Re: [c-nsp] question about service provider network design

2008-10-21 Thread Nathan
Hi again, Since Marko says my question wasn't clear I'll try to make it better :-) - Is running OSPF on a switch at all useful when the switch is connecting routers that are running MPLS, MP-BGP, and OSPF? Can it provide faster detection of link loss? - In a campus scenario, Cisco recommends

Re: [c-nsp] ASR1002

2008-10-21 Thread Adam Armstrong
Rinse Kloek (Solcon) wrote: We are looking for a replacement for our 7200 BRAS routers. The ASR1002 looks promising: - Dual IOS (Software Redundancy / Much easier upgrading) Do you trust that stuff to work properly so early? I wouldn't! - Standaard 4 GE ports - 6-8 Mpps Assuming zero feature

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Adam Armstrong
Adam Armstrong wrote: Nathan wrote: Hi again, Since Marko says my question wasn't clear I'll try to make it better :-) - Is running OSPF on a switch at all useful when the switch is connecting routers that are running MPLS, MP-BGP, and OSPF? Can it provide faster detection of link loss?

Re: [c-nsp] BGP load-sharing *and* redundancy across 2 routers

2008-10-21 Thread Adam Armstrong
Robert Gutierrez wrote: Hi all. I have a typical BGP loopback setup to my ISP. 4 links across 2 routers. 2 links on each router. Easy -- no problemo. Now, how can I get loopback address redundancy? I'm currently using Router A as my loopback address, with an iBGP to Router B, and multihop

Re: [c-nsp] NMS for l2vpn service instance

2008-10-21 Thread Adam Armstrong
piotr/sawicki wrote: Hi experts !!! I'd like to ask you for help / advice on cisco 7600 l2 vpn's management Can you recommend any system for as much as monitoring and gathering statistics on l2 vpns? Do you know the software capable of discovering service instances on physical interface ?

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Nathan
On Tue, Oct 21, 2008, Adam Armstrong [EMAIL PROTECTED] wrote: Nathan wrote: - Is running OSPF on a switch at all useful when the switch is connecting routers that are running MPLS, MP-BGP, and OSPF? Can it provide faster detection of link loss? The routers can see each other directly at L2?

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Adam Armstrong
Nathan wrote: On Tue, Oct 21, 2008, Adam Armstrong [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Nathan wrote: - Is running OSPF on a switch at all useful when the switch is connecting routers that are running MPLS, MP-BGP, and OSPF? Can it provide faster detection of link loss? The

[c-nsp] How to match local IP address?

2008-10-21 Thread Grzegorz Janoszka
Is there a way to automatically match local (static, connected) IP subnets and deny ospf/bgp routes? Something like: route-map name permit 10 match connected I use soft SHX or SXF. We tried something like: 1. match route-type external 2. permit any but it did not work. Thanks in advance

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Nathan
On Tue, Oct 21, 2008 at 2:59 PM, Adam Armstrong [EMAIL PROTECTED] wrote: Well, the switches aren't important here, so if you plan to do ipv6 in the future and aren't a huge ospf fan, have a look at isis now and switch if you like it. It's definitely a lot easier to manage and troubleshoot.

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread David Prall
What exactly are you trying to do? Redistribute connected and redistribute static only match those, no need for a route-map. Or are you attempting to advertise these to a particular BGP peer? David -- http://dcp.dcptech.com -Original Message- From: [EMAIL PROTECTED]

[c-nsp] Network Management System

2008-10-21 Thread Ibrahim Alsharif
hello Guys, could please help me to choose which Cisco Network Management software, Cuz I have a network include LAN, WAN, ASA Firewalls Voice Equipments so I need Management Software for these equipments thank you, __ Do You Yahoo!? Tired of

Re: [c-nsp] Sup720, SXH or SXF?

2008-10-21 Thread Rodney Dunn
Sometimes the infrastructure changes to do it override the decision to back port. That's one of the biggest dangers with long lived throttles. I was part of those dicussions on the topic. It wasn't a decision made lightly but they made the best, note I didn't say right, choice. Rodney On Mon,

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread Grzegorz Janoszka
David Prall wrote: What exactly are you trying to do? Redistribute connected and redistribute static only match those, no need for a route-map. Or are you attempting to advertise these to a particular BGP peer? Announce connected network with no-export community - it may be lot of smaller

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread Grzegorz Janoszka
Marko Milivojevic wrote: How about something like this? route-map Connected-Routes set community no-export ! router bgp XXX address-family ipv4 redistribute connected route-map Connected-Routes ! If you wish to assign community for only specific interfaces only, you can do something like:

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Dan Armstrong
We have a fairly similar design for our Metro Ethernet network. Our primary method of protection is STP(MST). I've been thinking about this, and I can't come up with a reason why we even really need an IGP down to the edge PE devices? Since it's all layer2 - the core switch/routers see

Re: [c-nsp] FWSM Static NAT gets stuck..

2008-10-21 Thread Andrew Yourtchenko
If clear local fixes it - then most probably there's another xlate that stands in the way, should not be related to arp. Watch out for the identity statics that are supersets of this host static, i.e. something like this is not good: static (inside,outside) 1.1.1.1 2.2.2.2 netmask

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread Marko Milivojevic
If you need to cover all ports, just apply the first route-map I listed. That one will cover all connected routes... Another approach, if your connected routes can be summarized is to match based on that (prefix-lists, for example). On Tue, Oct 21, 2008 at 15:14, Grzegorz Janoszka [EMAIL

Re: [c-nsp] Network Management System

2008-10-21 Thread Mohammed Dado
Hi, Cacti would be great for yourcase .. Best Regards, Mohammed Dado Technical Support Engineer - EMEA Airspan Communications Ltd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ibrahim Alsharif Sent: 21 October 2008 16:25 To:

Re: [c-nsp] Network Management System

2008-10-21 Thread Michel Grossenbacher
Dunno but I'd suggest to first define what you want to achieve with your NMS before you look for applications. There are so much applications and solutions around that it is hard to suggest something :-) best regards Michel 2008/10/21 Mohammed Dado [EMAIL PROTECTED] Hi, Cacti would be great

Re: [c-nsp] MST issues

2008-10-21 Thread Mateusz Błaszczyk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hash, Please can someone explain to be the following outputs when seen on an MST device Te9/1 Mstr FWD 2000 128.2049 P2p Bound(PVST) I am reffering to the Mstr and the Bound (PVST) there The port is boundary port connected

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Nathan
On Tue, Oct 21, 2008 at 4:16 PM, Dan Armstrong [EMAIL PROTECTED] wrote: We have a fairly similar design for our Metro Ethernet network. Our primary method of protection is STP(MST). I've been thinking about this, and I can't come up with a reason why we even really need an IGP down to the

[c-nsp] NM-WLC Multicast, not working

2008-10-21 Thread matthew zeier
I'm stuck - I have a lot of Mac OSX users. Services that depend on multicast appear broken when going between wired and wireless (or even across WLCs or APs). I blogged about this yesterday @ http://blog.mozilla.com/mrz/ with the hopes someone would have solved this. Cisco apparently can't

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Dan Armstrong
So say I have an SVI on a PE switch which in turn has 2 layer2 links back to 2 core boxes, the core boxes protected again by a 3rd layer2 link. MST will protect me and make sure I always have link to the PE routers core routers. What's wrong with using that SVI address in your PE router as

Re: [c-nsp] question about service provider network design

2008-10-21 Thread Mateusz Błaszczyk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 2008/10/21 Dan Armstrong : So say I have an SVI on a PE switch which in turn has 2 layer2 links back to 2 core boxes, the core boxes protected again by a 3rd layer2 link. MST will protect me and make sure I always have link to the PE routers

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread Lynch, Tomas
If you are not going to send connected routes out of you AS then do not distribute them. I'm assuming you are using an IGP. -Original Message- From: [EMAIL PROTECTED] [mailto:cisco-nsp- [EMAIL PROTECTED] On Behalf Of Grzegorz Janoszka Sent: Tuesday, October 21, 2008 12:26 PM To:

Re: [c-nsp] EIGRP routing failure

2008-10-21 Thread Derick Winkworth
What do you mean? The giant counter is incrementing or not? We ran into an issue where the MTUs were not equal and this was causing EIGRP to bounce. The router with the higher MTU was running 12.4 and the router with the lower MTU was running 12.2, and this was causing the router on 12.2 to

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread Grzegorz Janoszka
David Prall wrote: How are the connected prefixes getting into BGP? Is it redis connected, network statements, or redis of IGP? Should be able to set a community via route-map on a redistribution, I've never tried NO-EXPORT though. Is the below possible? route-map redistribute-connected

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread Marko Milivojevic
Is the below possible? route-map redistribute-connected permit 10 match ip address prefix-list ABC set community no-export ! router bgp XYZ redistribute connected subnets route-map redistribute-connected Is it possible to set the bgp community in the redistribute route-map? It is

Re: [c-nsp] How to match local IP address?

2008-10-21 Thread Marko Milivojevic
Here, I had a few minutes to play in the lab: interface Loopback0 ip address 10.0.0.1 255.255.255.0 ! interface Loopback1 ip address 10.1.0.1 255.255.255.0 ! interface Loopback2 ip address 10.2.0.1 255.255.255.0 ! interface Loopback3 ip address 10.3.0.1 255.255.255.0 ! router bgp 100 bgp

Re: [c-nsp] Network Management System

2008-10-21 Thread Ibrahim Alsharif
Hello Michel thanks for ur reply what I want is to draw full topology for the network, manage, monitor configure all devices so what do u think ? - Original Message From: Michel Grossenbacher [EMAIL PROTECTED] To: Mohammed Dado [EMAIL PROTECTED] Cc: Ibrahim Alsharif [EMAIL

Re: [c-nsp] WCS on CentOS?

2008-10-21 Thread David Rose
Jeffrey Ollie wrote: Currently, my Wireless Control System is running on an upgraded WLSE box that runs RHEL 4 (which came with the WLSE-WCS conversion) and version 5.0.56 of the WCS software. I'd like to move to the latest version but it requires RHEL 5. I don't have any RHEL licenses

[c-nsp] Cisco CDS (content delivery system)

2008-10-21 Thread Ben Steele
Anyone had much experience with one? We are looking at deploying one on a national level and while it sounds great and seems to do what we are after i'm curious as to anyones real world experience with one. Cheers Ben ___ cisco-nsp mailing

[c-nsp] Cannot initiate tunnel (ASA to PIX )

2008-10-21 Thread JR Colmenares
On a L2L tunnel CompanyA can initiate the tunnel but CompanyB cannot. Company A's ASA 5505 config ASA Version 7.2(4) ! hostname CompanyA domain-name default.domain.invalid names ! interface Vlan1 nameif inside security-level 100 ip address 192.168.103.254 255.255.255.0 !