Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Steph1963
08-18-2017
Stats
Member since
05-10-2010
177
Posts
0
Helpful
0
Solutions
12-23-2015
12:01 PM
Hi,
I would like to know how we can validate the Commited Burst Size (Bc) that is applied to a Policy on Cisco IOS with an Ixia/Spirent Test set.
Cisco documentation seems to indicate that bc =CIR/32 by default.
What is the relation between the burst that is configurable on an Ethernet Test set and the bc that we can apply on the policy. Usually, these test set can burst a fix number of bytes while keeping an average equal to a CIR.
Is it something like Bc=CIR/32 + Burst Size in bytes (Configured on the Ethernet Test Set).
Thanks for your help
Stephane
... View more
Labels:
10-29-2015
05:41 PM
Hello,
I would like to know the signification of the following statistics in the the show ip cef X.X.X.X internal command
traffic share X
tmsstats: external/internal
and the meaning of
Load distribution: 0 1 0 1 0 1 0 1 0 1 1 1 1 1 1 (refcount 1) and why Packets the column for all the hash rows are always set to zero.
R0#show ip cef 15.15.15.15 internal 15.15.15.0/24, version 39, epoch 0, per-destination sharing 10 packets, 920 bytes via 10.3.3.3, Serial1/3, 0 dependencies traffic share 1 next hop 10.3.3.3, Serial1/3 valid adjacency via 10.2.2.2, Serial1/2, 0 dependencies traffic share 2 next hop 10.2.2.2, Serial1/2 valid adjacency
10 packets, 920 bytes switched through the prefix tmstats: external 0 packets, 0 bytes internal 10 packets, 920 bytes 30 second output rate 0 Kbits/sec High water mark 0, low water mark 0, current trigger set on no NHRP interface Load distribution: 0 1 0 1 0 1 0 1 0 1 1 1 1 1 1 (refcount 1)
Hash OK Interface Address Packets 1 Y Serial1/3 point2point 0 2 Y Serial1/2 point2point 0 3 Y Serial1/3 point2point 0 4 Y Serial1/2 point2point 0 5 Y Serial1/3 point2point 0 6 Y Serial1/2 point2point 0 7 Y Serial1/3 point2point 0 8 Y Serial1/2 point2point 0 9 Y Serial1/3 point2point 0 10 Y Serial1/2 point2point 0 11 Y Serial1/2 point2point 0 12 Y Serial1/2 point2point 0 13 Y Serial1/2 point2point 0 14 Y Serial1/2 point2point 0 15 Y Serial1/2 point2point 0
Thanks for your help
Stephane
... View more
Labels:
03-25-2015
02:23 PM
Hi Jon, This makes perfect sense, HSRP or GLBP would required a layer 2 link between the access switch and the distribution swithc. A layer 3 link between the access switch and the distribution switch would mean that the access route would route so HSRP or GLBP does not make sense here. Samething for same VLAN on multiple access switch with L3 link between distribution switch. Only one access switch can have one uplink on each distribution switch. Otherwise, this would create a loop so other access switch would only have one uplink to the distribution switch or would need RSTP to break the loop. Thanks for all your patience and help Stephane
... View more
03-25-2015
01:19 PM
Hello, I would like to know if is possible to configure a CSRV 1000V (IOS XE) as a VPLS hub with two Cisco 7200 or 7600 router as shown in the attachement. Not being very familiar with VPLS, I would like to know if any of the two configurations would work on the CSRV 1000V side Configuration 1 l2 vfi TEST manual vpn id 10 mpls no-split-horizon bridge-domain 10 neighbor 12.12.12.12 encapsulation mpls neighbor 8.8.8.8 encapsulation mpls interface GigabitEthernet0/0/0 load-interval 30 speed 1000 no negotiation auto no clns route-cache service instance 10 ethernet encapsulation dot1q10 rewrite ingress tag pop 1 symmetric bridge-domain 10 Configuration 2 l2vpn vfi context TEST vpn id 110 member 8.8.8.8 encapsulation mpls bridge-domain 10 member vfi TEST member GigabitEthernet0/0/0 service-instance 10 interface GigabitEthernet 0/0/1 no ip address negotiation auto service instance 10 encapsulation dot1q 10 7200 Configuration l2 vfi TEST manual vpn id 777 neighbor 8.8.8.8 encapsulation mpls int gi0/0.10 xconnect vfi TEST Thanks for your help Stephane
... View more
Labels:
03-24-2015
03:57 PM
Hi Jon, Your explanation makes a lof of sense, now I underdand why it is not possible to have L3 between the access and distribution switches. Notice that with a L3 interconnect between the distribution pair and L2 to the access layer switches even though it is better if a vlan only exists on one switch it is still possible to have that vlan on multiple switches but then you need to block. I have interpreted this as this would be possible if we add another L2 so I was just asking where we should put this extra L2 link, between the distribution switches or between the access switch. Regards Stephane
... View more
03-23-2015
01:32 PM
Hi Jon, Many thanks for your help. I think that I have finally understand what you were trying to explain me. Running a Layer 3 between the distribution and the access prevents us of runnning HSRP or GLBP simply because you cannot have the same IP subnet on two different side by sided distribution switches. Having layer 3 link means that one distribution switch act as the gateway for the PC attached to the access switch. Does this means that the L3 link between the distribution switches will only provided an extra routing link for the core routers access. In other words, this link will never carry and HSRP or GLBP packets but only OSPF or EIGRP protocol that is found between the distribution and the cores routers. If I correctly understand you, GLBP will have a direct link between the two access switch and it shares the load, both distribution switches will have a direct access to the access switch as opposed to HSRP where only one is active at a time. Finally, if we had same VLAN on these access switch, where should we put the extra L2 link. Should we put it between the access switch or the distribution switch. Would this means we would have a L3 + a L2 links. Again many thanks for your very helpful explanation Stephane
... View more
03-19-2015
02:33 PM
Hi John, Thanks for your quick reply, Sorry if I was not clear enough, I was not saying that only one instance of HSRP should run on the distribution switches but did not understand how HSRP was configured on Layer 2 Access with Layer 3 Distribution Convergence architecture. Does HSRP packets are exchanged via the access layer switch, I am more familiar with HSRP packet exchange via L2 Trunk as in Layer 2 Distribution Switch Interconnection architecture (first attachment). This drawing (second attachment) comes from the Designing Cisco Network Service Architecture (ARCH) book. Could you please confirm me that this is the same architecture as the one defined in High Availability Campus Recovery Analysis Design Guide. One refers to L2 between distribution and access, second one refers as L3. Configuration from the guide seems to indicate that the access switch used L2 configuration for the link to the distribution. Is there any best practices for route exchanges between distribution and core network. Does the core routers only send default route to the distribution switches and distribution switches only send a summary route for the access layer subnet. Finally, is there any rules for choosing a Layer 2 Distribution Switch Interconnection Layer 2 Access with Layer 3 Distribution Convergence architecture? Does one solution provides a better reliability than the other one? Regards Stephane
... View more
03-18-2015
11:49 AM
Hi Cisco Expert, I have seen on many Cisco Campus design document the Layer 3 Access to the Distribution Model as shown in figure 6 in the following link http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/HA_recovery_DG/campusRecovery.html This model indicated that a layer 3 link is used between the 2 distribution switches as opposed as a layer 2 trunk for the Distributed Vlans on Access switch. I am familiar in creating HSRP under vlan interface but I would like to know how we can configure HSRP or VRRP under this layer 3 link. Any configuration example would be greatly appreciated. Secondly, I would like to know if it is a good practice for the core routers to only send the default route to the distribution switches and for the distribution switches to send a summary route of the access subnet. Finally, any explanation on when to used a Distributed VLANs on Access Switches vs Layer 3 Access to the distribution would really be helpful. Thanks for your help Stephane
... View more
Labels:
01-04-2014
12:48 PM
Hi, I cannot connect make any PPP connection to a Cisco 2600 Aux port with Windows 7 or Vista. Is there anybody who would know how to establish a PPP connection to an aux port using Linux PPPD. Here is my 2600 configuration: username cisco password cisco interface Async65 ip address 10.10.10.10 255.255.255.0 encapsulation ppp async mode interactive peer default ip address 10.10.10.11 no cdp enable ppp authentication chap line aux 0 password cisco login modem InOut transport input all escape-character NONE autoselect during-login autoselect ppp stopbits 1 speed 19200 flowcontrol none Thanks for your help Stephane
... View more
Labels:
Created by
Steph1963
in VPN and AnyConnect
in VPN and AnyConnect
01-03-2014
08:07 PM
01-03-2014
08:07 PM
Hi, I would like to know if it is possible to have a PPP connection between a Cisco 2600 AUX port and Windows 7 dial up connection. I am using a roll-over cable between the serial port of the PC and the aux port. The cable seems O.K since I can do telnet via the AUX port. I would like to know if there is something wrong with my 2600 or Windows 7 configuration Here is my 2600 configuration: interface Async65 ip address 10.10.10.10 255.255.255.0 encapsulation ppp async mode interactive peer default ip address 10.10.10.11 no cdp enable ppp authentication chap line aux 0 password cisco login modem InOut transport input all escape-character NONE autoselect during-login autoselect ppp stopbits 1 speed 19200 flowcontrol none Windows 7 configuration I have created a modem connection using a communication cable between two computer and the serial port 1 with the Phone and Modem connection I have set up a new connection or network link with the network and Sharing Center. The connection is set up as a dial up connection with a modem define as Communications Cable between two computers modem and used a dummy number as phone number. Properties are configured as 19200 bit/sec with no hardware flow control and I have enabled PAP as protocols. Windows 7 cannot connect to the aux port and keep giving me an 777 error meaning that the remote modem is not ready. I am running out of ideas, help with be really appreciated. Thanks Stephane
... View more
Labels:
11-21-2013
06:00 AM
Hi Seb, Thanks for the correction. Based on some Cisco example that I have found, I thought it was possilbe bo used tunnel endpoints in different IPv6 subnet as long as a route to the IPv4 was available as shown in the attached link. http://ardenpackeer.com/tutorials/routeswitch/tutorial-ipv6-tunnels-part-2-automatic-6to4-tunnels/ My understanding is that is possible with Cisco but probably not with Linux or Windows automatic 6to4 tunnel implementation. Thanks again for your help Stephane
... View more
11-14-2013
08:52 AM
Hi James, Very interesing, this is very helpful in trying to understand DHCPv6 server. If I have understand you correcly, configuring DHCPv6 server with no RA and no static route on the client is useless for IPv6 connectivity. In this situation, the only way to get IPv6 connectivity would be to have a static link local or global addresses and static route that has nothing to do with the DVHPv6 server. Thanks for your help Stephane
... View more
11-06-2013
01:19 PM
Hi, I would like to know if it possible to create a 6to4 tunnels between Linux and a Cisco router. The following configuration does not seems to work Linux A IPv4 address 10.10.10.100 ip tunnel add tun6to4 mode sit ttl 254 remote 10.10.10.10 ip link set dev tun6to4 up ip addr add 2002:0a0a:0a64::1 dev tun6to4 ip -6 route add 2001::/3 via ::10.10.10.10 dev tun6to4 metric 1
Cisco 6to4 tunnel configuration interface Tunnel0 no ip address no ip redirects ipv6 address 2001:A0A:A0A:FFFF::1/64 tunnel source FastEthernet0/0 tunnel mode ipv6ip 6to4 ! interface FastEthernet0/0 ip address 10.10.10.10 255.255.255.0 ipv6 address 2001:A0A:A0A::1/64 ! ipv6 route 2002::/16 Tunnel0 Thanks Stephane
... View more
Labels:
11-06-2013
12:49 PM
Hi I would like to know why I receive the No valid Source address for destination when I am configuring a stateful DHCPv6 server and client as follow: Server Configuration ipv6 dhcp pool IPV6_DHCPPOOL address prefix 2001:DB8:1000::/64 lifetime infinite infinite link-address 2001:DB8:1000::1/64 dns-server 2001:DB8:1000::1 domain-name cisco.com ! interface Ethernet0/0 ipv6 address 2001:DB8:1000::1/64 ipv6 enable ipv6 nd ra suppress ipv6 dhcp server IPV6_DHCPPOOL Client Configuration interface FastEthernet0/0 ipv6 address dhcp ipv6 enable R2#ping 2001:DB8:1000::1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 2001:DB8:1000::1, timeout is 2 seconds: % No valid source address for destination The only way I was able to have a successful ping is by adding the following static route on the client side: R2(config)#ipv6 route 2001:DB8:1000::/64 fa0/0 I just do not understand why this stateful configuration does not send the subnet mask Thanks Stephane
... View more
Labels:
04-30-2013
07:00 PM
Hi, I am trying to copy a file from an https server. The https server has the following configuration: ip domain name test aaa authentication login HTTPS local aaa authorization exec HTTPS local username USER privilege 15 password 0 CISCO ip http authentication aaa login-authentication HTTPS ip http authentication aaa exec-authorization HTTPS ip http secure-server ip http path disk0: Note: I have also generate a 1024 bit rsa key with "cryppto key generate rsa" I can copy a file from my R2 server using http: R1#copy http://USER:CISCO@10.0.0.2/disk0:running-config disk0:nulltest Destination filename [nulltest]? %Warning:There is a file already existing with this name Do you want to over write? [confirm] Loading http://**********@10.0.0.2/disk0:running-config ! The problem is that I keep having the same error message when I am trying to copy a file from the server on my R1 router: R1#copy https://USER:CISCO@10.0.0.2/disk0:running-config disk0:nulltest Destination filename [nulltest]? %Warning:There is a file already existing with this name Do you want to over write? [confirm] %Error opening https://USER:CISCO@10.0.0.2/disk0:running-config (I/O error) R1# *Apr 30 21:56:34.063: %HTTPS: http ssl get context fail (-41104) *Apr 30 21:56:34.063: HTTP: ssl get context failed (-40407) Note: I could not find any information on the meaning of these two errors. Any help would be greatly appreciated Thanks Stephane
... View more
Labels:
10-29-2015
Hello, I would like to know the signification of the following
statistics in the the show ip cef X.X...
03-25-2015
Hi Jon,This makes perfect sense, HSRP or GLBP would required a layer 2
link between the access switc...
03-24-2015
Hi Jon, Your explanation makes a lof of sense, now I underdand why it is
not possible to have L3 bet...
03-23-2015
Hi Jon, Many thanks for your help. I think that I have finally
understand what you were trying to ex...
03-19-2015
Hi John, Thanks for your quick reply,Sorry if I was not clear enough, I
was not saying that only one...
01-03-2014
Hi,I would like to know if it is possible to have a PPP connection
between a Cisco 2600 AUX port and...
11-21-2013
Hi Seb, Thanks for the correction.Based on some Cisco example that I
have found, I thought it was po...
11-06-2013
Hi,I would like to know if it possible to create a 6to4 tunnels between
Linux and a Cisco router. Th...
Public Statistics
| Date Registered | 05-10-2010 07:21 AM |
| Date Last Visited | 08-18-2017 04:00 AM |
| Total Messages Posted | 177 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 4 | |
| 16 | |
| 10 | |
| 3 | |
| 4 |
.jpg "VIP Expert"){kind=icon}
