RE: [nsp] MPLS

From: Duane de Witt (duane.dewitt@sbs.siemens.co.za)
Date: Wed May 08 2002 - 13:08:37 EDT

Next message: Simon Leinen: "[nsp] Detecting TOS/DSCP changes [was: Re: [nsp] TOS/DSCP marking on 6509 SUP]"
Previous message: Cisco Systems Product Security Incident Response Team: "[nsp] Cisco Security Advisory: NTP vulnerability"
Next in thread: Duane de Witt: "[nsp] MPLS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

Thanks to everyone who replied.

The setup is in fact using ISL for VLAN's. I had to add mtu 1600 to all
switch ports and mpls mtu 1508 to all isl router interfaces. Everything
seems to be working now, including the MPLS VPN portion. BTW, the mtu
1600 was used on a 3524 Catalyst.

Now for another question: Has anyone ever configured NAT for VRF's on a
single 7140 so that the VPN networks can get to the internet? According
to Cisco it does work, but as usual there is no documentation to be
found.

Thanks a ton

-----Original Message-----
From: jlewis@lewis.org [mailto:jlewis@lewis.org]
Sent: Tuesday, May 07, 2002 3:59 PM
To: Mark Pace Balzan
Cc: Duane de Witt; cisco-nsp@puck.nether.net
Subject: Re: [nsp] MPLS

On Tue, 7 May 2002, Mark Pace Balzan wrote:

> > What are you doing with MPLS? I setup MPLS for MPLS-VPN a while
back and
> > am running MTU 1500 with tag-switching mtu 1520. Our low end
catalyst
> > 2900 series switches are apparently incapable of handling these
larger
> > frames,
>
> The Cat2916 with 4MB DRAM cannot handle larger frames, however the
Cat2924
> with 8MB DRAM can do that. Ive been working with that for some months
now

What magic config options did you have to set? Last time I tried this
was
with a WS-C2924-XL-EN with 8192K/1024K bytes of memory. To make things
more interesting, this switch is doing ISL to provide VLAN interfaces on
a
7206. Is the combination of MPLS + ISL the problem?

-- 
----------------------------------------------------------------------
 Jon Lewis *jlewis@lewis.org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

Next message: Simon Leinen: "[nsp] Detecting TOS/DSCP changes [was: Re: [nsp] TOS/DSCP marking on 6509 SUP]"
Previous message: Cisco Systems Product Security Incident Response Team: "[nsp] Cisco Security Advisory: NTP vulnerability"
Next in thread: Duane de Witt: "[nsp] MPLS"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:11:56 EDT