[c-nsp] 3745 and NM-1A-E3

2010-03-19 Thread Tom Storey
Hi all, Wondering if anyone has experience with the 3745 and NM-1A-E3, specifically how many can you jam into one of these. According to the datasheet, 2 is the recommended maximum, but I am wondering if the router will accept/recognise 3 of these cards and allow you to use all of them? Cheers,

Re: [c-nsp] OSPF Default Route Injection

2010-03-19 Thread David Granzer
Hi, I have test setup with three routers R2/R3/R4, they running OSPF, R2 and R3 injecting default with default-information originate always metric 20, R4 already sees default route from both R4#sh ip route 0.0.0.0 Routing entry for 0.0.0.0/0, supernet Known via ospf 2, distance 110, metric 20,

[c-nsp] Cisco 6513 FWSM problem

2010-03-19 Thread Muhammad Jawwad Paracha
Hi, We faced problem of two FWSM in different chassis Cisco 6513,went into active/active state suddenly. Though they are configured as active/passive and running normally for 1 year. Any clue what has happened. Regards Jawwad Paracha IBM ___

Re: [c-nsp] strange ipv6 problems on 3550 SVI

2010-03-19 Thread Mohacsi Janos
On Thu, 18 Mar 2010, Anton Kapela wrote: On Mar 18, 2010, at 4:52 PM, Stephen Cobb wrote: Check out the top of rack switch recommendations thread that started a couple days back. IPv6 has parity with v4 in 12.2(50)-ish IOS, even on the 3550's, so people are claiming. This might help.

Re: [c-nsp] Cisco 6513 FWSM problem

2010-03-19 Thread Peter Rathlev
On Fri, 2010-03-19 at 12:31 +0500, Muhammad Jawwad Paracha wrote: We faced problem of two FWSM in different chassis Cisco 6513,went into active/active state suddenly. Though they are configured as active/passive and running normally for 1 year. Any clue what has happened. The logs should

Re: [c-nsp] control-plane packet transmit priority on PFC + lan card platforms

2010-03-19 Thread Andriy Bilous
Control-plane traffic is governed by pak_priority inside the router http://www.cisco.com/en/US/tech/tk543/tk544/technologies_tech_note09186a0080094612.shtml This document is pretty old and doesn't reflect newer platforms, though basics remain the same I believe. Some little bit is also here:

[c-nsp] Cisco asa5550 url filter

2010-03-19 Thread Bunny Singh
Hi,   We are using Cisco asa5550, and i want to put a url based acl/filteration for the particular client.   We have one client on inside interface who needs the access of www.youtube.com only(outside interface) and to restrict the same we are not able to restrict through IP acl's as Youtube

[c-nsp] 6500 nvram contents changing

2010-03-19 Thread Ben Cooper
Hi, We use rancid to retrieve configs from our cisco kit, recently one of our 6500s (s72033_rp-ADVENTERPRISEK9_WAN-M Version 12.2(33)SXH3) has started reporting nvram content changes sporadically throughout the day, eg: !Flash: nvram: Directory of nvram:/ !Flash: nvram: 1918 -rw-

[c-nsp] 6500 nvram contents changing

2010-03-19 Thread Ben Cooper
Hi, We use rancid to retrieve configs from our cisco kit, recently one of our 6500s (s72033_rp-ADVENTERPRISEK9_WAN-M Version 12.2(33)SXH3) has started reporting nvram content changes sporadically throughout the day, eg: !Flash: nvram: Directory of nvram:/ !Flash: nvram: 1918 -rw-

Re: [c-nsp] Cisco asa5550 url filter

2010-03-19 Thread Ramcharan, Vijay A
Try Google or Bing with search string asa inspect http regex The example given below is for blocking certain websites but you should be able to come up with a configuration that only allows certain sites and block everything else.

Re: [c-nsp] Cisco asa5550 url filter

2010-03-19 Thread Bunny Singh
Hi Vijay,   Thanks for the reply,   I have checked and try to do but facing issue as the example given is too complicated and its difficult to do the test on the production Environment,    Can you share a example to allowing the access for a single site.   I am very thankfull to you.     Regards

Re: [c-nsp] Cisco asa5550 url filter

2010-03-19 Thread David White, Jr. (dwhitejr)
Also, have a look at: https://supportforums.cisco.com/docs/DOC-1268 Sincerely, David. Ramcharan, Vijay A wrote: Try Google or Bing with search string asa inspect http regex The example given below is for blocking certain websites but you should be able to come up with a configuration that

Re: [c-nsp] 6500 nvram contents changing

2010-03-19 Thread Jared Mauch
This typically happens if someone is viewing the startup-config (eg: show conf) as it is locked. - Jared On Mar 19, 2010, at 7:58 AM, Ben Cooper wrote: Hi, We use rancid to retrieve configs from our cisco kit, recently one of our 6500s (s72033_rp-ADVENTERPRISEK9_WAN-M Version

Re: [c-nsp] Cisco asa5550 url filter

2010-03-19 Thread Ramcharan, Vijay A
I suggest running the scenario through Dynamips and PEMU for test purposes so you don't affect production traffic. AFAIK, the configuration unfortunately doesn't really get simpler than what the URL provided. Out of the box URL filtering requires RegEx and an MPF configuration. Regarding

Re: [c-nsp] Current BGP BCP for anchoring and announcing local prefixes

2010-03-19 Thread Brandon Ewing
On Tue, Mar 16, 2010 at 09:19:03AM -0400, Drew Weaver wrote: No to thread Hijack, but how do you guys handle injecting /32s for null/blackhole into your upstream providers? Using a tag on the static route? with a route-map that matches the tag? which then adds a community? thanks,

[c-nsp] NPE-G1 vs NPE-G2; is it a scam?

2010-03-19 Thread Chris Flav
We have had two upgrades on a 7204VXR platform where we went from a G1 to a G2 controller. Case A is a pretty straightforward BGP with 2 full feeds, 400Mbps aggregate traffic @72,000pps. Case A upgraded to 12.4XD train from 12.3 mainline Case B is a L2TP LNS, aggregating around 3000 PPPoE

Re: [c-nsp] control-plane packet transmit priority on PFC + lan card platforms

2010-03-19 Thread Anton Kapela
On Mar 19, 2010, at 5:48 AM, Andriy Bilous wrote: Control-plane traffic is governed by pak_priority inside the router http://www.cisco.com/en/US/tech/tk543/tk544/technologies_tech_note09186a0080094612.shtml This document is pretty old and doesn't reflect newer platforms, though basics

Re: [c-nsp] strange ipv6 problems on 3550 SVI

2010-03-19 Thread Paul G. Timmins
Feature Navigator is wrong - as usual. 3550 does not have hw support for IPv6, therefore no support for it. No plan, according to BU (have this info via our account manager), to support IPv6 on these switches. Go for 3560 or 3750 Best Regards, Janos Mohacsi What's

Re: [c-nsp] vs cisco 2851 and NME-XD-24ES-1S-P

2010-03-19 Thread Stephen Cobb
http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/miragenm.html#wp1820427 http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/miragenm.html#wp1820427good luck! On Fri, Mar 19, 2010 at 4:00 AM, Arne Larsen / Region Nordjylland a...@rn.dk wrote: Hi all. Can someone

Re: [c-nsp] NPE-G1 vs NPE-G2; is it a scam?

2010-03-19 Thread Stephen Cobb
Hey guys - I saw something in a previous forum (can't recall where) that talked about this. You won't actually see increased performance on the G2 till you're getting into high CPU utilization, where the G1 would kick the can and the G2 does its spec'd job...something about the different

Re: [c-nsp] 6500 nvram contents changing

2010-03-19 Thread john heasley
Fri, Mar 19, 2010 at 10:40:20AM -0400, Jared Mauch: This typically happens if someone is viewing the startup-config (eg: show conf) as it is locked. afaict, reading nor writing locks the nvram fsys in such a way that dir /all nvram:, the command rancid uses, fails. it seems to wait as you'd

Re: [c-nsp] NPE-G1 vs NPE-G2; is it a scam?

2010-03-19 Thread Stephen Cobb
Found what I was talking about...this may explain things: https://puck.nether.net/pipermail/cisco-nsp/2007-April/03.html -SC On Fri, Mar 19, 2010 at 10:11 AM, Stephen Cobb sc...@telecoast.com wrote: Hey guys - I saw something in a previous forum (can't recall where) that talked about

Re: [c-nsp] OSPF Default Route Injection

2010-03-19 Thread Leah Lynch (Contractor)
This is related to the forwarding address of 0.0.0.0; check this out: https://www.cisco.com/application/pdf/paws/13682/10.pdf It should help you fix it. Leah -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of David

Re: [c-nsp] strange ipv6 problems on 3550 SVI

2010-03-19 Thread Matthew Huff
Bingo! Yes, I agree, it's worse. I knew the 3550 only did ipv6 in software, but this was going to be a low packet count test. Something things seem to work, but not really. Oh well, that division budgets won't be available to upgrade that switch until after Sept 2011, so it will have to wait.

[c-nsp] NPE-G1 / G2 performance

2010-03-19 Thread Jeff Bacon
I'm looking for something that can: (1) handle about 100mbit (microbursting to gig) of mcast, taking it in interface A and pushing it out interfaces B and C, and maybe D (2) sustain 500-800mbit of throughput (assume 100-byte packets, occasional gig burst) coming in interface B and going out C,

Re: [c-nsp] NPE-G1 / G2 performance

2010-03-19 Thread Matthew Huff
What type of interfaces do you need? IF just Ethernet, why not look at a 3560-E with IP services or a 4900M -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jeff Bacon Sent: Friday, March 19, 2010 3:42 PM To:

Re: [c-nsp] NPE-G1 / G2 performance

2010-03-19 Thread Tony Varriale
- Original Message - From: Matthew Huff mh...@ox.com To: 'Jeff Bacon' ba...@walleyesoftware.com; cisco-nsp@puck.nether.net Sent: Friday, March 19, 2010 3:05 PM Subject: Re: [c-nsp] NPE-G1 / G2 performance What type of interfaces do you need? IF just Ethernet, why not look at a

Re: [c-nsp] NPE-G1 / G2 performance

2010-03-19 Thread Lee
We had a solution involving NAT on some 6500s - it didn't take long for them to run out of memory reboot. Cisco eventually said there was a limitation of ~57K NAT translations on the PFC3B. We added a ip nat translation max-entries 5 to the configs and asked our security office to pretty