[nsp] unsubscribe
d.vanmaren at kpn.com
d.vanmaren at kpn.com
Mon Oct 13 10:22:24 EDT 2003
unsubscribe
Dennis van Maren,
IO NEW DTI All round designer
Regulusweg 1
2516AC Den Haag
The Netherlands
Room 522
Tel. (+31) (0)70 44 62804
fax. (+31) (0)70 45 11829
Email. d.vanmaren at kpn.com
-----Oorspronkelijk bericht-----
Van: cisco-nsp-request at puck.nether.net
[mailto:cisco-nsp-request at puck.nether.net]
Verzonden: maandag 13 oktober 2003 16:11
Aan: cisco-nsp at puck.nether.net
Onderwerp: cisco-nsp Digest, Vol 11, Issue 20
Send cisco-nsp mailing list submissions to
cisco-nsp at puck.nether.net
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/cisco-nsp
or, via email, send a message with subject or body 'help' to
cisco-nsp-request at puck.nether.net
You can reach the person managing the list at
cisco-nsp-owner at puck.nether.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of cisco-nsp digest..."
Today's Topics:
1. Re: Redistributing static subnets via separate OSPF process
(Kyaw Khine)
2. HSRP standby ip on a different subnet as interface subnet, is
that possible? (Marcelo Bartsch)
3. Re: HSRP standby ip on a different subnet as interface
subnet, is that possible? (Stephen J. Wilcox)
4. Re: HSRP standby ip on a different subnet as interface
subnet, is that possible? (Marcelo Bartsch)
5. Cisco shaping (Thomas Salmen)
6. Links UP/Down (M.Palis)
7. Re: WCCP v2 problem (morph)
8. RE: hspr prob - can't ping active address
(Dale.Francis at barclayscapital.com)
9. uRPF on 3550 switches (jlewis at lewis.org)
10. Re: Cisco shaping (Ralph Doncaster)
11. RE: Cisco shaping (Erik Van Den Abbeele)
----------------------------------------------------------------------
Message: 1
Date: Sat, 11 Oct 2003 17:45:26 -0400 (EDT)
From: "Kyaw Khine" <kyaw.khine at connectionless.net>
Subject: [nsp] Re: Redistributing static subnets via separate OSPF
process
To: <cisco-nsp at puck.nether.net>
Message-ID:
<46371.199.67.140.20.1065908726.squirrel at www.connectionless.net>
Content-Type: text/plain; charset=iso-8859-1
Hi Robert,
When redistributing ospf #15 into ospf #10, it will only distribute only
OSPF internal routes.
Static routes distributed into ospf #15 will become external routes
(either E1 or E2, the later is default).
Adding "match external 2 (external 1)" should do the job.
-------------------------------------------------------------------
router ospf 10
router-id 172.16.0.1
log-adjacency-changes
redistribute ospf 15 subnets match internal external 2 (external 1)
-------------------------------------------------------------------
REF :
http://www.cisco.com/en/US/customer/products/sw/iosswrel/ps1831/products_com
mand_reference_chapter09186a00800ca69c.html#1019783
Let me know.
- Kyaw Khine
Connectionless Networks
------------------------------
Message: 2
Date: Sun, 12 Oct 2003 02:27:20 -0300
From: Marcelo Bartsch <mbartsch at unix911.ath.cx>
Subject: [nsp] HSRP standby ip on a different subnet as interface
subnet, is that possible?
To: Cisco NSP <cisco-nsp at puck.nether.net>
Message-ID: <1065936440.2527.5.camel at unix911.ath.cx>
Content-Type: text/plain
Hello list,
i was reading , but can't find information if the following
can be done with hsrp , i had a customer and asigned subnet between is
location and my location is a /30 , so i need to setup something like
that, i can't find anywere if this is a valid configuration.
(configuration is taken from my memory, so it could be a bit or
completly wrong, but i hope you can get the idea)
ROUTER 1:
interface fastethernet 6/6
ip address 192.168.0.1 255.255.255.252
standby 1 80.3.4.1 255.255.255.252
ROUTER 2:
interface fastethernet 5/23
ip address 192.168.0.2 255.255.255.252
standby 1 80.3.4.1 255.255.255.252
Customer default router is 80.3.4.1.
actualy i had the customer connected to only 1 of my routers.
so the picture is something like that
ROUTER 1 ROUTER 2
+ +
| HSRP |
+-------+------+
|
|
CUSTOMER
Tia!
--
Marcelo Bartsch <mbartsch at unix911.ath.cx>
------------------------------
Message: 3
Date: Sun, 12 Oct 2003 13:02:15 +0000 (GMT)
From: "Stephen J. Wilcox" <steve at telecomplete.co.uk>
Subject: Re: [nsp] HSRP standby ip on a different subnet as interface
subnet, is that possible?
To: Marcelo Bartsch <mbartsch at unix911.ath.cx>
Cc: Cisco NSP <cisco-nsp at puck.nether.net>
Message-ID:
<Pine.LNX.4.44.0310121256130.19502-100000 at server2.tcw.telecomplete.net>
Content-Type: TEXT/PLAIN; charset=US-ASCII
Hi Marcelo,
I'm a bit confused as to what your trying to do.. but if I understand
correctly
you want to run HSRP on a /30.
I believe you need to configure a permanent IP address on each router for
this
to work, this would require a minimum of 4 IPs (r1, r2, hsrp, cust) and
therefore would need a /29. You cant specify the netmask on the standby
command
and this is obtained from the permanent IP config on the interface.
Steve
On Sun, 12 Oct 2003, Marcelo Bartsch wrote:
> Hello list,
> i was reading , but can't find information if the following
> can be done with hsrp , i had a customer and asigned subnet between is
> location and my location is a /30 , so i need to setup something like
> that, i can't find anywere if this is a valid configuration.
>
> (configuration is taken from my memory, so it could be a bit or
> completly wrong, but i hope you can get the idea)
>
>
> ROUTER 1:
> interface fastethernet 6/6
> ip address 192.168.0.1 255.255.255.252
> standby 1 80.3.4.1 255.255.255.252
>
> ROUTER 2:
> interface fastethernet 5/23
> ip address 192.168.0.2 255.255.255.252
> standby 1 80.3.4.1 255.255.255.252
>
>
> Customer default router is 80.3.4.1.
>
> actualy i had the customer connected to only 1 of my routers.
>
> so the picture is something like that
>
> ROUTER 1 ROUTER 2
> + +
> | HSRP |
> +-------+------+
> |
> |
> CUSTOMER
>
>
> Tia!
>
>
------------------------------
Message: 4
Date: Sun, 12 Oct 2003 14:04:53 -0300
From: Marcelo Bartsch <mbartsch at unix911.ath.cx>
Subject: Re: [nsp] HSRP standby ip on a different subnet as interface
subnet, is that possible?
To: "Stephen J. Wilcox" <steve at telecomplete.co.uk>
Cc: Cisco NSP <cisco-nsp at puck.nether.net>
Message-ID: <1065978292.18253.3.camel at unix911.ath.cx>
Content-Type: text/plain
On Sun, 2003-10-12 at 10:02, Stephen J. Wilcox wrote:
Stephen, i was trying to save some ip addresses :), but as it
is not possible, i should talk to my customer and ask them to
change the subnet if he want high avalaiblity.
Thanks again , you make me understand something i wasn't sure about.
(Psst. cisco people can you put that on the hsrp documentation as it not
clearly specified, or i was unable to find that information.)
TIA!
> Hi Marcelo,
> I'm a bit confused as to what your trying to do.. but if I understand
correctly
> you want to run HSRP on a /30.
>
> I believe you need to configure a permanent IP address on each router for
this
> to work, this would require a minimum of 4 IPs (r1, r2, hsrp, cust) and
> therefore would need a /29. You cant specify the netmask on the standby
command
> and this is obtained from the permanent IP config on the interface.
>
> Steve
>
> On Sun, 12 Oct 2003, Marcelo Bartsch wrote:
>
> > Hello list,
> > i was reading , but can't find information if the following
> > can be done with hsrp , i had a customer and asigned subnet between is
> > location and my location is a /30 , so i need to setup something like
> > that, i can't find anywere if this is a valid configuration.
> >
> > (configuration is taken from my memory, so it could be a bit or
> > completly wrong, but i hope you can get the idea)
> >
> >
> > ROUTER 1:
> > interface fastethernet 6/6
> > ip address 192.168.0.1 255.255.255.252
> > standby 1 80.3.4.1 255.255.255.252
> >
> > ROUTER 2:
> > interface fastethernet 5/23
> > ip address 192.168.0.2 255.255.255.252
> > standby 1 80.3.4.1 255.255.255.252
> >
> >
> > Customer default router is 80.3.4.1.
> >
> > actualy i had the customer connected to only 1 of my routers.
> >
> > so the picture is something like that
> >
> > ROUTER 1 ROUTER 2
> > + +
> > | HSRP |
> > +-------+------+
> > |
> > |
> > CUSTOMER
> >
> >
> > Tia!
> >
> >
--
Marcelo Bartsch <mbartsch at unix911.ath.cx>
------------------------------
Message: 5
Date: Mon, 13 Oct 2003 16:27:58 +1300
From: "Thomas Salmen" <tsalmen at iprolink.co.nz>
Subject: [nsp] Cisco shaping
To: <cisco-nsp at puck.nether.net>
Message-ID: <200310130327.h9D3RtU117638 at smtp.iprolink.co.nz>
Content-Type: text/plain; charset="us-ascii"
Hello,
Does anyone have any recommendations for a Cisco device which is
particularly good at filtering, rate-shaping, and policy routing, all at
100-200Mbit speeds? I had been looking at the 3550/3750 switches as a
cheapish possibility - any second opinions? Any other non-Cisco options
perhaps?
Cheers,
Thomas
------------------------------
Message: 6
Date: Mon, 13 Oct 2003 08:48:08 +0300
From: "M.Palis" <security at cytanet.com.cy>
Subject: [nsp] Links UP/Down
To: <cisco-nsp at puck.nether.net>
Message-ID: <001901c3914d$94e60e00$469d0ec3 at mpalis>
Content-Type: text/plain; charset="iso-8859-7"
Dear all
We are facing a some problems during the last month with links going up/down
simultaneously causing BGP flapping and therefore affecting our traffic and
the traffic of our customers. We have 2 C7507 with connections to upstream
ISPs on both routers and connection to international customers to one of the
routers. The routers are connected together through a Gigabit switch. All
links on both routers (very strange) go UP/Down at random periods with
out any cause.
We investigate it with our transmition and the did not find anything. All
links follow a different path through our transmission.. We change some
line cards on the C7507 again with out success. IOS that we are using is
122-15.T7.
We are thinking now the case of a kind of attack that causes flapping of the
links..
Does anyone of you face a similar situation before?
I will appreciate and help/advice/opinion
REGARDS
------------------------------
Message: 7
Date: Mon, 13 Oct 2003 10:47:02 +0200
From: morph <morph at 0z0ne.com>
Subject: Re: [nsp] WCCP v2 problem
To: James Galliford <JamesG at corp.ptd.net>
Cc: cisco-nsp at puck.nether.net
Message-ID: <3F8A6686.3050507 at 0z0ne.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Hi
It?s a 12.2(15)T7 version
regards
Javier
James Galliford wrote:
>What version of IOS are you using?
>
>We have seen this on a 7500 series router running SP IOS and WCCP. We
>weren't, however, running dCEF at the time, only CEF.
>
>Thanks.
>
>-----Original Message-----
>From: morph [mailto:morph at 0z0ne.com]
>Sent: Friday, October 10, 2003 8:08 AM
>To: cisco-nsp at puck.nether.net
>Subject: [nsp] WCCP v2 problem
>
>
>Hi all
>
>Any experience with High CPU utilisation with WCCP v2 enabled. Platform
>is CISCO 7507 with dCEF.
>
>Even with the wccp disabled but the config still in the running config i
>
>have around 70-80% of CPU load. The load only gets normal values (6%)
>when i delete ALL the configuration of wccp in the interfaces where it
>was applied.
>
>Regards and greetings (this is my first post in the list :)
>
>JJ
>
>_______________________________________________
>cisco-nsp mailing list cisco-nsp at puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>
------------------------------
Message: 8
Date: Mon, 13 Oct 2003 10:04:12 +0100
From: Dale.Francis at barclayscapital.com
Subject: RE: [nsp] hspr prob - can't ping active address
To: ryan at complicity.co.uk, mrz at intelenet.net
Cc: cisco-nsp at puck.nether.net
Message-ID:
<2B4CE1727F61D511ADA30008C71E669A06DB9DDC at exlpseu012.ldn.bzwint.com>
Content-Type: text/plain
Seen this before on platforms other than 6500 such as 3600 and hit the
following bug
CSCdx10170 -HSRP not responding to arp requests, the way I got around this
and someone has mentioned was by clearing ARP entries however this is not a
long term fix by any means.
CSCdx10170 Bug text:
Symptoms: A router may stop replying to Address Resolution Protocol (ARP)
requests.
Conditions: This symptom is observed on a Cisco router that is used as the
active Hot Standby Router Protocol (HSRP) router for certain HSRP groups.
The
router may stop replying to ARP requests that are sent to the IP address of
the
HSRP. This symptom occurs only if HSRP is configured on more than one
interface.
Workaround: Configure the no standby redirects global
configuration command on the HSRP router, and then remove and re-add the
standby <group> ip command.
This bug also rings true CSCds88317 - hsrp standby address becomes
unreachable after few hours - arp
AD
-----Original Message-----
From: Ryan O'Connell [mailto:ryan at complicity.co.uk]
Sent: 10 October 2003 23:19
To: matthew zeier
Cc: cisco-nsp at puck.nether.net
Subject: Re: [nsp] hspr prob - can't ping active address
On Fri, Oct 10, 2003 at 02:18:43PM -0700, matthew zeier wrote:
> 6509 MSFC2.
Definitely try deleting and reentering standby statements then. Cisco have
known about this bug for some time, (18 months+) but I don't think they've
ever been able to figure out what causes it.
--
Ryan O'Connell - CCIE #8174
<ryan at complicity.co.uk> - http://www.complicity.co.uk
I'm not losing my mind, no I'm not changing my lines,
I'm just learning new things with the passage of time
_______________________________________________
cisco-nsp mailing list cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
------------------------------------------------------------------------
For more information about Barclays Capital, please
visit our web site at http://www.barcap.com.
Internet communications are not secure and therefore the Barclays
Group does not accept legal responsibility for the contents of this
message. Although the Barclays Group operates anti-virus programmes,
it does not accept responsibility for any damage whatsoever that is
caused by viruses being passed. Any views or opinions presented are
solely those of the author and do not necessarily represent those of the
Barclays Group. Replies to this email may be monitored by the Barclays
Group for operational or business reasons.
------------------------------------------------------------------------
------------------------------
Message: 9
Date: Mon, 13 Oct 2003 09:38:28 -0400 (EDT)
From: jlewis at lewis.org
Subject: [nsp] uRPF on 3550 switches
To: cisco-nsp at puck.nether.net
Message-ID:
<Pine.LNX.4.44.0310130903400.8137-100000 at redhat1.mmaero.com>
Content-Type: TEXT/PLAIN; charset=US-ASCII
I've recently been told and verified that though our 3550 switches accept
"ip verify unicast reverse-path" or "ip verify unicast source
reachable-via <any|rx>" on ports in "no switchport" mode, the commands
don't seem to actually do anything. i.e. Spoofed traffic from the
device on that port is still passed.
I can't find an open bugid in bug toolkit or even any mention of this
command on this platform. Is this problem known and being worked on, or
was the command accidentally left in the CLI with no intention of
supporting the feature? I've most recently tested this with 12.1(13)EA1c,
----------------------------------------------------------------------
Jon Lewis *jlewis at lewis.org*| I route
Senior Network Engineer | therefore you are
Atlantic Net |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
------------------------------
Message: 10
Date: Mon, 13 Oct 2003 09:53:56 -0400 (EDT)
From: Ralph Doncaster <ralph at istop.com>
Subject: Re: [nsp] Cisco shaping
To: Thomas Salmen <tsalmen at iprolink.co.nz>
Cc: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
Message-ID: <Pine.LNX.4.58.0310130953010.8948 at ns.istop.com>
Content-Type: TEXT/PLAIN; charset=US-ASCII
Anyone I know doing that kind of stuff is using 6500's.
Ralph Doncaster, IStop.com president
6042147 Canada Inc.
On Mon, 13 Oct 2003, Thomas Salmen wrote:
>
> Hello,
>
> Does anyone have any recommendations for a Cisco device which is
> particularly good at filtering, rate-shaping, and policy routing, all at
> 100-200Mbit speeds? I had been looking at the 3550/3750 switches as a
> cheapish possibility - any second opinions? Any other non-Cisco options
> perhaps?
------------------------------
Message: 11
Date: Mon, 13 Oct 2003 16:08:13 +0200
From: Erik Van Den Abbeele <Erik.VanDenAbbeele at eu.didata.com>
Subject: RE: [nsp] Cisco shaping
To: "'ralph+d at istop.com'" <ralph+d at istop.com>, Thomas Salmen
<tsalmen at iprolink.co.nz>
Cc: cisco-nsp at puck.nether.net
Message-ID: <B167122D6977D511B02D00508BB33D890222797A at BEBRUDDEXC1>
Content-Type: text/plain; charset="iso-8859-1"
rate limiting on c2950, traffic shaping isn't supported on this switch
-----Original Message-----
From: Ralph Doncaster [mailto:ralph at istop.com]
Sent: lundi 13 octobre 2003 15:54
To: Thomas Salmen
Cc: cisco-nsp at puck.nether.net
Subject: Re: [nsp] Cisco shaping
Anyone I know doing that kind of stuff is using 6500's.
Ralph Doncaster, IStop.com president
6042147 Canada Inc.
On Mon, 13 Oct 2003, Thomas Salmen wrote:
>
> Hello,
>
> Does anyone have any recommendations for a Cisco device which is
> particularly good at filtering, rate-shaping, and policy routing, all at
> 100-200Mbit speeds? I had been looking at the 3550/3750 switches as a
> cheapish possibility - any second opinions? Any other non-Cisco options
> perhaps?
_______________________________________________
cisco-nsp mailing list cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
------------------------------
_______________________________________________
cisco-nsp mailing list
cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
End of cisco-nsp Digest, Vol 11, Issue 20
*****************************************
More information about the cisco-nsp
mailing list