- Test - lists.nanog.org

OT: VSS + MEC - port-channel dynamically cloned?
by Leland Vandervort 24 Nov '09

24 Nov '09

Hi all.. this one seems to have stumped even the community forums on CCO ;) Anyone else seen this behaviour? (It's not actually a problem as such since the MEC port-channels are actually working fine, just unexpected the way that it has done it...) We have a few paris of VSS running, and having brought the down-stream access-switches online using MEC we note that the active port-channel that they bind under isn't actually the one configured, but rather a CLONE of the configured one which appears to be dynamically generated. In our case, all ports and port-channel configurations are set to dot1q encapsulation and trunk mode active. For example, we have about 20 3560s MEC'd to the VSS: the MEC comes up, but under a slightly different port-channel identifier: Here's the 3560 side: interface status: Gi0/49 connected trunk a-full a-1000 1000BaseSX SFP Gi0/50 connected trunk a-full a-1000 1000BaseSX SFP Gi0/51 connected trunk a-full a-1000 1000BaseSX SFP Gi0/52 connected trunk a-full a-1000 1000BaseSX SFP #sh int po1 | i Member Members in this channel: Gi0/49 Gi0/50 Gi0/51 Gi0/52 Here's the VSS side: Interface status: Po11 CISCO C3560 A01 notconnect 1 auto auto Po11A connected trunk a-full a-1000 ^^^^ Po11A is not actually configured, but appears to be cloned from Po11 #sh int po11A | i Member Members in this channel: Gi1/1/33 Gi1/1/34 Gi2/1/41 Gi2/1/42 #sh cdp nei | i hacc01-d hacc01-d Gig 2/1/42 140 S I WS-C3560G Gig 0/50 hacc01-d Gig 2/1/41 140 S I WS-C3560G Gig 0/49 hacc01-d Gig 1/1/34 161 S I WS-C3560G Gig 0/52 hacc01-d Gig 1/1/33 161 S | WS-C3560G Gig 0/51 Essentially, for all of the MEC connections, the VSS has created a clone of the configured port-channel to bind the actual physical connections, rather than binding them under the configured port-channel (and suffixed the port-channel number with A or B depending on which chassis was first to bind). Config for port-channel and interfaces all match: VSS SIDE: interface Port-channel11 description CISCO C3560 A01 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 40-48,51,400 switchport mode trunk mtu 9216 end Physical ports are the same config, with channel-group 11 mode active (and repeated for 20 different port-channels each with 4 ports) ACCESS Side: interface Port-channel1 description DIST-VSS-EQX1 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 40-48,51,400 switchport mode trunk mtu 9216 end Similarly, physical ports are the same with channel-group 1 mode active I'm not overly worried about it since the MEC is working with the dynamically generated port-channel, and traffic is flowing correctly... just curious as to why it uses a clone of the configured port-channel, rather than the actual configured port-channel itself. Just find that a bit strange. Thanks, Leland

2 3

Ethernet over DS3 Converters
by Brad Fleming 24 Nov '09

24 Nov '09

Hello all, My company is searching for some Ethernet over DS3 converters / adaptors for a specific installation. I see several options from Adtran, RAD-Direct, and a couple other (smaller) vendors and was wondering if anyone out there has suggestions or insights. Our needs are pretty simple: We'll need to pass multiple VLANs unless that's simply not possible. We'll need copper 10/100 interfaces on each side. Here are the two main products we're currently eyeing.... Adtran Product: http://www.adtran.com/web/page/portal/Adtran/group/3024 RAD-Direct Product: http://www.rad.com/10/Fast_Ethernet_over_T3_NTU/2480/ Thanks very much for any suggestions. -- Brad Fleming Network Engineer Kansas Research and Education Network Office: 785-856-9800 x.222 Moblie: 785-865-7231 NOC: 866-984-3662

10 9

Recomended data cabling contractors in Bay Area/Peninsula?
by Darren Bolding 24 Nov '09

24 Nov '09

Hello, I need to identify a quality data cabling contractor in the Bay Area (Peninsula/Palo-Alto/Redwood City) area, and most of the folks I've worked with before are not available or are doing different things these days. Does anyone have a recommended contractor in this area? This is basic Cat5E/Patch Panel work. Thanks for any suggestions! --D -- -- Darren Bolding -- -- darren(a)bolding.org --

2 1

Re: ip capacity provider
by sfouant＠shortestpathfirst.net 24 Nov '09

24 Nov '09

AS 701 Verizon Business (formerly UUNet) has a POP in Miami I believe, and they connect directly into their AS in LatAm. Regards, Stefan Fouant www.shortestpathfirst.net ------Original Message------ From: Beavis To: nanog(a)nanog.org Subject: ip capacity provider Sent: Nov 23, 2009 2:47 PM All, I know this is a long shot, but can anyone help me out on getting in touch with carriers in Miami FL. one that can pass ip traffic into latin america?. any help would be greatly appreciated. thanks, -- () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments Sent from my Verizon Wireless BlackBerry

2 1

Smartcard and non-password methods (was Re: Password repository)
by Sean Donelan 24 Nov '09

24 Nov '09

Are any network providers supporting smartcards or other non-password based authentication methods? Passwords always end up blaming the user for choosing/not remembering good passwords instead of blaming the technology for choosing/not doing things so the user isn't forced to work around its flaws. I know about the DOD Common Access Card. One-time code-generator tokens seem more widely used by single enterprises. But inter-operable credentials still seem to be one of those great unsolved problems for compter security. Are passwords still the only lowest-common-denominator?

12 15

Tucows vs Postini
by Paul Stewart 24 Nov '09

24 Nov '09

Hi folks... Anyone have much experience with outsourcing antispam/antivirus to Tucows? We use Postini today and are overall pleased. The Tucows pricing seems to be MUCH lower so curious on any feedback... Thanks, Paul ---------------------------------------------------------------------------- "The information transmitted is intended only for the person or entity to which it is addressed and contains confidential and/or privileged material. If you received this in error, please contact the sender immediately and then destroy this transmission, including all attachments, without copying, distributing or disclosing same. Thank you."

5 5

Re: Testing Internet Speeds and Capacity
by Xai Xi 24 Nov '09

24 Nov '09

As mentioned, there is a limitation to TCP-based speed tests - TCP throughput is very sensitive to packet losses, particularly during slow-start, in addition to requiring end-host tuning (as an exercise, try running speedtest.net on a high bandwidth connection). You could use something called "available bandwidth", which is kind of like the "leftover capacity" on your path - I've been using this tool called pathload2: http://www.measurementlab.net/measurement-lab-tools#pathload2 _________________________________________________________________ Keep your friends updated—even when you’re not signed in. http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/so…

3 2

Testing Internet Speeds and Capacity
by shake righa 23 Nov '09

23 Nov '09

Hi, how does one truly test internet speeds provided by your provider. Speed test sits give different results that one provided by the provider. Regards, Shake

6 6

ip capacity provider
by Beavis 23 Nov '09

23 Nov '09

All, I know this is a long shot, but can anyone help me out on getting in touch with carriers in Miami FL. one that can pass ip traffic into latin america?. any help would be greatly appreciated. thanks, -- () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments

1 0

Re: earthlink sorbs
by chaim.rieger＠gmail.com 23 Nov '09

23 Nov '09

Same here Many bounces, started this weekend. Sent via BlackBerry from T-Mobile

2 1