Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-22 Thread Adrian Minta
mac address-table aging-time 14400 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Aaron
What do y'all know about the effects of implementing fhrp's (glbp, hsrp, vrrp) WITH route diversity from the distribution (fhrp router) to the internet. (which I'd imagine is a pretty typical scenario in HA nets) I mean as packets arrive from the internet to the non-active fhrp router, then

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Nick Hilliard
On 21/01/2013 16:56, Aaron wrote: is it all about lower arp timeouts below 300 secs so to artificially prop-up bridge tables and keep them fresh? My goodness that's making arp very busy. It's all about keeping the cam timeout on your switch higher than the arp timeout on your routers and

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Mikael Abrahamsson
On Mon, 21 Jan 2013, Aaron wrote: How does constant unknown unicast flooding affect networks? Better yet, how to design in mitigation ? is it all about lower arp timeouts below 300 secs so to artificially prop-up bridge tables and keep them fresh? My goodness that's making arp very busy.

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Pete Lumbis
In short you'll run into unexpected congestion from flooded traffic arriving on trunks it shouldn't be. You could also run into high CPU on some devices due to excess traffic (but this is less likely since the destination MAC will not match the receiving device and will be dropped on the NIC, most

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Aaron
Message- From: Mikael Abrahamsson [mailto:swm...@swm.pp.se] Sent: Monday, January 21, 2013 11:18 AM To: Aaron Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's On Mon, 21 Jan 2013, Aaron wrote: How does constant unknown unicast

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Aaron
Ha love it. Thanks Nick What is the definition of large L2 domain please. ? Aaron -Original Message- From: Nick Hilliard [mailto:n...@foobar.org] Sent: Monday, January 21, 2013 11:12 AM To: Aaron Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] unknown unicast flooding

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Lee
On 1/21/13, Aaron aar...@gvtc.com wrote: What do y'all know about the effects of implementing fhrp's (glbp, hsrp, vrrp) WITH route diversity from the distribution (fhrp router) to the internet. (which I'd imagine is a pretty typical scenario in HA nets) Do you have enough bandwidth to the

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Lee
On 1/21/13, Aaron aar...@gvtc.com wrote: Arp timers are central, bridge timers are more distributed Arp timers I believe are specific to svi/bvi/routed interfaces, bridge timers I believe are more global and may not be vlan specific Those 2 items would lead me to think arp timers would be

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Gert Doering
Hi, On Mon, Jan 21, 2013 at 10:56:13AM -0600, Aaron wrote: How does constant unknown unicast flooding affect networks? Better yet, how to design in mitigation ? is it all about lower arp timeouts below 300 secs so to artificially prop-up bridge tables and keep them fresh? My goodness

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Nick Hilliard
, 2013 11:12 AM To: Aaron Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's On 21/01/2013 16:56, Aaron wrote: is it all about lower arp timeouts below 300 secs so to artificially prop-up bridge tables and keep them fresh? My

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Aaron
...@puck.nether.net] On Behalf Of Lee Sent: Monday, January 21, 2013 12:23 PM To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's On 1/21/13, Aaron aar...@gvtc.com wrote: Arp timers are central, bridge timers are more distributed Arp timers I

Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's

2013-01-21 Thread Randy
about a year ago. ./Randy --- On Mon, 1/21/13, Aaron aar...@gvtc.com wrote: From: Aaron aar...@gvtc.com Subject: Re: [c-nsp] unknown unicast flooding - particularly regarding fhrp's To: 'Lee' ler...@gmail.com, cisco-nsp@puck.nether.net Date: Monday, January 21, 2013, 2:04 PM No arp entry