WS-X6708-10GE module. I try to insert it but have bad EEPROM. I would not expect them to work anywhere but on the 3750E, at least for now. Given that (as far as I can work out) they work by having both

Re: [c-nsp] CVR-X2-SFP

2008-03-13 Thread Michael Balasko
Here is a question I asked a nameless imaginary Cisco employee about 6 months ago. Me: Q. Will the 6500 ever support the TwinGig converter. This would catapult the deployment of 10Gig in our network. We are looking at replacing 63 SupII's, and we'd love to buy the SUP32-10GB models, but we don't

[c-nsp] Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability

2008-03-13 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability Advisory ID: cisco-sa-20080313-ipm Revision 1.0 For Public Release 2008 March 13 Summary === CiscoWorks

[c-nsp] Cisco IP Phone Technical Comparison

2008-03-13 Thread Skeeve Stevens
Hey guys, I am trying to find a technical comparison of Cisco IP Phones, specifically the differences between the 7971G-GE and the 7975-G. Apart from the couple of obvious things, how different are the actual phones? I would also like to know the differences to earlier models. I've searches

Re: [c-nsp] Securing virtual networks

2008-03-13 Thread Nate Carlson
On Thu, 13 Mar 2008, Higham, Josh wrote: What methods are available for making sure that no traffic leaks between virtual networks? I am looking at doing some sort of virtualization for a small enterprise network (so no software based provisioning) and want to either prevent or detect

Re: [c-nsp] Securing virtual networks

2008-03-13 Thread Higham, Josh
From: Nate Carlson [mailto:[EMAIL PROTECTED] On Thu, 13 Mar 2008, Higham, Josh wrote: What methods are available for making sure that no traffic leaks between virtual networks? I am looking at doing some sort of virtualization for a small enterprise network (so no software based

Re: [c-nsp] Securing virtual networks

2008-03-13 Thread Nate Carlson
On Thu, 13 Mar 2008, Higham, Josh wrote: I know that I can isolate it in a VLAN, but I want to avoid having a single point of failure. If someone puts a port into the wrong VLAN, and the user gets a DHCP address (two segregated user access networks, for example) we might not know until it

Re: [c-nsp] Can power-on mean anything other than power on?

2008-03-13 Thread Sukumar Subburayan (sukumars)
Please ignore Last reset from warm-reset. It is bogus, and should not be trusted. There is a software fix (in rommon) and IOS, which fixes this reset reason correctly. Since, 3 boxes rebooted all at the sam time, I agree with others that this is most likely a power related issue. sukumra

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Paul Stewart
Hey Jason... I'm curious as to what you decide in the final aspect and why... we have several NPE-1G and NPE-2G boxes right now and I need to order a couple of more to meet capacity needs (DSL termination via PPPOE)... we were also looking at the 10k series and also took a step back to

Re: [c-nsp] MPLS VPN EIGRP tag/route redistribution ideas at PE

2008-03-13 Thread Ben Steele
Looks like I got excited to quick... :( While I can tag the routes with SoO, I can't match on them when redistributing EIGRP into BGP and hence being able to set the cost pre-bestpath attribute on specific prefixes only. route-map vrf-test-eigrp-bgp permit 10 match extcommunity vrf-test set

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Sridhar Ayengar
Jason Berenson wrote: Justin, I'm not worried too much about the size, I have room and on top of that it will replace 3+ 7206's. I do however have the option of just upgrading the 7206's to NPE-G1's, adding more chassis as needed and calling it a day. I'm trying to make a decision

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Sridhar Ayengar
Paul Stewart wrote: Hey Jason... I'm curious as to what you decide in the final aspect and why... we have several NPE-1G and NPE-2G boxes right now and I need to order a couple of more to meet capacity needs (DSL termination via PPPOE)... we were also looking at the 10k series and also took

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Adrian Chadd
On Fri, Mar 14, 2008, Sridhar Ayengar wrote: Anyways, just wanted to chime in letting you know you're definitely not the only person facing these issues ; ) I would definitely upgrade to NPE-1G or 2G if it's in budget though as that will be a significant upgrade from a performance

Re: [c-nsp] Cisco 10k?

2008-03-13 Thread Sridhar Ayengar
Adrian Chadd wrote: Anyways, just wanted to chime in letting you know you're definitely not the only person facing these issues ; ) I would definitely upgrade to NPE-1G or 2G if it's in budget though as that will be a significant upgrade from a performance spec But doesn't the 7200 (and

[c-nsp] Which IOS to use on 7206VXR npe-g1?

2008-03-13 Thread Andrew Jones
Hi All, We got some advice here a while back to use the 12.2SB train on our 7200 LNS which is terminating l2tp tunnels from our LACs which are doing PPPoE as we were having instability issues with 12.4T3 advanced IP services. I have downloaded 12.2SB service provider edition, but it doesn't have