hi, I have a 12000-SIP-601 with a SPA-1XTENGE-XFP card in it. Is this considered 'lan phy',  'wan phy', or neither? Does the SPA or XFP determine whether it is lan phy or wan phy? The XFP I am using is XFP-10GLR-OC192SR. thanks, ANdy ... View more

hi,   about once a day I see my bgp session flap with a 'cease' notification.  My interface never goes down, just the bgp session over the interface.  I've had the telco check and they say that the line is running clean.  I don't see any errors on my interface.    Is there anything that I can have the folks on the far side router debug to figure out why their side is sending me the 'cease' code?  Is there anything I can do to find out why I'm seeing the 'cease' code? This is what I see on my side when the problem occurs: Oct 26 21:17:06: %BGP-3-NOTIFICATION: received from neighbor 1.1.1.1 6/6 (cease) 0 bytes Oct 26 21:17:06: %BGP-5-ADJCHANGE: neighbor 1.1.1.1 Down BGP protocol initialization Oct 26 21:17:11: %BGP_SESSION-5-ADJCHANGE: neighbor 1.1.1.1 IPv4 Unicast topology base removed from session  Peer closed the session Oct 26 21:17:11: %BGP_SESSION-5-ADJCHANGE: neighbor 1.1.1.1 IPv4 Multicast topology base removed from session  Capability changed Oct 26 21:17:51: %BGP-5-ADJCHANGE: neighbor 1.1.1.1 Up The first line means the far side router at 1.1.1.1 told my router 1.1.1.2 to shutdown my bgp session because of some 'other configuration change'.  My physical interface is a ten gig link on a 7604.  I'm running 12.2(33)SRD3 on a SUP720.  thanks, Andy ... View more

hi,    I'm trying to test ipv6 on an ASA.  I want to pass all ipv6 traffic from the inside to the outside using the simplest possible routed configuration.  I think I must be missing something, because the config I think should work doesn't seem to pass traffic.  This configuration passes my ipv4 traffic from inside to outside successfully but not ipv6.    I think I must've missed something really obvious that I need to do on the ipv6 side, maybe someone can help me out?  Do I have the ipv6 static route configured incorrectly? thanks, Andy I have replaced all global / public addresses with documentation / private addresses in my config.  The ASA in question really has public ip addresses and unique global addresses. ASA Version 8.2(1) ! hostname asa-ipv6-at-120wjefferson domain-name redacted enable password redacted passwd redacted names ! interface Ethernet0/0 nameif outside security-level 0 ip address 192.168.33.2 255.255.255.252 ipv6 address 2001:DB8::7:3012/124 ipv6 enable ! interface Ethernet0/1 nameif inside security-level 100 ip address 192.168.33.17 255.255.255.240 ipv6 address 2001:DB8:7300::/64 eui-64 ipv6 enable ! interface Ethernet0/2 shutdown     no nameif no security-level no ip address ! interface Ethernet0/3 shutdown no nameif no security-level no ip address ! interface Management0/0 shutdown no nameif no security-level no ip address ! ftp mode passive dns server-group DefaultDNS domain-name illinois.gov pager lines 24 mtu inside 1500 mtu outside 1500 ipv6 route outside ::/0 2001:DB8::7:3011 no failover   icmp unreachable rate-limit 1 burst-size 1 no asdm history enable arp timeout 14400 route outside 0.0.0.0 0.0.0.0 192.168.33.1 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute timeout tcp-proxy-reassembly 0:01:00 dynamic-access-policy-record DfltAccessPolicy no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec security-association lifetime seconds 28800 crypto ipsec security-association lifetime kilobytes 4608000 telnet 192.168.33.16 255.255.255.240 inside telnet timeout 5 ssh timeout 5 console timeout 0 dhcpd address 192.168.33.19-192.168.33.30 inside dhcpd dns 206.166.61.20 206.166.49.21 interface inside dhcpd enable inside ! threat-detection basic-threat threat-detection statistics access-list no threat-detection statistics tcp-intercept ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters   message-length maximum 512 policy-map global_policy class inspection_default   inspect dns preset_dns_map   inspect ftp   inspect h323 h225   inspect h323 ras   inspect netbios   inspect rsh   inspect rtsp   inspect skinny    inspect esmtp   inspect sqlnet   inspect sunrpc   inspect tftp   inspect sip    inspect xdmcp ! service-policy global_policy global prompt hostname context Cryptochecksum:cfd3b922f0a88745bbf8d56520e437a6 : end ... View more

hi, does anyone know which 6500 modules require a separate software license? I have some IDSM-2 modules which use software that requires a seperate software license. Are there any other 6500 modules like this? (FWSMs? CMM?) I'm trying to make sure nothing falls through the cracks when we do our smartnet renewal. thanks, Andy ... View more

hi, I'm looking for a tool that I can input a chassis serial number and have cisco tell me whether that serial number is valid or invalid? We have lots of 2600s which return invalid serial numbers via snmp or command line. It would be nice to have an authoritative way to determine whether the serial number is valid. thanks, Andy ... View more