Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Marcin Kurek
Hello all, Thank you for insightful answers. I was thinking mostly about the second scenario Chuck mentioned - where some traffic naturally flows through the routers that are the RRs because of MPLS LSP. Setting next-hop-self on all reflected routes would be misconfiguration IMHO. I am also

Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Tony Varriale
On 12/31/2014 6:08 AM, Marcin Kurek wrote: Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a high-end processor with maximum memory

Re: The state of TACACS+

2015-01-01 Thread Tony Varriale
On 12/28/2014 5:02 PM, Robert Drake wrote: 3. authentication and authorization caching and/or something else Is this related to the TACACS server being down and the long time out to hit local authen/author? Sorry, a little late to this party :) tv

Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Baldur Norddahl
Is there a good reason to use actual router hardware for the route reflector role? Even a cheap server has more CPU and memory. If it is not in the forwarding path, this is a computing task - not a move packets at line speed task. Are anyone using Bird, Quagga etc. for this? Regards, Baldur

Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Nick Hilliard
On 01/01/2015 21:37, Baldur Norddahl wrote: > Are anyone using Bird, Quagga etc. for this? there are patches for both code-bases and some preliminary support for vpnv4 in quagga, but other than that neither currently supports either ldp or the vpnv4/vpnv6 address families in the main-line code. N

Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Jeff Tantsura
You don't need LDP on RR as long as clients support "not on lsp" flag (different implementation have different names for it) There are more and more reasons to run RR on a non router HW, there are many reasons to still run commercial code base, mostly feature set and resilience. Regards, Jeff >

Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Mike Hammett
Running various functions on a couple small VM clusters makes a lot of sense. - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com - Original Message - From: "Jeff Tantsura" To: "Nick Hilliard" Cc: nanog@nanog.org Sent: Thursday, January 1, 2015 7:54:32

Re: MPLS VPN design - RR in forwarding path?

2015-01-01 Thread Ca By
On Thursday, January 1, 2015, Mike Hammett wrote: > Running various functions on a couple small VM clusters makes a lot of > sense. > > > I agree, it makes some sense, especially if you are control plane bound. But, nearly all my routers run between 1% and 10% cpu. Ymmv. I have feeling that run