Re: [c-nsp] RSPAN through intermediate switch...

2011-12-28 Thread sthaug
Possible if your intermediate switch can do Q-in-Q ;) No. You need to be able to turn off MAC address learning. Steinar Haug, Nethelp consulting, sth...@nethelp.no On Sat, Dec 3, 2011 at 4:15 AM, Jeff Kell jeff-k...@utc.edu wrote: Is it possible to run an RSPAN vlan through (not an

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Vitkovsky, Adam
Show run should display the configuration for the card that was removed and all it's references in the config It will jut list the interfaces as interface preconfigure gig0/2/3/4 -same as when you pre-configure interfaces for a line-card that is not yet inserted into the box or you'd like to

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Gert Doering
Hi, On Wed, Dec 28, 2011 at 10:31:31AM +0800, Mark Tinka wrote: I thought for sure there was a command that would show the preconfigured interfaces. As soon as I insert the new card, the preexisting configuration will magically appear again. That is the Juniper way :-). Which is not

Re: [c-nsp] GRE Tunnelling on the ME3600/ME3800 Switches ?

2011-12-28 Thread Saku Ytti
On (2011-12-28 18:30 +1100), Reuben Farrelly wrote: Hey, Is GRE tunnelling supported on this platform? No clue, but probably possible in magic fpga. We've a need to run GRE tunnels for a URL filtering solution at our Head Office from outside the firewall, and policy routing + GRE is the

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Daniel Roesen
On Wed, Dec 28, 2011 at 10:31:31AM +0800, Mark Tinka wrote: On Wednesday, December 28, 2011 03:13:35 AM John Neiberger wrote: I thought for sure there was a command that would show the preconfigured interfaces. As soon as I insert the new card, the preexisting configuration will

Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-28 Thread Vlad Skuba
Actually, FCoE is Single-Hop by standart. Creating extenders from Cisco-side is a trick to go from this limitation. Also if you already have non-Cisco FC Fabric, using Cisco Extenders should be done with care. On Fri, Dec 16, 2011 at 2:41 AM, Asbjorn Hojmark - Lists li...@hojmark.orgwrote: We

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Vitkovsky, Adam
Pre-configuration is possible with XR as well adam -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Daniel Roesen Sent: Wednesday, December 28, 2011 1:15 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] How to see

Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-28 Thread Asbjorn Hojmark - Lists
Actually, FCoE is Single-Hop by standart. Nonsense, the standards have been done for years. What constitutes a FC hop is an ISL (FCF VE_Port to FCF VE_Port)... and yes that is standardized for FCoE. See FC-BB-5. Also if you already have non-Cisco FC Fabric, using Cisco Extenders should be

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Daniel Roesen
On Wed, Dec 28, 2011 at 01:37:34PM +0100, Vitkovsky, Adam wrote: Pre-configuration is possible with XR as well So you can preconfigure interfaces, but not see and edit the remembered config of interfaces which got physically removed (or linecard shut down)? Best regards, Daniel -- CLUE-RIPE

Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-28 Thread Asbjorn Hojmark - Lists
Any experience on the operations side of things for the B22HP route? More specifically, feedback on how TAC (HP and Cisco) would look, day to day provisioning (risk to reloading an B22HP to the rest of the HP Blade?)...etc Support (functionality, troubleshooting) for the fabric extender is

Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-28 Thread Asbjorn Hojmark - Lists
Do you know what the limit to vlans on flexfabric is? It depends on the software version, which may be why you see different values different places. The maximum in a FlexFabric module is 320 VLANs with VC 3.18. There are other limits as to the number of VLANs in the VC domain, but that is an

[c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Nikolay Shopik
Hi list, Right now looking for new access switches, with 24 copper 1gig ports + 4 SFP ports. We don't really need any fancy features, and from datasheet I can tell WS-C2970G-24TS, fits us very well. I know this is EOL already and replaced with WS-C2960G-24TC-L, which recently replaced with

Re: [c-nsp] Deploying MSTP

2011-12-28 Thread Frédéric Loui
If you have a complex L2 topology and lots of VLAN per instance. VLANs per MST instance can become tedious. Might be worth to use some configuration/check scripts so as to make sure that all VLANs are bound to the right MST instance. My 2 cents ... -- Frédéric Le 27 déc. 2011 à 23:13, Jay

Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-28 Thread Vlad Skuba
Well, If you carefully read FC-BB-5 ver. 1.03, you may see that each Enode should be connected to Fibre Channel Forwarder. That is what I mean. Only FIP version 1 should remove this limitation. On Wed, Dec 28, 2011 at 3:03 PM, Asbjorn Hojmark - Lists li...@hojmark.orgwrote: Do you know what

Re: [c-nsp] Logging Connections

2011-12-28 Thread Nick Hilliard
On 27/12/2011 12:57, Manu Chao wrote: *Why not using following command on your SVI:* *ip accounting output*-*packets* Because that will trash the RP on the 6500. It may be a better idea to use a RSPAN session to sniff ingress / egress traffic on the physical ports in question. Nick On

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Vitkovsky, Adam
When you pull out a linecard -the particular interfaces config will automatically be converted into the: interface preconfigure gig 0/1/1 Than you can go ahead and edit the interface config if you like before you insert the new card back using the interface preconfigure cmd in the config mode

Re: [c-nsp] dumb BGP ipv6 peer group question

2011-12-28 Thread Nick Hilliard
On 27/12/2011 23:25, John Brown wrote: I'm trying to turn up some IPv6 peers. Most of them are already IPv4 peers. I have a peer group defined in the IPv4 world. I try to do cr01.lax(config-router)#address-family ipv6 unicast cr01.lax(config-router-af)#neig 2001:XXX:YY::ZZ remote A

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Mark Tinka
On Wednesday, December 28, 2011 08:14:58 PM Daniel Roesen wrote: No, with JUNOS adding/removing hardware won't change the config at all. You can preconfigure interfaces that were never installed in the chassis before, and config remains present when shutting down or even removing

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Mark Tinka
On Wednesday, December 28, 2011 08:48:43 PM Daniel Roesen wrote: So you can preconfigure interfaces, but not see and edit the remembered config of interfaces which got physically removed (or linecard shut down)? In IOS XR, if you preconfigure interfaces and the line card on which they are

Re: [c-nsp] Deploying MSTP

2011-12-28 Thread Chuck Church
Yep, definitely important to verify what VLANs are mapped to the instances. The Nexus for example reserves some VLANs that aren't obvious, so when you map them, they end up back in instance 0 with no warning. IOS didn't reserve those, so both my instance 0 and the one with high-numbered VLANs

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Mark Tinka
On Wednesday, December 28, 2011 06:45:09 PM Gert Doering wrote: Actually, IOS does this as well, if you replace a PA on a 7200 or a board on a catalyst switch - if the board is removed, the config isn't shown anywhere, but still remembered. If you insert a board of compatible type (PA-FE -

Re: [c-nsp] RSPAN through intermediate switch...

2011-12-28 Thread Phil Mayers
On 12/28/2011 07:11 AM, Manu Chao wrote: Possible if your intermediate switch can do Q-in-Q ;) No. That just changes the tag. MAC-in-MAC might help. Or, just disable learning. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Mark Tinka
On Wednesday, December 28, 2011 05:51:09 PM Vitkovsky, Adam wrote: Show run should display the configuration for the card that was removed and all it's references in the config It will jut list the interfaces as interface preconfigure gig0/2/3/4 -same as when you pre-configure interfaces

Re: [c-nsp] Cisco Nexus and HP Flexfabric

2011-12-28 Thread Asbjorn Hojmark - Lists
On Wed, 28 Dec 2011 15:25:10 +0200, you wrote: Well, If you carefully read FC-BB-5 ver. 1.03, you may see that each Enode should be connected to Fibre Channel Forwarder. That is what I mean. Yeah, that's exactly what you get with multi-hop FCoE from Cisco (N5K - N5K or N5K - N7K). So yes,

[c-nsp] Netflow Exporters for 3750

2011-12-28 Thread Jeff Wojciechowski
All: Would anyone be able to recommend a 3rd party NetFlow exporter that I could hook up to span port(s) on our 3750 switch stack? I know there are some out there and we are interested in others opinions. Thanks much, Jeff Wojciechowski LAN, WAN and Telephony Administrator Midland Paper

Re: [c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Nikolay Shopik
I've noticed WS-C2970G-24TS actually 1,5U, while other model just 1U. So I wonder if there any overheating issues? On 28/12/11 18:01, Joe Maimon wrote: Works for me in a number of locations. I have seen about one out of 20 go bad. So get some spares. Nikolay Shopik wrote: Hi list, Right

Re: [c-nsp] dumb BGP ipv6 peer group question

2011-12-28 Thread Devon True
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 27-Dec-11 6:25 PM, John Brown wrote: I'm trying to turn up some IPv6 peers. Most of them are already IPv4 peers. I have a peer group defined in the IPv4 world. You can use the same peer session and peer policy templates with v4 and v6

Re: [c-nsp] How to see interface configuration after card failure on ASR9K

2011-12-28 Thread Gert Doering
Hi, On Wed, Dec 28, 2011 at 09:18:55PM +0800, Mark Tinka wrote: On Wednesday, December 28, 2011 06:45:09 PM Gert Doering wrote: Actually, IOS does this as well, if you replace a PA on a 7200 or a board on a catalyst switch - if the board is [..] Cool, but what I meant was more of a I

Re: [c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Joe Maimon
Nikolay Shopik wrote: I've noticed WS-C2970G-24TS actually 1,5U, while other model just 1U. So I wonder if there any overheating issues? The physical design appears to be the same as 3550-12G and some of the 3750. The extra height is taken up by the PS and 2 fans which are on their own

Re: [c-nsp] dumb BGP ipv6 peer group question

2011-12-28 Thread Mack McBride
Peer policy templates still have the caveat that you can't do anything that is IP specific in the template if you want to share it. Of course if you override the IP specific portions template it will work. LR Mack McBride Network Architect -Original Message- From:

Re: [c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Mack McBride
The 2970 series also had issues with electrical imbalances. These really need to be chassis grounded where other switches aren't as sensitive. sarcasmNot that anyone ever fails to attach grounding cables to switches./sarcasm If you are running more than one Ethernet cable to the same device from

Re: [c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Mike
On 12/28/2011 05:16 AM, Nikolay Shopik wrote: Hi list, Right now looking for new access switches, with 24 copper 1gig ports + 4 SFP ports. We don't really need any fancy features, and from datasheet I can tell WS-C2970G-24TS, fits us very well. I know this is EOL already and replaced with

Re: [c-nsp] Logging Connections

2011-12-28 Thread Gert Doering
Hi, On Wed, Dec 28, 2011 at 01:30:52PM +, Nick Hilliard wrote: On 27/12/2011 12:57, Manu Chao wrote: *Why not using following command on your SVI:* *ip accounting output*-*packets* Because that will trash the RP on the 6500. I don't think it will actually do anything... (but I

[c-nsp] ipv6 nd prefix off-link

2011-12-28 Thread Tim Durack
6500, Sup720, 12.2(33)SXI6 I was experimenting with an off-link prefix on an SVI as an ipv6 nd-proxy with private vlan edge: int vlanid ipv6 nd prefix prefix 3600 3600 off-link end This doesn't appear to work. As soon as off-link is configured, a directly connected host can no longer ping

[c-nsp] IPv6 netflow

2011-12-28 Thread Mohammad Khalil
Hi , i have a question does it matter if i have configured the export parameters from the global mode or from the flow-cache mode i mean , i can set ipv6 flow-aggregation cache protocol-port export destination x.x.x.x port# or ipv6 flow-export destination x.x.x.x port# ipv6

[c-nsp] filter packet with ttl 0

2011-12-28 Thread zaid
hi how to filter packet with ttl of 0 on cisco 7600 (ios 12.3 SR )while the ACL in not support such filtering ? thanks ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] WS-C2970G-24TS as access switches

2011-12-28 Thread Nikolay Shopik
On 28/12/11 23:02, Mike wrote: On 12/28/2011 05:16 AM, Nikolay Shopik wrote: Hi list, Right now looking for new access switches, with 24 copper 1gig ports + 4 SFP ports. We don't really need any fancy features, and from datasheet I can tell WS-C2970G-24TS, fits us very well. I know this is

Re: [c-nsp] filter packet with ttl 0

2011-12-28 Thread Saku Ytti
On (2011-12-28 23:11 -0800), zaid wrote: how to filter packet with ttl of 0 on cisco 7600 (ios 12.3 SR )while the ACL in not support such filtering ? Unfortunately not possible, PFC3 does not have this hardware capability. You might find 'mls rate-limit all ttl-failure' useful to limit