Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Mark Tinka
On 19/Oct/17 10:08, James Bensley wrote: > Open a TAC case, they'll probably tell you STP isn't supported and the > documentation is infact wrong, that is what has happened for me > recently with some ASR920s and ME3600s with a different feature than > STP :D I think the presence of any such

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Mark Tinka
On 19/Oct/17 10:24, Gert Doering wrote: > So, how do you bridge together two ports on an ASR1k, with STP? ;-) > > I do understand the bits about no global VLAN significance, etc., > and tieing bridge-groups to pseudowires, etc. - I just want the more > basic stuff to be more explosion-robust

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread James Bensley
On 19 October 2017 at 08:46, Gert Doering wrote: > Hi, > > On Thu, Oct 19, 2017 at 08:21:27AM +0100, James Bensley wrote: >> >> Then configure STP for VLAN "10". It doesn't seem like there is any way >> >> to map to an arbitrary PVST instance, VLAN ID and bridge domain ID has

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Gert Doering
Hi, On Thu, Oct 19, 2017 at 10:19:22AM +0200, Mark Tinka wrote: > Treat more like an ASR1000 router, and you'll be just fine. So, how do you bridge together two ports on an ASR1k, with STP? ;-) I do understand the bits about no global VLAN significance, etc., and tieing bridge-groups to

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread James Bensley
On 19 October 2017 at 09:38, Mark Tinka wrote: > > > On 19/Oct/17 10:24, Gert Doering wrote: > > So, how do you bridge together two ports on an ASR1k, with STP? ;-) > > I do understand the bits about no global VLAN significance, etc., > and tieing bridge-groups to

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread James Bensley
On 19 October 2017 at 07:46, Gert Doering wrote: > On Thu, Oct 19, 2017 at 06:05:47AM +0200, Peter Rathlev wrote: >> On Wed, 2017-10-18 at 15:39 +0200, Gert Doering wrote: >> > I have an ASR920 that is supposed to have gi0/0/10 and gi0/0/11 in >> > the same bridge group, with

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Mark Tinka
On 19/Oct/17 09:46, Gert Doering wrote: > I wasn't particularily asking for suggestions, but for "I have this > working, and this is how it looks like". > > This box is unlike any other Cisco "switch-like thing" I've had in my > hands before, so it might very well be just not supported at

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread adamv0025
Hmm and if you enable debug can you actually see the stp packets being issued (or even received) on either of the ports? The config looks good for catching and processing such PDUs. Btw I'm still not getting the setup, so you have FW1 in port 1 and FW2 in port 2 and p1 and p2 are in BD1. Now how

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Mark Tinka
On 19/Oct/17 10:48, James Bensley wrote: > We wouldn't offer dual connections to the same layer 3 edge device as > a "resilient" service nor have it participate in layer 2 service if it > is layer 3 edge. I'd stick a switch in place, the FW could have two > links to the switch and the switch

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Gert Doering
Hi, On Thu, Oct 19, 2017 at 09:45:08AM +0100, adamv0...@netconsultings.com wrote: > Hmm and if you enable debug can you actually see the stp packets being > issued (or even received) on either of the ports? > The config looks good for catching and processing such PDUs. It's not sending PDUs, so

Re: [c-nsp] Cisco Catalyst 9300

2017-10-19 Thread Gert Doering
Hi, On Mon, Oct 16, 2017 at 04:28:54PM +, Nick Cutting wrote: > Given that these are running 16.5 (Everest) and it is very new - is anyone > running these in production yet? > I feel the 3850/3650 will be EOL in the next year or so - and these are > reasonably priced. > > I think if these

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Gert Doering
Hi, On Thu, Oct 19, 2017 at 08:21:27AM +0100, James Bensley wrote: > >> Then configure STP for VLAN "10". It doesn't seem like there is any way > >> to map to an arbitrary PVST instance, VLAN ID and bridge domain ID has > >> to match. > > I don't know the answer to you question but Peter's

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Gert Doering
Hi, On Thu, Oct 19, 2017 at 09:08:31AM +0100, James Bensley wrote: > Open a TAC case, they'll probably tell you STP isn't supported and the > documentation is infact wrong, that is what has happened for me > recently with some ASR920s and ME3600s with a different feature than > STP :D That is

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Lukas Tribus
Hello Gert, 2017-10-18 15:39 GMT+02:00 Gert Doering : > IOS is asr920-universalk9_npe.03.18.03.S.156-2.S3-std.bin Well PVST+/RPVST+ is a fancy feature on this platform, and for fancy features you need fancy releases :) 16.6.1 in this case:

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Gert Doering
Hi, On Thu, Oct 19, 2017 at 06:05:47AM +0200, Peter Rathlev wrote: > On Wed, 2017-10-18 at 15:39 +0200, Gert Doering wrote: > > I have an ASR920 that is supposed to have gi0/0/10 and gi0/0/11 in > > the same bridge group, with a routed IP: > > > > interface GigabitEthernet0/0/10 > >  no ip

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread adamv0025
Hi, > From: Gert Doering [mailto:g...@greenie.muc.de] > Sent: Thursday, October 19, 2017 10:15 AM > > Hi, > On Thu, Oct 19, 2017 at 09:45:08AM +0100, adamv0...@netconsultings.com > wrote: > > Hmm and if you enable debug can you actually see the stp packets being > > issued (or even received) on

Re: [c-nsp] spanning-tree for local switching on ASR920

2017-10-19 Thread Tassos Chatzithomaoglou
I believe you should use "l2protocol forward/tunnel stp" instead of "l2protocol peer stp" under si 10, assuming FWs run STP (?) and it's untagged. But another questions comes to my mind: are the two FWs L2 connected by some other media too, besides through the ASR920? -- Tassos Gert Doering

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Jared Mauch
> On Oct 19, 2017, at 1:54 PM, Charles Sprickman wrote: > >> >> On Oct 19, 2017, at 1:49 PM, Jared Mauch wrote: >> >> Take a look at the UBNT Edgepoint gear as well. Fairly cool, comes in >> 10G/1G speed varieties with both routed and switched

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Charles Sprickman via cisco-nsp
--- Begin Message --- > On Oct 19, 2017, at 1:49 PM, Jared Mauch wrote: > > Take a look at the UBNT Edgepoint gear as well. Fairly cool, comes in 10G/1G > speed varieties with both routed and switched options. Just be very careful with fencing UBNT gear off from

Re: [c-nsp] manually crafted bypass LSPs

2017-10-19 Thread James Bensley
On 16 October 2017 at 09:42, wrote: > Hi folks, > > Anyone tried running crafted bypass LSPs? > I can't get mine working in the lab on 15.1F6 and have no idea why, > > Example: > To primary LSP tail-end IP: > set protocols rsvp interface ge-0/0/0.0 link-protection

[c-nsp] Outdoor switch

2017-10-19 Thread Christina Klam
All, I am hoping for some ideas. We are running fiber to an outdoor pole (for cameras and wireless access-points) and need a switch that can be configured remotely, does 802.1q, Qos, and has 3 - 5 ports. We are in the MidAtlantic so the temperatures range from well below freezing to 100 deg

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Mike
On 10/19/2017 09:00 AM, Christina Klam wrote: All, I am hoping for some ideas. We are running fiber to an outdoor pole (for cameras and wireless access-points) and need a switch that can be configured remotely, does 802.1q, Qos, and has 3 - 5 ports. We are in the MidAtlantic so the

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Jared Mauch
If you just need one port, there is this box that works quite well: https://www.balticnetworks.com/mikrotik-fiber-to-copper-converter.html It does not have an integrated splice tray though. - Jared > On Oct 19, 2017, at 12:00 PM, Christina Klam wrote: > > All, > > I am hoping

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Harold 'Buz' Dale
Might also look at https://www.balticnetworks.com/mikrotik-routerboard-rb-260gs-complete-with-enclosure-and-power-supply-fiber-enabled.html I’ve had good luck with Mikrotik in the past but they are very different from IOS devices. Buz On 10/19/17, 12:03 PM, "cisco-nsp on behalf of Jared

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Christina Klam
Buz and Jared, I will take a look. I realized in my initial list of requirements, I missed a key one, POE. Do you have any experience with https://www.microsemi.com/products/poe-systems/pds-104go-4-1-outdoor-switch ? My google-foo found them. Thanks, Christina - Original Message

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Charles Sprickman via cisco-nsp
--- Begin Message --- These guys dominate in the WISP market and make great hardware. Support is excellent. We have around 4 of them up on roofs in NYC, they take the weather quite well as long as you get the recommended enclosure. They take PoE in and can provide PoE out - all “passive” PoE

Re: [c-nsp] Outdoor switch

2017-10-19 Thread Jared Mauch
Take a look at the UBNT Edgepoint gear as well. Fairly cool, comes in 10G/1G speed varieties with both routed and switched options. I have one lying around that I need to poke at sooner rather than later.. - Jared > On Oct 19, 2017, at 1:26 PM, Christina Klam wrote: > > Buz