Re: [c-nsp] Recovery time under interface failure - VPLS - MPLS L3 VPN- Plenty L3

Tks Oliver, assuming there is no STP delay (portfast/etc.) this should be rather quick That is as I see it should work for VPLS. But crazily, it is taking 19 to 20 seconds, even though portfast is enabled. Any clue? -Original Message- From: ext Oliver Boehmer (oboehmer) [mailto:[EMAIL

[c-nsp] Recovery time under interface failure - VPLS - MPLS L3 VPN - Plenty L3

Hi, Considering following simple topology: Laptop-(e1)R1-R2R3Server ...and that OSPF timers are the same and BFD is not used (no failure recovery optimization used) on all scenarios: What would be the recovery time when interface etherne 1 (from laptop to R1) fails in these

[c-nsp] Source failure in PIM SSM

Hi, Any recommendation for docs handling source failure when PIM SSM is used? Example: Source 1.1.1.1, group 239.1.1.1 -R1R2--PC_joined 239.1.1.1 using IGMPv2 R2 has SSM mapping group 239.1.1.1 to sorce 1.1.1.1 I have seem 2 options: Anycast and Prioritycast. Would like to here

Re: [c-nsp] Cisco Processing Regarding ICMP

Totally agree. Do you know that times you receive request that you just would like to forget? :) -Original Message- From: ext Gert Doering [mailto:[EMAIL PROTECTED] Sent: Sunday, May 11, 2008 6:58 PM To: Vidali Alaerte (NSN - BR/Rio de Janeiro) Cc: [EMAIL PROTECTED];

Re: [c-nsp] Cisco Processing Regarding ICMP

Are you sure by default it is not configured any rate? It seems it default to two per second. -Original Message- From: ext Alexandre Snarskii [mailto:[EMAIL PROTECTED] Sent: Sunday, May 11, 2008 3:32 PM To: Paul Cosgrove Cc: Vidali Alaerte (NSN - BR/Rio de Janeiro);

Re: [c-nsp] Cisco Processing Regarding ICMP

Hi Phil, I have seem description saying that initial SYN is punted to RP, so there is impact under SYN attack for example. Also, RP needs to calculate new checksum. I agree it seems better solution, I am only worried with CPU impact in 7609. Also, only helps UDP. Tks, Alaerte -Original

Re: [c-nsp] Cisco Processing Regarding ICMP

I mean, only helps TCP :) -Original Message- From: Vidali Alaerte (NSN - BR/Rio de Janeiro) Sent: Sunday, May 11, 2008 9:02 PM To: 'ext Phil Bedard'; Gert Doering Cc: cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Cisco Processing Regarding ICMP Hi Phil, I have seem description saying

Re: [c-nsp] Cisco Processing Regarding ICMP

I am almost there concerning tolerance :) Hope this one is just provisory, until IP backbone devices is changed to support necessary Jumbo frame on this customer. anyway I documented all risks involved, PMTU black role, Cisco CPU increase and bla-bla-bla. Tks, Alaerte -Original

[c-nsp] Cisco Processing Regarding ICMP

Hi, Any document about how is the processing of a packet received on interface A toward interface B, where interface B has lower MTU than received packet and DF bit is set? (like description of the process) (considering CPU impact and if default limitation of ICMP generation enough when the

Re: [c-nsp] Cisco Processing Regarding ICMP

Thanks Paul, I would like to find information about processing on 7609 under this situation, from traffic coming from Internet, normally users downloading files or watching videos. Because internal network design requirements, it is necessary decrease internal MTU to slight lower than 1500

[c-nsp] ICMP Packet too big attack

Hi, Have you heard about attacks trying to explore generation of packet too big ICMP messages? Tks, Alaerte ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] Jumbo Value for receiving frame

Hi, When sending packet of 1548 bytes, configuring Jumbo support for 1548 bytes is ok to avoid fragmentation (router will add Ethernet frame and that is ok). But the guy that is receiving this frame, should it have Jumbo configured for 1548 plus Ethernet frames? (sorry the question, no fast

Re: [c-nsp] MPLS MTU and Jumbo frames

Hi Zaid, There are a mix - 7609/12410 on the P/PE, and on access (before MPLS), 3550 and 2950. I saw that 2950 has limitation on the maximum frame size: 2950G(config)#system mtu ? 1500-1530 MTU size in bytes tks, Alaerte From: ext Ibrahim Abo

[c-nsp] Adjust TCP MSS in Cisco

Hi, How efficient (regarding CPU resources consuming in router) is adjusting MSS on Cisco to avoid fragmentation? (for high traffic rate) ip tcp adjust-mss 1400 Thanks, Alaerte ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] MPLS L3 VPN over TE - Load Balancing per Customer

Tks Oli, I believe it is a trend due to FastReroute recovery for VPN customers. Maybe it change soon with IP FastReroute. Maybe not :) I will test it again with your suggestion. Tks again, Alaerte -Original Message- From: ext Oliver Boehmer (oboehmer) [mailto:[EMAIL PROTECTED] Sent:

[c-nsp] Feature Navigator for XR

Hi, Do you know if there is a feature navigator for XR? Particularly trying to confirm that BFD-triggered Fast Reroute (FRR) is there on 3.3.0 Tks, Alaerte ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] Feature Navigator for XR

Hi Oli, Do you know where is XR configuration of BFD for TE on XR? IOS has page for it: http://www.cisco.com/en/US/docs/ios/mpls/configuration/guide/mp_te_bfd_f rr.html#wp1064977 But XR page I found only mention support, not commands. Tks, Alaerte -Original Message- From: ext Oliver

[c-nsp] MPLS L3 VPN over TE - Load Balancing per Customer

Hi, Considering the topology where MPLS VPN over TE is used: (2 links between PE1--PE2) CustA--PE1PE2CustA | | CustB___| |_CustB What are the possibilities of loading balance traffic in the way CustA traffic goes through link 1 and CustB

[c-nsp] Multicast Subsecond Convergence

Hi, Investigating scalability of this feature (and potential issues). Any real field example? http://www.cisco.com/en/US/docs/ios/12_2s/feature/guide/fs_subcv.html Tks, Alaerte ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] BFD for HSRP

Thanks Oli, Could you send me any reference/description of the solution on IOS-XR? Tks, Alaerte -Original Message- From: ext Oliver Boehmer (oboehmer) [mailto:[EMAIL PROTECTED] Sent: Thursday, March 20, 2008 1:09 PM To: Vidali Alaerte (NSN - BR/Rio de Janeiro);

Re: [c-nsp] HSRP Packet Forwarding

Hi Oliver, Why are you asking? It is related to issue when switch-1 is involved with layer 2 loop and send back the HSRP packets to 7609-2. Thanks, Alaerte -Original Message- From: ext Oliver Boehmer (oboehmer) [mailto:[EMAIL PROTECTED] Sent: Monday, February 25, 2008 3:24 AM To:

[c-nsp] Accelerate Failure Detection of EoMPLS

Do you know if there is ways to accelerate detection of failure between PEs and shutdown extended Vlan (through EoMPLS or VPLS). PC1--PE1-PE2--PC2 |___| When simulating failure on link PE1---PE2, it is taking to long for traffic switchover. (already tested

[c-nsp] VPLS and AToM Failure Recovery Time

Facing the following issue: A VPLS (also tested with EoMPLS) pseudowire indicates up state but does not send/receive frames during link failure simulation for up to 30 seconds. It was tested severy features: only VPLS with IGP, EoMPLS over Traffic Engineering, EoMPLS over TE protected by FRR.

Re: [c-nsp] PIM Split Rules and Multicast over L3 MPLS VPN

Thanks Oli. I will test today on PFC3xx with SRB2 and post the result. Br, Alaerte -Original Message- From: ext Oliver Boehmer (oboehmer) [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 22, 2008 8:01 PM To: Vidali Alaerte (NSN - BR/Rio de Janeiro); cisco-nsp@puck.nether.net Subject:

[c-nsp] VPLS Error Message: Output interface: if-?(0), imposed label stack {}

In a very simple lab setup, VPLS is not working. I am wondering if it is platform/hardware issue (for example WS-X6548-GE-TX issue). Any idea? Topology: CE1a---PE1-PE2---CE2a Here is result of related command: sh mpls l2transport vc 60 det Local interface: VFI vlan60 VFI up MPLS VC type

[c-nsp] PIM Split Rules and Multicast over L3 MPLS VPN

Hi, PIM considers source of multicast to perform load splitting when the command ip multicast multipath is entered. When using multicast over L3 MPLS VPN, the source IP is the IP of PEx for any customer group connected to PEx. Any way to overcome this limitation and achieve load splitting of

Re: [c-nsp] EoMPLS and VPLS Load Balancing

Many tks Oli, In Cisco pages there is a note saying that PFCxx does not support load balancing at the tunnel ingress, so only one IGP path is used. This is the site: http://www.cisco.com/en/US/docs/routers/7600/ios/12.2SXF/configuration/g uide/pfc3mpls.html So I am wondering if at the end it is

Re: [c-nsp] Multicast over VPLS

physical ethernet link circuit to bridge traffic between the R2-R3 vc-lsp and the R3-R4 vc-lsp. I think I did not get it. If I understood your suggestion, on the topology R3 needs to bridge traffic received from R2--R3 to R3--R4 vc-lsp. Is that correct? If yes, you are thinking about

Re: [c-nsp] Multicast over VPLS

Hi, I have seen people pointing some disadvantages of H-VPLS. Could you share your overview of it? Tks, Alaerte -Original Message- From: ext Jeff Tantsura [mailto:[EMAIL PROTECTED] Sent: Friday, November 30, 2007 7:52 AM To: Vidali Alaerte (NSN - BR/Rio de Janeiro);

Re: [c-nsp] Multicast over VPLS

Hi and thanks, Other way is to make circuit loop on R3 and establish vc-lsps between R2 and R3 then R3 and R4 If I establish VC-LSP from R2---R3, and VC-LSP from R3---R4, how would R3 switch what it received from R2 to R4? Throught layer 3? Br, Alaerte -Original Message- From: ext

[c-nsp] Multicast over VPLS

Hi, Any information about what draft Cisco is considering/will adopt to solve bandwidth waste issue with Multicast over VPLS? Besides standard, do you see any solution currently available to avoid PE to send several flows of the same multicast over a single link on ring topology? Topology:

Re: [c-nsp] cisco-nsp Digest, Vol 58, Issue 4

Hi, Did you have problem with SUP720 recently (hardware failure)? Last semester there was 3 problems. I am wondering if any series are having problem. Tks, Alaerte ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

[c-nsp] TE over Etherchannel

Have you heard such affirmation before? TE FRR is not supported over Etherchannel Under SX releases, the only feature that it says it is not supported under etherchannel is DS-TE. I have used backup tunnel taking etherchannel and it worked for years. Now this statement means that between two

Re: [c-nsp] cisco-nsp Digest, Vol 57, Issue 59

Hi Do you know if there is any restriction for standard Traffic Enginnering in layer 3 etherchannel on 7609 ? I searched in Cisco and only found restriction for DS-TE. I have used the command mpls traffic-eng tunnels under layer 3 port-channel without problem. The way I see it is that on the

[c-nsp] TDM over IP

Hi, Have you used it? I followed draft and Cisco implementation. Now looking for field problems related to clock. Tks. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

Re: [c-nsp] VPLS over Tunnels

Hi Oli, I am looking for exactly that, if possible send specific PW over specific paths. That is, doc discussing relation between PWs and TE in VPLS environments. For example, suppose customer has 4 sites (CE-a1, CE-a2, CE-a3, CE-a4) using VPLS backbone with 4 PEs (PE1, PE2, PE3 and PE4). I am

[c-nsp] VPLS over Tunnels

Hello, Trying to find some doc about implementing VPLS over TE Tunnels. Something similar to Implementing MPLS VPN over TE Tunnels http://www.cisco.com/en/US/tech/tk436/tk428/technologies_tech_note09186a 0080125b01.shtml Tks ___ cisco-nsp mailing

Re: [c-nsp] Dual-Homed VPLS

The idea sounds nice, but did you see the drawbacks? I think I will end up using 2 extended Vlans per customer, so we have the benefits of layer 3 redundancy without the concerns of Spanning Tree and will get some load balancing. Something like this: Site 1

[c-nsp] Dual-Homed VPLS

Hi, Do you indicate any reference for this topic? I tried some books like MPLS Configuration on Cisco IOS Software (pretty good book) by Lancy and Umesh, but it only touch the subject. Tks, Alaerte ___ cisco-nsp mailing list

Re: [c-nsp] Dual-Homed VPLS

Hi Eric, Exactly. As PE would forward Spanning tree BPDUs transparently, I am considering STP is also an option to block a link. For example: CE1-A_(fa-1/1)--- PE1===PE2-CE2-A (STP ROOT) | \ / (fa-1/2) \

Re: [c-nsp] HSRP Flapping Due to CPU Spikes

Thanks again Gianluca, By traffic Locally switched you mean traffic that does not cross bus (inbound and outbound interface on same module) Br, Alaerte -Original Message- From: ext hjan [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 24, 2007 10:47 AM To: Vidali Alaerte (NSN - BR/Rio de

[c-nsp] Bug with 12.2(18)SXF8 on 7600/SUP2

Hi, What was the previous IOS version? These problem was not observed under SXF5 and SRA1 on network I have worked with. Regards, Alaerte Message: 3 Date: Mon, 9 Jul 2007 13:17:42 -0400 From: Phil Bedard [EMAIL PROTECTED] Subject: [c-nsp] Bug with 12.2(18)SXF8 on 7600/SUP2? To: Cisco-Nsp

[c-nsp] Payload Type in AS5400

Hi, Do you know if it is possible change Payload Type on version 12.4(11)T? CISCO AS uses PT=98 for G726 (all flavours) Thanks. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] Defining the IP of client in LNS without Radius

Hi, Do you think it is possible pre define the IP address of a L2TP tunnel without using AAA server? (for example using DHCP for IP pool and somehow define configure DHCP server to map IP to certain parameters received from LNS) Tks, Alaerte ___

Re: [c-nsp] HSRP Flapping Due to CPU Spikes

Hi Gianluca, Thanks for your information. (sorry the delay between one message and other, out of office) I think this may be a central point of the instabilities we are observing on 7600. I am trying to understand why mls rate-limit unicast ip icmp unreachable... help in your case. Please if you

[c-nsp] Transmission Failure Detection

Hi, Cisco is recommending not use RSVP Hellos lower than 200ms for link failure detection. I am wondering if you have use it without false positives in commercial networks. Tks ___ cisco-nsp mailing list cisco-nsp@puck.nether.net

Re: [c-nsp] HSRP Flapping Due to CPU Spikes

Hi Rodney, We are looking forward this feature. Last news we received is that there is no release date for 7609. Do you have different information? tks -Original Message- From: ext Rodney Dunn [mailto:[EMAIL PROTECTED] Sent: Monday, June 25, 2007 4:24 PM To: Vidali Alaerte (NSN -

Re: [c-nsp] cisco-nsp Digest, Vol 53, Issue 81

Humm,,,no support for FRR on BFD under this version. No date to release yet. Are you using SIP + SPA for 10GE? If yes, what is the SIP? Rgds, Alaerte -Original Message- From: ext Raman Sud [mailto:[EMAIL PROTECTED] Sent: Friday, April 27, 2007 8:02 PM To: Vidali Alaerte (NSN - BR/Rio

Re: [c-nsp] Fast Reroute and Link Flapping

Hi Oli, Could you comment the 10-sec link-up debounce of POS? It is not the behavior on the links I handled last time. Tks, Alaerte -Original Message- From: ext Oliver Boehmer (oboehmer) [mailto:[EMAIL PROTECTED] Sent: Thursday, April 19, 2007 12:23 AM To: Vidali Alaerte (NSN BR/Rio

[c-nsp] Fast Reroute and Link Flapping

Hi, Do you have reference that discuss fast reroute and link flapping? Tks, Alaerte ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Show system jumbomtu

Do you know if there is any hidden issue with this command? I tried it in 2 IOS versions it was supposed to work, but no support. Version 12.2(33)SRA1 OSR-1#show system ? % Unrecognized command OSR-1#show system Version 12.2(17d)SXB7 OSR-2#sh system? % Unrecognized command OSR-2#sh system

[c-nsp] RSVP Hellos

Are you aware of any restriction concerning use of aggressive values on RSVP Hellos to detect neighbor failure? ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at

[c-nsp] mpls traffic-eng reoptimize timers frequency

Do you have comments regarding this command? (advantages, disadvantages, CPU impact, traffic impact, bugs) Tks, Alaerte ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at