IRC Logs

Network: freenode Channel: #cisco

	Enter your search terms Submit search form
	Web www.irclog.org

[08:20]<su2f>graphing back in april shows it peaking at around 35% CPU
[08:20]<su2f>so this month is started jumping to 65-99%
[08:20]<su2f>has to be a worm or something, the traffic hasn't increased any
[09:16]<sdac2jd>yep
[09:19]<sdac2jd>hey what is a LANE module?
[09:19]<sdac2jd>ok dual phy
[09:20]<sdac2jd>PHY
[09:29]<fjzvxnz-wjzc>you mean poutine?
[09:30]<fjzvxnz-wjzc>are you surprised that an amerikan knows what poutine is? :D
[09:30]<sdac2jd>We call them fries royal
[09:31]<fjzvxnz-wjzc>royale with cheese
[09:36]<sdac2jd>what are fries supreme
[09:38]<fjzvxnz-wjzc>FBH^: we need to get you to mexico
[09:38]<fjzvxnz-wjzc>that way, you can eat some *real* mexican food
[09:38]<sdac2jd>mmmmmm
[09:38]<sdac2jd>that sounds good
[09:39]<fjzvxnz-wjzc>sounds like carne asada fries, only without the carne asada, and with ground beef
[09:40]<fjzvxnz-wjzc>see, i'll take you to a real mexican restaurant, and you'll never want tacobell again
[09:41]<sdac2jd>you need to check out a taco truck
[09:41]<fjzvxnz-wjzc>a roach coach?
[09:41]<fjzvxnz-wjzc>a diarrhea wagon?
[09:42]<sdac2jd>yes a diarrhea wagon
[09:42]<fjzvxnz-wjzc>i haven't been to taco bell since i quit working there in '98
[09:43]<fjzvxnz-wjzc>kansas? you're probably stuck with anatto-colored cheddar
[09:45]<fjzvxnz-wjzc>ok, its time for me to sleep. laters.
[09:46]<dvygr>can any one advise on cisco ipsec..
[09:47]<dvygr>i have two different organinzation..each have a cisco router, they want to use encryption on the line between these two org.
[09:48]<sazdn>most cisco routers cannot handle more thana few mb/sec in encryption
[09:48]<sazdn>the pix 501 with a 200mhz cpu can only handle 6mb/sec of AES-128
[09:49]<sazdn>most of the PIX's use the 200mhz pentium cpu
[09:50]<dvygr>i don't know a pix between
[09:50]<dvygr>the org..
[09:50]<dvygr>teh line is dedicate leased line between two offices...
[09:50]<dvygr>i am thinking to use ipsec....but managing the key...is nightmare for me
[09:51]<sazdn>the 535 the top of the line is only 1ghz
[09:51]<sazdn>which is only good for about 30mbps/aes
[09:52]<dvygr>the nightmare will when i change the key, and since i do not have access to the other router...
[09:52]<dvygr>i have to contact the other admin...this is the nightmare..:)
[09:53]<dvygr>different company
[09:55]<sazdn>what is the type of link between
[09:55]<dvygr>leased line TDM 512K
[09:57]<sazdn>so why does it need to be encrypted
[09:59]<dvygr>the line goes through several comm. company points. and i can not gurentee that no one is tapping on the line ...!!
[10:37]<2ysxjlnc>Hello everyone. I've recently tryed to make my Cisco VPN client connect to ASA 5510 and I used http://tinyurl.com/nj9nc as an example. And I don't understand this NAT thing :-). What is it for?
[11:17]<nj22yn>heya =)
[11:17]<nj22yn>when configuring an interface with HSRP, can it still have secondary ip addresses ?
[11:20]<2yw>anyone know anything about the p-cubes?
[11:20]<2yw>none of our suppliers can find out info about them
[11:21]<jnfnwzllnzcn>Nobbie: the hsrp address cannot be the primary address anyway, so what would be the problem ?
[11:24]<jnfnwzllnzcn>Nobbie: so yes, it can
[11:27]<nj22yn>ahh, thanks =)
[11:27]<nj22yn>what it is called when IP traffic is not routed back via the same link it originated from ? async routing ?
[11:28]<2yw>asymmetric
[11:28]<nj22yn>and the oposite ? symmetric ?
[11:28]<2yw>yes
[11:29]<nj22yn>is there a way to reject assymetric traffic ?
[11:29]<nj22yn>ie, block incoming traffic, if it wasn't routed out by the same router it's received on ?
[11:29]<2yw>RPF
[11:31]<nj22yn>can't find defs on google, what's that stand for ?
[11:32]<nj22yn>ahh, reverse path forwarding
[11:32]<2ysxjlnc>Reverse Path Filter.
[11:32]<2ysxjlnc>oooh
[11:32]<2ysxjlnc>:-)
[11:35]<2yw>yea, when it receives a packet, it makes sure the outgoing route for that address is via the interface it's just received it on
[11:36]<2yw>it'll just drop the traffic though, not magically re-route it via your other ingress
[11:37]<nj22yn>interface <x>; ip verify unicast reverse-path
[11:37]<nj22yn>requires ip cef
[11:37]<nj22yn>Thanks for the term
[11:47]<2yw>you can get it to match default routes etc as well
[11:48]<2yw>syntax changed a while ago
[11:48]<2yw>something like ip verify unicast source reachable-via rx allow-default
[11:53]<yanzjpp>CPU utilization for five seconds: 3%/0%; one minute: 5%; five minutes: 2%
[11:53]<yanzjpp>whats the 3%/0% for?
[11:53]<yanzjpp>why two numbers?
[12:21]<2ysxjlnc>Anyone? :-)
[12:29]<dvygr>bishopek: what IP numbers you are using
[12:29]<2ysxjlnc>mtina: In the pool?
[12:32]<dvygr>NAT used to map between private IP and Real IP
[12:34]<2ysxjlnc>Soo... It does not have an affect on the connection negotiation? And payload hashes?
[12:35]<2ysxjlnc>:_)
[12:42]<dvygr>what is the problem exactly?
[12:43]<2ysxjlnc>I'll have to configure the ra ipsec again, one moment
[12:48]<2ysxjlnc>mtina: ASA tells me: "Removing peer from peer table failed, no match!" and the client: "Hash verification failed... may be configured with invalid group password."
[12:50]<2ysxjlnc>mtina: And I've it with the help of http://tinyurl.com/nj9nc :-)
[12:50]<2ysxjlnc>s/it/configured it/
[12:58]<-- svgvsdyzgjvr_ xrs>/dev/null")
[13:32]<fnajcnz>hello
[13:32]<fnajcnz>i change my register , because i not known my password of my router cisco 2600
[13:37]<dvygr>?
[13:38]<ald>hm
[13:42]<fnajcnz>hello world
[13:42]<fnajcnz>i buy a router cisco 2600 on ebay
[13:42]<fnajcnz>i not known a password
[13:42]<fnajcnz>i connect on rommon
[13:43]<fnajcnz>and change my register 0x2142
[13:43]<fnajcnz>after this i copy a startup-config running-config
[13:43]<2ysxjlnc>lejoker: It allows You to apply changes in the config file _without" knowing the password. Not just showing You what it was.
[13:44]<2ysxjlnc>s/"/_/
[13:44]<fnajcnz>i change the password
[13:44]<fnajcnz>enable secret cisco for example

Back to #cisco
Or go to some related logs:
#gentoo
#gentoo
#gentoo
#gentoo
#suse