[c-nsp] Cisco 7304-NSE-100 used as a border BGP router

2011-10-05 Thread puck-nsp
I have a customer who wishes to be multi-homed with us and another Service Provider and wishes to have 2 full views. We proposed a Cisco 7206VXR-NPE-G1 with 1Gb/256 and the other vendor (a small ISP) provided him with a 7304-NSE-100 and a SPA2-1Gb card as a solution. He has 1Gb with 100Mb

[c-nsp] pppoe - different speed DSL customers

2011-10-05 Thread K bharathan
can dsl customers be seperated based on speed in cisco PPPoe thanks for any clues on this regards ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Cisco 7304-NSE-100 used as a border BGP router

2011-10-05 Thread Per Carlson
Questions: 3.      Is there something special about this 7304 that I am missing? It's an old deprecated product which went End of Sale in July 4, 2010. 5.      Is this a good choice for a customer router? I would rather choose an ASR1001. It's a modern platform and do out-perform a 7304 in

Re: [c-nsp] Cisco 7304-NSE-100 used as a border BGP router

2011-10-05 Thread Saku Ytti
On (2011-10-04 23:21 -0700), puck-...@interworld.net wrote: I have a customer who wishes to be multi-homed with us and another Service Provider and wishes to have 2 full views. We proposed a Cisco 7206VXR-NPE-G1 with 1Gb/256 and the other vendor (a small ISP) provided him with a

Re: [c-nsp] C7600 vs. ASR 9000

2011-10-05 Thread Mohacsi Janos
On Tue, 4 Oct 2011, Mack McBride wrote: The 9K uses a crossbar fabric evolved from the 6500/7600 (not the same as the GSR - CRS evolved fabric) The port interface chips are the same. The NPU chip is the same as used in the ES cards. Primary difference is in the way the FIB is run on the 9K

Re: [c-nsp] pppoe - different speed DSL customers

2011-10-05 Thread Arie Vayner (avayner)
Can you define separated? Basically, you can have a user policy (per user or user group) on your AAA server (RADIUS) with different policies such as QOS, IP Assignment, VRF selection and many other options... Arie -Original Message- From: cisco-nsp-boun...@puck.nether.net

[c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Waseem
Hi, I'm seeing the following output for show interface gig x/y switching ROUTER#sh inter gig x/y switching GigabitEthernet x/y       Throttle count  0     Drops RP  0 SP  0   SPD Flushes   Fast  0    SSE  0   SPD

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Phil Mayers
On 05/10/11 09:31, Waseem wrote: Hi, I'm seeing the following output for show interface gig x/y switching What platform? What IOS version? And what is your question? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Phil Mayers
On 05/10/11 12:05, Waseem wrote: 7600+RSP720-3C-GE 12.2(33)SRB2 why I'm seeing 10% CPU utilization by interrupt handling? Try using a SPAN of the CPU to see what traffic is hitting the CPU; this is by far the quickest way to find the cause. ___

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Waseem
It is a regular internet traffic to port 80, from our customers, which should be CEF switched. From: Phil Mayers p.may...@imperial.ac.uk To: Waseem waseem_alir...@yahoo.com Cc: cisco-nsp@puck.nether.net cisco-nsp@puck.nether.net Sent: Wednesday, October 5, 2011

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Phil Mayers
On 05/10/11 12:15, Waseem wrote: It is a regular internet traffic to port 80, from our customers, which should be CEF switched. Port 80 traffic to where? Can you show some? There must be something wrong with the traffic or your config for the 7600 to be process switching it. You need to

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Waseem
7600+RSP720-3C-GE 12.2(33)SRB2 why I'm seeing 10% CPU utilization by interrupt handling? From: Phil Mayers p.may...@imperial.ac.uk To: cisco-nsp@puck.nether.net Sent: Wednesday, October 5, 2011 1:41 PM Subject: Re: [c-nsp] CPU utilization for handling interrupt

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Nick Hilliard
On 05/10/2011 12:15, Waseem wrote: It is a regular internet traffic to port 80, from our customers, which should be CEF switched. Sounds like your router is punting all traffic. Are you seeing the following errors in your logs? %CFIB-SP-7-CFIB_EXCEPTION : FIB TCAM exception, Some entries

[c-nsp] 76-ES+XC-20G3C UPGRADE

2011-10-05 Thread frank Pecora
Good day everyone, Our SE is out of town and we have urgent project for a telco this weekend. is there any way to upgrade a 76-ES+XC-20G3C to a 76-ES+XC-20G3CXL? Is this just a daughterboard issue? ___ cisco-nsp mailing list

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Pete Lumbis
TCP Adjust-mss causes the 6k to punt the SYN to SW. I'm not sure if this will be process switched or CEF switched (interrupt), but I don't see a reason why we couldn't do it in software CEF. -Pete On Wed, Oct 5, 2011 at 8:20 AM, Nick Hilliard n...@foobar.org wrote: On 05/10/2011 12:15, Waseem

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Waseem
I'm not receiving that log, I have nearly 600Mbps on this link, nearly 3 - 6 Mbps is being process switched from this link only, I tried to disable it, the CPU due to interrupt got 0%. please check the following packets. -- interface

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Phil Mayers
On 05/10/11 14:15, Pete Lumbis wrote: TCP Adjust-mss causes the 6k to punt the SYN to SW. I'm not sure if this will be process switched or CEF switched (interrupt), but I don't see a reason why we couldn't do it in software CEF. Ah, well spotted; I didn't see that. FWIW I have used adjust-mss

Re: [c-nsp] CPU utilization for handling interrupt

2011-10-05 Thread Waseem
Hi, TCP adjust-mss is the key, you were right. Thanks Waseem From: Pete Lumbis alum...@gmail.com To: Nick Hilliard n...@foobar.org Cc: Waseem waseem_alir...@yahoo.com; NSP cisco-nsp@puck.nether.net Sent: Wednesday, October 5, 2011 4:15 PM Subject: Re: [c-nsp]

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

2011-10-05 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Advisory ID: cisco-sa-20111005-asa Revision 1.0 For Public Release 2011 October 05 1600 UTC

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module

2011-10-05 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Advisory ID: cisco-sa-20111005-fwsm Revision 1.0 For Public Release 2011 October 05 1600 UTC (GMT

[c-nsp] Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager

2011-10-05 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Directory Traversal Vulnerability in Cisco Network Admission Control Manager Advisory ID: cisco-sa-20111005-nac Revision 1.0 For Public Release 2011 October 05 1600 UTC (GMT

[c-nsp] No Link between SFP-10G-LRM and X2-10GB-LX4?

2011-10-05 Thread cisco
Greetings, I have a 6509 with an X6716-10GE Card equipped with Cisco X2-10GB-LX4 10GE modules and a Cisco 2960S-48TD-L Switch with two Cisco SFP-10G-LRM modules. Right now I am not able to get an active link between these X2 and SFP modules, it stays down/down (notconnected). I instantly get a

Re: [c-nsp] No Link between SFP-10G-LRM and X2-10GB-LX4?

2011-10-05 Thread Gert Doering
Hi, On Wed, Oct 05, 2011 at 07:40:30PM +0200, ci...@entrap.de wrote: I have a 6509 with an X6716-10GE Card equipped with Cisco X2-10GB-LX4 10GE modules and a Cisco 2960S-48TD-L Switch with two Cisco SFP-10G-LRM modules. http://en.wikipedia.org/wiki/10_Gigabit_Ethernet#10GBASE-LX4 and no...

Re: [c-nsp] No Link between SFP-10G-LRM and X2-10GB-LX4?

2011-10-05 Thread quinn snyder
are you sure that its supported? lx4 == wwdm optic == 4x2.5gbps channels using wideband muxing. additionally, when looking at datasheets for x2 and sfp+ modules, one will see that lx4 optic mentions 4 lanes, launching in the 1300nm space and a separate pluggable for x2-10gb-lrm. sfp+ only

Re: [c-nsp] No Link between SFP-10G-LRM and X2-10GB-LX4?

2011-10-05 Thread Chuck Church
I believe LX4 uses multiple wavelengths. This seems to confirm it. I don't think you can mix those with anything else. http://www.cisco.com/en/US/prod/collateral/modules/ps5455/ps6574/product_dat a_sheet0900aecd801f92aa.html Thanks, Chuck -Original Message- From:

Re: [c-nsp] GRE over IPSEC loss in IOS 15.x / ISR x9xx Routers

2011-10-05 Thread Dustin Schuemann
Today I also noticed that all these connections are going over comcast business. Anyone seen anything like this? On Tue, Sep 27, 2011 at 5:43 PM, Dustin Schuemann dschuem...@gmail.comwrote: Do you have any other suggestions. TAC is kinda going around in circles. On Sep 27, 2011, at 3:43 AM,

Re: [c-nsp] ASR903, ASR9k, SUP2T questions

2011-10-05 Thread Pshem Kowalczyk
Hi, On 6 October 2011 08:59, Robert Hass robh...@gmail.com wrote: {cut} 3) What is performance of ASR903 (Gbps and PPS) - can I have it wirerate with 5 x 10GE cards ? AFAIK the chassis can take only 4 x10G (last two slots have only about 7G of capacity). kind regards Pshem

Re: [c-nsp] C7600 vs. ASR 9000

2011-10-05 Thread Mark Tinka
On Wednesday, October 05, 2011 02:51:18 PM Mohacsi Janos wrote: After some calculation: AS9006 with 6-8 10 GE and 20 GE is slightly cheaper on list prices than C7606 with similar amount of ports with ES+ cards. You really can get an ASR9000 at a much better, similarly- spec'ed 7600. Just

Re: [c-nsp] Cisco 7304-NSE-100 used as a border BGP router

2011-10-05 Thread Mark Tinka
On Wednesday, October 05, 2011 03:27:39 PM Saku Ytti wrote: 3.5Mpps is for single pass, quite many things force two pass and halve performance. The platform is at its best at relatively basic IP termination with QoS, there when compared to VXR it offers superior and predictable performance

Re: [c-nsp] ASR903, ASR9k, SUP2T questions

2011-10-05 Thread Mark Tinka
On Thursday, October 06, 2011 10:19:20 AM Pshem Kowalczyk wrote: AFAIK the chassis can take only 4 x10G (last two slots have only about 7G of capacity). Can't say much about the box at the moment, but in case you didn't notice, it's an IOS XE system, despite the 9 following ASR :-). Maybe