[c-nsp] Cisco Catalyst 2960PD-8TT-L

Hi All, I can't seem to find more information of this model in the datasheets. Can anyone confirm if this switch (Cisco Catalyst 2960PD-8TT-L) has CLI and SNMP? regards, chris ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Cisco Catalyst 2960PD-8TT-L

Yes and yes. -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Dracul Sent: Monday, 27 July 2009 3:35 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Cisco Catalyst 2960PD-8TT-L Hi All, I can't seem to find more

[c-nsp] L2TPv3 Tunnel bandwidth and QoS

Hi all, I'd like to know if there is a feasible way to guarantee QoS for an L2TPv3 tunnel My customer has a 13Mb uplink to the internet and we've set a tunnel between customer's router and one of our routers, we want to perform some settings on his side that will assure the L2TP tunnel gets

[c-nsp] 6500 ARPing behaviour

Hi All, Recently we are seeing some unusual behaviour with one of our 6500 switches, where it is broadcasting ARPs for every IP address sequentially within the subnet of one of the SVIs every now and then. There are two streams of sequential broadcasts that I can see, with one starts a few

[c-nsp] C6K VSS outage after forced SSO switchover

Hello all, We've got a Cisco 6509 VSS deployment at a new data centre running 12.2(33)SXI1. The DC itself isn't live yet so we were doing some final resilience testing, which involved forcing a node fail over to record what traffic loss if any we were to experience if a node fails. We had

[c-nsp] VPN clients on Cisco ASA

Hi List, Cisco ASA 5505 Cisco VPN Client 5.0 ASA External IP: 80.90.100.117 /29 Internal range: 192.168.0.0 /24 I am new to Cisco ASA world and have been struggling to configure my 5505 to accept VPN connections from external hosts. I want to allocate IP address dynamically, allow

Re: [c-nsp] VPN clients on Cisco ASA

Hi, I am new to Cisco ASA world and have been struggling to configure my 5505 to accept VPN connections from external hosts. I want to allocate IP address dynamically, allow access to certain subnets and allow internet access thru their local connection. Can someone please post me a sample

Re: [c-nsp] 6500 ARPing behaviour

Make sure you don't have local proxy-arp enabled on the SVI. Jeff Fitzwater OIT Network Systems Princeton University On Jul 27, 2009, at 4:27 AM, PW wrote: Hi All, Recently we are seeing some unusual behaviour with one of our 6500 switches, where it is broadcasting ARPs for every IP

Re: [c-nsp] VPN clients on Cisco ASA

Hello again Kiran, I think you should take a quick read through the following link. You can use the ASDM Remote Access VPN wizard to configure most of the settings and if you're interested in doing it via CLI, that's also an option.

Re: [c-nsp] L2TPv3 Tunnel bandwidth and QoS

Ziv, You should be able to match the tunnel by matching it's IP endpoints. If you could share more info about your QOS requirements, I could assist with building the policy. Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On

Re: [c-nsp] Cisco Catalyst 2960PD-8TT-L

Dracul wrote: Hi All, I can't seem to find more information of this model in the datasheets. Can anyone confirm if this switch (Cisco Catalyst 2960PD-8TT-L) has CLI and SNMP? The only Cisco-branded switches in the product line that won't have have a CLI are the Express switches. This of

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers Advisory ID: cisco-sa-20090727-wlc http://www.cisco.com/warp/public/707/cisco-sa-20090727-wlc.shtml Revision 1.0 For Public Release 2009 July 27 1600 UTC (GMT

Re: [c-nsp] Cisco Catalyst 2960PD-8TT-L

On 27/07/2009 17:39, Justin Shore wrote: The only Cisco-branded switches in the product line that won't have have a CLI are the Express switches. This of course means that the LinkSys switches won't have a Cisco CLI (if they have one at all which I doubt). http://lcli.wikidot.com/ Nick

Re: [c-nsp] 6500 ARPing behaviour

PW wrote: Hi All, Recently we are seeing some unusual behaviour with one of our 6500 switches, where it is broadcasting ARPs for every IP address sequentially within the subnet of one of the SVIs every now and then. There are two streams of sequential broadcasts that I can see, with one

Re: [c-nsp] 6500 ARPing behaviour

Patrick, Do you happen to have a route pointing to this SVI interface? Like x.x.x.x x.x.x.x vlan 10. If so this will cause the behavior that you are seeing. Ronnie Date: Mon, 27 Jul 2009 18:27:16 +1000 From: PW pwu...@gmail.com To:

[c-nsp] mapping CPU IDs to reality

Hi folks - I don't have fancy Ciscoware, I'm just using RTG to poll my 6500s. Snmpwalk reports 4 different CPUs, indexes 1001, 2017, 2001, 3001. Box has: Slot 1: Sup720-3B Slot 2: sup720-3B Slot 3: 6816A, DFC3B I am *guessing* that index x001 is the switch processor, and x017 is the route

Re: [c-nsp] Monitoring BGP with NAGIOS

Ian: Thanks for your input. I agree, snmptraps are the next obvious step. The URL you provided was the one I refered to when looking through the results of my walk through Cisco's BGP MIB. =) Since my upstream monitors our edge routers, including BGP, the monitoring is more to document that

Re: [c-nsp] mapping CPU IDs to reality

Use the Entity MIB to map physical to index. Jeff Fitzwater OIT Network Systems Princeton University On Jul 27, 2009, at 2:14 PM, Jeff Bacon wrote: Hi folks - I don't have fancy Ciscoware, I'm just using RTG to poll my 6500s. Snmpwalk reports 4 different CPUs, indexes 1001, 2017, 2001,

Re: [c-nsp] mapping CPU IDs to reality

On Mon, Jul 27, 2009 at 01:14:39PM -0500, Jeff Bacon wrote: I am *guessing* that index x001 is the switch processor, and x017 is the route processor. Strangely, the first digit doesn't line up with the slot/module # - CPU 1001 is clearly the DFC (continuous 80% CPU, all in lcp scheduler -

Re: [c-nsp] mapping CPU IDs to reality

Jeff, You might try walking these MIBs: $oid = array ( array (cpuIndex, .1.3.6.1.4.1.9.9.109.1.1.1.1.2), array (cpuDescr, .1.3.6.1.2.1.47.1.1.1.1.7), array (cpu_1min, .1.3.6.1.4.1.9.9.109.1.1.1.1.7), array (cpu_5min, .1.3.6.1.4.1.9.9.109.1.1.1.1.8)); This is from

Re: [c-nsp] Monitoring BGP with NAGIOS

Thanks. I had compiled RFC1213-MIB into my MIB browser, but not BGP4-MIB. Once I did, it was all there The stuff at NAGIOS exchange left me wanting, which is why I'm fleshing out my own. Frank -Original Message- From: nicot...@radiological.warningg.com

Re: [c-nsp] Cisco Catalyst 2960PD-8TT-L

Nick Hilliard wrote: On 27/07/2009 17:39, Justin Shore wrote: The only Cisco-branded switches in the product line that won't have have a CLI are the Express switches. This of course means that the LinkSys switches won't have a Cisco CLI (if they have one at all which I doubt).

Re: [c-nsp] Cisco Catalyst 2960PD-8TT-L

On Mon, Jul 27, 2009 at 01:57:29PM -0500, Justin Shore wrote: Nick Hilliard wrote: On 27/07/2009 17:39, Justin Shore wrote: The only Cisco-branded switches in the product line that won't have have a CLI are the Express switches. This of course means that the LinkSys switches won't have a

Re: [c-nsp] Cisco Catalyst 2960PD-8TT-L

On 27/07/2009 19:57, Justin Shore wrote: Interesting. So they don't have a Cisco CLI but they have an otherwise limited CLI if you know the tricks to get into it. I don't think that will be helpful in RANCID though. I don't think I can make it jump through all the hoops necessary to get logged

[c-nsp] CISCO-IETF-IP-FORWARD-MIB on SXF

Hey all, Everytime I need to programmatically lookup prefixes in the routing table on our 6500s, I try to find a better MIB than I use today. Today, I discovered CISCO-IETF-IP-FORWARD-MIB - a pre-standard IP-FORWARD-MIB that lives under ciscoExperimental. It's listed in Cisco IOS MIB Locator as

Re: [c-nsp] CISCO-IETF-IP-FORWARD-MIB on SXF

On Mon, Jul 27, 2009 at 09:25:37PM +0100, Ross Vandegrift wrote: Hey all, Everytime I need to programmatically lookup prefixes in the routing table on our 6500s, I try to find a better MIB than I use today. Today, I discovered CISCO-IETF-IP-FORWARD-MIB - a pre-standard IP-FORWARD-MIB that

[c-nsp] BGP Multipath and unequal IGP metrics

Hi I have a situation that looks like a problem in the making. In a subset of our network there's a pair of well connected datacentres (eg dual 10GE paths etc). One of our upstreams will shortly be presenting a transit path at both of these 2 locations. No problems I think to myself -

[c-nsp] PBR on ME3400

Has anyone on the list tried to perform PBR on the ME3400 while setting next hop to an IP at the far end of a GRE tunnel? I was attempting this today and the ME3400 seemed to ignore my PBR wishes. If the next hop was an IP off a routed port everything was ok. I had sdm prefer default IOS

Re: [c-nsp] 6500 ARPing behaviour

Thank you all, I have checked the captured traffic (not just ARP traffic) on the host, but nothing relevant except the ARP response... I will proceed to check the cache flows the next time it happens, but last time I checked there's nothing really stands out, but then I didn't have all the

Re: [c-nsp] PBR on ME3400

My guess is it would require set ip next-hop recursive to work even on an hypothetical platform that support such thing. Rubens On Mon, Jul 27, 2009 at 9:12 PM, MLm...@kenweb.org wrote: Has anyone on the list tried to perform PBR on the ME3400 while setting next hop to an IP at the far end

Re: [c-nsp] 6500 ARPing behaviour

Sounds like maybe a line card resetting itself. Enable as much logging as possible and examine them. -- Randy \ -- Original Message --- From: PW pwu...@gmail.com To: Whitlock, Ronnie ucs_...@shsu.edu Cc: cisco-nsp@puck.nether.net cisco-nsp@puck.nether.net Sent: Tue, 28 Jul