Hi All,
Our NOC have two kinds of monitoring tool, one is Cacti -SNMP-based, other ones are netflow tools for neflow V9. We compared the data statistic status and showing up time in both kinds of tools, and we observed the netflow ( more than o...
Hi All,
we are a small service provider, and trying to provide backhole service for our customers for DDOS attack. We are using cisco ASR9K platform, and are going to leverage eBGP session with the customer for attack mitigation.
Current, we are ...
Hi All in the group,
Could we please know which netflow monitoring tool/system that have a capacity to distinguish IP flow based on BGP ASN? As we are transit SP, we would like to know each of downstream customer flow statistic with each of publi...
Hi All,
We have two ebgp session from customer CE to our same PE device, and we received same prefix ( with different community attribute), for example below. Since we would like to advertise these 2 same prefixes to internal Router Reflector at sa...
hi all,
Could someone please share cisco XR version as-path set configuration exmaple for define private as range 64512-65534 and 32bit Private ASN 4200000000-4294967294 ? how to make ios-regex for them ?
thanks in advance !
Eric
Hey Xander,
Just quick question about SPAN setup on ASR9006, version 4.3.1. does it support mutli 10Gi to mirror mutli 10Gi for typhoon line card? how's CPU or memory consumption for the device if we need to run this span on 24/7 all the time ?
...
thanks Aaron and Xander for your input !
could you please or somebody else share more comment on what's risk level we will take if we use this method in our environment that we have 100+ the customer at downstream, public AS 80+ and 300+ public IPv4 ...
hi Xander,
Absolutely, you are right. we are going to that path.
Small question about PBR policy map setup as I couldn't find a command " set destination-ip xxx "on my device, is it XR OS version problem or need to install specific PIE for it ?...
thanks Xander for your all help in patient.
This is a use case for sure. I know if we could use segregated routing table that would be an ideal resolution for these scenario, but we are limited with budget for huge cost of L3vpn licensing on ASR9K ...