[c-nsp] Verizon TLS

[Jason Berenson]

Greetings,

I'm curious to get some input from everyone about Verizons TLS service.  
What do you think of it?  What kind of hardware do you use at your edge 
and at the CPE.  Example configs?

We have a GigE connection at the core and order 100M circuits with 
whatever size EVC we require for the customer.  I use rate limiting on 
the customers ethernet interface.  A basic /30 serial between us and 
them and a static route in both directions.

I have seen some strange things happen.  This is a forklift upgrade for 
one customer that's going from 2 T1s to 10M TLS.  When I had them 
connect our TLS router to their public switch things went nuts on the VZ 
side of the circuit (2500PPS) and stayed at around 100PPS on the 
customer side.  This doesn't make much sense to me considering the T1 
router has no problems and it's not like we're connecting a switch on 
our side to a switch on their side and causing a loop somewhere, there's 
a router at both ends.  I originally suspected VZ as the problem but 
eliminated that idea by connecting a laptop directly to the customer 
hand off.  The core router is a Cisco 7206VXR and the CPE is a 2651XM.

When he connected a switch with no VLANs on it things quieted down a 
bit.  It's pretty obvious his switch is causing a problem but why it has 
issues with the TLS and not the T1s is beyond me.

Here's a quick diagram:
                                                                         
        Servers
                                                                         
            |
7206VXR ---------TLS-------- 2651XM ------- Public switch ------- 
Firewall ------- LAN

CPE config:

interface FastEthernet0/0
 desc TLS side
 no ip address
 speed 100
 full-duplex
!
interface FastEthernet0/0.xxx
 encapsulation dot1Q xxx
 ip address 192.168.1.2 255.255.255.252
 (rate limit to 10M)
 no cdp enable
!
interface FastEthernet0/1
 ip address 10.10.10.1 255.255.255.1
 duplex auto
 speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.1

Core config:

interface GigabitEthernet0/3
 no ip address
 duplex full
 speed 1000
 media-type gbic
 negotiation auto
!
interface GigabitEthernet0/3.xxx
 encapsulation dot1Q xxxx
 ip address 192.168.1.1 255.255.255.252
 no cdp enable
!
ip route 10.10.10.0 255.255.255.0 192.168.1.2

Any input would be greatly appreciated.

-Jason