About hostasaurus

hostasaurus · 05-15-2024

Hi all, my edge routers are running IOS-XR 7.7.21. We have quite a bit of intentionally exposed customer public address space and have endless problems with garbage traffic from a select few ASN's who don't police their networks (14061 Digital Ocean...

hostasaurus · 02-02-2024

Anyone seen this error before? RP/0/RP0/CPU0:Feb 2 22:49:49.944 UTC: locald_DLRSC[302]: %SECURITY-PKI-6-ERR_3_PARAM : Crypto engine decrypt failed : 'Crypto Engine' detected the 'warning' condition 'RSA public key decryption failed' 1116083200 Th...

hostasaurus · 11-16-2023

Hi all, IOS-XR 7.5.2 on NCS5501. Was curious if anyone knows a command to allow a new administrative distance to apply without a hard BGP session reset? I'm trying to prioritize OSPF on internet-facing edge routers that have numerous eBGP peering s...

hostasaurus · 05-01-2023

Hi all, I'm moving from a 3504 WAC to an EWC on a 9130AX and still trying to fully understand the conversion from WAC config to the various tags and profiles in EWC. Is there a layman's guide somewhere which walks one through the major WAC setting e...

hostasaurus · 08-31-2022

I'm trying to take an NCS5501-SE from 663 to 7.x. First ran into the issue that ncs5500-eigrp is no longer present, at least not in the early 7.x releases which I'm required to go to as an intermediate. Fortunately I don't use EIGRP. I deactivate ...

hostasaurus · 05-20-2024

Thanks all. Will try this out in a few days. I've got a new environment coming online with XR edge routers and will have the perfect opportunity to test.

hostasaurus · 05-15-2024

Sure, I want to use BGP ASN 14061 as the source in an access list that blocks destination tcp port 21 and 22. So, I drop port 21 and 22 in port group, and then this would take the format: 510 deny tcp ??? any port-group PortGroupNameNow, typically o...

hostasaurus · 11-16-2023

Huh? That is the entire purpose of this thread. I outlined that soft reconfig is not applying admin distance changes, and is there a workaround. David reproduced and determined that a weight change on a per-peer basis causes a RIB replacement, all...

hostasaurus · 11-16-2023

Thanks David, I tried that with one peer and it worked for me as well. It will take some labor time to tinker with each peer and soft reset, but now I can avoid the interruption since this device is at an IXP with ~20 sessions, where backup would be...

hostasaurus · 11-16-2023

Yep looks good there: Neighbor capabilities:Route refresh: advertised (old + new) and received (old + new)Graceful Restart (GR Awareness): received4-byte AS: advertised and receivedAddress family IPv4 Unicast: advertised and received

Member Since	‎09-25-2014 06:26 PM
Date Last Visited	‎05-16-2024 05:50 PM
Posts	74
Total Helpful Votes Received	27

User Statistics

User Activity

Any way to use BGP ASN as 'source' in an ACL?

IOS XR ssh decryption failure

Any way to apply new BGP admin distance with only soft reconfig (XR)?

Terminology map from WAC to EWC? AP groups in particular

How to remove an inactive but committed package?

Re: Any way to use BGP ASN as 'source' in an ACL?

Re: Any way to use BGP ASN as 'source' in an ACL?

Re: Any way to apply new BGP admin distance with only soft reconfig (X

Re: Any way to apply new BGP admin distance with only soft reconfig (X

Re: Any way to apply new BGP admin distance with only soft reconfig (X