[c-nsp] Cisco 7500 High Availability

[Rodney Dunn]

You should never run IPSEC on a 75xx other than just for
management to/from the box. We strongly don't recommned it.

As long as you have enough memory to do dCEF you should be ok
with SSO with the hardware and OSPF and BGP.

Rodney

On Mon, Apr 10, 2006 at 04:24:43PM -0500, neal rauhauser wrote:
> 
>   They've got four 7507s with RSP4, 12.0.32S IPsec, they're running BGP, 
> OSPF, and they've got PA-FE-TX and PA-T3 in VIP-2/50s. And of course 
> they don't have Smartnet, because that doesn't come with Ebay purchases :-)
> 
> 
> 
> 
> 
> 
> Rodney Dunn wrote:
> > On Mon, Apr 10, 2006 at 03:54:13PM -0500, neal rauhauser wrote:
> >>
> >>    I've got a customer with some 75xx that have dual RSP4s in them. 
> >> We've got identical dram/flash/12.0.32S code on them and I've started 
> >> fooling with the high availability stuff. I've received feedback from a 
> >> couple people on NANOG that this doesn't work very well - the four to 
> >> eight minute recovery RPR works, but the faster modes do not behave.
> > 
> > You will always get various levels of answers to questions like that.
> > You should always ask for more specifics like "EXACTLY what code were
> > you running, what EXACTLY did your full configuration look like, etc.."
> > 
> > For all we know they were running protocols that are not HA supported.
> > 
> > For raw IP on standard Ethernet and WAN circuits (not PPPoX type
> > aggregation) SSO mode should work just fine in later code.
> > We don't support PPPoX HA on the 75xx (well, we don't like to say
> > PPPoanything is supported on that platform).
> > 
> > 
> >>   Can anyone comment on this? I'd like to make it go for this guy, but I 
> >> don't want to spend forty hours learning all of the failure modes for a 
> >> software product that works better on other hardware platforms ...
> >>
> >>
> >>
> >> -- 
> >> mailto:Neal at Layer3Arts.com // IM:layer3arts
> >> voice: 402 408 5951
> >> cell : 402 301 9555
> >> fax  : 402 408 6902
> >>
> >> _______________________________________________
> >> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> >> https://puck.nether.net/mailman/listinfo/cisco-nsp
> >> archive at http://puck.nether.net/pipermail/cisco-nsp/
> > 
> 
> 
> -- 
> mailto:Neal at Layer3Arts.com // IM:layer3arts
> voice: 402 408 5951
> cell : 402 301 9555
> fax  : 402 408 6902