Tony, I'll agree with the comments on uRPF and queuing - you should know why you want these changes before making them.
However, disabling IP Unreachables is now one of the baseline measures for infrastructure protection, and recommended as such by Cisco. I'll agree in advance that there may be situations where IP unreachables are desired, or situations where infrastructure protection is not important, but by and large disabling it seems to be a good step. If you disagree, I'd appreciate an explanation. Sincerely, Michael Malitsky > Message: 3 > Date: Thu, 15 Jan 2009 11:37:38 -0600 > From: "Tony Varriale" <[email protected]> > Subject: Re: [c-nsp] Per packet load balancing with low latency > To: <[email protected]> > Message-ID: <b689c067a7794b108d6e78a4a417d...@flamdt01> > Content-Type: text/plain; format=flowed; charset="iso-8859-1"; > reply-type=original > > William, > > Note that some of those config items are optional. The base config > from > Michael would be: > > > interface Multilink1 > > description Multiplexed Logical Connection to remote site > > ip address 1.1.1.1 255.255.255.0 > > no ip redirects > > no ip proxy-arp > > ppp multilink > > ppp multilink fragment disable > > ppp multilink group 1 > > > interface Serial1/0/19:0 > > description Connected to remote site (circuit 1) > > no ip address > > no ip redirects > > encapsulation ppp > > ppp multilink > > ppp multilink group 1 > > > Be careful with URPF. You may not need to modify your > queues...probably > don't unless you understand it. > > And please, do not disable unreachables. > > tv > > ----- Original Message ----- > From: "Michael Malitsky" <[email protected]> > To: <[email protected]> > Sent: Thursday, January 15, 2009 11:20 AM > Subject: Re: [c-nsp] Per packet load balancing with low latency > > > > Don't have a link handy, but here is a sample of the config we use. > You > > can view status using > > > > show ppp multilink > > > > > > > > interface Multilink1 > > description Multiplexed Logical Connection to remote site > > ip address 1.1.1.1 255.255.255.0 > > ip access-group inbound in > > ip access-group outbound out > > ip verify unicast source reachable-via rx > > no ip redirects > > no ip unreachables > > no ip proxy-arp > > no peer neighbor-route > > fair-queue 1024 256 0 > > ppp multilink > > ppp multilink fragment disable > > ppp multilink group 1 > > > > interface Serial1/0/19:0 > > description Connected to remote site (circuit 1) > > no ip address > > no ip redirects > > no ip unreachables > > no ip proxy-arp > > encapsulation ppp > > no fair-queue > > ppp multilink > > ppp multilink group 1 > > > > interface Serial1/0/21:0 > > description Connected to remote site (circuit 2) > > no ip address > > no ip redirects > > no ip unreachables > > no ip proxy-arp > > encapsulation ppp > > no fair-queue > > ppp multilink > > ppp multilink group 1 > > > > > > > > > > > > > > Sincerely, > > Michael Malitsky > > > >> Message: 8 > >> Date: Thu, 15 Jan 2009 16:55:48 +0000 > >> From: William <[email protected]> > >> Subject: Re: [c-nsp] Per packet load balancing with low latency > >> applications > >> To: "[email protected]" <[email protected]> > >> Message-ID: > >> <[email protected]> > >> Content-Type: text/plain; charset=ISO-8859-1 > >> > >> Can anyone point me to some decent documentation on setting up MLPPP > >> with serial links? Google/Cisco.com is not liking my key words > today. > >> > >> Thanks for your time. > >> > >> W > >> > >> 2009/1/15 <[email protected]>: > >> > Hi, > >> >> Yes, age old question. > >> >> > >> >> Use layer 2 technologies such as MLPPP. > >> > > >> > yep - you caan then choose the appropriate load balancing > >> > method so media streams for the same target go down them same > pipe. > >> > missing packets are generally okay for most modern streaming > >> > systems...they ignore them..you might get a little glitch if you > >> > are unlucky....but packets arriving out of order? ouch. > >> > > >> > alan > >> > > > > > _______________________________________________ > > cisco-nsp mailing list [email protected] > > https://puck.nether.net/mailman/listinfo/cisco-nsp > > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
