Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
It's a benefit. I do not want to support 100 different vendors with 100 different sets of bugs, 100 different methods to save / restore configurations, 100 different ways for authentication, etc etc... Today, it is a benefit. 3550 runs IOS. this is a benefit, especially in a switch? If your whole support organization is geared towards IOS, and unable to learn other CLIs, it may well be. Fortunately, not all support organizations are like that :-) Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
So what? Is is a sugnificant drawback? I do not think so. Both ISL and 802.1q require special interface cards (with extended frame size), and I do not see any reason, why 26 bytes vs 4 bytes makes big difference. /May be, the only pro for 802.1q tagging is it's possible implementation on the old interface cards, which did not allowed extra 30 bytes but allowed extra 4 bytes/. I am no saying that ISL is better tha 802.1q, but 802.1q is not much better than ISL, and (in some cases) is even worst. - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 9:10 AM Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs? ISL _DOES NOT CHANGE_ packet size. An 802.1q tag adds 4 bytes to the Ethernet frame. ISL encapsulation adds 30 bytes to the Ethernet frame. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
Sorry; of course, I meant _change MTU_. Both the ISL _and_ the Dotq headers are stripped off at the trunk interface so they _both_ change the packet size but neither alters the payload. Scott C. McGrath On Mon, 26 Jan 2004 [EMAIL PROTECTED] wrote: ISL _DOES NOT CHANGE_ packet size. An 802.1q tag adds 4 bytes to the Ethernet frame. ISL encapsulation adds 30 bytes to the Ethernet frame. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
welcome to 2004. ISL is a thing of the past. let us move on. ./end_flamebait.sh -J (who realized Cisco no longer supports ISL on 2950 and some other newer box) On Mon, Jan 26, 2004 at 11:09:07PM -0800, Alexei Roudnev wrote: So what? Is is a sugnificant drawback? I do not think so. Both ISL and 802.1q require special interface cards (with extended frame size), and I do not see any reason, why 26 bytes vs 4 bytes makes big difference. /May be, the only pro for 802.1q tagging is it's possible implementation on the old interface cards, which did not allowed extra 30 bytes but allowed extra 4 bytes/. I am no saying that ISL is better tha 802.1q, but 802.1q is not much better than ISL, and (in some cases) is even worst. - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Monday, January 26, 2004 9:10 AM Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs? ISL _DOES NOT CHANGE_ packet size. An 802.1q tag adds 4 bytes to the Ethernet frame. ISL encapsulation adds 30 bytes to the Ethernet frame. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED] -- James Jun (formerly Haesu) TowardEX Technologies, Inc. 1740 Massachusetts Ave. Boxborough, MA 01719 Consulting, IPv4 IPv6 colocation, web hosting, network design implementation http://www.towardex.com | [EMAIL PROTECTED] Cell: (978)394-2867 | Office: (978)263-3399 Ext. 170 Fax: (978)263-0033 | AIM: GigabitEthernet0 NOC: http://www.twdx.net | POC: HAESU-ARIN, HDJ1-6BONE
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 25 Jan 2004, Alexei Roudnev wrote: Of course, if they want L3 routing on every box (I do not like such idea, but it's possible), then 3550 (or what do they have now?) is the best choice. Definately not. The 3550 is an overpriced outdated product with moderate performance with way too small table sizes. For instance: The Summit48si handles 128k MAC addresses. The 3550 handles something like 6-15k. The Summit48si can do buffering when doing QoS/shaping, the 3550 does only policing. If you want to deliver a 2meg service over ethernet to a customer, this is a big issue. There is only one product in the 3550 line that is pricewise worth getting is the 3550-12G if you need to do L2 gig aggregation to 1gig uplink and you do not have many VLANs. There are three issues I see where the 3550 actually has a selling point: VRFs (even though they are too few) Q-in-Q (limited by the small mac table size) CEF (if you have very small routing table size and no broadcasts) -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
1) Cisco ISL is much better than urgly 802.1q - first of all, it was designed many years before 802.1q. I am not even talking abiout those idiots, who designed 802.1q as a _spanning tree on the trunk level_, which made many configurations (which we used with ISL ain 199x years) impossble, and caused vendors to extend 802.1q. 2) Of course, VLAN does not infer routing. But VLAN routing can be provided on the switch fabric, effectively bypassing many traditional drawbacks - see Cisco 6509, for example. - Original Message - From: Brian Wallingford [EMAIL PROTECTED] To: Alexei Roudnev [EMAIL PROTECTED] Cc: ken emery [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Sunday, January 25, 2004 10:17 PM Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs? On Sun, 25 Jan 2004, Alexei Roudnev wrote: : :L3 switchiong is just term for idiots - it is ROUTING in old terms. So, :VLAN's means _routing_. Um, no, VLAN does not infer routing. 802.1q and even Cisco's ugly proprietary ISL both operate at layer two. As to L3 switching and the spin involved in such, it's an old, predictable story, which we all wrote off as marketing drivel at least a couple years ago...
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
3550 runs IOS. That's an answer. I never allow any non-IOS router in production environment (except high end devices, such as Juniper, when benefits are very high). And 3550 is not expansive (yes, it is not cheap). PS. How much ethernet ports do you have in the office? Do you have 100 K ports? If not, why do you need 128K MAC's? (I know only one case, when I need so much - some kind of DSL service... In most cases, you have 500 - 5,000 ports in one building. If you have more, it is unlikely that you use 3550 switches. So, it is enough for the tasks (just as performance - it have _enough_ performance). Btw, I believed that catalist swithes have not any limitations for the MAC tables (because they use memory _on demand_); where did you get this limitations? /I may be wrong here/ PPS. I do not know for sure, but 3550 should support traffic shaping, which makes bufferring. Technically, yes, CEF (with packet dropping) is not good to provide 2 Mbit by 100 Mbit link. On Sun, 25 Jan 2004, Alexei Roudnev wrote: Of course, if they want L3 routing on every box (I do not like such idea, but it's possible), then 3550 (or what do they have now?) is the best choice. Definately not. The 3550 is an overpriced outdated product with moderate performance with way too small table sizes. For instance: The Summit48si handles 128k MAC addresses. The 3550 handles something like 6-15k. The Summit48si can do buffering when doing QoS/shaping, the 3550 does only policing. If you want to deliver a 2meg service over ethernet to a customer, this is a big issue. There is only one product in the 3550 line that is pricewise worth getting is the 3550-12G if you need to do L2 gig aggregation to 1gig uplink and you do not have many VLANs. There are three issues I see where the 3550 actually has a selling point: VRFs (even though they are too few) Q-in-Q (limited by the small mac table size) CEF (if you have very small routing table size and no broadcasts) -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Mon, 26 Jan 2004, Alexei Roudnev wrote: PS. How much ethernet ports do you have in the office? Do you have 100 K ports? If not, why do you need 128K MAC's? (I know only one case, when I need so much - some kind of DSL service... I guess you're not into metro networking. (just as performance - it have _enough_ performance). Btw, I believed that catalist swithes have not any limitations for the MAC tables (because they use memory _on demand_); where did you get this limitations? /I may be wrong here/ http://www.cisco.com/en/US/customer/products/hw/switches/ps646/products_tech_note09186a0080094bc6.shtml You have something like 16-24.000 entries which are shared between routes, QoS, mac adress table size etc. Default is 5k mac adress size on the 3550-24/48. For metro applications, this is not enough. PPS. I do not know for sure, but 3550 should support traffic shaping, which makes bufferring. Technically, yes, CEF (with packet dropping) is not good to provide 2 Mbit by 100 Mbit link. The 3550 doesnt support shaping of any kind, only policing (dropping packets, never buffer them). How can you advocate a switch which you seem to know so little about? -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
3550 runs IOS. That's an answer. I never allow any non-IOS router in production environment (except high end devices, such as Juniper, when benefits are very high). And 3550 is not expansive (yes, it is not cheap). If you believe that IOS solves all problems, we live on different planets. PS. How much ethernet ports do you have in the office? Do you have 100 K ports? If not, why do you need 128K MAC's? (I know only one case, when I need so much - some kind of DSL service... Some kind of DSL service is indeed the background for my question. In most cases, you have 500 - 5,000 ports in one building. If you have more, it is unlikely that you use 3550 switches. So, it is enough for the tasks (just as performance - it have _enough_ performance). Btw, I believed that catalist swithes have not any limitations for the MAC tables (because they use memory _on demand_); where did you get this limitations? /I may be wrong here/ If you believe Catalyst switches have no MAC address limitations, I have a nice plot of land in Florida to sell you :-) Ethernet switches today use CAM to hold the MAC address tables - this CAM has a finite size. PPS. I do not know for sure, but 3550 should support traffic shaping, which makes bufferring. Technically, yes, CEF (with packet dropping) is not good to provide 2 Mbit by 100 Mbit link. 3550 only supports policing. Yes, I have worked extensive with 3550 and it doesn't have the features I need right now. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
3550 runs IOS. this is a benefit, especially in a switch? randy
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
3550 runs IOS. this is a benefit, especially in a switch? If your whole support organization is geared towards IOS, and unable to learn other CLIs, it may well be. Fortunately, not all support organizations are like that :-) Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 25 Jan 2004, Jeff Kell wrote: We're running 30 SVIs on a 3550-12 (only 10 active at the moment, we're in a transition). It is an aggregation switch that feeds back via L3. According to the documentation on the Cisco site: http://www.cisco.com/warp/public/473/145.html The 3550-12 is only capable of handling 16 SVIs in hardware (regardless of SDM template), after that you get into resource exhaustion which means it add the SVIs, but will go back to software/CPU-based routing. Does the 3550/3750 give any indication that it's in this state (software routing) other than melting under high traffic volumes? We're currently waiting on Cisco getting back to us on figures for the 3750, but given that it has a similar TCAM setup to the 3550-12, I'd doubt it would be different. Rich
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Jan 26, 2004, at 2:04 AM, Alexei Roudnev wrote: 1) Cisco ISL is much better than urgly 802.1q - first of all, it was designed many years before 802.1q. I am not even talking abiout those idiots, who designed 802.1q as a _spanning tree on the trunk level_, which made many configurations (which we used with ISL ain 199x years) impossble, and caused vendors to extend 802.1q. Is it April 1st? ISL changes the size of packets, does it not? So know you have to deal with MTU issues. What happens when I want the biggest MTU possible? I know it is not much a difference in size, but for some people, size does matter. I am quite happy with dot1q. My gripe is with poor spanning-tree implementations. I don't want a single spanning-tree for every vlan on a trunk... I like standards, but I am happy with Rapid-PVST. Just my feelings about the issue. I would never deploy ISL unless I had something like a 1900 that did not do dot1q 2) Of course, VLAN does not infer routing. But VLAN routing can be provided on the switch fabric, effectively bypassing many traditional drawbacks - see Cisco 6509, for example. Are you talking about multilayer switching implementations? That is why C came out with dCEF. I costs, but if you want to do serious routing, damn if it ain't fast ;-) - Original Message - From: Brian Wallingford [EMAIL PROTECTED] To: Alexei Roudnev [EMAIL PROTECTED] Cc: ken emery [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Sunday, January 25, 2004 10:17 PM Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs? On Sun, 25 Jan 2004, Alexei Roudnev wrote: : :L3 switchiong is just term for idiots - it is ROUTING in old terms. So, :VLAN's means _routing_. Um, no, VLAN does not infer routing. 802.1q and even Cisco's ugly proprietary ISL both operate at layer two. As to L3 switching and the spin involved in such, it's an old, predictable story, which we all wrote off as marketing drivel at least a couple years ago...
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
ISL _DOES NOT CHANGE_ packet size. Is it April 1st? ISL changes the size of packets, does it not? So know you have to deal with MTU issues. What happens when I want the biggest MTU possible? I know it is not much a difference in size, but for some people, size does matter. I am quite happy with dot1q. My gripe is with poor spanning-tree 2) Of course, VLAN does not infer routing. But VLAN routing can be provided on the switch fabric, effectively bypassing many traditional drawbacks - see Cisco 6509, for example. Are you talking about multilayer switching implementations? That is why C came out with dCEF. I costs, but if you want to do serious routing, damn if it ain't fast ;-) Agree in general.
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
1) Cisco ISL is much better than urgly 802.1q - first of all, it was designed many years before 802.1q. I am not even talking abiout those idiots, who designed 802.1q as a _spanning tree on the trunk level_, which made many configurations (which we used with ISL ain 199x years) impossble, and caused vendors to extend 802.1q. Is it April 1st? ISL changes the size of packets, does it not? So know you have to deal with MTU issues. What happens when I want the biggest MTU possible? I know it is not much a difference in size, but for some people, size does matter. I am quite happy with dot1q. My gripe is with poor spanning-tree implementations. I don't want a single spanning-tree for every vlan on a trunk... I like standards, but I am happy with Rapid-PVST. Just my feelings about the issue. I would never deploy ISL unless I had something like a 1900 that did not do dot1q Amen. At my previous employer, we got rid of ISL on almost all trunks. I wouldn't dream of going back. The only thing I don't really like about 802.1q compared to ISL is the idea of native or default VLAN. I want links to be either access (untagged) or trunk (*all* packets tagged). Fortunately, reasonably new Cisco switches let me enforce that with vlan dot1q tag native. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
ISL _DOES NOT CHANGE_ packet size. An 802.1q tag adds 4 bytes to the Ethernet frame. ISL encapsulation adds 30 bytes to the Ethernet frame. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
PS. How much ethernet ports do you have in the office? Do you have 100 K ports? If not, why do you need 128K MAC's? (I know only one case, when I need so much - some kind of DSL service... I guess you're not into metro networking. This is one of my exceptions - you really need 128K MAC's for meto network. And, for metro network, it may be reasonable to spend time in QA'ing and configuration and select non-cisco solution - because it is a very big project. But it is exceptional case. PPS. I do not know for sure, but 3550 should support traffic shaping, which makes bufferring. Technically, yes, CEF (with packet dropping) is not good to provide 2 Mbit by 100 Mbit link. The 3550 doesnt support shaping of any kind, only policing (dropping packets, never buffer them). How can you advocate a switch which you seem to know so little about? I just never tried to configure 'traffic-shape' on it, so I do not know. It is great switch for it's niche. Metro LAN's is not standard switch niche, it is very special network. As I said above, non-cisco solution can paid off for this. -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
Both the ISL _and_ the Dotq headers are stripped off at the trunk interface so they _both_ change the packet size but neither alters the payload. Scott C. McGrath On Mon, 26 Jan 2004 [EMAIL PROTECTED] wrote: ISL _DOES NOT CHANGE_ packet size. An 802.1q tag adds 4 bytes to the Ethernet frame. ISL encapsulation adds 30 bytes to the Ethernet frame. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
Both the ISL _and_ the Dotq headers are stripped off at the trunk interface so they _both_ change the packet size but neither alters the payload. Obviously. But the fact that ISL adds 26 bytes more than 802.1q means that multiple levels of ISL encapsulation is somewhat less practical than multiple levels of 802.1q tags. Some of us *need* those multiple levels of 802.1q tags. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Any 1U - 2U Ethernet switches that can handle 4K VLANs?
Does anybody know of 1U - 2U form factor Ethernet switches that can handle 4K VLANs, or at a minimum 2000 VLANs? Note that we're specifically looking for the ability to handle this number of VLANs operating simultaneously, not only VLAN *IDs* in the full 4K range. (This rules out popular switches like the Cisco 3550 and 3750 series, which can only handle 1024 VLANs operating simultaneously.) The switches should have 12 - 24 Fast Ethernet ports. Some form of Q in Q or stackable VLANs, ie. the ability to handle more than one VLAN tag, is vital. Spanning tree is needed, but can be one common spanning tree for all VLANs (per-VLAN spanning tree is not needed). Other features that would be nice to have: - RSTP (802.w) and MST (802.1s). - A couple of GigE ports (GBIC or SFP based, presumably) for uplinks. - L3 (IP routing). - DC power. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 25 Jan 2004 [EMAIL PROTECTED] wrote: Does anybody know of 1U - 2U form factor Ethernet switches that can handle 4K VLANs, or at a minimum 2000 VLANs? Note that we're specifically looking for the ability to handle this number of VLANs operating simultaneously, not only VLAN *IDs* in the full 4K range. Extreme Summit48si. The switches should have 12 - 24 Fast Ethernet ports. Some form of Q in Q or stackable VLANs, ie. the ability to handle more than one VLAN tag, is vital. You can do this by changing the ethertype of VLANs, Extreme calls this VMAN (9100 for vlans intead of 8100). This requires a network design to match. The switch has 48 ports and two SFP gig ports. Spanning tree is needed, but can be one common spanning tree for all VLANs (per-VLAN spanning tree is not needed). It does that. Other features that would be nice to have: - RSTP (802.w) and MST (802.1s). - A couple of GigE ports (GBIC or SFP based, presumably) for uplinks. - L3 (IP routing). - DC power. I dont know about RSTP and MST, but it does the rest. It also has EAPS for subsecond L2 failover. -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, Jan 25, 2004 at 08:13:45PM +0100, [EMAIL PROTECTED] wrote: Does anybody know of 1U - 2U form factor Ethernet switches that can handle 4K VLANs, or at a minimum 2000 VLANs? Note that we're specifically looking for the ability to handle this number of VLANs operating simultaneously, not only VLAN *IDs* in the full 4K range. I would check the Foundry Fastiron series - maybe the 4802. Everything I've read appears to indicate they support all 4096 vlans simultaneously, although you will of course want to verify this. Extreme also appear to support 4096 vlans - you'd be looking at the Summit 200 or Summit 48si for that. Even Cisco's new 3750 Metro only supports 1024 vlans - but both this and it's similarly-named predecessors are aimed as CPE; I suppose this is because they want you to fork out for 6500. W
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
try extreme... summit alpine and blackdiamond should all do that although only the summits fit in the form-factor you're thinking of. My experience with extremes as l3 boxes is neither recent nor pleasant, but that's not how we use them anyway. On Sun, 25 Jan 2004 [EMAIL PROTECTED] wrote: Does anybody know of 1U - 2U form factor Ethernet switches that can handle 4K VLANs, or at a minimum 2000 VLANs? Note that we're specifically looking for the ability to handle this number of VLANs operating simultaneously, not only VLAN *IDs* in the full 4K range. (This rules out popular switches like the Cisco 3550 and 3750 series, which can only handle 1024 VLANs operating simultaneously.) The switches should have 12 - 24 Fast Ethernet ports. Some form of Q in Q or stackable VLANs, ie. the ability to handle more than one VLAN tag, is vital. Spanning tree is needed, but can be one common spanning tree for all VLANs (per-VLAN spanning tree is not needed). Other features that would be nice to have: - RSTP (802.w) and MST (802.1s). - A couple of GigE ports (GBIC or SFP based, presumably) for uplinks. - L3 (IP routing). - DC power. Steinar Haug, Nethelp consulting, [EMAIL PROTECTED] -- -- Joel Jaeggli Unix Consulting [EMAIL PROTECTED] GPG Key Fingerprint: 5C6E 0104 BAF0 40B0 5BD3 C38B F000 35AB B67F 56B2
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 25 Jan 2004, Joel Jaeggli wrote: My experience with extremes as l3 boxes is neither recent nor pleasant, but that's not how we use them anyway. This is interesting, what problems did you run into? We have an extensive Extreme networks used both for L2 and L3, and apart from the fact that it always cpu routes ICMP, I see no major flaw in the L3 forwarding function (for access/distribution) for all normal purposes. My few experiences with the Cisco 3550 as L3 routers has been much worse, even with claimed CEF capability I have seen it melt and die where the equivalent Extreme box didnt experience the same problems (of course there are cases where it's the other way around). Overall I have more confidence in the Extreme access boxes for L3 than Ciscos equivlanent, and they definately kick ciscos ass when it comes to L2 (mac address table size and number of vlans for instance). -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 25 Jan 2004, Alexei Roudnev wrote: 1) Use Cisco 2924 or 3524 Didnt you mean 2950 and 3550? -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 2004-01-25 at 14:44, Will Hargrave wrote: I would check the Foundry Fastiron series - maybe the 4802. Everything I've read appears to indicate they support all 4096 vlans simultaneously, although you will of course want to verify this. I don't think this is true. Those of you with BigIron units know that (at least in m3 supervisors) they support only 512 vlans at most. I do not think the older, and generally less capable, FastIron switches are likely to support more. The command to check this on BigIron is `show default values`. -- Jeff
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
* [EMAIL PROTECTED] (Jeff S Wheeler) [Sun 25 Jan 2004, 22:10 CET]: On Sun, 2004-01-25 at 14:44, Will Hargrave wrote: I would check the Foundry Fastiron series - maybe the 4802. Everything I've read appears to indicate they support all 4096 vlans simultaneously, although you will of course want to verify this. I don't think this is true. Those of you with BigIron units know that (at least in m3 supervisors) they support only 512 vlans at most. I do not think the older, and generally less capable, FastIron switches are likely to support more. The command to check this on BigIron is `show default values`. That indicates a maximum of 4095 on a recent switch here that runs the layer-2 only image. Older models appear to have a limit of 2048, but I can't tell for sure whether this is hardware or software related. Configurability is, of course, no guarantee for things to actually work. -- Niels.
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
Alexei Roudnev wrote: 1) Use Cisco 2924 or 3524 2) Redesign your network to fit into 1024 VLANs 3) Do not spend time with junk (non Cisco, for the switches). U1 switch have only 24 - 48 ports, so you never need to handle 2000 VLAN's on it. And I suspect, that the whole design is wrong. Do not build custom configuration (4000 VLANs), build standard configuration (20 - 40 VLANs) /except - if you want to became a QA for the whole vendor/. I agree, but you could still have 4000 VLANs with multiple VTP domains. Using 3550-48s you can have L3 links between VTP domains. Jeff
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, Jan 25, 2004 at 09:39:05PM +0100, Mikael Abrahamsson wrote: This is interesting, what problems did you run into? We have an extensive Extreme networks used both for L2 and L3, and apart from the fact that it always cpu routes ICMP, I see no major flaw in the L3 forwarding function (for access/distribution) for all normal purposes. ACLs are per-port and known to be buggy when operating on port numbers - in particular UDP ACLs match will match arbritary data when presented with a subsequent IP fragments (think NFS...) As pointed out in a similar thread recently, the 'flow-based' (well, destination IP based) ipfdb will crap out on the Extremes under heavy load - e.g. virus'd machines internal to your network doing heavy scanning. Symptom is very poor performance and the 'top' command will show heavy CPU usage as subsequent flows are CPU routed. My few experiences with the Cisco 3550 as L3 routers has been much worse, even with claimed CEF capability I have seen it melt and die where the equivalent Extreme box didnt experience the same problems (of course there are cases where it's the other way around). Overall I have more confidence in the Extreme access boxes for L3 than Ciscos equivlanent, and they definately kick ciscos ass when it comes to L2 (mac address table size and number of vlans for instance). The 'recommended max' number of SVIs for the 3550 is something low like 8. There is no limited stated in the datasheet for the 3750 - is anyone running more than 8 SVIs on a 3750? The ACL capability on the 3550 seems a lot more capable but the lack of unicast RPF is irritating. (More irritating, 'ip verify unicast reachable-via...' is accepted but silently does nothing) I'd be very interested to hear what conditions you've found cause problems for Cat3550s. We're planning to buy quite a few more of this range (probably 3750-24) to reduce L2 size in our network and for CPE-type uses.
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Mon, 26 Jan 2004, Niels Bakker wrote: * [EMAIL PROTECTED] (Jeff Kell) [Mon 26 Jan 2004, 00:35 CET]: Using 3550-48s you can have L3 links between VTP domains. The point of using VLANs is that you don't need to route. There's probably a good reason for switching instead of routing in the original poster's scenario. (Perhaps a FTTH-like project?) Correct me if I'm wrong here, but at some point you will have to route all those VLAN's. To really answer the question about wether 1000 VLAN's are necessary one would need to see the network design. From my point of view I'd have to question the need to carry that many VLAN's over a large portion of the network. I would think that the network should be more partitioned so most of the VLAN's don't need to be seen outside a small area. bye, ken emery
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
Will Hargrave wrote: The 'recommended max' number of SVIs for the 3550 is something low like 8. There is no limited stated in the datasheet for the 3750 - is anyone running more than 8 SVIs on a 3750? We're running 30 SVIs on a 3550-12 (only 10 active at the moment, we're in a transition). It is an aggregation switch that feeds back via L3. The ACL capability on the 3550 seems a lot more capable but the lack of unicast RPF is irritating. (More irritating, 'ip verify unicast reachable-via...' is accepted but silently does nothing) Agreed - we had PSIRT look into it and the solution is probably going to be removing ip verify from the CLI parser :-( We had another 3550 replace a struggling 2621 and it blew it away. I'd be very interested to hear what conditions you've found cause problems for Cat3550s. We're planning to buy quite a few more of this range (probably 3750-24) to reduce L2 size in our network and for CPE-type uses. In a new building deployment we used 4500 Sup-IVs as MDF/IDF anchors and populated the distributions with 3550-48s. Most of the 4500s had one 48 port copper 10/100/1000 blade to supply gig-to-desktop where needed (their ASICs are overloaded 8-to-1 so be careful about placement). The 4500 not only doesn't do uRPF, it doesn't do flow either. The ACLs/MLS features are nice, supporting input ALCs, 'established' keyword, and logging (unlike, say MLS to a 5500 NFFC). It will not process switch these packets but rather forks a copy to the CPU to log if necessary. It is very annoying that neither 3550 nor 4500 support uRPF. Does anyone know if the 3750 does? Jeff
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 25 Jan 2004, Bill Nash wrote: On Sun, 25 Jan 2004, ken emery wrote: The point of using VLANs is that you don't need to route. There's probably a good reason for switching instead of routing in the original poster's scenario. (Perhaps a FTTH-like project?) Correct me if I'm wrong here, but at some point you will have to route all those VLAN's. To really answer the question about wether 1000 VLAN's are necessary one would need to see the network design. I would argue this point. I've got a production environment sporting multiple vlans, none which will ever see an external subnet or even a gateway (think databases.) The operative context inherent in the VLAN acronym is, after all, 'local', and not every topology requires routing. This is correct, but then why spend the money on a L3 switch? Routing isn't needed so save the money and purchase a L2 switch. bye, ken emery
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
Hmm; if they need to run 2000 VLAN's, they do not need L3 routing in every box... Of course, if they want L3 routing on every box (I do not like such idea, but it's possible), then 3550 (or what do they have now?) is the best choice. But I am very suspicious about such design... in 99% cases, 4,000 VLAn,s and 100 24-port switches means _bad network / solution schema_. If use other (non Cisco) switches - it may be very good choice in getting low price, but it requires long and careful testing. My experience is strictly asgainst non-cisco devices in such areas, as - VoIP, IP routing, L2 / L3 switches/routers (and almost the same in switches). - Original Message - From: Mikael Abrahamsson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, January 25, 2004 12:40 PM Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs? On Sun, 25 Jan 2004, Alexei Roudnev wrote: 1) Use Cisco 2924 or 3524 Didnt you mean 2950 and 3550? -- Mikael Abrahamssonemail: [EMAIL PROTECTED]
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Sun, 25 Jan 2004, Alexei Roudnev wrote: : :L3 switchiong is just term for idiots - it is ROUTING in old terms. So, :VLAN's means _routing_. Um, no, VLAN does not infer routing. 802.1q and even Cisco's ugly proprietary ISL both operate at layer two. As to L3 switching and the spin involved in such, it's an old, predictable story, which we all wrote off as marketing drivel at least a couple years ago...
Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
On Mon, 26 Jan 2004, Will Hargrave wrote: I'd be very interested to hear what conditions you've found cause problems for Cat3550s. We're planning to buy quite a few more of this range (probably 3750-24) to reduce L2 size in our network and for CPE-type uses. Well, we're not really sure. We put it in front of a 7200 doing approx 50 megabits of data with 50% cpu load, to divert the internet traffic and make the 7200 handle only MPLS PE functionality. The 3550 had only 3 SVIs. It might be broadcast related, we had a lot of L2 broadcasts on that segment. -- Mikael Abrahamssonemail: [EMAIL PROTECTED]