Re: [c-nsp] cisco 6509 rommon mode

2010-01-20 Thread ambedkar
Hi, i cleaned the modules of 6509 and reinstalled, it shows inband gmac link did not come up: reseting the system System Bootstrap, Version 7.1(1) Copyright (c) 1994-2001 by cisco Systems, Inc. c6k_sup2 processor with 262144 Kbytes of main memory Autoboot executing command: boot bootflash:

[c-nsp] IOS Recommendations for Voice Application

2010-01-20 Thread Soon Kian
Dear All, Any recommendations for a stable *IOS* supporting Voice application on Cisco2811 and 3845 Thanks in advance! ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] IOS Recommendations for Voice Application

2010-01-20 Thread simon
You can try this, it should answer some questions. http://www.ciscosystems.com/en/US/products/hw/routers/ps259/products_tech_note09186a00800e73f6.shtml Regards Simon Dear All, Any recommendations for a stable *IOS* supporting Voice application on Cisco2811 and 3845 Thanks in advance!

Re: [c-nsp] ASA 7.2 Interim Releases

2010-01-20 Thread Antonio Soares
Some prefer to take that risk instead of being exposed to some security holes. Sometimes the only alternative is to make a major upgrade what is not necessarily a good thing. Regards, Antonio Soares, CCIE #18473 (RS/SP) amsoa...@netcabo.pt -Original Message- From:

[c-nsp] Fiber converter

2010-01-20 Thread vijay gore
dear all. types of fiber converters ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Router recommendation for load balancing setup

2010-01-20 Thread Gert Doering
Hi, On Tue, Jan 19, 2010 at 11:30:32AM -0800, Hector Herrera wrote: I'm currently using a 3550-12t for the task, with the only drawback that the cpu hits 99% load with a 5000 packets per sec./40Mbps combined throughput on the load-balanced links. The two 100Mbps uplinks never reach more than

[c-nsp] Differences between 3750-E and 3560-E switches

2010-01-20 Thread scott owens
Message: 1 Date: Tue, 19 Jan 2010 17:11:22 -0500 From: Matthew Huff mh...@ox.com To: 'Peter Rathlev' pe...@rathlev.dk Cc: 'cisco-nsp@puck.nether.net' cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Differences between 3750-E and 3560-E switches Message-ID:

Re: [c-nsp] Differences between 3750-E and 3560-E switches

2010-01-20 Thread Ryan West
Scott, -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- To: cisco-nsp@puck.nether.net Subject: [c-nsp] Differences between 3750-E and 3560-E switches maybe even look at the 295x or 296x platform unless you possibly need POE as well - the 2s don't

[c-nsp] ip route cache flow

2010-01-20 Thread Mohammad Khalil
hi all i have metro ethernet 3750 i want to enable cache flow in order to monitor some traffic on our leased line customers i enabled under the vlan interface ip route-cache flow but nothing appeard even when i enabled ip cef accounting non-recursive

[c-nsp] 2009 Worldwide Infrastructure Security Report available for download.

2010-01-20 Thread Dobbins, Roland
[Apologies for any duplication if you've seen this notification on other lists.] We've just posted the 2009 Worldwide Infrastructure Security Report for download at this URL: http://www.arbornetworks.com/report This year's WWISR is based upon the broadest set of survey data collected by

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Dobbins, Roland
On Jan 20, 2010, at 9:19 PM, Mohammad Khalil wrote: but nothing appeard even when i enabled ip cef accounting non-recursive I don't think 3750s support NetFlow. Also, that's the old syntax; the new syntax is ip flow ingress/egress on newer platforms/trains/revisions, FYI.

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Geoffrey Pendery
That's correct. I believe that NONE of the fixed switches support Netflow, even the 4900s, which are basically fixed form 4500's. Amongst the 4500's, only the Sup V 10 GE supports it natively, though there is a daughter card you can buy to support it on the regular Sup V (IIRC). Sup 6E does not.

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Andrew Gabriel
Netflow is on only supported on the 4500 with the newer Supervisor Engines, and on the 6500 platform. Regards, Andrew Gabriel. Network Engineer, Enterprise Data Services. +91 44 42 22 88 75 (Direct) +91 98 41 41 40 19 (Mobile) www.sanmina-sci.com Sanmina-SCI India Pvt. Ltd. A51, 2nd Avenue, Anna

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Mohammad Khalil
what is the alternative for that ? is it supported on ME 6524 ?? Date: Wed, 20 Jan 2010 09:47:00 -0600 Subject: Re: [c-nsp] ip route cache flow From: ge...@pendery.net To: jeff.wojciechow...@midlandpaper.com CC: eng_m...@hotmail.com; cisco-nsp@puck.nether.net That's correct. I believe

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Dobbins, Roland
On Jan 20, 2010, at 10:51 PM, Andrew Gabriel wrote: Netflow is on only supported on the 4500 with the newer Supervisor Engines, and on the 6500 platform. It's also important to note that 4500 NetFlow has the same caveats as 6500/7600 NetFlow with a Sup2.

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Ziv Leyes
Is it ip accounting an option for you? Not as useful as netflow but it might just give you what you need -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mohammad Khalil Sent: Wednesday, January 20, 2010 5:58 PM To:

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Jason Shearer
You could use a probe or span your traffic to an analyzer. This is what I do to monitor some links that traverse devices that do not support NetFlow. Jason -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mohammad

[c-nsp] Cisco Security Advisory: Cisco IOS XR Software SSH Denial of Service Vulnerability

2010-01-20 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco IOS XR Software SSH Denial of Service Vulnerability Advisory ID: cisco-sa-20100120-xr-ssh Revision 1.0 For Public Release 2010 January 20 1600 UTC (GMT

[c-nsp] Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability

2010-01-20 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability Advisory ID: cisco-sa-20100120-ipm Revision 1.0 For Public Release 2010 January 20 1600 UTC (GMT

Re: [c-nsp] Differences between 3750-E and 3560-E switches

2010-01-20 Thread Jeff Bacon
I've read through the data sheets, and I also can't see any signficant differences. I was wondering if there was some hardware differences (like CAM table size, ethernet input/output buffer sizes), etc... Is the packet buffering on the -Es significantly better than on the non-Es? It would

[c-nsp] C3750G Interface Counters

2010-01-20 Thread Bill Blackford
Hello all, I am observing a strange issue where I have an interface that is showing zero packets/sec. The packets input and packets output are incrementing. My SNMP collector is graphing. This is one of two interconnect ports to a customer peering up with two BGP sessions using multipath. The

Re: [c-nsp] cisco 6509 rommon mode

2010-01-20 Thread Kevin Loch
Have you tried replacing the lithium battery on the sup2? Hopefully you have a newer board with a socket. - Kevin ambedkar wrote: Hi, i cleaned the modules of 6509 and reinstalled, it shows inband gmac link did not come up: reseting the system System Bootstrap, Version 7.1(1) Copyright (c)

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Geoffrey Pendery
Just to be clear, it is only supported with the *second* newest, the Sup V 10GE. NetFlow is NOT supported on the newest, the Sup 6E. So it was actually removed from the 4500's going forward. At this time the E series 4500 stuff, the latest-and-greatest, does NOT support NetFlow. I just rolled

Re: [c-nsp] Differences between 3750-E and 3560-E switches

2010-01-20 Thread Peter Rathlev
On Wed, 2010-01-20 at 07:19 -0600, scott owens wrote: That stacking feature IS the cool thing. If you don't need it; skip it, maybe even look at the 295x or 296x platform unless you possibly need POE as well - the 2s don't support it. But the ability to team/etherchannel servers via LACP and

Re: [c-nsp] Differences between 3750-E and 3560-E switches

2010-01-20 Thread Brian Spade
If you use WCCP (i.e., wan acceleration/WAAS), the 3750-E supports denies in the redirect ACL whereas the 3560-E does not. Apparently this feature will be added to the 3560-E this Spring. It maybe minor but it's very annoying have to create an entire ACL based on permits to control your

Re: [c-nsp] ip route cache flow

2010-01-20 Thread Gert Doering
Hi, On Wed, Jan 20, 2010 at 06:11:10PM +0200, Ziv Leyes wrote: Is it ip accounting an option for you? Not supported on 3750 either. These things are *switches*, with some l3 support added. Fast, but dumb. gert -- USENET is *not* the non-clickable part of WWW!

Re: [c-nsp] Disabling SNMP for certain BGP neighbors

2010-01-20 Thread Arie Vayner (avayner)
Seth, I would say that the right approach for this would be to tune the logic of your NMS system to ignore these events, or make them low-priority events, and have a rule that alerts you about low-priority events only during work hours... Another approach (but only relatively new IOS versions)

Re: [c-nsp] ip route cache flow

2010-01-20 Thread David Hughes
And supported on 6500 doesn't equate to works as you'd expect on 6500. It's better in SXI (per interface support at least) but it's still got major limitations. We only have netflow on Cat6k left in one location and that's being moved to routers real soon now. David ... On 21/01/2010, at

[c-nsp] MPLS VPN with lot of PPP interfaces and central firewall

2010-01-20 Thread Gerald Krause
I'am looking for a good solution to separate multiple branches from each other by using a central firewall setup. The overall view looks like that: Branch-1 Branch-n (PC1) (PCn) | | (SW1) (SWn) | | CPE1 ...CPEn | |

Re: [c-nsp] MPLS VPN with lot of PPP interfaces and central firewall

2010-01-20 Thread John Kougoulos
On Thu, 21 Jan 2010, Gerald Krause wrote: For now I see 3 options for us: a) implement dedicated VRFs for each branch and map VRFn-VLANn on the RTRs b) build a brigded L2 LAN from the CPE Dialer-Interfaces up to the Firewall-Ethernet Interface (how? bad idea?) c) some other brilliant

Re: [c-nsp] MPLS VPN with lot of PPP interfaces and central firewall

2010-01-20 Thread Oliver Boehmer (oboehmer)
I'am looking for a good solution to separate multiple branches from each other by using a central firewall setup. The overall view looks like that: [...] The () components will be under control of the customer, all other systems are managed by us. The main goals are 1) separate the