Re: Alternatives to storm-control on Cat 6509.

2009-08-26 Thread David Hughes
On 26/08/2009, at 6:21 AM, Mike Bartz wrote: We experienced the joy of using the X6148 cards with a SAN/ESX cluster. Lots of performance issues! A fairly inexpensive solution was to switch to the X6148A card instead, which does not suffer the the 8:1 oversubscription. It also supports MTU

Re: Alternatives to storm-control on Cat 6509.

2009-08-25 Thread Mike Bartz
On Mon, Aug 24, 2009 at 4:59 PM, Nick Hilliard wrote: > On 24/08/2009 19:03, Holmes,David A wrote: > >> Additionally, and perhaps most significantly for deterministic network >> design, the copper cards share input hardware buffers for every 8 ports. >> Running one port of the 8 at wire speed wil

Re: Alternatives to storm-control on Cat 6509.

2009-08-24 Thread Nick Hilliard
On 24/08/2009 19:03, Holmes,David A wrote: Additionally, and perhaps most significantly for deterministic network design, the copper cards share input hardware buffers for every 8 ports. Running one port of the 8 at wire speed will cause input drops on the other 7 ports. Also, the cards connect t

Re: Alternatives to storm-control on Cat 6509.

2009-08-24 Thread Roland Dobbins
On Aug 25, 2009, at 1:03 AM, Holmes,David A wrote: In my opinion the Sup32 platform has some limitations when the technology is considered for high data rate, deterministic carrier customer-facing scenarios The hardware-based FPM is interesting. --

RE: Alternatives to storm-control on Cat 6509.

2009-08-24 Thread Holmes,David A
009 3:40 AM To: nanog@nanog.org Subject: Alternatives to storm-control on Cat 6509. Hello, I have several Catalyst 6500 (Supervisor 32) aggregation switches with WS-X6148A-GE-TX and WS-X6148-GE-TX line cards. These line cards do not support storm-control/broadcast suppression. This impacted us

Re: Alternatives to storm-control on Cat 6509.

2009-08-22 Thread Mikael Abrahamsson
On Sat, 22 Aug 2009, Sean Donelan wrote: But in a service provider network (or any managed network), is there any reason why a customer needs to hear other customer's broadcasts? In practice, are there any useful broadcast messages in a multi-customer environment that can't/shouldn't be proxie

Re: Alternatives to storm-control on Cat 6509.

2009-08-22 Thread Sean Donelan
On Fri, 21 Aug 2009, Roland Dobbins wrote: there are two things you care about: storm control and port security (mac address counting). Chopping up the layer-2 broadcast domain for a given VLAN into smaller pieces via pVLANs can't hurt, either, as long as the hosts have no need to talk to one

Re: Alternatives to storm-control on Cat 6509.

2009-08-22 Thread Nick Hilliard
On 22/08/2009 06:26, Andrew Parnell wrote: The 67xx series cards aren't supported by the sup32, though. Would 65xx line cards do the trick? unfortunately not: http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/storm.html • The following LAN sw

Re: Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Andrew Parnell
> > Yes, you replace your 61xx cards with 67xx cards. You can't do this sort > of thing with qos or copp. The 67xx series cards aren't supported by the sup32, though. Would 65xx line cards do the trick? Andrew

Re: Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Nick Hilliard
On 21/08/2009 17:04, Roland Dobbins wrote: Yes, but this is evil and dangerous in a customer-facing environment; transparent mode is the preferred option, in most circumstances. It is very evil, yes. SXH and later support VTPv3 which allows you to disable VTP on a per port basis. But as you

Re: Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Roland Dobbins
On Aug 21, 2009, at 10:57 PM, Nick Hilliard wrote: Or unless you're running VTP Yes, but this is evil and dangerous in a customer-facing environment; transparent mode is the preferred option, in most circumstances. --- Ro

Re: Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Nick Hilliard
On 21/08/2009 16:39, Roland Dobbins wrote: Chopping up the layer-2 broadcast domain for a given VLAN into smaller pieces via pVLANs can't hurt, either, as long as the hosts have no need to talk to one another - and it has other benefits, as well. Unless your broadcast storm happens on an untagg

Re: Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Jack Bates
Roland Dobbins wrote: Chopping up the layer-2 broadcast domain for a given VLAN into smaller pieces via pVLANs can't hurt, either, as long as the hosts have no need to talk to one another - and it has other benefits, as well. Or you hit the extreme DSL concentrator end where you crank out q-in

Re: Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Roland Dobbins
On Aug 21, 2009, at 10:23 PM, Nick Hilliard wrote: there are two things you care about: storm control and port security (mac address counting). Chopping up the layer-2 broadcast domain for a given VLAN into smaller pieces via pVLANs can't hurt, either, as long as the hosts have no need t

Re: Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Nick Hilliard
Peter, This question would be better directed at cisco-nsp, but... On 21/08/2009 11:39, Peter George wrote: I have several Catalyst 6500 (Supervisor 32) aggregation switches with WS-X6148A-GE-TX and WS-X6148-GE-TX line cards. These line cards do not support storm-control/broadcast suppression.

Alternatives to storm-control on Cat 6509.

2009-08-21 Thread Peter George
Hello, I have several Catalyst 6500 (Supervisor 32) aggregation switches with WS-X6148A-GE-TX and WS-X6148-GE-TX line cards. These line cards do not support storm-control/broadcast suppression. This impacted us badly during a recent spanning tree event. As it stands, we are at risk of overwhel