Re: [c-nsp] BGP MD5 DDOS ?

2012-09-19 Thread Nick Hilliard
On 19/09/2012 02:42, Robert E. Seastrom wrote: You forgot the consequences of getting some other element of the config wrong because you were preoccupied with the MD5 key. I'll take simplicity every time. One good use for MD5 is to stop people at Internet Exchanges from hijacking old bgp

[c-nsp] CiscoWorks LMS 3.2 upgrade to 4.2

2012-09-19 Thread Murat Kaipov
Hi All!!! Can anybody explain upgrade procedure for CiscoWorks LMS. I have CiscoWorks LMS 3.2 and I want to upgrade software up to 4.2 So what do I need for it? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] METRO Ethernet CFM question

2012-09-19 Thread Adam Vitkovsky
Just would like to ask whether it's common or not to create MIPs at customer Level (Level 6 or Level 7) Thanks adam ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] [2.0 Update] Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client

2012-09-19 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client Advisory ID: cisco-sa-20120620-ac Revision 2.0 Last Updated 2012 September 19 16:01 UTC (GMT) For Public Release 2012 June 20 16:00 UTC (GMT)

[c-nsp] Giants and input errors but no MTU mismatch 7600-to-4948

2012-09-19 Thread John Neiberger
I have an interface on a 4948 that is reporting increasing giants and input errors. The MTU is the default 1500 and so is the interface on the other side of the link. This is a dot1q trunk, if that is relevant. 7600 Side: GigabitEthernet3/3 is up, line protocol is up (connected) Hardware is

[c-nsp] HA: METRO Ethernet CFM question

2012-09-19 Thread Fedorov, Konstantin
Hi, Do not think so. At level 6,7 you need CFM , but this is end2end. Konstantin От: cisco-nsp-boun...@puck.nether.net [cisco-nsp-boun...@puck.nether.net] от имени Adam Vitkovsky [adam.vitkov...@swan.sk] Отправлено: 19 сентября 2012 г. 19:08 To:

Re: [c-nsp] Giants and input errors but no MTU mismatch 7600-to-4948

2012-09-19 Thread Aaron
Would double tagging (qnq) sitting atop g3/3 (service instances or svi's) cause this? Or mpls-enabled svi's sitting on top of g3/3 perhaps ? (brainstorming as I'm not sure what to make of it) Aaron -Original Message- From: cisco-nsp-boun...@puck.nether.net

[c-nsp] VMware teaming Nic's and multiple switches

2012-09-19 Thread Scott Voll
If I have a VM physical server I can team two nics and then do a port channel on the switch. Can this be done if I have two switches? example: switch - server - switch |---| TIA Scott ___

Re: [c-nsp] VMware teaming Nic's and multiple switches

2012-09-19 Thread Matt Zagrabelny
On Wed, Sep 19, 2012 at 4:48 PM, Scott Voll svoll.v...@gmail.com wrote: If I have a VM physical server I can team two nics and then do a port channel on the switch. Can this be done if I have two switches? You can use active-standby; just tag the interfaces with the same VLAN. With Catalyst

Re: [c-nsp] VMware teaming Nic's and multiple switches

2012-09-19 Thread Peter Rathlev
On Wed, 2012-09-19 at 14:48 -0700, Scott Voll wrote: If I have a VM physical server I can team two nics and then do a port channel on the switch. Can this be done if I have two switches? That would require switches capable of cooperating more than usual. Matts suggestions of 3750 Stackwise

Re: [c-nsp] VMware teaming Nic's and multiple switches

2012-09-19 Thread Scott Voll
What if you have all the VM Nic's are setup as Trunks so the VMware team can place the new VM's on the network that is needed? Does that affect any of this? Currently I have a 4506E and was planning on either a stack of 3750's or another 4506E. Thoughts? Scott On Wed, Sep 19, 2012 at 3:00 PM,

Re: [c-nsp] VMware teaming Nic's and multiple switches

2012-09-19 Thread Peter Rathlev
On Wed, 2012-09-19 at 15:24 -0700, Scott Voll wrote: What if you have all the VM Nic's are setup as Trunks so the VMware team can place the new VM's on the network that is needed? Does that affect any of this? Currently I have a 4506E and was planning on either a stack of 3750's or another

Re: [c-nsp] VMware teaming Nic's and multiple switches

2012-09-19 Thread Jeff Kell
We did cross-chassis port channels on 3750s for years. However, the new vCenter/ESX 5+ has this automatic link balancing thing. You setup the trunks all the same, no need for port-channels, and the vCenter host load-balances the vlans/hosts across the available links. Kinda ugly from the switch

[c-nsp] Are Nexus and per-interface or FEX MTU settings possible?

2012-09-19 Thread Conkel, Joshua
We just bought a bundle of 2x 5548Ps and 20x 2248s in order to converge our data and storage networks in our new datacenter. After carefully reading the configuration limitations document and designing around the limitations for our migration, we pulled the trigger and bought the material. The