[c-nsp] Recommendation for small GBit router

"Rolf Hanßen" nsp at rhanssen.de
Fri Dec 16 09:37:59 EST 2011


2nd hand is no problem, I did not think about new stuff at all.

What about a NSE-100 ? Looks cheap on Ebay.
Docs say "3.5 Mpps (PXF); 450 kpps (RP)". Is IPv6 forwarded in hardware or
via RP on NSE ?

Concerning Netflow on NSE-100/NSE-150/NPE-G1/NPE-G2 cards:
What traffic amount is realistic ? Is the limitation factor bandwidth or
pps ?
What happens beyond the point it can handle to send the Netflow data
properly ? Does that affect Netflow only (for example it sends incomplete
data or switches to a sampling mode to reduce load) or will packet
forwarding also be affected ?

Im just looking for high pps capability for flooding scenarios only.
If just accounting loses some data in such cases it is not a big issue.

Anything else to take care of ?

Concerning other/software based solutions:
I prefer some box that can exchange the existing one without much time
effort for testing/preparing/configuring.


> On 16 December 2011 10:53, Phil Mayers <p.mayers at imperial.ac.uk> wrote:
>> On 12/16/2011 01:09 AM, "Rolf Hanßen" wrote:
>>> Hi Andrew,
>>> just pure forwarding of a few public networks towards each other and
>>> internet with default route.
>>> No tunnels, no NAT, no DHCP, no VPN or something similar.
>>> Concerning "relatively cheap": Im searching for "below 3000 Euro
>>> absolutely". ;)
>> You'll get nothing in the Cisco range with that feature set for that
>> price
>> unless you go 2nd hand, IMO.
>> Netflow at the same time as 1Gbit/sec is the killer - platforms that do
>> both are €lots.
>> At this level of performance, consider whether a network tap & linux
>> machine with one of the software flow capture engines would be an
>> alternative - then buy a low-end 3x50 catalyst, which will easily
>> perform
>> and do IPv6.
>> Or tolerate <1Gbit/sec and buy one of the ISRs.
> ASR1001 would be my recommendation or there is a "service module" for the
> Cat 3560X switch that adds netflow capability.
> ASR1001 MSRP $17k + $5k for IP BASE licence
> WS-C3560X-24T-S MSRP $4,300 + $3,750 for C3KX-SM-10G service module + $500
> for dual PSU
> neither of these options is close to the €3k target, and neither is
> readily
> available used.
> Up until recently Cisco had few low-end router platforms that could shift
> 1Gbps - only the 7304 NSE-150 or 7200 NPE-G2.  Both are available used -
> I'd recommend the G2 above the NSE.
> The Cat switches can move the packets but support for IPv6 and Netflow are
> limited.  I don't know how software in Nexus is shaping up.
> ,
> Other than that you're looking at high-end routers like OSR (10k), GSR
> (12k) or CRS which are overkill for the requirements.
> If you're looking for a non-Cisco solution, how about a Mikrotik?
> According to them the RB1100AHx2 can do >1Gbps and nearly 1Mbpps for less
> than €500, which is cheap enough to try one to see if it meets your needs
> -
> http://routerboard.com/RB1100AHx2
> Aled
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

More information about the cisco-nsp mailing list