quote:

2. More cost-effective multihoming for sites that connect to
different service providers where they can control their own
policies for packet flow into the site without using extra
routing table resources of core routers.

FatCow posted:

Does the PC get the ARP entry for 10.10.12.254? Maybe the 6500 is seeing the ARP reply come in 8/47 and dumping it since it is one of it's own MACs? Not really sure, that is a strange one.

FatCow posted:

Where does everyone buy their SFPs from? We've been using CDW but their prices generally suck and the volume I'm ordering them in is starting to go up.

jwh posted:

mezoth posted:

Being that the box you are evaluating is a DPI acceleration box, I would think it has no issues, but you could always throw another l2 switch in its place to validate the issues are not it and belong to the topology.

jwh posted:

We actually crossed over Gig8/45 to Gig8/47 and we see the same issue. It's really confounding.

I'm going to try and look into it further this week, but in the interim we got our Steelhead 5050 up and running by putting an 1841 in between it and Gig8/45. Adds some complexity (and there are throughput concerns now), but at least we can get the thing working.

ragzilla posted:

Is this using RADIUS, or IOS users for auto-enable? If so, you'll need to tell RANCID that it's being autoenabled using something similar to:

code:

add user * rancid
add password * [redacted]
add autoenable * 1
add method * ssh telnet

In your .cloginrc for the rancid user.

mezoth posted:

If you are running a sup720, I would suggest trying the mac-address change for the routed interface. If anything, the router is probably getting tripped up on seeing its own mac-address in the CAM table. If I might ask, what code version are you running?

jwh posted:

Yeah, Sup720. I'll try the mac-address change.

Code is 12.2(18)SXE1

mezoth posted:

Also, i assume the port is not err-disabling? You might have to do "no keepalives" and "no cdp" on the port as well.

Powercrazy posted:

You have to get into identity profile mode first.

Router (config)# identity profile dot1x
Router (config-identity-prof)# eap username user1

Herv posted:

I am not even getting that option. It would be a crime to have to send down another AP if the 871w cant do PEAP auth.

code:

SMALL-OFFICE-FW(config)#identity profile dot1x
SMALL-OFFICE-FW(config-identity-prof)#?
identity profile configuration commands:
  auth-type    Specify policy for all authroized or unauthorized devices
  description  Enter a description
  device       Statically authorize/reject individual devices
  exit         Exit identity profile configuration submode
  no           Negate a command or set its defaults

Going to have to get my cisco login assigned to a support contract for this puppy if I want to download something new image wise as well. I'm about to tell them this will be a PSK SSID...

E: Wait a sec, bought this thing new just a few days ago. Going to have my engineer call up!

NeuralSpark posted:

My company is shutting down a branch office, and as I was present to help with the server room decommissioning I got my grubby paws on a Cisco 3825 loaded with two HWIC 4-port FXO cards, a 6 AP wireless controller, and a 24 port 10/100 PoE w/ 2 stack port line card. I also got 5 7971 VoIP handsets, new in box.

My knowledge with high-end Cisco gear is limited to in-the-field configuration of 3750s, 4948s, 1130 and 1250 series APs using the Cisco configuration guides off their website. Where do I start learning about and configuring this stuff? I can go back to our home office and get configurations utilities and what not, but I don't even know what to ask for.

I'm assuming there's not a PDF somewhere that says "this is how to setup a VoIP system using a 3800 series, CallManager, and some phones". Anyone have any books they recommend?

jbusbysack posted:

Quite honestly, the way its phrased i read it as it's yours for the keeping. If so I would sell that if I were you, you're looking at around 18k+ list for that setup depending on IOS licensing.

Cisco Product Lit posted:

Q. Do the integrated access points in the Cisco 800 Series Routers support local survivable authentication?
A. Yes. The access point can authenticate wireless client devices using LEAP, EAP-FAST, or MAC-based authentication. The access point performs up to five authentications per second.

NeuralSpark posted:

My company is shutting down a branch office, and as I was present to help with the server room decommissioning I got my grubby paws on a Cisco 3825 loaded with two HWIC 4-port FXO cards, a 6 AP wireless controller, and a 24 port 10/100 PoE w/ 2 stack port line card. I also got 5 7971 VoIP handsets, new in box.

My knowledge with high-end Cisco gear is limited to in-the-field configuration of 3750s, 4948s, 1130 and 1250 series APs using the Cisco configuration guides off their website. Where do I start learning about and configuring this stuff? I can go back to our home office and get configurations utilities and what not, but I don't even know what to ask for.

I'm assuming there's not a PDF somewhere that says "this is how to setup a VoIP system using a 3800 series, CallManager, and some phones". Anyone have any books they recommend?

Powercrazy posted:

Skip the configuration utilities for now. The command line IOS is where all the magic happens. Console in, use '?' a lot, look up a few configuration guides for basic stuff like router on a stick etc, just to get familiar with how IOS works. Then you are only limited by your imagination.

NeuralSpark posted:

I realized the FXO cards are useless to me without landlines, but I've already got it running NAT and QoS for my cable modem. I've got a 3750E-24PD stacked to it powering every CAT5 port in the house and 2 1252s and an 1131 are currently in stand-alone mode providing wireless.

I'm pretty comfortable with IOS, I just have no idea where to start with the VoIP stuff on the CLI. The small VoIP system you mention is really my goal in all this, just to learn. The wireless controller is really just a perk since the APs are already running, but it's there so why not play with it? I'll see if I can get CME from our Cisco guys.

Herv posted:

Wow, three hours on the phone with India and still nothing. They are telling me the device supports PEAP but the only auths they have been able to register with my radius server is EAP and PAP.

I have an XP, 7 laptop, and 2 iphones that can't connect to the 871w but work fine on the other AP's.

They tell me wait for 10 mins, then I get this:

Hi Herv,

I have checked the details and you should definitely be able to use PEAP on this router. Unfortunately my shift ends at 5:00pm EST and I have to leave now. As you need immediate assistance today to get this working, please call on 1-800-999-9999 and you will get an engineer immediately. I will come in tomorrow and view the case notes and comntact you.

I have updated the case notes with the latest information and the config on the router. Please feel free to contact me anytime tomorrow.

...

rear end kickin chicken baby...

Ninshack posted:

What kind of factors determine how much latency is incured during circuit saturation assuming no qos? Number of flows? Router hardware? Should there be a difference in latency the rest of the office experiences when a single session app clogs the pipe (outlook mailbox download) vs when many sessions are competing for the bandwidth?

Ninshack posted:

Quick background, although not all may be relevent. We've got around 50 sites connected via frame relay (various circuit sizes depending on office size) with GET VPN for encryption. Pretty much three hub and spoke topologies, one per lata. We don't directly manage the routers or circuits, but are expected to work the provider to make sure they are working properly.

We've been having issues with exchange/outlook running in cached mode saturating our circuits (exchange servers located at the hubs). This usually occurs when a traveling user logs into a new box, downloading their entire mailbox, or an e-mail with an attachment (sometimes as small as 3 MB) is sent to a distribution list and all the cached clients try to download simultaneously.

Our opinion has always been, "yeah its going to make the whole office suck, you're clogging the pipe." But there's been some questioning of how much latency should be incurred when we hit saturation or "how bad should it suck".

What kind of factors determine how much latency is incured during circuit saturation assuming no qos? Number of flows? Router hardware? Should there be a difference in latency the rest of the office experiences when a single session app clogs the pipe (outlook mailbox download) vs when many sessions are competing for the bandwidth?

Sorry if this isn't exactly cisco specific.

Ninshack posted:

What kind of factors determine how much latency is incured during circuit saturation assuming no qos? Number of flows? Router hardware? Should there be a difference in latency the rest of the office experiences when a single session app clogs the pipe (outlook mailbox download) vs when many sessions are competing for the bandwidth?

Ninshack posted:

Anyone have any experience with Exchange and WAAS? Is it worth the effort?

Tremblay posted:

Tell them to escalate your case.

Herv posted:

now we are up to another hour of watching them 'gently caress a football' over a webex session.