Re: [c-nsp] Cisco Security Advisory: TCP State Manipulation Denial ofService Vulnerabilities in Multiple Cisco Products

2009-09-17 Thread John Kougoulos
On Thu, 17 Sep 2009, David Hughes wrote: On 16/09/2009, at 6:06 PM, Gert Doering wrote: Just imagine how much functionality NX-OS could get if they would stop wasting effort on 17 different software trains for classic IOS and instead focus on getting NX-OS on all hardware platforms, and

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Marian Ďurkovič
Rodney Dunn wrote: Please check the email thread a week or so back where I gave the direct contacts for feedback. They are open and want to hear helpful constructive feedback. Rodney Helpful constructive feedback ?! I lost quite some time yesterday just to find out, that this

[c-nsp] 6506-E moving from sup2 to sup32

2009-09-17 Thread nasir.shaikh
Hi, I am upgrading from sup2a to sup32 on a 6506-E remotely. I know that 2 different sups are not supported but would the chassis running with sup2a recognize a sup32 when inserted? Makes the upgrade much easier. Appreciate any experiences in this regard Nasir Shaikh | Senior Consultant | BT

[c-nsp] 6500 - sup2a to sup32 upgrade

2009-09-17 Thread nasir.shaikh
Hi, I am upgrading from sup2a to sup32 on a 6506-E remotely. I know that 2 different sups are not supported but would the chassis running with sup2a recognize a sup32 when inserted? Makes the upgrade much easier. Appreciate any experiences in this regard Nasir

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Mark Tinka
On Thursday 17 September 2009 02:38:22 pm Marian Ďurkovič wrote: I lost quite some time yesterday just to find out, that this enhanced download is totally broken on Unix OS and despite all the navigation through the directories it always creates filenames in my home directory containing

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Tassos Chatzithomaoglou
From http://www.cisco.com/web/Downloads/SDS/Software_Downloads/FAQs.html#faq23 Q. The software file seems to download, but I cannot find it. What do I do? A. If you are using a Unix based system such as a MAC, we have a known issue. The file name is getting prefixed with the folder name. E.g

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Jared Mauch
I hope everyone is engaging your account team and support orgs on this. This download process is not acceptable, we still need the ability to get at the direct link for images to stage them to a UNIX host in the cloud. I can not be placed in a position of supporting my network from a

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Nick Hilliard
On 17/09/2009 12:47, Tassos Chatzithomaoglou wrote: A. If you are using a Unix based system such as a MAC, we have a known issue. The file name is getting prefixed with the folder name. E.g - if you downloaded the file 'xyz.bin' to a folder 'abc', the file name in the Unix directory will be

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Tassos Chatzithomaoglou
I have already given feedback quite a few times regarding my download experience (generally i don't like the idea of using my account team for obvious things). I welcome this new kind of downloader, but as i have wondered back then (http://marc.info/?l=cisco-nspm=124712980900460w=2) this

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Tassos Chatzithomaoglou
Nick Hilliard wrote on 17/09/2009 15:20: For the record, it took just over 5 minutes and about 30 mouse clicks to find the software image I was looking for, starting off from the home page. Once it started downloading, the rate meter was mostly pegged on 189kB/sec, but would

[c-nsp] Graphing specefic traffic

2009-09-17 Thread Mohammad Khalil
hey all i have a 7600 cisco router and i have customers terminated to it (ethernet) for example one of the customers is consuming SIP , i want to be able to graph this traffic (SIP) for that certain user can i do that ?? no SCE to be used :)

Re: [c-nsp] Graphing specefic traffic

2009-09-17 Thread Roland Dobbins
On Sep 17, 2009, at 8:00 PM, Mohammad Khalil wrote: no SCE to be used :) Get a router which has non-broken NetFlow, like an ASR1K, or a GSR, or CRS-1, and put it southbound of your 7600. ; --- Roland Dobbins

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Joe Maimon
Jay Hennigan wrote: What the #$^$...@# is going on with Cisco's download site? It completely hangs Firefox with some shopping cart java thing. And this is downright scary: http://www.west.net/~jay/images/cisco-wants-root.png Enhanced downloads, brought to you by the same people who brought

Re: [c-nsp] Graphing specefic traffic

2009-09-17 Thread Arie Vayner (avayner)
Mohammad, Is this for long term reporting or for short term troubleshooting? Thanks Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mohammad Khalil Sent: Thursday, September 17, 2009 16:00 To:

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Alan Buxey
hi, Your New Software Download Experience its an experience alright. I'll give them that. just not a good one :-( alan ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] MPLS TE Fast Re-route

2009-09-17 Thread Rob Shakir
On Tue, Sep 15, 2009 at 12:25:36AM +0100, Charlie Greenaway wrote: Hi, I have a question on MPLS TE and Fast Re-Route. I have a test network and I want to check that the behaviour I am seeing is correct. When you set-up an backup path for patch-protection, it would seem that RSVP

[c-nsp] Need help troubleshooting CRC errors

2009-09-17 Thread Steven Pfister
Some of our older remote sites are connected via ATM. Two or three T1s come into an Cisco 8510, and from there a 155mbps OC3 connection over fiber to a 3640 router. Lately, I've been noticing that pretty much every one of them is showing what I think is a rather high receive error count on the

Re: [c-nsp] Need help troubleshooting CRC errors

2009-09-17 Thread Antonio Soares
Try this document: CRC Troubleshooting Guide for ATM Interfaces http://www.cisco.com/en/US/tech/tk39/tk48/technologies_tech_note09186a00800c93ef.shtml Regards, Antonio Soares, CCIE #18473 (RS) amsoa...@netcabo.pt -Original Message- From: cisco-nsp-boun...@puck.nether.net

Re: [c-nsp] Graphing specefic traffic

2009-09-17 Thread Mohammad Khalil
No Arie its a short term but it would be useful if it can be done on the long term Subject: RE: [c-nsp] Graphing specefic traffic Date: Thu, 17 Sep 2009 15:40:01 +0200 From: avay...@cisco.com To: eng_m...@hotmail.com; cisco-nsp@puck.nether.net Mohammad, Is this for long term reporting

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Elmar K. Bins
(Bcc of this goes to our account manager who should start shooting at Cisco webmonkey headquarters, please) jmai...@ttec.com (Joe Maimon) wrote: What the #$^$...@# is going on with Cisco's download site? It completely hangs Firefox with some shopping cart java thing. And this is downright

[c-nsp] QOS Problem - T1 Interface

2009-09-17 Thread Paul Stewart
Hi folks... I need a second set of eyes here...;) We have a customer fed off T1 to an Adtran router that is having problems with their voice quality... they also share this as their Internet connection. A ticket is open with Adtran to confirm their QOS settings but I'm hoping to clarify

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Benny Amorsen
Tassos Chatzithomaoglou ach...@forthnet.gr writes: I had exactly the same experience too. To be honest i was hoping Cisco would have atleast coded an applet capable of maxing download speed or splitting the file in multiple parts and downloading all of them concurrently. If that improves

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Tassos Chatzithomaoglou
There are a lot of factors that can influence your max download speed. Instead of messing with TCP window parameters for a 200ms distance, i would prefer to open multiple connections for a small timeframe. After all, i'm not going to download hundreds of images. I just need max speed for a few

Re: [c-nsp] 2950 issues - Link comes UP only after reboot - Wimax

2009-09-17 Thread Frank Bulk
Did it go into err-disable? Frank -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Ved Labs Sent: Wednesday, September 16, 2009 2:14 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] 2950 issues - Link comes UP only after

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Tassos Chatzithomaoglou
There are a lot of factors that can influence your max download speed. Instead of messing with TCP window parameters for a 200ms distance, i would prefer to open multiple connections for a small timeframe. After all, i'm not going to download hundreds of images. I just need max speed for a few

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Dale W. Carder
On Sep 15, 2009, at 12:39 PM, Jay Hennigan wrote: What the #$^$...@# is going on with Cisco's download site? It completely hangs Firefox with some shopping cart java thing. Is there a workaround? I found a workaround. I couldn't download a file due to some stupid java error, so I opened

Re: [c-nsp] QOS Problem - T1 Interface

2009-09-17 Thread Paul Stewart
Sorry to bump my own post but we took out NBAR and starting marking based on source IP block and problem solved. For some reason (seen this before and it just struck me) NBAR doesn't always identify traffic properly... New config that is working *great*...;) class-map match-any KGCC-QOS match

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Kevin Graham
This wouldnt be such a problem if folks in the know could use nice standardized methods such as FTP or lynx compatible HTTP to download what they want, regardless of which download method of the day is currently in effect. Indeed. I have several of these odd network devices (they don't

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Bruce A. Locke
- Rodney Dunn rod...@cisco.com wrote: | Please check the email thread a week or so back where I gave the | direct contacts for feedback. | | They are open and want to hear helpful constructive feedback. I've sent them complaints before and filled out their surveys. And this comes along.

Re: [c-nsp] Cisco Security Advisory: TCP State Manipulation Denial ofService Vulnerabilities in Multiple Cisco Products

2009-09-17 Thread Kevin Graham
On the other hand, do you remember how long did it take to run native IOS on 65xx with the majority (not all) of the CatOS features? Considering IOS Feature Parity was an SXI objective, quite a bit. It took a long time, but the fundamental difference is that eventual convergence was always

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Seth Mattinen
Bruce A. Locke wrote: - Rodney Dunn rod...@cisco.com wrote: | Please check the email thread a week or so back where I gave the | direct contacts for feedback. | | They are open and want to hear helpful constructive feedback. I've sent them complaints before and filled out their

Re: [c-nsp] Enhanced download procedure - Cisco contact info

2009-09-17 Thread Jay Hennigan
I have opened a dialog and have gotten what seem to be reasonable responses from this person, who seems interested in our feedback. Oscar Bauer - ba...@cisco.com However, I just about had a Joe Wilson moment when he sent me the following: While we have seen some customers have challenges

Re: [c-nsp] Enhanced download procedure - Cisco contact info

2009-09-17 Thread Seth Mattinen
Jay Hennigan wrote: I have opened a dialog and have gotten what seem to be reasonable responses from this person, who seems interested in our feedback. Oscar Bauer - ba...@cisco.com However, I just about had a Joe Wilson moment when he sent me the following: While we have seen some

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Richard A Steenbergen
On Thu, Sep 17, 2009 at 08:38:22AM +0200, Marian ??urkovi?? wrote: And, during the download it kept displaying that my download speed is 56 kb/s while the real speed was orders of magnitude higher. When I noticed my download speed rapidly flickering back and forth between 10kb/s and 1000kb/s I

Re: [c-nsp] Enhanced download procedure - Cisco contact info

2009-09-17 Thread Jared Mauch
On Sep 17, 2009, at 4:47 PM, Seth Mattinen wrote: Jay Hennigan wrote: I have opened a dialog and have gotten what seem to be reasonable responses from this person, who seems interested in our feedback. Oscar Bauer - ba...@cisco.com However, I just about had a Joe Wilson moment when he sent

Re: [c-nsp] Enhanced download procedure - Cisco contact info

2009-09-17 Thread Ryan Wilkins
On Sep 17, 2009, at 3:41 PM, Jay Hennigan wrote: I have opened a dialog and have gotten what seem to be reasonable responses from this person, who seems interested in our feedback. Oscar Bauer - ba...@cisco.com However, I just about had a Joe Wilson moment when he sent me the following:

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Stig Johansen
Rodney Dunn wrote: Please check the email thread a week or so back where I gave the direct contacts for feedback. They are open and want to hear helpful constructive feedback. Rodney I'm really not in the mood for banging my head against the wall, so I'm asking for help from all on this list.

Re: [c-nsp] Enhanced download procedure - Cisco contact info

2009-09-17 Thread Peter Rathlev
On Thu, 2009-09-17 at 13:41 -0700, Jay Hennigan wrote: However, I just about had a Joe Wilson moment when he sent me the following: While we have seen some customers have challenges with the new Java requirements, once we have been able to assist them getting their configurations setup

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread blocke
- Stig Johansen stig.johan...@atea.no wrote: | Oscar Bauer wrote: | Unfortunately we cannot enabled Wget, cURL, Fetching URLs, | crawling or scripting as these may have been possible to use | in the past but were never supported when download software | from Cisco.com. However there are

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Seth Mattinen
Stig Johansen wrote: Rodney Dunn wrote: Please check the email thread a week or so back where I gave the direct contacts for feedback. They are open and want to hear helpful constructive feedback. Rodney I'm really not in the mood for banging my head against the wall, so I'm asking for

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Jared Mauch
On Sep 17, 2009, at 5:46 PM, Seth Mattinen wrote: So, no GUI+java, no software center. Period. ~Seth Actually, No javascript no software center. - Jared ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Limiting Telnet and SSH on a nexus 7018

2009-09-17 Thread Alex Wa
Hi Guys,   I'm pretty new to NX-OS and so far I haven't been able to find any way to apply an ACL to the VTY, as with IOSs. What is the way to secure Telnet and SSH access in this platform? Info is very scarse out there on this topic. I found a way by policing CoPP, matching an access-list and

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Scott Granados
Makes you long for the good ol days when a simple ftp ftp.cisco.com worked and only required your cco user / pass. - Original Message - From: Stig Johansen stig.johan...@atea.no To: Cisco Mailing list cisco-nsp@puck.nether.net Sent: Thursday, September 17, 2009 1:56 PM Subject: Re:

Re: [c-nsp] Enhanced download procedure

2009-09-17 Thread Kevin Loch
Jay Hennigan wrote: What the #$^$...@# is going on with Cisco's download site? It completely hangs Firefox with some shopping cart java thing. And this is downright scary: http://www.west.net/~jay/images/cisco-wants-root.png Enhanced downloads, brought to you by the same people who brought

[c-nsp] Assistance configuring a router to trigger remote blackhole

2009-09-17 Thread Naveen Nathan
Hi, I am new to the list, so please go easy on me. I'm in need of assistance configuring remote trigger blackhole in IOS. This feature is supported by our transit provider. I'm unsure if it's working or not, but since the nulled routes don't appear to be advertised to the transit peer, I'm

Re: [c-nsp] Assistance configuring a router to trigger remote blackhole

2009-09-17 Thread David Prall
I would have a look here: http://www.team-cymru.org/Services/Bogons/routeserver.html http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6642/pro d_white_paper0900aecd80313fac.pdf They have a sample configuration. You will need uRPF configured on your interfaces as well to do the

Re: [c-nsp] Assistance configuring a router to trigger remote blackhole

2009-09-17 Thread chip
On Thu, Sep 17, 2009 at 8:23 PM, Naveen Nathan nav...@lastninja.net wrote: Hi, I am new to the list, so please go easy on me. I'm in need of assistance configuring remote trigger blackhole in IOS. This feature is supported by our transit provider. I'm unsure if it's working or not, but

Re: [c-nsp] Assistance configuring a router to trigger remote blackhole

2009-09-17 Thread Kevin Graham
I'm unsure if it's working or not, but since the nulled routes don't appear to be advertised to the transit peer, I'm assuming not. Does a 'sh ip route' for the /32 indicate that its being redistributed? If you do a 'sh ip bgp nei nei adver' does it show it being advertised?

Re: [c-nsp] AnyConnect VPN client, IOS, and Vista

2009-09-17 Thread Andy Saykao
Jay, I've been doing some testing with WebVPN and AnyConnect client and have had no problems with Vista honouring the certificate. I'm using a 7301 as the SSL/WebVPN Gateway running IOS 12.4(24)T1. My config resembles your config somewhat. Below I've shown the relevant parts of my config.

[c-nsp] HSRP/multicast help

2009-09-17 Thread David Warner
Hi, We have a requirement to provide gateway redundancy for a multicast enabled server(s) . Weve had a few issues with getting this working in a deterministic fashion. Does anyone have a working config or tips on getting multicast working in a HSRP set up? Many thanks. David.

Re: [c-nsp] Assistance configuring a router to trigger remote blackhole

2009-09-17 Thread Naveen Nathan
Does a 'sh ip route' for the /32 indicate that its being redistributed? If you do a 'sh ip bgp nei nei adver' does it show it being advertised? Below I pasted excerpts from the router. The route appears to be redistributed by the correct route-map. The STATIC-TO-BGP map proceeds to set the

Re: [c-nsp] Enhanced download procedure - Cisco contact info

2009-09-17 Thread Hank Nussbacher
On Thu, 17 Sep 2009, Jay Hennigan wrote: Dream on. -Hank I have opened a dialog and have gotten what seem to be reasonable responses from this person, who seems interested in our feedback. Oscar Bauer - ba...@cisco.com However, I just about had a Joe Wilson moment when he sent me the