Re: [c-nsp] The myths of autonegotiate vs forced (was: full duplex mismatch speed - dynamips)

2010-08-20 Thread Thomas Habets

On Fri, 20 Aug 2010, Mikael Abrahamsson wrote:
Duplex seems to be a big mystery in most organizations, I've heard so many 
misconceptions about it it's scary, I'd say it's one of the biggest causes of 
bad performance in modern networking,


Network Performance Problem Solution Guide:

http://tinyurl.com/32ol9sf

-
typedef struct me_s {
  char name[]  = { Thomas Habets };
  char email[] = { tho...@habets.pp.se };
  char kernel[]= { Linux };
  char *pgpKey[]   = { http://www.habets.pp.se/pubkey.txt; };
  char pgp[] = { A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854 };
  char coolcmd[]   = { echo '. ./_. ./_'_;. ./_ };
} me_t;
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] 10GE WAN options for 7606 for market data / micro-bursting

2010-01-29 Thread Thomas Habets

On Fri, 29 Jan 2010, Matthew Huff wrote:

1) WS-X6704-10GE. The standard linecard. TX queue of 1p7q8t. 16MB per port 
buffer


If it's bursty you may want to consider 6708 instead. It has bigger
buffers.

-
typedef struct me_s {
  char name[]  = { Thomas Habets };
  char email[] = { tho...@habets.pp.se };
  char kernel[]= { Linux };
  char *pgpKey[]   = { http://www.habets.pp.se/pubkey.txt; };
  char pgp[] = { A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854 };
  char coolcmd[]   = { echo '. ./_. ./_'_;. ./_ };
} me_t;
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Loopback/VLAN question

2009-12-16 Thread Thomas Habets

On Tue, 15 Dec 2009, Frank Bulk - iName.com wrote:

I have 5 remote sites where I'm doing FTTH and transporting the traffic over
a third-party transport gear to our HQ.  Each site-HQ link is a separate
VLAN and uniquely numbered.


Have you considered re-tagging the VLANs on a cheaper device before the 
7600 (which I assume you're sparing because of port cost) and re-tagging 
them to the same VLAN, with some private vlan conf on there to keep VLANs 
from talking to each other (assuming you want that)? Then the 7600 will 
just get all sites on one VLAN.


Re-tagging VLANs does take up a few ports on a cheap switch, but it may be 
cheaper than using up more ports in the 7600 and the 3rd party transport.


And I never said it wasn't ugly.



SiteA  SiteB  SiteC  SiteD  SiteE
 |  |  |  |  |
VLAN1  VLAN2  VLAN3  VLAN4  VLAN5
 |  |  |  |  |
 =
   |
802.1q tagged (1 thru 5)

 |
   2960
   |   - untagged, one per VLAN
   the same 2960

   |
7609-S
   |
 DHCP server


-
typedef struct me_s {
  char name[]  = { Thomas Habets };
  char email[] = { tho...@habets.pp.se };
  char kernel[]= { Linux };
  char *pgpKey[]   = { http://www.habets.pp.se/pubkey.txt; };
  char pgp[] = { A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854 };
  char coolcmd[]   = { echo '. ./_. ./_'_;. ./_ };
} me_t;
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Problem with dscp packets marking on 76th platform.

2009-11-25 Thread Thomas Habets

On Wed, 25 Nov 2009, Teslenko wrote:

PE2#sh policy-map test-Out
 Policy Map test-Out
   Class test
   Class class-default

PE2#sh class-map test
Class Map match-all test (id 27)
  Match ip  dscp 39

[...]

PE2# sh policy-map interface Gi1.205 output class test
GigabitEthernet1.205
 Service-policy output: test-Out
   Class-map: test (match-all)
 0 packets, 0 bytes
 30 second offered rate 0 bps
 Match: ip dscp 39


The output counter will not increment if you only match on 6500/7600, and 
don't actually *set* anything in your policy-map. This is true for getting 
EXP-x counter values in P at least.


Try this on PE2:
policy-map test-Out
  class test
set dscp 39

And see if the counter wakes up. Are you sure the tags are as you think 
on the wire, or are you bravely believing anything that the 6500/7600 
tells you? The counter is (can be) a lie.


This will of course not actually change anything, since you are setting 39 
if it's set to 39.


-
typedef struct me_s {
  char name[]  = { Thomas Habets };
  char email[] = { tho...@habets.pp.se };
  char kernel[]= { Linux };
  char *pgpKey[]   = { http://www.habets.pp.se/pubkey.txt; };
  char pgp[] = { A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854 };
  char coolcmd[]   = { echo '. ./_. ./_'_;. ./_ };
} me_t;
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] IPv4 fragmented packets on SUP720-3BXL

2009-11-11 Thread Thomas Habets

On Tue, 10 Nov 2009, Gert Doering wrote:

No.  Routers will never reassemble transit traffic.


Never is a strong word. It seems ip virtual-reassembly do it. It looks 
like it at least reassembles them in memory and delays them before 
forwarding them (as fragments) from the debug and counters. On a 
virtual 7200:


Router#show ip virtual-reassembly fa1/0
FastEthernet1/0:
   Virtual Fragment Reassembly (VFR) is ENABLED...
   Concurrent reassemblies (max-reassemblies): 16
   Fragments per reassembly (max-fragments): 32
   Reassembly timeout (timeout): 3 seconds
   Drop fragments: OFF

   Current reassembly count:0
   Current fragment count:0
   Total reassembly count:23
   Total reassembly timeout count:3


Not that you'd want to do it, but still.

-
typedef struct me_s {
  char name[]  = { Thomas Habets };
  char email[] = { tho...@habets.pp.se };
  char kernel[]= { Linux };
  char *pgpKey[]   = { http://www.habets.pp.se/pubkey.txt; };
  char pgp[] = { A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854 };
  char coolcmd[]   = { echo '. ./_. ./_'_;. ./_ };
} me_t;
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] Mac address flapping..

2009-07-12 Thread Thomas Habets

On Sun, 12 Jul 2009, James Ashton wrote:

over 120 other vlans on  these same ports arent having this
issue.


Have you checked that you aren't running into spanning tree limits?

6500/7600 have two limits, virtual ports and active logical ports.

The short story is:
1) check if show spanning-tree summary total is more than 1.
2) check if show vlan virtual-port is more than 1800 per slot.

http://blog.habets.pp.se/2009/06/Spanning-tree-limits
http://www.cisco.com/en/US/solutions/ns340/ns394/ns50/net_design_guidance0900aecd806fe4bb.pdf

-
typedef struct me_s {
  char name[]  = { Thomas Habets };
  char email[] = { tho...@habets.pp.se };
  char kernel[]= { Linux };
  char *pgpKey[]   = { http://www.habets.pp.se/pubkey.txt; };
  char pgp[] = { A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854 };
  char coolcmd[]   = { echo '. ./_. ./_'_;. ./_ };
} me_t;
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/