Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-08 Thread Gert Doering
Hi, On Tue, Apr 07, 2009 at 05:23:17PM -0400, Bill Wichers wrote: I typically set both ends (router and switch) of these links to 100/full since I've seen weird autonegotiation problems before. This works just fine for individual FE links, but as soon as I bring up the Etherchannel group both

[c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Seth Mattinen
One of my carriers has given me a choice for a new circuit delivery: T3 or Ethernet. My outside world circuit experience is all non-Ethernet, so I have a few questions the sales group wasn't able to answer. I'd love to hear some real world experience. The cost difference between the two is not

Re: [c-nsp] upload to 2 upstreams

2009-04-08 Thread RAZAFINDRATSIFA Rivo Tahina
Yes it's BGP. At 07:44 08/04/2009, Aftab Siddiqui wrote: What routing protocol you are runnging with your upstream. It should be BGP I guess. On Tue, Apr 7, 2009 at 8:36 PM, RAZAFINDRATSIFA Rivo Tahina mailto:r.tah...@moov.mgr.tah...@moov.mg wrote: Hi all, We have two upstreams and our

Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-08 Thread Alastair Johnson
Bill Wichers wrote: I typically set both ends (router and switch) of these links to 100/full since I've seen weird autonegotiation problems before. This works just fine for individual FE links, but as soon as I bring up the Etherchannel group both member links on the router end drop back to

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Ian MacKinnon
Hi Seth, I think the world is moving to ethernet for what traditionally was a leased line, so you are only going to see more of it. Don't forget in your cost calculations the CPE line card, compare the cost of a router (or switch) with a spare Ethernet port and one with a 2Meg serial card.

Re: [c-nsp] GigE sub-int won't come up

2009-04-08 Thread Justin Shore
Justin Shore wrote: Justin M. Streiner wrote: Is there an active access port in VLAN 999 on the 4948, or somewhere downstream of it, assuming any neccessary trunking at the site is already in place? I've seen VLANs not come up before, until there is actually a host in the VLAN. There is an

Re: [c-nsp] carrier router models comparison

2009-04-08 Thread Emanuel Popa
hi tassos, i'm really scared when using a fairly new platform with a fairly new software version. i would prefer paying more money for a more stable device. and this fear of mine goes back to the SRB2 version for the Cisco 7600 which is the worst thing that could happen for the 7600. anyways, the

[c-nsp] Max length of 9600 serial over CAT5e

2009-04-08 Thread Sam Stickland
Hi, What's the maximum length of you can run async-serial (9600 baud) over CAT5e (from a terminal server to console port). My google-fu has failed me. Sam ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Max length of 9600 serial over CAT5e

2009-04-08 Thread Richard Halfpenny
Sam Stickland wrote: Hi, What's the maximum length of you can run async-serial (9600 baud) over CAT5e (from a terminal server to console port). My google-fu has failed me. If I remember correctly, the spec for RS-232 says the maximum capacitance of a cable can be 2500pF at 20kbps. A

Re: [c-nsp] NAT on ASR1000

2009-04-08 Thread Yan Filyurin
At certain point of time, I was testing NAT with just test tools, sending various forms of raw TCP, UDP and just IP traffic. I was able to get about 150k simultaneous translations at 2Gbps doing very low packet sizes. I definitely remember doing it with IMIX. I do remember seeing issues with

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Gert Doering
Hi, On Wed, Apr 08, 2009 at 12:14:52AM -0700, Seth Mattinen wrote: How do you detect a down condition on Ethernet? My experience is that the interface could be up/up because Ethernet doesn't know about anything further down the line and ends up throwing packets into a magical black hole. Or

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Church, Charles
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Seth Mattinen Sent: Wednesday, April 08, 2009 3:15 AM To: cisco-nsp Subject: [c-nsp] T3 or Ethernet delivery? How do you detect a down condition on Ethernet? My experience

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Ryan Hughes
Generally my experience with Ethernet handoffs has been hit or miss depending on what the carrier is delivering for the hand off - I've dealt with some gear as you alluded to that doesn't down the CE hand off when the circuit goes which turns into an interesting game of routing protocol timers and

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Jeffrey Ollie
On Wed, Apr 8, 2009 at 2:14 AM, Seth Mattinen se...@rollernet.us wrote: One of my carriers has given me a choice for a new circuit delivery: T3 or Ethernet. I would go for Ethernet in a heartbeat. The cost difference between the two is not significant enough to be the sole deciding factor

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Lee
For us, price =is= the deciding factor. A 45Mb ethernet service costs us much less than a real T3. We replaced a T3 circuit with a 45Mb ethernet service and then discovered that the RTT went from 12ms on the T3 to 39ms on the ethernet circuit. Much discussion with the provider about

Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-08 Thread Lee
On 4/7/09, Bill Wichers bi...@waveform.net wrote: [snip] ... and the context of *this* discussion is likely involving PA-FE-TX's, which are quite old hardware, and cannot do any sort of autoneg. True, so the ports should probably be nailed to full at both sides. Correct, they are

Re: [c-nsp] carrier router models comparison

2009-04-08 Thread Andrei Radu
Hello Manu, Well the Foundry MLX/XMR is a layer 2 switching platform that evolved into a layer 3 switching platform that evolved into a mpls switching platform much like the 6500/7600. The MLX and XMR are basically the same hardware sold as the core switching platform and the core routing

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Mesiatowsky, Shawn
to detect a failure when the link is still up, you can use ip sla to ping the downstream router. You can then use embedded event manager to track your sla and trigger an event upon failure. The event could be to email you, send an snmp trap, or run a tcl script such as changing static routes.

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Jon Lewis
On Wed, 8 Apr 2009, Jeffrey Ollie wrote: How do you detect a down condition on Ethernet? My experience is that the interface could be up/up because Ethernet doesn't know about anything further down the line and ends up throwing packets into a magical black hole. Or worse, secret packet loss.

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Jason Gintert
I would go with Ethernet services just for the sheer flexibility. With regard to your concerns of monitoring link state, you can use Ethernet demarcation devices such as the ISG 2X series from Overture to solve that. Think of it as an Ethernet Smart Jack. It provides some pretty neat testing

Re: [c-nsp] SIP-400 and 10GbE SPA

2009-04-08 Thread Aaron
It might be supported but you don't get 10GB with it. Aaron On Mon, Apr 6, 2009 at 21:12, Stephen Fulton s...@lists.esoteric.ca wrote: According to the SIP/SPA compatibility matrix:

Re: [c-nsp] Max length of 9600 serial over CAT5e

2009-04-08 Thread Aaron
Nom. Capacitance @ 1 KHz:15 pF/ft. for cat 5e On Wed, Apr 8, 2009 at 07:31, Richard Halfpenny richard.halfpe...@exa-networks.co.uk wrote: Sam Stickland wrote: Hi, What's the maximum length of you can run async-serial (9600 baud) over CAT5e (from a terminal server to console port).

Re: [c-nsp] 2600 series for 100M

2009-04-08 Thread Aaron
You don't say want services you are planning on running. Full-bgp? That would have an impact on memory requirements. On Wed, Apr 8, 2009 at 08:09, Deric Kwok deric.kwok2...@gmail.com wrote: Hi Do you know Cisco 2651XM is fine for 100M network? If the memory is 256M, it is ok? Can it

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances

2009-04-08 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Adaptive Security Appliance and Cisco PIX Security Appliances Advisory ID: cisco-sa-20090408-asa http://www.cisco.com/warp/public/707/cisco-sa-20090408-asa.shtml Revision 1.0

Re: [c-nsp] about eompls on 7609

2009-04-08 Thread Peter Rathlev
On Wed, 2009-04-08 at 13:22 +0800, ying-xiang wrote: following is my topology brief: SwitchA---PE1(7609-1)---PE2(7609-2)---SwitchB Both switchA and switchB are configured a vlan100 to achieve layer two transport through EoMPLS and they works without any issue but i got an error when i

[c-nsp] show dot11 network-map

2009-04-08 Thread Anning, Mike
Anyone know if the show dot11 network-map output on 1200 series access points shows either; 1. neighbouring access points it can see over the dot11 radio interface 2. neighbouring access points it can see over the wire within the same subnet I am thinking option 2 but cannot find anything

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Bill Wichers
I've found that some carriers consider Ethernet something of a toy whereas TDM and SONET circuits are considered more mission critical. Basically our local engineering gusy say that the Ethernet links are just a bunch of jumpers in COs, and by that they mean a single link patched through to where

Re: [c-nsp] Max length of 9600 serial over CAT5e

2009-04-08 Thread Bill Wichers
RS-232 has more limitations than just cable capacitance. RS-232 is a single-ended communication protocol (on the physical level), so it's noise immunity is not very good. This is especially a problem if you're running the cable in an electrically noisy environment (like a cable tray or wiring

Re: [c-nsp] 2600 series for 100M

2009-04-08 Thread Mohacsi Janos
According to Cisco: 265x(XM) is capable for the following performance for IP packets: in CEF switching: 4 PPS and around 21 Mbps Janos Mohacsi Network Engineer, Research Associate, Head of Network Planning and Projects NIIF/HUNGARNET, HUNGARY Key 70EF9882: DEC2 C685 1ED4 C95A 145F 4300

Re: [c-nsp] Max length of 9600 serial over CAT5e

2009-04-08 Thread Seth Mattinen
Bill Wichers wrote: RS-232 has more limitations than just cable capacitance. RS-232 is a single-ended communication protocol (on the physical level), so it's noise immunity is not very good. This is especially a problem if you're running the cable in an electrically noisy environment (like a

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Seth Mattinen
Bill Wichers wrote: I've found that some carriers consider Ethernet something of a toy whereas TDM and SONET circuits are considered more mission critical. Basically our local engineering gusy say that the Ethernet links are just a bunch of jumpers in COs, and by that they mean a single link

Re: [c-nsp] 2600 series for 100M

2009-04-08 Thread Seth Mattinen
Deric Kwok wrote: Hi Do you know Cisco 2651XM is fine for 100M network? You aren't likely to get line rate 100 meg out of it. If the memory is 256M, it is ok? Can it support Virtual private network, VLAN and new tcsh command? It'll do crypto (slowly). You'll need a crypto AIM if you're

[c-nsp] Ping priority on Cisco devices

2009-04-08 Thread Ruben Alvarez
All, I've heard that Cisco devices handle ICMP at a low priority. I found one post describing it handled in process-switching and not fast-switching. Does anyone have an article that explains that process and is it configurable? The reason I ask is I see about 4% packet loss when I ping devices

Re: [c-nsp] 2600 series for 100M

2009-04-08 Thread Peter Rathlev
On Wed, 2009-04-08 at 10:54 -0700, Seth Mattinen wrote: Can it support Virtual private network, VLAN and new tcsh command? It'll do crypto (slowly). You'll need a crypto AIM if you're going to do anything serious with it. Agreed. We had a 2651XM with a single GRE+IPSec tunnel once and it

Re: [c-nsp] Ping priority on Cisco devices

2009-04-08 Thread Oliver Boehmer (oboehmer)
Ruben Alvarez wrote on Wednesday, April 08, 2009 20:04: All, I've heard that Cisco devices handle ICMP at a low priority. I found one post describing it handled in process-switching and not fast-switching. Does anyone have an article that explains that process and is it configurable?

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread Seth Mattinen
A big thank you to everyone who shared their wisdom. I'm going to go back and ask them how they plan on delivering the circuit. If it is TDM all the way up to the building and the difference is purely which card they put in their shelf to hand it off to me, then there's not much point in paying

[c-nsp] DNS Tool

2009-04-08 Thread Mohammad Khalil
Hey all is there any tool that can monitor the DNS behavior ?? for example , the resolving process and if there are any errors ?? Thanks _ Drag n’ drop—Get easy photo sharing with Windows Live™ Photos.

Re: [c-nsp] DNS Tool

2009-04-08 Thread Walter Keen
Could you elaborate a little? We use Nagios to monitor other things, and use a DNS check plugin that simply does a dns query and reports if it successfully got an answer. I think there are other ones that will compare the answer to a known good answer you supply (wouldn't work well with

Re: [c-nsp] DNS Tool

2009-04-08 Thread Dodd, Steven
Without knowing more about what you are specifically trying to accomplish, dig is the tool you are looking for. -Steve -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mohammad Khalil Sent: Wednesday, April 08, 2009 2:40

Re: [c-nsp] Ping priority on Cisco devices

2009-04-08 Thread Ted Mittelstaedt
Ruben Alvarez wrote: All, I've heard that Cisco devices handle ICMP at a low priority. I found one post describing it handled in process-switching and not fast-switching. Does anyone have an article that explains that process and is it configurable? The reason I ask is I see about 4% packet

Re: [c-nsp] DNS Tool

2009-04-08 Thread Mohammad Khalil
We are facing some browsing problems , so we want to make sure that our DNS servers are resolving well using tools other than nslookup Date: Wed, 8 Apr 2009 14:42:50 -0700 From: walter.k...@rainierconnect.net To: eng_m...@hotmail.com CC: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] DNS

Re: [c-nsp] rate limiting pointers?

2009-04-08 Thread Michael Malitsky
Generally speaking, Muhammad is correct. From personal experience, you are going to find a lot of limitations on the switching platform when you try to implement this, though. The switching platforms vary significantly in their abilities to classify traffic and police in different directions.

Re: [c-nsp] DNS Tool

2009-04-08 Thread Peter Rathlev
On Thu, 2009-04-09 at 00:39 +0300, Mohammad Khalil wrote: is there any tool that can monitor the DNS behavior ?? for example , the resolving process and if there are any errors ?? If you want to monitor this from a Cisco device, IP SLA Monitor type dns is the thing to search for. It can do DNS

Re: [c-nsp] Odd Etherchannel behavior between 7507 and cat 4006

2009-04-08 Thread Bill Wichers
[snip] I typically set both ends (router and switch) of these links to 100/full since I've seen weird autonegotiation problems before. This works just fine for individual FE links, but as soon as I bring up the Etherchannel group both member links on the router end drop back to unknown

[c-nsp] Supervisor Failover - Speed question

2009-04-08 Thread Paul Stewart
Hi there. We have 7606's with dual Sup720-3BXL. I'm investigating how to get the fastest possible failover if/when a supervisor fails. Current config looks like this: my state = 13 -ACTIVE peer state = 8 -STANDBY HOT Mode = Duplex Unit = Primary

Re: [c-nsp] T3 or Ethernet delivery?

2009-04-08 Thread David Hughes
On 09/04/2009, at 12:08 AM, Jon Lewis wrote: With BGP, you might tune the timers shorter than default so that such a break gets noticed sooner. With a T3, BGP would find out about the break as soon as the interface went down. BGP with BFD would work well for this. It's not as clean as

Re: [c-nsp] Supervisor Failover - Speed question

2009-04-08 Thread Michael Lee
did you try enable nsf if it is possible? there are some limitation on mpls-te On Wed, Apr 8, 2009 at 4:44 PM, Paul Stewart p...@paulstewart.org wrote: Hi there. We have 7606's with dual Sup720-3BXL. I'm investigating how to get the fastest possible failover if/when a supervisor fails.

Re: [c-nsp] Supervisor Failover - Speed question

2009-04-08 Thread David Prall
Do all linecards also have DFC's? Do you have nsf/graceful-restart configured for all routing protocols? What linecards are you using? David -- http://dcp.dcptech.com -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of

[c-nsp] video,voip and internet over DSL (converged)

2009-04-08 Thread Dracul
Hi list, is it feasible to broadcast video/voip + internet over DSL like lets say I deploy a cisco DSLAM infra in a 20 storey building. It would run over a media server solution and a VOIP network. I am not sure if this would be a stable solution considering I want to broadcast HD and SD alike

Re: [c-nsp] SIP-400 and EoMPLS, VPLS and H-VPLS

2009-04-08 Thread Stephen Fulton
For the archives, the answer from my SE is yes, the SIP-400/SPA-(2|5)X1GE-V2 can appropriate in a core and edge facing role, on a per-port basis. -- Stephen Stephen Fulton wrote: According to the SIP/SPA configuration guide for the 7600, the SIP-400 with a SPA-2X1GE-V2 or a SPA-5X1GE-V2, can

[c-nsp] Odd multicast behavior from an ME3400

2009-04-08 Thread ML
Using an IneoQuest cricket we've been trying to find out why multicast video streams are breaking up. Using an ME3400 as an access device these are our symptoms: 3 x MPEG4 HD streams (8-10MBps each) come through fine. Add one more stream and the Cricket says we've got problems. On aggregate

Re: [c-nsp] Packet Loss on 6513

2009-04-08 Thread Tolstykh, Andrew
What is connected to your SUP-720 Gi7/1 interface? Can you post the output of 'show int gi7/1'? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mesiatowsky, Shawn Sent: Tuesday, April 07, 2009 11:11 AM To:

Re: [c-nsp] video,voip and internet over DSL (converged)

2009-04-08 Thread Aftab Siddiqui
Hello Chris, Before deployment you have to consider certain point: - What flavour of DSL you will be using either ADSL2, ADSL2+ or VDSL. They have different reach and different bandwidth capacity. - What will be used for backhauling the DSLAM to CO. - Will it be internet-TV or IPTV?

[c-nsp] How can enable PfR PIRO function on IOS 12.4(24)T

2009-04-08 Thread Darren Yang
Hi, The Cisco introduced PfR can support OSPF as parent route on IOS 12.4(24)T and this term is PIRO(Protocol Independent Route Optimization). Detail link this: http://www.cisco.com/en/US/docs/ios/oer/configuration/guide/oer-trf_rte_ctl.html#wp1060987 But when I use 12.4(24)T in Cisco 1812