Reducing CPU usage due to ACLS on Catalyst Switches.

Based on the following documentation from Cisco I feel that if we implement “no ip unreachables” and Optimized ACL Logging, we will reduce some CPU load on the catalyst 6500 switches. Please let me know your thoughts. We may also take advantage of compiled (turbo) access-lists. This feature will index the ACLs and reduce the time taken to go through ACL linear matching and filtering process.


• ACL flows that match a "deny" statement in standard and extended ACLs (input and output) are dropped in hardware if "ip unreachables" is disabled.
• ACL flows that match a "permit" statement in standard and extended ACLs (input and output) are processed in hardware.
• Unless you configure optimized ACL logging (OAL), flows that require logging are processed in software without impacting nonlogged flow processing in hardware .
• When you enter the show ip access-list command, the match count displayed does not include packets processed in hardware

By default, the MSFC sends Internet Control Message Protocol (ICMP) unreachable messages when a packet is denied by an access group.
With the ip unreachables command enabled (which is the default), the supervisor engine drops most of the denied packets in hardware and sends only a small number of packets to the MSFC to be dropped (10 packets per second, maximum), which generates ICMP-unreachable messages.
To eliminate the load imposed on the MSFC CPU by the task of dropping denied packets and generating ICMP-unreachable messages, you can enter the no ip unreachables interface configuration command to disable ICMP unreachable messages, which allows all access group-denied packets to be dropped in hardware.
Thank you.

Human intelligency and internet.

Now a days I started observing my awareness to different things in the world and found that there is a tremendous increment in last 8 years. I should say thanks to internet especially to Google. In the year of 1999 when I was studying my final year of B.Tech and I was little exposed to internet. This was due to lack of technology advancements in India. I was doing a project in my final year on Reluctance Motors and I what I had was very old books from our library. Our guide asked us to go to IISc in Bangalore to collect the material. My friend and I went to library and made copies of the IEEE magazines and went to one of the students room in the college, where we got a brilliant advice from the student to search on internet. That time Altavista was famous. We searched internet and found some good material. Based on the material we collected we produced a thesis to our guide and external evaluator. Everything went well and we got good points for our project. All this would not have happened without internet.

Now a days I can learn new things, make decisions etc. based on internet. I do not need to feel shy to ask another person or read the old material from the library.

If we do not know something search in internet and you will get answers.

GNS3- Graphical Cisco Router Emulator.

I found GNS3 is a very useful Cisco router and PIX firewall simulator. Please find the descriptions I copied from their website.

You can download the software from http://www.gns3.net

GNS3 is a graphical network simulator that allows you to design complex network topologies and to launch simulations on them.
To allow complete simulations, GNS3 is strongly linked with :

Dynamips, an IOS emulator which allows users to run IOS binary images from Cisco Systems.
Dynagen, a text-based front-end for Dynamips.
Pemu, a PIX emulator.
GNS3 is a excellent complementary tool to real labs for administrators of Cisco networks or people wanting to pass their CCNA, CCNP, CCIP or CCIE certifications.
It can also be used to experiment features of Cisco IOS or to check configurations that need to be deployed later on real routers. This project is an open source product that may be used on multiple platforms, including Windows, Linux, and MacOS X.
Features overview
Designing high quality complex network topologies.
Emulating Cisco routers and PIX firewalls.
Simulating simple Ethernet, ATM and Frame Relay switches.
Load and save in Dynagen's INI-like format.
Image export (JPEG, PNG, BMP and XPM).

Leaders Should Know to Manage Failures

Nice article.

-----------------------------------------------------------
Former President of India, APJ Abdul Kalam while addressing an audience at Wharton India Economic forum, was asked to give an example, from his experience, as how leaders should manage failure and his reply was as follows;

"Let me tell you about my experience. In 1973 I became the project director of India’s satellite launch vehicle program, commonly called the SLV-3. Our goal was to put India’s “Rohini” satellite into orbit by 1980. I was given funds and human resources — but was told clearly that by 1980 we had to launch the satellite into space. Thousands of people worked together in scientific and technical teams towards that goal.

By 1979 — I think the month was August — we thought we were ready. As the project director, I went to the control center for the launch. At four minutes before the satellite launch, the computer began to go through the checklist of items that needed to be checked. One minute later, the computer program put the launch on hold; the display showed that some control components were not in order. My experts — I had four or five of them with me — told me not to worry; they had done their calculations and there was enough reserve fuel. So I bypassed the computer, switched to manual mode, and launched the rocket. In the first stage, everything worked fine. In the second stage, a problem developed. Instead of the satellite going into orbit, the whole rocket system plunged into the Bay of Bengal. It was a big failure.

That day, the chairman of the Indian Space Research Organization, Prof. Satish Dhawan, had called a press conference. The launch was at 7:00 am, and the press conference — where journalists from around the world were present — was at 7:45 am at ISRO’s satellite launch range in Sriharikota [in Andhra Pradesh in southern India]. Prof. Dhawan, the leader of the organization, conducted the press conference himself. He took responsibility for the failure — he said that the team had worked very hard, but that it needed more technological support. He assured the media that in another year, the team would definitely succeed. Now, I was the project director, and it was my failure, but instead, he took responsibility for the failure as chairman of the organization.

The next year, in July 1980, we tried again to launch the satellite — and this time we succeeded. The whole nation was jubilant. Again, there was a press conference. Prof. Dhawan called me aside and told me, “You conduct the press conference today.”

I learned a very important lesson that day. When failure occurred, the leader of the organization owned that failure. When success came, he gave it to his team. The best management lesson I have learned did not come to me from reading a book; it came from that experience

Free local and long distance calls in USA.

The following site is offering free local and long distance calls in USA. You will pay only 19.99 US$ per year for the membership. One of my friends told me that the voice voice quality is great. I do not take any responsibility for the quality. I do not represent the company. I am posting this in my blog to just give an idea.

http://www.magicjack.com/4/index.asp

Thank you.
Murthy

Watch Hindi movies for free.

This website got lots of Hindi movies for watching online. The site is legal, so you can happily enjoy watching.

www.rajshri.com

Enjoy watching.
Murthy

Money Saving Tips.

The following site has lot of tips how to save money. They say that small savings will add up over the years. It is nice to see that Americans are talking about savings.

http://www.feedthepig.org

Start saving.
Murthy