[c-nsp] strange problem about stm-1

2010-10-09 Thread ying-xiang
hi,everyone i got a very strage problem about stm-1 which installed in a cisco 7606-s chassis with a sup-32 engine. according to the 3-7-3 divide the stm-1 into 63 2MB E1 ports that are connected to our branch devices,respectively recently,many 2MB lines have encountered varying packet

Re: [c-nsp] High CPU util on a 2811 with two ipsec tunnels

2010-10-09 Thread Chris Mason
C2800NM-ADVIPSERVICESK9-M), Version 12.4(15)T1.  Why would this traffic not I wouldn't recommend using that IOS as it was deferred a long time ago for IPSEC/GETVPN issues to name just a few - as well as T2, T3, etc. Try the latest 12.4(15)T13/T14 release, but I don't think it will help the CPU

[c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
I have a question I have been thinking about. Let's say we purchased a 5Mbit Ethernet Link. The physical speed of the link is 10Mbit, so we shape outbound traffic to 5Mbit, like such: class-map ef match ip dscp ef class-map af4 match ip dscp af41, af42, af43 class-map af3 match ip dscp af31,

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Mikael Abrahamsson
On Sat, 9 Oct 2010, Roger Wiklund wrote: So, as we shape, as long as we have buffers, we will never see any tail drops, as we will just delay the packets until we send it, correct? Buffers are not infinite, so you might still see tail drops. If this e1 is 100% utilized, we will get tail

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
Buffers are not infinite, so you might still see tail drops. Indeed, but I'm thinking if I only apply the qos policy-map, I switch from fifo to CBWFQ with multiple software queues, and buffers. If I on top of that do shaping, would I not utilize yet another buffer? I.E. the shaping buffer.

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Arie Vayner (avayner)
Roger, This is a sub rate link, as you use a physical rate of 10Mbps with a downstream service of 5Mbps - This means that somewhere down the link (on the SP network) they would be dropping anything above 5Mbps. Your router does not have any way (except shaping) to know that there is a limit for

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Per Carlson
Both policing and shaping are tools to use when dealing with sub-rates. The whole point with a shaper is to create a virtual interface speed and thus make use of the output queues earlier. In that perspective shaping to the interface speed is rather pointless. -- Pelle (sorry about the

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
In that perspective shaping to the interface speed is rather pointless. Yeah that's what I belive also. This whole thing started with a person at my work telling me that we should shape a 1984 to 1984 just to delay packets instead of tail dropping. I just wanted to get my head around this.

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Keegan Holley
Yes you are correct, shaping will keep packets from being dropped until the queues are full. However, once the queues are full there is nothing else for the router to do but tail drop. This is true with or without shaping. Also, adding buffers does not add more memory to be used to queue

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Mikael Abrahamsson
On Sat, 9 Oct 2010, Roger Wiklund wrote: Yeah that's what I belive also. This whole thing started with a person at my work telling me that we should shape a 1984 to 1984 just to delay packets instead of tail dropping. I don't get it. Tail dropping is what you do when the queue is full,

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
I don't get it. Tail dropping is what you do when the queue is full, you're delaying a lot of packets and you don't want to fill the queue any more. Saying we should delay packets instead of tail dropping just doesn't make any sense to me. Exactly, this was basically my initial response to

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Roger Wiklund
I don't get it. Tail dropping is what you do when the queue is full, you're delaying a lot of packets and you don't want to fill the queue any more. Saying we should delay packets instead of tail dropping just doesn't make any sense to me. Exactly, this was basically my initial response to

[c-nsp] Weird Ping Response Times

2010-10-09 Thread Dominic
My voice SBC (Acme Packets) shares the same subnet, and even the same Cisco switch, with a couple of other devices (including a Cisco GSR 12800, Cisco Pix, and a Cisco 7206VXR). When pinging the SBC from non-cisco devices, the response time is 0/0/0 ms, as one would expect. When pinging from

[c-nsp] doubt on Mpps

2010-10-09 Thread jack daniels
Hi guys, I'm always confused with the use of MPPS . I understand Mpps is million packets per second. But if customer asks me he has 10G traffic in and 10G traffic out . Now whie planning for card and device whats practical use of MPPS. Regards ___

Re: [c-nsp] doubt on Mpps

2010-10-09 Thread Mikael Abrahamsson
On Sun, 10 Oct 2010, jack daniels wrote: But if customer asks me he has 10G traffic in and 10G traffic out . Now whie planning for card and device whats practical use of MPPS. Worst-case, take in+out bytes/s and divide by something like 64 to get a ddos scenario performance figure. For

Re: [c-nsp] to shape or not to shape

2010-10-09 Thread Arie Vayner (avayner)
Exactly, and this is why we need shaping for a sub rate link - the router would not use the different class configuration for the different traffic classes unless it knows that the link is congested. If we use a 10Mbps link for a 5Mbps service (or even worst a 1GE link for a 150Mbps service...)

Re: [c-nsp] doubt on Mpps

2010-10-09 Thread jack daniels
do u have any doc for the calculation will be of great help. or please explain with example the calculation 10X On Sun, Oct 10, 2010 at 9:53 AM, Mikael Abrahamsson swm...@swm.pp.se wrote: On Sun, 10 Oct 2010, jack daniels wrote: But if customer asks me he has 10G traffic in and 10G traffic