Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-27 Thread Alexei Roudnev

It's a benefit. I do not want to support 100 different vendors with 100
different sets of bugs, 100 different methods to save / restore
configurations, 100 different ways for authentication, etc etc... Today, it
is a benefit.



   3550 runs IOS.
 
  this is a benefit, especially in a switch?

 If your whole support organization is geared towards IOS, and unable
 to learn other CLIs, it may well be. Fortunately, not all support
 organizations are like that :-)

 Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-27 Thread Alexei Roudnev

So what?  Is is a sugnificant drawback? I do not think so. Both ISL and
802.1q require special interface cards (with extended frame size), and I do
not see any reason, why 26 bytes vs 4 bytes makes big difference. /May be,
the only pro for 802.1q tagging is it's possible  implementation on the old
interface cards, which did not allowed extra 30 bytes but allowed extra 4
bytes/.

I am no saying that ISL is better tha 802.1q, but 802.1q is not much better
than ISL, and (in some cases) is even worst.


- Original Message - 
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, January 26, 2004 9:10 AM
Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?


  ISL _DOES NOT CHANGE_ packet size.

 An 802.1q tag adds 4 bytes to the Ethernet frame.

 ISL encapsulation adds 30 bytes to the Ethernet frame.

 Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-27 Thread Alexei Roudnev

Sorry; of course, I meant _change MTU_. 


 
 
 Both the ISL _and_ the Dotq headers are stripped off at the trunk
 interface so they _both_ change the packet size but neither alters the
 payload.
 
 
 Scott C. McGrath
 
 On Mon, 26 Jan 2004 [EMAIL PROTECTED] wrote:
 
 
   ISL _DOES NOT CHANGE_ packet size.
 
  An 802.1q tag adds 4 bytes to the Ethernet frame.
 
  ISL encapsulation adds 30 bytes to the Ethernet frame.
 
  Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
 


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-27 Thread haesu

welcome to 2004. ISL is a thing of the past. let us move on.
./end_flamebait.sh

-J (who realized Cisco no longer supports ISL on 2950 and some other newer box)

On Mon, Jan 26, 2004 at 11:09:07PM -0800, Alexei Roudnev wrote:
 
 So what?  Is is a sugnificant drawback? I do not think so. Both ISL and
 802.1q require special interface cards (with extended frame size), and I do
 not see any reason, why 26 bytes vs 4 bytes makes big difference. /May be,
 the only pro for 802.1q tagging is it's possible  implementation on the old
 interface cards, which did not allowed extra 30 bytes but allowed extra 4
 bytes/.
 
 I am no saying that ISL is better tha 802.1q, but 802.1q is not much better
 than ISL, and (in some cases) is even worst.
 
 
 - Original Message - 
 From: [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Monday, January 26, 2004 9:10 AM
 Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?
 
 
   ISL _DOES NOT CHANGE_ packet size.
 
  An 802.1q tag adds 4 bytes to the Ethernet frame.
 
  ISL encapsulation adds 30 bytes to the Ethernet frame.
 
  Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]

-- 
James Jun (formerly Haesu)
TowardEX Technologies, Inc.
1740 Massachusetts Ave.
Boxborough, MA 01719
Consulting, IPv4  IPv6 colocation, web hosting, network design  implementation
http://www.towardex.com  | [EMAIL PROTECTED]
Cell: (978)394-2867  | Office: (978)263-3399 Ext. 170
Fax: (978)263-0033   | AIM: GigabitEthernet0
NOC: http://www.twdx.net | POC: HAESU-ARIN, HDJ1-6BONE


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Mikael Abrahamsson

On Sun, 25 Jan 2004, Alexei Roudnev wrote:

 Of course, if they want L3 routing on every box (I do not like such idea,
 but it's possible), then 3550 (or what do they have now?) is the best
 choice.

Definately not. The 3550 is an overpriced outdated product with moderate 
performance with way too small table sizes. For instance:

The Summit48si handles 128k MAC addresses. The 3550 handles something like 
6-15k. 

The Summit48si can do buffering when doing QoS/shaping, the 3550 does only
policing. If you want to deliver a 2meg service over ethernet to a
customer, this is a big issue.

There is only one product in the 3550 line that is pricewise worth getting
is the 3550-12G if you need to do L2 gig aggregation to 1gig uplink and
you do not have many VLANs.

There are three issues I see where the 3550 actually has a selling point:

VRFs (even though they are too few)
Q-in-Q (limited by the small mac table size)
CEF (if you have very small routing table size and no broadcasts)

-- 
Mikael Abrahamssonemail: [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Alexei Roudnev

1) Cisco ISL is much better than urgly 802.1q - first of all,  it was
designed many years before 802.1q. I am not even talking abiout those
idiots, who designed 802.1q as a _spanning tree on the trunk level_, which
made many configurations (which we used with ISL ain 199x years) impossble,
and caused vendors to extend 802.1q.

2) Of course, VLAN does not infer routing. But VLAN routing can be provided
on the switch fabric, effectively bypassing many traditional drawbacks - see
Cisco 6509, for example.


- Original Message - 
From: Brian Wallingford [EMAIL PROTECTED]
To: Alexei Roudnev [EMAIL PROTECTED]
Cc: ken emery [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Sunday, January 25, 2004 10:17 PM
Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?


 On Sun, 25 Jan 2004, Alexei Roudnev wrote:

 :
 :L3 switchiong is just term for idiots - it is ROUTING in old terms. So,
 :VLAN's means _routing_.

 Um, no, VLAN does not infer routing.  802.1q and even Cisco's ugly
 proprietary ISL both operate at layer two.

 As to L3 switching and the spin involved in such, it's an old,
 predictable story, which we all wrote off as marketing drivel at least a
 couple years ago...



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Alexei Roudnev

3550 runs IOS. That's an answer. I never allow any non-IOS router in
production environment (except high end devices, such as Juniper, when
benefits are very high). And 3550 is not expansive (yes, it is not cheap).

PS. How much ethernet ports do you have in the office? Do you have 100 K
ports? If not, why do you need 128K MAC's? (I know only one case, when I
need so much - some kind of DSL service...

In most cases, you have 500 - 5,000 ports in one building. If you have more,
it is unlikely that you use 3550 switches. So, it is enough for the tasks
(just as performance - it have _enough_ performance). Btw, I believed that
catalist swithes have not any limitations for the MAC tables (because they
use memory _on demand_); where did you get this limitations? /I may be wrong
here/

PPS. I do not know for sure, but 3550 should support traffic shaping, which
makes bufferring. Technically, yes, CEF (with packet dropping) is not good
to provide 2 Mbit by 100 Mbit link.


 On Sun, 25 Jan 2004, Alexei Roudnev wrote:

  Of course, if they want L3 routing on every box (I do not like such
idea,
  but it's possible), then 3550 (or what do they have now?) is the best
  choice.

 Definately not. The 3550 is an overpriced outdated product with moderate
 performance with way too small table sizes. For instance:

 The Summit48si handles 128k MAC addresses. The 3550 handles something like
 6-15k.

 The Summit48si can do buffering when doing QoS/shaping, the 3550 does only
 policing. If you want to deliver a 2meg service over ethernet to a
 customer, this is a big issue.

 There is only one product in the 3550 line that is pricewise worth getting
 is the 3550-12G if you need to do L2 gig aggregation to 1gig uplink and
 you do not have many VLANs.

 There are three issues I see where the 3550 actually has a selling point:

 VRFs (even though they are too few)
 Q-in-Q (limited by the small mac table size)
 CEF (if you have very small routing table size and no broadcasts)

 -- 
 Mikael Abrahamssonemail: [EMAIL PROTECTED]




Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Mikael Abrahamsson

On Mon, 26 Jan 2004, Alexei Roudnev wrote:

 PS. How much ethernet ports do you have in the office? Do you have 100 K
 ports? If not, why do you need 128K MAC's? (I know only one case, when I
 need so much - some kind of DSL service...

I guess you're not into metro networking.

 (just as performance - it have _enough_ performance). Btw, I believed that
 catalist swithes have not any limitations for the MAC tables (because they
 use memory _on demand_); where did you get this limitations? /I may be wrong
 here/

http://www.cisco.com/en/US/customer/products/hw/switches/ps646/products_tech_note09186a0080094bc6.shtml

You have something like 16-24.000 entries which are shared between routes, 
QoS, mac adress table size etc. Default is 5k mac adress size on the 
3550-24/48. For metro applications, this is not enough.

 PPS. I do not know for sure, but 3550 should support traffic shaping, which
 makes bufferring. Technically, yes, CEF (with packet dropping) is not good
 to provide 2 Mbit by 100 Mbit link.

The 3550 doesnt support shaping of any kind, only policing (dropping 
packets, never buffer them). How can you advocate a switch which you seem 
to know so little about?

-- 
Mikael Abrahamssonemail: [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread sthaug

 3550 runs IOS. That's an answer. I never allow any non-IOS router in
 production environment (except high end devices, such as Juniper, when
 benefits are very high). And 3550 is not expansive (yes, it is not cheap).

If you believe that IOS solves all problems, we live on different
planets.

 PS. How much ethernet ports do you have in the office? Do you have 100 K
 ports? If not, why do you need 128K MAC's? (I know only one case, when I
 need so much - some kind of DSL service...

Some kind of DSL service is indeed the background for my question.

 In most cases, you have 500 - 5,000 ports in one building. If you have more,
 it is unlikely that you use 3550 switches. So, it is enough for the tasks
 (just as performance - it have _enough_ performance). Btw, I believed that
 catalist swithes have not any limitations for the MAC tables (because they
 use memory _on demand_); where did you get this limitations? /I may be wrong
 here/

If you believe Catalyst switches have no MAC address limitations, I
have a nice plot of land in Florida to sell you :-)  Ethernet switches
today use CAM to hold the MAC address tables - this CAM has a finite
size.

 PPS. I do not know for sure, but 3550 should support traffic shaping, which
 makes bufferring. Technically, yes, CEF (with packet dropping) is not good
 to provide 2 Mbit by 100 Mbit link.

3550 only supports policing. Yes, I have worked extensive with 3550
and it doesn't have the features I need right now.

Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Randy Bush

 3550 runs IOS.

this is a benefit, especially in a switch?

randy



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread sthaug

  3550 runs IOS.
 
 this is a benefit, especially in a switch?

If your whole support organization is geared towards IOS, and unable
to learn other CLIs, it may well be. Fortunately, not all support
organizations are like that :-)

Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread variable

On Sun, 25 Jan 2004, Jeff Kell wrote:

 We're running 30 SVIs on a 3550-12 (only 10 active at the moment, we're 
 in a transition).  It is an aggregation switch that feeds back via L3.

According to the documentation on the Cisco site:

http://www.cisco.com/warp/public/473/145.html

The 3550-12 is only capable of handling 16 SVIs in hardware (regardless of 
SDM template), after that you get into resource exhaustion which means 
it add the SVIs, but will go back to software/CPU-based routing.  Does the 
3550/3750 give any indication that it's in this state (software routing) 
other than melting under high traffic volumes?

We're currently waiting on Cisco getting back to us on figures for the 
3750, but given that it has a similar TCAM setup to the 3550-12, I'd doubt 
it would be different.
 
Rich



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Peter J Hill
On Jan 26, 2004, at 2:04 AM, Alexei Roudnev wrote:

1) Cisco ISL is much better than urgly 802.1q - first of all,  it was
designed many years before 802.1q. I am not even talking abiout those
idiots, who designed 802.1q as a _spanning tree on the trunk level_, 
which
made many configurations (which we used with ISL ain 199x years) 
impossble,
and caused vendors to extend 802.1q.
Is it April 1st? ISL changes the size of packets, does it not? So know 
you have to deal with MTU issues. What happens when I want the biggest 
MTU possible? I know it is not much a difference in size, but for some 
people, size does matter.

I am quite happy with dot1q. My gripe is with poor spanning-tree 
implementations. I don't want a single spanning-tree for every vlan on 
a trunk... I like standards, but I am happy with Rapid-PVST. Just my 
feelings about the issue. I would never deploy ISL unless I had 
something like a 1900 that did not do dot1q

2) Of course, VLAN does not infer routing. But VLAN routing can be 
provided
on the switch fabric, effectively bypassing many traditional drawbacks 
- see
Cisco 6509, for example.
Are you talking about multilayer switching implementations? That is why 
C came out with dCEF. I costs, but if you want to do serious routing, 
damn if it ain't fast ;-)

- Original Message -
From: Brian Wallingford [EMAIL PROTECTED]
To: Alexei Roudnev [EMAIL PROTECTED]
Cc: ken emery [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Sunday, January 25, 2004 10:17 PM
Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

On Sun, 25 Jan 2004, Alexei Roudnev wrote:

:
:L3 switchiong is just term for idiots - it is ROUTING in old terms. 
So,
:VLAN's means _routing_.

Um, no, VLAN does not infer routing.  802.1q and even Cisco's ugly
proprietary ISL both operate at layer two.
As to L3 switching and the spin involved in such, it's an old,
predictable story, which we all wrote off as marketing drivel at 
least a
couple years ago...





Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Alexei Roudnev

ISL _DOES NOT CHANGE_ packet size. 

 Is it April 1st? ISL changes the size of packets, does it not? So know 
 you have to deal with MTU issues. What happens when I want the biggest 
 MTU possible? I know it is not much a difference in size, but for some 
 people, size does matter.
 
 I am quite happy with dot1q. My gripe is with poor spanning-tree 
  2) Of course, VLAN does not infer routing. But VLAN routing can be 
  provided
  on the switch fabric, effectively bypassing many traditional drawbacks 
  - see
  Cisco 6509, for example.
 
 Are you talking about multilayer switching implementations? That is why 
 C came out with dCEF. I costs, but if you want to do serious routing, 
 damn if it ain't fast ;-)
Agree in general.




Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread sthaug

  1) Cisco ISL is much better than urgly 802.1q - first of all,  it was
  designed many years before 802.1q. I am not even talking abiout those
  idiots, who designed 802.1q as a _spanning tree on the trunk level_, 
  which
  made many configurations (which we used with ISL ain 199x years) 
  impossble,
  and caused vendors to extend 802.1q.
 
 Is it April 1st? ISL changes the size of packets, does it not? So know 
 you have to deal with MTU issues. What happens when I want the biggest 
 MTU possible? I know it is not much a difference in size, but for some 
 people, size does matter.
 
 I am quite happy with dot1q. My gripe is with poor spanning-tree 
 implementations. I don't want a single spanning-tree for every vlan on 
 a trunk... I like standards, but I am happy with Rapid-PVST. Just my 
 feelings about the issue. I would never deploy ISL unless I had 
 something like a 1900 that did not do dot1q

Amen. At my previous employer, we got rid of ISL on almost all trunks.
I wouldn't dream of going back. The only thing I don't really like about
802.1q compared to ISL is the idea of native or default VLAN. I want
links to be either access (untagged) or trunk (*all* packets tagged).
Fortunately, reasonably new Cisco switches let me enforce that with
vlan dot1q tag native.

Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread sthaug

 ISL _DOES NOT CHANGE_ packet size. 

An 802.1q tag adds 4 bytes to the Ethernet frame. 

ISL encapsulation adds 30 bytes to the Ethernet frame.

Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Alexei Roudnev


  PS. How much ethernet ports do you have in the office? Do you have 100 K
  ports? If not, why do you need 128K MAC's? (I know only one case, when I
  need so much - some kind of DSL service...

 I guess you're not into metro networking.
This is one of my exceptions - you really need 128K MAC's for meto network.

And, for metro network, it may be reasonable to spend time in QA'ing and
configuration and select non-cisco solution - because it is a very big
project. But it is exceptional case.

  PPS. I do not know for sure, but 3550 should support traffic shaping,
which
  makes bufferring. Technically, yes, CEF (with packet dropping) is not
good
  to provide 2 Mbit by 100 Mbit link.

 The 3550 doesnt support shaping of any kind, only policing (dropping
 packets, never buffer them). How can you advocate a switch which you seem
 to know so little about?
I just never tried to configure 'traffic-shape' on it, so I do not know. It
is great switch for it's  niche. Metro LAN's is not standard switch niche,
it is very special network. As I said above, non-cisco solution can paid off
for this.




 -- 
 Mikael Abrahamssonemail: [EMAIL PROTECTED]




Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread Scott McGrath


Both the ISL _and_ the Dotq headers are stripped off at the trunk
interface so they _both_ change the packet size but neither alters the
payload.


Scott C. McGrath

On Mon, 26 Jan 2004 [EMAIL PROTECTED] wrote:


  ISL _DOES NOT CHANGE_ packet size.

 An 802.1q tag adds 4 bytes to the Ethernet frame.

 ISL encapsulation adds 30 bytes to the Ethernet frame.

 Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-26 Thread sthaug

 Both the ISL _and_ the Dotq headers are stripped off at the trunk
 interface so they _both_ change the packet size but neither alters the
 payload.

Obviously. But the fact that ISL adds 26 bytes more than 802.1q means
that multiple levels of ISL encapsulation is somewhat less practical
than multiple levels of 802.1q tags.

Some of us *need* those multiple levels of 802.1q tags.

Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]


Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread sthaug

Does anybody know of 1U - 2U form factor Ethernet switches that can
handle 4K VLANs, or at a minimum 2000 VLANs?  Note that we're
specifically looking for the ability to handle this number of VLANs
operating simultaneously, not only VLAN *IDs* in the full 4K range.

(This rules out popular switches like the Cisco 3550 and 3750 series,
which can only handle 1024 VLANs operating simultaneously.)

The switches should have 12 - 24 Fast Ethernet ports. Some form of Q
in Q or stackable VLANs, ie. the ability to handle more than one VLAN
tag, is vital.

Spanning tree is needed, but can be one common spanning tree for all
VLANs (per-VLAN spanning tree is not needed).

Other features that would be nice to have:

- RSTP (802.w) and MST (802.1s).
- A couple of GigE ports (GBIC or SFP based, presumably) for uplinks.
- L3 (IP routing).
- DC power.


Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Mikael Abrahamsson

On Sun, 25 Jan 2004 [EMAIL PROTECTED] wrote:

 
 Does anybody know of 1U - 2U form factor Ethernet switches that can
 handle 4K VLANs, or at a minimum 2000 VLANs?  Note that we're
 specifically looking for the ability to handle this number of VLANs
 operating simultaneously, not only VLAN *IDs* in the full 4K range.

Extreme Summit48si.
 
 The switches should have 12 - 24 Fast Ethernet ports. Some form of Q
 in Q or stackable VLANs, ie. the ability to handle more than one VLAN
 tag, is vital.

You can do this by changing the ethertype of VLANs, Extreme calls this 
VMAN (9100 for vlans intead of 8100). This requires a network design to 
match. The switch has 48 ports and two SFP gig ports.
 
 Spanning tree is needed, but can be one common spanning tree for all
 VLANs (per-VLAN spanning tree is not needed).

It does that.

 Other features that would be nice to have:
 
 - RSTP (802.w) and MST (802.1s). - A couple of GigE ports (GBIC or SFP
 based, presumably) for uplinks. - L3 (IP routing). - DC power.

I dont know about RSTP and MST, but it does the rest. It also has EAPS for 
subsecond L2 failover.

-- 
Mikael Abrahamssonemail: [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Will Hargrave

On Sun, Jan 25, 2004 at 08:13:45PM +0100, [EMAIL PROTECTED] wrote:
 Does anybody know of 1U - 2U form factor Ethernet switches that can
 handle 4K VLANs, or at a minimum 2000 VLANs?  Note that we're
 specifically looking for the ability to handle this number of VLANs
 operating simultaneously, not only VLAN *IDs* in the full 4K range.

I would check the Foundry Fastiron series - maybe the 4802. Everything
I've read appears to indicate they support all 4096 vlans
simultaneously, although you will of course want to verify this. 

Extreme also appear to support 4096 vlans - you'd be looking at the
Summit 200 or Summit 48si for that. 

Even Cisco's new 3750 Metro only supports 1024 vlans - but both this and
it's similarly-named predecessors are aimed as CPE; I suppose this is 
because they want you to fork out for 6500. 

W



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Joel Jaeggli

try extreme...

summit alpine and blackdiamond should all do that although only the 
summits fit in the form-factor you're thinking of.

My experience with extremes as l3 boxes is neither recent nor pleasant, 
but that's not how we use them anyway.

On Sun, 25 Jan 2004 [EMAIL PROTECTED] wrote:

 
 Does anybody know of 1U - 2U form factor Ethernet switches that can
 handle 4K VLANs, or at a minimum 2000 VLANs?  Note that we're
 specifically looking for the ability to handle this number of VLANs
 operating simultaneously, not only VLAN *IDs* in the full 4K range.
 
 (This rules out popular switches like the Cisco 3550 and 3750 series,
 which can only handle 1024 VLANs operating simultaneously.)
 
 The switches should have 12 - 24 Fast Ethernet ports. Some form of Q
 in Q or stackable VLANs, ie. the ability to handle more than one VLAN
 tag, is vital.
 
 Spanning tree is needed, but can be one common spanning tree for all
 VLANs (per-VLAN spanning tree is not needed).
 
 Other features that would be nice to have:
 
 - RSTP (802.w) and MST (802.1s).
 - A couple of GigE ports (GBIC or SFP based, presumably) for uplinks.
 - L3 (IP routing).
 - DC power.
 
 
 Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
 

-- 
-- 
Joel Jaeggli   Unix Consulting [EMAIL PROTECTED]
GPG Key Fingerprint: 5C6E 0104 BAF0 40B0 5BD3 C38B F000 35AB B67F 56B2




Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Mikael Abrahamsson

On Sun, 25 Jan 2004, Joel Jaeggli wrote:

 My experience with extremes as l3 boxes is neither recent nor pleasant, 
 but that's not how we use them anyway.

This is interesting, what problems did you run into?

We have an extensive Extreme networks used both for L2 and L3, and apart 
from the fact that it always cpu routes ICMP, I see no major flaw in the 
L3 forwarding function (for access/distribution) for all normal purposes.

My few experiences with the Cisco 3550 as L3 routers has been much worse, 
even with claimed CEF capability I have seen it melt and die where the 
equivalent Extreme box didnt experience the same problems (of course there 
are cases where it's the other way around). Overall I have more confidence 
in the Extreme access boxes for L3 than Ciscos equivlanent, and they 
definately kick ciscos ass when it comes to L2 (mac address table size and 
number of vlans for instance).

-- 
Mikael Abrahamssonemail: [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Mikael Abrahamsson

On Sun, 25 Jan 2004, Alexei Roudnev wrote:

 1) Use Cisco 2924 or 3524

Didnt you mean 2950 and 3550? 

-- 
Mikael Abrahamssonemail: [EMAIL PROTECTED]



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Jeff S Wheeler

On Sun, 2004-01-25 at 14:44, Will Hargrave wrote:
 I would check the Foundry Fastiron series - maybe the 4802. Everything
 I've read appears to indicate they support all 4096 vlans
 simultaneously, although you will of course want to verify this. 

I don't think this is true. Those of you with BigIron units know that
(at least in m3 supervisors) they support only 512 vlans at most. I do
not think the older, and generally less capable, FastIron switches are
likely to support more.

The command to check this on BigIron is `show default values`.

--
Jeff



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Niels Bakker

* [EMAIL PROTECTED] (Jeff S Wheeler) [Sun 25 Jan 2004, 22:10 CET]:
 On Sun, 2004-01-25 at 14:44, Will Hargrave wrote:
 I would check the Foundry Fastiron series - maybe the 4802. Everything
 I've read appears to indicate they support all 4096 vlans
 simultaneously, although you will of course want to verify this. 
 I don't think this is true. Those of you with BigIron units know that
 (at least in m3 supervisors) they support only 512 vlans at most. I do
 not think the older, and generally less capable, FastIron switches are
 likely to support more.
 
 The command to check this on BigIron is `show default values`.

That indicates a maximum of 4095 on a recent switch here that runs the
layer-2 only image.  Older models appear to have a limit of 2048, but
I can't tell for sure whether this is hardware or software related.

Configurability is, of course, no guarantee for things to actually work.


-- Niels.


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Jeff Kell
Alexei Roudnev wrote:

1) Use Cisco 2924 or 3524
2) Redesign your network to fit into 1024 VLANs
3) Do not spend time with junk (non Cisco, for the switches).
U1 switch have only 24 - 48 ports, so you never need to handle 2000 VLAN's
on it. And I suspect, that the whole design is wrong.
Do not build custom configuration (4000 VLANs), build standard configuration
(20 - 40 VLANs) /except - if you want to became a QA for the whole vendor/.
I agree, but you could still have 4000 VLANs with multiple VTP domains.
Using 3550-48s you can have L3 links between VTP domains.
Jeff



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Will Hargrave

On Sun, Jan 25, 2004 at 09:39:05PM +0100, Mikael Abrahamsson wrote:
 This is interesting, what problems did you run into?
 
 We have an extensive Extreme networks used both for L2 and L3, and apart 
 from the fact that it always cpu routes ICMP, I see no major flaw in the 
 L3 forwarding function (for access/distribution) for all normal purposes.

ACLs are per-port and known to be buggy when operating on port numbers -
in particular UDP ACLs match will match arbritary data when presented
with a subsequent IP fragments (think NFS...)

As pointed out in a similar thread recently, the 'flow-based' (well, 
destination IP based) ipfdb will crap out on the Extremes under heavy load 
- e.g. virus'd machines internal to your network doing heavy scanning.
Symptom is very poor performance and the 'top' command will show heavy
CPU usage as subsequent flows are CPU routed.

 My few experiences with the Cisco 3550 as L3 routers has been much worse, 
 even with claimed CEF capability I have seen it melt and die where the 
 equivalent Extreme box didnt experience the same problems (of course there 
 are cases where it's the other way around). Overall I have more confidence 
 in the Extreme access boxes for L3 than Ciscos equivlanent, and they 
 definately kick ciscos ass when it comes to L2 (mac address table size and 
 number of vlans for instance).

The 'recommended max' number of SVIs for the 3550 is something low like 8.
There is no limited stated in the datasheet for the 3750 - is anyone
running more than 8 SVIs on a 3750? 

The ACL capability on the 3550 seems a lot more capable but the lack of
unicast RPF is irritating. (More irritating, 'ip verify unicast
reachable-via...'  is accepted but silently does nothing)

I'd be very interested to hear what conditions you've found cause
problems for Cat3550s. We're planning to buy quite a few more of this range
(probably 3750-24) to reduce L2 size in our network and for CPE-type
uses. 




Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread ken emery

On Mon, 26 Jan 2004, Niels Bakker wrote:

 * [EMAIL PROTECTED] (Jeff Kell) [Mon 26 Jan 2004, 00:35 CET]:
  Using 3550-48s you can have L3 links between VTP domains.

 The point of using VLANs is that you don't need to route.  There's
 probably a good reason for switching instead of routing in the original
 poster's scenario.  (Perhaps a FTTH-like project?)

Correct me if I'm wrong here, but at some point you will have to route
all those VLAN's.  To really answer the question about wether  1000
VLAN's are necessary one would need to see the network design.

From my point of view I'd have to question the need to carry that many
VLAN's over a large portion of the network.  I would think that the
network should be more partitioned so most of the VLAN's don't need to
be seen outside a small area.

bye,
ken emery



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Jeff Kell
Will Hargrave wrote:

The 'recommended max' number of SVIs for the 3550 is something low like 8.
There is no limited stated in the datasheet for the 3750 - is anyone
running more than 8 SVIs on a 3750? 
We're running 30 SVIs on a 3550-12 (only 10 active at the moment, we're 
in a transition).  It is an aggregation switch that feeds back via L3.

The ACL capability on the 3550 seems a lot more capable but the lack of
unicast RPF is irritating. (More irritating, 'ip verify unicast
reachable-via...'  is accepted but silently does nothing)
Agreed - we had PSIRT look into it and the solution is probably going 
to be removing ip verify from the CLI parser :-(  We had another 3550 
replace a struggling 2621 and it blew it away.

I'd be very interested to hear what conditions you've found cause
problems for Cat3550s. We're planning to buy quite a few more of this range
(probably 3750-24) to reduce L2 size in our network and for CPE-type
uses. 
In a new building deployment we used 4500 Sup-IVs as MDF/IDF anchors and 
populated the distributions with 3550-48s.  Most of the 4500s had one 48 
port copper 10/100/1000 blade to supply gig-to-desktop where needed 
(their ASICs are overloaded 8-to-1 so be careful about placement).  The
4500 not only doesn't do uRPF, it doesn't do flow either.

The ACLs/MLS features are nice, supporting input ALCs, 'established' 
keyword, and logging (unlike, say MLS to a 5500 NFFC).  It will not 
process switch these packets but rather forks a copy to the CPU to
log if necessary.

It is very annoying that neither 3550 nor 4500 support uRPF.  Does 
anyone know if the 3750 does?

Jeff



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread ken emery

On Sun, 25 Jan 2004, Bill Nash wrote:

 On Sun, 25 Jan 2004, ken emery wrote:
   The point of using VLANs is that you don't need to route.  There's
   probably a good reason for switching instead of routing in the original
   poster's scenario.  (Perhaps a FTTH-like project?)
 
  Correct me if I'm wrong here, but at some point you will have to route
  all those VLAN's.  To really answer the question about wether  1000
  VLAN's are necessary one would need to see the network design.

 I would argue this point. I've got a production environment sporting
 multiple vlans, none which will ever see an external subnet or even a
 gateway (think databases.) The operative context inherent in the VLAN
 acronym is, after all, 'local', and not every topology requires routing.

This is correct, but then why spend the money on a L3 switch?  Routing
isn't needed so save the money and purchase a L2 switch.

bye,
ken emery



Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Alexei Roudnev

Hmm; if they need to run 2000 VLAN's, they do not need L3 routing in every
box...

Of course, if they want L3 routing on every box (I do not like such idea,
but it's possible), then 3550 (or what do they have now?) is the best
choice.

But I am very suspicious about such design... in 99% cases, 4,000 VLAn,s and
100 24-port switches means _bad network / solution schema_.

If use other (non Cisco) switches - it may be very good choice in getting
low price, but it requires long and careful testing. My experience is
strictly asgainst non-cisco devices in such areas, as - VoIP, IP routing, L2
/ L3  switches/routers (and almost the same in switches).



- Original Message - 
From: Mikael Abrahamsson [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, January 25, 2004 12:40 PM
Subject: Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?



 On Sun, 25 Jan 2004, Alexei Roudnev wrote:

  1) Use Cisco 2924 or 3524

 Didnt you mean 2950 and 3550?

 -- 
 Mikael Abrahamssonemail: [EMAIL PROTECTED]




Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Brian Wallingford

On Sun, 25 Jan 2004, Alexei Roudnev wrote:

:
:L3 switchiong is just term for idiots - it is ROUTING in old terms. So,
:VLAN's means _routing_.

Um, no, VLAN does not infer routing.  802.1q and even Cisco's ugly
proprietary ISL both operate at layer two.

As to L3 switching and the spin involved in such, it's an old,
predictable story, which we all wrote off as marketing drivel at least a
couple years ago...


Re: Any 1U - 2U Ethernet switches that can handle 4K VLANs?

2004-01-25 Thread Mikael Abrahamsson

On Mon, 26 Jan 2004, Will Hargrave wrote:

 I'd be very interested to hear what conditions you've found cause
 problems for Cat3550s. We're planning to buy quite a few more of this range
 (probably 3750-24) to reduce L2 size in our network and for CPE-type
 uses. 

Well, we're not really sure. We put it in front of a 7200 doing approx 50 
megabits of data with 50% cpu load, to divert the internet traffic and 
make the 7200 handle only MPLS PE functionality. The 3550 had only 3 SVIs.

It might be broadcast related, we had a lot of L2 broadcasts on that 
segment.

-- 
Mikael Abrahamssonemail: [EMAIL PROTECTED]