[nsp] Router running out of memory

[Church, Chuck]

Software advisor didn't mention the exact maintenance release (they
recommend the latest of course), but the trains that support it are:
12.3, 12.2ZJ, 12.2YT, 12.2YN, 12.2T, 12.2, and 12.1T.  12.2 mainline is
probably the best choice, and only GD one there.  Getting back to the
worm, assuming you're getting routes from a protocol, could you add a
static to null to cover the whole /16 the infected workstations are a
part of?  This is assuming your route table has more exact routes to
real destinations.


Chuck Church
Wam!Net Government Services - D&I Team
Lead Design Engineer
CCIE #8776, MCNE, MCSE
1210 N. Parker Rd.
Greenville, SC 29609
Office: 864-335-9473
Cell: 703-819-3495
cchurch at wamnetgov.com
PGP key:
http://pgp.mit.edu:11371/pks/lookup?op=index&search=cchurch%40wamnetgov.
com

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Edward B. Dreger
Sent: Wednesday, July 07, 2004 8:49 AM
To: cisco-nsp at puck.nether.net
Subject: Re: [nsp] Router running out of memory

KA> Date: Thu, 2 Dec 1999 04:11:15 -0500 (EST)
KA> From: Krzysztof Adamski

KA> If I try to enable CEF I get:
KA> %DCEF not supported with 802.1q encapsulation on subinterface %CEF 
KA> not supported with 802.1q encapsulation on subinterface

I noted the same thing on 12.1 mainline IIRC...


KA> Is there anything that can be done to prevent this?

IOS upgrade.  I'd need to check Feature Navigator, but am too lazy to
boot and log into a JavaScript-cable system.  I think support for CEF +
dot1q was added in 12.1T or 12.2.  Chuck thought 12.2 or 12.2T.  It's
somewhere around there. :-)


Eddy
--
EverQuick Internet - http://www.everquick.net/ A division of Brotsman &
Dreger, Inc. - http://www.brotsman.com/ Bandwidth, consulting,
e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
DO NOT send mail to the following addresses:
davidc at brics.com -*- jfconmaapaq at intc.net -*- sam at everquick.net Sending
mail to spambait addresses is a great way to get blocked.

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/