[c-nsp] NBAR on 2800

[Paul Stewart]

We've had pretty good luck with it - but haven't tried those traffic levels
on a 2800 so can't provide any info there...

It marks packets really well for VOIP etc  - we've never pushed it if you
know what I mean but on 5-10Mb/s links it's worked well for marking and p2p
limiting (the provider I work for doesn't limit p2p at all but I've done
consulting to some other ISP's that do mess with p2p)


Hope this helps,

Paul


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Kristofer Sigurdsson
Sent: Thursday, January 10, 2008 8:18 AM
To: Cisco NSP
Subject: [c-nsp] NBAR on 2800

Hi list,

I'm looking for words of wisdom on NBAR on the 2800s.  The main link is 100
Mbit/s (at present maxing in 60 Mbit/s bursts, average 30 Mbit/s).  We will
implement a 20 Mbit/s backup link in the next few weeks.  Both links are
delivered as fastethernet links on copper.  We would like to be able to
block P2P, or at least most of the P2P.  We will use a 2821 (currently in
use for the main link without NBAR) for the backup link, which I believe is
more than enough, but I'm a bit puzzled about the main one  It will be a
separate router, the bean counters will push for a 2821, but I believe that
will not be enough.  How about a 2851?

Another thing.  How good is NBAR these days?  I have zero experience with
it.  Can it effectively block P2P?  Can we mark and even prioritize VoIP?
In short: does it work?

Thanks in advance,
Kristo
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


-- 
No virus found in this incoming message.
Checked by AVG Free Edition. 
Version: 7.5.516 / Virus Database: 269.19.0/1216 - Release Date: 1/9/2008
10:16 AM