Re: [c-nsp] BGP route filtering question about upstreams

2014-10-08 Thread Mark Tinka
On Tuesday, October 07, 2014 07:41:08 PM Andrew (Andy) Ashley wrote: Could be an option but I’m guessing that AS100 will then only have a partial table from AS200? Which works out fine, since you say AS100 prefers the full table from AS300, and does not prefer AS200 for the same. I feel

[c-nsp] Cat3750: MAC addresses of L3 interfaces change after reboot ?!

2014-10-08 Thread Marian Ďurkovič
Hi all, Catalyst 3560/3750 /G/E switches seem to implement L3 interfaces differently than other switches - they use unique MAC address per every L3 interface. MAC addresses are assigned from the MACaddr pool in the order how L3 interfaces are created, however after reboot they are assigned

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software

2014-10-08 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Multiple Vulnerabilities in Cisco ASA Software Advisory ID: cisco-sa-20141008-asa Revision 1.0 For Public Release 2014 October 8 16:00 UTC (GMT) Summary +== Cisco Adaptive Security Appliance (ASA) Software is affected by the following

Re: [c-nsp] (no subject)

2014-10-08 Thread Vincent C Jones
The way I've dealt with this in the past (a trick I learned from Barry) is to ask for full routes (and no default), filter out ALL prefixes except for those of associated with a few far away root name servers, and then generate a default conditional on reachability of at least one name server. It

[c-nsp] Exactly how bad is the 6704-10GE?

2014-10-08 Thread Simon Lockhart
All, (This is vaguely related to my question earlier in the week about ASR capacity) We use quite a few 6704-10GE blades on our network, and I'm seeing some random congestion type issues. In some cases, I've made the problem go away by shuffling ports between blades to spread the load, but I'm