[c-nsp] SCE 8000 with 2*SCM-E

2010-03-03 Thread Mikhail Schedrin
Hi. Does anybody have the experince of using SCE8000 with two SCM-E modules? We got the second SCM-E couple of days ago and SCE always boots in recovery mode, when I install the second module. I could not find any documentation about installing and configuring the second SCM-E, I think it should

Re: [c-nsp] Tunnel*** temporarily disabled due to recursive routing

2010-03-03 Thread Pavel Skovajsa
Hello Vijay, Hope you are doing great! My name is Pavel and I will be assisting you with your Service Dequest 999666999. I am sending this e-mail as an initial point of contact and so that you can contact me if you need to. Problem Description As I have understood it till now, the issue is

Re: [c-nsp] 802.3ad questions..

2010-03-03 Thread Per Carlson
Hi. We have (2) Metro Ethernet connections from two different carriers connecting our two locations at the moment.  We need to provide for redundancy at the L2 level for these, and would like to combine the bandwidth into one logical bundle. We will be using Cisco switches on both sides of

Re: [c-nsp] 802.3ad questions..

2010-03-03 Thread Asbjorn Hojmark - Lists
On Wed, 3 Mar 2010 11:52:42 +0100, you wrote: EtherChannel can be used if, and only if, both carriers tunnels the EtherChannel protocol. Such tunneling is only supported on VPWS (aka Q-in-Q) type of circuits. Well, actually one *could* run static EtherChannel (A.K.A. 'mode on') without

[c-nsp] Simple redundancy for 7200/NPE-G1 w/ two logical connections

2010-03-03 Thread Peter Rathlev
I'm wondering how best to solve having a 7200/NPE-G1 with two connections (inside and outside) in a redundant configuration, considering that the router only has 3 interfaces. The router is supposed to terminate an IPSec tunnel on one side and route traffic towards the inside interface. The

Re: [c-nsp] Simple redundancy for 7200/NPE-G1 w/ two logical connections

2010-03-03 Thread Daniska, Tomas
Peter, -Original Message- I'm wondering how best to solve having a 7200/NPE-G1 with two connections (inside and outside) in a redundant configuration, considering that the router only has 3 interfaces. The router is supposed to terminate an IPSec tunnel on one side and route

Re: [c-nsp] Tunnel*** temporarily disabled due to recursive routing

2010-03-03 Thread j.vaningenschenau
Pavel, Thanks, you made my day! It's the same action plan that I got the last times we opened a case with Cisco ;-) Regards, Jeroen van Ingen ICT Service Centre University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands Original Message From:

[c-nsp] 3800 Series Cisco Router Advanced Features,

2010-03-03 Thread vijay gore
Team, i have installed one 3800 cisco router at my one of customer end, and ihave to submit some security documents , in that document i have explain cryptographic features, please help me for this, if anyone is having related documents or how the cryptographic features are working i n the 3800

Re: [c-nsp] Simple redundancy for 7200/NPE-G1 w/ two logical connections

2010-03-03 Thread Peter Rathlev
On Wed, 2010-03-03 at 13:07 +0100, Daniska, Tomas wrote: On the outside connection, do you really need to close the L2 loop at the router side? I suggest it would be better to use two point-to-point L3 subnets and a dynamically routed loopback interface that would terminate the tunnel. Yes,

Re: [c-nsp] SCE 8000 with 2*SCM-E

2010-03-03 Thread Arie Vayner (avayner)
Mikhail, I recommend you open a TAC case, as this could be a hardware problem, but it requires some debugging... Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mikhail Schedrin Sent: Wednesday, March 03, 2010 11:46

[c-nsp] Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities

2010-03-03 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Advisory ID: cisco-sa-20100303-cucm Revision 1.0 For Public Release 2010 March 3 1600 UTC (GMT

Re: [c-nsp] SCE 8000 with 2*SCM-E

2010-03-03 Thread Ghattas Jacob
Mikhail, Be sure both sce have the same pkg installed before you insert the second one to the sce. Which version are you running as it should be 3.6 and higher... Jacob On Wed, Mar 3, 2010 at 5:17 PM, Arie Vayner (avayner) avay...@cisco.comwrote: Mikhail, I recommend you open a TAC case, as

Re: [c-nsp] training classes

2010-03-03 Thread Jens Link
chris stand cstand...@gmail.com writes: instructor led with onsite equipment ? instructor led with remote equipment ? I had several training courses both with on site and remote equipment. Remote equipment is okay unless the Internet connection breaks. Happened to me once: We decided to move

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager

2010-03-03 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Digital Media Manager Advisory ID: cisco-sa-20100303-dmm http://www.cisco.com/warp/public/707/cisco-sa-20100303-dmm.shtml Revision 1.0 For Public Release 2010 March 03 1600 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability

2010-03-03 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco Digital Media Player Remote Display Unauthorized Content Injection Vulnerability Advisory ID: cisco-sa-20100303-dmp http://www.cisco.com/warp/public/707/cisco-sa-20100303-dmp.shtml Revision 1.0 For Public Release

[c-nsp] BGP and OSPF issues

2010-03-03 Thread Christopher J. Wargaski
Greetings We have a mixed BGP and OSPF routing environment. The routing protocol on the MPLS and point to point T-1s is mostly BGP with some OSPF (but moving to BGP). A vendor of ours to whom we have a WAN link advertises via OSPF (and can not advertise via BGP). This link is in a DMZ off of the

[c-nsp] 7606 RSP720

2010-03-03 Thread Sharlon Carty
Hello, I have a police-map applied to a vlan interface set to 10mbit. Works fine, as long as traffic is routed on the CEF720 48 port module. But the moment traffic is routed on the RSP720, traffic is above the 10mbit. Is there something on the RSP720 that needs to enabled? Here is my

Re: [c-nsp] 7606 RSP720

2010-03-03 Thread Kevin Loch
Sharlon Carty wrote: Hello, I have a police-map applied to a vlan interface set to 10mbit. Works fine, as long as traffic is routed on the CEF720 48 port module. But the moment traffic is routed on the RSP720, traffic is above the 10mbit. Is there something on the RSP720 that needs to

[c-nsp] 7600 redistribution on 12.2SRD

2010-03-03 Thread Walter Keen
I'm running into some issues where the 7600's I have in place don't want to redistribute connected subnets into ospf, only seems to happen on the SUP720-3b image, and have the issue with 12.2(33)SRD(2a|3) Anyone else run into this issue?, So far, TAC can't reproduce it. I'm considering

Re: [c-nsp] 7606 RSP720

2010-03-03 Thread Walter Keen
We had a similar situation with rsp720's and sup720's, and under each l3 vlan interface, had to add 'mls qos bridged' for the rate-limiting to work as expected, as well as the other mls commands you have configured on the trunk port in your example below On 03/03/2010 01:43 PM, Sharlon Carty

[c-nsp] Currently recommended Stable IOS for 760x?

2010-03-03 Thread Lasher, Donn
What's the currently recommended stable IOS for the 7600 (sup720-3bxl) with Service Provider (IP/MPLS/QoS/etc) intent? I see a reply from Rodney back in April'09 recommended SRB, but I'm curious what it is today.. ___ cisco-nsp mailing list

Re: [c-nsp] Currently recommended Stable IOS for 760x?

2010-03-03 Thread Mikael Abrahamsson
On Wed, 3 Mar 2010, Lasher, Donn wrote: What's the currently recommended stable IOS for the 7600 (sup720-3bxl) with Service Provider (IP/MPLS/QoS/etc) intent? I see a reply from Rodney back in April'09 recommended SRB, but I'm curious what it is today.. SRD4 looks very promising, don't know

Re: [c-nsp] Currently recommended Stable IOS for 760x?

2010-03-03 Thread Walter Keen
SRD2a and SRD3 on the sup720-3b has a bug where you can't check ospf neighbor relationships via snmp, if that's a consideration. -Original Message- From: cisco-nsp-boun...@puck.nether.net on behalf of Mikael Abrahamsson Sent: Wed 3/3/2010 10:53 PM To: Lasher, Donn Cc:

Re: [c-nsp] Comparison between Cisco and Juniper for Multicast Services

2010-03-03 Thread Daljit Singh - Core Network
Hi, I am very thankful if anybody please suggest? Regards Daljit Singh From: Daljit Singh - Core Network Sent: Tuesday, March 02, 2010 7:09 PM To: 'cisco-nsp@puck.nether.net' Subject: Comparison between Cisco and Juniper for Multicast Services Hi, I want to know the

[c-nsp] Fwd: 3800 Series Cisco Router Advanced Features,

2010-03-03 Thread vijay gore
Team, i have installed one 3800 cisco router at my one of customer end, and ihave to submit some security documents , in that document i have explain cryptographic features, please help me for this, if anyone is having related documents or how the cryptographic features are working i n the 3800