Re: IPv6 network boundaries vs. IPv4

2007-08-27 Thread Jason LeBlanc


OT: He probably meant MOP and LAT are not routable, man that brings back 
memories.


Kevin Oberman wrote:

Date: Sat, 25 Aug 2007 23:56:29 -0600
From: John Osmon [EMAIL PROTECTED]
Sender: [EMAIL PROTECTED]


Is anyone out there setting up routing boundaries differently for
IPv4 and IPv6?  I'm setting up a network where it seems to make
sense to route IPv4, while bridging IPv6 -- but I can be talked
out of it rather easily.

Years ago, I worked on a academic network where we had a mix
of IPX, DECnet, Appletalk, and IP(v4).  Not all of the routers
actually routed each protocol -- DECnet wasn't routable, and I recall
some routers that routed IPX, while bridging IP...



DECnet not routable? Not even close to true. At one time DECnet was
technically well ahead of IP networking and far more commonly used. It
was not until about 1993 that IP traffic passed DECnet as the dominate
protocol and ESnet continued to route DECnet, mostly to support the High
Energy Physics community. When the Hinsdale fire segmented tie IP
Internet in 1988, the global DECnet Internet survived, albeit with limits
bandwidth between the coasts.

DECnet was far from perfect and, over time, IP surpassed it in terms of
both performance and robustness, but it was not only routable, but
globally routed long ago.

  

This all made sense at the time -- there were IPX networks that needed
to be split, while IP didn't need to be.  DECnet was... DECnet -- and 
Appletalk was chatty, but useful. 



AppleTalk was a royal pain! Gator boxes and FastPaths would go insane
and saturate the network with broadcasts. But AppleTalk did have some
really neat features.

  
I keep hearing the mantra in my head of: I want my routers to route, and 
my switches to switch.  I agree wholeheartedly if there is only one 
protocol -- but with the mix of IPv4 and IPv6, are there any folks

doing things differently?  With a new protocol in the mix are the
lessons of the last 10 (or so) years not as clear-cut?



Most routers are a blend of router and switch. The Cisco 6500 and 7600
boxes are probably the most popular large router in the world, but the
heart of each is a Catalyst switch. So, the switch switches and the
router routes, but they are both the same box.

At a major networking show we would switch the IPv6 back to the core
routers because of bugs in the IPv6 implementations on many systems.

You do what works best for your network. If it means switching IPv6, so
be it. This is probably especially true when the router is from a
company that charges substantially extra for IPv6 software licenses. If
the is only limited IPv6 traffic, switching to a central router might
not only be technically the best solution, but the most reasonable
fiscal approach.
  




Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Eric Gauthier

Heya,

 My understanding is that there are no known algorithms for fast
 updates (and particularly withdrawals) on aggregated FIBs, especially
 if those FIBs are stored in CIDR form.  This is the prime reason why
 all those Cisco 65xx/76xx with MSFC2/PFC2 will be worthless junk in a
 couple of months.
 
 Do we have a real date for when this occurs? If you aren't doing uRPF, I 
 thought they ran up to 256,000 routes. (I may not recall correctly)


We ran into this hiccup a few months ago on a Sup720-3B (well, a 3BXL which
mistakenly had a 3B card in the chassis, causing the SUP to clock down and
act like a 3B), but I think the Sup2's are in a similar situtation.  Though 
the box can handle up to 224k routes, they are set by default to only handle 
192k IPv4 + MPLS routes plus 32k IPv6 + IP multicast routes.  You can retune 
this so that you can get up to 224k IPv4 routes, but I've recently seen our 
Internet table bumping against this.  My understanding is that this is a 
hardware limit, so upgrading is your only option.

Eric :)


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Jon Lewis


On Mon, 27 Aug 2007, Eric Gauthier wrote:


Do we have a real date for when this occurs? If you aren't doing uRPF, I
thought they ran up to 256,000 routes. (I may not recall correctly)


We ran into this hiccup a few months ago on a Sup720-3B (well, a 3BXL which
mistakenly had a 3B card in the chassis, causing the SUP to clock down and
act like a 3B), but I think the Sup2's are in a similar situtation.  Though
the box can handle up to 224k routes, they are set by default to only handle
192k IPv4 + MPLS routes plus 32k IPv6 + IP multicast routes.  You can retune
this so that you can get up to 224k IPv4 routes, but I've recently seen our
Internet table bumping against this.  My understanding is that this is a
hardware limit, so upgrading is your only option.


The sup2 can actually handle a bit more ipv4 routes than the 
Sup720(non-3bxl).  I don't know if it can go all the way to 256k routes. 
I can't seem to find any cisco data sheets that specify max ipv4 routes on 
the sup2.  The output from show mls cef hardware suggests 256k is the 
limit.


--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: IPv6 network boundaries vs. IPv4

2007-08-27 Thread Iljitsch van Beijnum


On 26-aug-2007, at 7:56, John Osmon wrote:


Is anyone out there setting up routing boundaries differently for
IPv4 and IPv6?  I'm setting up a network where it seems to make
sense to route IPv4, while bridging IPv6 -- but I can be talked
out of it rather easily.


Why would you want to do that?

I've been tempted to do it the other way around, though. In a hosting  
environment, you can end up with a bunch of /24s dumped on a  
broadcast domain with a number of different customers but the  
addresses so intermingled that you can't give each customer their own  
VLAN. With IPv6, there is enough address space to give each customer  
a VLAN and and address block to go along with that, which is a lot  
cleaner.


Re: IPv6 network boundaries vs. IPv4

2007-08-27 Thread Valdis . Kletnieks
On Sat, 25 Aug 2007 23:56:29 MDT, John Osmon said:
 
 Is anyone out there setting up routing boundaries differently for
 IPv4 and IPv6?  I'm setting up a network where it seems to make
 sense to route IPv4, while bridging IPv6 -- but I can be talked
 out of it rather easily.

We decided to map our IPv6 subnets one-to-one to our IPv4, so each of our
routed /22 to /27 subnets gets a /64 IPv6 prefix.  This however was just
due to the fact that our topology permitted that - your mileage may vary.


pgpKnL9djt2I6.pgp
Description: PGP signature


ICMP being dropped between Global Crossings and Onvoy

2007-08-27 Thread Brian Raaen

I have a network (AS33234) I am trying to support that is downstream from 
Onvoy on one of their connections.  Our monitoring equipment is located in 
AS4452.  Our monitoring system is not able to ping their network through 
Onvoy.  The block seems to be happening at either Global Crossings or Onvoy.  
We are able to reach them using any protocol other than an ICMP ping (We are 
able to traceroute).  Does anyone else know about or see a similar block 
going on.  I have attached part of a traceroute.

 2 suwC6.gig3-1-4.qualitytech.com (216.154.207.145) [AS 20141] 0 msec 0 msec 4 
msec
  3 suw04-gig1-0-0.qualitytech.com (216.154.207.173) [AS 20141] 0 msec 0 msec 
0 msec
  4 gig6-2.suwangaeq01w.cr.deltacom.net (66.35.174.165) [AS 6983] 4 msec 0 
msec 0 msec
  5  *  *  * 
  6 pos5-0.atlngapk22w.cr.deltacom.net (66.35.174.101) [AS 6983] 0 msec 4 msec 
0 msec
  7 so-0-0-0.ar3.DAL1.gblx.net (64.208.169.141) [AS 3549] 4 msec 4 msec 4 msec
  8 so1-0-0-622M.ar2.MIN1.gblx.net (67.17.71.34) [AS 3549] 44 msec 44 msec 44 
msec
  9 WBS-CONNECT-LLC-Minneapolis.ge-2-3-0.409.ar2.MIN1.gblx.net (64.215.81.82) 
[AS 3549] 44 msec 44 msec 44 msec
 10  *  *  * 
 11  *  *  * 
 12 WikstromTel-7003.onvoy.net (137.192.32.30) [AS 5006] 52 msec 52 msec 56 
msec

-- 
Brian Raaen
Network Engineer
[EMAIL PROTECTED]


Re: Market for diversity

2007-08-27 Thread Bill Stewart

On 8/26/07, Jason LeBlanc [EMAIL PROTECTED] wrote:
 More on point for this thread, I always have new vendors bring in fiber
 maps and show me their paths.  Images of the intended path specified on
 the map are part of the contract, including verbage regarding failover
 paths.  Once I know where their fiber is, I can look for another vendor
 that takes a different path.

This often won't get you the most cost-effective connections,
and sometimes it'll be bad for performance as well,
and doesn't always take advantage of available technology.

For instance, if Carrier 1 and Carrier 2 both use the same route for
their primary connection,
and you buy from Carrier 1 because they're 5% cheaper,
you may find that Carrier 2's second-best route is a lot more
expensive that Carrier 1's.
If you're buying from two carriers to get equipment diversity as well
as route diversity, you've lost.

Another kind of problem I've run into in the past - here in
California, to get from SF to LA,
you can either go down the coast or down the Central Valley, depending
on which railroads or highways you like.  But there's another route
that takes a railroad connection from
SLO (middle of the coast) to Bakersfield (south/middle of the valley),
and if your primary connection uses that route, the options for
diverse routes go through Salt Lake City or Denver.   Given the
history of what fiber got built when, you'll find that
for some speeds many of the carriers use that crossover route, while
for lower speeds
there's a lot more choice.

From a technology standpoint, a lot of carriers are starting to use
intelligent optical switches
that give them automated provisioning, automatic reroutes, etc., so
while they can show you
where their cable routes are, and where the most likely provisioning
and reroutes go,
in general you can't get a precise guaranteed route, because that's
not what the switches do.

 What I find hard to combat are MA changing operations over time,
In general, it's hard for one carrier to keep track of diversity
(though some can),
and much much harder for two carriers to keep diverse from each other.
And the tracking problems scale differently for large connections,
where you may build custom access rings, than for small connections where
most providers are reselling telco last-mile copper.

There's also the problem of diversity philosophy - it's not uncommon
for large East-Coast
companies to view equipment diversity as the critical problem, and
concentrate their
switches into a smaller number of larger sites where they can do
cost-effective sparing,
and have their fiber spread out across many different physical routes,
not remembering that customers in the West Coast expect that
buildings just fall down sometimes, so they care about building diversity,
and geographical and demographic considerations mean that there are only
a few good routes across the Rockies and along the coasts.
(Of course, sometimes this means that the West Coast customers buy from multiple
carriers to get building diversity and _still_ get caught when a telco
DACS fails :-)



 Thanks; Bill

Note that this isn't my regular email account - It's still experimental so far.
And Google probably logs and indexes everything you send it.


Operational Feedback Requested on Pending Standard

2007-08-27 Thread Ted Seely



All,

Below is an email sent to the IETF OPS Area mailing list soliciting
feedback from operators regarding firewalls.  We would also appreciate
feedback from the Operators Mailing Lists.  Please respond to the OPS Area
mailing list if you have a position on the item below.  You can subscribe
to the Operations and Management Area mailing list at the URL below if you
are not already subscribed.

https://www.ietf.org/mailman/listinfo/ops-area

On behalf of the OPS Area Directors and myself, thank you.

Ted - With OPS Area WG Hat On


--


During the final review phases of the review of
http://www.ietf.org/internet-drafts/draft-ietf-midcom-mib-09.txt the
issue described below surfaced. It is actually not completely new, it
was discussed in the past in a form or another, and it is not
necessarily specific to this document and MIB module only, but also to
other MIB modules. We believe that input from network operators can
help, and we solicit this input.

The MIDCOM-MIB defines tables containing firewall rules, indexed by
ifIndex. ifIndex values can change when interfaces are swapped or
devices reboot, and this could lead to rules being applied to the wrong
interface.

How do you, network operators, prefer interfaces be identified?
 - Is ifIndex the preferred choice even though the indices can change on
reboot?
 - Is ifName a better choice for identifying interfaces in rules, since
it is set by the device and remains fairly stable across reboots and is
guaranteed to be unique?
 - is ifAlias a better choice, since it can be set by operators,
although it is not guaranteed to be unique?

We would appreciate inputs and thank you for your cooperation.






Re: IPv6 network boundaries vs. IPv4

2007-08-27 Thread John Osmon

On Mon, Aug 27, 2007 at 07:12:54AM -0400, Jason LeBlanc wrote:
 
 OT: He probably meant MOP and LAT are not routable, man that brings back 
 memories.

Yeah, I realy did, but my fingers typed 'decnet isn't routable' because
that how the folks I worked with at the time described the issue.  I was 
young at the time, and didn't understand the nuances (as opposed to
being older and missing nuances now).

My old nuerons took over when I composed the message, sorry for the
confusion.  Thanks to all the folks that have replied off-list.
The (on topic) answers are coming where I expected them:
  - keep routing boundaries congruent
  - at local edges / stubs do whatever you want, but do it in private, 
and wash your hands afterwards (with appologies to R.A. Heinlein)


Re: Operational Feedback Requested on Pending Standard

2007-08-27 Thread Peter Dambier


Hi Ted,

develloping IASON I did run into that problem.

Among other things IASON was meant to read the configuration of
a device and the things connected to it. When e.g. a switch port
was bad, a device was unplugged and plugged into another port,
then IASON was meant to reconfigure the switch, vpn and parameters,
so that the device could run as if nothing had changed.

Most dramatically IASON would allow you to replace a CISCO by an
HP ProCurve switch and automatically configure everything as soon
as the device was switched on (DHCP and bootp).

IASON would discover any device that was asking for DHCP and bootp
to query an initial configuration then it would look through its
ports and MAC lists to see where it was connected and what devices
where connected

Of course IASON would work with ifIndex not with ifName as these
are different from manufacturer to manufacturer - and definitely not
ifAlias because IASON would configure the device before an operator
could see it.

I might teach IASON to use ifName and keep tables for the different
hardware but definitely not ifAlias.

Well, neither Global Crossing nor Exodus cared for IASON so the
snmp part was never finished and IASON only used snmpwalk to scan
devices.

I remember the faces of two operators at a new installation when
they plugged in three new switches and IASON immediately moved
them to a vpn where the operators could not find them. As soon
as they plugged in a service laptop it would connect that laptop
to the NOC vpn but they would never see the management port.

Of course IASON had already issued new passwords, so rs232 would
not help them either :)


Cheers
Peter and Karin


Ted Seely wrote:



All,

Below is an email sent to the IETF OPS Area mailing list soliciting
feedback from operators regarding firewalls.  We would also appreciate
feedback from the Operators Mailing Lists.  Please respond to the OPS Area
mailing list if you have a position on the item below.  You can subscribe
to the Operations and Management Area mailing list at the URL below if you
are not already subscribed.

https://www.ietf.org/mailman/listinfo/ops-area

On behalf of the OPS Area Directors and myself, thank you.

Ted - With OPS Area WG Hat On


--


During the final review phases of the review of
http://www.ietf.org/internet-drafts/draft-ietf-midcom-mib-09.txt the
issue described below surfaced. It is actually not completely new, it
was discussed in the past in a form or another, and it is not
necessarily specific to this document and MIB module only, but also to
other MIB modules. We believe that input from network operators can
help, and we solicit this input.

The MIDCOM-MIB defines tables containing firewall rules, indexed by
ifIndex. ifIndex values can change when interfaces are swapped or
devices reboot, and this could lead to rules being applied to the wrong
interface.

How do you, network operators, prefer interfaces be identified?
 - Is ifIndex the preferred choice even though the indices can change on
reboot?
 - Is ifName a better choice for identifying interfaces in rules, since
it is set by the device and remains fairly stable across reboots and is
guaranteed to be unique?
 - is ifAlias a better choice, since it can be set by operators,
although it is not guaranteed to be unique?

We would appreciate inputs and thank you for your cooperation.






--
Peter and Karin Dambier
Cesidian Root - Radice Cesidiana
Rimbacher Strasse 16
D-69509 Moerlenbach-Bonsweiher
+49(6209)795-816 (Telekom)
+49(6252)750-308 (VoIP: sipgate.de)
mail: [EMAIL PROTECTED]
mail: [EMAIL PROTECTED]
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/
http://www.cesidianroot.com/



RE: IPv6 network boundaries vs. IPv4

2007-08-27 Thread John van Oppen

We did the same thing...   It seems easiest from a management
perspective to copy the ipv4 logical layer with v6.   The only change on
our side was the fixed prefix length which if anything was a nice
change.

We did run into a few devices (old layer 3 switches) that don't support
ipv6 and on those we either did not deploy IPv6 or moved the routing off
for both v4 and v6 to the nearest core router that could handle v6 for
any vlans that required the v6 capability.

John van Oppen
Spectrum Networks LLC
206.973.8302 (Direct)
http://spectrumnetworks.us 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, August 27, 2007 10:25 AM
To: John Osmon
Cc: nanog@merit.edu
Subject: Re: IPv6 network boundaries vs. IPv4

On Sat, 25 Aug 2007 23:56:29 MDT, John Osmon said:
 
 Is anyone out there setting up routing boundaries differently for
 IPv4 and IPv6?  I'm setting up a network where it seems to make
 sense to route IPv4, while bridging IPv6 -- but I can be talked
 out of it rather easily.

We decided to map our IPv6 subnets one-to-one to our IPv4, so each of
our
routed /22 to /27 subnets gets a /64 IPv6 prefix.  This however was just
due to the fact that our topology permitted that - your mileage may
vary.


Any MSN/Live Mail Admin Contacts?

2007-08-27 Thread Raymond L. Corbin

Hello,

I'm experiencing a lot of problems with about 8 of our outbound mail
gateways to the MSN/Live mail servers throughout the day. Are there any
mail/sysadmins on this list, or anyone that can get me in contact with
someone there, as the general postmaster support is less then fourth
coming with information. Anything would be greatly appreciated.

Thanks,

Raymond Corbin
Support Analyst
HostMySite.com


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Deepak Jain



According to this link, which alleges to be from cisco-nsp, an MSFC2 can 
hold 256,000 entries in its FIB of which 12,000 are reserved for 
Multicast. I do not know if the 12,000 can be set to serve the general 
purpose.


The MSFC2 therefore can server 244,000 routes without uRPF turned on.

Any reasonably valid way of predicting when we'll hit 244,000 routes in 
the default-free zone?


http://osdir.com/ml/network.nsp.cisco/2002-08/msg00283.html

Deepak


Re: Any MSN/Live Mail Admin Contacts?

2007-08-27 Thread Martin Hannigan

On 8/27/07, Raymond L. Corbin [EMAIL PROTECTED] wrote:

 Hello,

 I'm experiencing a lot of problems with about 8 of our outbound mail
 gateways to the MSN/Live mail servers throughout the day. Are there any
 mail/sysadmins on this list, or anyone that can get me in contact with
 someone there, as the general postmaster support is less then fourth
 coming with information. Anything would be greatly appreciated.



Ray:

Im not sure what you mean by less than forthcoming, but we have success here:

http://postmaster.msn.com/Guidelines.aspx

And here:

http://postmaster.msn.com/Default.aspx

Best,

Marty


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread David Conrad



On Aug 27, 2007, at 2:49 PM, Deepak Jain wrote:
According to this link, which alleges to be from cisco-nsp, an  
MSFC2 can hold 256,000 entries in its FIB of which 12,000 are  
reserved for Multicast. I do not know if the 12,000 can be set to  
serve the general purpose.


The MSFC2 therefore can server 244,000 routes without uRPF turned on.

Any reasonably valid way of predicting when we'll hit 244,000  
routes in the default-free zone?


Um?

Real Soon Now?

According to http://www.cidr-report.org/as2.0/ we're at 233,000  
routes (as seen from AS 2.0 now) and the rate of growth as seen from

http://bgp.potaroo.net/ seems pretty steep.

I must be missing something obvious (or should I be dusting off my  
unused Y2K survival gear?)


Thanks,
-drc



Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Deepak Jain



David Conrad wrote:



On Aug 27, 2007, at 2:49 PM, Deepak Jain wrote:
According to this link, which alleges to be from cisco-nsp, an MSFC2 
can hold 256,000 entries in its FIB of which 12,000 are reserved for 
Multicast. I do not know if the 12,000 can be set to serve the general 
purpose.


The MSFC2 therefore can server 244,000 routes without uRPF turned on.

Any reasonably valid way of predicting when we'll hit 244,000 routes 
in the default-free zone?


Um?

Real Soon Now?

According to http://www.cidr-report.org/as2.0/ we're at 233,000 routes 
(as seen from AS 2.0 now) and the rate of growth as seen from

http://bgp.potaroo.net/ seems pretty steep.

I must be missing something obvious (or should I be dusting off my 
unused Y2K survival gear?)



I found that, eventually. I'm only seeing about 227K routes, but 
customer routes from wherever the CIDR report is getting data could be 
part of the difference.


Where do the FIBs break on older 12000 series and M-series routers? (or 
pick the *next* most popular piece of network equipment that is used in 
full-routes scenarios).


Maybe I should take a whack at my aggregation idea on an MSFC2 to see 
how it does. Hmmm..


Deepak




Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Jon Lewis


On Mon, 27 Aug 2007, David Conrad wrote:

Any reasonably valid way of predicting when we'll hit 244,000 routes in the 
default-free zone?


Um?

Real Soon Now?

...
I must be missing something obvious (or should I be dusting off my unused Y2K 
survival gear?)


Unlike Y2K, the end of the useful service life up the Sup2 can easily be 
pushed further away in time.


ASnum   NetsNow   NetsAggrNetGain % GainDescription

Table   233651151129  82522   35.3% All ASes

AS4134  1337  339 998 74.6% CHINANET-BACKBONE 
No.31,Jin-rong Street
AS18566 1020  101 919 90.1% COVAD - Covad 
Communications Co.
AS4323  1315  437 878 66.8% TWTC - Time Warner 
Telecom, Inc.
AS4755  1331  507 824 61.9% VSNL-AS Videsh Sanchar 
Nigam Ltd. Autonomous System

There's really only 151129 routes you need to have full routes.  Forcing 
just these top 4 slobs to aggregate reduces your global table by 3619 
routes.  Forcing the top 30 to aggregate frees up 15809 routes.


Of course there are other reasons to upgrade (better CPU, MPLS, IPv6, 
etc.), but if you can't upgrade, there are alternatives to stretch the old 
hardware.  It's not like it hasn't been done before.


--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread David Conrad


Jon,

On Aug 27, 2007, at 5:50 PM, Jon Lewis wrote:
Any reasonably valid way of predicting when we'll hit 244,000  
routes in the default-free zone?

Real Soon Now?


According to Geoff, the BGP table is growing at around 3500 routes  
per month, so we're looking at blowing out MSFC2s in about 3 months  
if nothing changes.


And here I was, wondering about 2M routes...

Unlike Y2K, the end of the useful service life up the Sup2 can  
easily be pushed further away in time.


Easy is, I suspect, in the mind of the route injector.

There's really only 151129 routes you need to have full routes.   
Forcing just these top 4 slobs to aggregate reduces your global  
table by 3619 routes.


~1 more month.


Forcing the top 30 to aggregate frees up 15809 routes.


~3 more months.

Of course there are other reasons to upgrade (better CPU, MPLS,  
IPv6, etc.), but if you can't upgrade, there are alternatives to  
stretch the old hardware.


For a few more months.  What are upgrade cycles like again?  How  
common are the MSFC2s?



It's not like it hasn't been done before.


Yep.  The nice thing about repeating history is you have a good idea  
of the whinage that you're in store for.


CIDR Wars 2.0: This Time It's For Real!  No, really.  We mean it  
this time.


:-)

Regards,
-drc

I used to be disgusted, now I try to be amused ... -- Elvis Costello


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread John A. Kilpatrick


On Mon, 27 Aug 2007, Jon Lewis wrote:


Of course there are other reasons to upgrade (better CPU, MPLS, IPv6, etc.),


Now if this was a dust old MSFC2 that was like 5 years old I'd say ok. 
The problem is twofold:


1.	Cisco is still selling the 7600 with the Sup32 bundle (which is 
what we bought) and saying you can take a full route table on it.  I could 
already do MPLS and IPv6 on this box.  This is pretty new hardware.


2.	The only thing I could buy is the top of the line Sup720 3BXL. 
Ok, fine, but I don't need mega-super-d00per backplane speed. I just need 
more TCAM like Christoper Walken needs more cowbell.  Cisco needs to have 
a reasonable solution to this problem - especially if they want to keep 
selling the 7600 as a router.


If I end up upgrading because of this it will probably be a forklift 
upgrade to another platform.  And there's no guarantee that it would be a 
Cisco one.


--
   John A. Kilpatrick
[EMAIL PROTECTED]Email| http://www.hypergeek.net/
[EMAIL PROTECTED]  Text pages|  ICQ: 19147504
 remember:  no obstacles/only challenges




Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread John Curran

At 8:50 PM -0400 8/27/07, Jon Lewis wrote:
Unlike Y2K, the end of the useful service life up the Sup2 can easily be 
pushed further away in time.

ASnum  NetsNow   NetsAggrNetGain % GainDescription

There's really only 151129 routes you need to have full routes.  Forcing 
just these top 4 slobs to aggregate reduces your global table by 3619 routes.  
Forcing the top 30 to aggregate frees up 15809 routes.

That's an additional ~5 months at the current rate of new
routes (and current ratio of customers per new routed block.)

There's a lot more than 3500 new customers per month globally
and if we get to the point where they are not coming out of
hierarchical PA space, the new monthly routing growth will
increase dramatically.

/John


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Jon Lewis


On Tue, 28 Aug 2007, Chris L. Morrow wrote:




On Mon, 27 Aug 2007, John A. Kilpatrick wrote:

a reasonable solution to this problem - especially if they want to keep
selling the 7600 as a router.


and here I always looked at the 6500 as a switch...


And the 7600 is a router?
:)

--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Chris L. Morrow



On Mon, 27 Aug 2007, John A. Kilpatrick wrote:
 a reasonable solution to this problem - especially if they want to keep
 selling the 7600 as a router.

and here I always looked at the 6500 as a switch...


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Jon Lewis


On Mon, 27 Aug 2007, John A. Kilpatrick wrote:

1.	Cisco is still selling the 7600 with the Sup32 bundle (which is what 
we bought) and saying you can take a full route table on it.  I could already 
do MPLS and IPv6 on this box.  This is pretty new hardware.


Where are they saying that?  The Sup32 sounded great until it became clear 
that it came with PFC3B (not 3BXL), and that there was no upgrade path to 
3BXL.  If it was/is being sold as a BGP routing solution, it was awfully 
short sighted.


2.	The only thing I could buy is the top of the line Sup720 3BXL. Ok, 
fine, but I don't need mega-super-d00per backplane speed. I just need more 
TCAM like Christoper Walken needs more cowbell.  Cisco needs to have a


We're in the same boat.  According to show catalyst6000, our Sup2's are 
doing just fine.  If there were a Sup32-3BXL, it'd be more than sufficient 
for our needs.


If I end up upgrading because of this it will probably be a forklift upgrade 
to another platform.  And there's no guarantee that it would be a Cisco one.


I guess cisco wants to play chicken with us and Juniper.  Will you really 
do the forklift, or just bite the bullet and go Sup720-3BXL?  I think 
they're better on the latter and counting on a bunch of hardware sales in 
the coming months.


--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Jon Lewis


On Tue, 28 Aug 2007, Chris L. Morrow wrote:


On Tue, 28 Aug 2007, Chris L. Morrow wrote:

On Mon, 27 Aug 2007, John A. Kilpatrick wrote:

a reasonable solution to this problem - especially if they want to keep
selling the 7600 as a router.


and here I always looked at the 6500 as a switch...


And the 7600 is a router?
:)


I thought it was just a 6500 that sommeone got drunk and tipped over on
it's side, like a cow...


And tagged with some white paint.

Though if you've kept up with the latest IOS developments, cisco is 
finally differentiating the platforms we've assumed for years were only 
different in angle and paint.  6500's won't get to run the newest 7600 
code.


--
 Jon Lewis   |  I route
 Senior Network Engineer |  therefore you are
 Atlantic Net|
_ http://www.lewis.org/~jlewis/pgp for PGP public key_


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Chris L. Morrow



On Mon, 27 Aug 2007, Jon Lewis wrote:

 On Tue, 28 Aug 2007, Chris L. Morrow wrote:
  On Mon, 27 Aug 2007, John A. Kilpatrick wrote:
  a reasonable solution to this problem - especially if they want to keep
  selling the 7600 as a router.
 
  and here I always looked at the 6500 as a switch...

 And the 7600 is a router?
 :)

I thought it was just a 6500 that sommeone got drunk and tipped over on
it's side, like a cow...


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Justin M. Streiner


On Tue, 28 Aug 2007, Chris L. Morrow wrote:


And the 7600 is a router?
:)


I thought it was just a 6500 that sommeone got drunk and tipped over on
it's side, like a cow...


I still needle my Cisco rep about that from time to time.  IMHO, the 
6500/7600 split was one of the dumbest, most poorly thought-out decisions 
Cisco ever made.  That and they still haven't given me the warm-and-fuzzy 
about the plans for IOS licensing.


Where I work, we're heavily invested in 6500s in the core and I don't see 
that changing any time soon.  The borders are Junipers because they 'just 
plain work' :)


jms


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Hex Star
On 8/27/07, Justin M. Streiner [EMAIL PROTECTED] wrote:



  I thought it was just a 6500 that sommeone got drunk and tipped over on
  it's side, like a cow...




http://farm.tucows.com/images/2006/07/cow_tipping.jpg :D


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Chris L. Morrow


On Mon, 27 Aug 2007, Jon Lewis wrote:
 On Tue, 28 Aug 2007, Chris L. Morrow wrote:
 
  I thought it was just a 6500 that sommeone got drunk and tipped over on
  it's side, like a cow...

 And tagged with some white paint.

 Though if you've kept up with the latest IOS developments, cisco is
 finally differentiating the platforms we've assumed for years were only
 different in angle and paint.  6500's won't get to run the newest 7600
 code.

Oh poor cow :( In all seriousness though, most routing platforms have
their costs and benefits. The 7600/6500 do some things nicely, apparently
large FIB's aren't their strength though (in most deployed configs
atleast).

-Chris


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Donald Stahl


1.	Cisco is still selling the 7600 with the Sup32 bundle (which is what 
we bought) and saying you can take a full route table on it.  I could 
already do MPLS and IPv6 on this box.  This is pretty new hardware.


Where are they saying that?  The Sup32 sounded great until it became clear 
that it came with PFC3B (not 3BXL), and that there was no upgrade path to 
3BXL.  If it was/is being sold as a BGP routing solution, it was awfully 
short sighted.
Their reps do it all the time. I worked with my rep to buy a couple of new 
routers. I specifically said I would be taking a full routing table on 
these boxes- Cisco's rep said the Sup-32 would be fine for my needs. Now I 
definitely didn't do as much checking as I should have but I was busy and 
that's why you have rep's in the first place. (I kept thinking the Sup32 
was based on the 3BXL- I have no idea why).


Thankfully I don't need to take a full table on these routers and their 
forwarding speed among the few ports I have is more important than the FIB 
size. That said- if I did need the full table I would be royally ticked 
off at Cisco right now.


If I end up upgrading because of this it will probably be a forklift 
upgrade to another platform.  And there's no guarantee that it would be a 
Cisco one.


I guess cisco wants to play chicken with us and Juniper.  Will you really do 
the forklift, or just bite the bullet and go Sup720-3BXL?  I think they're 
better on the latter and counting on a bunch of hardware sales in the coming 
months.
Given how many people are tired of being screwed over by Cisco I wouldn't 
make that bet if I were Cisco.


-Don


NANOG Humour (Re: 2M today, 10M with no change in technology? An informal survey.)

2007-08-27 Thread Alex Pilosov

On Mon, 27 Aug 2007, Hex Star wrote:

 On 8/27/07, Justin M. Streiner [EMAIL PROTECTED] wrote:
 
 
 
   I thought it was just a 6500 that sommeone got drunk and tipped over on
   it's side, like a cow...
 
 
 
 
 http://farm.tucows.com/images/2006/07/cow_tipping.jpg :D
While its occasionally amusing, can we please keep the humour to the
minimum, while sticking to the operational content?

-alex (mlc chair)



Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread John A. Kilpatrick

On 8/27/07 7:36 PM, Chris L. Morrow
[EMAIL PROTECTED] wrote:

 and here I always looked at the 6500 as a switch...

It switches, it routes, it makes julienne fries...

--  
John A. Kilpatrick
[EMAIL PROTECTED]Email| http://www.hypergeek.net/
[EMAIL PROTECTED]  Text pages|  ICQ: 19147504
  remember:  no obstacles/only challenges




SNMP Trap Alarm?

2007-08-27 Thread Deepak Jain



Ok, I could have picked a better title. I'm looking for a pointer to a 
box (pref. an embedded platform of some kind) that will receive/accept 
SNMP traps and sound a real world alarm/siren/klaxon. It can do fancy 
things like logging and such, but not strictly required.


I could build one, but I'd rather have something OTS.

Thanks in advance,

Deepak


Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Alex Pilosov

On Mon, 27 Aug 2007, Jon Lewis wrote:

 Though if you've kept up with the latest IOS developments, cisco is
 finally differentiating the platforms we've assumed for years were only
 different in angle and paint.  6500's won't get to run the newest 7600
 code.
I think Cisco is coming to their senses. SXH has *most* of SRB features, 
while (hopefully) more stable.

At this point, imho, the rsp720 is getting the short end of the stick, 
because it is only limited to SRB+, while you have a choice of SX* and SRB 
on the sup720.

But I think, imho, this discussion belongs to cisco-nsp more than to
nanog-l.

-alex [not speaking as mlc blah blah]



Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread John A. Kilpatrick

On 8/27/07 9:39 PM, Donald Stahl [EMAIL PROTECTED] wrote:

 Thankfully I don't need to take a full table on these routers and their
 forwarding speed among the few ports I have is more important than the FIB
 size. That said- if I did need the full table I would be royally ticked
 off at Cisco right now.
 
Well the way I'm putting it to my Cisco rep is Why should I invest in 3BXLs
instead of another vendor's solution?  I'm saying this repeatedly.  Maybe
they'll get the hint.

I won't throw away the 7604s...I could totally redeploy them in my corporate
infrastructure.  At this point they really are Cat 6500s.  I don't mind if
they make a 7600-only train as long as the 7600s can still run 6500 code
then at least it makes them useful.  Just not as edge routers.  I bet
Juniper is lulzing this hardcore.

--  
John A. Kilpatrick
[EMAIL PROTECTED]Email| http://www.hypergeek.net/
[EMAIL PROTECTED]  Text pages|  ICQ: 19147504
  remember:  no obstacles/only challenges




Re: 2M today, 10M with no change in technology? An informal survey.

2007-08-27 Thread Mikael Abrahamsson


On Mon, 27 Aug 2007, Deepak Jain wrote:

Where do the FIBs break on older 12000 series and M-series routers? (or 
pick the *next* most popular piece of network equipment that is used in 
full-routes scenarios).


On the 12000, I'd give the following observations on the state of the 
older linecards for DFZ routing:


GRP that can't handle 512 meg memory has been useless for quite some time.
GRP-B with 512 megs of ram seems ok for at least 6-12 more months.
PRP needs 1 gig of ram.
All LCs need at least 256 megs of route memory.
4GE engine3 LC needs 512 megs of route memory.
10x1GE Engine 4 LC needs 512 megs of route memory.
Engine2 LCs are starting to run out of forwarding resources, cisco states 
200k routes, but obviously they still work, but for how long?


Otoh the SIP-601 comes with 2 gigs of route memory, which is really nice. 
The 12000 with recent hardware will most likely last quite some time, but 
the hardware designed in the late 90ties is (not strangely) running out of 
steam.


So if you have old hardware, you need to monitor your memory and table 
utilization on a monthly basis.


--
Mikael Abrahamssonemail: [EMAIL PROTECTED]