Re: [c-nsp] iBGP between PE and CE

Hi All, The route-map didn't work. We've set the route-map: route-map ROUTE-SERVER-OUT, permit, sequence 5 Match clauses: Set clauses: ip next-hop 172.16.31.240 Policy routing matches: 0 packets, 0 bytes But it doesn't seem to make any difference (and yes we reset the session). The IOS

[c-nsp] Filtering prefixes in mpBGP

Hi All, We have a 6503 working as a PE. One of the vrf will contain large number of prefixes (the Internet table) that I would like to prevent from spilling into the mpls cloud (all PEs that require full internet table peer directly from the vrf with each other). All I want is a few routes and a

Re: [c-nsp] Filtering prefixes in mpBGP

Hi All, {cut} And this setup works? ;-) Which IOS do you run on the PEs? Out of interest: Can you send the config of two of these PEs which peer to me? Don't think we test/support setups like this. So far seems to be doing what's expected. Prefixes are exchanged between the PEs. Default gets

Re: [c-nsp] Cisco 7301, Radius and AV-Pairs

Hi, We had similar issue with 7301. The way we got it sorted is by using different AV-Pair: Cisco-AVPair = lcp:interface-config=service-policy output policy-256 and policy on the router: policy-map policy-256 description Default shaping policy class class-default police 256000 48000

[c-nsp] Inconsistent vlan (6500, spanning tree)

Hi, Tonight we tried to bring up a second link between two 6500 (backup link). After bringing the link up one of the 6500 started logging (6500-2, config below): Dec 4 01:54:13.067 NZDT: %SPANTREE-SP-2-RECV_PVID_ERR: Received BPDU with inconsistent peer vlan id 53 on GigabitEthernet1/48 VLAN55.

Re: [c-nsp] Inconsistent vlan (6500, spanning tree)

On 04/12/2007, Clinton Work [EMAIL PROTECTED] wrote: Is the new backup link just a dark fiber connection between the two boxes? From the error message it looks like the frames are being seriously corrupted at some point and that is causing the problems. The SPANTREE-SP-2-RECV_PVID_ERR error

Re: [c-nsp] Inconsistent vlan (6500, spanning tree)

Whatever was wrong with the boxes - doesn't seem to affect the supervisor ports. After we moved the config and the cables - everything started to work as expected. regards Pshem ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] route table lookup on leaking between vrfs

Hi All, We have a setup with two vrfs (on 6500, sup720). Only some routes (aggregates) are imported from vrf Internal to vrf Servers. Some of the routes in 'Internal' are available through external eBGP peerings, some - through connected networks. Vrf servers spans a few different boxes. And

Re: [c-nsp] default route behavoir

{cut}\ To avoid recursive routing, use the interface parameter of the route command, along with the next hop ip address. ip route 0.0.0.0 0.0.0.0 vlan1 10.50.6.2 10 ip route 0.0.0.0 0.0.0.0 vlan2 10.50.5.24 20 Just be aware, that if you do it this way the vlan stays up as long as any of the

Re: [c-nsp] route table lookup on leaking between vrfs

On 12/12/2007, Oliver Boehmer (oboehmer) [EMAIL PROTECTED] wrote: {cut} In non-vrf situation I would use next-hop-self before advertising the /16 to all the other peers, that would force the lookup on the router that knows about the /24s. Is there a way to do this lookup when the routes

Re: [c-nsp] route table lookup on leaking between vrfs

On 13/12/2007, Oliver Boehmer (oboehmer) [EMAIL PROTECTED] wrote: {cut} Sounds like a good plan. In fact we have much more then a bunch of routes (currently there are about 3k prefixes) and we try to simplify that. Do we need to do anything more then the simple aggregate-address statement

Re: [c-nsp] Cisco 10k?

Hi We migrated from 7206 VXRs to 10k for broadband termination. I must say that that caused us a lot of trouble. The 10k proved to be very unstable, leaking memory etc. Of course that might be just our experience. We tried different IOSes, opened a few TAC cases, but ultimately decided to go with

[c-nsp] Not redistributing certain eBGP routes into mpBGP

Hi, We have a situation where one of the PEs (6500, call it PE1) have multiple interfaces towards the same customer. The customer has a few other sites connected to different PEs. A few of the networks visible on PE1 in their vrf should only be visible to customer devices connected to that PE. We

[c-nsp] VPLS, spanning tree and redundancy

Hi, It looks like one of our customers would like to have redundant L2 access. We have two PEs in both locations so in theory that should work. However, I wonder what your ideas are about preventing L2 loops in such network. The customer envisaged something like this: (variable-width font):

Re: [c-nsp] VPLS, spanning tree and redundancy

On 25/03/2008, Enno Rey [EMAIL PROTECTED] wrote: Hi, just a question in advance: do you know for sure that STP BPDUs are forwarded across the cloud? [this may or may not be the case, depending on the gear used and the configuration/carrier (you?) providing the VPLS links] We're

Re: [c-nsp] VPLS, spanning tree and redundancy

On 26/03/2008, Mateusz Błaszczyk [EMAIL PROTECTED] wrote: if I understood you correctly there will be two different VPLS clouds between both pairs of CSW/PE links? Can I ask why 2 VPLSes instead of one? Is there any technical reasons ? The main one is so BPDUs from CSW3 and CSW4 can't

Re: [c-nsp] 答复: VPLS, spanning tree and redundancy

On 28/03/2008, Mateusz Błaszczyk [EMAIL PROTECTED] wrote: On 27/03/2008, 费洪俊 [EMAIL PROTECTED] wrote: VPLS is point to multi-point, and Eompls is point to point. that I know, but Pshem's topology is point-to-point, and he doesn't want to use spanningtree and he creates to VPLS

[c-nsp] Huge number of input queue drops on 6500

Hi All, We just discovered a very weird problem, we're not sure what to attribute it to. We run a port-channel between a cisco (6509E, WS-X6548-GE-TX) and a Huawei NE40E. Port channel consists of 2 copper links and runs at about 1.2G. We've noticed huge number of input queue drops and overruns:

Re: [c-nsp] Static route based on name

2008/5/11 Skeeve Stevens [EMAIL PROTECTED]: Hey all, {cut} Is there a way to use a outbound route-map which matches based on a url regex? i.e. *.youtube.com I don't know if you can match a string within an http request, but definitely you can match a youtube address range - 208.65.152.0/22.

Re: [c-nsp] Huge number of input queue drops on 6500

Hi, We moved those interfaces to a 6724 modules and all the problems went away. Thank you for your help. kind regards Pshem ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] Big L3VPN on 6500

Hi All, We provide L3 and L2 vpns services for our customers. Usually they have only a few routes (up to 1k), but this time it looks like we'll be providing transmission for a customer with almost 40k routes. They want to connect in 4 of our locations (using BGP). So far we ran the 6500s on

[c-nsp] Setting weight on import into vrf

Hi, Should the following work on a 6500 (12.2(18)SXF10): ip vrf custxxx rd :110118 import map IMPORT-INTO-CUSTXXX route-target import yyy:110 route-target export yyy:110 route-map IMPORT-INTO-CUSTXXX permit 10 match extcommunity 110 set weight 100 ip extcommunity-list 110 permit

[c-nsp] Route not getting imported into vrf

Hi, We have two PE (6500) connecting to multiply AS. Some of the routes are best on PE1, some on PE2. Today I've noticed that for some reason, some routes that are best on PE1 don't get installed in the vrf on PE2: BGP routing table entry for ab57:110118:aaa.bbb.224.0/19, version 133515951

Re: [c-nsp] Route not getting imported into vrf

Hi, There is on PE1: sh mpls forwarding-table vrf custXYZ aaa.bbb.224.0 19 detail Local OutgoingPrefix Bytes tag Outgoing Next Hop tagtag or VC or Tunnel Idswitched interface 223234 Untaggedaaa.bbb.224.0/19[V] \

Re: [c-nsp] Route not getting imported into vrf

Hi, I think I found the problem, after all there was some filtering on import, and the filter had reference to extcommunity list that didn't exist. Thx for your help. regards Pshem ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] Aggregate label not generated

Hi, We have a L3VPN with quite a few routes (in ranges of 40k+). So far all PEs that had to carry that were 6500, but soon we'll be adding a few smaller ones (28xx) for remote sites. They don't need to know the 'optimal' path to the destination, it's enough if the CEs hanging of them can talk to

Re: [c-nsp] Aggregate label not generated

Hi 2008/6/19 Peter Rathlev [EMAIL PROTECTED]: Well, AFAIK default-information originate is needed to advertise defaults also in VRFs. But if PE1 and PE2 are the same HW/SW that shouldn't be the case here, i.e. 0.0.0.0/1 doesn't seem to be considered a default. If I understand it correctly,

Re: [c-nsp] Aggregate label not generated

Hi, The question here is why is there no label on PE1 at all? It has a locally connected interface that gets into bgp using a network statement - it should generate a label for it. Unless I'm completely wrong here ... right, PE1 should generate a label, possibly a bug related to the 0/1

Re: [c-nsp] Aggregate label not generated

Hi, Perhaps I asked a wrong question here. Is there a way to force a layer3 lookup on a PE within a vrf? Using an aggregate label, as you've done. However: The key is the packet path. Is it tag2ip (i.e. leaves the aggregate as an IP) or tag2tag (i.e. packet goes back out via MPLS). I think

[c-nsp] MacOS9, AS53xxx and L2TP

Hi All, We provide dialup services using Cisco AS5400 and AS5300 (in few remote and low-use places). The ASes initiate L2TP tunnels to our 7301s, that in turn terminate the sessions. Everything was fine until we upgraded the 7301 to a newer software version (from 12.3.18 to 12.4.10). After that

Re: [c-nsp] MacOS9, AS53xxx and L2TP

username or password. Our VXR is at 12.4(16) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pshem Kowalczyk Sent: Wednesday, June 25, 2008 8:54 PM To: cisco-nsp Subject: [c-nsp] MacOS9, AS53xxx and L2TP Hi All, We provide dialup services using Cisco

Re: [c-nsp] Catalyst 3750 stacks with many members

Hi, 2008/11/17 Holemans Wim [EMAIL PROTECTED]: Could you/someone elaborate on 'failure of one part is a failure of the stack' ? Usually it means that if a single device falls over the whole stack goes. I thought Cisco just pushed this construction to get more redundancy/uptime in the

[c-nsp] MPLS speakers behind unreliable link

Hi, We're in early stages of a project that is supposed to connect multiple small MPLS-speaking devices over DSL links. Currently we're investigating various options (lab trials will come later) and I would like to get your input. If you find the idea to be completely ridiculous - let me know ;-)

Re: [c-nsp] MPLS speakers behind unreliable link

Hi Oli, 2009/1/13 Oliver Boehmer (oboehmer) oboeh...@cisco.com: Pshem Kowalczyk wrote on Tuesday, January 13, 2009 01:18: {cut} 2. Somehow connecting all the remote PEs to local P/PEs (multiple remote PEs connected to one local P/PE) and using local PE as sort of aggregation point

Re: [c-nsp] VRF and STATIC ROUTE to GLOBAL

Hi, 2009/2/25 Joe Maimon jmai...@ttec.com There are apparently three approaches to trafficking between VRF's. - configuration route leakage, static routes, route-maps and whatnot All hacks in my opinion. - physical crossover between two devices, vrf A in device A becomes vrf B in device

[c-nsp] ASR - modular image

Hi, We're considering getting some ASR (1004 and 1006) as peering routers. I would like to know what sort of experience you had with them. What are the advantages of running the 'modular' IOS XE? We tried the 'modular' software on 6500 and we ran into some issues that we didn't have on the

Re: [c-nsp] ASR - modular image

leaves me even more perplexed about the usefulness of the 'sub-packaged' version. kind regards Pshem 2009/3/25 Pshem Kowalczyk pshe...@gmail.com: Hi, We're considering getting some ASR (1004 and 1006) as peering routers. I would like to know what sort of experience you had with them. What

Re: [c-nsp] Modifying eBGP routes prior to exporting

I'm not sure if I got your question right, but we do the following: neighbor xx.yy.41.93 route-map NBR-UP2-IN in route-map NBR-UP2-IN permit 10 match as-path 52 set local-preference 100 set community aaa:5000 aaa:5600 ! route-map NBR-UP2-IN permit 20 set local-preference 90 set community

[c-nsp] ASR1004 - ipv6 static route in a vrf

Hi, I'm playing with an ASR1004 to test some ipv6 capabilities. For some reason I can't seem to get a static route working: ASR1(config)#ipv6 route vrf Public 2407:7000::/32 Null0 ASR1(config)#do sh ipv6 route vrf Public IPv6 Routing Table - Public - 1 entries Codes: C - Connected, L - Local, S

Re: [c-nsp] ASR1004 - ipv6 static route in a vrf

It was simpler then I though - there has to be at least one interface with ipv6 configured for the static route to work. kind regards Pshem ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive

Re: [c-nsp] Problems with multiple VPDN hops

Hi, {cut} What I'd like to know is if it's possible to use radius to essentially switch packets from one L2TP tunnel into another when they reach LNS2. We know that the VPDN and Radius configuration are correct on LNS2 because we can successfully terminate sessions on this router and

Re: [c-nsp] Problems with multiple VPDN hops

Hi, {cut} Based on this information, do you have any further suggestions and are you able to supply example configs of your own setup? Please see here - both LTS in our example have exactly the same vpdn config: vpdn-group L2TP-wholesale ! Default L2TP VPDN group accept-dialin protocol

Re: [c-nsp] eBGP -- OSPF -- eBGP vs eBGP -- iBGP -- eBGP

Hi, 2009/4/28 Adam Greene maill...@webjogger.net: Hi, We run BGP to our upstream providers and OSPF on our local backbone. We have a customer who will be multihomed and needs us to advertise his IP blocks to us via BGP. My question is how best to propagate his AS-PATH prepending to my

Re: [c-nsp] BGP Med and outbound metric

Hi, 2009/5/1 Matthew Huff mh...@ox.com: Since we use BGP as peering to our ISPs, and don't use BGP internally in our core, I haven't used MED or local_pref much. However, we have two routers connected to another ASN (not via the internet) and I'm trying to influence their return path

Re: [c-nsp] How to improve C3750G switch uplink speed?

Hi, If you're connecting a host then: spanning-tree portfast on the interface will cut this time down. kind regards Pshem 2009/5/12 Darren Yang pigsign.pyk...@gmail.com: Hi, When I plug wire into c3750g port, it would wait about 30sec then change to uplink status. Are there any method

[c-nsp] High memory utilisation on ASR 1004

Hi, We use ASR 1004 for internet peering. I've noticed that despite the fact that the device should have 4G of RAM (2G for each IOS), it only reports about 750M: cisco ASR1004 (RP1) processor with 750908K/6147K bytes of memory. 10 Gigabit Ethernet interfaces 1 Ten Gigabit Ethernet interface

Re: [c-nsp] High memory utilisation on ASR 1004

Hi, Are you saying that if we didn't run it in SSO mode the single IOS running would have access to more memory? I don't have access to a test one to verify it. kind regards Pshem 2009/5/14 Tassos Chatzithomaoglou ach...@forthnet.gr: Dual IOSd processes in ASR1000 SW redundancy result in both

[c-nsp] ICMP replay from egress PE

Hi, Recently we've upgraded some of our 7301 to ASR (1004). Config remained pretty much the same (from L3VPNs perspective), but it looks like the behaviour of both platforms is somewhat different. I'm not sure if it's a feature or a bug yet. We have a typical setup, like this: CE1 --- PE1 --- P1

Re: [c-nsp] ICMP replay from egress PE

/command/reference/swi_m2.htm l#wp1058956 Regards, AHQ -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Pshem Kowalczyk Sent: Wednesday, June 03, 2009 8:27 AM To: cisco-nsp@puck.nether.net Subject: [c-nsp] ICMP replay

Re: [c-nsp] ICMP replay from egress PE

to to disable TTL propagation for forwarded packets (VPN traffic), use no mpls ip propagate forwarded on LERs, this allows the structure of the MPLS network to be hidden from customers, but not the provider. Regards, AHQ -Original Message- From: Pshem Kowalczyk [mailto:pshe

Re: [c-nsp] Global Route Leaking on same PE

Hi, Yes, everything - including internet table, only infrastructure runs in the global one. As many have noticed the pain of getting anything going between the global table and the vrfs is just too much. All I miss now is ability to do a static route from vrf to another vrf ;-) but for now vrf

[c-nsp] SNMP query to get status of a bgp peer in a vrf

Hi, I've spent some time already trying to locate the mib that has the status (and admin status) of bgp peer that is in a vrf. There is cbgpPeerPrevState oid but it only seems to cover ipv4 peers (at least when I query the ASRs we try to monitor). I can get the number of prefixes learnt from a

Re: [c-nsp] Inserting a default route into a MPLS/VPN pointing out of the VRF

Hi, I don't think there is a simple solution to that problem. Here are two ideas that we came up with to solve our issues and still maintain relatively 'clean' design. 1. With border routers as CEs - run a trunk between the PE and border routers with one vlan per vrf. That gives you ability to

Re: [c-nsp] ASR-1002 Feedback

Hi, We've been using various ASR1k variants for the last few months. Generally the experience's been positive. Devices deliver what is expected in terms of performance without even breaking a sweat. We used them mainly as border routers (in a PE configuration). One thing that you have to pay some

Re: [c-nsp] ASR-1002 Feedback

Hi, 2009/11/20 matthew zeier m...@velvet.org: What sort of performance are you seeing?  Cisco's site a bit obtuse in that area. We're running the router as PE internet borders. With 6 full feeds into vrf and between 2Gb/s and 4Gb/s of inbound traffic the load is negligible (with ESP20). What

Re: [c-nsp] Route Target Rewrite

Hi, What are you trying to achieve with the rewrite? I presume, that you want to modify the RTs, so you can import them with a single statement later (in vrfs)? If so - what are the drawbacks of importing the RTs directly? kind regards pshem 2009/12/5 shake righa ssri...@gmail.com: Hi, Am

Re: [c-nsp] MPLS TTL exceeded problems

Hi, You're right, it's quite common. We hit it on the sup720 (3bxl). The simple answer is what you're asking for can't be done. According to some Cisco guys we spoke to the hardware is not capable of doing that lookup if there is a forwarding adjacency. We tried various tricks (creating

Re: [c-nsp] diversification

Hi, We have a medium sized network (about 25 sites). In our case we decided to do the following: On 2 March 2010 07:14, My Name denac...@gmail.com wrote: What are everyone's thoughts on redundant route processors and linecard diversity for P and PE connections. Specifically, assume redundant

Re: [c-nsp] MPLS TE traffic forwarding.

I would add one more option here 5. Statically bind VPNs to particular tunnel (not all software versions support this). kind regards Pshem On 25 March 2010 14:28, Robert Crowe (rocrowe) rocr...@cisco.com wrote: Many ways, simple to complex: 1. Static routes - route specific destinations down

Re: [c-nsp] Radius Accounting Question

On 22 April 2010 10:24, Paul Stewart p...@paulstewart.org wrote: Hi there.. On a 7206VXR with the following radius configuration, does the accounting packets get delivered to all radius servers or is it something else like round robin?  I'm trying to troubleshoot an issue where accounting

[c-nsp] VPLS with L3VPN access

Hi, I'm trying to get answer to the following question, and so far cisco website hasn't been very helpful (most probably because I don't know the cisco term for the feature). Is it possible on cisco software platforms (like 72xx) to configure a VPLS and somehow connect it to a L3VPN (on the same

Re: [c-nsp] Huawei instead of Cisco

Hi, We have a network with quite a few NE40E (and 80E). They are quite feature reach but in many cases those features are not completely RFC compliant which causes issues. Troubleshooting of those devices is extremely difficult. Debug commands either simply don't exist for a given feature or the

Re: [c-nsp] MPLS LDP question

Hi, {cut} On 19 May 2010 04:06, Peter Rathlev pe...@rathlev.dk wrote: On Tue, 2010-05-18 at 15:04 +0200, Frederic LOUI wrote: When activating MPLS LDP, by default all FEC(s) present in the routing table have a label bindings ... Apart from the wise words of Oli, beware that the local

Re: [c-nsp] Ethernet Interfaces Speed and Duplex - Force or Auto

Hi On 21 May 2010 07:18, Jeff Wojciechowski jeff.wojciechow...@midlandpaper.com wrote: All: Curious what other network admins are doing out there for Ethernet interfaces as far as speed and duplex settings - weather to specify or to leave them auto negotiate. {cut} We always set the port

Re: [c-nsp] QoS concerns

Hi, On 11 June 2010 04:33, Mihai Todor mihai.to...@gmail.com wrote: Hi Arie, Thanks for your feedback! I'll try to clarify my question 1 - it would be useful to know if (experience showed) there is such a thing as a maximum for the PQ bandwith allocation. Let's say you have just one

[c-nsp] 3750 and L3 service policies

Hi, We had to deploy some L3 service policies on a WS-C3750E-24TD. After the config was put in place we could see it working on the interface, but according the the statistics on the input route-map - there was nothing matching at all. Is that expected? The switch runs only as a L2 switch, except

Re: [c-nsp] mpls route target export question

Hi, On 5 August 2010 15:48, Kenny Sallee kenny.sal...@gmail.com wrote: {cut} I believe the route-target exported needs to be unique across the entire routing domain (else you could have one customer import other customers routes).  RD can be different per PE router - but I'm not sure why

Re: [c-nsp] EBGP Export VPN4 route only

Hi, On 11 August 2010 21:11, Good One go...@live.com wrote: {cut} Can you please me know all the possibilities of exporting just MPLS L3VPN routes to EBGP neighbors. The reason for this to export only VPN4 routes for inter-AS vpn. Depending on your individual circumstances you can either:

Re: [c-nsp] BFD in XR 3.9.1

Hi, On 25 August 2010 06:11, Vikas Sharma vikasshar...@gmail.com wrote: Hi, I am planning to test BFD in XR 3.9.1 (both on 12k and on CRS-1). Any testing already done and feedback is appreciated. We've tested BFD on 3.9.1 on 9k. Work's without any problems, detecting all failures. We tested

Re: [c-nsp] wisdom of installing many routes into ospf

Hi Mike, On 29 August 2010 12:30, Mike mike-cisconspl...@tiedyenetworks.com wrote: Hello,   I have a BRAS terminating many pppoe sessions (2000 lets say). I would like to allow my bras to participate in OSPF and I am wondering what the collected wisdom about doing so is. I want to be able

Re: [c-nsp] Customers routers

Hi, On 4 September 2010 11:07, Mohammad Khalil eng_m...@hotmail.com wrote: hi all we use OSPF to transport customers routers into our backbone , i read in one of Cisco presentations that its best to use BGP for the same purpose It really depends on what you're doing. For small

Re: [c-nsp] Using address-family context

Hi, On 20 October 2010 03:39, Randy McAnally r...@fast-serv.com wrote: Is it safe for existing BGP4 sessions/config without 'address-family ' context to use the 'address-family ipv6 unicast' context to add a BGP6 peer for the first time? Changing the list of advertised address-families

Re: [c-nsp] ASR 1002 QOS question

Hi, {cut} *When sessions are created and QoS policy maps are attached in both the ingress and egress directions, only 2000 sessions are supported. Sessions that exceed this limit can still be created, but the QoS policy maps will not be applied to the session.* *Here we could see that

Re: [c-nsp] RSVP and TE bandwidth management

Hi, On 15 November 2010 03:53, Ibrahim Abo Zaid ibrahim.aboz...@gmail.com wrote: Hi all I need to know if RSVP supports over-provisioning of TE tunnels on links or there is CAC mechanism ? can the current reservation on a single link exceed maximum-bandwidth No, you can not overbook the

[c-nsp] ASR 1k, 3.1.0S MTU issues on PortChannel interfaces

Hi, I'm currently trying to test the following scenario: ASR1k 4900M - ASR9k the 1k runs 3.1.0S (or 15.0(1)S) the 9k runs 3.9.1 (XR) as the link between the 4900M and 9k is provided by a third party we only have a MTU of 4400 there. There are 3 links between 1k and 4900M. I'm

Re: [c-nsp] ASR 1k, 3.1.0S MTU issues on PortChannel interfaces

Hi, On 19 November 2010 08:29, Irina Arsenieva ecra...@hotmail.com wrote: Hi there, AFAIK, to change MTU on Po1.600, you have to change it on Po1, then Po1.600 MTU = Po1 - 4 which makes sense as 802.1Q tag size is 4 bytes. And I also suggest trying clns mtu 1496 on both ends. I have it

Re: [c-nsp] ASR 1k, 3.1.0S MTU issues on PortChannel interfaces

Hi, Yet another update. I turns out that the old 'turn it off and on again' worked. After I reload the box I got the MTU of the subinterfaces at 4400, which is good. I still had to use clns mtu (of 4379) to make it work. The maximal ICMP packet I can get through now is: BGAUESD01#ping

[c-nsp] BFD on PortChannel interface (IOS-XE)

Hi, I'm trying to figure out if BFD is supported on a PortChannel interface on IOS-XE (3.1.0S) on ASR1006. Configuration is accepted but then the session never comes up: #sh bfd neighbors details NeighAddr LD/RDRH/RS State Int 10.123.223.1

Re: [c-nsp] BFD on PortChannel interface (IOS-XE)

On 2 December 2010 13:57, Pshem Kowalczyk pshe...@gmail.com wrote: Hi, I'm trying to figure out if BFD is supported on a PortChannel interface on IOS-XE (3.1.0S) on ASR1006. Configuration is accepted but then the session never comes up: Ok, It got weirder. After forcing a switchover

Re: [c-nsp] ASR1000 support of policing on etherchannel

Hi, On 4 December 2010 01:48, Dmitry Kiselev dmi...@dmitry.net wrote: Hello! Does somebody in the list have any info about plans to support policing on etherchannel on ASR1000 platform? Both trains 12.2 and 15.0 does not support it. :( Restrictions for Traffic Policing  - Traffic

[c-nsp] uRPF v3 on IOS XE

Hi, Anyone knows if uRPF v3 is supported on IOS XE? The feature navigator is a little bit unhelpful here, and the software I'm testing (3.1.0S) doesn't seem to support it. On the other hand in the 'main' IOS it's been supported for quite some time. kind regards Pshem

[c-nsp] 4900M with QoS on a portchannel

Hi, I must be missing something obvious here, so please stay with me. I'm currently devising config for the device. We have a 4900M that will be connected over 2x10G to a customer. I want to apply a very simple QoS in this scenario - mark packets on input and act on that on output: class-map

[c-nsp] ASR1k marking control plane packets with proper EXP (CoS) bits

Hi, I'm just testing a scenario using ASR1k as a PE. I can see that by default the control plane packets (LDP, VRRP, BGP, etc) have correct IP DSCP marking (CS6). They do not have any EXP bits sets though, when the the packets are label-switched. I tried to apply an outbound policy on

Re: [c-nsp] ASR 9000 as border router

Hi, On 29 December 2010 11:50, Juca Juca cisco.pe.1...@gmail.com wrote: Hello Anyone had experience using ASR 9000 as a P router? Do you have any particular question in mind? We run quite a few of them in our network (mainly as collapsed P/PEs). kind regards Pshem

Re: [c-nsp] ASR 9000 as border router

Hi, On 30 December 2010 09:11, cisco-pe cisco.pe.1...@gmail.com wrote: Hi Pshem, We have a core network based on CRS-1. The idea is to add an additional layer formed by the ASR-9K basically as concentrator/aggregator layer working as P. All the PE will be connected to the ASR-9K. We don´t

Re: [c-nsp] ASR 9000 Newbie question

Hi On 7 January 2011 11:22, John Neiberger jneiber...@gmail.com wrote: We have a couple of new ASR 9k routers in our test lab. None of us have had training on them yet and none of us know IOS-XR yet. One of our engineers is installing the new blades and two of them are coming up with red

Re: [c-nsp] Ping test with DF bit and MTU / IP MTU value

Hi, On 19 January 2011 15:20, Muhammad Atif Jauhar atif.jau...@gmail.com wrote: Hi, I am testing the link and face issue.                  1. while performing ping test without df bit, I am able to ping with size upto 18024                  2. while performing ping test with df bit, I am

Re: [c-nsp] Ping test with DF bit and MTU / IP MTU value

Hi, On 19 January 2011 15:54, Muhammad Atif Jauhar atif.jau...@gmail.com wrote: Yes... there is typo error in 3rd point I am not able to ping more then size 1520 with DF bit Means there is no issue in link and I will not able to ping with DF bit more then size 1520. That's correct. kind

Re: [c-nsp] MPLS Label propagation and/or MP-BGP and/orroute-reflecting, oh my.

Hi, On 22 January 2011 09:50, Jason Lixfeld ja...@lixfeld.ca wrote: {cut} Your PE1 and CE are in the same AS, and IOS does not support iBGP as PE-CE routing protocol.. So this is a one problem. The issue with lack of iBGP PE-CE support is the fact that the vpnv4 next-hop is not rewritten to

Re: [c-nsp] XR no mpls ip propagate-ttl forwarded equivalent

Hi, On 28 January 2011 08:23, Jason Lixfeld ja...@lixfeld.ca wrote: XR has mpls ip-ttl-propagate disable, but I can't find the hook to prevent ttl prooagation for forwarded packets only.  It does exist, doesn't it? :| mpls ip-ttl-propagate disable forwarded mpls ip-ttl-propagate disable

Re: [c-nsp] rate-limit 2 subinterfaces with shared bandwidth

Hi, On 3 February 2011 05:45, Rens r...@autempspourmoi.be wrote: Hi, I have 2 subinterfaces (Fa0/1.100 Fa0/1.200) Here are the things I would like: 1)      rate limit both to 8 Mbps 2)      never use over 8 Mbps together 3)      the first subinterface should always have 4 Mbps needed Is

[c-nsp] IOS XR - vrrp and protocol tracking

Hi, We have a relatively simple setup with two ASR9k (running 3.9.1) providing a virtual gateway (using VRRP) for a set of servers (appliances) connected through a few switches. VRRP is augumented with BFD for faster detection of problems. VRRP runs on subinterfaces. When BFD detects that the

Re: [c-nsp] EoMPLS or VPLS loop prevention/storm control

Hi, On 10 February 2011 04:12, schilling schilling2...@gmail.com wrote: Hi All, We right now have several bridged campus wide VLAN. It happens several times a year where a loop in one of the VLAN will cause our backbone to be unavailable. Now we are thinking to better architect the design.

[c-nsp] ASR9k - input drops

Hi, We're trying to determine a cause of 'total input drops' on one of TenG interfaces on ASR9k. The interface is a CE facing one. (statistics have not been cleared, but the issue is ongoing): TenGigE0/2/0/2 is up, line protocol is up Interface state transitions: 3 Hardware is TenGigE,

Re: [c-nsp] Cisco 7204VXR + Load Balancing for l2tp sessions.

Hi, So it possible to devide incoming customers to 2 devices 1k per device for example. ? Yes, it's possible, however that load-balancing has to happen on the LAC - i.e. where the L2TP sessions originate. Once the session hits a 7204 it's too late to do any load-balancing. If you have

Re: [c-nsp] Cisco 7204VXR + Load Balancing for l2tp sessions.

Hi, On 17 February 2011 05:15, Sheremet Roman ro...@kharkov.org.ua wrote: Hi, Thank  you  for your reply, can you please advice, which device i can use for swap 7204... for handle more connection and bandwidth ? With this sort of bandwidth and number of sessions you're into the ASR1k

Re: [c-nsp] ASR9k - input drops

Hi, On 16 February 2011 19:12, Jason Lixfeld ja...@lixfeld.ca wrote: {cut} 2.  See what drops the NP is registering: RP/0/RSP0/CPU0:bfr01.60hudson01#show controllers np counters np1 location 0/0/CPU0 | i DROP|DISCARD|NOT Wed Feb 16 00:59:26.456 EST  31  PARSE_INGRESS_DROP_CNT            

Re: [c-nsp] ASR9k - input drops

Hi, On 17 February 2011 09:48, Oliver Boehmer (oboehmer) oboeh...@cisco.com wrote: That helps a lot. Any idea what those counters actually count? We seem to have a very high PARSE_INGRESS_DROP_CNT (around 1000pps) and UIDB_TCAM_MISS_AGG_DROP (another 1000pps)? I'm not an expert, but these

Re: [c-nsp] IOS XR - vrrp and protocol tracking

Hi, On 8 February 2011 15:22, Pshem Kowalczyk pshe...@gmail.com wrote: Hi, We have a relatively simple setup with two ASR9k (running 3.9.1) providing a virtual gateway (using VRRP) for a set of servers (appliances) connected through a few switches. VRRP is augumented with BFD for faster

Re: [c-nsp] Multicast RP's

Hi, On 23 February 2011 02:16, Aaron Riemer arie...@amnet.net.au wrote: Hey guys, Quick question on something I am having trouble finding documentation on. Does anyone know how a configured RP in a PIM SM implementation become aware of all multicast groups within a particular network? Are

  1   2   3   >