Re: [c-nsp] Erspan on 7600

[Tim Stevenson]

It most certainly is done in h/w - as I said, both encap & decap (ie 
source & dest sessions) are hw based. At the dest box, the FE strips 
off the GRE/ERSPAN  header & dumps the original packet on the SPAN dest port.


Note that certain misconfigurations can cause a punt, particularly on 
the ERSPAN destination box. I suggest carefully following the config 
guide for the proper configuration. One key point is configuring 
identical IPs and ERSPAN IDs on the source & destination sessions.


That can all be avoided by just pointing directly to the IP of a host 
w/wireshark etc that can decode the packets with the GRE/ERSPAN still on it.


Hope that helps,
Tim

At 01:02 AM 8/11/2010, Mikael Abrahamsson averred:


On Wed, 11 Aug 2010, Phil Mayers wrote:

> We've used ERSPAN on some truly phenomenal bitrates; it *is* done in
> hardware.

Sending ERSPAN is done in hw, I've done multigigabit ERSPAN.

ERSPAN reception is not done in HW (at least not when I tested) and it
killed the box when I tried :P

--
Mikael Abrahamssonemail: swm...@swm.pp.se
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at 
http://puck.nether.net/pipermail/cisco-nsp/





Tim Stevenson, tstev...@cisco.com
Routing & Switching CCIE #5561
Distinguished Technical Marketing Engineer, Cisco Nexus 7000
Cisco - http://www.cisco.com
IP Phone: 408-526-6759

The contents of this message may be *Cisco Confidential*
and are intended for the specified recipients only.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Mikael Abrahamsson]

On Wed, 11 Aug 2010, Phil Mayers wrote:

FWIW we seldom (In fact I'm not sure ever!) use an actual 6500 as an 
erspan receiver; we use "gulp" on a Unix box, or the wireshark ERSPAN 
decoder, depending on the requirements.


Yes, I usually tcpdump it to a pcap file and analyse it with wireshark.

--
Mikael Abrahamssonemail: swm...@swm.pp.se
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Phil Mayers]

On 08/11/2010 09:02 AM, Mikael Abrahamsson wrote:

On Wed, 11 Aug 2010, Phil Mayers wrote:


We've used ERSPAN on some truly phenomenal bitrates; it *is* done in
hardware.


Sending ERSPAN is done in hw, I've done multigigabit ERSPAN.

ERSPAN reception is not done in HW (at least not when I tested) and it
killed the box when I tried :P



Really? That seems odd.

FWIW we seldom (In fact I'm not sure ever!) use an actual 6500 as an 
erspan receiver; we use "gulp" on a Unix box, or the wireshark ERSPAN 
decoder, depending on the requirements.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Mikael Abrahamsson]

On Wed, 11 Aug 2010, Phil Mayers wrote:

We've used ERSPAN on some truly phenomenal bitrates; it *is* done in 
hardware.


Sending ERSPAN is done in hw, I've done multigigabit ERSPAN.

ERSPAN reception is not done in HW (at least not when I tested) and it 
killed the box when I tried :P


--
Mikael Abrahamssonemail: swm...@swm.pp.se
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Dobbins, Roland]

On Aug 11, 2010, at 2:45 PM, Phil Mayers wrote:

> We've used ERSPAN on some truly phenomenal bitrates; it *is* done in hardware.

One thing to keep in mind is to be sure and transport ERSPAN traffic over the 
DCN or a dedicated telemetry export network so as to avoid the hall-of-mirrors 
effect.

;>

---
Roland Dobbins  // 

Injustice is relatively easy to bear; what stings is justice.

-- H.L. Mencken




___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Phil Mayers]

On 08/10/2010 11:46 PM, Mack McBride wrote:

What about software switched traffic (mostly glean traffic)?
Doesn't that get handled by the RP?


Yes. But such traffic must come in via a gigE or vlan interface, and 
ERSPAN can capture it there (in hardware)


You can *also* span the RP/SP itself, and as I understand it again this 
is done in hardware. Effectively it SPANs the internal gigE port facing 
the RP/SP


We've used ERSPAN on some truly phenomenal bitrates; it *is* done in 
hardware.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Mack McBride]

What about software switched traffic (mostly glean traffic)?
Doesn't that get handled by the RP?

Mack McBride
Network Engineer
Viawest, Inc.

-Original Message-
From: cisco-nsp-boun...@puck.nether.net 
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Tim Stevenson
Sent: Tuesday, August 10, 2010 8:59 AM
To: Martin Moens; cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] Erspan on 7600

Hi Martin,

ERSPAN is handled by the hardware, either the central replication 
engine on the sup, or by the REs on the linecards themselves (depends 
on which sup & LCs you have).

In no case do we use the sup CPU to perform ERSPAN encap/decap.

Tim

At 07:10 AM 8/10/2010, Martin Moens averred:

>Hi list,
>
>Does someone have experience with erspan on a 7600?
>Is this loading the CPU (rsp720 / ws-x6748-ge-tx) or is it handled in
>hardware?
>
>Martin
>
>___
>cisco-nsp mailing list  cisco-nsp@puck.nether.net
><https://puck.nether.net/mailman/listinfo/cisco-nsp>https://puck.nether.net/mailman/listinfo/cisco-nsp
>archive at 
><http://puck.nether.net/pipermail/cisco-nsp/>http://puck.nether.net/pipermail/cisco-nsp/




Tim Stevenson, tstev...@cisco.com
Routing & Switching CCIE #5561
Distinguished Technical Marketing Engineer, Cisco Nexus 7000
Cisco - http://www.cisco.com
IP Phone: 408-526-6759

The contents of this message may be *Cisco Confidential*
and are intended for the specified recipients only.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Martin Moens]

Thanks Tim,

Exactly what I wanted to hear :-)

Martin

Tim Stevenson  wrote on 10/08/2010 16:59:

> Hi Martin,
> 
> ERSPAN is handled by the hardware, either the central replication
> engine on the sup, or by the REs on the linecards themselves (depends
> on which sup & LCs you have). 
> 
> In no case do we use the sup CPU to perform ERSPAN encap/decap.
> 
> Tim
> 
> At 07:10 AM 8/10/2010, Martin Moens averred:
> 
>> Hi list,
>> 
>> Does someone have experience with erspan on a 7600?
>> Is this loading the CPU (rsp720 / ws-x6748-ge-tx) or is it handled
>> in hardware? 
>> 
>> Martin
>> 
>> ___
>> cisco-nsp mailing list  cisco-nsp@puck.nether.net
>> https://p
> uck.nether.net/mailman/listinfo/cisco-nsp
>> archive at
>> http://puck.neth
>> er.net/pipermail/cisco-nsp/ 
> 
> 
> 
> 
> Tim Stevenson, tstev...@cisco.com
> Routing & Switching CCIE #5561
> Distinguished Technical Marketing Engineer, Cisco Nexus 7000
> Cisco - http://www.cisco.com
> IP Phone: 408-526-6759
> 
> The contents of this message may be *Cisco Confidential*
> and are intended for the specified recipients only.

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] Erspan on 7600

[Tim Stevenson]

Hi Martin,

ERSPAN is handled by the hardware, either the central replication 
engine on the sup, or by the REs on the linecards themselves (depends 
on which sup & LCs you have).


In no case do we use the sup CPU to perform ERSPAN encap/decap.

Tim

At 07:10 AM 8/10/2010, Martin Moens averred:


Hi list,

Does someone have experience with erspan on a 7600?
Is this loading the CPU (rsp720 / ws-x6748-ge-tx) or is it handled in
hardware?

Martin

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at 
http://puck.nether.net/pipermail/cisco-nsp/





Tim Stevenson, tstev...@cisco.com
Routing & Switching CCIE #5561
Distinguished Technical Marketing Engineer, Cisco Nexus 7000
Cisco - http://www.cisco.com
IP Phone: 408-526-6759

The contents of this message may be *Cisco Confidential*
and are intended for the specified recipients only.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[c-nsp] Erspan on 7600

[Martin Moens]

Hi list,

Does someone have experience with erspan on a 7600?
Is this loading the CPU (rsp720 / ws-x6748-ge-tx) or is it handled in
hardware?

Martin

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/