Re: [c-nsp] Mysterious tunnel interfaces

2010-08-12 Thread Tassos Chatzithomaoglou
sh ip pim tunnel might give you more info. In later releases i have seen two tunnels (pim encap/decap) created automatically. -- Tassos Ivan wrote on 12/08/2010 07:22: I was working on a ISR 1941 with 15.0(1)M2. I am running DMVPN on it and using one tunnel interface. (Tunnel 1). No other

Re: [c-nsp] Mysterious tunnel interfaces

2010-08-12 Thread Adrian Turcu
only for fixing: maybe add to your list sh run inter tu0 , sh run inter tu2, etc for all your mysterious tunnels and a sh run full, edit to remove any trace of mystery, copy it as startup-config in your nvram, then reload the router. if you want to go to extremes, you can erase the config all

[c-nsp] RIP SOO not working

2010-08-12 Thread selamat pagi
My understanding of SOO was that if a vrf-if of a PE is configured with SOO and a route with the same SOO-value is received, this received route will not be placed into the vrf RIB. Is this not correct ? The issue is that a route propagated by CE10(10.10.10.10) is seen in CE11 even though on

Re: [c-nsp] CAT6509 module position in chassis

2010-08-12 Thread Harald Firing Karlsen
Hi Pavel. is there any recommended/best practices for module placement in CAT6509 chassis? For example, FWSM in slot 3, ACE in slot 2 etc etc.. The Catalyst 6500 (and 7600) reserves power for supervisors in both slot 5 and 6 even if you only have one sup. This means you should use the

Re: [c-nsp] /18 and multihomed BGP

2010-08-12 Thread Adam Armstrong
On 12/08/2010 13:21, RAZAFINDRATSIFA Rivo Tahina wrote: Hi all, I'm BGP multihomed with 2 ISPs and have a /18 subnet. I declared the /18 block in RIPE database as 64 /24. I'm adding a new ISP and he asked me to modify the 64 /24 in RIPE to a unique /18. How does this change affect the existing

Re: [c-nsp] /18 and multihomed BGP

2010-08-12 Thread Heath Jones
Hi If you advertise the /18 to one ISP (a) and the /24 to another ISP (b), you will find that all your traffic will enter via the 2nd ISP (b) as it will be the more specific routes in global BGP tables. Is there a reason you wanted to use 64x /24's in the first place? Cheers Heath On 12

Re: [c-nsp] /18 and multihomed BGP

2010-08-12 Thread Robert Lister
On Thu, 2010-08-12 at 15:21 +0300, RAZAFINDRATSIFA Rivo Tahina wrote: Hi all, I'm BGP multihomed with 2 ISPs and have a /18 subnet. I declared the /18 block in RIPE database as 64 /24. I'm adding a new ISP and he asked me to modify the 64 /24 in RIPE to a unique /18. The RIPE database is

Re: [c-nsp] Mysterious tunnel interfaces

2010-08-12 Thread Luan Nguyen
(20100811) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 5360 (20100812) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

[c-nsp] Cisco IPv6 doubt

2010-08-12 Thread Jeferson Guardia
Hi Group, A doubt/curiosity, what happens in a router that you are setting up IGP's , and you dont hardcode the router-id, thus it will look for an IPv4 address to use as a router-id, but what if I dont have any IPv4 address configured? Where will it come from? Rgs,

Re: [c-nsp] Cisco IPv6 doubt

2010-08-12 Thread Harold Ritter
Hi Jeferson, If you do not have any IPv4 address configured on the box, you absolutely need to configure the router-id explicitly. Regards Le 2010-08-12 à 10:50, Jeferson Guardia a écrit : Hi Group, A doubt/curiosity, what happens in a router that you are setting up IGP's , and you

Re: [c-nsp] Cisco IPv6 doubt

2010-08-12 Thread Jeferson Guardia
Thanks guys, just didnt have time to lab this up and was wondering as I am going through some ipv6 topics. Cheers, 2010/8/12 Harold Ritter hrit...@cisco.com Hi Jeferson, If you do not have any IPv4 address configured on the box, you absolutely need to configure the router-id explicitly.

Re: [c-nsp] Cisco IPv6 doubt

2010-08-12 Thread TJ
If a router has no IPv4 addresses to 'borrow' and use as a convenient 32bit value, you must manually configure the RID. /TJ On Thu, Aug 12, 2010 at 10:50, Jeferson Guardia jefers...@gmail.com wrote: Hi Group, A doubt/curiosity, what happens in a router that you are setting up IGP's , and

Re: [c-nsp] Cisco IPv6 doubt

2010-08-12 Thread Mohacsi Janos
On Thu, 12 Aug 2010, Jeferson Guardia wrote: Hi Group, A doubt/curiosity, what happens in a router that you are setting up IGP's , and you dont hardcode the router-id, thus it will look for an IPv4 address to use as a router-id, but what if I dont have any IPv4 address configured? Where

Re: [c-nsp] CAT6509 module position in chassis

2010-08-12 Thread Arvind .cisconsp
Be careful with that. I worked with a customer who did this and then decided to upgrade to dual Sup's. As you can imagine, it turned out to be a *huge* exercise that involved multiple downtime windows and configuration modifications (read verification windows) across the board for each Sup add.

[c-nsp] Route Bridged Encapsulation on Frame Relay?

2010-08-12 Thread Clayton Zekelman
I'm trying to come up with a best practices method of building a stock configuration for customer T1 CPE. The idea is to use Frame Relay over a T1, have 2 DLCI's defined - one to a management IP wrapped inside a VRF on each end. Ideally, I'd like the CPE router to learn it's IP during

[c-nsp] internal DSCP

2010-08-12 Thread P.A
I have a questing about internal DSCP on a 6500 that I'm not really sure about. I know that it's used to identify the priority of a frame/packet as it transits the switch but I have read on some sites that the internal DSCP is copied to the frame/packet as it leaves the switch. On other sites

[c-nsp] Network mapping...again

2010-08-12 Thread John Neiberger
We're looking for a dynamic network mapping tool that does not require a large amount of hand-holding and manpower to manage. I don't care if this is a free or paid product. Ideally, I'd like something that autodiscovers the network including L2 and L3 devices, then intelligently maps them. I used

Re: [c-nsp] Network mapping...again

2010-08-12 Thread Luan Nguyen
mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ __ Information from ESET NOD32 Antivirus, version of virus signature database 5360 (20100812) __ The message was checked by ESET NOD32

Re: [c-nsp] Mysterious tunnel interfaces

2010-08-12 Thread Jay Nakamura
was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 5360 (20100812) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus

Re: [c-nsp] Mysterious tunnel interfaces

2010-08-12 Thread Matlock, Kenneth L
NOD32 Antivirus, version of virus signature database 5358 (20100811) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 5360 (20100812) __ The message was checked

Re: [c-nsp] Mysterious tunnel interfaces

2010-08-12 Thread Jay Nakamura
database 5358 (20100811) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 5360 (20100812) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

Re: [c-nsp] internal DSCP

2010-08-12 Thread Tim Stevenson
Hi PA, Not sure where your quotes are coming from. The 2nd one is a bit misleading IMO, it sort of mangles the concepts of PFC classification egress port QoS. It refers to a specific behavior around matching remarked DSCP in an egress ACL. That is not possible w/o a recirculation. This

[c-nsp] App to manage pushing out changes

2010-08-12 Thread Jay Nakamura
Anyone have recommendation on any application that can push out config changes to many many routers? Mostly interested in keeping ACL consistent between about 50 ~ 100 routers. My google skill has failed me on this one. Thanks! ___ cisco-nsp mailing

Re: [c-nsp] App to manage pushing out changes

2010-08-12 Thread Saxon Jones
CiscoWorks LMS or even RANCID will work for this. On a box with RANCID installed it's done like so: for host in router1 router2 router3; do clogin -cconfig t;no ip access list extended asdf;ip access list extended asdf permit any any;end;write mem ${host}; done -saxon On 12 August 2010 13:09,

Re: [c-nsp] App to manage pushing out changes

2010-08-12 Thread John Neiberger
I used to use DeviceAuthority from AlterPoint a few years ago. It was a really good product for this type of thing. It's pretty expensive now, though. On Thu, Aug 12, 2010 at 1:09 PM, Jay Nakamura zeusda...@gmail.com wrote: Anyone have recommendation on any application that can push out config

Re: [c-nsp] App to manage pushing out changes

2010-08-12 Thread Daniel Dib
-Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jay Nakamura Sent: den 12 augusti 2010 21:10 To: cisco-nsp Subject: [c-nsp] App to manage pushing out changes Anyone have recommendation on any application that can push

Re: [c-nsp] internal DSCP

2010-08-12 Thread P.A
Tim thanks for your response, I think I'm starting to get it. So basically if you do ingress marking with an ACL by default it will not use that marking on egress unless you use an egress acl for remarked packets using 'platform ip features sequential'? What about for the following, would the

Re: [c-nsp] internal DSCP

2010-08-12 Thread Tim Stevenson
Hi Paul, please see inline below: At 12:40 PM 8/12/2010, P.A averred: Tim thanks for your response, I think I'm starting to get it. So basically if you do ingress marking with an ACL by default it will not use that marking on egress unless you use an egress acl for remarked packets using

Re: [c-nsp] App to manage pushing out changes

2010-08-12 Thread Sharlon Carty
Try cattools. Sharlon Carty ICT Technician   P.O. Box 1110 Soualiga Boulevard #5 Pond Island, Philipsburg, St. Maarten, Netherlands Antilles      Mobile:   +599 527-4002 E-mail: sharlon.ca...@telemgroup.an    http://www.telemgroup.an/  

Re: [c-nsp] App to manage pushing out changes

2010-08-12 Thread Jim McBurnett
Yeah-- if it's for a non-linux person, or someone that wants a canned cheap package... Cattools is the way to go.. I have used it to update configs in close to 100 devices at a time... Even gone so far as having databases for multiple customers Simple stuff to really wild stuff Jim

Re: [c-nsp] App to manage pushing out changes

2010-08-12 Thread Brandon Ewing
On Thu, Aug 12, 2010 at 01:24:24PM -0600, Saxon Jones wrote: CiscoWorks LMS or even RANCID will work for this. On a box with RANCID installed it's done like so: for host in router1 router2 router3; do clogin -cconfig t;no ip access list extended asdf;ip access list extended asdf permit any

Re: [c-nsp] linux vpn client

2010-08-12 Thread LM
With cisco concentrator 3030 works ok, sometimes it get disconnected but not a big deal ,you can always reconnect. No problems for me at all, neither the people in the office using it over ubuntu. El 10/08/10 18:16, Quinn Snyder escribió: network-manager-vpnc in the ubuntu repos. little

[c-nsp] Cisco Security Advisory: Cisco IOS Software TCP Denial of Service Vulnerability

2010-08-12 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Cisco Security Advisory: Cisco IOS Software TCP Denial of Service Vulnerability Advisory ID: cisco-sa-20100812-tcp http://www.cisco.com/warp/public/707/cisco-sa-20100812-tcp.shtml Revision 1.0 For Public Release 2010 August 12 2130 UTC (GMT

[c-nsp] cisco1861 for Dial backup

2010-08-12 Thread omar parihuana
Hi Group, I've just received a Cisco router 1861: http://www.cisco.com/en/US/prod/collateral/routers/ps5853/ps8321/product_data_sheet0900aecd806c4dce.html This router have two BRI ports. I've tried to configure a Dial Backup using this ports but I received the follow messages:

[c-nsp] Weird Routing Behaviour

2010-08-12 Thread Lin Domingo
I am having weird routing issues with the T1 circuits. We use /30 subnets for all T1 circuits, so for customer X with assigned subnet of x.x.x.176/30, x.x.x.177 is the serial interface on the ISP end of the circuit. The ISP side of the router is defined thusly: interface Serial6/0/16:0