- NANOG - lists.nanog.org

ATM/IP video
by Tracey Webb 29 Jul '04

29 Jul '04

I am attempting to bridge multiple ATM vc's on a single port OC12c in my Cisco 12008. The vc's are coming from VTC video equipment. Each vc is a different channel. I need to terminate it and pass over the IP's to my gigE port. Any suggestions. Tracey Webb Network Operations Cameron Communications, LLC 337-775-3097 Office 337-583-2097 337-493-4894 page tracey.webb(a)camtel.com FCC# PG-GB-022338 ************************************************************************ *** This email and any files transmitted with it from Cameron Communications are strictly confidential and intended solely for the individual or entity to whom they are addressed. If you have received this email in error please notify the sender. ************************************************************************ ***

2 1

COnfiguration Suggestion - Etherchannel
by Richard J. Sears 29 Jul '04

29 Jul '04

Hey Everyone, I am building out a customer that needs more than 1000Mbps of sustained bandwidth. Because of the customer equipment, etherchannel was suggested as the means to do this (it is compatible with this customers equipment). I am running a 6509 with Dual SUP720's in IOS mode only (no cat software). It was pointed out that there are really two different ways to configure the switch - I guess my question is which is the best (lowest overhead, etc)? Hopefully someone out there has been down this road before. TIA Two methods: ! interface Port-channel2 no ip address switchport switchport access vlan 10 switchport mode access ! interface GigabitEthernet7/1 no ip address switchport switchport access vlan 10 switchport mode access channel-group 2 mode on ! interface GigabitEthernet8/1 no ip address switchport switchport access vlan 10 switchport mode access channel-group 2 mode on ! interface Vlan10 description Customer_Name ip address 192.168.0.1 255.255.0.0 no ip redirects no ip unreachables ! And then there is this way: ! interface Port-channel2 description Customer_Name ip address 192.168.0.1 255.255.0.0 no ip redirects no ip unreachables ! interface GigabitEthernet7/1 description Customer_Name EtherChannel Interface #1 no ip address channel-group 2 mode on ! interface GigabitEthernet8/1 description Customer_Name EtherChannel Interface #2 no ip address channel-group 2 mode on ! ****************************************** Richard J. Sears Vice President American Digital Network ---------------------------------------------------- rsears(a)adnc.com http://www.adnc.com ---------------------------------------------------- 858.576.4272 - Phone 858.427.2401 - Fax ---------------------------------------------------- I fly because it releases my mind from the tyranny of petty things . . "Work like you don't need the money, love like you've never been hurt and dance like you do when nobody's watching."

5 7

CWDM or DWDM passive add/drop muxes
by Greg Schwimer 29 Jul '04

29 Jul '04

Does anyone have any experience with GBIC-based CWDM and/or DWDM optical add/drop muxes (OADM)? I'm presently looking at the Cisco product lines which combines GBICs with passive multiplexors and am curious as to alternative manufacturers and the experiences other might have in these types of products in a metro application. TIA, Greg

7 6

Quick question.
by Vish Yelsangikar 29 Jul '04

29 Jul '04

Sorry for the spam. I am trying to find this info, but can't find it anywhere. So posting my question to a wide and experienced audience. What are the chances of dual Sup 6500 chassis going down completely for whatever reason in general or hardware failure in particular. Anyone has MTBF for 6500 with dual everything (power supply, sup)? You may reply to me off list. Thanks. Vish.

1 0

RE: Loss of Telnet Capability to 6509
by Peering 28 Jul '04

28 Jul '04

I had this once with a 7500 and a friend at Cisco told me this procedure. I'm not sure if it would help you though. I had an idle session in "show users" output. To clear the idle session, I typed "show tcp brief". My friend said the stuck one should be in "ESTAB" state, but the one I cleared said "LASTACK", so you can always go by the foreign address. It's better to kick people off temporarily than to have to reboot the router just to clear a stuck VTY session. To clear the session, type "clear tcp tcb xxxxxxxx", using the hexadecimal TCB address at the beginning of the line from show tcp brief. Then check show users output to see if the session has disappeared. Diane Turley Network Engineer Xspedius Communications Co. 636-625-7178 -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Richard J. Sears Sent: Wednesday, July 28, 2004 2:35 PM To: Jason Frisvold Cc: Nanog Subject: Re: Loss of Telnet Capability to 6509 Hi Jason, the only ACL's on the vty's are the same across my entire farm of routers and switches. And when I telnet to a box with an ACL, I get a refused connection...this one is saying that it is timing out. On Wed, 28 Jul 2004 15:33:45 -0400 "Jason Frisvold" <friz(a)corp.ptd.net> wrote: > > Do you have ACL's restricting access to the vty's? I've seen > instances where telnet ports get locked up because of port scanning > and/or attacks... > > -- > Jason Frisvold > Penteledata > > > > -----Original Message----- > > From: Richard J. Sears [mailto:rsears@adnc.com] > > Sent: Wednesday, July 28, 2004 2:54 PM > > To: Nanog > > Subject: Loss of Telnet Capability to 6509 > > > > > > > > We posted this to cisco-nsp but someone suggested posting it here as > > well... > > > > > > > > We have a 6509 running a SUP720 in IOS only mode (no cat os). > > > > At around 4am this morning, we lost our ability to telnet to > > the router. > > Running a tcpdump shows that the router never responds to the telnet > > request. > > > > All functions and interfaces on the router seem fine (bgp, > > etherchannel, > > ibgp, vtp, hsrp) and I can console into the sup with no > > problems at all, > > we just cannot telnet into it. The CPU is at around 6%. > > > > I have checked all access lists on the router, none were > > added/removed or modified on line vty that would cause this problem. > > All logging appears normal. > > > > We are running Version 12.2(17a)SX3. > > > > Anyone have a similar problem or know how to check or restart > > the telnet > > process on the router without a reload...? > > > > > > ****************************************** > > Richard J. Sears > > Vice President > > American Digital Network > > ---------------------------------------------------- > > rsears(a)adnc.com > > http://www.adnc.com > > ---------------------------------------------------- > > 858.576.4272 - Phone > > 858.427.2401 - Fax > > INOC-DBA - 6130 > > ---------------------------------------------------- > > > > I fly because it releases my mind > > from the tyranny of petty things . . > > > > > > "Work like you don't need the money, love like you've > > never been hurt and dance like you do when nobody's watching." > > > > ****************************************** Richard J. Sears Vice President American Digital Network ---------------------------------------------------- rsears(a)adnc.com http://www.adnc.com ---------------------------------------------------- 858.576.4272 - Phone 858.427.2401 - Fax INOC-DBA - 6130 ---------------------------------------------------- I fly because it releases my mind from the tyranny of petty things . . "Work like you don't need the money, love like you've never been hurt and dance like you do when nobody's watching."

1 0

RE: Loss of Telnet Capability to 6509
by Jason Frisvold 28 Jul '04

28 Jul '04

Do you have ACL's restricting access to the vty's? I've seen instances where telnet ports get locked up because of port scanning and/or attacks... -- Jason Frisvold Penteledata > -----Original Message----- > From: Richard J. Sears [mailto:rsears@adnc.com] > Sent: Wednesday, July 28, 2004 2:54 PM > To: Nanog > Subject: Loss of Telnet Capability to 6509 > > > > We posted this to cisco-nsp but someone suggested posting it here as > well... > > > > We have a 6509 running a SUP720 in IOS only mode (no cat os). > > At around 4am this morning, we lost our ability to telnet to > the router. > Running a tcpdump shows that the router never responds to the telnet > request. > > All functions and interfaces on the router seem fine (bgp, > etherchannel, > ibgp, vtp, hsrp) and I can console into the sup with no > problems at all, > we just cannot telnet into it. The CPU is at around 6%. > > I have checked all access lists on the router, none were added/removed > or modified on line vty that would cause this problem. All logging > appears normal. > > We are running Version 12.2(17a)SX3. > > Anyone have a similar problem or know how to check or restart > the telnet > process on the router without a reload...? > > > ****************************************** > Richard J. Sears > Vice President > American Digital Network > ---------------------------------------------------- > rsears(a)adnc.com > http://www.adnc.com > ---------------------------------------------------- > 858.576.4272 - Phone > 858.427.2401 - Fax > INOC-DBA - 6130 > ---------------------------------------------------- > > I fly because it releases my mind > from the tyranny of petty things . . > > > "Work like you don't need the money, love like you've > never been hurt and dance like you do when nobody's > watching." > >

3 2

RE: Loss of Telnet Capability to 6509
by Burton, Chris 28 Jul '04

28 Jul '04

It is possible that all of the VTY session have been used up (line vty 0 4); if this is the case then a clearing (clear line vty x) of the sessions should resolve the issue. Chris C. Burton Network Engineer Walt Disney Internet Group: Network Services Smith Tower: 206.664.4131 Westin: 206.664.4833 Mobile: 425.591.4805 The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact Walt Disney Internet Group at 206-664-4000. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Richard J. Sears Sent: Wednesday, July 28, 2004 11:54 AM To: Nanog Subject: Loss of Telnet Capability to 6509 We posted this to cisco-nsp but someone suggested posting it here as well... We have a 6509 running a SUP720 in IOS only mode (no cat os). At around 4am this morning, we lost our ability to telnet to the router. Running a tcpdump shows that the router never responds to the telnet request. All functions and interfaces on the router seem fine (bgp, etherchannel, ibgp, vtp, hsrp) and I can console into the sup with no problems at all, we just cannot telnet into it. The CPU is at around 6%. I have checked all access lists on the router, none were added/removed or modified on line vty that would cause this problem. All logging appears normal. We are running Version 12.2(17a)SX3. Anyone have a similar problem or know how to check or restart the telnet process on the router without a reload...? ****************************************** Richard J. Sears Vice President American Digital Network ---------------------------------------------------- rsears(a)adnc.com http://www.adnc.com ---------------------------------------------------- 858.576.4272 - Phone 858.427.2401 - Fax INOC-DBA - 6130 ---------------------------------------------------- I fly because it releases my mind from the tyranny of petty things . . "Work like you don't need the money, love like you've never been hurt and dance like you do when nobody's watching."

1 0

Loss of Telnet Capability to 6509
by Richard J. Sears 28 Jul '04

28 Jul '04

We posted this to cisco-nsp but someone suggested posting it here as well... We have a 6509 running a SUP720 in IOS only mode (no cat os). At around 4am this morning, we lost our ability to telnet to the router. Running a tcpdump shows that the router never responds to the telnet request. All functions and interfaces on the router seem fine (bgp, etherchannel, ibgp, vtp, hsrp) and I can console into the sup with no problems at all, we just cannot telnet into it. The CPU is at around 6%. I have checked all access lists on the router, none were added/removed or modified on line vty that would cause this problem. All logging appears normal. We are running Version 12.2(17a)SX3. Anyone have a similar problem or know how to check or restart the telnet process on the router without a reload...? ****************************************** Richard J. Sears Vice President American Digital Network ---------------------------------------------------- rsears(a)adnc.com http://www.adnc.com ---------------------------------------------------- 858.576.4272 - Phone 858.427.2401 - Fax INOC-DBA - 6130 ---------------------------------------------------- I fly because it releases my mind from the tyranny of petty things . . "Work like you don't need the money, love like you've never been hurt and dance like you do when nobody's watching."

2 2

Barracuda Networks Spam Firewall
by Claydon, Tom 28 Jul '04

28 Jul '04

Doing evaluations on anti-spam, anti-virus solutions, and ran across this: http://www.barracudanetworks.com/ Looks like a good box -- even won an Editor's Choice award from Network Computing recently. Does anyone on list have any experience with these boxes? If so, how are they with false positives, quarantine capabilities, etc? Thanks, Tom Claydon Dobson Telephone

27 46

SPF deployment by Oct. 1 ?
by John Bittenbender 28 Jul '04

28 Jul '04

http://www.infoworld.com/article/04/07/22/HNmicrosoftid_1.html As a side note, I notice that the article mentions a submission to the IETF but I haven't seen any RFC's related, if there is one out there can someone please point it out for me? I didn't see anything obvious here: http://www.ietf.org/html.charters/dnsop-charter.html or here: http://darkwing.uoregon.edu/~llynch/dnsop/ Looking in the wrong place? John Bittenbender P.S. If I missed a mail about this somewhere along the path please disregard or edjamacate me off-list.

15 15