Re: [c-nsp] Which QoS/Shaping is actually supported on ME3400?

2009-01-21 Thread Brad Henshaw
Garry wrote: I'm playing with an ME3400 in our Lab, trying to set up some QoS/Shaping stuff ... I'm pretty sure the last ME3400 I had my hands on was running Metro Access and was able to shape but only in class-default at the top level of the policy. Granularity at anything less than about

Re: [c-nsp] Which QoS/Shaping is actually supported on ME3400?

2009-01-21 Thread Garry
Brad Henshaw wrote: Garry wrote: I'm playing with an ME3400 in our Lab, trying to set up some QoS/Shaping stuff ... I'm pretty sure the last ME3400 I had my hands on was running Metro Access and was able to shape but only in class-default at the top level of the policy.

[c-nsp] Cisco Security Advisory: Cisco Security Manager Vulnerability

2009-01-21 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Security Manager Vulnerability Advisory ID: cisco-sa-20090121-csm http://www.cisco.com/warp/public/707/cisco-sa-20090121-csm.shtml Revision 1.0 For Public Release 2009 January 21 1600 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability`

2009-01-21 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager CAPF Denial of Service Vulnerability Advisory ID: cisco-sa-20090121-cucmcapf Revision 1.0 For Public Release 2009 January 21 1600 UTC (GMT

Re: [c-nsp] Cisco 7206 - High CPU Utilization

2009-01-21 Thread Spencer Barnes
It has been a while but I wanted to follow up on the problem I was having. It looks like IOS is the main culprit. I downgraded from 12.4(21) to 12.3(14)T7 this morning and the CPU utilization has dropped. I received a message from another user that has 7206VXRs with NPE-300s and he had CPU

Re: [c-nsp] Cisco Tools

2009-01-21 Thread Russ LaPlante
My inline IPS/AV identifies this link as infected with JS/feebs@mm. - Russ On Tue, Jan 20, 2009 at 8:45 PM, Aaron Riemer arie...@wesenergy.com.auwrote: Hey guys, I have found quite a useful website for different cisco configurations etc.. If anyone has any similar feel free to post in

[c-nsp] set TTL value

2009-01-21 Thread Adrian Minta
Is it possible to set TTL for outgoing packets on a cisco router ? -- Best regards, Adrian Minta ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] set TTL value

2009-01-21 Thread blahu77
signature.asc Description: OpenPGP digital signature ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] network connection tool

2009-01-21 Thread Ibrahim Abo Zaid
Hi All i want to know if there any network connectivity tool can be configured to respond to spesific TCP/UDP port number ? sometimes we do modifiy our security policy in FWs but the application level still have problem so we need to use this tool to configure it to respond to application port

[c-nsp] AIM-SSL-3 card on 2811

2009-01-21 Thread Luan Nguyen
Hi folks, Anyone tried the SSL-3 VPN encryption card on a 2800 series before? Thanks. Luan Nguyen Chesapeake NetCraftsmen, LLC. [W] http://www.netcraftsmen.net http://www.netcraftsmen.net/ [M] l...@netcraftsmen.net [Blog] http://cnc-networksecurity.blogspot.com/

Re: [c-nsp] network connection tool

2009-01-21 Thread Tony
--- On Thu, 22/1/09, Ibrahim Abo Zaid ibrahim.aboz...@gmail.com wrote: From: Ibrahim Abo Zaid ibrahim.aboz...@gmail.com Subject: [c-nsp] network connection tool To: cisco-nsp@puck.nether.net cisco-nsp@puck.nether.net, ci...@groupstudy.com Date: Thursday, 22 January, 2009, 7:46 AM Hi All

Re: [c-nsp] network connection tool

2009-01-21 Thread Mateusz Błaszczyk
i want to know if there any network connectivity tool can be configured to respond to spesific TCP/UDP port number ? iperf for both tcp udp -- pgp-key 0x1C655CAB ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] AIM-SSL-3 card on 2811

2009-01-21 Thread Ge Moua
We are using the SSL-2 card; I've been able to push about 130Mb/s 3des traffic on this card. Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking Telecommunications Services Luan Nguyen wrote: Hi folks, Anyone tried the SSL-3 VPN

Re: [c-nsp] network connection tool

2009-01-21 Thread A . L . M . Buxey
Hi, i want to know if there any network connectivity tool can be configured to respond to spesific TCP/UDP port number ? a selection of small tools and utils. eg 'lighttpd' for TCP - just change the port its listening on and web browse to a file on it, 'netcat', 'tftpd' for UDP randomness.

[c-nsp] Public table on 7206 VXR with NPE-G1 - 512MB or 1GB?

2009-01-21 Thread The Mickster
We need to shift some routers around in our network, and we have a couple of 7206-VXR routers with NPE-G1 which we'd like to redeploy into a situation where they'll need to take the full public BGP table. Currently they have 512MB of RAM, and the NPE-G1 appears to top-out at 1GigB of RAM. Can

Re: [c-nsp] cisco-nsp Digest, Vol 74, Issue 67

2009-01-21 Thread Thilak T
can anyone please advice what does it mean and why is an LACP port-channel displays an alphabet along with an actual channel number ? 240Po240(SD) LACP 240Po240A(SU) LACP Gi10/17(P) Gi10/18(P) Gi10/19(P) Gi10/20(P) 240Po240C(SU) LACP Gi10/21(P) On Tue,

Re: [c-nsp] Public table on 7206 VXR with NPE-G1 - 512MB or 1GB?

2009-01-21 Thread Elmar K. Bins
Re Mick, mickster4...@gmail.com (The Mickster) wrote: Currently they have 512MB of RAM, and the NPE-G1 appears to top-out at 1GigB of RAM. Can anyone tell me if I can do the full table on 512 MB, or if I need upgrade to !Gig, or is running the full table on a 7206-VXR a lost cause anyway?

Re: [c-nsp] Cisco 7206 - High CPU Utilization

2009-01-21 Thread Rodney Dunn
If you are on a 12.4 version of IOS and run NAT but don't need NBAR classification in order to translate MGCP and RTP traffic you can disable it via: no ip nat service nbar if you run 12.4(23) or later code. I wonder how much that would have bought you back in CPU usage as compared to what you

[c-nsp] DHCP Collision Detection

2009-01-21 Thread Crist Clark
Need the answer quick or just I'd test it myself, and I didn't see it specifically answered in the documentation. Will the IOS DHCP server detect collisions if the address is in use, but the host will not respond to pings? That is, the host is firewalled and will not respond to ICMP echo

Re: [c-nsp] Public table on 7206 VXR with NPE-G1 - 512MB or 1GB?

2009-01-21 Thread Engelhard Labiro
Hi Mick, FYI a 7206VXR-NPE-G1 loaded with 1Gig only consumes around 250Mb of its memory for a full BGP table (around 271K routes without filtering). See our router stat here #sh mem HeadTotal(b) Used(b) Free(b) Lowest(b) Largest(b) Processor 63F362C0

[c-nsp] Hardware limitations on SUP32 with LDP and full routing table

2009-01-21 Thread Jose
I was wondering if I could get some additional opinions on a case I have open with Cisco. We have recently started turning up LDP on various links out towards some routers that are being converted to act as PEs. The core is all connected together and has been running LDP on those particular

Re: [c-nsp] cisco-nsp Digest, Vol 74, Issue 67

2009-01-21 Thread Engelhard Labiro
This happen when you have a mismatch configuration between your Port-channel interface setting and Gigabit interfaces which are members of that Port-channel. Compare again the settings in Port-channel and its members. All must be the same otherwise you will get several port-channels w/ alphabet

Re: [c-nsp] Public table on 7206 VXR with NPE-G1 - 512MB or 1GB?

2009-01-21 Thread Jose
We have a few NPE-G1s out there as well with 1GB of memory and they are more than capable of handling a full internet route table. Memory is basically the same as what the others have posted. Feature wise we're not really doing anything fancy so CPU utilization is fine. One question I'd

Re: [c-nsp] Public table on 7206 VXR with NPE-G1 - 512MB or 1GB?

2009-01-21 Thread Mark Tinka
On Thursday 22 January 2009 09:49:23 am Jose wrote: One question I'd like to ask is whether anyone would ever consider using one of these as a gateway towards your upstream transits pushing over 500Mbps of bandwidth? It's ability to reach that forwarding capacity would depend on which other

Re: [c-nsp] Public table on 7206 VXR with NPE-G1 - 512MB or 1GB?

2009-01-21 Thread The Mickster
Thank you, to Engel, Jose, Elmar, as well as to all of those who wrote to me off-list! I've gotten the information that I need (which is that 512 MB is plenty for a VXR, NPE-G1, at least for now, at least for how I plan to use them). I also thank all of you for the little bits and pieces of

[c-nsp] Cisco licensing

2009-01-21 Thread Tony
Hi all, I just came across this Cisco page: http://www.cisco.com/en/US/prod/iosswrel/prod_gen_ios_licensing.html Which among the info on it has: When you purchase hardware, you also purchase the software and the license to use it. Hardware arrives with licensed software. No additional

Re: [c-nsp] cisco-nsp Digest, Vol 74, Issue 67

2009-01-21 Thread Thilak T
Thanks for this info , I tried shut/unshut on physical ports and it went off . Port configs were identical On Wed, Jan 21, 2009 at 5:48 PM, Engelhard Labiro engel.lab...@gmail.comwrote: This happen when you have a mismatch configuration between your Port-channel interface setting and

Re: [c-nsp] network connection tool

2009-01-21 Thread Andrew Gristina
netcat http://siliconrust.blogspot.com/2006/04/what-do-you-do-to-emulate-server.html Quick tutorial on how to emulate a server. I guess that is what you are asking. On Wed, Jan 21, 2009 at 12:46 PM, Ibrahim Abo Zaid ibrahim.aboz...@gmail.com wrote: Hi All i want to know if there any network

[c-nsp] Fwd: Please confirm (conf#adb39b53d0a10c7f876054b3798fbedb)

2009-01-21 Thread Andrew Gristina
Eat a box of rusty hammers nails whoever signed up ci...@groupstudy.com for a cisco-nsp address. Chaining mailing liststhat is a sign of genius. -- Forwarded message -- From: Cisco certification ci...@groupstudy.com Date: Wed, Jan 21, 2009 at 9:45 PM Subject: Please confirm

Re: [c-nsp] Softnet replacement?

2009-01-21 Thread Hank Nussbacher
At 11:22 AM 11-01-09 -0600, Justin Shore wrote: Gert Doering wrote: Hi, On Sun, Jan 11, 2009 at 01:41:59PM +0200, Hank Nussbacher wrote: That provides RMA which we do not need. We want *only* TAC access and IOS downloads. Softnet provided that option - which Cisco has abolished. Oh.