Re: [c-nsp] 3560 buffering

Hi, On Tue, Oct 13, 2009 at 07:10:24AM -0500, Jeff Bacon wrote: What's an output drop mean, in a 3560 context? Traffic too bursty, output buffers too tiny. Is there a way to tell the 3560 to buffer more aggressively? As far as our experience with 2960Gs goes, the only way to achieve that is

[c-nsp] ASN statistic tools

Daer All, I'm looking for utilities which allow to have ASN statistics, the netflow tools I tried doesn't do that, any idea? BR ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] ASN statistic tools

take a look at: https://neon1.net/as-stats/as-stats-presentation-swinog16.pdf On Tue, Oct 13, 2009 at 10:52 PM, RAZAFINDRATSIFA Rivo Tahina r.tah...@moov.mg wrote: Daer All, I'm looking for utilities which allow to have ASN statistics, the netflow tools I tried doesn't do that, any idea?

Re: [c-nsp] 3560 buffering

On Wed, 14 Oct 2009 08:44:24 +0200, Gert Doering wrote Hi, On Tue, Oct 13, 2009 at 07:10:24AM -0500, Jeff Bacon wrote: What's an output drop mean, in a 3560 context? Traffic too bursty, output buffers too tiny. Is there a way to tell the 3560 to buffer more aggressively? There's a

[c-nsp] file transfer

dear team, i want to check my bandwidth using file transfer please help how to do that. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] ibgp TTL

AFAIK this command is for eBGP only, no? On Tue, Oct 13, 2009 at 10:07 PM, Matlock, Kenneth L matlo...@exempla.orgwrote: Router bgp AS Neighbor AS ttl-security hops hops ? Ken Matlock Network Analyst Exempla Healthcare (303) 467-4671 matlo...@exempla.org -Original Message-

Re: [c-nsp] ASN statistic tools

I'm looking for utilities which allow to have ASN statistics, the netflow tools I tried doesn't do that, any idea? take a look at NetQos ReportAnalyzer -- Gustaf Hyllested Serve ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] 3560 buffering

On Tue, Oct 13, 2009 at 05:59:55PM +0200, Peter Rathlev wrote: [...] ! Only output queue-set 1, queue 2 is used. Adjust all thresholds to ! 400% of default. (This is AFAIK the maximum even though the parser ! accepts up to 3200%.) mls qos queue-set output 1 threshold 2 400 400 100 400 So main

Re: [c-nsp] 3560 buffering

On Wed, 2009-10-14 at 10:45 +0100, Mateusz Blaszczyk wrote: On Tue, Oct 13, 2009 at 05:59:55PM +0200, Peter Rathlev wrote: [...] ! Only output queue-set 1, queue 2 is used. Adjust all thresholds to ! 400% of default. (This is AFAIK the maximum even though the parser ! accepts up to 3200%.)

Re: [c-nsp] ibgp TTL

yes, only supported for ebgp. Would be interested about the very specific design and why Manu requires this functionality? oli AFAIK this command is for eBGP only, no? On Tue, Oct 13, 2009 at 10:07 PM, Matlock, Kenneth L matlo...@exempla.orgwrote: Router bgp AS Neighbor AS

Re: [c-nsp] L2TP LNS issue

Silly (semi-related) question, but I (hope) you are not installing a default to ppp0 on your *nix box when the session comes up, or if you are, you have a static via your main nic to the l2tp endpoint address, else you will cause the tunnel to fall down due to recursion. Dave.

Re: [c-nsp] mls qos on 7600 with native vlan and MPLS

Hello, My understanding is that this queueing mode can be based only on COS field on GE and 10/100/1000 line cards. So what will be the router behaviour if there is no 802.Q and therefore no 802.1p During processing, PFC QoS represents the priority of all traffic (including non-IP traffic)

Re: [c-nsp] Cisco 12416 Power Management

I'm trying to figure out why i have this output: ++ 12k2sh env power_supply Failsafe power system Slot # 48V AMP_48 (Volt) (Amp) 27 PEM153 10 Failsafe-PEM= Failsafe PS this looks like

[c-nsp] Cisco SCE RTM

hi all i have SCE 2020 with sca console 3.5.0 i installed RTM on it and all is working fine now i have another SCE with SCA console 3.5.0 (the same console version) and its 8000 series but when i try to apply the ./rtmcmd.sh with the rest of the line , i get the below error Failed to

Re: [c-nsp] Cisco 12416 Power Management

Hello Oliver, Any possibilities of 12.0(32)SY6 being affected too ? 12k2sh ver | inc IOS IOS (tm) GS Software (C12KPRP-P-M), Version 12.0(32)SY6, RELEASE SOFTWARE (fc2) 12k2 Because the Bug you mentioned is exactly what i have: 12k2sh diag (...) PEM 1 (AC_PWR_1): Failsafe PS

Re: [c-nsp] mls qos on 7600 with native vlan and MPLS

For all egress traffic, PFC QoS uses a configurable map to derive a CoS value from the final internal DSCP value associated with the traffic. I understand, but what if your port is native? (ie. without 802.1p, means without cos??) How does the router classify from unexisting cos? Thanks for

Re: [c-nsp] ibgp TTL

On Wed, Oct 14, 2009 at 12:10, Oliver Boehmer (oboehmer) oboeh...@cisco.com wrote: yes, only supported for ebgp. Would be interested about the very specific design and why Manu requires this functionality? I'm not sure what Manu has in mind, but I had a need to use similar feature to prevent

Re: [c-nsp] file transfer

ttcp is also an option. It's a hidden command in most IOS platforms/releases, and allows you to test TCP throughput. There's also a UNIX version you can use to test between a router and a unix box or between unix boxes. You can google for the code.. On Wed, Oct 14, 2009 at 4:42 AM, Garry

[c-nsp] Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities Advisory ID: cisco-sa-20091014-cup Revision 1.0 For Public Release 2009 October 14 1600 UTC (GMT

Re: [c-nsp] ibgp TTL

Oli, More detail: I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with IS-IS L2 or OSPF area 0 as IGP. This IGP is extended to some non MPLS routers X. In some backbone links failure, IGP allow MP-iBGP to stay UP via X links (non MPLS). This specific IGP design introduce

Re: [c-nsp] 3560 buffering

jeff, at a previous employer, all the cisco 3750/3560 switches were scrapped and replaced with 4948s or f10 s50n. the f10 had one of the worst ncurses interfaces i've seen (but, now that they run sftos, the cli is markedly improved). the buffer sizes on the small form-factor cisco switches are

Re: [c-nsp] ibgp TTL

Manu Chao wrote: Oli, More detail: I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with IS-IS L2 or OSPF area 0 as IGP. This IGP is extended to some non MPLS routers X. In some backbone links failure, IGP allow MP-iBGP to stay UP via X links (non MPLS).

Re: [c-nsp] ibgp TTL

I am running IS-IS :( This feature is not yet supported but it is a good option Thanks for your input On Wed, Oct 14, 2009 at 6:33 PM, David Freedman david.freed...@uk.clara.net wrote: Manu Chao wrote: Oli, More detail: I have a standard IP/MPLS backbone with MP-iBGP between PEs

Re: [c-nsp] ibgp TTL

Manu, More detail: I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with IS-IS L2 or OSPF area 0 as IGP. This IGP is extended to some non MPLS routers X. In some backbone links failure, IGP allow MP-iBGP to stay UP via X links (non MPLS). This specific IGP

Re: [c-nsp] ibgp TTL

How about explicit path TE with no autoroute announce (and only statics for these dedicated iBGP loopbacks?) Manu, More detail: I have a standard IP/MPLS backbone with MP-iBGP between PEs loopbacks with IS-IS L2 or OSPF area 0 as IGP. This IGP is extended to some non MPLS routers X.

Re: [c-nsp] ASN statistic tools

Hi, You can certainly have a look to the following page which captures a number of NetFlow collector packages (free and commercial) available around. I'm sure most of them are supporting ASNs: http://www.switch.ch/network/projects/completed/TF-NGN/floma/software.html If you are looking at

[c-nsp] ASA5520 IPSEC and windows mobile?

Hi, Has anyone successfuly configured the ASA5520 to accept VPN connections from windows mobile 6.1 devices? I can't figure out how to define a tunnel-group and google results aren't helping much. I saw one example where you put the username/tunnel so something like

Re: [c-nsp] ibgp TTL

Thank you Oli, OSPF stub area or IS-IS Level 1 was the better option compared to ACL on the non-MPLS router because routing control stay under MPLS backbone control Increasing metric is useless because non MPLS path must NEVER be used On Wed, Oct 14, 2009 at 6:44 PM, Oliver Boehmer (oboehmer)

[c-nsp] monitoring switch stacks

hi, just wondered what folk did out there to monitor switch stacks (eg stackwise+ switch stacks like 3750e, 2975gs etc (not the older gigastack ones) ) - using the basic methods such as ICMP will only show the presence of connectivity to the stack but not the actual health of the stack - eg

Re: [c-nsp] monitoring switch stacks

On Oct 14, 2009, at 1:19 PM, Alan Buxey wrote: just wondered what folk did out there to monitor switch stacks (eg stackwise+ switch stacks like 3750e, 2975gs etc (not the older gigastack ones) ) - using the basic methods such as ICMP will only show the presence of connectivity to the stack

Re: [c-nsp] monitoring switch stacks

Dale Carder- Are you guys also monitoring queue drops on the interfaces too; if so can you forward me the OID? Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking Telecommunications Services Dale W. Carder wrote: On Oct 14, 2009, at

[c-nsp] Es20+ card and licensing question

Hi, I'm looking at the ES20+ cards for 7600s and I am confused by the licensing options. There are two license options 76-ES+BASIC and 76-ES+ADVIP. Do I need to purchase one of these two options for each ES20+ card or is it possible to run the card without either license? Is each

Re: [c-nsp] monitoring switch stacks

Hey Ge! We monitor for input queue drops on 6500's with this oid: .1.3.6.1.4.1.9.9.276.1.1.1.1.10 Our alert for the NOC is drops 100/sec results in a major alarm. Usually it's something stupid happening on a given vlan that needs to be beat down. For SVI's, this goes hand in hand with

Re: [c-nsp] monitoring switch stacks

Dale, are you guys monitoring queue drops on the edge switches like a Cisco 3750? If so, I'm thinking the OID will be slightly different? Thanks for the reply ! Regards, Ge Moua | Email: moua0...@umn.edu Network Design Engineer University of Minnesota | Networking Telecommunications

Re: [c-nsp] monitoring switch stacks

just wondered what folk did out there to monitor switch stacks (eg stackwise+ switch stacks like 3750e, 2975gs etc (not the older gigastack ones) ) - using the basic methods such as ICMP will only show the presence of connectivity to the stack but not the actual health of the stack - eg

Re: [c-nsp] Es20+ card and licensing question

Hi Andy, On Thu, Oct 15, 2009 at 6:01 AM, Webster, Andy andy.webs...@illinois.gov wrote: Hi,        I'm looking at the ES20+ cards for 7600s and I am confused by the licensing options.  There are two license options 76-ES+BASIC and 76-ES+ADVIP.  Do I need to purchase one of these two options

Re: [c-nsp] L2TP LNS issue

Dave, Negative - the ppp doesn't even get to IPCP stage and defaultroute is not turned on. On another note, I tested a cisco and the LAC and it's working fine with the same config so must be something with pppd/xl2tpd. I've used this config before with l2tpns but never tried with IOS before.

[c-nsp] IPv6 on ME3400

I've got a customer that *needs* a 1-2 RU router that handles IPv6 in hardware. I know the 3650/3750 can handle but I only need at most 4 SFP ports. The ME-3400G-2CS-A is perfect. However I know IPv6 was just added to this platform. Can anyone confirm the quality of IPv6 functionality on

[c-nsp] Flexwan module - Memory

I noticed the following on my cisco 6509E, Switch02#dir ? /all List all files /recursive List files recursively all-filesystems List files on all filesystems bootflash: Directory or file name const_nvram: Directory or file name cwan1/0-disk0: Directory

Re: [c-nsp] IPv6 on ME3400

On Oct 14, 2009, at 10:03 PM, ML wrote: I've got a customer that *needs* a 1-2 RU router that handles IPv6 in hardware. I know the 3650/3750 can handle but I only need at most 4 SFP ports. The ME-3400G-2CS-A is perfect. However I know IPv6 was just added to this platform. Can anyone

Re: [c-nsp] IPv6 on ME3400

Dale W. Carder wrote: On Oct 14, 2009, at 10:03 PM, ML wrote: I've got a customer that *needs* a 1-2 RU router that handles IPv6 in hardware. I know the 3650/3750 can handle but I only need at most 4 SFP ports. The ME-3400G-2CS-A is perfect. However I know IPv6 was just added to this

Re: [c-nsp] Flexwan module - Memory

Thanks a lot Kevin, one more doubt pls, then what is the purpose of Flash in Flexman? Rgds/ Sony On Thu, Oct 15, 2009 at 9:48 AM, Kevin Graham kgra...@industrial-marshmallow.com wrote: My doubt are 1. whether these cwan1/0-disk0: and cwan1/1-disk0: are builtin flash modules on

Re: [c-nsp] IPv6 on ME3400

On 2009-10-15 05:54, ML wrote: Speaking of uRPF does anyone have it working at all on the ME3400. I've yet to find a working configuration. Far as I can tell Cisco said they had it but never delivered. The hardware on ME3400 is not capable to perform uRPF check. Making it in software would be

Re: [c-nsp] Flexwan module - Memory

My doubt are 1. whether these cwan1/0-disk0: and cwan1/1-disk0: are builtin flash modules on Flexwan module? Yes. 2. if so can i upload my IOS in those modules No. FlexWAN (as with all linecards) boots after the MSFC/Sup. Its devices are inaccessible from either Sup or MSFC ROMMON.