[nsp] NPE-G1 under 12.0S

[Simon Hamilton-Wilkes]

Hmmm.  I raised a TAC case about this and the answer I got was that
the 3DES 'Secured Shell' images support IPSEC too:
'12.2(14)S3  will support IPSEC in the following features :

ENTERPRISE/FW/IDS SECURE SHELL 3DES
ENTERPRISE/FW/SNASW SECURE SHELL 3DES
IP SECURED SHELL 3DES
IP/FW/IDS SECURE SHELL 3DES
SERVICE PROVIDER/SECURE SHELL 3DES'

I haven't got a spare 7200 to test with at the moment but this does
seem unlikely to me.

I'm reluctant to run non S train let alone 12.3 code, these boxes run
several full BGP views + customer BGP + IPSEC tunnels.


Simon

-----Original Message-----
From: 'Dennis Peng' [mailto:dpeng at cisco.com]
Sent: Tuesday, July 15, 2003 10:42 AM
To: Simon Hamilton-Wilkes
Cc: 'Jared Mauch'; 'Temkin, David'; cisco-nsp at puck.nether.net
Subject: Re: [nsp] NPE-G1 under 12.0S


I've found out that IPsec will be "supported" in 12.2S at a later
date, but that's probably about a year out. In the meantime, you'll
probably want to go with 12.3.

Dennis

Simon Hamilton-Wilkes [simon at jettis.com] wrote:
> Should I raise a TAC case about it ?
>
> We run 3DES tunnels between our sites so if support stops it will be a
> problem.
>
> I wish they'd explain stuff like this in the release notes - there's no
> mention
> of it.
>
> Simon
>
> -----Original Message-----
> From: Dennis Peng [mailto:dpeng at cisco.com]
> Sent: Friday, July 11, 2003 3:06 PM
> To: Simon Hamilton-Wilkes
> Cc: 'Jared Mauch'; 'Temkin, David'; cisco-nsp at puck.nether.net
> Subject: Re: [nsp] NPE-G1 under 12.0S
>
>
> It looks like support (ie code) for IPsec was removed from 12.2S. The
> IPsec-less images are called -k91-. I don't know why this was done.
>
> Dennis
>
> Simon Hamilton-Wilkes [simon at jettis.com] wrote:
> > 12.2(14)S3 seems to have shrunk.
> >
> > The IP/FW/IDS/Secure Shell 3DES image is now c7200-ik91o3s-mz ---The 1
is
> > new.
> > 12.2(14)S2 was 14,580,668 whereas S3 is 13,931,234
> >
> > Anyone know why ?  This makes me nervous.
> >
> > Thanks
> >
> > Simon
> >
> > -----Original Message-----
> > From: cisco-nsp-bounces at puck.nether.net
> > [mailto:cisco-nsp-bounces at puck.nether.net]On Behalf Of Jared Mauch
> > Sent: Friday, July 11, 2003 10:00 AM
> > To: Temkin, David
> > Cc: cisco-nsp at puck.nether.net
> > Subject: Re: [nsp] NPE-G1 under 12.0S
> >
> >
> > On Fri, Jul 11, 2003 at 12:51:26PM -0400, Temkin, David wrote:
> > > Does anyone know if the NPE-G1 is supported under 12.0S?  Software
> toolkit
> > > says no, but I find this kind of hard to believe...
> >
> > 	It is not.  I recommend something like 12.2(14)S3
> >
> > 	I believe it's about feature parity with 12.0(22)S or so.
> >
> > 	- Jared
> >
> > --
> > Jared Mauch  | pgp key available via finger from jared at puck.nether.net
> > clue++;      | http://puck.nether.net/~jared/  My statements are only
> mine.
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > http://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > http://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/

--
-------------------------------------------------------------------------
      ||        ||                                 Dennis Peng
      ||        ||        Cisco Systems, Inc.      Escalation Engineer
     ||||      ||||       170 West Tasman Drive    Phone: (408) 526-6143
 ..:||||||:..:||||||:..   San Jose, CA 95134       Fax:   (408) 232-2343
   Cisco Systems Inc.                              dpeng at cisco.com
-------------------------------------------------------------------------