[c-nsp] ASR1000 Series PPPoA

2010-07-21 Thread E. Versaevel
Hi all, Anyone heard anything on PPPoA on the ASR 1000 series yet? As far as i know it isn't supported (yet?) but i might be wrong :) PPPoA would make it a superb replacement for our 720X series Kind regards, Erik Versaevel ___ cisco-nsp mailing

Re: [c-nsp] QoS Options for PPPoE over Ethernet

2010-07-21 Thread Ben Steele
Use Radius to send an avpair of the bandwidth of the session back to the router then have a service-policy applied to your virtual-template(or you can send the service-policy back through radius too if you need to differentiate them between sessions) with a parent shaper that shapes bandwidth

Re: [c-nsp] ASR1000 Series PPPoA

2010-07-21 Thread Brian Turnbow
Anyone heard anything on PPPoA on the ASR 1000 series yet? As far as i know it isn't supported (yet?) but i might be wrong :) PPPoA would make it a superb replacement for our 720X series We've been told it won't happen at least any time soon and to go with 10k as an upgrade path... Not

[c-nsp] ISG: redirecting customers DNS to internal DNS Cache servers (L4 redirect)

2010-07-21 Thread LM
According with Cisco (http://cisco.biz/en/US/docs/routers/1/10008/configuration/guides/ancp/isbl4rdt.html#wp1043711) I create the next configuration: !-- ip access-list extended

Re: [c-nsp] NX-OS - Fabric Path

2010-07-21 Thread j.vaningenschenau
Hey, Is it just me or did others also receive a duplicate of the message below? Not only this one, but also others that had mr LTD as recipient and the list in CC... The duplicate comes later and has several Cisco hops in the path, including a couple of Ironport devices. If it's not just me,

Re: [c-nsp] IP SLA measurement against USA

2010-07-21 Thread Anton Kapela
On Jul 15, 2010, at 6:02 AM, LM wrote: Hi, I want to control the SLA gave by our internet provider against USA and Europe. The issue is that I would like to configure SLA code in our border routers to have some visibility of it. So, is there anyone in the mailing list who can give me a

Re: [c-nsp] IP SLA measurement against USA

2010-07-21 Thread LM
Thanks for your answer, I will take a look to it. El 21/07/10 14:11, Anton Kapela escribió: On Jul 15, 2010, at 6:02 AM, LM wrote: Hi, I want to control the SLA gave by our internet provider against USA and Europe. The issue is that I would like to configure SLA code in our border

[c-nsp] Slightly OT: Network Mapping Tools

2010-07-21 Thread John Neiberger
I used to used HP Network Node Manager at a previous employer and thought it did a really good job of automatically mapping the network, especially since it handled L3 and L2 discovery well after a bit of tweaking. I'm at a new place now and I'm wondering if there are any good automated mapping

Re: [c-nsp] Slightly OT: Network Mapping Tools

2010-07-21 Thread Jeremy Bresley
On 7/21/2010 9:27 AM, John Neiberger wrote: I used to used HP Network Node Manager at a previous employer and thought it did a really good job of automatically mapping the network, especially since it handled L3 and L2 discovery well after a bit of tweaking. I'm at a new place now and I'm

Re: [c-nsp] Slightly OT: Network Mapping Tools

2010-07-21 Thread Ryan West
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of Jeremy Bresley http://netdisco.org/ Netdisco will discover the devices, and put together a rudimentary map of the connections. Be warned, if you have a large

Re: [c-nsp] Hughes v iDirect

2010-07-21 Thread Jeferson Guardia
iDirect is a good technology, agred with Terry. Besides, they offer great courses to give training for the staff in US - Virginia. Rgs, 2010/7/18 Ziv Leyes z...@gilat.net I second Terry, we have good experience with iDirect too. Can't tell much about Hughes, don't know their products at all.

Re: [c-nsp] Slightly OT: Network Mapping Tools

2010-07-21 Thread Adam Armstrong
On 21/07/2010 15:27, John Neiberger wrote: I used to used HP Network Node Manager at a previous employer and thought it did a really good job of automatically mapping the network, especially since it handled L3 and L2 discovery well after a bit of tweaking. I'm at a new place now and I'm

[c-nsp] Cisco Security Advisory: CDS Internet Streamer: Web Server Directory Traversal Vulnerability

2010-07-21 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: CDS Internet Streamer: Web Server Directory Traversal Vulnerability Advisory ID: cisco-sa-20100721-spcdn http://www.cisco.com/warp/public/707/cisco-sa-20100721-spcdn.shtml Revision 1.0 For Public Release 2010 July 21 1600

Re: [c-nsp] RADIUS-assigned IPv6 inside VRF

2010-07-21 Thread Daniel Verlouw
On Wed, 2010-07-21 at 14:46 +0200, Daniel Verlouw wrote: This is all on c7200-advipservicesk9-mz.124-24.T3.bin. Any clue appreciated. to answer my own question: this seems to work well on SRD4. --Daniel. ___ cisco-nsp mailing list

[c-nsp] 6509 input queue drops

2010-07-21 Thread Chris Lane
All, I have a 48 port 10/100/1000mb EtherModule WS-X6148-GE-TX on a 6509 running s72033-advipservicesk9_wan-mz.122-33.SXH7.bin Interface built as layer3 with a p2p site to site experiencing tons of Input queue drops but no other errors on port. cr.nyc1.ny#sh int g3/2 GigabitEthernet3/2 is

Re: [c-nsp] Slightly OT: Network Mapping Tools

2010-07-21 Thread Jerry Bacon
- Original Message - From: John Neiberger jneiber...@gmail.com I used to used HP Network Node Manager at a previous employer and thought it did a really good job of automatically mapping the network, especially since it handled L3 and L2 discovery well after a bit of tweaking. I'm at

Re: [c-nsp] Slightly OT: Network Mapping Tools

2010-07-21 Thread Matt Zagrabelny
On Wed, Jul 21, 2010 at 10:28 AM, Adam Armstrong li...@memetic.org wrote: On 21/07/2010 15:27, John Neiberger wrote: I used to used HP Network Node Manager at a previous employer and thought it did a really good job of automatically mapping the network, especially since it handled L3 and L2

[c-nsp] Access point traffic

2010-07-21 Thread Mohammad Khalil
hi all i have an access point connected to a Cisco switch i want to be able to monitor the traffic for each client connects to this access point , is there any way for doing this ?? Thanks

Re: [c-nsp] Hughes v iDirect

2010-07-21 Thread Ryan Wilkins
I maintain an iDirect hub for one of our customers, and while it runs pretty well I have one beef that I wish they'd fix. The only dynamic routing protocol they provide is RIP. I've asked about OSPF support and was told that they'd never support it. Otherwise, it has its quirks just like any

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Jared Mauch
check: Router#show plat hard cap interface Interface Resources Interface drops: ModuleTotal drops:TxRx Highest drop port: Tx Rx 1 1261502177 367 7 7 You may be having higher-level buffering drops

[c-nsp] 7304 NSE-150 Interface issue

2010-07-21 Thread dbenson
All, I have a 7304 with Redundant NSE-150s in slots 0 and 2. The documentation states that Slot0 SFPs should be G0-3 while slot2's SFPs should be G2/0-3. I am not able to see, configure or even status the ports on the NSE in Slot2. Can someone shed some light on this confusing design of a

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Chris Lane
module 3 is the slot in question: cr.nyc1.ny# sh platform hardware capacity interface Interface Resources Interface drops: ModuleTotal drops:TxRx Highest drop port: Tx Rx 19024698 97525200 11 39 2

[c-nsp] RES: 6509 input queue drops

2010-07-21 Thread Leonardo Gama Souza
Check if the 32 Gbps bus is overwhelmed: #show cat all -Mensagem original- De: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] Em nome de Chris Lane Enviada em: quarta-feira, 21 de julho de 2010 12:59 Para: cisco-nsp@puck.nether.net Assunto: [c-nsp] 6509

[c-nsp] Mysterious GRE tunnel flap

2010-07-21 Thread Quinn Kuzmich
Ok, I have a problem that I'm hoping someone can help out with. I have two 1841s seperated by a Metro-E WAN. Over this is a GRE tunnel to route multicast. Every morning at 8AM EST, give or take 3 minutes, the tunnel will go down for about 30 seconds. This happens every morning at this time,

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Matthew Huff
The 6148 isn't a fabric enabled blade. You are probably running into microburst (short lived high packet count bursts of traffic) which overflow the hardware buffers on the linecard. You probably need to upgrade to a fabric enabled card such as 6548 or 6748. you can also do: show counters

Re: [c-nsp] Hughes v iDirect

2010-07-21 Thread Martin Moens
We host around 10 iDirect hubs for several customers, after quite a lot of issues with previous sw versions I don't hear a lot of complaints from the customers on stability, as far as I know the iDirect product has matured. An issue with bigger hubs could be the large number of servers needed for

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Lee Riemer
Is the port the traffic is going to egress running at a lower rate or congested? On 7/21/2010 10:58 AM, Chris Lane wrote: All, I have a 48 port 10/100/1000mb EtherModule WS-X6148-GE-TX on a 6509 running s72033-advipservicesk9_wan-mz.122-33.SXH7.bin Interface built as layer3 with a p2p

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Matthew Huff
The 6148 has 1.4MB buffers per 8 ports. Is there another port free that maybe the group of 8 ports are less busy? Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com | Phone: 914-460-4039 aim: matthewbhuff  | Fax:   914-460-4139

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Byron L. Hicks
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You may want to consider bumping up the size of your queues. Read: http://fasterdata.es.net/cisco.html It has a pretty good explanation of how to tune your queue sizes. On 07/21/2010 02:12 PM, Lee Riemer wrote: GigabitEthernet3/2 is up, line

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Matthew Huff
That works with software routers/switches, but hold-queue has no positive effect on hardware switches such as the 6500. The hold-queue will only effect software switched packets. Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577 http://www.ox.com |

Re: [c-nsp] 6509 input queue drops

2010-07-21 Thread Matthew Huff
Actually, I take some of that back. There are some circumstances where increasing the hold queue will help, but not for buffer overruns in hardware where microbursting is causing the overflow. Matthew Huff   | One Manhattanville Rd OTA Management LLC | Purchase, NY 10577

Re: [c-nsp] A few very Quick IP SLA questions

2010-07-21 Thread Shimol Shah
It is not supported in 12.2SX. Current documentation mentions otherwise. I am getting it updated. Shimol On 7/19/10 8:50 AM, Drew Weaver wrote: Does that Syntax work on 6500s (SXI3) it doesn't seem to in my case? thanks, -Drew -Original Message- From:

Re: [c-nsp] NX-OS - Fabric Path

2010-07-21 Thread Lincoln Dale
On 21/07/2010, at 9:13 PM, j.vaningensche...@utwente.nl j.vaningensche...@utwente.nl wrote: Is it just me or did others also receive a duplicate of the message below? Not only this one, but also others that had mr LTD as recipient and the list in CC... The duplicate comes later and has

Re: [c-nsp] Mysterious GRE tunnel flap

2010-07-21 Thread Quinn Kuzmich
I appreciate the reply - the tunne source locall is actually an HSRP virtual interface, and it never goes down according to what I'm seeing. And as far as I can recall, we get no errors on the interface that is acting as the active router. Q On Wed, Jul 21, 2010 at 6:00 PM, Graham Wooden

Re: [c-nsp] Mysterious GRE tunnel flap

2010-07-21 Thread Graham Wooden
I'll take a stab at this ... I think it's something physical at one of the sites. Does any of the two interfaces has their line protocol go down? Can you access down the link, outside the tunnel, ie. Ping your next hop during this? I had something similar happen with some collocated gear at a

Re: [c-nsp] Mysterious GRE tunnel flap

2010-07-21 Thread Pete Lumbis
I would take a box you can log outputs on (like a linux host). From site A set up a script that every 5 seconds prints the time then pings (say 10 packets): the local LAN interface, the local WAN interface, local the GRE IP, the remote WAN interface, remote LAN interface, remote GRE IP and if

Re: [c-nsp] Mysterious GRE tunnel flap

2010-07-21 Thread Quinn Kuzmich
No drops of any kinds on the interfaces. Any of the usual culprits (carrier resets, IPs reassigned, routing bugaboos etc) do not seem to match this. We aren't seeing any hits with EIGRP at ths time this happens, and the interfaces do not see any hits on the counters. To make this stranger, it's

[c-nsp] Swap of startup-config with TCAM(CEF MAX) size change

2010-07-21 Thread daigo nakayama
Hi all, When startup-config is swapped with TCAM(CEF MAX) size change, RELOAD of two times is needed. It is automatically generated once of RELOAD of two times. Can this behavior be evaded? (I am looking for Method of reflecting all changes with RELOAD of one time. ) -- Catalyst6503E

Re: [c-nsp] ASR1000 Series PPPoA

2010-07-21 Thread Tassos Chatzithomaoglou
I think it's supposed to appear later this year in the new 3.x (15.x) release. Probably your account team can help you more. Regards, Tassos Brian Turnbow wrote on 21/07/2010 11:37: Anyone heard anything on PPPoA on the ASR 1000 series yet? As far as i know it isn't supported (yet?)