[c-nsp] no ipv6 source-route

2007-04-24 Thread Hank Nussbacher
In which version of 12.2(xx)SXE/SXF is the command no ipv6 source-route supported? It isn't available in 12.2(18)SXE6b which did come out in Jan 2007. Thanks, Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] no ipv6 source-route

2007-04-24 Thread Hank Nussbacher
At 01:10 PM 24-04-07 -0400, Jared Mauch wrote: On Tue, Apr 24, 2007 at 07:59:46PM +0300, Hank Nussbacher wrote: In which version of 12.2(xx)SXE/SXF is the command no ipv6 source-route supported? It isn't available in 12.2(18)SXE6b which did come out in Jan 2007. I don't see

[c-nsp] IPv6 address set bug?

2007-05-07 Thread Hank Nussbacher
When installing a 10G interface, we tried copying the ipv6 address from the GigaE port: ipv6 address 2001:xxx:0:B::1/64 IOS 12.2(18)SXE6b says: 2001:xxx:0:B::1/64 can not be configured on TenGigabitEthernet10/1, in use The new 10Gig port is in shutdown. Makes no difference if we try copying the

Re: [c-nsp] display last lines of logging

2007-05-25 Thread Hank Nussbacher
On Fri, 25 May 2007, Brad Henshaw wrote: Don't forget that log lines before the 10th have an extra blank so you will need begin May 1 rather than begin May 1. -Hank Don't forget the 'begin' keyword which can give tailish output: Sh log | begin Apr 25 Regards, Brad

Re: [c-nsp] 10Gig Ethernet commands

2007-06-05 Thread Hank Nussbacher
On Tue, 5 Jun 2007, Jay Ford wrote: Ba-bing! Thanks, -Hank On Tue, 5 Jun 2007, Hank Nussbacher wrote: Nope. That one I know. It's output was 1 line per interface and showed near the end of the line the type of GBIC identified. -Hank You're probably thinking of show interface status

[c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Hank Nussbacher
What causes a router to become a Designated Router (DR) on a VLAN? I always thought highest router-id, but I have a few test routers and here is what I get: C#sho ip ospf nei Neighbor ID Pri State Dead Time Address Interface 192.168.1.1 1 FULL/DR

Re: [c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Hank Nussbacher
At 11:48 AM 07-06-07 +0300, Hank Nussbacher wrote: PNG did not make it thru so you can find it here: http://www.interall.co.il/vlans.png Thanks, Hank What causes a router to become a Designated Router (DR) on a VLAN? I always thought highest router-id, but I have a few test routers and here

Re: [c-nsp] Newbish OSPF DR question on VLANs

2007-06-07 Thread Hank Nussbacher
schematic. There is something I am missing here that I am trying to understand. Thanks, Hank What is the uptime of C? On Thu, Jun 07, 2007 at 11:48:52AM +0300, Hank Nussbacher wrote: What causes a router to become a Designated Router (DR) on a VLAN? I always thought highest router-id, but I

[c-nsp] Cisco IOS versions that support switchport?

2007-06-26 Thread Hank Nussbacher
I tried using the Feature navigator and could not find a simple switchport capability. Where can I find a Cisco page that shows which IOS versions that support switchport capability (specifically for 871, 1841, 2501, 2514 and 2610)? Thanks, Hank ___

Re: [c-nsp] BGP open failed...connection refused due to jitter

2007-07-18 Thread Hank Nussbacher
At 02:49 PM 18-07-07 +0530, Vikas Sharma wrote: See: http://www.cisco.com/warp/public/459/bgp_trouble_main.html#bgp_trouble_neighbor -Hank Hi, While configuring IBGP, I am getting Active stste in sh ip bgp summary. debug of BGP is pested below. R7-PE5#debug bgp ipv4 unicast BGP debugging is

[c-nsp] 12.4(11)T QoS problems (again)

2007-07-26 Thread Hank Nussbacher
Cisco Field Notice: Field Notice: FN - 62854 - Cisco IOS - Performance Degradation and Reloads Possible When Using Quality of Service Features in Version 12.4(11)T - July 26, 2007 http://www.cisco.com/en/US/customer/products/ps6441/products_field_notice09186a008088cc2f.shtml

[c-nsp] Cisco RHI - Route Health Injection

2007-08-07 Thread Hank Nussbacher
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_implementation_design_guide0900aecd80223072.html Traffic Hijacking Options In the integrated configuration, there is only one traffic hijacking option-sending an RHI message from the Anomaly Guard to the routing process of the

Re: [c-nsp] Cisco 6500 SUP2/MSFC2 protection and rate-limiting

2007-08-11 Thread Hank Nussbacher
At 08:45 PM 11-08-07 +0200, Nicolas DEFFAYET wrote: Although not specific for SUP2, start here and search for Engine 2 in the text: http://www.cisco.com/en/US/products/hw/switches/ps708/products_white_paper0900aecd802ca5d6.shtml -Hank Hi, I'm currently work for better protect our devices. I

Re: [c-nsp] bgp connection refused

2007-09-06 Thread Hank Nussbacher
This should be simple but I failed to find out why. I have two cisco routers connected via an eth--l2 mpls--eth. But the bgp connections between two routers are refused. Any help will be appreciated. Start at: http://www.cisco.com/warp/public/459/bgp_trouble_main.html and specifically:

Re: [c-nsp] 12.2(18)SXF11

2007-09-26 Thread Hank Nussbacher
At 09:55 PM 25-09-07 +0100, Euan Galloway wrote: On Tue, Sep 25, 2007 at 11:19:30AM -0700, virendra rode // wrote: http://www.cisco.com/en/US/customer/netsol/ns504/networking_solutions_products_generic_content0900aecd80694a2a.html#sxf_ios_software_mod I like that all modular software

Re: [c-nsp] 12.2(18)SXF11

2007-09-29 Thread Hank Nussbacher
At 12:33 PM 28-09-07 -0400, Jared Mauch wrote: Hank Nussbacher wrote: At 09:55 PM 25-09-07 +0100, Euan Galloway wrote: On Tue, Sep 25, 2007 at 11:19:30AM -0700, virendra rode // wrote: http://www.cisco.com/en/US/customer/netsol/ns504

Re: [c-nsp] what limits bw on a tcp stream?

2007-11-17 Thread Hank Nussbacher
On Fri, 16 Nov 2007, Mark Boolootian wrote: I have gear in Amsterdam and in San Jose. Pushing log files from Amsterdam to San Jose through rsync seems to top out at 7Mbps even though the box doing the push is pushing much more out to the Internet. If I run several rsync's it goes quicker

Re: [c-nsp] IOS 12.0(32)SY3/4

2007-11-24 Thread Hank Nussbacher
On Fri, 23 Nov 2007, hjan wrote: Hi, does anyone know why ip multicast rate-limit is not supported in those release ? GSR1 Version 12.0(28)S6 GSR1(config-if)#ip multicast ? boundaryBoundary for administratively scoped multicast addresses helper-map Broadcast to Multicast map OR

[c-nsp] SPAN and RSPAN

2007-12-04 Thread Hank Nussbacher
Very nice articles about the perils of SPAN and even worse - RSPAN: http://www.lovemytool.com/blog/2007/08/span-ports-or-t.html http://www.lovemytool.com/blog/2007/11/rspan.html -Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] 12.SR vs 12.2SX train

2007-12-08 Thread Hank Nussbacher
I have reviewed: http://www.cisco.com/en/US/products/hw/routers/ps368/prod_bulletin0900aecd805df25d.html http://www.cisco.com/en/US/products/hw/switches/ps708/prod_bulletin0900aecd80628341.html but am looking for a Cisco page that would be a line by line comparison of the two versions, where I

[c-nsp] Fwd: 12.SR vs 12.2SX train

2007-12-08 Thread Hank Nussbacher
I have reviewed: http://www.cisco.com/en/US/products/hw/routers/ps368/prod_bulletin0900aecd805df25d.html http://www.cisco.com/en/US/products/hw/switches/ps708/prod_bulletin0900aecd80628341.html but am looking for a Cisco page that would be a line by line comparison of the two versions, where I

[c-nsp] VLSM - Cisco ACL - Extended ACL format table?

2007-12-23 Thread Hank Nussbacher
Can anyone point me at a table which shows the 3 different formats of VLSM (/14) vs Cisco ACL (0.3.255.255) vs Cisco Extended ACL (255.252.0.0) all in one neat table? I am sure there must be one out there - but I haven't managed to find one via Google yet. Thanks, Hank

Re: [c-nsp] VLSM - Cisco ACL - Extended ACL format table?

2007-12-23 Thread Hank Nussbacher
At 08:15 AM 23-12-07 -0500, Eric Van Tol wrote: Thanks. I might HTML later this week unless someone else has it online someplace. -Hank -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hank Nussbacher Sent: Sunday, December 23, 2007 7:32 AM

Re: [c-nsp] How to measuse the throughput on Internet Links

2008-01-09 Thread Hank Nussbacher
On Wed, 9 Jan 2008, omar parihuana wrote: Simple. Ask on any hacker/botnet forum for someone to DDOS you. They'll be more than happy to oblige. :-) -Hank Hi guys, I bought a new Internet Link 40Mbps 1:1 that is provide with FastEthernet interface, now, I would like to check if I have

Re: [c-nsp] Looking for visually impressive server racks

2008-01-10 Thread Hank Nussbacher
I find very cool when the front door has a drilled hole pattern with the logo on the company. Check your local suppliers for details. -Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] OT: NSP Engineer payscale

2008-01-13 Thread Hank Nussbacher
At 10:19 PM 10-01-08 -0600, Justin Shore wrote: A few links to look at: http://images.globalknowledge.com/wwwimages/pdfs/2007_SalaryReport.pdf http://www.bradreese.com/compensation-database.htm -Hank This is very off-topic for this list but this is also the best group of people to answer my

[c-nsp] Cheapening the value of a CCIE

2008-01-13 Thread Hank Nussbacher
Does Cisco do anything to stop these kind of antics: http://losangeles.craigslist.org/lac/cpg/536118581.html -Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Cheapening the value of a CCIE

2008-01-14 Thread Hank Nussbacher
On Mon, 14 Jan 2008, Scott Keoseyan wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://www.rentacert.com/ C00l! I bet some college kid got $4M in VC money from some Sand Hill pimp for that site. :-) -Hank Takes the cheapening to a whole new level... It appears, however,

Re: [c-nsp] 6748 compatibility with the 7600/RSP720 series.

2008-01-15 Thread Hank Nussbacher
At 09:33 AM 15-01-08 +0200, Gabriel Mateiciuc wrote: In addition you might want to review this 4 year old test results: http://www.eantc.com/fileadmin/eantc/downloads/test_reports/2003-2005/EANTC-Summary-Report-Cisco-GigE-Catalyst6500-Supervisor720.pdf -Hank The 67xx are the best you can get

[c-nsp] 12.2(18)SXF question

2008-01-16 Thread Hank Nussbacher
We are on 12.2(18)SXE6b (7600-SUP720/MSFC3) . We are installing a SIP-400 and the SPA-1XOC48POS/RPR which based on the release notes requires 12.2(18)SXF10 or higher. Since there is already SXF11 and SXF12 and SXF12a out already can anyone recommend which version to stay away from or which

Re: [c-nsp] BGP routes: 207k + 157k = 238k ???...

2008-01-24 Thread Hank Nussbacher
On Thu, 24 Jan 2008, Tony Li wrote: there is something I can't quite figure out with BGP. Let a bi-homed AS with only two BGP speakers (each of them has one eBGP session with a different upstream, they speak iBGP together). Router 1 receives 238k routes from provider A; so does router 2

Re: [c-nsp] Nexus 7000

2008-01-29 Thread Hank Nussbacher
At 03:22 PM 29-01-08 -0500, Casey Mills wrote: http://www.forbes.com/technology/cionetwork/2008/01/27/cisco-nexus-switch-tech-inter-cx_ag_0128techcisco.html Anyone else find it interesting that Juniper yesterday launced their EX switch series (specifically the EX8200):

Re: [c-nsp] IPv6 bgp

2008-02-06 Thread Hank Nussbacher
At 11:42 AM 06-02-08 +0200, [EMAIL PROTECTED] wrote: Hi, I'm playing with IPv6 on some test routers. I noticed that sh ip bgp sum does not give information about IPv6 neighbors. IOS running on the boxes is 12.3(20). Is there an IOS version that has show commands regarding bgp and IPv6 ? sho

Re: [c-nsp] Logging remote access logins

2008-03-04 Thread Hank Nussbacher
At 03:14 PM 05-03-08 +0900, Aaron R wrote: Hey guys, Is there an easy way to log remote access login attempts on the cisco kit? I see there is a way to enable configuration change logs but I don't see an option to log accepted logins / failed logins etc. 1) Log which IPs logged in or were

Re: [c-nsp] Logging remote access logins

2008-03-05 Thread Hank Nussbacher
log when someone connects to the device. Doesn't seem like a tall order :) Cheers, Aaron. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron R Sent: Wednesday, March 05, 2008 4:39 PM To: 'Hank Nussbacher'; cisco-nsp@puck.nether.net

[c-nsp] Prepare for router Wednesday

2008-03-11 Thread Hank Nussbacher
http://www.techworld.com/security/news/index.cfm?RSSNewsID=11665 Following the lead of Microsoft and Oracle, Cisco Systems will start releasing security patches for some of its products on a schedule. ... The first of these scheduled updates will occur on Wednesday, 26 March, and Cisco will

[c-nsp] BGP-6-ASPATH error messages

2008-03-22 Thread Hank Nussbacher
Is there a reason why when Cisco provides a %BGP-6-ASPATH error message like: %BGP-6-ASPATH: Invalid AS path [chars] received from [int]: [chars] %BGP-6-ASPATH: Long AS path aa bb cc dd received from x.x.x.x: More than configured MAXAS-LIMIT that they can't include the actual prefix causing

Re: [c-nsp] BGP-6-ASPATH error messages

2008-03-30 Thread Hank Nussbacher
This will be fixed via: CSCso47162 Externally found enhancement (Sev6) bug: New (N) BGP-6-ASPATH message should print offending prefix(es) -Hank Is there a reason why when Cisco provides a %BGP-6-ASPATH error message like: %BGP-6-ASPATH: Invalid AS path [chars] received from [int]: [chars]

[c-nsp] ACE 4710 and Akamai?

2008-03-30 Thread Hank Nussbacher
Has anyone implemented an ACE 4710 (or a blade) on Akamaized content? Are there any hidden gotchas to get these two technologies to play nicely together? Thanks, Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] BGP 4 MIB Support for per-Peer Received Routes

2008-04-01 Thread Hank Nussbacher
http://www.cisco.com/en/US/docs/ios/12_2s/feature/guide/fsbgpmib.html A BGP RIB could potentially contain 10,000 or more routes, which makes a manual walk operation impossible and automated walk operations very inefficient. Could potentially contain more than 10,000 routes? When was this

Re: [c-nsp] changing from ospf to eigrp

2008-04-05 Thread Hank Nussbacher
I would like to change our layer 3 switches from ospf to eirgrp. Is there a way I can accomplish this on a live system without causing problems? Can I run both at the same time? You realize that if you ever want to run MPLS you need OSPF and not EIGRP. Also, if you ever want to buy a

[c-nsp] Debug ssh?

2008-04-07 Thread Hank Nussbacher
What debug command is one to use to debug an outgoing ssh session from a router? Something like -vvv. Thanks, Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] Identifying BGP route flapping

2008-04-10 Thread Hank Nussbacher
At 04:12 PM 09-04-08 -0500, Frank Bulk wrote: Not sure if this will help but we use: router bgp xxx bgp log-neighbor-changes and snmp-server enable traps bgp and in our IOS log we usually find things like: Mar 17 15:03:06: %BGP-5-ADJCHANGE: neighbor xxx.139.217.2 Down BGP Notification

[c-nsp] IOSW vs JunOS

2008-04-17 Thread Hank Nussbacher
Sure to start a religious war but I am just pointed readers to the article: http://www.networkworld.com/news/2008/041708-cisco-juniper-operating-systems.html?ts0hb=story=wknd_wir http://www.networkworld.com/slideshows/2008/041708-junos-vs-ios.html

Re: [c-nsp] NPE-G1 PPS limitations

2008-04-17 Thread Hank Nussbacher
On Thu, 17 Apr 2008, Ross Vandegrift wrote: On Thu, Apr 17, 2008 at 11:35:13AM -0700, [EMAIL PROTECTED] wrote: Would one expect gigE to gigE traffic local to the NPE-G1 to scale higher than that? Yea, I would expect that. I don't understand all of the architechtural issues on the 7200

Re: [c-nsp] NPE-G1 PPS limitations

2008-04-18 Thread Hank Nussbacher
On Fri, 18 Apr 2008, Łukasz Bromirski wrote: For the GE ports on NPE-G1 you can expect around [EMAIL PROTECTED], for the traffic going from/to GE port on NPE-G1 to C7200-I/O-GE it's close to [EMAIL PROTECTED], and going from/to PA-GE it's only around [EMAIL PROTECTED] That'll depend on

Re: [c-nsp] NPE-G1 PPS limitations

2008-04-20 Thread Hank Nussbacher
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hank Nussbacher Sent: Friday, April 18, 2008 17:03 PM To: Łukasz Bromirski Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] NPE-G1 PPS limitations On Fri, 18 Apr 2008, Łukasz Bromirski wrote: For the GE ports on NPE-G1 you can expect around

[c-nsp] SPAN for POS?

2008-05-13 Thread Hank Nussbacher
We recently upgraded our connectivity from GigaE to an STM-16 POS. We now find that SPAN doesn't cover POS links: petach-tikva-gp(config)#monitor session 1 source interface ? GigabitEthernet GigabitEthernet IEEE 802.3z Port-channelEthernet Channel of interfaces

Re: [c-nsp] SPAN for POS?

2008-05-13 Thread Hank Nussbacher
in the tap (port move, additional mirror added), just caused too much down time. -Hank Jason -- Regards, Jason Plank CCIE #16560 e: [EMAIL PROTECTED] -- Original message -- From: Michael Smith [EMAIL PROTECTED] Hello Hank: On May 13, 2008, at 6:30 AM, Hank

Re: [c-nsp] SPAN for POS?

2008-05-14 Thread Hank Nussbacher
At 03:57 PM 13-05-08 +, [EMAIL PROTECTED] wrote: Yes, use the switchport capture feature. http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/sx_swcg.pdf create the VACL first and then set a switchport as capture. You can apply the VACL to a WAN

Re: [c-nsp] Strangeness with eFlexwan POS ports on 7600

2008-05-19 Thread Hank Nussbacher
On Mon, 19 May 2008, Hank Nussbacher wrote: Cisco TAC found that the one interface that worked didn't have uRPF enabled whereas the others did: ip verify unicast source reachable-via rx allow-default 170 What is amazing is that this caused deterministic pkt loss. I have removed it and pkt loss

Re: [c-nsp] BGP default route

2008-06-11 Thread Hank Nussbacher
On Wed, 11 Jun 2008, Ozgur Guler wrote: For a better reference try: http://www.cisco.com/en/US/tech/tk365/technologies_configuration_example09186a0080094309.shtml -Hank Conditional route advertisement might help...

[c-nsp] ip multicast rate-limit

2008-06-12 Thread Hank Nussbacher
http://www.cisco.com/en/US/docs/ios/ipmulti/command/reference/imc_03.html#wp1016097 In 12.2(18)SXF11: petach-tikva-gp(config)#int pos11/0/0 petach-tikva-gp(config-if)#ip multicast rate-limit in group-list SAP-mcast-group 1000 ip multicast rate-limit command is not supported So I go to:

Re: [c-nsp] ip multicast rate-limit

2008-06-14 Thread Hank Nussbacher
2.3Ok -Hank Thanks Arie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hank Nussbacher Sent: Thursday, June 12, 2008 16:02 PM To: cisco-nsp@puck.nether.net Cc: Zenon Mousmoulas Subject: [c-nsp] ip multicast rate-limit http://www.cisco.com/en/US

Re: [c-nsp] fabric switching enable

2008-06-17 Thread Hank Nussbacher
On Tue, 17 Jun 2008, Pham, Loc wrote: Another interesting command to explore is: petach-tikva-gp#sho platfor hard capa fabr Switch Fabric Resources Bus utilization: current: 0%, peak was 8% at 09:10:06 IST Thu Feb 28 2008 Fabric utilization: IngressEgress

[c-nsp] Cisco support wiki

2008-06-21 Thread Hank Nussbacher
Been up for a year but very poorly advertised and very poorly implemented: http://supportwiki.cisco.com/ IE 6.0 w/ SP1 on W2K doesn't work. Firefox 2 works better. But content after a year is spotty and poorly structured. -Hank ___ cisco-nsp mailing

[c-nsp] Possible security issue with CDP

2008-06-25 Thread Hank Nussbacher
Just wanted to alert people to a possible minor info leak in regards to Cisco CDP. We had 'cdp off' on POS11/0/0 which is an STM-16 link. Now change the encap from ppp to hdlc. Automagically, without notifying anyone, IOS changes CDP to be on. Not a good thing when trying to maintain a secure

Re: [c-nsp] Possible security issue with CDP

2008-06-26 Thread Hank Nussbacher
:25AM +0300, Hank Nussbacher wrote: Just wanted to alert people to a possible minor info leak in regards to Cisco CDP. We had 'cdp off' on POS11/0/0 which is an STM-16 link. Now change the encap from ppp to hdlc. Automagically, without notifying anyone, IOS changes CDP to be on. Not a good thing

Re: [c-nsp] Possible security issue with CDP

2008-06-26 Thread Hank Nussbacher
. Aaron On Thu, Jun 26, 2008 at 12:12 PM, Hank Nussbacher [EMAIL PROTECTED] wrote: On Thu, 26 Jun 2008, Jared Mauch wrote: Of course. This was opened with PSIRT (PSIRT-0642590629) on March 26 and was discussed internally by them and I argued against their view but they held their ground

Re: [c-nsp] Possible security issue with CDP

2008-06-28 Thread Hank Nussbacher
On Sat, 28 Jun 2008, Gert Doering wrote: Hi, On Fri, Jun 27, 2008 at 10:13:36AM -0700, Brandon Price wrote: I am sure this is a stupid question but I have to ask.. Is there any compelling reason to run CDP in a service provider environment? We like it. In a mostly-Cisco-Shop it's very

Re: [c-nsp] GigE Max Speed

2008-07-17 Thread Hank Nussbacher
On Fri, 18 Jul 2008, Lincoln Dale wrote: Paul Stewart wrote: Hi there... One on our our 7606's we have a GigE link that is getting fairly hot with traffic GigabitEthernet4/1 is up, line protocol is up (connected) .. Input queue: 0/2000/438/0 (size/max/drops/flushes); Total output

Re: [c-nsp] Crash bug in SXH3

2008-08-11 Thread Hank Nussbacher
On Mon, 11 Aug 2008, Phil Mayers wrote: Bård Dahlmo wrote: On Thu, 7 Aug 2008, Phil Mayers wrote: Just a warning, there is a fatal crash bug in SXH3 related to using SCP. Considering the release notes claim fixes in that very area, this is highly amusing (note: issue may not actually be

Re: [c-nsp] 4 Byte AS implementation on Cisco Routers

2008-08-13 Thread Hank Nussbacher
At 12:10 AM 13-08-08 -0700, Darryl Dunkin wrote: There are a few already using it: http://www.cidr-report.org/cgi-bin/as-report?as=2.4view=2.0 http://www.cidr-report.org/cgi-bin/as-report?as=5.1view=2.0 Just do a BGP search for AS23456: aut-num:AS23456 as-name:RESERVED-AS descr:

Re: [c-nsp] RES: conditional bgp default-originate

2008-08-13 Thread Hank Nussbacher
At 05:30 PM 13-08-08 -0300, Leonardo Gama Souza wrote: I have tested this and it is working at a specific customer: neighbor 10.100.80.7 default-originate route-map track-Broadwing neighbor 10.100.80.7 distribute-list nothing-else-plus out ! ip access-list extended nothing-else-plus ! Insert

Re: [c-nsp] RES: conditional bgp default-originate

2008-08-14 Thread Hank Nussbacher
On Thu, 14 Aug 2008, Jon Lewis wrote: if it does, that means their backbone has gone down. Do a few traceroutes and you will quickly figure out what are their backbone CIDRs to use. That's basically what I ended up with yesterday in the simulator. My problem with it is, without inside

[c-nsp] Cisco ACE and Akamai

2008-08-24 Thread Hank Nussbacher
Since I see there are more and more people using the ACE on the list, has anyone encountered a problem with the ACE vers A1(8.0a) and Akamai where Akamai returns a null cookie even though one is set? Thanks, Hank ___ cisco-nsp mailing list

Re: [c-nsp] which IOS supports sup720 + FlexWAN + PA-POS-OC3?

2008-08-26 Thread Hank Nussbacher
On Tue, 26 Aug 2008, Marco d'Itri wrote: Works for me on 12.2(18)SXE6b but all are eFlexwans: Slot 4: Logical_index 9 2 port adapter Enhanced FlexWAN controller Board is analyzed ipc ready HW rev 0.1, board revision A01 Serial Number: Part number: 73-6348-01

[c-nsp] Cisco pushes 'network memory' to alleviate high-speed bottlenecks

2008-09-10 Thread Hank Nussbacher
http://www.networkworld.com/news/2008/090908-cisco-network-memory.html?netht=ts_091008nladname=091008dailynewspmal On a 10Gbps link, for example, packets can arrive approximately every 50ns, while commodity memory – for example, DRAM memory -- can only be accessed once every 50ns. Packets can

Re: [c-nsp] NPE-G2 Gigabit Ignored Errors

2008-09-14 Thread Hank Nussbacher
At 02:43 PM 12-09-08 -0400, Rodney Dunn wrote: Rodney, On a related note, we are seeing input overruns on almost all native GigaE ports on the NPE-G1. Example on 12.4(21): GigabitEthernet0/2 is up, line protocol is up Hardware is BCM1250 Internal MAC, address is 0009.446d.ac1a (bia

Re: [c-nsp] NPE-G2 Gigabit Ignored Errors

2008-09-14 Thread Hank Nussbacher
At 02:16 PM 12-09-08 -0400, Rodney Dunn wrote: I don't suspect that is going to help because the ignores are not increasing that would point to: CSCse05447 Externally found moderate defect: Resolved (R) 7200 ethernet interfaces should not throttle on input queue full drops Most likely you are

Re: [c-nsp] Conditional BGP

2008-10-19 Thread Hank Nussbacher
At 09:47 PM 18-10-08 +0500, Masood Ahmad Shah wrote: I am curious if anyone else uses conditional BGP as a poor man's DRP? Suppose you have site A with 192.168.1.0/24. The site is connected to 2 upstream ISPs and they have a number of servers at site A. They now create a DRP site (site B),

Re: [c-nsp] Conditional BGP

2008-10-19 Thread Hank Nussbacher
On Sun, 19 Oct 2008, Jay Hennigan wrote: Hank Nussbacher wrote: At 09:47 PM 18-10-08 +0500, Masood Ahmad Shah wrote: I am curious if anyone else uses conditional BGP as a poor man's DRP? Suppose you have site A with 192.168.1.0/24. The site is connected to 2 upstream ISPs and they have

[c-nsp] Router comparison scorecard

2008-10-29 Thread Hank Nussbacher
http://www.cisco.com/web/partners/downloads/765/tools/quickreference/isr.pdf On the 3845 are listed 2 notes #7 #9 and I can't find those notes listed in this handy 4 page doc. What am I missing? Thanks, Hank ___ cisco-nsp mailing list

Re: [c-nsp] full BGP route in 7600

2008-10-29 Thread Hank Nussbacher
At 03:07 PM 29-10-08 +0200, moshe mizrachi wrote: hi , i have 7609s with RSP3CXL running SRC2 + 7600-ES20-10G3C(2*10Gig) +SIP400 with SPA-OC12 . via the OC12 there is BGP peer that getting full route bgp , the problem is that the ES20 is 3C with DFC with limition of memory, is there any

Re: [c-nsp] SXI out

2008-11-13 Thread Hank Nussbacher
At 12:46 PM 13-11-08 -0500, Jared Mauch wrote: If people want to, I can set up a wiki where you can post test cases, results, configurations, feature data, etc.. Would that be of value? I can't wait for the black T-shirt: I have SXI - do you? -Hank - Jared --

Re: [c-nsp] Recommended Cisco boxes for a small multihoming solution?

2008-11-13 Thread Hank Nussbacher
I'm looking for some pointers on what are the smallest recommeded Cisco boxes to use for a small multihoming solution. 2 full BGP views (approx 260k routes each) 100 Mbps bandwidth requirement. The setup currently uses 2 Juniper M5 but those are in dire need of refresh. What is the

Re: [c-nsp] Recommended Cisco boxes for a small multihoming solution?

2008-11-13 Thread Hank Nussbacher
And to repeat - to the best of my knowledge the 3825 can't take 1GB of RAM and therefore is not an optimal solution for small multihoming. -Hank On Fri, 14 Nov 2008, Mark Tinka wrote: On Friday 14 November 2008 13:09:58 Eric Cables wrote: If you look at the interactive model (

Re: [c-nsp] Recommended Cisco boxes for a small multihoming solution?

2008-11-14 Thread Hank Nussbacher
On Fri, 14 Nov 2008, Garry wrote: Hank Nussbacher wrote: On Thu, 13 Nov 2008, Garry wrote: The 3825 can take 1GB? The Cisco ISR link doesn't show that. Just checked again - I thought I had put 1GB in our FW-Router, but it's only 768 at the moment (added a 512 to the stock 256) ... Anyway

Re: [c-nsp] downloads broken?

2008-11-18 Thread Hank Nussbacher
On Tue, 18 Nov 2008, Jared Mauch wrote: They don't hear us, they don't see us unless we happen to be doing some 6 digit tender for equipment. With their stock having dropped from 29 to under 16 today all in the course of 12 months, do you really think any VP there cares whether Jared is

Re: [c-nsp] Green Cisco

2008-11-20 Thread Hank Nussbacher
On Thu, 20 Nov 2008, Justin Shore wrote: So does Cisco. When we placed a large order 2 years ago I received to identical packages from Singapore (some sort of Air parcel company). Inside each box was 2 layers of pink foam padding. Between the foam was 2 sheets of legalese license disclaimer

[c-nsp] So you think you know Cisco

2008-12-18 Thread Hank Nussbacher
http://www.networkworld.com/slideshows/2008/121808-cisco-quiz.html?netht=rn_121808nladname=121808 -Hank ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] Softnet replacement?

2009-01-11 Thread Hank Nussbacher
I was informed that Cisco no longer sells Softnet support. What should I be asking for in order to open TAC cases directly (not via our Cisco Gold Partner) as well as to be able to download new IOS versions? Thanks, Hank ___ cisco-nsp mailing list

Re: [c-nsp] Softnet replacement?

2009-01-11 Thread Hank Nussbacher
- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Hank Nussbacher Sent: Sunday, January 11, 2009 10:28 To: cisco-nsp@puck.nether.net Subject: [c-nsp] Softnet replacement? I was informed that Cisco no longer sells Softnet support. What should I

Re: [c-nsp] Softnet replacement?

2009-01-11 Thread Hank Nussbacher
On Sun, 11 Jan 2009, Will Hargrave wrote: Hank Nussbacher wrote: That provides RMA which we do not need. We want *only* TAC access and IOS downloads. Softnet provided that option - which Cisco has abolished. In the past i've bought 'SASU' which is Software Application Support plus

Re: [c-nsp] Softnet replacement?

2009-01-11 Thread Hank Nussbacher
On Sun, 11 Jan 2009, Justin Shore wrote: There is a SmartNet option with software, TAC support, and no advanced replacement in SP Base. Specifically you want SP-SW for your device. To give you an idea of the price difference for a 7201 with no on-site support, 24x7x4 is $3226, 8x5xNBD is

[c-nsp] Where do you buy used Cisco equipment?

2009-01-14 Thread Hank Nussbacher
1) I do not want to hear from resellers - I would like to hear from users - where do you buy your used Cisco equipment? 2) How do you handle IOS downloads for used equipment? What do you need to buy from Cisco for this? 3) What about servicing? Does Cisco offer service contracts on someone

Re: [c-nsp] Softnet replacement?

2009-01-21 Thread Hank Nussbacher
At 11:22 AM 11-01-09 -0600, Justin Shore wrote: Gert Doering wrote: Hi, On Sun, Jan 11, 2009 at 01:41:59PM +0200, Hank Nussbacher wrote: That provides RMA which we do not need. We want *only* TAC access and IOS downloads. Softnet provided that option - which Cisco has abolished. Oh

Re: [c-nsp] GSS and ACE

2009-04-22 Thread Hank Nussbacher
At 12:00 AM 23-04-09 +0800, Roland Dobbins wrote: On Apr 22, 2009, at 11:33 PM, Nick Griffin wrote: Great, thanks to all. So am I to assume if I have X Data Centers, I need 1xX GSS's for redundancy? I'd put a cluster of 2 at each IDC, something like that. Why 2 at each IDC? Since each

Re: [c-nsp] GSS and ACE

2009-04-22 Thread Hank Nussbacher
At 09:45 AM 22-04-09 -0500, Nick Griffin wrote: So say I had 2 datacenter locations geographically disperse and I'm not running BGP. I have similar web and smtp servers at each locations. I'm not so much concerned that traffic gets load balanced to a cluster of servers when traffic enters a

Re: [c-nsp] Give Cisco your feedback on the new download experience at tacwebsur...@cisco.com (was: several heart-felt flames regarding the mess that is the Cisco.com download experience)

2009-07-15 Thread Hank Nussbacher
On Wed, 15 Jul 2009, Saku Ytti wrote: While I subscribe to the download manager hate, it doesn't bother me nearly as much as unusable bugtool since the last upgrade two years ago. Prior to the upgrade, I could solve maybe 1/3 of my cases, without involving TAC. At that time, I thought bugtool

[c-nsp] Humor: Cisco announces end of BGP

2009-07-28 Thread Hank Nussbacher
I just got this product alert from Cisco: From: cisconotificationserv...@cisco.com To: h...@efes.iucc.ac.il Subject: Cisco Notification Alert -Alerts_Daily-07/28/2009 07:38 GMT Cisco Notification Service Alert: Cisco Notification Alert -Alerts_Daily-07/28/2009 07:38 GMT End-of-Sale and

Re: [c-nsp] Humor: Cisco announces end of BGP

2009-07-29 Thread Hank Nussbacher
At 15:36 29/07/2009 -0300, Rubens Kuhl wrote: Hank, Any news on what exactly was EOL'ed ? I think it was a mistake on their part. -Hank Rubens On Tue, Jul 28, 2009 at 4:50 AM, Hank Nussbacher h...@efes.iucc.ac.il wrote: I just got this product alert from Cisco: From

Re: [c-nsp] Counters for null0?

2009-08-05 Thread Hank Nussbacher
On Wed, 5 Aug 2009, mas...@nexlinx.net.pk wrote: Not always. Just do: sho ip cache flow | incl Null to see pkts that are null routed and that are not counted via the null0 interface. -Hank show interface null0 always works on Cisco boxes. You can see in/out packets as well. Regards,

[c-nsp] Bug query broken?

2009-09-14 Thread Hank Nussbacher
I am trying the Bug Query toolkit: http://tools.cisco.com/Support/BugToolKit/action.do?hdnAction=searchBugs - specifing all IOS releases and trying keywords like vlan or vty which should have some hits but I keep getting: No bugs meet your search criteria, try widening your search criteria and

Re: [c-nsp] Enhanced download procedure - Cisco contact info

2009-09-17 Thread Hank Nussbacher
On Thu, 17 Sep 2009, Jay Hennigan wrote: Dream on. -Hank I have opened a dialog and have gotten what seem to be reasonable responses from this person, who seems interested in our feedback. Oscar Bauer - ba...@cisco.com However, I just about had a Joe Wilson moment when he sent me the

Re: [c-nsp] Enhanced download procedure

2009-09-18 Thread Hank Nussbacher
On Thu, 17 Sep 2009, Stig Johansen wrote: I've gone this road in the past a few times - feedback forms, Gold partner escalation, emailing Cisco managers, and other than burning my time - nothing good comes of it. Cisco has shed any people that truly understand how things should work and what

Re: [c-nsp] Cisco TAC issues - can someone from Cisco enlighten me on this?

2009-09-20 Thread Hank Nussbacher
At 22:54 20/09/2009 -0400, Jeff Kell wrote: Front-line TAC has gotten incomprehensibly bad. The most recent case came back with info request (this is a direct quote): To help isolate the issue, *please answer the following questions * **1. When did you noticed this issue? 2. Did you

Re: [c-nsp] Cisco TAC issues - can someone from Cisco enlighten me on this?

2009-09-20 Thread Hank Nussbacher
At 17:41 20/09/2009 -0400, Steve Fischer wrote: I am interested in any and all feedback from the community on this. If there is someone within Cisco (other than my salesperson, who's heard this before from me.on more than one occasion) who I can send this to, and can respond to it, it would

[c-nsp] Limiting b/w per IP?

2009-09-22 Thread Hank Nussbacher
I haven't followed all the new bells and whistles in IOS so maybe something new is there that can handle this age old problem for me. I want to be able to rate limit all IPs so that no single IP on an interface can eat more than say 20% of the available b/w (inbound and outbound). I do not

Re: [c-nsp] 7600/RSP720 + SIP-400

2009-12-15 Thread Hank Nussbacher
At 18:49 15/12/2009 +0200, Tassos Chatzithomaoglou wrote: Can someone with a SIP-400 module execute the sh platform hardware capacity system command and send me the output? I would prefer people with 7600/RSP720. Not a RSP720 but close: petach-tikva-gp#sh platform hardware capacity system

  1   2   >