[c-nsp] LAN design.. distribution/core-edge routing...

[Mark Tohill]

Thanks for the reply Bruce.

The scenario is as below:

H1----SW1----6500-01----7200-01----ISP1-Router1
 \    /\     /| |   \   / |
  \  /  \   / | |    \ /  |
   \/    \ /  | |     X  |
   /\     \   | |    / \  |
  /  \   / \  | |   /   \ |
 /    \ /   \ | |  /     \|
H2----SW2----6500-02----7200-02----ISP1-Router2

1. Unsure as to arrangement of access to distribution/core 6500's, maybe
unique vlan per switch, unique vlans per switch or vlans spanning all
switches. I suppose this depends on the physical.

2. Since the links between the 6500's and edge 7200's will be routed
/30's, we have lost the HSRP functionality. The 7200's have default
static routes to the upstream neighbour.
Would it be best to redistribute this static from the 7200 via OSPF into
6500's with preferential cost on primary router?

3. Maybe if we recieved a default from our upstream instead of full routes, and pass that into an IGP, this may be a more resilient solution?

Thanks,
M

-----Original Message-----
From: Bruce Pinsky [mailto:bep at whack.org]
Sent: 22 August 2006 16:53
To: Mark Tohill
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] LAN design.. distribution/core-edge routing...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mark Tohill wrote:
> Hi,
> 
> Consider 2 x edge routers connecting to same ISP.
> Each router taking full BGP routes with AS prepends on the HSRP
standby box so traffic in/out only over the primary box. Also has static
default route to ISP neighbour.
> Each of these routers share the same L2 brodcast domain on a switched
network internally.
> 
> L2 domain is being upgrade with 6500's, VLAN's, HSRP, VACL's etc.
> Routed /32's will connect each of the 2 x 6500's to each of the edge
routers.
> 
> Is it best to keep things static, and for example, define weighted
static default routes on the 6500's to the primary/secondary boxes? Or
is dynamic the way to go?
> 
> Any thoughts appreciated.
> 

As with most things, what would changing accomplish for you or what are
you
trying to achieve that you are not getting now?

- --
=========
bep

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFE6yhJE1XcgMgrtyYRAprzAJ91ZxkhlCgE+q3txhpENm5mYA5bgQCgx4q6
163a2lb3E/fmZdtS2MYrtpc=
=FIn1
-----END PGP SIGNATURE-----