Re: [c-nsp] filter LDP bindings

On (2008-08-13 20:38 +0200), Oliver Boehmer (oboehmer) wrote: well, this dependency on what other LDP neighbors send is not really in-line with the independent control mode LDP operates in, so the implementation might not be straight-forward. I think we have misunderstanding here. All boxes

Re: [c-nsp] 4 Byte AS implementation on Cisco Routers

Hi, On Wed, Aug 13, 2008 at 04:39:53PM -0500, Richard A Steenbergen wrote: Rest assured that updating the festering piece of crap that is IOS to change every data structure that holds ASNs and every piece of code that tched them (think as-path, regexp, show/cli changes for the unbelievably

Re: [c-nsp] 6500 snmp and vty acls ?

On Wed, Aug 13, 2008 at 04:17:21PM -0400, Jeff Fitzwater wrote: Does anyone know if VTY and snmp ACLs are implemented in hardware or software on a 6500 with 720-CXL running 12.2(33)SXH. VTY and SNMP ACLs are done in software; they have to be, because they reference certain CPU conditions

Re: [c-nsp] Setting up a Internet Gateway (NAT-PE) for MPLS VPNCustomers

Andy Saykao wrote on Thursday, August 14, 2008 4:58 AM: Hi All We are looking at providing our Layer 3 MPLS VPN customers with the option of a managed internet gateway via a NAT-PE router. This would mean that remote sites no longer have to access the internet via the Central Site model

[c-nsp] EVC - MPLS

Hi Folks, anyone has EVC - MPLS information to share ? any document can I refer to ? regards, Jack___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] filter LDP bindings

Saku Ytti mailto:[EMAIL PROTECTED] wrote on Thursday, August 14, 2008 8:17 AM: On (2008-08-13 20:38 +0200), Oliver Boehmer (oboehmer) wrote: well, this dependency on what other LDP neighbors send is not really in-line with the independent control mode LDP operates in, so the implementation

[c-nsp] 1230 Bridging of multiple VLANs

Howdy, I have two 1231G units running 12.3(2)JA3 that I'm attempting to setup as a bridge. Unit #1 uplinks to the FastE interface fine, with standard bridge, ssid and sub-interface stances to yield multiple SSIDs/VLANs on its DotRadio0 (11b) interface - works great. Unit #2 is supposed

Re: [c-nsp] 6500 snmp and vty acls ?

Matti Saarinen wrote: Are there any examples for replacing VTY ACLs with CoPP that even I could understand? The documentation in CCO isn't helpful enough. Maybe this link helps: http://aharp.ittns.northwestern.edu/papers/copp.html cheers, Thorsten

Re: [c-nsp] RES: conditional bgp default-originate

On Thu, 14 Aug 2008, Hank Nussbacher wrote: I have tested this and it is working at a specific customer: neighbor 10.100.80.7 default-originate route-map track-Broadwing neighbor 10.100.80.7 distribute-list nothing-else-plus out ! ip access-list extended nothing-else-plus ! Insert any nets

Re: [c-nsp] CLIPS functionality for DHCP clients

Cisco ISG IOS feature can authenticate MAC in RADIUS. It exists in IOS images for 2800 and 2651XM as well as 7200, 10k, 7600. Eugene. Rubens Kuhl Jr. wrote: I don't think there is any Cisco low-end solution to this; 7200, ASR, 10k and SCE are the platforms I think can do this one way or the

Re: [c-nsp] RES: conditional bgp default-originate

On Thu, 14 Aug 2008, Jon Lewis wrote: if it does, that means their backbone has gone down. Do a few traceroutes and you will quickly figure out what are their backbone CIDRs to use. That's basically what I ended up with yesterday in the simulator. My problem with it is, without inside

Re: [c-nsp] RES: conditional bgp default-originate

On Thu, 14 Aug 2008, Hank Nussbacher wrote: On Thu, 14 Aug 2008, Jon Lewis wrote: That's basically what I ended up with yesterday in the simulator. My problem with it is, without inside knowledge of my upstream networks, how do I know which routes will never go away or never even just

Re: [c-nsp] 32 bit ASN

See my email yesterday. I should have an update on Monday. On Thu, Aug 14, 2008 at 11:40:39AM +0400, Tima Maryin wrote: Hello! Is there any update on this ? Rodney Dunn wrote: I'm asking about this. I'll get back with you. It's going to be in a 12.0(33)S rebuild for sure. But

[c-nsp] Tele Presence - Priority Queue or CBWFQ within the SP core

Hello there, Wanted to poll the SP folks here to understand what you do in the Core for supporting Tele Presence traffic on LLQ or CBWFQ? Cisco says LLQ but i don't agree because TP is a VBR traffic. And LLQ has its cost implications. Thanks very much for the feedback John

Re: [c-nsp] VMPS and 6500

Yes, it is correct. It's my understanding that VMPS server will not support on Cat6500 running IOS. Regards, Leung York University Teller, Robert [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 08/13/2008 03:15 PM To cisco-nsp@puck.nether.net cc Subject [c-nsp] VMPS and 6500 I was

Re: [c-nsp] VMPS and 6500

You may want to look into OpenVMPS or Freeradius (which supports VMPS). You can use one of these products installed on a real server to be your VMPS server. Kyle Samuel Leung wrote: Yes, it is correct. It's my understanding that VMPS server will not support on Cat6500 running IOS.

[c-nsp] VRF Lite Route Propagation

I've figured out how to exchange routes between VRF's with the bgp address family configuration coupled with redistribute static|connected, etc however I'm trying to propagate this information and I'm having problems getting it to work as desired. This is a VRF-Lite only environment, and what I'm

[c-nsp] Cisco authentication login page

Hi all, I'm trying to customize the default login page that the Cisco router uses for authentication proxy ( to autenticate users ). Can someone tell me how to do that ? I've tried to search in the Cisco web site, but it seems that there is no documentation about it. Looking at the default

Re: [c-nsp] Tele Presence - Priority Queue or CBWFQ within the SP core

Hi, Wanted to poll the SP folks here to understand what you do in the Core for supporting Tele Presence traffic on LLQ or CBWFQ? Cisco says LLQ but i don't agree because TP is a VBR traffic. And LLQ has its cost implications. Problem with CBWFQ is that while you'll get a min bandwidth

Re: [c-nsp] VRF Lite Route Propagation

Nick Griffin wrote: I've figured out how to exchange routes between VRF's with the bgp address family configuration coupled with redistribute static|connected, etc however I'm trying to propagate this information and I'm having problems getting it to work as desired. I'll take a guess at your

[c-nsp] route-map continue

Hello! Does anybody can clear for me the continue statement behaviour? router bgp 111 ... neighbor 10.10.10.2 route-map TEST-OUT out neighbor 10.10.10.2 send-community ... route-map TEST-OUT permit 10 match community 10 continue 20 ! route-map TEST-OUT permit 20 set metric 222 set as-path

Re: [c-nsp] VRF Lite Route Propagation

I must be missing something, see below: C1#sh ip route vrf I1 Gateway of last resort is 1.1.111.1 to network 0.0.0.0 1.0.0.0/24 is subnetted, 1 subnets C 1.1.111.0 is directly connected, Ethernet0/0.111 3.0.0.0/24 is subnetted, 1 subnets B 3.3.3.0 is directly connected,

Re: [c-nsp] Setting up a Internet Gateway (NAT-PE) for MPLS VPNCustomers

We provide customers with a managed CE router on a stick which does NAT and stateful inspection, these may hang off any PE router of our choosing, in reality we implement these as virtual systems on a larger devices with 802.1q trunks to the PE routers. Dave. Oliver Boehmer (oboehmer) wrote:

Re: [c-nsp] conditional bgp default-originate

silly question, but why not ask your provider for a default route in with your feed and simply just propagate it downstream?? Dave. Jon Lewis wrote: I'd like to be able to conditionally advertise a default route to customers taking just default routes only if my transit BGP sessions appear

Re: [c-nsp] conditional bgp default-originate

On Thu, 14 Aug 2008, David Freedman wrote: silly question, but why not ask your provider for a default route in with your feed and simply just propagate it downstream?? I don't need/want a default route. If a destination isn't in the global routing table, I don't want to send the packets

Re: [c-nsp] filter LDP bindings

On (2008-08-14 09:41 +0200), Oliver Boehmer (oboehmer) wrote: Well, I think this is the catch: In independent control mode, LDP does not re-advertise something like a distance/path-vector routing protocol does, it advertises its local bindings. So to implement a re-advertise behaviour,

Re: [c-nsp] route-map continue

On Thu, 2008-08-14 at 18:18 +0300, Dmitry Kiselev wrote: Hello! Does anybody can clear for me the continue statement behaviour? router bgp 111 ... neighbor 10.10.10.2 route-map TEST-OUT out neighbor 10.10.10.2 send-community ... route-map TEST-OUT permit 10 match community 10

Re: [c-nsp] route-map continue

On Thu, 2008-08-14 at 20:38 +0200, Peter Rathlev wrote: On Thu, 2008-08-14 at 18:18 +0300, Dmitry Kiselev wrote: P.S. Tested in 12.2S on 7200 According to FN you need 12.2SRC or 12.4T for outbound route-map continue support. SRB should also work by the way. Regards, Peter

Re: [c-nsp] route-map continue

i was thinking the problem was 'outbound' maps, but then when double checking i saw this Restrictions for BGP Route-Map Continue •Continue clauses are supported in outbound route maps only in Cisco IOS Release 12.0(31)S and subsequent releases.

Re: [c-nsp] route-map continue

Christian Koch wrote: i was thinking the problem was 'outbound' maps, but then when double checking i saw this Restrictions for BGP Route-Map Continue •Continue clauses are supported in outbound route maps only in Cisco IOS Release 12.0(31)S and subsequent releases.

Re: [c-nsp] VRF Lite Route Propagation

Can you do a show run int Ethernet0/0.555 and show ip bgp vpnv4 vrf I1? -Luan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Griffin Sent: Thursday, August 14, 2008 12:27 PM To: Jeff Kell Cc: cisco-nsp Subject: Re: [c-nsp] VRF Lite Route

Re: [c-nsp] Cisco authentication login page

I'm trying to customize the default login page that the Cisco router uses for authentication proxy ( to autenticate users ). Can someone tell me how to do that ? I've tried to search in the Cisco web site, but it seems that there is no documentation about it. Looking at the default page, i

[c-nsp] Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Vulnerability in Cisco WebEx Meeting Manager ActiveX Control Advisory ID: cisco-sa-20080814-webex Revision 1.0 For Public Release 2008 August 14 2230 UTC (GMT

[c-nsp] best way to load share adsl

Hello, I would like to setup load sharing on a 2621 for three adsl lines. Currently each of the adsl connections has a modem/router combo which is doing nat. All I need for the cisco router to do is load sharing or load balancing. What would be the best way to do this and could anyone recommend

[c-nsp] 3560 ACL performance?

Hi So the marketing machine tells me 3650s do ACLs in hardware and zero performance hit blah blah. Anyone had any real world experience with high loads of packets on every interface under a simple ACL? Thanks ___ cisco-nsp mailing list

Re: [c-nsp] 3560 ACL performance?

On Thu, Aug 14, 2008, Christian MacNevin wrote: Hi So the marketing machine tells me 3650s do ACLs in hardware and zero performance hit blah blah. Anyone had any real world experience with high loads of packets on every interface under a simple ACL? they perform like the 3550's - It Just

Re: [c-nsp] 3560 ACL performance?

How do I know what's programmed in hardware? We're using basic ip lists blocking netbios ports. On Aug 14, 2008, at 9:40 PM, Adrian Chadd wrote: On Thu, Aug 14, 2008, Christian MacNevin wrote: Hi So the marketing machine tells me 3650s do ACLs in hardware and zero performance hit blah blah.

Re: [c-nsp] best way to load share adsl

Dan, Take a look at this one: http://www.cisco.com/en/US/docs/ios/oer/configuration/guide/12_4t/oer_12 _4t_book.html Arie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Letkeman Sent: Friday, August 15, 2008 06:33 AM To: cisco-nsp@puck.nether.net