HDTenEightyP/NetNews huggingface dataset:
From: rhott@nswc.navy.mil (The VolleyDog - E41)
Newsgroups: comp.dcom.sys.cisco
Subject: MTU for Ethernet Interface
Date: 14 Aug 92 14:27:57 GMT
Organization: NAVAL SURFACE WARFARE CENTER

Is it  possible to change the Ethernet MTU on an AGS (or and AGS+)?

I looked in the manual and one can change the "ip mtu" but it does not
appear to cause any fragmentation through the router.  The show interface
still shows the ethernet mtu as 1500 (as it should) and the show ip interface
shows the ip mtu as whatever you change it to!  Does the IP MTU only come
into play when communicating with the cisco?

Thanks.
Bob
====================== #include <std/disclaimer.h> =========================
Bob Hott, NSWCDD, Networks Branch (Code E41) |"If man were not meant to play
Dahlgren, Virginia  22448   (703) 663 - 4447 | volleyball, why are there so
rhott@relay.nswc.navy.mil                    | many beaches?"  - Bob Hott -
Newsgroups: comp.dcom.sys.cisco
From: Paul Smee <P.Smee@bristol.ac.uk>
Subject: Re: Blocking protocols
Reply-To: P.Smee@bristol.ac.uk
Date: 10 Aug 92 12:04:41 BST
X-Mailer: ELM [version 2.3 PL11]
Via: uk.ac.bristol; Mon, 10 Aug 1992 12:05:53 +0100

> On 6 Aug 92 14:54:17 GMT, smee@bristol.ac.uk (Paul Smee) said:
> 
> > I'm aware that we could block it through all interfaces of the AGS+ by
> > using 'Administrative Filtering by Protocol Type', but somewhere in the
> > manual is a line suggesting that there is a performance hit on this,
> > 'proportional to the number of entries in the type code access list'.
> > Cisco don't say what the constant of proportionality is, though.  If an
> > entry cost, say .001% of throughput, who cares?  If it costs 50% per
> > entry, ouch.
> 
> I haven't the performance data sitting at hand at the moment. I'm
> sure however we're not costing you 50% per entry.

Would be handy if you could provide some sort of rough numbers just for
guidance.  I have had one piece of mail from another using site, where
they claim a 20% performance degradation for a 35-entry list.  (Don't
know how that compares with official figures, since I haven't seen any,
but it does make me feel better insofar as it makes me believe that
I've now got some sort of clue. :-)

Thanks for your response.

> > It looks, though, like it might be possible to win by telling the AGS+
> > to route Appletalk, and then setting 'no appletalk address' on all the
> > interfaces.  
> 
> This will work, as long as you aren't doing encapsulation bridging. If
> you are encapsulating, (ie, over FDDI or HDLC serial lines) this
> configuration will not work. And when it doesn't work, you will see very
> rude (albeit entertaining) things happen to your network. Overall, I
> would say that it is safer to set up the input type & input lsap filters
> rather than depending on not doing encapsulation bridging at some later
> time.

Just a mention in passing, in case it influences the thinking of your
developers -- I also had a bit of mail from someone who is using this
technique for isolating Novell IPX.  Also, a personal comment which may
be obvious (but I'll make it anyway), it would be nice if your
developers could keep in mind that it is very handy if encapsulation
interfaces (FDDI, HDLC, whatever next year's flavor is, ...) could be
made to work as much like the straight-ether ones as possible, as far
as routing access controls go.  (They may already do this.  I certainly
don't have a wide-enough range of low-level protocol knowledge to know,
so don't take this as a criticism, just as an observation.)

Thanks again...

-- 
Paul Smee, Computing Service, University of Bristol, Bristol BS8 1UD, UK
 P.Smee@bristol.ac.uk - ..!uunet!uknet!bsmail!p.smee - Tel +44 272 303132
From: rhott@nswc.navy.mil (The VolleyDog - E41)
Newsgroups: comp.dcom.sys.cisco
Subject: Re: rhott@nswc.navy.mil / MTU for Ethernet Interface
Date: 17 Aug 92 15:00:05 GMT
Organization: NAVAL SURFACE WARFARE CENTER

In article <9208161937.AA19106@ash.cisco.com>, gkunis@cisco.com (Gary Kunis) writes:
|> 
|> > Is it  possible to change the Ethernet MTU
|> 
|> Bob,
|> 
|> You can change the MTU.  Each interface has a default mtu size.
|> This value can be changed by the interface mtu subcommand.  An
|> example is:
|> 
|> interface ethernet 0
|> mtu 1024
|> 
|> There is a write-up of this in the 9.0 manual on page 7-12.
|> 
|>  -- Gary --   
Gary,  Thanks for the info.  I should have mentioned that I am using
rev 8.2(4) of the software.  Is this mtu for the ethernet interface
new for 9.0?  I tried the command that you recommended, but it
appears to have been converted to the IP interface and not the Ethernet
interface.  :-(

Bob 
====================== #include <std/disclaimer.h> =========================
Bob Hott, NSWCDD, Networks Branch (Code E41) |"If man were not meant to play
Dahlgren, Virginia  22448   (703) 663 - 4447 | volleyball, why are there so
rhott@relay.nswc.navy.mil                    | many beaches?"  - Bob Hott -
Newsgroups: comp.dcom.sys.cisco
From: a-steiner@nwu.edu (Albert Steiner)
Subject: Re: Tacacs-server authneticate slip
Followup-To: comp.dcom.sys.cisco
Organization: Northwestern University
Date: Mon, 17 Aug 1992 13:55:07 GMT

In article <9208121735.AA05620@is.rice.edu>, evan@is.rice.edu (Evan R.
Wetstone) wrote:
> 
> Has anyone gotten the command "tacacs-server authenticate slip" to work?
>

These commands work for me,  We did some modification of the code on the
host

 
tacacs-server extended
tacacs-server host casbah.acns.nwu.edu
tacacs-server authenticate slip
tacacs-server notify connect 
tacacs-server notify slip
tacacs-server notify logout
tacacs-server notify enable
> 


line 63 65
location slip protocol lines
databits 8
parity none
slip interactive
slip hold-queue 8
login tacacs
> -- 


Manager Networking
Albert Steiner      a-steiner@nwu.edu     708-491-4056
Academic Computing and Networking Service
Northwestern University  2129 Sheridan Road
Evanston, IL  60208      USA
From: kquinlan@cvedg.Prime.COM (Kevin Quinlan)
Newsgroups: comp.dcom.sys.cisco
Subject: x25 route, "alias" clause
Date: 17 Aug 92 16:50:19 GMT
Organization: Computervision R&D, High Wycombe, Bucks., HP11 1JU, UK


I would like to get our CGS 3 router to accept X25 calls for 2 addresses.

I was working on this when we upgraded from 8.2 to 9.0(1) today.

In the 8.2 config I had an X25 route phrase like this:

x25 route ^23421234567890 alias Null0

To be frank, I do not know if this does what I want, because I had not
tested it before the new PROMS arrived. However it is a bit academic,
as (from my experimentation) 9.0(1) will not accept the null interface
in an X25 route command. I get told "Must be running X.25 - Null0" -
fair enough, but 8.2 didn't complain!

What I would like to do is to set up the router to accept calls that
are addressed to an X121 number other than that applied to the serial
interfaces, I understood from the manual that this is what the "alias"
clause would do.  But if I cannot give the null interface, what
interface should I use?  What does the interface name mean when an
alias is specified?  Is it for calls that come in that interface only,
or is the call sent back to that interface? Or does the call appear to
come from that interface?

In case anyone from Cisco says that I should ask them, I should say
that our local UK technical support people cannot help, and asking the
net seemed like the next quickest route.  But in case anyone is
interested; it is my view that the manual (including the 9.0 manual)
is a little vague on this point. 

Kevin Quinlan
-- 

 	(Kevin Quinlan)
 	kquinlan@cvedg.Prime.COM
	kquinlan@uk.co.cv.edg
Newsgroups: comp.dcom.sys.cisco
From: henryc@oar.net
Subject: Re: OSPF on cisco AGS+
Date: 17 Aug 92 17:30:31 -0400
Return-Path: <henryc@oar.net>

In article <1992Aug17.015300.24440@news.clarkson.edu> you write:
>Does cisco's OSPF implementation in 9.x interoperate with Proteon's(p4200,V11)?

Yup, we're doing it right now...

>If so, how should I set up the cisco in the situation where I have 3 routers,
>only one area (backbone)?

In terms of config statements, on the cisco you need something like:

router ospf <as>
network <net> <mask> area 0.0.0.0

You'll also want to set the dead intervals on everything to be the 
same, i.e. something like:

int eth 0
ip ospf dead-interval YY

After doing this, it should start neighboring.

Henry
-- 
Henry Clark                      Network Guy, OARnet
Ohio Supercomputer Center        henryc@oar.net
1224 Kinnear Rd.                 Voice: (614) 292-6483, Fax: (614) 292-7168
Columbus, OH  43212              #include <disclaimer.h>
Newsgroups: comp.dcom.sys.cisco
From: Bob Albrightson <albright@lager.cisco.com>
Subject: Re: Problems hooking Cisco to T1 line
Date: 19 Aug 92 11:38:05 PDT

>    Our Cisco are running 8.2(4) and 8.2(3). We have an RS449 (Cisco end) to
> 25 ping connector (DB25 I think) made up to GTE's spec. If anyone has any
> insight as to what might be going wrong or set up incorrectly I would
> greatly appreciate it.

What does the output of 'show controller mci' show?

Another possibility is you are not satisfying the ones density
requirement for the circuit.

 -bob
Newsgroups: comp.dcom.sys.cisco
From: William "Chops" Westfield <billw@regal.cisco.com>
Subject: Re: TACACS
Date: 18 Aug 92 0:55:03 PDT

    On what systems does TACACS run?

There are versions for at least unix (BSD and/or SysV) and VMS.
There is also the "real" version for C-300s or something, but I
don't know if you can get that (even if you would want it!)


    Do you get it as source code, tailored for installation on a
    specific range of machines?

Yes - the unix source code we supply can be compiled for either
BSDlike or sysVlike systems.  It has run at least on Sun3, Sun4,
and HP9000 boxes here at cisco.  It uses the unix passwd style
file to hold usernames/passwords (and account expiration dates,
and user access lists too, if you use a separate file.)  Most all
the extended tacacs options are blindly allowed.  I don't recall
what the VMS code doesn.


    or do you only get one base code, and have to tweak it yourself
    to fit your system?

If you want something other than the above, you have to tweak it
yourself.  Various customers have tweaked it to do things like
interface to a secure-card based system, or implement dial-back.

Bill Westfield
cisco Systems.

Newsgroups: comp.dcom.sys.cisco
From: Tony Li <tli@cisco.com>
Subject: Multiple subnet problem
Date: 12 Aug 92 13:10:02 -0700


   According to my experience, secondary addresses on cisco routers work 
   only if the other nodes are not aware of the subnetting (so that they 
   still think it is one big network), but even in this case, proxy-arp 
   would be more appropriate.

   However, if You are using (for the sake of example) two class-C networks
   on the same Ethernet (or a class-B and class-C network), they are not 
   announced to each other.

	   +---------+
	   | Cisco   |  primary   : 192.1.1.20
	   +---------+  secondary : 192.1.2.20
		!
   ===============================================
	!                                 !     
   +---------+                       +---------+
   | Node A  |  192.1.1.10           | Node B  | 192.1.2.15
   +---------+                       +---------+

   In this example, Cisco would not announce network 192.1.1.0 to node B
   unless split-horizon is disabled (and that only works in 9.0-only
   environment). 

"no ip split-horizon" was introduced in 8.3(3).  If you do not depend
on your hosts snooping on RIP, then you wont need this.

   I hope there is a better way around this problem, as I am afraid I
   will encounter it in a near future. Any other solutions out there ?

A better solution is to run GDP on your nodes.

Tony
Newsgroups: comp.dcom.sys.cisco
From: mb@cs.tulane.edu (Mark Benard)
Subject: Question: Retix 4760 vs. Cisco IGS/L
Nntp-Posting-Host-[nntpd-25757]: thoth
Organization: Computer Science Dept., Tulane Univ., New Orleans, LA
Date: Wed, 19 Aug 1992 21:23:27 GMT

I am shopping around for a router to use in a moderate traffic environment,
and I have pretty much narrowed it down to two choices:  the Cisco IGS/L and
the Retix 4760.

Can anyone who has experience with both compare them in terms of performance
and reliability?  Thanks.
-- 
Mark Benard
Department of Computer Science     INTERNET & BITNET: mb@cs.tulane.edu
Tulane University                  USENET:   rex!mb
New Orleans, LA 70118
From: SHEAFFER_DM@dir.texas.gov (Danny Sheaffer)
Newsgroups: comp.dcom.sys.cisco
Subject: AGS fan noise
Date: 17 Aug 92 00:58:48 GMT
X-Vmsmail-To: SMTP%"cisco@spot.Colorado.EDU"

Greetings

Does anyone know of a way to reduce the noise produced by the fan on an AGS? 

Danny Sheaffer
danny@dir.texas.gov
From: cml@texhrc.uucp (Chris M. Lonvick)
Newsgroups: comp.dcom.sys.cisco
Subject: Re: AGS fan noise
Date: 18 Aug 92 17:56:31 GMT
Organization: Texaco EPTD

#include <sarcasm.more.std.h>

I think that most of you are missing the point of having a really great fan
on the cisco routers. This is _NOT_ a nuisance but a resource we should use
to its' fullest!

We're trying to mount a manifold over the intake duct with a collection
filter. If we then place our routers at key points throughout the building,
our cleaning crews will only need to carry around the vacuum cleaner
attachements (i.e. long,flexible hose, brush attch., etc.) to clean.

For the routers still in the computer room, we're trying to run finned,
chill water pipes near the exhaust port of the fan. We have decided that if
we can run enough chill water through these pipes, we could shutdown the
Liebert Air Conditioner Units which seem to be the only devices in the
computer room which can compete with the cisco's for noise level.

Chris Lonvick
Texaco
lonvick@Texaco.COM
***ALL*** disclaimers apply!
From: hedrick@aramis.rutgers.edu (Charles Hedrick)
Newsgroups: comp.dcom.sys.cisco
Subject: Re: AGS fan noise
Date: 18 Aug 92 07:41:42 GMT
Organization: Rutgers Univ., New Brunswick, N.J.

eckert@immd4.informatik.uni-erlangen.de (Toerless Eckert) writes:

>When i was testing routers and had multiple of them in my office i
>noticed Cisco routers to be the loudest of them all, due to this
>enormous noise their fans produce. I actually had to switch them off
>each time i wanted to phone. I still don't know where cisco buys these
>buzzers. Maybe these are remainders from scrap aircraft turbojet engines.
>Incredible.

Much of the early design work at Cisco was done by the same person who
did a lot of the design work on the KL-10 (which became the
DECSYSTEM-20).  A representative of DEC was asked the same question
about the KL-10 at a meeting of DECUS (the DEC Users' Society): Why is
the KL-10 so noisy?  His response was: "You're got to realize that the
KL-10 cabinet was originally designed as a hovercraft."  I believe the
AGS+ continues the same technology: It was intended for use in
situations where it is not practical to use a rack -- just face the
fans down and let it hang in the air.
Newsgroups: comp.dcom.sys.cisco
From: pccl@cbnewsd.cb.att.com (paul.c.liu)
Subject: why AGS+ cpu is always busy
Organization: AT&T
Distribution: usa
Date: Thu, 13 Aug 1992 02:04:35 GMT
Keywords: show_cpu, 17+% busy at 1AM, what is going on?

Why would an AGS+ running at ~20% busy most the time???

The 24-hour CPU busy graph for one of our AGS+s indicated the
router CPU is always 17% busy, even at 1:00 A.M. (which the router
should be fairly idle):

	00:30  CPU Busy Time: 5 Sec.: 27%, 1 Min.: 20%, 5 Min.: 20%
	00:35  CPU Busy Time: 5 Sec.: 18%, 1 Min.: 18%, 5 Min.: 18%
	00:40  CPU Busy Time: 5 Sec.: 18%, 1 Min.: 18%, 5 Min.: 18%
	00:45  CPU Busy Time: 5 Sec.: 18%, 1 Min.: 18%, 5 Min.: 18%
	00:50  CPU Busy Time: 5 Sec.: 19%, 1 Min.: 19%, 5 Min.: 19%
	00:55  CPU Busy Time: 5 Sec.: 19%, 1 Min.: 19%, 5 Min.: 19%
	01:00  CPU Busy Time: 5 Sec.: 18%, 1 Min.: 18%, 5 Min.: 18%
	01:05  CPU Busy Time: 5 Sec.: 18%, 1 Min.: 17%, 5 Min.: 17%
	01:10  CPU Busy Time: 5 Sec.: 20%, 1 Min.: 19%, 5 Min.: 19%
	01:15  CPU Busy Time: 5 Sec.: 18%, 1 Min.: 18%, 5 Min.: 18%
	01:20  CPU Busy Time: 5 Sec.: 26%, 1 Min.: 19%, 5 Min.: 19%
	01:25  CPU Busy Time: 5 Sec.: 19%, 1 Min.: 18%, 5 Min.: 18%
	01:30  CPU Busy Time: 5 Sec.: 25%, 1 Min.: 19%, 5 Min.: 19%

The 24-hour cpu_busy statistics with five-minute polling interval:

 time   mean    max     median  min     stddev  95%     99%     99.5%   99.9%
 =============================================================================
 5-sec  23.94   46.00   23.00   17.00   5.57    35.00   43.00   43.00   45.00
 1-min  21.04   43.00   19.00   17.00   4.69    33.00   38.00   39.00   41.00
 5-min  20.67   40.00   19.00   17.00   4.46    32.00   38.00   38.00   39.00

The AGS+ is configured with 2 MCI (2E+2S), 3 MEC (6E) cards, where
3 of the 4 serial ports and 19 of the 22 ethernet ports are in-use.
All the un-configured ports are marked shutdown.

We do turn on IP accounting, some access-groups, few secondary addresses,
couple IGRP redistribute groups, and few dozen static routes.

Clues/pointers are very much appreciated!

Paul.Liu@ATT.COM
Newsgroups: comp.dcom.sys.cisco
From: Tom_Karolyshyn@dgc.mceo.dg.com
Subject: Re: Packet from unknown router
Date: 18 Aug 92 16:20:20 edt


> Aug 17 14:43:41 zztop syslog: packet from unknown router, 
                  222.21.248.254
> Aug 17 14:50:11 zztop last message repeated 349 times
 
The unexpected packet is probably an IP broadcast packet (like RIP)
generated by the cisco's secondary IP address.  Because the 
workstation believes it is only attached to a single subnet (your 
primary cisco subnet), it gets confused when it receives a packet 
from a node on the secondary subnet.
I don't know of any workaround, because secondary subnets would seem
to be "bending the rules" anyway...
Tom
 
Tom Karolyshyn
Data General Corp
Westboro, MA 01580
508-870-7936



Newsgroups: comp.dcom.sys.cisco
From: Tony Li <tli@cisco.com>
Subject: Token Ring Net off of Ethernet port
Date: 20 Aug 92 00:57:39 -0700


Yes, the static route that you describe will work.  You will also want
to do something like

	router igrp xxx
	network 130.58.0.0
	redistribute static
	default-metric 10000 10 255 1 1500

This will distribute information about the static route throughout
your IGRP system.

Tony
Newsgroups: comp.dcom.sys.cisco
From: Bruce Pinsky <bpinsky@cisco.com>
Subject: Re: LAT BridgingREAD/NEW/FOLLOWUP
Date: 11 Aug 92 08:22:48 -0700

Vern -


The ethernet code for MOP is actually two different codes.  6001 is the
code for MOP Dump/Load Assistance and 6002 is MOP Remote Console.  If you
add these two to your access list, your DECservers will operate correctly.


If you are interested in the other ethernet codes, there is a VERY comprehensive
list that is maintained on host ftp.lcs.mit.edu.  You can get it via
anonymous ftp in directory pub/map/EtherNet-codes.

 
==========
bep

Bruce Pinsky
Cisco Systems
From: barmar@think.com (Barry Margolin)
Newsgroups: comp.dcom.sys.cisco
Subject: Re: Packet from Unknown Router
Date: 18 Aug 1992 23:28:50 GMT
Organization: Thinking Machines Corporation, Cambridge MA, USA
NNTP-Posting-Host: telecaster.think.com

In article <9208172005.AA11873@spsgate.sps.mot.com> guri@apogee.sps.mot.com writes:
>Aug 17 14:43:41 zztop syslog: packet from unknown router, 222.21.248.254
>Aug 17 14:50:11 zztop last message repeated 349 times

This is due to the use of secondary addresses.  By default, Unix routed
expects that it will only see routing table broadcasts from a router on its
own subnet.  But the cisco sends out a broadcast from each secondary
address, so machines on each subnet are seeing the broadcasts from the
other subnet on that cable.

You can get rid of the warning by making the router a "known" router, by
putting an entry for it in /etc/gateways, e.g.

host 222.21.248.254 gateway 222.21.248.254 metric 3 active

This routing entry will never actually be used, since you can only route
via a host on your own subnet.  But its existence keeps routed quiet.
-- 
Barry Margolin
System Manager, Thinking Machines Corp.

barmar@think.com          {uunet,harvard}!think!barmar
Newsgroups: comp.dcom.sys.cisco
From: Jim Forster <forster@cisco.com>
Subject: Re: why AGS+ cpu is always busy 
             <1992Aug13.020435.12849@cbnewsd.cb.att.com> 
Date: 13 Aug 92 22:23:36 PDT

> Why would an AGS+ running at ~20% busy most the time???
> 
> The 24-hour CPU busy graph for one of our AGS+s indicated the
> router CPU is always 17% busy, even at 1:00 A.M. (which the router
> should be fairly idle):

The short answer is that the algorithm used for CPU Utilization is not very
accurate, especially on idle routers.  Don't worry; your router really is
idle when you think it is.

We've done an overhaul of this code, and it will be part of a future
release.

  -- Jim
Newsgroups: comp.dcom.sys.cisco
From: guri@apogee.sps.mot.com (Gurvinder Singh Ahluwalia)
Subject: Packet from Unknown Router
Reply-To: guri@apogee.sps.mot.com
Date: 17 Aug 92 15:00:49 CDT
X-Mailer: ELM [version 2.3 PL11]

We are getting a stream of this message on some Suns that were just upgraded 
to SPARCs.  The IP address that appears is a valid address for a cisco router
(secondary IP address on cisco port).  The Sun is at SunOS 4.1.2 and cisco is
an AGS+ at version 8.3.  Network activity on the Sun seems to be unaffected.

Aug 17 14:43:41 zztop syslog: packet from unknown router, 222.21.248.254
Aug 17 14:50:11 zztop last message repeated 349 times

Any ideas?

__
Best Wishes,

Gurvinder Singh Ahluwalia      Internet:     guri@apogee.sps.mot.com
Systems & Network Computing    IIN:          USMOT24T
Motorola SPS                   Motorola DMS: RXDH10@email
Austin, TX                     Voice:        (512) 891-3310
Newsgroups: comp.dcom.sys.cisco
From: Tony Li <tli@cisco.com>
Subject: Multiple subnet problem
Date: 12 Aug 92 07:57:46 -0700


   The cisco is currently routing one subnet of the bridged network to
   the second ethernet.  That leaves me with two problems for the other
   subnets.  Routing them to the outside world and routing between them.
   Can I get my cisco to solve these problems using secondary addresses
   or some such?

   If it is important we are using RIP for routing.

Yes, secondary addresses are exactly what you want.

Tony
Newsgroups: comp.dcom.sys.cisco
From: abstine@clarkson.edu (Art Stine)
Subject: OSPF on cisco AGS+
Reply-To: abstine@clarkson.edu
Organization: Clarkson University
Date: Mon, 17 Aug 1992 01:53:00 GMT

Does cisco's OSPF implementation in 9.x interoperate with Proteon's (p4200, V11)?
If so, how should I set up the cisco in the situation where I have 3 routers,
only one area (backbone)?

---
Art Stine
Sr Network Engineer
Clarkson U
ABStine@Omnigate.Clarkson.Edu

Newsgroups: comp.dcom.sys.cisco
From: martinr@mayo.edu (Robert Martin)
Subject: AGS+ and source-route bridging
Date: 18 Aug 92 11:20:39 -0500

We are having difficulties implementing this across a WAN of several
routers.  Can anyone share their experience with the Cisco routers and
source-route bridging?  We are trying to leave behind the Vitalink
TRANSpath bridge/routers since they cannot route all that we need.