[c-nsp] cisco-nsp Digest, Vol 80, Issue 49
Matlock, Kenneth L
MatlockK at exempla.org
Wed Jul 15 08:17:50 EDT 2009
A few things.
1) I'm not your 'friend'. My friends actually PAY for what they use, not try outright theft (and advertise it on a public forum!)
2) This has nothing to do with Cisco equipment
3) If you want a monitoring package, I'd suggest either paying for it, or using one of the many open-source packages out there. Look through the archives and you'll find plenty of dicsussions about them.
Some people's kids.....
Ken Matlock
Network Analyst
Exempla Healthcare
(303) 467-4671
matlockk at exempla.org
________________________________
From: Digambar. Giri [mailto:digambar.giri at gmail.com]
Sent: Wed 7/15/2009 1:24 AM
To: Matlock, Kenneth L
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] cisco-nsp Digest, Vol 80, Issue 49
DEar frend
i need a crak....... IPswitch Whatsup gold 11
On Tue, Jul 14, 2009 at 8:27 PM, Matlock, Kenneth L <MatlockK at exempla.org> wrote:
The serial numbers can be found here:
http://www.whatsupgold.com/
Ken Matlock
Network Analyst
Exempla Healthcare
(303) 467-4671
matlockk at exempla.org
-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Digambar. Giri
Sent: Tuesday, July 14, 2009 8:29 AM
To: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] cisco-nsp Digest, Vol 80, Issue 49
Dear friends
please provide IPswitch Whatsup gold 11 serial key NMs...
On 7/14/09, cisco-nsp-request at puck.nether.net <
cisco-nsp-request at puck.nether.net> wrote:
>
> Send cisco-nsp mailing list submissions to
> cisco-nsp at puck.nether.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> or, via email, send a message with subject or body 'help' to
> cisco-nsp-request at puck.nether.net
>
> You can rDAr each the person managing the list at
> cisco-nsp-owner at puck.nether.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of cisco-nsp digest..."
>
>
> Today's Topics:
>
> 1. Re: "Software Download Area is Unavailable at this time"
> (Gert Doering)
> 2. Block URL ACCESS LIST (Mohammad Khalil)
> 3. Re: multiple vlans on a port (Gert Doering)
> 4. Re: Block URL ACCESS LIST (masood at nexlinx.net.pk)
> 5. Re: IPv6 iBGP Route Reflector (Steve Bertrand)
> 6. Re: ASA IPsec Tunnel Failover (Forrest, Michael E.)
> 7. Re: ASA IPsec Tunnel Failover (A.L.M.Buxey at lboro.ac.uk)
> 8. Re: Maximum spannig tree instances (Geoffrey Pendery)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Tue, 14 Jul 2009 10:56:48 +0200
> From: Gert Doering <gert at greenie.muc.de>
> To: Phil Mayers <p.mayers at imperial.ac.uk>
> Cc: Gert Doering <gert at greenie.muc.de>, "cisco-nsp at puck.nether.net"
> <cisco-nsp at puck.nether.net>, Jared Mauch
<jared at puck.nether.net>
> Subject: Re: [c-nsp] "Software Download Area is Unavailable at this
> time"
> Message-ID: <20090714085648.GD290 at greenie.muc.de>
> Content-Type: text/plain; charset="us-ascii"
>
> Hi,
>
> On Tue, Jul 14, 2009 at 09:16:23AM +0100, Phil Mayers wrote:
> > But can I just make a recommendation to everyone here: next time you
go
> > out to competitive tender, specify the nature of docs & software
> > availability. List "HTTP downloads without client software or
plugins"
> > as a mandatory requirement.
>
> While this is a nice idea to cause some pressure, I can't see it as
> overly realistic - if I have a router A that will fulfill everything
> that we need, and a router B that will only do 80% and at the same
> time costs 20% more, but has a better company web interface, I think
it's
> very unlikely that their web download thingie will be change our
> decision.
>
> (Besides, most competitors web sites and software download processes
are
> even worse)
>
> gert
> --
> USENET is *not* the non-clickable part of WWW!
> //
> www.muc.de/~gert/
> Gert Doering - Munich, Germany
> gert at greenie.muc.de
> fax: +49-89-35655025
> gert at net.informatik.tu-muenchen.de
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: not available
> Type: application/pgp-signature
> Size: 304 bytes
> Desc: not available
> URL: <
>
https://puck.nether.net/pipermail/cisco-nsp/attachments/20090714/13933a9
4/attachment-0001.bin <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090714/13933a94/attachment-0001.bin>
> >
>
> ------------------------------
>
> Message: 2
> Date: Tue, 14 Jul 2009 12:48:52 +0300
> From: Mohammad Khalil <eng_mssk at hotmail.com>
> To: <cisco-nsp at puck.nether.net>
> Subject: [c-nsp] Block URL ACCESS LIST
> Message-ID: <BLU102-W20D319D228A429D7F5B1F9FA230 at phx.gbl>
> Content-Type: text/plain; charset="windows-1256"
>
>
> how can i block url using access-list ?
>
> _________________________________________________________________
> Drag n? drop?Get easy photo sharing with Windows Live? Photos.
>
> http://www.microsoft.com/windows/windowslive/products/photos.aspx
>
> ------------------------------
>
> Message: 3
> Date: Tue, 14 Jul 2009 11:49:11 +0200
> From: Gert Doering <gert at greenie.muc.de>
> To: Matthew Huff <mhuff at ox.com>
> Cc: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] multiple vlans on a port
> Message-ID: <20090714094911.GH290 at greenie.muc.de>
> Content-Type: text/plain; charset="us-ascii"
>
> Hi,
>
> On Mon, Jul 13, 2009 at 06:38:23PM -0400, Matthew Huff wrote:
> > Also, with 802.1q framing, you might run into fragmentation on
> > the non-native VLANs. You may want to adjust the MTU on the virtual
> > machines if Linux doesn't do it automatically.
>
> There are a few broken NIC cards on the Linux side that have issues
> with "baby-jumbo" packets (1500 + 4 byte for 802.1q header). Decent
> gear - and that's what you want to use on a *server* - doesn't have
> any issues there.
>
> And, just to clarify: *If* you have MTU problems due to 802.1q
headers,
> you will not see "fragmentation". You'll see black-holing, because
the
> stack will not know about the MTU issue, and thus won't even think
> about fragmentation. (Fragmentation happens if there is a link on
> the path that has smaller L3 MTU than the packet's sender - but in
this
> scenario, the L3 endpoints assume 1500, while the L2 link cannot
handle
> this. Black hole).
>
> gert
> --
> USENET is *not* the non-clickable part of WWW!
> //
> www.muc.de/~gert/
> Gert Doering - Munich, Germany
> gert at greenie.muc.de
> fax: +49-89-35655025
> gert at net.informatik.tu-muenchen.de
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: not available
> Type: application/pgp-signature
> Size: 304 bytes
> Desc: not available
> URL: <
>
https://puck.nether.net/pipermail/cisco-nsp/attachments/20090714/6dc4550
8/attachment-0001.bin <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090714/6dc45508/attachment-0001.bin>
> >
>
> ------------------------------
>
> Message: 4
> Date: Tue, 14 Jul 2009 16:13:52 +0500 (PKT)
> From: masood at nexlinx.net.pk
> To: "Mohammad Khalil" <eng_mssk at hotmail.com>
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Block URL ACCESS LIST
> Message-ID:
>
<24754.196.46.241.57.1247570032.squirrel at nexmail1.nexlinx.net.pk>
> Content-Type: text/plain;charset=iso-8859-1
>
>
> Please go to the following URL to begin:
>
>
>
http://weblogs.com.pk/jahil/archive/2008/11/15/how-nbar-actually-classif
ies-the-traffic-flows.aspx <http://weblogs.com.pk/jahil/archive/2008/11/15/how-nbar-actually-classifies-the-traffic-flows.aspx>
>
> Regards,
> Masood
>
> >
> > how can i block url using access-list ?
> >
> > _________________________________________________________________
> > Drag n? drop?Get easy photo sharing with Windows Live? Photos.
> >
> > http://www.microsoft.com/windows/windowslive/products/photos.aspx
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>
>
> ------------------------------
>
> Message: 5
> Date: Tue, 14 Jul 2009 08:23:09 -0400
> From: Steve Bertrand <steve at ibctech.ca>
> To: Aleksandr Gurbo <kron at linkey.ru>
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] IPv6 iBGP Route Reflector
> Message-ID: <4A5C78AD.5050006 at ibctech.ca>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Aleksandr Gurbo wrote:
> > On Sat, 11 Jul 2009 19:08:17 -0400
> > Steve Bertrand <steve at ibctech.ca> wrote:
> >
> >> Over the weekend, I'll find out how the OP can fix the routes, and
> >> moreover, why they are broken in the first place.
> >>
> >> Steve
> >
> > Have you any ideas how to fix reflected routes?
>
> I will be working on this specific issue today, as I need to make some
> changes in preparation of adding a new router later this week.
>
> I'll keep you posted if I find anything specific as I go.
>
> Steve
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: smime.p7s
> Type: application/x-pkcs7-signature
> Size: 3233 bytes
> Desc: S/MIME Cryptographic Signature
> URL: <
>
https://puck.nether.net/pipermail/cisco-nsp/attachments/20090714/efe1560
f/attachment-0001.bin <https://puck.nether.net/pipermail/cisco-nsp/attachments/20090714/efe1560f/attachment-0001.bin>
> >
>
> ------------------------------
>
> Message: 6
> Date: Tue, 14 Jul 2009 12:50:35 +0100
> From: "Forrest, Michael E." <michael.forrest at abdn.ac.uk>
> To: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] ASA IPsec Tunnel Failover
> Message-ID:
>
<D2BEF91BFE51C743854D7AB86BA35A354984F7EC25 at VMAILA.uoa.abdn.ac.uk>
> Content-Type: text/plain; charset="us-ascii"
>
> I was under the impression that there was no BGP support in the ASA
> platform, unless someone knows otherwise?
>
> Michael.
>
> > -----Original Message-----
> > From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-
> > bounces at puck.nether.net] On Behalf Of Prabhu Gurumurthy
> > Sent: 14 July 2009 00:34
> > To: Munoz, Jeff
> > Cc: cisco-nsp at puck.nether.net
> > Subject: Re: [c-nsp] ASA IPsec Tunnel Failover
> >
> > Answer is: BGP
> >
> > On Jul 13, 2009, at 1:14 PM, Munoz, Jeff wrote:
> >
> > > Hey guys, I have two main sites (site A and site B) and one remote
> > > site (site C). Sites A and B have a metroethernet connection
> > > between them. Remote site C has an IPsec tunnel back to site A.
> > > I'd like to setup failover so in case site A's ASA is down the
> > > remote site C ASA sends the interesting traffic down the site B
> > > IPsec tunnel. Unfortunately, it will always match the tunnel to
> > > site A since the phase 2 access lists have the same source/
> > > destinations. Any ideas on how I can do this?
> > >
> > > Thanks!
> > >
> > > Jeff
> > > _______________________________________________
> > > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
> The University of Aberdeen is a charity registered in Scotland, No
> SC013683.
>
>
> ------------------------------
>
> Message: 7
> Date: Tue, 14 Jul 2009 14:03:24 +0100
> From: A.L.M.Buxey at lboro.ac.uk
> To: "Forrest, Michael E." <michael.forrest at abdn.ac.uk>
> Cc: "cisco-nsp at puck.nether.net" <cisco-nsp at puck.nether.net>
> Subject: Re: [c-nsp] ASA IPsec Tunnel Failover
> Message-ID: <20090714130324.GA16535 at lboro.ac.uk>
> Content-Type: text/plain; charset=us-ascii
>
> Hi,
> > I was under the impression that there was no BGP support in the ASA
> platform, unless someone knows otherwise?
>
> ah, ASAs and dynamic routing protocols...and you'll be wanting
> those in multi-context mode too? ;-)
>
> alan
>
>
>
> ------------------------------
>
> Message: 8
> Date: Tue, 14 Jul 2009 08:21:53 -0500
> From: Geoffrey Pendery <geoff at pendery.net>
> To: A.L.M.Buxey at lboro.ac.uk
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Maximum spannig tree instances
> Message-ID:
> <d6966e4b0907140621s504dea4aq120b1f2440f76f1d at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Yes, but he also mentions MST, which has a much more restrictive
limit.
> As far as I've seen, 802.1s itself only allows 64 instances (see
> http://en.wikipedia.org/wiki/Spanning_tree_protocol , or search for
> the proper RFC docs)
> But all the Cisco docs I've found this morning say they only support
16:
> for example:
>
>
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/na
tive/configuration/guide/spantree.html#wp1064097 <http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/spantree.html#wp1064097>
>
> I could have sworn I found stuff saying that our gear would support 64
> of them, and we've been contemplating more than 40 in recent designs,
> but I guess I'll have to validate in the lab whether it's actually 16
> or 64 for our chassis and code.
>
> So keep in mind that if you're moving from RPVST to MST, you're
> talking about fewer instances, by necessity.
>
>
> -Geoff
>
>
> On Tue, Jul 14, 2009 at 3:45 AM, <A.L.M.Buxey at lboro.ac.uk> wrote:
> > Hi,
> >
> >> ... but it doesn't say anything about the number of STP instances.
> >
> > things go wonky when you have more than 1800 virtualports per slot
> > (which you didnt quite reach) (1200 on older eg 100mbit blades)
> > with 13,000 in total (PVST+), 10,000 in total (RPVST+)
> >
> > however, with MST, you can have 6000 virtual ports per blade and
50,000
> > in total (yay!)
> >
> > however, this is all about logical interfaces. you want to know the
> > STP instance?
> >
> > regarding maximum STP instances... I believe theres a platform limit
> > of 1024 because of the MAC to VLAN bridge mapping on the platform -
> > but, from the values above, you can see that virtual ports would
> > hit you quite quickly without appropriate control of the VLANs
> >
> > alan
> > _______________________________________________
> > cisco-nsp mailing list ?cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
>
>
> ------------------------------
>
> _______________________________________________
> cisco-nsp mailing list
> cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
>
> End of cisco-nsp Digest, Vol 80, Issue 49
> *****************************************
>
--
--
Regards,
Digambar Giri
+91- 9975776368
_______________________________________________
cisco-nsp mailing list cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
--
--
Regards,
Digambar Giri
+91- 9975776368
More information about the cisco-nsp
mailing list