Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dbeattie
Stats
Member since
04-14-2004
136
Posts
140
Helpful
16
Solutions
Created by
dbeattie
in Other Network Architecture Subjects
in Other Network Architecture Subjects
11-12-2019
03:19 AM
11-12-2019
03:19 AM
I have used 4321s with the NIM-16A or NIM-24A, but based on the price of these, it is becoming increasingly difficult to justify them over purchasing a dedicated console server from another supplier. Hope this helps, Dave
... View more
11-08-2019
07:39 AM
If you get to the point of considering the 4551, it might be worth looking at the ASR920 instead, depending upon your requirements. hope this helps, Dave
... View more
11-08-2019
07:29 AM
Please be careful. If all of your sites use the same AS number, when one boundary router receives an advertisement that contains its own AS in the AS-path, it will reject the route. I would suggest at the very least, you should change your hub AS (or both of your spokes). Hope this helps, Dave
... View more
11-08-2019
06:44 AM
If R1 & R3 are not uniquely originating any prefixes into the AS, they do not need to peer. This set of prefixes would even include the routers' own loopback interfaces and any subnets that are local to those two routers only. However, on the assumption that you have an IGP establishing reachability within your AS, the question has to be why are these two routers running BGP at all? If they add no benefit to the AS, why include them? Hope this helps Dave
... View more
08-09-2019
04:26 AM
Obviously, be aware that this might not be your problem routing out to 192.168.180.0/24, but the remote system may not be able to route back to 192.168.100.0/24 Hope this helps. Dave
... View more
08-07-2019
12:35 AM
Checking the command reference for the 2960S I see: police rate-bps burst-byte [ exceed-action { drop | policed-dscp-transmit }] Where: rate-bps Specify the average traffic rate in bits per second (b/s). The range is 1000000 to 1000000000. burst-byte Specify the normal burst size in bytes. The range is 8000 to 1000000. Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_53_se/command/reference/2960ComRef/cli1.html#55494 So your command would be: police 150000000 1000000 exceed-action drop This will give you a sampling interval of around 50ms (8 x 1M/150M), which should be OK. To get a longer sampling interval you would have to use a router. Hope this helps, Dave
... View more
08-06-2019
07:20 AM
Caveat - I have not done this on a 2960S. In a lot of cases policing is listed in units of bytes per second, not bits - hence you need to divide your numbers by 8. This is as opposed to shaping that is usually in bits. I tend to remember it as "Police dog Bites". Hope this helps, Dave
... View more
12-27-2018
04:36 AM
Hi Luis,
If I understand your question correctly, you have two segments that make up one sub-net. The segments exist either side of a DCI link. If these are access segments (i.e. not used for transit) and the DCI link is just used to allow servers in each segment to run sync/heartbeat (not unusual), you should be able to set all of the SVIs in the subnet to being OSPF Passive. This will prevent the switches from trying to peer with each other and will stop the logs happening. Obviously, this will not help if you actually need the switches to peer on this sub-net.
Hope this helps,
Dave
... View more
12-17-2018
05:57 AM
Hi,
I would tend to look for a smaller platform if you can support it. Depending upon how many distribution switch pairs you have, the Catalyst 9500 series might be more appropriate than the 3850 and could give you a future upgrade path to 40/100G. You might even consider the Nexus 9300 series. (I am a big fan of the N9336C-FX2)
I would tend to move away from chassis switches for core because of the issues surrounding single card failures. Chassis switches also tend to have higher latency for card-to-card forwarding. Finally, (personal opinion) I would not use VSS for core switches. I don't see that it gains you anything on a pure L3 devices.
Hope this helps.
Dave
... View more
12-12-2018
08:39 AM
Looking at your routing, you are trying to use both paths around the edge of your central routing environment on all routers. This means that for packets arriving at router 2 bound for 192.168.65.1, half will be sent to router 1 and half to router 3. Of the packets sent to router 1, half will be sent correctly to router 4 and the other half will be returned to router 2!
A quick fix would be to remove the statics that go the wrong way around the loop e.g.
Center1: 192.168.65.0/24 via 192.168.10.2
... but ultimately I recommend that you set up a simple dynamic routing protocol on all of the routers and get rid of all of the statics.
There are lots of online guides for this. I suggest that you look at EIGRP or OSPF in the first instance.
Hope this helps
Dave
... View more
12-12-2018
03:53 AM
Create a new aaa authen profile for local authentication only. Set the vty 1 line to use the aaa profile for local only. This means that the first connection (vty 0) will use the normal authentication (keep this session open) and the second connection (vty 1) will use the local only. Once complete reset the vty 1 line to use your normal authentication method
The key is to always leave yourself with a method of returning authentication to your usual method if the local password is corrupt.
Hope this helps
Dave
... View more
12-12-2018
01:14 AM
Hi Manish,
That is correct, but you will also have to change the SFPs to single-mode ones (1000BaseLX). The part code is GLC-LH-SM.
Hope this helps,
Dave
... View more
12-12-2018
01:00 AM
Yes, drops seem to be a problem. You need to align your hardware selection and either use single or multi-mode:
Multi-mode cable end-to-end and SX optics, or
Single-mode cable end-to-end and LX/LH optics
The selection is usually based on the availability of installed cable and the distance that you need to go.
Hope this helps,
Dave
... View more
12-12-2018
12:52 AM
Hi Greg,
Static routing is generally fine when there is only one valid path. So router1 and router8 can be configured with just an upstream default route to Centre4 and Centre2 respectively. Their downstream routes are connected interfaces, so should not need a route to be entered. The following static routes will be needed:
Centre2 will need a static to 192.168.55.0/24 through router8
Centre4 will need a route to 192.168.65.0/24 through router1
The four Centre routers should run a dynamic routing protocol because there are multiple valid paths. They should all peer together and connected interfaces and static routes should be redistributed in as needed. Using static routes in between the four Centre routers would leave you open to a number of nasty failure modes.
I have to say that my choice here would be to get all routers in the infrastructure into a single OSPF area include all subnets in it. To my mind this is simpler that having to think about statics.
Hope this helps
Dave
... View more
12-11-2018
04:35 AM
On the basis that a new 24-port 1GE SFP card for a 4506 is about the same list price as a 48-port 1/10/25G SFP+ switch in the 9500 series, I would opt for the latter. Even the ageing 32-port 4500X would seem a better bet than the 4506 line card. Both of these options have massively increased backplane capability compared to the chassis and give future capability to move to 10GE. In addition, they save you 9RU in your rack.
Going to 12x10GE cards would be even more expensive.
Hope this helps,
Dave
Dave
... View more
Created by
dbeattie
in Other Network Architecture Subjects
11-12-2019
11-12-2019
I have used 4321s with the NIM-16A or NIM-24A, but based on the price of
these, it is becoming incre...
11-08-2019
Please be careful. If all of your sites use the same AS number, when one
boundary router receives an...
11-08-2019
If R1 & R3 are not uniquely originating any prefixes into the AS, they
do not need to peer. This set...
08-09-2019
Obviously, be aware that this might not be your problem routing out to
192.168.180.0/24, but the rem...
12-27-2018
Hi Luis, If I understand your question correctly, you have two segments
that make up one sub-net. Th...
12-17-2018
Hi, I would tend to look for a smaller platform if you can support it.
Depending upon how many distr...
12-12-2018
Looking at your routing, you are trying to use both paths around the
edge of your central routing en...
12-12-2018
Create a new aaa authen profile for local authentication only. Set the
vty 1 line to use the aaa pro...
12-12-2018
Hi Manish, That is correct, but you will also have to change the SFPs to
single-mode ones (1000BaseL...
12-12-2018
Yes, drops seem to be a problem. You need to align your hardware
selection and either use single or ...
12-12-2018
Hi Greg, Static routing is generally fine when there is only one valid
path. So router1 and router8 ...
Public Statistics
| Date Registered | 04-14-2004 03:36 AM |
| Date Last Visited | 11-13-2019 12:39 AM |
| Total Messages Posted | 136 |
| Total Helpful Votes Received | 140 |
.jpg "VIP Expert"){kind=icon}
.jpg "Hall of Fame Cisco Employee"){kind=icon}
Helpful Votes From
