[c-nsp] router suggestion for backup link

2018-07-09 Thread aptgetd
Hi,

Can anyone provide suggestion outside cisco ASR/ISR router model that can handle
2.5gb throughput and also able to scale to 5gb? Currently this router will
perform static routes but we may switch to BGP down the path to accept default
route(s). 

Both ASR/ISR seem to be little pricey/feature rich for what we need for our
backup 2gb link.

Any feedback will be appreciated.

-- sky
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] LACP Nexus vpc down after server reboot

2018-07-09 Thread Gustav Ulander
We have had some issues with VPC over non networking hw.
Works great towards our Juniper switches but is a pain to all things EMC more 
or less.
Its hit and miss towards some IBM AIX machines. It gets broken quite often when 
they patch the AIX machines. 
I would be abit careful running VPC to non networking hw and test a lot not 
just initialization of the channel but also failover, redundancy tests and so 
on.  

//Gustav

-Ursprungligt meddelande-
Från: cisco-nsp  För Satish Patel
Skickat: den 9 juli 2018 18:44
Till: Cisco Network Service Providers 
Ämne: [c-nsp] LACP Nexus vpc down after server reboot

I have Nexus 3064 with vPC configuration and some strange issue going on, I 
have configured LACP 802.3ad bonding with my Linux server everything was good 
and working great but as soon as i reboot server i found on Nexus switch vpc is 
down

N3K(config-if)# sh vpc 137


vPC status
--
id   Port   Status Consistency Reason Active vlans
--      -- --- -- 
137  Po137  down*  success success-


But as soon as i do "shut/no shut" on po137 interface it works and vpc brought 
up.

is this normal behavior on Cisco Nexus switches? I am using many IOS switch in 
same config and it works but with vpc i am having issue.

This is my switch config, i am running nexus 7.0.x NX-OS

interface port-channel137
  switchport mode trunk
  switchport trunk native vlan 40
  switchport trunk allowed vlan 10,20,30,100
  speed 1
  vpc 137


on Linux side i have following config.

BONDING_OPTS="mode=4 miimon=500 downdelay=1000 lacp_rate=1"
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] LACP Nexus vpc down after server reboot

2018-07-09 Thread Satish Patel
I have Nexus 3064 with vPC configuration and some strange issue going
on, I have configured LACP 802.3ad bonding with my Linux server
everything was good and working great but as soon as i reboot server i
found on Nexus switch vpc is down

N3K(config-if)# sh vpc 137


vPC status
--
id   Port   Status Consistency Reason Active vlans
--      -- --- -- 
137  Po137  down*  success success-


But as soon as i do "shut/no shut" on po137 interface it works and vpc
brought up.

is this normal behavior on Cisco Nexus switches? I am using many IOS
switch in same config and it works but with vpc i am having issue.

This is my switch config, i am running nexus 7.0.x NX-OS

interface port-channel137
  switchport mode trunk
  switchport trunk native vlan 40
  switchport trunk allowed vlan 10,20,30,100
  speed 1
  vpc 137


on Linux side i have following config.

BONDING_OPTS="mode=4 miimon=500 downdelay=1000 lacp_rate=1"
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] NAT logging ASR1k

2018-07-09 Thread Aaron Gould
You wanna see the juniper configs for your ASR1006?

Not sure why we didn't use netflow.  I guess because syslog worked and that's 
where the docs led me

Aaron

> On Jul 9, 2018, at 2:52 AM, Ring Bit  wrote:
> 
> Hi Aaron,
> 
> Could you post the nat configs? 
> 
> Why not use Netflow? 
> 
> Thanks.
> T.
> 
>> Sent: Sunday, July 08, 2018 at 10:14 PM
>> From: "Aaron Gould" 
>> To: ring...@mail.com
>> Cc: cisco-nsp@puck.nether.net
>> Subject: Re: [c-nsp] NAT logging ASR1k
>> 
>> Bulk logging and port block allocation (PBA)?  
>> 
>> https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-3s/nat-xe-3s-book/iadnat-bpa.html
>> 
>> I do PBA in groups of 100 ports on my CGNAT deployment (juniper) and use 
>> syslog to log.  Using port block allocation caused the syslogging to slow 
>> down significantly 
>> 
>> Aaron
>> 
>>> On Jul 8, 2018, at 10:12 AM, ring...@mail.com wrote:
>>> 
>>> Hi everybody,
>>> 
>>> Have an ASR 1006 doing NAT translations, it is having  around 300k+ and 
>>> wanted to ask for a recommendation about logging those NAT translations. 
>>> 
>>> Tried it with a collector via Netflow v9 with the export command "ip nat 
>>> log translationsflow-export v9 udp destination"  command the CPU spiked to 
>>> 100%. 
>>> 
>>> Is there a recommendation as a workaround or have alternative solution 
>>> which is easy on resources to those massive NAT translations?
>>> 
>>> Thanks,
>>> T.
>>> ___
>>> cisco-nsp mailing list  cisco-nsp@puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>> 
>> 

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] NAT logging ASR1k

2018-07-09 Thread Ring Bit
Hi Patrick,

I'm interested about the config you are using.

T.

> Sent: Monday, July 09, 2018 at 12:46 AM
> From: "Patrick Cole" 
> To: ring...@mail.com
> Cc: cisco-nsp@puck.nether.net
> Subject: Re: [c-nsp] NAT logging ASR1k
>
> T,
> 
> We are having around 200-300k non-CGNAT translations on ASR1001-X and using 
> Netflow Event
> Logging.  The CPU on average is less than 20%. 
> 
> Regards,
> 
> Patrick
> 
> Sun, Jul 08, 2018 at 05:12:29PM +0200, ring...@mail.com wrote:
> 
> > Hi everybody,
> > 
> > Have an ASR 1006 doing NAT translations, it is having  around 300k+ and 
> > wanted to ask for a recommendation about logging those NAT translations. 
> > 
> > Tried it with a collector via Netflow v9 with the export command "ip nat 
> > log translationsflow-export v9 udp destination"  command the CPU spiked to 
> > 100%. 
> > 
> > Is there a recommendation as a workaround or have alternative solution 
> > which is easy on resources to those massive NAT translations?
> > 
> > Thanks,
> > T.
> > ___
> > cisco-nsp mailing list  cisco-nsp@puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] NAT logging ASR1k

2018-07-09 Thread Ring Bit
Hi Aaron,

Could you post the nat configs? 

Why not use Netflow? 

Thanks.
T.

> Sent: Sunday, July 08, 2018 at 10:14 PM
> From: "Aaron Gould" 
> To: ring...@mail.com
> Cc: cisco-nsp@puck.nether.net
> Subject: Re: [c-nsp] NAT logging ASR1k
>
> Bulk logging and port block allocation (PBA)?  
> 
> https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-3s/nat-xe-3s-book/iadnat-bpa.html
> 
> I do PBA in groups of 100 ports on my CGNAT deployment (juniper) and use 
> syslog to log.  Using port block allocation caused the syslogging to slow 
> down significantly 
> 
> Aaron
> 
> > On Jul 8, 2018, at 10:12 AM, ring...@mail.com wrote:
> > 
> > Hi everybody,
> > 
> > Have an ASR 1006 doing NAT translations, it is having  around 300k+ and 
> > wanted to ask for a recommendation about logging those NAT translations. 
> > 
> > Tried it with a collector via Netflow v9 with the export command "ip nat 
> > log translationsflow-export v9 udp destination"  command the CPU spiked to 
> > 100%. 
> > 
> > Is there a recommendation as a workaround or have alternative solution 
> > which is easy on resources to those massive NAT translations?
> > 
> > Thanks,
> > T.
> > ___
> > cisco-nsp mailing list  cisco-nsp@puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
>
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/