Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-09-02 Thread Gert Doering
Hi,

On Mon, Sep 01, 2008 at 11:15:13PM -0400, Pete S. wrote:
 The biggest running issue I have with SXH, 

My biggest issues are:

  - no BFD on SVIs (worked fine in SXF)

  - the BGP ghost bug is back :-(
(SXH3 regularily forgets to send withdraws to iBGP peers if a prefix
completely disappears.  During the course of 4 weeks, I have observed
it twice, once for IPv4 and once for IPv6, without actually *looking*
for it - so it's likely happening much more often)

The thing I like most about SXH is the reworked mls netflow architecture 
where you only fill up netflow TCAM for those interfaces that you really 
want to see, and not for all interfaces and the collector has to filter.

gert
-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany [EMAIL PROTECTED]
fax: +49-89-35655025[EMAIL PROTECTED]


pgpI3EQyIL3cA.pgp
Description: PGP signature
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-09-02 Thread Adrian Minta

Gert Doering wrote:

Hi,

On Mon, Sep 01, 2008 at 11:15:13PM -0400, Pete S. wrote:
  
The biggest running issue I have with SXH, 



My biggest issues are:

  - no BFD on SVIs (worked fine in SXF)

  - the BGP ghost bug is back :-(
(SXH3 regularily forgets to send withdraws to iBGP peers if a prefix
completely disappears.  During the course of 4 weeks, I have observed
it twice, once for IPv4 and once for IPv6, without actually *looking*
for it - so it's likely happening much more often)

  
Yes, the nasty BGP bug is present. The only solution seems to be a 
periodically clear ip bgp all.
Cisco IOS Software, s6523_rp Software (s6523_rp-ADVIPSERVICESK9-M), 
Version 12.2(33)SXH3, RELEASE SOFTWARE (fc1)



--
Best regards,
Adrian Minta


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-09-02 Thread Gert Doering
Hi,

On Tue, Sep 02, 2008 at 07:02:08PM +0300, Adrian Minta wrote:
   - the BGP ghost bug is back :-(

 Yes, the nasty BGP bug is present. The only solution seems to be a 
 periodically clear ip bgp all.
 Cisco IOS Software, s6523_rp Software (s6523_rp-ADVIPSERVICESK9-M), 
 Version 12.2(33)SXH3, RELEASE SOFTWARE (fc1)

Gah.  For me, clear ip bgp soft * seems also to have helped, but still,
this is no way to run an ISP...

Do you have a bug ID or a TAC case # for this?  (I currently can't open
cases for the boxes in question, as our gold partner is unable to get the
contracts sorted out, but soon!).

gert

-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany [EMAIL PROTECTED]
fax: +49-89-35655025[EMAIL PROTECTED]


pgpiKJAvLV9ZX.pgp
Description: PGP signature
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-09-02 Thread Adrian Minta

Gert Doering wrote:

Hi,

On Tue, Sep 02, 2008 at 07:02:08PM +0300, Adrian Minta wrote:
  

 - the BGP ghost bug is back :-(
  
Yes, the nasty BGP bug is present. The only solution seems to be a 
periodically clear ip bgp all.
Cisco IOS Software, s6523_rp Software (s6523_rp-ADVIPSERVICESK9-M), 
Version 12.2(33)SXH3, RELEASE SOFTWARE (fc1)



Gah.  For me, clear ip bgp soft * seems also to have helped, but still,
this is no way to run an ISP...

Do you have a bug ID or a TAC case # for this?  (I currently can't open
cases for the boxes in question, as our gold partner is unable to get the
contracts sorted out, but soon!).

gert
  
Not yet. Until today I considered this an isolated incident. Next time 
when the bug will strike I will for sure.


--
Best regards,
Adrian Minta  




___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-09-01 Thread Phil Mayers

[EMAIL PROTECTED] wrote:

Hi,


Lastest one running SXH1.  No problems so far with FWSM, ACE and 6748s.


we've got a 12.2(33)SXH3 box up and alive now - so far so much
better than SXH2 (and 2b) but we've yet to drive packets through
in anger.  certainly looks like we might be SXH'd by the new year
(but dont quote me on that! ;-) )


Just don't try and scp anything from it...
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-09-01 Thread A . L . M . Buxey
Hi,

 we've got a 12.2(33)SXH3 box up and alive now - so far so much
 better than SXH2 (and 2b) but we've yet to drive packets through
 in anger.  certainly looks like we might be SXH'd by the new year
 (but dont quote me on that! ;-) )

 Just don't try and scp anything from it...

8-) dont worry - i saw _that_ posting. anything with SXH
in the subject line right now gets my immediate attention
(remember that spammers ;-) )

alan
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-09-01 Thread Pete S.
We've been running a mix od SXF, and SXH (un)fortunately.

SXF is pretty solid.  If you don't have any features(like VPN,
adjust-mss specifically), or modules which require an SXH train(i.e.
6716) I'd suggest you stick with safe harbor SXF.

The biggest running issue I have with SXH, is not containing the ISSU
capability in the non-modular flavor.  Modular still makes me nervous
for production.

 --Pete

On Mon, Sep 1, 2008 at 11:47 AM,  [EMAIL PROTECTED] wrote:
 Hi,

 we've got a 12.2(33)SXH3 box up and alive now - so far so much
 better than SXH2 (and 2b) but we've yet to drive packets through
 in anger.  certainly looks like we might be SXH'd by the new year
 (but dont quote me on that! ;-) )

 Just don't try and scp anything from it...

 8-) dont worry - i saw _that_ posting. anything with SXH
 in the subject line right now gets my immediate attention
 (remember that spammers ;-) )

 alan
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-08-29 Thread A . L . M . Buxey
Hi,

 Lastest one running SXH1.  No problems so far with FWSM, ACE and 6748s.

we've got a 12.2(33)SXH3 box up and alive now - so far so much
better than SXH2 (and 2b) but we've yet to drive packets through
in anger.  certainly looks like we might be SXH'd by the new year
(but dont quote me on that! ;-) )

alan
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-08-28 Thread Tony Varriale

Lastest one running SXH1.  No problems so far with FWSM, ACE and 6748s.

tv
- Original Message - 
From: Phil Mayers [EMAIL PROTECTED]

To: Antonio Acuesta (DHL AU) [EMAIL PROTECTED]
Cc: cisco-nsp cisco-nsp@puck.nether.net
Sent: Wednesday, August 27, 2008 9:09 AM
Subject: Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version



Antonio Acuesta (DHL AU) wrote:

Hi,

Can you please recommend a stable IOS version for Cisco Catalyst 6513?
The current version that I have is Version 12.2(18)SXD3. The switch has
not been upgraded for a while and it will be good to know the version
with less bug.


We're running 12.2(18)SXF10 without problems.

I believe 12.2(18)SXF11 and SXF12a are sort of Safe Harbor qualified.

I cannot recommend 12.2(33)SXH - we've had a lot of problems.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-08-27 Thread Antonio Acuesta (DHL AU)
Hi,

Can you please recommend a stable IOS version for Cisco Catalyst 6513?
The current version that I have is Version 12.2(18)SXD3. The switch has
not been upgraded for a while and it will be good to know the version
with less bug.

Thanks.
Tony
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-08-27 Thread Phil Mayers

Antonio Acuesta (DHL AU) wrote:

Hi,

Can you please recommend a stable IOS version for Cisco Catalyst 6513?
The current version that I have is Version 12.2(18)SXD3. The switch has
not been upgraded for a while and it will be good to know the version
with less bug.


We're running 12.2(18)SXF10 without problems.

I believe 12.2(18)SXF11 and SXF12a are sort of Safe Harbor qualified.

I cannot recommend 12.2(33)SXH - we've had a lot of problems.
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-08-27 Thread Arie Vayner (avayner)
Antonio,

Specifically for Catalyst 6500 and its different service modules, I
suggest you take a look at http://www.cisco.com/go/safeharbor
I strongly recommend reading through the documents, and not just the
highlights...

Arie

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Antonio Acuesta
(DHL AU)
Sent: Wednesday, August 27, 2008 16:21 PM
To: cisco-nsp
Subject: Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

Hi,

Can you please recommend a stable IOS version for Cisco Catalyst 6513?
The current version that I have is Version 12.2(18)SXD3. The switch has
not been upgraded for a while and it will be good to know the version
with less bug.

Thanks.
Tony
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] RES: Cisco Catalyst 6513 IOS version

2008-08-27 Thread Gert Doering
Hi,

On Wed, Aug 27, 2008 at 09:20:41PM +0800, Antonio Acuesta (DHL AU) wrote:
 Can you please recommend a stable IOS version for Cisco Catalyst 6513?
 The current version that I have is Version 12.2(18)SXD3. The switch has
 not been upgraded for a while and it will be good to know the version
 with less bug.

We've been fairly happy with 12.2(18)SXF in various versions.  Latest
release is SXF14.

Check the release notes on CCO whether your specific combination of hardware
is still supported - some modules might have been dropped SXE-SXF.

gert
-- 
USENET is *not* the non-clickable part of WWW!
   //www.muc.de/~gert/
Gert Doering - Munich, Germany [EMAIL PROTECTED]
fax: +49-89-35655025[EMAIL PROTECTED]


pgp47DuVtDHyj.pgp
Description: PGP signature
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/