Hello, imagine there are hundreds of NCS and ASR9K devices. I need to detect if FPDs require upgrade.  Is there any MIB or other automated method that I could use to detect that FPD in the router "NEEDUPGD"? RP/ 0/ RP 0/ CPU 0: ios#s how hw-module fpd all                    Thu Feb   2 19:53:39.770 UTC                                                                FPD Versions                                                                ================= Location    Card type         HWver FPD device        ATR Status    Running Programd ------------------------------------------------------------------------------ 0/0        NC 55-36 X 100 G       1.1    MIFPGA                CURRENT     0.09     0.09   0/0        NC 55-36 X 100 G       1.1    Bootloader            CURRENT     1.17     1.17   0/0        NC 55-36 X 100 G       1.1    IOFPGA                 CURRENT     0.14     0.12   0/1        NC 55-36 X 100 G       1.1    MIFPGA                CURRENT     0.09     0.09   0/1        NC 55-36 X 100 G       1.1    Bootloader            CURRENT     1.17     1.17   0/1        NC 55-36 X 100 G       1.1    IOFPGA                 CURRENT     0.14     0.12   0/ RP 0      NC 55- RP                1.1    Bootloader            CURRENT     9.23     9.23   0/ RP 0      NC 55- RP                1.1    IOFPGA                 CURRENT     0.09     0.09   0/ RP 1      NC 55- RP                1.1    Bootloader            CURRENT     9.23     9.23   0/ RP 1      NC 55- RP                1.1    IOFPGA                 CURRENT     0.09     0.09   0/ FC 0      NC 55-5508- FC     1.0    Bootloader            NEEDUPGD   1.67     1.70     <=======    ... View more

If customer wants a design in which spanning-tree protocol could be avoided as much as possible, is it practical, feasible and possible to have pairs of N7K and N5K (servers connected to 2K) using vPC but simply not running STP at all? I know how vPC works but I have seen designs in which STP is still enable (and all upstream links from N5K to N7K appears as a one link from a STP perspective). Customer has past poor experiences with STP and therefore guidelines is to eliminate STP if at all possible. Is that a common and feasible design running vPC and no STP at all? ... View more

Imagine I have a N3K switch in a lab. The mgmt0 vrf as configured as below. The only way I have to get to the internet, is thru a proxy. for example I was given this information for the proxy server which other devices get connected to the Internet: Please let me know which would be configuration to route thru the proxy and get the N3K connected to the Internet. My intention is to install Chef packages for testing. proxy.company.com port 80 (routable IP given  - this is just an example): 161.70.168.13 N3K# show run int mgmt 0 !Command: show running-config interface mgmt0 !Time: Thu Feb  4 17:01:02 2016 version 7.0(3)I2(2a) interface mgmt0   vrf member management   ip address 10.2.21.24/27   N3K# ... View more

Hi, not sure but this could be a specific ASR9K required configuration to allow me to get prefixes from two neighbors downstream? I am attaching detailed information. Can you please let me know what  I am missing here? RP/0/0/CPU0:ios#sh ip bgp summ Thu Jan 21 19:38:04.336 UTC BGP router identifier 192.168.200.7, local AS number 7 BGP generic scan interval 60 secs Non-stop routing is enabled BGP table state: Active Table ID: 0xe0000000   RD version: 5 BGP main routing table version 5 BGP NSR Initial initsync version 3 (Reached) BGP NSR/ISSU Sync-Group versions 0/0 BGP scan interval 60 secs BGP is operating in STANDALONE mode. Process       RcvTblVer   bRIB/RIB   LabelVer  ImportVer  SendTblVer  StandbyVer Speaker               5          5          5          5           5           0 Some configured eBGP neighbors (under default or non-default vrfs) do not have both inbound and outbound policies configured for IPv4 Unicast address family. These neighbors will default to sending and/or receiving no routes and are marked with '!' in the output below. Use the 'show bgp neighbor <nbr_address>' command for details. Neighbor        Spk    AS MsgRcvd MsgSent   TblVer  InQ OutQ  Up/Down  St/PfxRcd 10.0.200.1        0     1      75      69        5    0    0 01:06:12          0! 10.0.200.6        0     1      74      77        5    0    0 01:05:29          0! RP/0/0/CPU0:ios# ... View more

Hello folks, I have installed the PIEs for an upgrade via ISSU in the ASR9K. Question: I examine the content below from 'show install log' but I don't see the "ID" info. Please let me know where I can get the ID info? #install activate id <> issu parallel-reload prompt-level none     RP/0/RSP0/CPU0:ASR9K-1#show install log Fri Sep 18 22:08:32.300 UTC Install operation 4 started by user 'admin' via CLI at 21:58:57 UTC Fri Sep 18 2015.     (admin) install add /disk0:asr9k-mini-px.pie-5.1.3     /disk0:asr9k-fpd-px.pie-5.1.3 /disk0:asr9k-mgbl-px.pie-5.1.3     /disk0:asr9k-k9sec-px.pie-5.1.3     Install operation 4 completed successfully at 22:00:01 UTC Fri Sep 18 2015. -------------------------------------------------------------------------------- 4 entries shown RP/0/RSP0/CPU0:ASR9K-1# ... View more

Hello folks, I have been reading the filesystem docs on XR-OS but I couldn't find this task:   From a given FTP server inside my company network, I need to download a number of files (PIE and SMU bundle) to start an upgrade (ISSU) in the ASR9K test box. Can you please clarify the syntax and how I can mput file from the FTP server? Doing 'ftp' the command prompt in my ASR9K is not being recognized and sorry I am in a hurry and I can't locate the command in the documentation.   Thank you, Marlon ... View more

I have two nodes (XR and NX7K) running in my testing network. I can ping each other (10.187.227.1 and 10.187.227.2) XR and NX7K nodes respectively.   However the BGP session is not being established successfully. Can someone point me to where the problem is?   XR RP/0/0/CPU0:ios#show ip bgp summ (...) Process       RcvTblVer   bRIB/RIB   LabelVer  ImportVer  SendTblVer  StandbyVer Speaker               2          1          2          0           1           2 Some configured eBGP neighbors (under default or non-default vrfs) do not have both inbound and outbound policies configured for IPv4 Unicast address family. These neighbors will default to sending and/or receiving no routes and are marked with '!' in the output below. Use the 'show bgp neighbor <nbr_address>' command for details. Neighbor        Spk    AS MsgRcvd MsgSent   TblVer  InQ OutQ  Up/Down  St/PfxRcd 10.187.227.2      0 65505       0      40        0    0    0 00:00:00 Idle!  <===========  It remains in 'idle'   RP/0/0/CPU0:ios#show run | b bgp Sat May  2 11:06:36.066 UTC Building configuration... router bgp 65405  address-family ipv4 unicast   network 10.187.227.0/24   network 192.168.200.1/32  !  neighbor 10.187.227.2   remote-as 65505   address-family ipv4 unicast   !  ! ! end =================================================== NX7K SWITCH !Command: show running-config bgp !Time: Sat May  2 11:03:49 2015 version 7.1(0)D1(1) feature bgp router bgp 65505   router-id 192.168.200.2   address-family ipv4 unicast     network 10.187.227.0/24     network 192.168.200.2/32   neighbor 10.187.227.1 remote-as 65405   ... View more

Hello, I am a newbie in ASA. My intention is to configure N3K-3 (int vlan1010)------ASA transparent------(int vlan 2020) N3K-4 communicate. I configured rip under the 'int vlan 1010' and 'int vlan 2020' on both N3K-3 and N3K-4 switches. I was expecting the ASA to let the RIP traffic through... not sure what I am missing. Please let me know. ASA: ! ciscoasa# sh run int g1/0 ! interface GigabitEthernet1/0  nameif IN_VLAN2020  security-level 100 ciscoasa# sh run int g1/1 ! interface GigabitEthernet1/1  nameif VLAN1010  bridge-group 1  security-level 100 ciscoasa# sh run | i same-sec same-security-traffic permit inter-interface ciscoasa# ciscoasa#   N3K-4# sh int vlan 1010 Vlan1010 is up, line protocol is up, autostate enabled   Hardware is EtherSVI, address is  7c69.f613.ff41   Internet Address is 10.10.0.1/24   MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec   Last clearing of "show interface" counters never   N3K-4# sh int vlan 1010 Vlan1010 is up, line protocol is up, autostate enabled   Hardware is EtherSVI, address is  7c69.f613.ff41   Internet Address is 10.10.0.1/24   MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec   Last clearing of "show interface" counters never N3K-4# ^C N3K-4# show ip rip Process Name "rip-X" VRF "default" RIP port 520, multicast-group 224.0.0.9 Admin-distance: 120 Updates every 30 sec, expire in 180 sec Collect garbage in 120 sec Default-metric: 1 Max-paths: 8 Process is up and running   Interfaces supported by ipv4 RIP : N3K-4# ================= **** N3K-3 SWITCH **** ===================   N3K-3# sh run int e1/1 !Command: show running-config interface Ethernet1/1 !Time: Thu Feb 19 00:47:54 2015 version 6.0(2)U3(6) interface Ethernet1/1   switchport access vlan 2020   N3K-3# show ip rip Process Name "rip-X" VRF "default" RIP port 520, multicast-group 224.0.0.9 Admin-distance: 120 Updates every 30 sec, expire in 180 sec Collect garbage in 120 sec Default-metric: 1 Max-paths: 8 Process is up and running   Interfaces supported by ipv4 RIP : #N3K-3 ... View more

Hi, imagine both interfaces below are up. I am configuring an ASA for the first time. What am I missing to ping from my own MYASA to the interfaces below?   ! interface GigabitEthernet0/0  nameif internal  security-level 100  ip address 1.1.1.1 255.255.255.0 MYASA# sh run int g0/2 ! interface GigabitEthernet0/2  nameif dmztest  security-level 0  ip address 2.2.2.2 255.255.255.0 MYASA# ping 1.1.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 1.1.1.1, timeout is 2 seconds: No route to host 1.1.1.1 Success rate is 0 percent (0/1) MYASA# ping 2.2.2.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2.2.2.2, timeout is 2 seconds: No route to host 2.2.2.2 Success rate is 0 percent (0/1) MYASA#   ... View more