Re: [c-nsp] mls cef max route

2009-03-26 Thread Peter Rathlev
On Thu, 2009-03-26 at 10:36 +0530, Swati Sharma wrote: Though I have just few routes still I am getting Mar 26 04:49:06.406 UTC: %MLSCEF-SP-4-FIB_EXCEPTION: FIB TCAM exception for IPv4 unicast, Some routes will be software switched. Use mls cef maximum-routes to modify FIB TCAM partition.

[c-nsp] Getvpn same box ks and gm

2009-03-26 Thread Mike Louis
Does anyone know when cisco plans to support getvpn key server and group member configurations on the same box? Note: This message and any attachments is intended solely for the use of the individual or entity to which it is addressed and may contain information

Re: [c-nsp] mls cef max route

2009-03-26 Thread Gert Doering
Hi, On Thu, Mar 26, 2009 at 10:36:20AM +0530, Swati Sharma wrote: 6500.LAB#sh mls cef maximum-routes Try: sh mls cef su to see what IOS is thinking about TCAM usage. gert -- USENET is *not* the non-clickable part of WWW!

Re: [c-nsp] Question about CBWFQ and PING times

2009-03-26 Thread Peter Rathlev
On Thu, 2009-03-26 at 11:04 +1100, Andy Saykao wrote: I tried to create a Heirarchical QoS policy on a spare 7606 we have here and no go. Tried to create a parent shaper and policer and neither worked when the service-policy was applied to the interface. I would've thought the SIP-400 could do

Re: [c-nsp] BGP session resets if NLRI exchanged

2009-03-26 Thread Harold Ritter (hritter)
Paul, You might be running into CSCsl72955. If so, you could try the workaround suggested by the following link or upgrade the code. http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method =fetchBugDetailsbugId=CSCsl72955 Regards -Original Message- From:

[c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Wilkinson, Alex
Hi all, I would like to put in place measures to be able to pin point the particular user(s) who are thrashing out our WAN connection. I am thinking ... Mirror all ports (SPAN) to a spare port and use trafshow to pinpoint the culprit. However, i am curious how others deal with this situation

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Phil Mayers
Wilkinson, Alex wrote: Hi all, I would like to put in place measures to be able to pin point the particular user(s) who are thrashing out our WAN connection. I am thinking ... Mirror all ports (SPAN) to a spare port and use trafshow to pinpoint the culprit. However, i am curious how others

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Rodney Dunn
Why not use Netflow? On Thu, Mar 26, 2009 at 09:15:45PM +0900, Wilkinson, Alex wrote: Hi all, I would like to put in place measures to be able to pin point the particular user(s) who are thrashing out our WAN connection. I am thinking ... Mirror all ports (SPAN) to a spare port and use

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Pender, James
http://www.cisco.com/en/US/products/sw/iosswrel/ps1838/products_feature_guide09186a0080259533.html How to setup netflow to monitor top talkers, and even poll the results with SNMP. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net]

Re: [c-nsp] MLPPP

2009-03-26 Thread Rodney Dunn
You have it in a VRF which really shouldn't cause an issue as it's tag2ip and ip2tag. What code is it? Make sure it's the latest 12.4 mainline as we did some work in 12.4 to make this work. Can you get a 'sh int mul 2 stat' after a clear counters...get it a few times and send it? Also, what

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Paul Stewart
Netflow would be our first choice if possible... Paul -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Wilkinson, Alex Sent: Thursday, March 26, 2009 8:16 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Tracking

Re: [c-nsp] MLPPP

2009-03-26 Thread Jason Berenson
Rodney, It's running: 12.4(18a). I had to downgrade from the latest about 6 months ago because of a bug where 'show policy' would show no output even if QoS was working properly. router#show int mul2 stat Multilink2 Switching pathPkts In Chars In Pkts Out Chars Out

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Jeff Kell
Paul Stewart wrote: Netflow would be our first choice if possible... If you can monitor it on a single span port, iftop is nice, quick, easy, and free. Jeff ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread William F. Maton Sotomayor
On Thu, 26 Mar 2009, Paul Stewart wrote: Netflow would be our first choice if possible... +1 Definitely NetFlow. In a pinch, one could do 'show ip ca fl' over and over a few times to try and eyeball quickly rising counters, then isolate the interesting line by doing 'show ip ca fl | inc

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Paul Stewart
Netflow would be our first choice if possible... Paul -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Wilkinson, Alex Sent: Thursday, March 26, 2009 8:16 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Tracking

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Jeff Kell
To add to my previous note... Jeff Kell wrote: If you can monitor it on a single span port, iftop is nice, quick, easy, and free. Or ipaudit, if you want longer-term samples (provides 30-minute, daily, weekly). Jeff ___ cisco-nsp mailing list

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Lamar Owen
On Thursday 26 March 2009 08:15:45 Wilkinson, Alex wrote: I would like to put in place measures to be able to pin point the particular user(s) who are thrashing out our WAN connection. I am thinking However, i am curious how others deal with this situation ? NetFlow feeding nTop.

[c-nsp] Cisco and Foundry and MST

2009-03-26 Thread Nick Griffin
I'm working with a client that is migrating to Foundry from Cisco and they need to have interoperability on STP between the two vendors. I usually try to do MST when I can, usually in a cisco environment, so I'm pretty comfortable with it. Does anyone have any experience getting the 2 to play

Re: [c-nsp] MLPPP

2009-03-26 Thread Rodney Dunn
On Thu, Mar 26, 2009 at 10:30:08AM -0400, Jason Berenson wrote: Rodney, It's running: 12.4(18a). I had to downgrade from the latest about 6 months ago because of a bug where 'show policy' would show no output even if QoS was working properly. router#show int mul2 stat Multilink2

Re: [c-nsp] Cisco and Foundry and MST

2009-03-26 Thread Ian MacKinnon
Hi Nick, I did something similar a while ago, so here are some thoughts. Plan for downtime :-( Don't expect it to be totally transparent, so make the changes in a maintenance window. I think SXH and later do a real standards compliant version of MSTP with interop with standard STP. Are you

Re: [c-nsp] MLPPP

2009-03-26 Thread Jason Berenson
Rodney, With the PA-MC-T3-EC, any idea how much would be offloaded to the PA? The router is running at about 75% peak average utilization, which is a bit high considering it's mostly doing routing and not pushing more then 100Mbits. If this is being interrupt switched, I wouldn't expect the

[c-nsp] Free/low-cost traffic generator?

2009-03-26 Thread Inca
Does anyone know of a free (open source or otherwise) or low cost traffic generator that we can use to stress test multiple gigabit links simultaneously? Ideally, it would be a software package that one can install on *nix/OSX/Windows. Thanks! ___

Re: [c-nsp] Sending connected number from AS5350

2009-03-26 Thread Andreas Sikkema
[Reply to my own post] I've tried more or less everythin but failed, so I asked our supplier to just set COLP to temporary restricted. Thanks for thinking with me. -- Andreas Sikkema ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Tracking bandwidth hogs ... any recommendations ?

2009-03-26 Thread Rich Davies
You can turn up a NetFlow server which is at times complex or time consuming. A quick/dirty way to find out who is causing your issue may be just to enable ip route-cache flow on a L3 interface that his traffic is flowing through, then doing show ip cache flow - if he's sending out a ton of

Re: [c-nsp] Free/low-cost traffic generator?

2009-03-26 Thread Charles Wyble
Conflicker is free and comes with unpatched windows systems. :) On a more serious note, what sort of traffic/apps are you testing? Voice? Web? Inca wrote: Does anyone know of a free (open source or otherwise) or low cost traffic generator that we can use to stress test multiple gigabit links

Re: [c-nsp] Free/low-cost traffic generator?

2009-03-26 Thread A . L . M . Buxey
Hi, Does anyone know of a free (open source or otherwise) or low cost traffic generator that we can use to stress test multiple gigabit links simultaneously? Ideally, it would be a software package that one can install on *nix/OSX/Windows. netperf? the Linux packet generator? what purpose?

Re: [c-nsp] Free/low-cost traffic generator?

2009-03-26 Thread Steve Bertrand
Inca wrote: Does anyone know of a free (open source or otherwise) or low cost traffic generator that we can use to stress test multiple gigabit links simultaneously? Ideally, it would be a software package that one can install on *nix/OSX/Windows. iperf. Single binary application for both

Re: [c-nsp] Free/low-cost traffic generator?

2009-03-26 Thread Peter Rathlev
On Thu, 2009-03-26 at 10:10 -0700, Inca wrote: Does anyone know of a free (open source or otherwise) or low cost traffic generator that we can use to stress test multiple gigabit links simultaneously? Ideally, it would be a software package that one can install on *nix/OSX/Windows. Any

Re: [c-nsp] Free/low-cost traffic generator?

2009-03-26 Thread Christian Koch
d-itg http://www.grid.unina.it/software/ITG/link.php pageant ios On Thu, Mar 26, 2009 at 10:27 AM, Steve Bertrand st...@ibctech.ca wrote: Inca wrote: Does anyone know of a free (open source or otherwise) or low cost traffic generator that we can use to stress test multiple gigabit links

Re: [c-nsp] mls cef max route

2009-03-26 Thread Swati Sharma
Hi Peter, most of the resources are available 6500.LAB#sh platform hardware capacity pfc L2 Forwarding Resources MAC Table usage: Module Collisions Total Used %Used 50 65536 24 1% VPN CAM usage:

Re: [c-nsp] Free/low-cost traffic generator?

2009-03-26 Thread Inca
Thanks for all of the responses. Some of them like interesting. Ideally, we would like send out multiple streams of traffic (both small and large packets) simultaneously through multiple gigabit interfaces. While QoS testing maybe of interest later on, we more mainly focus on seeing if some

Re: [c-nsp] mls cef max route

2009-03-26 Thread Swati Sharma
Hi Gert, 6500.LAB#sh mls cef su 6500.LAB#sh mls cef summary Total routes: 80 IPv4 unicast routes: 43 IPv4 Multicast routes:3 MPLS routes: 32 IPv6 unicast routes: 2 IPv6 multicast routes:0 EoM routes:

Re: [c-nsp] MLPPP

2009-03-26 Thread Buhrmaster, Gary
Rodney, With the PA-MC-T3-EC, any idea how much would be offloaded to the PA? As always, your mileage will vary, but Cisco has some examples and estimates available at: http://www.cisco.com/en/US/prod/collateral/modules/ps2033/prod_white_paper0900aecd8056d3cb.html (Note you need the

[c-nsp] Stratum 0 PPS Hardware clock compatibility

2009-03-26 Thread Jason Gurtz
I have found a lot of documentation online that states the 7200 is the only Cisco device that supports a PPS hardware clock via the Aux port. I see recommendations for Trimble Acutime 2000 since replaced by mfr. and other solutions but these documents are a few years old. Has this feature been

[c-nsp] spanning-tree bpduguard vs. bpdufilter

2009-03-26 Thread Steven Fischer
When deploying our new network a few months ago, we set up Cisco Works to manage it. Cisco Works detected and flagged the lack of the following commands as configuration errors: spanning-tree bpduguard enable spanning-tree bpdufilter enable Thinking this recommendation came from Cisco Works, it

Re: [c-nsp] spanning-tree bpduguard vs. bpdufilter

2009-03-26 Thread A . L . M . Buxey
Hi, spanning-tree bpduguard enable spanning-tree bpdufilter enable Thinking this recommendation came from Cisco Works, it follows that this would make sense to do, right? As some more information on the effect of these commands has come to light, this is really not a good idea. The

Re: [c-nsp] BGP session resets if NLRI exchanged

2009-03-26 Thread Paul Cosgrove
Many thanks Harold! that does indeed look like the issue. We are using 32byte ASNs, but since the problem was occuring even after we filtered that advertisement we had begun looking elsewhere. Paul. Harold Ritter (hritter) wrote: Paul, You might be running into CSCsl72955. If so, you

[c-nsp] Alun Mcglinchey is out of the office.

2009-03-26 Thread Alun Mcglinchey
I will be out of the office starting 26/03/2009 and will not return until 01/04/2009. I will respond to your message when I return, if your query is urgent please contact the IT servicedesk team on 6634 or email Cameron McKinnon (cmckin...@wiseman-dairies.co.uk)

Re: [c-nsp] spanning-tree bpduguard vs. bpdufilter

2009-03-26 Thread Steven Fischer
On Thu, Mar 26, 2009 at 4:29 PM, a.l.m.bu...@lboro.ac.uk wrote: Hi, spanning-tree bpduguard enable spanning-tree bpdufilter enable Thinking this recommendation came from Cisco Works, it follows that this would make sense to do, right? As some more information on the effect of these

Re: [c-nsp] spanning-tree bpduguard vs. bpdufilter

2009-03-26 Thread Bielawa, Daniel W. (NS)
Hello From experience, I can tell you that the bpdufilter command will override the bpduguard command. Bpdufilter effectively turns off spanning tree on a port, but portfast keeps spanning tree enabled on a port, With bpdufilter enabled there is nothing to protect you from a loop.

Re: [c-nsp] Cisco 887 CPE and 890series?!?!?!?!?!

2009-03-26 Thread Brad Henshaw
Skeeve Stevens wrote: Seriously This is the biggest tease I've ever had! Interesting sounding box. Glad to see the lack of those awful shared console/aux ports. GigE port to support the high-bandwidth demands of Metro Ethernet deployments on a low end software forwarding box, though?

Re: [c-nsp] Question about CBWFQ and PING times

2009-03-26 Thread Andy Saykao
Hi Peter, Yes, it's a SPA in the SIP-400 that we add the service-policy to. DTS and hierarchical qos should be supported as per the data sheet, and I'll bring it up with our Cisco rep to see what the deal is. Consider the bandwidth parameter strictly informational. How misleading is that then.

Re: [c-nsp] QoS on Tunnel Interfaces w/ DSL

2009-03-26 Thread Swati Sharma
Hi, This depends whether you want to do QoS based on tos bit or source / destination ip... if it is based on tos bit, u do not need to do anything and if it is based on S/S ip use QoS-pre classify command.. Regards, Message: 2 Date: Wed, 25 Mar 2009 08:11:20 -0400 From: Jeff Cartier

[c-nsp] qos on standard ethernet port for me3750

2009-03-26 Thread Michael Lee
Hello: Did anyone have experiences with QoS on ME3750 standard port (not ES port), it looks like that it does not support CBWFQ, how about SRR and priority queueing, is priority queue on the first queue? thx, ~mike ___ cisco-nsp mailing list

Re: [c-nsp] qos on standard ethernet port for me3750

2009-03-26 Thread Brad Henshaw
Michael Lee wrote: Did anyone have experiences with QoS on ME3750 standard port (not ES port), it looks like that it does not support CBWFQ, how about SRR and priority queueing, is priority queue on the first queue? Yes it supports SRR (sharing and shaping) and priority queueing. And yes,