[c-nsp] Re-pack IOS

2009-07-29 Thread Aleksandr Gurbo
I have IOS image(134Mb) with size more then flash(128Mb) size. Does it possible re-pack IOS image on 28xx/38xx/76xx series? -- Alexandr Gurbo ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] Re-pack IOS

2009-07-29 Thread Seth Mattinen
Aleksandr Gurbo wrote: I have IOS image(134Mb) with size more then flash(128Mb) size. Does it possible re-pack IOS image on 28xx/38xx/76xx series? It's already compressed if you have mz in the image name. ~Seth ___ cisco-nsp mailing list

Re: [c-nsp] Freezing counters at 6500

2009-07-29 Thread Gert Doering
Hi, On Tue, Jul 28, 2009 at 11:14:21PM +0200, Grzegorz Janoszka wrote: Have you had similar problems? It is not the big issue, only the graphs look not so nice with the rows of spikes down/up. If there is a simple solution to the problem we would like to know it. Well, I think this is just

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Mark Tinka
On Wednesday 29 July 2009 04:59:46 am Justin Shore wrote: According to a Pannaway SE who visited us a few years ago, he'd seen SPs many times our size who used static routes for everything. He said we weren't big enough to need a routing protocol. Of course he also said that our pipes

Re: [c-nsp] Re-pack IOS

2009-07-29 Thread Aleksandr Gurbo
On Tue, 28 Jul 2009 23:58:13 -0700 Seth Mattinen se...@rollernet.us wrote: Aleksandr Gurbo wrote: I have IOS image(134Mb) with size more then flash(128Mb) size. Does it possible re-pack IOS image on 28xx/38xx/76xx series? It's already compressed if you have mz in the image name.

Re: [c-nsp] VSS question...

2009-07-29 Thread Alan Buxey
Hi, For those of you that have dived into VSS... are you still doing redundant supervisors per chassis? or just duplicating links on each chassis and crossing your fingers? VSS cannot currently support multiple sups in a chassis. which is handy as it means you only need to buy one

Re: [c-nsp] Freezing counters at 6500

2009-07-29 Thread Grzegorz Janoszka
Gert Doering wrote: Well, I think this is just the way this architecture works. The hardware does the actual counting, and every now and then a low-prio process grabs all the counters from the hardware and fills in SNMP variables. Hi, thanks for the answer. Is there any way to somehow

Re: [c-nsp] Re-pack IOS

2009-07-29 Thread Tony
--- On Wed, 29/7/09, Aleksandr Gurbo k...@linkey.ru wrote: I have IOS image(134Mb) with size more then flash(128Mb) size. Does it possible re-pack IOS image on 28xx/38xx/76xx series? My image is c7600s72033-adventerprisek9-mz.122-33.SRD2.bin If it is for the 7600, then you will

Re: [c-nsp] VSS question...

2009-07-29 Thread Seth Mattinen
Alan Buxey wrote: Hi, For those of you that have dived into VSS... are you still doing redundant supervisors per chassis? or just duplicating links on each chassis and crossing your fingers? VSS cannot currently support multiple sups in a chassis. which is handy as it means you

Re: [c-nsp] VPN clients on Cisco ASA

2009-07-29 Thread Gert Doering
Hi, On Tue, Jul 28, 2009 at 02:12:31PM -0700, Randy wrote: 4) Also disable DPD(no isakmp keepalive. Why? I haven't experienced any issues with DPD yet, but I regularily see people recommending to turn off DPD, or blaim other issues (like rekeying doesn't work) on DPD - so I wonder what I'm

Re: [c-nsp] VSS question...

2009-07-29 Thread Alan Buxey
Hi, So, 3750 stack on steroids? not really - with the 3750 you get a 32 or 64Gb backplane stacking mechanism (stckwise or stackwise+) - whereas with VSS its a 10Gb starter... alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Re-pack IOS

2009-07-29 Thread Aleksandr Gurbo
On Wed, 29 Jul 2009 09:32:32 +0100 Peter Hicks peter.hi...@poggs.co.uk wrote: Hello Aleksandr Gurbo wrote: I know, but I know about ability to re-pack IOS on 26xx series( on russian - http://betep.wpl.ru/2009/02/cisco.html). I tried repeat steps for images on 28xx/38xx/76xx series but

Re: [c-nsp] Re-pack IOS

2009-07-29 Thread Peter Hicks
Hello Aleksandr Gurbo wrote: I know, but I know about ability to re-pack IOS on 26xx series( on russian - http://betep.wpl.ru/2009/02/cisco.html). I tried repeat steps for images on 28xx/38xx/76xx series but nothing happened. My image is c7600s72033-adventerprisek9-mz.122-33.SRD2.bin You

Re: [c-nsp] VPN clients on Cisco ASA

2009-07-29 Thread Oddiraju, Kiran @ London SMC
I changed the default-group-policy to Kiran-CUCM-VPN and now I am able to VPN in to my network. Thanks Ryan and everyone for your help Regards, Kiran -Original Message- From: Ryan West [mailto:rw...@zyedge.com] Sent: 28 July 2009 15:18 To: Oddiraju, Kiran @ London SMC Cc:

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Eric Van Tol
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Justin Shore Sent: Tuesday, July 28, 2009 5:00 PM To: Ivan Pepelnjak Cc: cisco-nsp@puck.nether.net; 'Hank Nussbacher' Subject: Re: [c-nsp] Humor: Cisco announces end

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread TJ
From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Eric Van Tol From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Justin Shore IPv6 was just a fad and would never be adopted in the US. Sadly, he's not

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Jonathan Brashear
You guys need to get on the ARIN list and say that. I'll make the popcorn. :) Network Engineer, JNCIS-M 214-981-1954 (office) 214-642-4075 (cell) jbrash...@hq.speakeasy.net http://www.speakeasy.net -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] VPN clients on Cisco ASA

2009-07-29 Thread Ryan West
Randy,   5) the outside acl is wide-open(with permit ip any any) Recommend locking it down. for vpn, allow tcp 50 and udp 500 to the outside int from any unless sysopt conn ipsec permit is enabled.   6) Probable would be a good idea to replace ip's with x.x.x.x when posting configs on a public

[c-nsp] ISP in US

2009-07-29 Thread Andy William
Dear All I need your advice , we'll open an office in Washinghton DC and will need a reliable internet connection between US office and our office in middle east to transport data and vidoe confernce traffic according to your experince with ISPs in US , what is the best ISP that can offer

Re: [c-nsp] Re-pack IOS

2009-07-29 Thread Richard A Steenbergen
On Wed, Jul 29, 2009 at 01:19:16PM +0400, Aleksandr Gurbo wrote: On images for 26xx series it is possible re-pack IOS, you can try yourself. I don't know about re-pack operations on images for 28xx/38xx/76xx series, may be new degree of protection or new methods of compression are used. Sure,

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Eric Van Tol
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of TJ Sent: Wednesday, July 29, 2009 7:09 AM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Humor: Cisco announces end of BGP From:

Re: [c-nsp] ISP in US

2009-07-29 Thread Jeff Wojciechowski
Andy: I am told Level 3 is to have it by the end of the year. Not sure on their middle east connections but since they own AS #1 my guess is they have pretty good connectivity everywhere. We are looking to use 2 internet connections as a failover route for our corporate VoIP - they said as

[c-nsp] High CPU usage on 3640

2009-07-29 Thread Robert Johnson
Hello list, I would appreciate any help with going through the following configuration and making suggestions to reduce CPU usage on this router. The example router is a 3640 with a single FE interface run to a 2924 switch. It is loaded at peak times with less than 2000 PPS and 9 Mbps aggregate on

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread TJ
-Original Message- From: Eric Van Tol [mailto:e...@atlantech.net] boun...@puck.nether.net] On Behalf Of Justin Shore IPv6 was just a fad and would never be adopted in the US. Sadly, he's not too far off on this one. Totally disagree, but I might also be biased ... in several cases

Re: [c-nsp] High CPU usage on 3640

2009-07-29 Thread Mikael Abrahamsson
On Wed, 29 Jul 2009, Robert Johnson wrote: Suggestions? Please provide output from show int switching (not tab-completable) to verify that all traffic is cef switched. -- Mikael Abrahamssonemail: swm...@swm.pp.se ___ cisco-nsp mailing list

[c-nsp] Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities

2009-07-29 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software Border Gateway Protocol 4-Byte Autonomous System Number Vulnerabilities Advisory ID: cisco-sa-20090729-bgp http://www.cisco.com/warp/public/707/cisco-sa

[c-nsp] policing question

2009-07-29 Thread Leslie Meade
I have a question, I have over 50 vlans and each needs to be policed at different speeds. I have a cat 6509 with sup32's Creating access-lists, class maps etc. are no issues for me. To my understanding that I can only police in one direction on any given interface. So I put a service-policy

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Robert VanOrmer
Verizon: IPv6! We do have a IPv6 transport from Verizon, granted. (1) good luck globally routing your /48 outside of VZB land, they won't do it unless your providing a /32, and if you have been delegated any address space from an RIR, (2) good luck getting delegated addressing from Verizon's

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Gert Doering
Hi, On Wed, Jul 29, 2009 at 10:32:24AM -0400, TJ wrote: Verio: IPv6! And therein lies the rub. The objection was to never be adopted ... I know several of the above (and other large carriers you omitted) have started deploying it, but started deployment != commercially available. (i.e. -

Re: [c-nsp] Freezing counters at 6500

2009-07-29 Thread Kevin Loch
Grzegorz Janoszka wrote: Hi, We have several 6500's, some of them heavily loaded. We use snmp to graph traffic on all interfaces - just the simplest solution. Since some time we have had an issue with the interface counters. When the CPU box is really loaded (usually synchronization of BGP

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Eric Van Tol
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Gert Doering Sent: Wednesday, July 29, 2009 11:47 AM To: TJ Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Humor: Cisco announces end of BGP Actually, NTT/Verio

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Simon Lockhart
On Wed Jul 29, 2009 at 12:11:59PM -0400, Eric Van Tol wrote: This is true, but they are the only provider that we have run up against that actually charges *extra* for v6, at outrageous per-meg rates. Last quote I got was two years ago, so perhaps things have changed. We've been running IPv6

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread TJ
And therein lies the rub. The objection was to never be adopted ... I know several of the above (and other large carriers you omitted) have started deploying it, but started deployment != commercially available. (i.e. - not easy to request. And for today, I totally agree ... that is why I

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Eric Van Tol
-Original Message- From: Simon Lockhart [mailto:si...@slimey.org] Sent: Wednesday, July 29, 2009 12:26 PM To: Eric Van Tol Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Humor: Cisco announces end of BGP We've been running IPv6 with Level3 and NTT/Verio for a while now, and

Re: [c-nsp] Re-pack IOS

2009-07-29 Thread Doug McIntyre
On Wed, Jul 29, 2009 at 01:19:16PM +0400, Aleksandr Gurbo wrote: Thank you, Peter, for you wide answer, but my question is previous. I explain. I want unpack image and pack again image, but with better parametres of compression. So I can receive image with size less, then I have. After this

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread David Freedman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Good point ... in fact, we had NTT/Verio for a bit. Wish we still did (even if they were doing the whole /126 on point to point links think). (I meant to include that some carriers do fully offer IPv6 today, but somehow edited that out ... my

Re: [c-nsp] High CPU usage on 3640

2009-07-29 Thread Robert Johnson
Here is what Michael and I have determined: In the past hour, only about 0.3% of IP traffic has been process switched. Where should I look next? Here is a sho int switching and sho cef not-cef-switched from this morning: routersho cef not CEF Packets passed on to next switching layer Slot

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Gert Doering
Hi, On Wed, Jul 29, 2009 at 12:47:15PM -0400, Eric Van Tol wrote: Last time I looked into it with Verio, they wanted close to $50/Meg on a 5M commit, plus an additional MRC of $500 for IPv6. Which doesn't really make very much sense, indeed. All our upstreams treat bits as bits, no matter

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread TJ
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of David Freedman Good point ... in fact, we had NTT/Verio for a bit. Wish we still did (even if they were doing the whole /126 on point to point links think). (I meant to

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Seth Mattinen
Robert VanOrmer wrote: Verizon: IPv6! We do have a IPv6 transport from Verizon, granted. (1) good luck globally routing your /48 outside of VZB land, they won't do it unless your providing a /32, and if you have been delegated any address space from an RIR, (2) good luck getting

[c-nsp] BFD + BGP on 7600 SRC or SRD

2009-07-29 Thread Walter Keen
Hi, I'm looking at using BFD with BGP on 7600's (rsp720's and sup720-3b) and was wondering if there were any known issues with certain IOS's in the SRC or SRD train. -- Walter Keen Network Technician Rainier Connect ___ cisco-nsp mailing list

Re: [c-nsp] VPN clients on Cisco ASA

2009-07-29 Thread Randy
Gert,   1) DPD on site-to-site vpn tunnels: I have used regularly and without issues.(dpd b/w cisco and 3com wouldn't work unless it has been fixed recently) 2) DPD with cisco VPN clients-to-ASA: I have had issues with.(on older versions of vpn clients). Regards, ./Randy --- On Wed, 7/29/09,

Re: [c-nsp] BFD + BGP on 7600 SRC or SRD

2009-07-29 Thread Mikael Abrahamsson
On Wed, 29 Jul 2009, Walter Keen wrote: Hi, I'm looking at using BFD with BGP on 7600's (rsp720's and sup720-3b) and was wondering if there were any known issues with certain IOS's in the SRC or SRD train. SRC4 is has memory corruption bug with BFD running, this is a crash and reload type

[c-nsp] Manually set WS-X6148-GE-TX MTU size (1500, 1518)

2009-07-29 Thread falz
Specs on WS-X6148-GE-TX say there is a maximum MTU of 1518: http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/product_data_sheet0900aecd8017376e_ps4835_Products_Data_Sheet.html However, on a 6500 running SXH, it will not let me use the mtu command to adjust. I am trying to up the

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Rubens Kuhl
Hank, Any news on what exactly was EOL'ed ? Rubens On Tue, Jul 28, 2009 at 4:50 AM, Hank Nussbacher h...@efes.iucc.ac.il wrote: I just got this product alert from Cisco: From: cisconotificationserv...@cisco.com To: h...@efes.iucc.ac.il Subject: Cisco Notification Alert

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Hank Nussbacher
At 15:36 29/07/2009 -0300, Rubens Kuhl wrote: Hank, Any news on what exactly was EOL'ed ? I think it was a mistake on their part. -Hank Rubens On Tue, Jul 28, 2009 at 4:50 AM, Hank Nussbacher h...@efes.iucc.ac.il wrote: I just got this product alert from Cisco: From:

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Michael K. Smith - Adhost
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Seth Mattinen Sent: Wednesday, July 29, 2009 11:04 AM To: Robert VanOrmer Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Humor: Cisco announces end of BGP

[c-nsp] OT: Network Automation in an MSP ?

2009-07-29 Thread kevin gannon
I would love to hear from anyone using HP NAS in a MSP/Multi tenant setup offline ? Or anyone else doing configuration/provisioning/software management in a MSP setup ? Thanks and regards Kevin ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread sthaug
My feeling is based on two things: I don't like the idea of vendors/providers ignoring an RFC just because. And note the RFC in question leaves no wiggle room here. Please cite chapter and verse. As long as you use static IPv6 addresses, /126 is fine. No, a /126 address does *not* have

Re: [c-nsp] BFD + BGP on 7600 SRC or SRD

2009-07-29 Thread Raymond, Steven
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Walter Keen Sent: Wednesday, July 29, 2009 11:04 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] BFD + BGP on 7600 SRC or SRD Hi, I'm looking at using BFD with BGP

[c-nsp] ASA5500 logging / diagnostic question.

2009-07-29 Thread Scott Granados
Hi, I have what's probably an obvious question but googling isn't returning an obvious answer. I'm installing a pair of new ASA5500 devices for the purposes of providing VPN connectivity to users running the Cisco VPN Client and also two lan to lan sessions. When I try to connect from a

Re: [c-nsp] ASA5500 logging / diagnostic question.

2009-07-29 Thread Ryan West
Scott, If you want debug on a temporary basis for that traffic, you can try 'deb cry isa 2' (or higher than 2, but normally that's enough). Another option is to use logging classes to troubleshoot just the VPN. Here is an example: logging class vpn monitor debugging Assuming you have

[c-nsp] 3750 switch dropping packets when trust dscp enabled

2009-07-29 Thread Lobo
I've been testing our different model of switches to allow for DSCP transparency by using the mls qos trust dscp command on their interfaces. All of the switches seem to support this properly and I can tell when they're overwriting versus allowing the DSCP to continue through but I came

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Kevin Loch
TJ wrote: -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of David Freedman And what, prey tell is wrong with /126 on point to point links, you want to use SLAAC between routers? Nothing is wrong, per se. It certainly

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Seth Mattinen
Michael K. Smith - Adhost wrote: -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Seth Mattinen Sent: Wednesday, July 29, 2009 11:04 AM To: Robert VanOrmer Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Humor:

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Buhrmaster, Gary
At 15:36 29/07/2009 -0300, Rubens Kuhl wrote: Hank, Any news on what exactly was EOL'ed ? I think it was a mistake on their part. When I saw it I thought it was one of the (various) license options that we all (were supposed to have) bought to run BGP on certain boxes, and that Cisco has

[c-nsp] Question CISCO3845-V/K9 Voice Bundle

2009-07-29 Thread Nathaniel Bernadeau
Does anyone know how many PVDM2-64 comes with this unit? What is the total number of voice channels included in this unit? -- regards, Nathaniel Bernadeau Gallant Systems, LLC 11064 Livingston RD Suite 106-C Fort Washington, MD 20744 Toll Free: 888-836-3751 Ph: 301-627-6358 Fax: 240-823-6897

[c-nsp] DMVPN and OSPF

2009-07-29 Thread Jay Nakamura
Has anyone seen this symptom? 1841, advanced IP feature set DMVPN spoke and OSPF over the DMVPN Running 12.4(24)T Periodically, the router looses all it's OSPF routes and stays that way. Clearing the DMVPN or OSPF process does nothing. It recreates the OSPF session with neighbor but it still

Re: [c-nsp] Question CISCO3845-V/K9 Voice Bundle

2009-07-29 Thread Ryan West
Hi, The bundle ships one PVDM2-64 base. CISCO3845-V/K9 3845 Voice Bundle,PVDM2-64,SP Serv,64F/256D -ryan -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Nathaniel Bernadeau Sent: Wednesday, July 29, 2009 4:41 PM To:

Re: [c-nsp] DMVPN and OSPF

2009-07-29 Thread Seth Mattinen
Jay Nakamura wrote: Has anyone seen this symptom? 1841, advanced IP feature set DMVPN spoke and OSPF over the DMVPN Running 12.4(24)T Periodically, the router looses all it's OSPF routes and stays that way. Clearing the DMVPN or OSPF process does nothing. It recreates the OSPF

Re: [c-nsp] Freezing counters at 6500

2009-07-29 Thread Grzegorz Janoszka
Kevin Loch wrote: Try adjusting 'service counters max age' to zero if you haven't already. It has not changed anything. As others have pointed out a delay of 3-4 minutes is not normal What does your SP (not RP) cpu usage look like? Try disabling netflow if your SP cpu usage is maxing out.

[c-nsp] CISCO AS5300 Shuts Down Abruptly

2009-07-29 Thread Teddy A.
Hi, I have been struggling with this issue for almost 10 days now. I have a Cisco AS5300 which is being used as an NAS for Dialup and ISDN clients. A few days back it shut down abruptly and I had to pull out the power cord from the back and plug it back in again to start it up, since then now it

Re: [c-nsp] VSS question...

2009-07-29 Thread Aaron Spitz
It's a 20Gb starter if you use both 10G ports on each sup, which has worked fine for us with relatively light use. According to the sales pitch, it is also trivial to bond up to eight ports from a 10G line card to increase the backplane between chassis. We installed VSS as a datacenter core

Re: [c-nsp] CISCO AS5300 Shuts Down Abruptly

2009-07-29 Thread Jon Lewis
On Wed, 29 Jul 2009, Teddy A. wrote: Hi, I have been struggling with this issue for almost 10 days now. I have a Cisco AS5300 which is being used as an NAS for Dialup and ISDN clients. A few days back it shut down abruptly and I had to pull out the power cord from the back and plug it back in

Re: [c-nsp] 3750 switch dropping packets when trust dscp enabled

2009-07-29 Thread Brad Henshaw
Lobo wrote: I setup a traffic generator to send 95Mbps of traffic with DSCP EF (46) across the different switches but when it hit the 3750, the egress traffic was only ~4Mbps. After reading up a bit, I found a command srr-queue bandwidth shape that I could apply to the interfaces. After

Re: [c-nsp] DMVPN and OSPF

2009-07-29 Thread Rodney Dunn
OSPF and DMVPN can be a bit funky. Did you force the DR to be the hub by setting the priority? I forgot, did you set it to broadcast or multipoint? I'd suggest you look at the packet capture feature and get a trace when it's down. Do you see the LSA's in the database? Can you ping 224.0.0.5

Re: [c-nsp] DMVPN and OSPF

2009-07-29 Thread Jay Nakamura
Did you force the DR to be the hub by setting the priority? Yes. And confirmed. I forgot, did you set it to broadcast or multipoint? broadcast I'd suggest you look at the packet capture feature and get a trace when it's down. Is this what you are referring to?

Re: [c-nsp] BFD + BGP on 7600 SRC or SRD

2009-07-29 Thread Justin Shore
Walter Keen wrote: Hi, I'm looking at using BFD with BGP on 7600's (rsp720's and sup720-3b) and was wondering if there were any known issues with certain IOS's in the SRC or SRD train. BFD support for SVIs was removed with SRB2 if that's something that you think you'll need. Justin

Re: [c-nsp] CISCO AS5300 Shuts Down Abruptly

2009-07-29 Thread Justin Shore
Jon Lewis wrote: If by shut down, you mean all the lights go out, fans stop, etc., then it sounds like you may have a power supply gone bad. If you mean it stops working, but lights are on, fans are spinning, just the software's locked up, then it be all sorts of things. If it's doing either

[c-nsp] Balancing T1's with CEF

2009-07-29 Thread Security Team
I rebooted a 7507 router that had a site connected with 3 T1's and now all the traffic is nailing one line instead of being distributed over all 3 using the static routes/CEF. I did look at the Cisco troubleshooting tips but didn't see anything immensely helpful. Here is a config snippet on the

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Mark Tinka
On Thursday 30 July 2009 03:06:10 am Kevin Loch wrote: Lots of folks, myself included use /112 for point to point links, server only subnets and just about anything that doesn't require RA's (which is almost everything in a hosting environment). /112 is a convenient bit boundary to work

Re: [c-nsp] BFD + BGP on 7600 SRC or SRD

2009-07-29 Thread Mark Tinka
On Thursday 30 July 2009 02:16:38 am Mikael Abrahamsson wrote: SRC4 is has memory corruption bug with BFD running, this is a crash and reload type of bug. SRC5 fixes a somewhat similar issue for the NPE-G1 (after so much bi**ing moaning, since SRC). Not sure if this affects the 7600. Last