[c-nsp] 3800 - HSRP/ARP issue

Hi All, Just came up against a bit of a weird issue and would appreciate some advice/input. Basic environment of two 3800s c3845-advipservicesk9-mz.124-21a. operating HSRP and plugging into a layer 2 switch network where servers connect (there are only 2-3 servers attached to two switches at

Re: [c-nsp] Policing on a 3560

I had the same problem when trying to police L2 traffic and I've been told to use the dscp default to match all traffic You don't need to qualify it, it is already default, so why setting it again? This is what you should try based on what I use and it works fine: ! Don't forget to set this

Re: [c-nsp] OT: Sniffing TCP connection quality

Thank you all for the pointers. Tcptrace does seem quite interesting, even though it doesn't seem to be actively maintained since 2004. I had of course overlooked Arbor Peakflow SP which seems very interesting. Would there happen to be anybody on this list using Peakflow for quality analysis? Any

Re: [c-nsp] IS-IS route separation/filtering

On Wed, 2009-08-05 at 15:02 -0700, Jared Gillis wrote: Hm, interesting though. Unfortunately, it doesn't seem to pan out in the lab. The LSPs don't seem to get flooded, but the routes do get passed through Router A to all the stub routers, regardless of how I set up the mesh-groups. right.

[c-nsp] Single LNS, two providers

Hi, We have an LNS (7200) configured for DSL from one provider, we wish to keep this provider, however they only offer us DSL1, but we are negotiating with another wholesaler to supply us with ADSL2+ (only) . My question is how easy is it to have this single LNS server to service all customers

[c-nsp] Deny Default Route Propagation

hello, In OSPF, how can I filter the default route from being propagated out in the same area? I want to deny the external default route in outbound routes so other routers in the same area doesn't accept the default route from that router. Thank you, Manaf

Re: [c-nsp] 3750 Suggestions?

use the desktop vlan template -- From: Carl Jones c...@outerloop.net Sent: Thursday, August 06, 2009 4:21 AM To: cisco-nsp cisco-nsp@puck.nether.net Subject: [c-nsp] 3750 Suggestions? Hi all, I'm looking for something suitable to take the load

Re: [c-nsp] Single LNS, two providers

why you don't configure another vpdn-group with another virtual-template interface? it should be working very well! -- From: Ed Lazerus edlazeru...@gmail.com Sent: Thursday, August 06, 2009 2:50 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp]

Re: [c-nsp] Monitoring VPN User on ASA

http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?objectInput=1.3.6.1.4.1.9.9.392.1.3.21.1.1translate=TranslatesubmitValue=SUBMITsubmitClicked=true Permission: not-accessible -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On

Re: [c-nsp] 3750 Suggestions?

It'll give for more mac space , but you'll have the same problem with routes. Vlan is basically a layer 2 only template so all your ip routes with not be hardware forwarded. For this you'd need an external router.You could try and take a 3750 out of the stack and use it as the router , the

Re: [c-nsp] Deny Default Route Propagation

http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/routmap.html Manaf Al Oqlah wrote: hello, In OSPF, how can I filter the default route from being propagated out in the same area? I want to deny the external default route in outbound routes so other routers in the same area doesn't

Re: [c-nsp] Monitoring VPN User on ASA

I use a script that logs on to the ASA runs a cmd and exports the result as a data source within cacti. It works quite well for overall avg statistics. Sent from my iPod Touch. On 06/08/2009, at 8:56 PM, Bagosi Rómeó bagosi.ro...@iqsys.hu wrote:

[c-nsp] tcam exhaustion for netflow vacl capture for cat6500

on 6500 with 3bxl sup720: will concurrent use of ( 10K) netflow exports ( 10Gb/s) vacl caputure exhaust tcam more quickly than each by itself? how do I monitor this? how do I check status? Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota |

Re: [c-nsp] multipath BGP not balancing equally.

I don't disagree. It was a good theory though. Rodney David Hughes wrote: Hi But seeing as the OP indicated that one of the circuits was 2GB *underutilised* you'd be looking for 3 src/dst pairs that were all doing 2GB to get this situation. It's looking pretty unlikely that this is a

Re: [c-nsp] 7513 multilink interface issue

sh contr cbus | incl 1/0:14|1/0:15 Todd wrote: Currently running Version 12.4(23). I may upgrade to (25) to see if that helps at all. VIP Console: VIP-Slot5sh ppp multilink dmlp_ipc_config_count 210 dmlp_bundle_count 4 Bundle Multilink75, 2 members bundle 0x61B1C3A0, frag_mode 0 tag

Re: [c-nsp] OT: Sniffing TCP connection quality

Peter, (not to hijack the thread, just to comment on tcptrace) On Thu, 6 Aug 2009, Peter Rathlev wrote: Thank you all for the pointers. Tcptrace does seem quite interesting, even though it doesn't seem to be actively maintained since 2004. At the IETF in Stockholm I had a chat with one of

Re: [c-nsp] Freezing counters at 6500

Kevin Loch wrote: Try adjusting 'service counters max age' to zero if you haven't already. As others have pointed out a delay of 3-4 minutes is not normal What does your SP (not RP) cpu usage look like? Try disabling netflow if your SP cpu usage is maxing out. Are there any snmp oids we can

Re: [c-nsp] 7513 multilink interface issue

No output from the command. summit#sh contr cbus | incl 1/0:14|1/0:15 summit# I also upgrade to 12.4(25) last night and no change in the issue. The same issue still remains. -Original Message- From: Rodney Dunn [mailto:rod...@cisco.com] Sent: Thursday, August 06, 2009 9:47 AM To: Todd

Re: [c-nsp] Counters for null0?

BGP shows up on our 7200s as Local (addresses changed): Cisco-7200sh ip cache flow | inc 00B3 Gi0/3.123 100.100.10.219 Local 100.100.10.200 06 8355 00B365 EIGRP is Null, though: Cisco-7200sh ip cache flow | inc 224.0 Gi0/1.11 100.100.10.111 Null 224.0.0.10

Re: [c-nsp] Deny Default Route Propagation

Just make sure you configure the distribute-list in on ALL OTHER routers in the area, otherwise you'll get some hard-to-troubleshoot loops or blackholes. Ivan http://www.ioshints.info/about http://blog.ioshints.info/ -Original Message- From: Gergely Antal [mailto:sk...@skoal.name]

Re: [c-nsp] Deny Default Route Propagation

Can't you do a distribute-list out on the ABR/ASBR whichever the router is? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Ivan Pepelnjak Sent: Thursday, August 06, 2009 12:01 PM To: sk...@skoal.name; 'Manaf Al Oqlah'

Re: [c-nsp] 7513 multilink interface issue

Can you get me remote access to it to look? You can use the ip of: 64.100.21.4 if you want to punch a hole for me. Just get sh contr cbus. The | probably didn't match the exact interface number correctly. Todd wrote: No output from the command. summit#sh contr cbus | incl 1/0:14|1/0:15

[c-nsp] Cisco 7206 - IOS version for L2TPV3

Hi, We are trying to upgrade IOS on a Cisco 7206VXR (NPE-G1) processor (revision B) with 983040K/65536K bytes of memory. Currently running Version 12.3(13a), RELEASE SOFTWARE (fc2) but we need L2TPv3 functionality to configure a xconnects using a pw-class statement. We tried running Version

[c-nsp] soft-disco/redirection

We're trying to formulate a plan to do a soft-disconnect or redirect users to a site where they can pay their bill online to get reconnected when they get disconnected for billing. Mostly we're talking about either bridged or pppoa dsl customers, or cablemodem customers. Using 7204's and

Re: [c-nsp] VSS 1440 issues

Hi,   Thank you for your advice, however, increasing the timers did not work.   I powered down the active linecards from switch 2 yesterday to see if it stopped the unicast flood, which it did.   Today I increased the mac address syncronisation activity time to 640 and the mac address

Re: [c-nsp] Deny Default Route Propagation

No, you cannot control the LSA flooding (apart from blocking the flooding over a particular interface). All LSAs still get to all the routers (this is what you've asked for: OSPF is a link-state protocol :), but you can control which of the best OSPF routes get inserted in the IP routing table

Re: [c-nsp] IS-IS route separation/filtering

Daniel Verlouw wrote: On Wed, 2009-08-05 at 15:02 -0700, Jared Gillis wrote: Hm, interesting though. Unfortunately, it doesn't seem to pan out in the lab. The LSPs don't seem to get flooded, but the routes do get passed through Router A to all the stub routers, regardless of how I set up the

Re: [c-nsp] Free NMS Tools

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Sorry for the late follow-up on this, Saku Ytti wrote: Other thing that annoys me is how SNMP pollers are implemented, they're blocking, giving sucky performance on misbehaving or down nodes. Oh I agree, most of the free NMS systems out

Re: [c-nsp] IS-IS route separation/filtering

Here's a thought: If I change Router A to L2 and Routers B and C to L2/L1, I can put B and C in different areas, but because they are L2/L1, they learn all the routes to all the areas, just as L2 routes instead of L1 routes. This gets me each stub router and everything behind it into different

Re: [c-nsp] Single LNS, two providers

Hi, On Thu, Aug 06, 2009 at 09:50:28PM +1000, Ed Lazerus wrote: Is it a mater of duplicating the following? Basically, yes. Add a new vpdn-group, and (optionally) a new virtual-template. gert -- USENET is *not* the non-clickable part of WWW!

[c-nsp] IPSLAs with OpenNMS or Other?

Hi All: Anyone using IPSLAs with OpenNMS or any other favorite tool? I just set up a small test network and am thinking about adding this to a couple of our WAN routers closest to our PBXs and setting up remote switches that VoIP phones are on to monitor jitter, etc of our VoIP traffic. Any

Re: [c-nsp] Cisco 7206 - IOS version for L2TPV3

Hi Andy, We're using 12.2(33)SRD1 and recently before that SRC3 on 7204 LNS routers without any issues. We don't have any eBGP on these devices, but iBGP works fine with about 9 peers on each router carrying internal MP-BGP routes. These routers also authenticate PPP sessions via RADIUS and

Re: [c-nsp] Deny Default Route Propagation

Ivan is correct, I know this first hand after wrestling with this very recently. You can only filter inbound from OSPF to the route table and you will need to do it on each OSPF router in the area. Cisco reference is here:

[c-nsp] MPLS MTU [override] bug 12.4(22)T?

I'm trying to configure mpls mtu 1508 on a dot1q subinterface on a 2851. IOS 12.4(7) will allow it, but IOS 12.4(22)T won't. The Bug Toolkit doesn't show any relevant bugs. Has anyone else run into this? Is there a recommended release? I would really like a release that supports mpls

Re: [c-nsp] VSS 1440 issues

C and C Dominte wrote: Thank you for your advice, however, increasing the timers did not work. I powered down the active linecards from switch 2 yesterday to see if it stopped the unicast flood, which it did. Today I increased the mac address syncronisation activity time to 640 and

Re: [c-nsp] MPLS MTU [override] bug 12.4(22)T?

On Thu, 6 Aug 2009, Christopher Hunt wrote: I'm trying to configure mpls mtu 1508 on a dot1q subinterface on a 2851. IOS 12.4(7) will allow it, but IOS 12.4(22)T won't. The Bug Toolkit doesn't show any relevant bugs. Has anyone else run into this? Is there a recommended release? I would

Re: [c-nsp] multipath BGP not balancing equally.

This sounds like the unequal multipath is a quirk (feature?) of sup720 default load sharing behavior. It happens to any multipath routes (static, ospf, bgp) installed in the FIB: http://cisco.cluepon.net/index.php/Sup720_load_balancing shows a different ratios than OP but that might be due to

Re: [c-nsp] VSS 1440 issues

Agreed, your mileage may vary on the exact timers to use (I ended up at 900 seconds), but synchronizing MAC and ARP aging timers should solve your unicast flooding issues, assuming the traffic is to legitimate destinations. Have you captured any traffic to identify the destination of flooded