Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all,I've done extensive testing and I would like some confirmation regarding my conclusions:1. rewrite ingress tag pop 1 symmetric has no effect on Layer 2 control frames (STP, CDP, etc).2. access and trunk connections on each end of a pseudowire ...
Hi all,Does something need to be configured on a POS interface hosted on a CPP (/SIP700) to enable drop statistics or is this out indicative of a hardware limitation?Thanks,Terrysh controller pse qfp int pos0/1/0/1 statistics drop location 0/1/CPU0 W...
Hi all,With an NP-based linecard, lots of stats are available that can help identify the cause of droppped input frames by using the show controllers np counters command. Is there an equivalent for SIP / SPA based cards?Thanks,Terrycommands
Is there any way to cache Windows login credentials and use them to authenticate an Anyconnect VPN to an ASA with LDAP-based AAA authentication configured?Thanks,TerryPS - already asked but not answered back in June 2012:https://supportforums.cisco.c...
I guess what I'm trying to avoid is having to statically define 4096 policer configs2^(subnet - route) = 2^(29-17) = 2^12 =4096UBRL is the obvious solution if the granularity required is /32.I can use BGP and inject /29s if that would make it simpler...
Hi Xander,Thanks for your reply! What if the prefixes weren't BGP prefixes? That is to say, the ASR is configured to statically route 10.1.0.0/17 and the policy that needs to be imposed is every /29 requires 1G of traffic. If the /29 in aggregate use...
Hi Xander,Great write up. Any chance that BGP FlowSpec can be used to implement something like Juniper's prefix-action - which is basically UBRL but at a subnet granularity rather than a flow granularity? Our requirement is to police subnets within a...
Thanks xander, appreciate that. I saw a strong correlation between the drops recorded on the interface and show cef ipv4 drops. This answered my question.
Xander has added the following to the link above, which answered the question:the command for CPP (/SIP700) is show controller pse qfp [0-1] [datapath/flag-utilization | statistics/drop] location Xit is not the same type of output as the trident/typh...
