Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-08 Thread Watson, Bob
Carrier oem churn (turnover /agitation cycles)
First mover for features happen and leapfrog but the ones that matter get 
adopted across the line in time.  


 On May 7, 2015, at 8:40 PM, Josh Reynolds j...@spitwspots.com wrote:
 
 What churn rates are you talking about?
 
 Josh Reynolds
 CIO, SPITwSPOTS
 www.spitwspots.com
 
 On 05/07/2015 05:36 PM, Watson, Bob wrote:
 Many of these churn rates result from problems  self inflicted hence all the 
 dramatic sdn promises, popularity in abstractions, Api all the things, let's 
 go yang/netconf and retrofit every ietf standard.  There's benefits  but 
 gotta rant a little. What's better than correct? Well over correct of course.
 
 
 
 
 On May 7, 2015, at 12:17 PM, Josh Reynolds j...@spitwspots.com wrote:
 
 You know where these people wouldn't fit? W/ISPs.
 
 Every three years or so you are forklifting the majority of your wireless 
 PtMP for either a new series or a totally different vendor. New backhaul 
 vendors often. You're building AC and DC power plants. You likely touch 
 Cisco, juniper, HP, mikrotik, ubiquiti, Linux, windows, *BSD/pfsense, 
 lucent, accedian/ciena, etc due to various client and network requirements 
 all in the same week, AND you have to make them work together nicely :)
 
 It's not the environment for somebody like that, and I truly don't 
 understand how people of that.. caliber end up working on large scale 
 WANs and global transit networks.
 
 Frankly, it scares me a bit.
 
 On May 7, 2015 9:07:35 AM AKDT, Craig cvulja...@gmail.com wrote:
 we do cry when we interview people that claim to have advanced
 knowledge of BGP and we ask them some very basic BGP questions, and we
 get
 a blank stare.
 
 On Thu, May 7, 2015 at 12:49 PM, Rob Seastrom r...@seastrom.com wrote:
 
 Josh Reynolds j...@spitwspots.com writes:
 
 It really bothers me to see that people in this industry are so
 worried about a change of syntax or terminology. If there's one
 thing about the big vendors that bothers me, it's that these
 batteries of vendor specific tests have allowed many techs to get
 lazy. They simply can't seem to operate well, if at all, in a
 non-Cisco (primarily) environment.
 If that bothers you, I recommend you not look at what passes for a
 system administrator these days.  It will make you cry.
 
 -r
 -- 
 Sent from my Android device with K-9 Mail. Please excuse my brevity.
 


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Tim Franklin
 I am worried as most tech's know Cisco and Juniper, so going to ALU would
 be a learning curve based on replies I am getting off list.

It's definitely quite different from the CLI.  I'm still dabbling, but the guys 
here who have been through the training and are immersed in it really like it.  
We're using a couple for feature-rich BNG - lots of MLPPP at high bandwidths 
(for broadband), heavyweight QoS, BGP to the CE, etc.  It's very controllable 
by RADIUS - template configs that you can fill in the values for, rather than 
the Cisco approach of AVPs with pages of config in.

ALU have an e-learning SR-OS introduction course, which is going down pretty 
well for jump-starting our Ops people.

Regards,
Tim.


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Josh Reynolds
LOL :)

On May 7, 2015 9:38:15 AM AKDT, Rob Seastrom r...@seastrom.com wrote:

More like at least be willing to man up and learn your way around
some platform other than RHEL without whining if there is a business
need for it.

-r

Josh Reynolds j...@spitwspots.com writes:

 *grumble, grumble, grumble*
 Get off my lawn!
 :)


 On May 7, 2015 8:49:43 AM AKDT, Rob Seastrom r...@seastrom.com wrote:

   
  
Josh Reynolds j...@spitwspots.com writes:
  

  


 It really bothers me to see that people in this
   industry are so
worried about a change of syntax or terminology. If
   there's one
thing about the big vendors that bothers me, it's that
   these
batteries of vendor specific tests have allowed many
   techs to get
lazy. They simply can't seem to operate well, if at all,
   in a
non-Cisco (primarily) environment.
   

   If that bothers you, I recommend you not look at what
passes
  for a
  system administrator these days. It will make you cry.
  
  -r
  
  
  


 --
 Sent from my Android device with K-9 Mail. Please excuse my brevity.

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Mick O'Donovan
+1 for the command structure and configuration being pretty simple to 
follow if you're used to a Cisco or Juniper.


In the main they are pretty good at what they do I guess but I'm not 
sure whether or not we're having seriously bad luck or there's something 
else a miss but sadly we've had a near 50% hardware failure rate on some 
of the cards we have deployed in our 7750 SR12 infrastructure.


Reply off list if you need any more information.

Mick

--
Mick O'Donovan | Network Engineer | BT Ireland |
Website: http://www.btireland.net
Looking Glass: http://lg.as2110.net
Peering Record: http://as2110.peeringdb.com
AS-SET Macro: AS-BTIRE | ASN: 2110


On 07/05/15 05:29, Phil Bedard wrote:

The show stuff is certainly there but the config is a bit different.  You may have to get 
used to using the info command.  :)

They also use logical IP interfaces which are then tied to physical, you don't directly 
configure L3 on a physical interface.  You also have designations between service and 
network physical interfaces, although nowadays they can be set as hybrid..

It's really pretty simple if you are used to a Cisco or Juniper.  They have tab 
and ? completion now for both commands as well as elements similar to Junos 
which is helpful.

Phil

-Original Message-
From: Bob Evans b...@fiberinternetcenter.com
Sent: ‎5/‎6/‎2015 11:55 PM
To: nanog@nanog.org nanog@nanog.org
Subject: Re: Alcatel-Lucent 7750 Service Router (SR)


I will be getting one to try.  I am pretty sure it will support the ol'
show ?   ,config  ?  If not that might be a problem :-)

Thank You
Bob Evans
CTO





What's the price point of an SR-A4?  Comparable to the MX104 or ASR9001?

-- Stephen

On 2015-05-06 7:13 PM, Craig wrote:

If you know Juniper and Cisco, the learning curve isn't so bad to pick
up
the ALU CLI, after working with it for a brief time, you catch on
quickly.
Their products are quite impressive, and a # of the carriers, are moving
to
them and some have already moved to them and are quite happy with their
decision.


On Wed, May 6, 2015 at 6:24 PM, Colton Conor colton.co...@gmail.com
wrote:


I am worried as most tech's know Cisco and Juniper, so going to ALU
would
be a learning curve based on replies I am getting off list.

On Wed, May 6, 2015 at 5:22 PM, Dan Snyder sliple...@gmail.com wrote:



They are definitely good for that. We use them in part of our network
for
something very similar.

I am not sure why they aren't mentioned that much. I know that they
have
been pretty popular in the past couple years.

We are planning on using 7750 SR-a4's in the future but right now we
mainly have 7750SR7/12s.

Sent from my iPhone

On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com
wrote:

Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
never mentioned, but Juniper MX and Cisco are all day long?

The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.

On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com
wrote:


We have been using them for almost 8 years now and have been pretty
happy. What are you looking to use them for?

Sent from my iPhone


On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com

wrote:


I was wondering if anyone was using a  Alcatel-Lucent 7750 Service

Router

(SR) in their network? How does this platform compare the the Cisco

ASR,

Brocade MLXe, and Juniper MX line?














Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Phil Bedard
Forgot to send this yesterday… 

We use them in our networks along with ASR9Ks and MXs.  There are a lot of them 
deployed around the world doing very similar things as ASRs and MXs.  The 
config is more like Juniper than Cisco IMHO.  Being kind of the “3rd” vendor 
they have a tendency to implement features proposed by both Cisco and Juniper 
faster than Cisco and Juniper when proposed by the other vendor.  For instance 
Segment Routing is a Cisco thing, but ALU has already implemented it in their 
latest 13.0 software, Juniper is sort of dragging their feet on it because it’s 
a Cisco thing.   Same goes for NG-MVPN (BGP signaled multicast VPN).  Cisco 
dragged their feet on it because it was a Juniper thing, ALU had no issues 
implementing it much sooner.  Most of ALUs innovation is on the MPLS services 
side.  We use them for business VPN (L2 and L3) but the underlying protocols 
are all standard stuff and interoperate with everything else. 

Phil  




-Original Message-
From: Colton Conor
Date: Wednesday, May 6, 2015 at 17:48
To: NANOG
Subject: Alcatel-Lucent 7750 Service Router (SR)

I was wondering if anyone was using a  Alcatel-Lucent 7750 Service Router
(SR) in their network? How does this platform compare the the Cisco ASR,
Brocade MLXe, and Juniper MX line?



Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Chris Boyd

 On May 6, 2015, at 5:24 PM, Colton Conor colton.co...@gmail.com wrote:
 
 I am worried as most tech's know Cisco and Juniper, so going to ALU would
 be a learning curve based on replies I am getting off list.

It’s not that hard to learn if you know the basics of IP routing.  I just did 
an implementation of A-L 7705 SAR 8s and 18s.  Now I really wish that Cisco 
supported the “info” command.

—Chris



Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Craig
yep.. its way easier and faster to take a look at what is configured:

A:R01configservicevprn# interface to-what-ever-eBGP
A:R01configservicevprnif# info
--
description L3 Ckt ID: 
enable-ingress-stats
cpu-protection 231
address 299.299.299.299/30
cflowd interface
ipv6
address 2001::x::x/126
exit
sap 1/1/2 create
cpu-protection 231
ingress
filter ip 3356
filter ipv6 3356
flowspec
exit
exit
--







On Thu, May 7, 2015 at 12:08 PM, Chris Boyd cb...@gizmopartners.com wrote:


  On May 6, 2015, at 5:24 PM, Colton Conor colton.co...@gmail.com wrote:
 
  I am worried as most tech's know Cisco and Juniper, so going to ALU would
  be a learning curve based on replies I am getting off list.

 It’s not that hard to learn if you know the basics of IP routing.  I just
 did an implementation of A-L 7705 SAR 8s and 18s.  Now I really wish that
 Cisco supported the “info” command.

 —Chris




Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Rob Seastrom

Josh Reynolds j...@spitwspots.com writes:

 It really bothers me to see that people in this industry are so
 worried about a change of syntax or terminology. If there's one
 thing about the big vendors that bothers me, it's that these
 batteries of vendor specific tests have allowed many techs to get
 lazy. They simply can't seem to operate well, if at all, in a
 non-Cisco (primarily) environment.

If that bothers you, I recommend you not look at what passes for a
system administrator these days.  It will make you cry.

-r




Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Tim Franklin
 It really bothers me to see that people in this industry are so worried about
 a change of syntax or terminology. If there's one thing about the big
 vendors that bothers me, it's that these batteries of vendor specific tests
 have allowed many techs to get lazy. They simply can't seem to operate
 well, if at all, in a non-Cisco (primarily) environment.

I'd half-agree :)

Making it's different in and of itself a reason not to use a particular 
vendor does seem to head towards laziness.

But with the best will in the world, your good engineers *will* be slower until 
they familiarise with the new mind-maps (particularly things like the 
logical/physical split, SAPs, etc on the ALU) and the new magic words - 
although hopefully they'll be excited to learn something new too.  Your weaker 
engineers are going to need more of a push and/or some help, and the further 
towards helpdesk and scripts you get, the more you're going to need to provide 
training - be that internal, external, new scripts and cribs sheets or 
whatever.  That's an impact and cost it's unwise to ignore.

Regards,
Tim.


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Josh Reynolds
*grumble, grumble, grumble*

Get off my lawn!

:)

On May 7, 2015 8:49:43 AM AKDT, Rob Seastrom r...@seastrom.com wrote:

Josh Reynolds j...@spitwspots.com writes:

 It really bothers me to see that people in this industry are so
 worried about a change of syntax or terminology. If there's one
 thing about the big vendors that bothers me, it's that these
 batteries of vendor specific tests have allowed many techs to get
 lazy. They simply can't seem to operate well, if at all, in a
 non-Cisco (primarily) environment.

If that bothers you, I recommend you not look at what passes for a
system administrator these days.  It will make you cry.

-r

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Trent Farrell
And if you ever need to find out what can commands exist for a certain
string xxx

tree flat detail | match xxx

is a huge helper when learning.

e.g.

A:router# tree flat detail | match aspath-regex
show router bgp routes [family [type mvpn-type]] aspath-regex reg-ex
show router bgp routes [family [l2vpn-type]] aspath-regex reg-ex

On Thu, May 7, 2015 at 9:16 AM, Craig cvulja...@gmail.com wrote:

 yep.. its way easier and faster to take a look at what is configured:

 A:R01configservicevprn# interface to-what-ever-eBGP
 A:R01configservicevprnif# info
 --
 description L3 Ckt ID: 
 enable-ingress-stats
 cpu-protection 231
 address 299.299.299.299/30
 cflowd interface
 ipv6
 address 2001::x::x/126
 exit
 sap 1/1/2 create
 cpu-protection 231
 ingress
 filter ip 3356
 filter ipv6 3356
 flowspec
 exit
 exit
 --







 On Thu, May 7, 2015 at 12:08 PM, Chris Boyd cb...@gizmopartners.com
 wrote:

 
   On May 6, 2015, at 5:24 PM, Colton Conor colton.co...@gmail.com
 wrote:
  
   I am worried as most tech's know Cisco and Juniper, so going to ALU
 would
   be a learning curve based on replies I am getting off list.
 
  It’s not that hard to learn if you know the basics of IP routing.  I just
  did an implementation of A-L 7705 SAR 8s and 18s.  Now I really wish that
  Cisco supported the “info” command.
 
  —Chris
 
 




-- 

*Trent Farrell*

*Riot Games*

*IP Network Engineer*

E: tfarr...@riotgames.com | IE:  +353 83 446 6809 | US: +1 424 285 9825

Summoner name: Foro


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Josh Reynolds
It really bothers me to see that people in this industry are so worried about a 
change of syntax or terminology. If there's one thing about the big vendors 
that bothers me, it's that these batteries of vendor specific tests have 
allowed many techs to get lazy. They simply can't seem to operate well, if at 
all, in a non-Cisco (primarily) environment. 


On May 7, 2015 1:12:11 AM AKDT, Tim Franklin t...@pelican.org wrote:
 I am worried as most tech's know Cisco and Juniper, so going to ALU
would
 be a learning curve based on replies I am getting off list.

It's definitely quite different from the CLI.  I'm still dabbling, but
the guys here who have been through the training and are immersed in it
really like it.  We're using a couple for feature-rich BNG - lots of
MLPPP at high bandwidths (for broadband), heavyweight QoS, BGP to the
CE, etc.  It's very controllable by RADIUS - template configs that you
can fill in the values for, rather than the Cisco approach of AVPs with
pages of config in.

ALU have an e-learning SR-OS introduction course, which is going down
pretty well for jump-starting our Ops people.

Regards,
Tim.

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Craig
we do cry when we interview people that claim to have advanced
knowledge of BGP and we ask them some very basic BGP questions, and we get
a blank stare.

On Thu, May 7, 2015 at 12:49 PM, Rob Seastrom r...@seastrom.com wrote:


 Josh Reynolds j...@spitwspots.com writes:

  It really bothers me to see that people in this industry are so
  worried about a change of syntax or terminology. If there's one
  thing about the big vendors that bothers me, it's that these
  batteries of vendor specific tests have allowed many techs to get
  lazy. They simply can't seem to operate well, if at all, in a
  non-Cisco (primarily) environment.

 If that bothers you, I recommend you not look at what passes for a
 system administrator these days.  It will make you cry.

 -r





Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Josh Reynolds
You know where these people wouldn't fit? W/ISPs.

Every three years or so you are forklifting the majority of your wireless PtMP 
for either a new series or a totally different vendor. New backhaul vendors 
often. You're building AC and DC power plants. You likely touch Cisco, juniper, 
HP, mikrotik, ubiquiti, Linux, windows, *BSD/pfsense, lucent, accedian/ciena, 
etc due to various client and network requirements all in the same week, AND 
you have to make them work together nicely :)

It's not the environment for somebody like that, and I truly don't understand 
how people of that.. caliber end up working on large scale WANs and global 
transit networks.

Frankly, it scares me a bit.

On May 7, 2015 9:07:35 AM AKDT, Craig cvulja...@gmail.com wrote:
we do cry when we interview people that claim to have advanced
knowledge of BGP and we ask them some very basic BGP questions, and we
get
a blank stare.

On Thu, May 7, 2015 at 12:49 PM, Rob Seastrom r...@seastrom.com wrote:


 Josh Reynolds j...@spitwspots.com writes:

  It really bothers me to see that people in this industry are so
  worried about a change of syntax or terminology. If there's one
  thing about the big vendors that bothers me, it's that these
  batteries of vendor specific tests have allowed many techs to get
  lazy. They simply can't seem to operate well, if at all, in a
  non-Cisco (primarily) environment.

 If that bothers you, I recommend you not look at what passes for a
 system administrator these days.  It will make you cry.

 -r




-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-07 Thread Rob Seastrom

More like at least be willing to man up and learn your way around
some platform other than RHEL without whining if there is a business
need for it.

-r

Josh Reynolds j...@spitwspots.com writes:

 *grumble, grumble, grumble*
 Get off my lawn!
 :)


 On May 7, 2015 8:49:43 AM AKDT, Rob Seastrom r...@seastrom.com wrote:

   
  
Josh Reynolds j...@spitwspots.com writes:
  

  


 It really bothers me to see that people in this
   industry are so
worried about a change of syntax or terminology. If
   there's one
thing about the big vendors that bothers me, it's that
   these
batteries of vendor specific tests have allowed many
   techs to get
lazy. They simply can't seem to operate well, if at all,
   in a
non-Cisco (primarily) environment.
   

   If that bothers you, I recommend you not look at what passes
  for a
  system administrator these days. It will make you cry.
  
  -r
  
  
  


 --
 Sent from my Android device with K-9 Mail. Please excuse my brevity.


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Dan Snyder

They are definitely good for that. We use them in part of our network for 
something very similar. 

I am not sure why they aren't mentioned that much. I know that they have been 
pretty popular in the past couple years.

We are planning on using 7750 SR-a4's in the future but right now we mainly 
have 7750SR7/12s.

Sent from my iPhone

 On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com wrote:
 
 Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU never 
 mentioned, but Juniper MX and Cisco are all day long? 
 
 The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer. 
 
 On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com wrote:
 We have been using them for almost 8 years now and have been pretty happy. 
 What are you looking to use them for?
 
 Sent from my iPhone
 
  On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com wrote:
 
  I was wondering if anyone was using a  Alcatel-Lucent 7750 Service Router
  (SR) in their network? How does this platform compare the the Cisco ASR,
  Brocade MLXe, and Juniper MX line?
 


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Colton Conor
I am worried as most tech's know Cisco and Juniper, so going to ALU would
be a learning curve based on replies I am getting off list.

On Wed, May 6, 2015 at 5:22 PM, Dan Snyder sliple...@gmail.com wrote:


 They are definitely good for that. We use them in part of our network for
 something very similar.

 I am not sure why they aren't mentioned that much. I know that they have
 been pretty popular in the past couple years.

 We are planning on using 7750 SR-a4's in the future but right now we
 mainly have 7750SR7/12s.

 Sent from my iPhone

 On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com wrote:

 Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
 never mentioned, but Juniper MX and Cisco are all day long?

 The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.

 On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com wrote:

 We have been using them for almost 8 years now and have been pretty
 happy. What are you looking to use them for?

 Sent from my iPhone

  On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com
 wrote:
 
  I was wondering if anyone was using a  Alcatel-Lucent 7750 Service
 Router
  (SR) in their network? How does this platform compare the the Cisco ASR,
  Brocade MLXe, and Juniper MX line?





Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Craig
If you know Juniper and Cisco, the learning curve isn't so bad to pick up
the ALU CLI, after working with it for a brief time, you catch on quickly.
Their products are quite impressive, and a # of the carriers, are moving to
them and some have already moved to them and are quite happy with their
decision.


On Wed, May 6, 2015 at 6:24 PM, Colton Conor colton.co...@gmail.com wrote:

 I am worried as most tech's know Cisco and Juniper, so going to ALU would
 be a learning curve based on replies I am getting off list.

 On Wed, May 6, 2015 at 5:22 PM, Dan Snyder sliple...@gmail.com wrote:

 
  They are definitely good for that. We use them in part of our network for
  something very similar.
 
  I am not sure why they aren't mentioned that much. I know that they have
  been pretty popular in the past couple years.
 
  We are planning on using 7750 SR-a4's in the future but right now we
  mainly have 7750SR7/12s.
 
  Sent from my iPhone
 
  On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com wrote:
 
  Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
  never mentioned, but Juniper MX and Cisco are all day long?
 
  The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.
 
  On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com wrote:
 
  We have been using them for almost 8 years now and have been pretty
  happy. What are you looking to use them for?
 
  Sent from my iPhone
 
   On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com
  wrote:
  
   I was wondering if anyone was using a  Alcatel-Lucent 7750 Service
  Router
   (SR) in their network? How does this platform compare the the Cisco
 ASR,
   Brocade MLXe, and Juniper MX line?
 
 
 



Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Dan Snyder
We have been using them for almost 8 years now and have been pretty happy. What 
are you looking to use them for?

Sent from my iPhone

 On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com wrote:
 
 I was wondering if anyone was using a  Alcatel-Lucent 7750 Service Router
 (SR) in their network? How does this platform compare the the Cisco ASR,
 Brocade MLXe, and Juniper MX line?


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Colton Conor
Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
never mentioned, but Juniper MX and Cisco are all day long?

The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.

On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com wrote:

 We have been using them for almost 8 years now and have been pretty happy.
 What are you looking to use them for?

 Sent from my iPhone

  On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com wrote:
 
  I was wondering if anyone was using a  Alcatel-Lucent 7750 Service Router
  (SR) in their network? How does this platform compare the the Cisco ASR,
  Brocade MLXe, and Juniper MX line?



Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Stephen Fulton

What's the price point of an SR-A4?  Comparable to the MX104 or ASR9001?

-- Stephen

On 2015-05-06 7:13 PM, Craig wrote:

If you know Juniper and Cisco, the learning curve isn't so bad to pick up
the ALU CLI, after working with it for a brief time, you catch on quickly.
Their products are quite impressive, and a # of the carriers, are moving to
them and some have already moved to them and are quite happy with their
decision.


On Wed, May 6, 2015 at 6:24 PM, Colton Conor colton.co...@gmail.com wrote:


I am worried as most tech's know Cisco and Juniper, so going to ALU would
be a learning curve based on replies I am getting off list.

On Wed, May 6, 2015 at 5:22 PM, Dan Snyder sliple...@gmail.com wrote:



They are definitely good for that. We use them in part of our network for
something very similar.

I am not sure why they aren't mentioned that much. I know that they have
been pretty popular in the past couple years.

We are planning on using 7750 SR-a4's in the future but right now we
mainly have 7750SR7/12s.

Sent from my iPhone

On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com wrote:

Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
never mentioned, but Juniper MX and Cisco are all day long?

The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.

On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com wrote:


We have been using them for almost 8 years now and have been pretty
happy. What are you looking to use them for?

Sent from my iPhone


On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com

wrote:


I was wondering if anyone was using a  Alcatel-Lucent 7750 Service

Router

(SR) in their network? How does this platform compare the the Cisco

ASR,

Brocade MLXe, and Juniper MX line?









Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Scott Weeks

 On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com wrote:
 
 I was wondering if anyone was using a  
 Alcatel-Lucent 7750 Service Router (SR) 
 in their network? How does this platform 
 compare the the Cisco ASR, Brocade MLXe, 
 and Juniper MX line?
-


I haven't used them for nearly 5 years now, 
but at the time they were really good.  
Likely, they're still the same. Search the 
NANOG archives, there have been discussions 
before.  Pay attention to the after the sale 
service stuff in the archives.  Also Jared 
Mauch has a ML for them at puck.nether.net, 
but it's a really low volume list.  ALU
engineers hang out there.


scott


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Scott Weeks


--- colton.co...@gmail.com wrote:
From: Colton Conor colton.co...@gmail.com

Why is ALU never mentioned, but Juniper MX 
and Cisco are all day long?
-


Because they're really expensive, mostly bell 
head networks use them and we're mostly bell
head free on NANOG...  ;-)

scott


Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Bob Evans

I will be getting one to try.  I am pretty sure it will support the ol'  
show ?   ,config  ?  If not that might be a problem :-)

Thank You
Bob Evans
CTO




 What's the price point of an SR-A4?  Comparable to the MX104 or ASR9001?

 -- Stephen

 On 2015-05-06 7:13 PM, Craig wrote:
 If you know Juniper and Cisco, the learning curve isn't so bad to pick
 up
 the ALU CLI, after working with it for a brief time, you catch on
 quickly.
 Their products are quite impressive, and a # of the carriers, are moving
 to
 them and some have already moved to them and are quite happy with their
 decision.


 On Wed, May 6, 2015 at 6:24 PM, Colton Conor colton.co...@gmail.com
 wrote:

 I am worried as most tech's know Cisco and Juniper, so going to ALU
 would
 be a learning curve based on replies I am getting off list.

 On Wed, May 6, 2015 at 5:22 PM, Dan Snyder sliple...@gmail.com wrote:


 They are definitely good for that. We use them in part of our network
 for
 something very similar.

 I am not sure why they aren't mentioned that much. I know that they
 have
 been pretty popular in the past couple years.

 We are planning on using 7750 SR-a4's in the future but right now we
 mainly have 7750SR7/12s.

 Sent from my iPhone

 On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com
 wrote:

 Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
 never mentioned, but Juniper MX and Cisco are all day long?

 The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.

 On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com
 wrote:

 We have been using them for almost 8 years now and have been pretty
 happy. What are you looking to use them for?

 Sent from my iPhone

 On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com
 wrote:

 I was wondering if anyone was using a  Alcatel-Lucent 7750 Service
 Router
 (SR) in their network? How does this platform compare the the Cisco
 ASR,
 Brocade MLXe, and Juniper MX line?









Re: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Bruce
that second command is admin display-config or admin display-config |
match 

cheers

On Thu, May 7, 2015 at 1:53 PM, Bob Evans b...@fiberinternetcenter.com
wrote:


 I will be getting one to try.  I am pretty sure it will support the ol'
 show ?   ,config  ?  If not that might be a problem :-)

 Thank You
 Bob Evans
 CTO




  What's the price point of an SR-A4?  Comparable to the MX104 or ASR9001?
 
  -- Stephen
 
  On 2015-05-06 7:13 PM, Craig wrote:
  If you know Juniper and Cisco, the learning curve isn't so bad to pick
  up
  the ALU CLI, after working with it for a brief time, you catch on
  quickly.
  Their products are quite impressive, and a # of the carriers, are moving
  to
  them and some have already moved to them and are quite happy with their
  decision.
 
 
  On Wed, May 6, 2015 at 6:24 PM, Colton Conor colton.co...@gmail.com
  wrote:
 
  I am worried as most tech's know Cisco and Juniper, so going to ALU
  would
  be a learning curve based on replies I am getting off list.
 
  On Wed, May 6, 2015 at 5:22 PM, Dan Snyder sliple...@gmail.com
 wrote:
 
 
  They are definitely good for that. We use them in part of our network
  for
  something very similar.
 
  I am not sure why they aren't mentioned that much. I know that they
  have
  been pretty popular in the past couple years.
 
  We are planning on using 7750 SR-a4's in the future but right now we
  mainly have 7750SR7/12s.
 
  Sent from my iPhone
 
  On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com
  wrote:
 
  Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
  never mentioned, but Juniper MX and Cisco are all day long?
 
  The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.
 
  On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com
  wrote:
 
  We have been using them for almost 8 years now and have been pretty
  happy. What are you looking to use them for?
 
  Sent from my iPhone
 
  On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com
  wrote:
 
  I was wondering if anyone was using a  Alcatel-Lucent 7750 Service
  Router
  (SR) in their network? How does this platform compare the the Cisco
  ASR,
  Brocade MLXe, and Juniper MX line?
 
 
 
 
 





RE: Alcatel-Lucent 7750 Service Router (SR)

2015-05-06 Thread Phil Bedard
The show stuff is certainly there but the config is a bit different.  You may 
have to get used to using the info command.  :)

They also use logical IP interfaces which are then tied to physical, you don't 
directly configure L3 on a physical interface.  You also have designations 
between service and network physical interfaces, although nowadays they can be 
set as hybrid.. 

It's really pretty simple if you are used to a Cisco or Juniper.  They have tab 
and ? completion now for both commands as well as elements similar to Junos 
which is helpful.  

Phil

-Original Message-
From: Bob Evans b...@fiberinternetcenter.com
Sent: ‎5/‎6/‎2015 11:55 PM
To: nanog@nanog.org nanog@nanog.org
Subject: Re: Alcatel-Lucent 7750 Service Router (SR)


I will be getting one to try.  I am pretty sure it will support the ol'  
show ?   ,config  ?  If not that might be a problem :-)

Thank You
Bob Evans
CTO




 What's the price point of an SR-A4?  Comparable to the MX104 or ASR9001?

 -- Stephen

 On 2015-05-06 7:13 PM, Craig wrote:
 If you know Juniper and Cisco, the learning curve isn't so bad to pick
 up
 the ALU CLI, after working with it for a brief time, you catch on
 quickly.
 Their products are quite impressive, and a # of the carriers, are moving
 to
 them and some have already moved to them and are quite happy with their
 decision.


 On Wed, May 6, 2015 at 6:24 PM, Colton Conor colton.co...@gmail.com
 wrote:

 I am worried as most tech's know Cisco and Juniper, so going to ALU
 would
 be a learning curve based on replies I am getting off list.

 On Wed, May 6, 2015 at 5:22 PM, Dan Snyder sliple...@gmail.com wrote:


 They are definitely good for that. We use them in part of our network
 for
 something very similar.

 I am not sure why they aren't mentioned that much. I know that they
 have
 been pretty popular in the past couple years.

 We are planning on using 7750 SR-a4's in the future but right now we
 mainly have 7750SR7/12s.

 Sent from my iPhone

 On May 6, 2015, at 6:00 PM, Colton Conor colton.co...@gmail.com
 wrote:

 Taking full BGP routes from 4+ carriers on 10G connections. Why is ALU
 never mentioned, but Juniper MX and Cisco are all day long?

 The new 7750 SR-a4 looks like a Juniper MX80 or MX104 killer.

 On Wed, May 6, 2015 at 4:58 PM, Dan Snyder sliple...@gmail.com
 wrote:

 We have been using them for almost 8 years now and have been pretty
 happy. What are you looking to use them for?

 Sent from my iPhone

 On May 6, 2015, at 5:48 PM, Colton Conor colton.co...@gmail.com
 wrote:

 I was wondering if anyone was using a  Alcatel-Lucent 7750 Service
 Router
 (SR) in their network? How does this platform compare the the Cisco
 ASR,
 Brocade MLXe, and Juniper MX line?









Re: Alcatel-Lucent and France Tel deploy 400G for testing

2013-02-08 Thread Christophe Lucas

Le 2013-02-07 15:40, Jay Ashworth a écrit :

- Original Message -

From: Adam Vitkovsky adam.vitkov...@swan.sk


Can't find any statement whether the nifty proclaimed 400G 
wavelength

is indeed a single 100GHz channel or just a bundled supper channel
The only hint is the total capacity of a fiber of 17.6 Tbps with 44
wavelengths which is roughly the whole 100GHz spaced grid


Well, if you click through to his earlier piece, at


http://newswire.telecomramblings.com/2013/02/france-telecom-orange-and-alcatel-lucent-deploy-worlds-first-live-400-gbps-per-wavelength-optical-link/

he does explicitly say 400Gb/s per wavelength...

Cheers,
-- jra


Hello,

From France Telecom :

http://www.orange.com/en/press/press-releases/press-releases-2013/France-Telecom-Orange-and-Alcatel-Lucent-deploy-world-s-first-live-400-Gbps-per-wavelength-optical-link

As said by Jay : 400Gbits per wavelength :)

Best regards,
--
Christophe Lucas
http://www.clucas.fr/blog/



RE: Alcatel-Lucent and France Tel deploy 400G for testing

2013-02-07 Thread Adam Vitkovsky
Can't find any statement whether the nifty proclaimed 400G wavelength is indeed 
a single 100GHz channel or just a bundled supper channel 
The only hint is the total capacity of a fiber of 17.6 Tbps with 44 wavelengths 
which is roughly the whole 100GHz spaced grid

adam
-Original Message-
From: Jay Ashworth [mailto:j...@baylink.com] 
Sent: Wednesday, February 06, 2013 7:04 PM
To: NANOG
Subject: Alcatel-Lucent and France Tel deploy 400G for testing

http://www.telecomramblings.com/2013/02/alcatel-lucent-and-france-telecom-surpass-100g-implement-400g/

-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates http://baylink.pitas.com 2000 Land Rover DII
St Petersburg FL USA   #natog  +1 727 647 1274





Re: Alcatel-Lucent and France Tel deploy 400G for testing

2013-02-07 Thread Jay Ashworth
- Original Message -
 From: Adam Vitkovsky adam.vitkov...@swan.sk

 Can't find any statement whether the nifty proclaimed 400G wavelength
 is indeed a single 100GHz channel or just a bundled supper channel
 The only hint is the total capacity of a fiber of 17.6 Tbps with 44
 wavelengths which is roughly the whole 100GHz spaced grid

Well, if you click through to his earlier piece, at

http://newswire.telecomramblings.com/2013/02/france-telecom-orange-and-alcatel-lucent-deploy-worlds-first-live-400-gbps-per-wavelength-optical-link/

he does explicitly say 400Gb/s per wavelength...

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates http://baylink.pitas.com 2000 Land Rover DII
St Petersburg FL USA   #natog  +1 727 647 1274



Re: Alcatel-Lucent

2010-03-09 Thread piotr sawicki


The worst thing in it was bgp proto .. Router was unable to withstand 
20+ peering sessions , most of that outgoing bgp session to customers 
, a few peerings , and only 1v2 incoming upstream providers
When there was instability/surge in bgp updates , router was able to 
break itself tcp sess. Dwnld bgp table (150,000prefix) took 2h or more 
...
Things done in hardware should be working although ( bridge .. , maybe 
label switching , vpls )  Tech support is very weak. Expect problems 
with interoperability .
Sorry to say that  .   It was 3+ years time ago , maybe they improved 
themself .. :)




Hi,

I must say we had very old timos 2.0R17 , as you now use 8.0 I guess ..
As most of my complains is against software , this may be improved - i 
hope it is :)

Hardware is solid,  'hard to kill'
Sorry for a bit preliminary assumptions about 7750SR platform .

// regards PiotrSawicki.



Re: Alcatel-Lucent

2010-03-09 Thread Phil Bedard
I've done some recent testing and while the BGP download time isn't blazing 
fast, it can load 400k routes and propagate them to 20 other peers in a few 
minutes.  Certainly not 2 hours. :)   I've also done quite a bit of interop 
testing with the other main vendors as well and have yet to run into anything 
major.  

Phil 


On Mar 9, 2010, at 1:03 PM, piotr sawicki wrote:

 
 The worst thing in it was bgp proto .. Router was unable to withstand 20+ 
 peering sessions , most of that outgoing bgp session to customers , a few 
 peerings , and only 1v2 incoming upstream providers
 When there was instability/surge in bgp updates , router was able to break 
 itself tcp sess. Dwnld bgp table (150,000prefix) took 2h or more ...
 Things done in hardware should be working although ( bridge .. , maybe label 
 switching , vpls )  Tech support is very weak. Expect problems with 
 interoperability .
 Sorry to say that  .   It was 3+ years time ago , maybe they improved 
 themself .. :)
 
 
 Hi,
 
 I must say we had very old timos 2.0R17 , as you now use 8.0 I guess ..
 As most of my complains is against software , this may be improved - i hope 
 it is :)
 Hardware is solid,  'hard to kill'
 Sorry for a bit preliminary assumptions about 7750SR platform .
 
 // regards PiotrSawicki.
 




Re: Alcatel-Lucent

2010-03-08 Thread piotr sawicki

Chris Wallace wrote:

I am hoping to get some peoples opinions on Alcatel-Lucent routers.  We are 
looking at the 7750 SR line and the 7450 ESS line.  We are currently a Cisco 
shop but these would be deployed in a completely new network delivering mostly 
MPLS based services and DIA.  Any comments are welcome,  good and bad.

---Chris
  

Hello !!

First time on the list :)

I'd like to say something in opposite . These are very weak routers ..
We ( SP on country level , PL ) had two of them , implemented in core , 
as pure ip routers .
The worst thing in it was bgp proto .. Router was unable to withstand 
20+ peering sessions , most of that outgoing bgp session to customers , 
a few peerings , and only 1v2 incoming upstream providers
When there was instability/surge in bgp updates , router was able to 
break itself tcp sess. Dwnld bgp table (150,000prefix) took 2h or more ...
Things done in hardware should be working although ( bridge .. , maybe 
label switching , vpls )  Tech support is very weak. Expect problems 
with interoperability .
Sorry to say that  .   It was 3+ years time ago , maybe they improved 
themself .. :)


If you want 2 spare chassis , we have them free
// best regards Piotr Sawicki .



Re: Alcatel-Lucent

2010-03-06 Thread Scott Weeks


--- jrh...@netconsonance.com wrote:
So my experience so far has been good product, good company, needs a real 
attitude adjustment in the support department.
-

ditto that!

scott



Re: Alcatel-Lucent

2010-03-04 Thread Dan Snyder
The 7750 and 7450 are really good products. We were a pure Cisco shop  
about three years ago and then started using the 7750. We are very  
happy with the product.


If you have any questions you can contact me off list.

Sent from my iPhone

On Mar 4, 2010, at 5:07 PM, Chris Wallace li...@iamchriswallace.com  
wrote:


I am hoping to get some peoples opinions on Alcatel-Lucent routers.   
We are looking at the 7750 SR line and the 7450 ESS line.  We are  
currently a Cisco shop but these would be deployed in a completely  
new network delivering mostly MPLS based services and DIA.  Any  
comments are welcome,  good and bad.


---Chris




Re: Alcatel-Lucent

2010-03-04 Thread Scott Weeks


--- li...@iamchriswallace.com wrote:
I am hoping to get some peoples opinions on Alcatel-Lucent routers.  We are 
looking at the 7750 SR line and the 7450 ESS line.  We are currently a Cisco 
shop but these would be deployed in a completely new network delivering mostly 
MPLS based services and DIA.  Any comments are welcome,  good and bad.
---


We deploy these.  They are very different from cisco (so there will be a big 
learning curve) and kick ass.  Be sure to go to 7.something as cflowd (their 
netflow) does not report correctly on things like ASN.

scott



Re: Alcatel-Lucent

2010-03-04 Thread Scott Weeks


--- li...@iamchriswallace.com wrote:
I am hoping to get some peoples opinions on Alcatel-Lucent routers.  We are 
looking at the 7750 SR line and the 7450 ESS line.  We are currently a Cisco 
shop but these would be deployed in a completely new network delivering mostly 
MPLS based services and DIA.  Any comments are welcome,  good and bad.
---


BTW, one example is you only have to deal with one command set for all boxes 
within a given version.  Good for programmatic thingies... :-)  Also, SAM (the 
element management system) has gotten better as well.

scott






Re: Alcatel-Lucent

2010-03-04 Thread Craig
Very good routers. We have been using them for several years now. Very  
solid product, and very easy to setup services: ie vprn/ vpls/ epipe,  
etc.


The qos on the box is very scalable. I could talk more about them off  
line with you or discuss more over phone.






On Mar 4, 2010, at 5:22 PM, Scott Weeks sur...@mauigateway.com  
wrote:





--- li...@iamchriswallace.com wrote:
I am hoping to get some peoples opinions on Alcatel-Lucent routers.   
We are looking at the 7750 SR line and the 7450 ESS line.  We are  
currently a Cisco shop but these would be deployed in a completely  
new network delivering mostly MPLS based services and DIA.  Any  
comments are welcome,  good and bad.

---


We deploy these.  They are very different from cisco (so there will  
be a big learning curve) and kick ass.  Be sure to go to  
7.something as cflowd (their netflow) does not report correctly on  
things like ASN.


scott





Re: Alcatel-Lucent

2010-03-04 Thread Chadwick Sorrell
I'll have to second everything everyone is saying.  Absolutely pleased
with everything about them.  Just wish I had more 7750s instead of
7450s.

On Thu, Mar 4, 2010 at 5:59 PM, Craig cvulja...@gmail.com wrote:
 Very good routers. We have been using them for several years now. Very solid
 product, and very easy to setup services: ie vprn/ vpls/ epipe, etc.

 The qos on the box is very scalable. I could talk more about them off line
 with you or discuss more over phone.





 On Mar 4, 2010, at 5:22 PM, Scott Weeks sur...@mauigateway.com wrote:



 --- li...@iamchriswallace.com wrote:
 I am hoping to get some peoples opinions on Alcatel-Lucent routers.  We
 are looking at the 7750 SR line and the 7450 ESS line.  We are currently a
 Cisco shop but these would be deployed in a completely new network
 delivering mostly MPLS based services and DIA.  Any comments are welcome,
  good and bad.
 ---


 We deploy these.  They are very different from cisco (so there will be a
 big learning curve) and kick ass.  Be sure to go to 7.something as cflowd
 (their netflow) does not report correctly on things like ASN.

 scott






Re: Alcatel-Lucent

2010-03-04 Thread Scott Weeks


--- mirot...@gmail.com wrote:
I'll have to second everything everyone is saying.  Absolutely pleased
with everything about them.  Just wish I had more 7750s instead of
7450s.
--


That reminds me of one thing that adds more complexity.  We carry our internet 
in a VPRN for various reasons.  The 7450s don't do BGP AFAIK in a VPRN.  So, if 
your downstream BGP customers will physically attach to the 7450 you'll have to 
epipe over to a 7750 to terminate BGP.  Then, since the epipe doesn't go down, 
you'll have to do BFD with the customer.  Many customers say do what?...  ;-) 
 If you don't do BFD they'll have to wait for the BGP session to time out.

scott



Re: Alcatel-Lucent VPN Firewall Brick

2009-10-26 Thread Justin M. Streiner

On Mon, 26 Oct 2009, Jay Nakamura wrote:


Looking for input on Alcatel-Lucent VPN Firewall Brick.  I can look up
spec and other published information but, as always, the devil is in
the detail and you just never know what wall you run into until you
actually try it so I wanted to see if anyone has used this and can
point out good/bad things about this device.

Our other option is Cisco IOS router right now.  Are there better
options than these two?


Fair warning: v6 honestly seems to have caught most firewall vendors with 
their pants down.


I've had Lucent Bricks hanging around here in various capacities for some 
time, and have been involved in a several bake-offs to some degree. 
Granted, the bricks we have are older models (1100s, mostly).  We're 
looking at some new options as well as a number of ours are going EOL 
soon.


Good:
* The code and a basic config is very small - just enough to get it on the
  network to communicate with the LSMS server and download its full
  config.
* Support is reasonably responsive.
* Rule changes can be staged pretty easily in the LSMS, and then the
  changes can be applied later, if you only do changes during maintenance
  windows.
* IPSEC LAN-to-LAN VPN interoperability is pretty good.  It can take a few
  tweaks to get things working with different vendors, but I've gotten
  VPNs working with Cisco routers, Cisco PIX/ASAs, Linksys, Checkpoint,
  Netscreen, etc...
* It does do TCP state enforcement (can be disabled) and you can configure
  the timeout if you enable enforcement.
* It does layer-2 firewalling, if you need it.
* Does partitions, which provides VRF-like functionality.
* Rate limiting and NAT are supported, but I don't know how robust the NAT
  support is - we don't use it.
* Logging is fairly robust but somewhat cryptic - it's not in a standard
  syslog format.  Writing a script to parse the logs and make them a
  little more human-friendly or convert them into a syslog format would be
  pretty straightforward.  Newer versions of LSMS might provide the option
  of logging in a syslog-compatible format.

Bad:
* Without the LSMS server(s), the Bricks are, quite literally, bricks.
  All of the management has to be done through the LSMS and its Windows-
  only GUI.  There is a command-line interface, but it is not very robust.
  Newer versions of LSMS might have a web front-end, but I don't know for
  sure.  If there is a web front-end to LSMS, the trick is finding out if
  it has feature parity with the Windows GUI (has presented an issue with
  other Lucent products).
* Licensing can be a PITA.
* Last time I looked at the IPSEC VPN client, it did not support Vista or
  64-bit XP.  I haven't looked into this in a long time, as we do not use
  the Bricks for landing client VPNs.  It's possible that Lucent has SSL
  VPN capabilities now.  No idea if they support Windows 7 yet.
* If things start failing or hanging in neat and interesting ways, more
  often than not, the issue can be fixed by restarting LSMS :)
* IPv6 support plans are unknown at this time.  Since we're migrating
  away from this platform, I haven't looked into Lucent's position on
  this.

I don't know if the newer models do 10G yet, but that might be worth 
checking if you plan to firewall customers who need lots of bandwidth.


We can talk offline if you want to discuss in more detail.

jms


If there is a better forum to post this question, my apologies.
Please direct me to the right place. :)

Our goal :

We want to provide managed firewall/VPN for Colo/DIA customers.

Our specific requirements are
- Able to provide VRF/virtual router per customer since address range
can overlap between customers.
- Able to do client based VPN to the inside network.  It could be
IPSec or SSL.  It has to support Vista/Win7-x64
- Able to do site to site VPN with various devices.(Cisco,
- Can rate limit traffic in and out.
- Control NAT per customer instance.
- Stateful firewall per customer instance.
- Good logging


Thanks!






RE: Alcatel-Lucent VPN Firewall Brick

2009-10-26 Thread Eric RICHARD
Hello,

I am working for a French ISP, we are working with this product in order to
provide a firewall for our VRF customers.

Quickly :

Used to :
* Firewall / NAT for IPV4 VRF 
* Rate limit bandwidth  sessions
* A few logging


Pro:
* stable
* ipsec  pptp passthrough

Cons :
* ugly java interface 



Really good feedbacks to provide .

If you need further detail I can share.

Eric

-Message d'origine-
De : Jay Nakamura [mailto:zeusda...@gmail.com] 
Envoyé : lundi 26 octobre 2009 16:56
À : NANOG
Objet : Alcatel-Lucent VPN Firewall Brick

Hello all,

Looking for input on Alcatel-Lucent VPN Firewall Brick.  I can look up
spec and other published information but, as always, the devil is in
the detail and you just never know what wall you run into until you
actually try it so I wanted to see if anyone has used this and can
point out good/bad things about this device.

Our other option is Cisco IOS router right now.  Are there better
options than these two?

If there is a better forum to post this question, my apologies.
Please direct me to the right place. :)

Our goal :

We want to provide managed firewall/VPN for Colo/DIA customers.

Our specific requirements are
- Able to provide VRF/virtual router per customer since address range
can overlap between customers.
- Able to do client based VPN to the inside network.  It could be
IPSec or SSL.  It has to support Vista/Win7-x64
- Able to do site to site VPN with various devices.(Cisco,
- Can rate limit traffic in and out.
- Control NAT per customer instance.
- Stateful firewall per customer instance.
- Good logging


Thanks!




Re: Alcatel-Lucent VPN Firewall Brick

2009-10-26 Thread Christopher Morrow
On Mon, Oct 26, 2009 at 12:36 PM, Justin M. Streiner
strei...@cluebyfour.org wrote:
 On Mon, 26 Oct 2009, Jay Nakamura wrote:

 Looking for input on Alcatel-Lucent VPN Firewall Brick.  I can look up
 spec and other published information but, as always, the devil is in
 the detail and you just never know what wall you run into until you
 actually try it so I wanted to see if anyone has used this and can
 point out good/bad things about this device.

 Our other option is Cisco IOS router right now.  Are there better
 options than these two?

 Fair warning: v6 honestly seems to have caught most firewall vendors with
 their pants down.

I'm not really sure that in the year 2009 that's a fair thing to still
expect... honestly ipv6 has been in 'production' for ~7 years, for a
CPE deployment it's certainly been to the point where it should be
included by default.

-1 alcalu :(

-Chris



Re: Alcatel-Lucent VPN Firewall Brick

2009-10-26 Thread Justin M. Streiner

On Mon, 26 Oct 2009, Christopher Morrow wrote:


On Mon, Oct 26, 2009 at 12:36 PM, Justin M. Streiner
strei...@cluebyfour.org wrote:

On Mon, 26 Oct 2009, Jay Nakamura wrote:


Looking for input on Alcatel-Lucent VPN Firewall Brick.  I can look up
spec and other published information but, as always, the devil is in
the detail and you just never know what wall you run into until you
actually try it so I wanted to see if anyone has used this and can
point out good/bad things about this device.

Our other option is Cisco IOS router right now.  Are there better
options than these two?


Fair warning: v6 honestly seems to have caught most firewall vendors with
their pants down.


I'm not really sure that in the year 2009 that's a fair thing to still
expect... honestly ipv6 has been in 'production' for ~7 years, for a
CPE deployment it's certainly been to the point where it should be
included by default.

-1 alcalu :(


I don't know about AL's v6 status because I'm in the process of migrating 
away from them, and have been in the process of lots of due diligence with 
vendors in the past 6-ish months.  v6 support is pretty high on our 
list of 'must have' items.  I've been pretty disappointed with the 
response from most vendors.  Many of those have been along the lines of:


Yeah... our v6 code should be out of customer trials in Q2 2010...
We do v6 in software today, and the next spin of XYZ hardware will do it 
in the ASICs...
We're working some kinks out, so the box forwards X pps of v6 today 
(let Y = the amount of v4 traffic the box can handle, let X = some 
amount significantly lower than Y), but we should have all of that sorted 
out in the next major code release and be able to handle Y pps of v6 
then.
The firewall handles v6 today, but v6 support in the management front-end 
is still baking.  Should be ready to go in the next release.


Vendor responses to my v6 has been around for about 10 years... why is 
all of this only happening *now*? questions have largely been along the 
lines of Customers only started asking for or requiring v6 support in the 
last X months/years  This gets us back to chicken-and-egg time.


I can understand their position to a degree, i.e. why waste resources on 
things that customers aren't requesting (read: won't compel them to buy 
more/bigger hardware or renew/upgrade support contracts)?  This might have 
been a somewhat valid position several years ago, but v6 as a necessity 
has been on many customers' radars for several years ago.  Frankly, not 
having fully baked v6 support today is pretty much inexcusable IMHO.


jms