Re: [c-nsp] OT: TCL Book recommendation for Cisco EEM

2009-03-07 Thread Ivan Pepelnjak
Tcl/TK: A developer's guide http://www.msen.com/~clif/DevGuide.html A bit more advanced book when you want to go slightly beyond the basics. I wasn't too happy with it, but it did the job. Ivan -Original Message- From: Justin Shore [mailto:jus...@justinshore.com] Sent: Friday, March

Re: [c-nsp] Resetting an RSM password/config

2009-03-07 Thread Gert Doering
Hi, On Fri, Mar 06, 2009 at 07:23:17PM -0800, Charles Wyble wrote: I recently purchased some cisco gear for my lab. One of the things I am doing is configuring a Catalyst 5505 with a Route Switch Module (RSM). Any idea how to reset the config to factory defaults? I bought it second hand

[c-nsp] 3750ME CPU Utilization

2009-03-07 Thread Manaf Al Oqlah
Hi all, what does the HULC DAI Process stands for when executing the command show process cpu in 3750ME switch. I found an abnormal behavior on this process ID and it is frequently goes high. Regards, Manaf ___ cisco-nsp mailing list

[c-nsp] Multicast RPF check and unicast default route

2009-03-07 Thread Ibrahim Abo Zaid
Hi All i have a question about multicast RPF check that checks routing table for source address and ensure traffic incoming interface is the same as route next hop does this check supports default routes ? is there a feature like allow-default used in uRPF ? best regards --Ibrahim

[c-nsp] BGP community and MP-BGP route-target

2009-03-07 Thread Tim Durack
If I use AS:100 as a BGP community, is this the same as vrf route-target AS:100? I guess what I'm asking is: Do AS:nn BGP communities and AS:nn MP-BGP route-targets share the same community-space? Tim: ___ cisco-nsp mailing list

Re: [c-nsp] BGP community and MP-BGP route-target

2009-03-07 Thread Peter Rathlev
On Sat, 2009-03-07 at 10:41 -0500, Tim Durack wrote: If I use AS:100 as a BGP community, is this the same as vrf route-target AS:100? I guess what I'm asking is: Do AS:nn BGP communities and AS:nn MP-BGP route-targets share the same community-space? They don't, the RT is an extended

Re: [c-nsp] ftp.cisco.com unusable?

2009-03-07 Thread Bernhard Schmidt
On 06.03.2009 23:45, Gert Doering wrote: On Fri, Mar 06, 2009 at 08:01:02AM +0100, Stig Johansen wrote: Because of the borked ftp.cisco.com, I have generally used ftp-sj.cisco.com instead, and it works just fine all the time. Unfortunately, it doesn't. ftp-sj is also balanced to 4 different

Re: [c-nsp] Multicast RPF check and unicast default route [7:134602]

2009-03-07 Thread Ibrahim Abo Zaid
yes Rohynas that what i mean but my question is that work with multicast RPF check or works for unicast only ? best regards --Ibrahim On Sat, Mar 7, 2009 at 6:30 PM, Rohyans, Aaron arohy...@dpsciences.comwrote: I believe you're referring to: interface fastEthernet 0/0 ip verify unicast

Re: [c-nsp] BGP community and MP-BGP route-target

2009-03-07 Thread Mark Tinka
On Saturday 07 March 2009 11:41:51 pm Tim Durack wrote: I guess what I'm asking is: Do AS:nn BGP communities and AS:nn MP-BGP route-targets share the same community-space? No they don't. VRF RT's are part of the extended communities definition which support a 64-bit value, and would appear

Re: [c-nsp] 3750ME CPU Utilization

2009-03-07 Thread Mateusz Błaszczyk
Dynamic Arp Inspection is what comes to my mind? 2009/3/7 Manaf Al Oqlah man...@hotmail.com: Hi all, what does the HULC DAI Process stands for when executing the command show process cpu in 3750ME switch. I found an abnormal behavior on this process ID and it is frequently goes high.

Re: [c-nsp] Disabling enable command for users at privilege 0

2009-03-07 Thread luismi
Thanks it works perfectly for me :D El sáb, 07-03-2009 a las 02:27 +, Antonio Soares escribió: privilege exec level 1 enable ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] BGP community and MP-BGP route-target

2009-03-07 Thread Tim Durack
On Sat, Mar 7, 2009 at 11:39 AM, Mark Tinka mti...@globaltransit.net wrote: On Saturday 07 March 2009 11:41:51 pm Tim Durack wrote: I guess what I'm asking is: Do AS:nn BGP communities and AS:nn MP-BGP route-targets share the same community-space? No they don't. That's what I needed to

[c-nsp] Open Source solution to deploy a radius server against Cisco devices?

2009-03-07 Thread luismi
Hi all, I am looking for an open source solution to deploy some radius in our network. The primary goal is to connect to those radius to provide auth services: - The VPN Concentrators and vpn accounts (we would move all the vpn accounts info to the radius) - Validate ip http auth-proxy users

Re: [c-nsp] Resetting an RSM password/config

2009-03-07 Thread Lamar Owen
On Friday 06 March 2009 22:23:17 Charles Wyble wrote: I recently purchased some cisco gear for my lab. One of the things I am doing is configuring a Catalyst 5505 with a Route Switch Module (RSM). Any idea how to reset the config to factory defaults? I bought it second hand and need to clear

Re: [c-nsp] Multicast RPF check and unicast default route

2009-03-07 Thread Phil Mayers
On Sat, Mar 07, 2009 at 03:10:27PM +, Ibrahim Abo Zaid wrote: Hi All i have a question about multicast RPF check that checks routing table for source address and ensure traffic incoming interface is the same as route next hop does this check supports default routes ? is there a feature

Re: [c-nsp] Multicast RPF check and unicast default route [7:134602]

2009-03-07 Thread Phil Mayers
On Sat, Mar 07, 2009 at 05:08:22PM +, Ibrahim Abo Zaid wrote: yes Rohynas that what i mean but my question is that work with multicast RPF check or works for unicast only ? I don't believe this works for multicast, and find it hard to conceive of a circumstance where it would be useful.

Re: [c-nsp] Open Source solution to deploy a radius server againstCisco devices?

2009-03-07 Thread Charles
Those seem to be the category killers. --Original Message-- From: luismi Sender: cisco-nsp-boun...@puck.nether.net To: Cisco Network Service Providers Subject: [c-nsp] Open Source solution to deploy a radius server againstCisco devices? Sent: Mar 7, 2009 10:04 AM Hi all, I am

Re: [c-nsp] Resetting an RSM password/config

2009-03-07 Thread Charles
Thanks to all. Standard ios reset procedure it is. :) --Original Message-- From: Lamar Owen Sender: To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Resetting an RSM password/config Sent: Mar 7, 2009 10:06 AM On Friday 06 March 2009 22:23:17 Charles Wyble wrote: I recently purchased

Re: [c-nsp] Open Source solution to deploy a radius server against Cisco devices?

2009-03-07 Thread Jens Link
luismi asturlui...@gmail.com writes: Radius service should be able to be managed using a web interface. I don't really mind if there is a proper web interface of if we need to install webadmin. It also must support accounting. And it would be great if it is possible to have the back-end

Re: [c-nsp] 3750ME CPU Utilization

2009-03-07 Thread Mustafa Golam -
Ref to: http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_40_se/configuration/guide/swdynarp.html *no ip arp inspection vlan vlan-range *should solve the problem than. //Mustafa ** On Sat, Mar 7, 2009 at 10:40 PM, Manaf Al Oqlah man...@hotmail.com wrote: Yes it

Re: [c-nsp] 3750ME CPU Utilization

2009-03-07 Thread Manaf Al Oqlah
but I can't live without this option! it is mandatory to prevent users ARP and DHCP spoofing From: Mustafa Golam - Sent: Saturday, March 07, 2009 10:02 PM To: Manaf Al Oqlah Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 3750ME CPU Utilization Ref to:

Re: [c-nsp] Open Source solution to deploy a radius server against Cisco devices?

2009-03-07 Thread Ge Moua
We use Radiator over here to manage over 6,000 cisco devices; works pretty good on server class hardware. Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking Telecommunications Services luismi wrote: Hi all, I am looking for an open

Re: [c-nsp] Open Source solution to deploy a radius server against Cisco devices?

2009-03-07 Thread Alex Balashov
FreeRADIUS has not been a problem for us. -- Sent from mobile device On Mar 7, 2009, at 10:09 PM, Ge Moua moua0...@umn.edu wrote: We use Radiator over here to manage over 6,000 cisco devices; works pretty good on server class hardware. Regards, Ge Moua | Email: moua0...@umn.edu Network

Re: [c-nsp] 3750ME CPU Utilization

2009-03-07 Thread Mustafa Golam -
Issue a TAC ticket than. You must be missing something else. Please show us your running config. WR, Mustafa On Sun, Mar 8, 2009 at 2:25 AM, Manaf Al Oqlah man...@hotmail.com wrote: but I can't live without this option! it is mandatory to prevent users ARP and DHCP spoofing