[c-nsp] ME3600X Netflow and WCCP?

cisconsp at SecureObscure.com cisconsp at SecureObscure.com
Thu Jul 28 01:46:58 EDT 2011 

Hi Ed,

We are deploying the ME36/3800X's as small-scale MPLS L3VPN PE devices with
Ethernet handoff. These are a fairly new platform, today we have many 6524's
in the role that need to be upgraded to the ME36/38.

Our operations & monitoring groups like to collect flow-based accounting
statistics from every port on every edge device (where possible) for
statistical accounting and troubleshooting.

We also provide managed internet gateway service, and had to configure WCCP
off a firewall for web content filtering because VRF-aware WCCP was not
available.

I am viewing the ME36/38 as a ME6524 replacement with greater focus on
routing & far superior QOS capabilities. We would like to see NetFlow and
vrf-aware WCCP on it as well. (And 6vpe, and a 10gig heavy version)

Both of those features appear perfectly valid in my mind for this platform.

John


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Edward Salonia
Sent: Wednesday, July 27, 2011 11:00 PM
To: Waris Sagheer (waris); cisco-nsp-bounces at puck.nether.net; Colby Glass
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] ME3600X Netflow and WCCP?

Waris,

Thanks for the input and taking the feedback into consideration to fix the
FN.


Colby,

I've seen time and time again, people expecting to position this platform in
an environment other than what it is intended for. I'm not calling out
anyone in particular on this list but I've seen mentions in the past about
these features as well as others, and why they aren't included/supported.

Features like netflow and wccp, in my humble opinion are better suited for a
routing platform. The 3600/3800 metro ethernet switches, as well as earlier
3400(E) series are meant for metro ethernet handoff circuit like
functionality, tripple play scenarios, and more recently mobile backhaul, to
name a few.

I am curious to know more about in what specific position you client is
looking to deploy this platform, as there may be a better alternative to
suit your and your clients' needs.


I would be happy to lend other suggestions for a deployment platform choice,
as I'm sure will others. What type of hand-off is their SP giving them. What
are they looking to accomplish? Is it simply an ethernet handoff where they
are looking for flow data? Do they need to do MPLS-TE? Will VRF lite
suffice? Any other advanced features?

Hope I can be of assistance.


- Ed
-----Original Message-----
From: "Waris Sagheer (waris)" <waris at cisco.com>
Sender: cisco-nsp-bounces at puck.nether.net
Date: Wed, 27 Jul 2011 20:30:09 
To: Colby Glass<colbycciestudy at gmail.com>
Cc: <cisco-nsp at puck.nether.net>
Subject: Re: [c-nsp] ME3600X Netflow and WCCP?

We'll fix the feature navigator. Thanks for your feedback.

 

-Waris

 

From: Colby Glass [mailto:colbycciestudy at gmail.com] 
Sent: Wednesday, July 27, 2011 6:32 PM
To: Waris Sagheer (waris)
Cc: Sigurbjörn Birkir Lárusson; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] ME3600X Netflow and WCCP?

 

Thanks. So the config guides are the definitive resource as far as features?
I would expect the feature navigator (which listed WCCP v2 on the ME3600) to
be the end-all, be-all. Either way though, thanks for clearing it up.

On Wed, Jul 27, 2011 at 7:50 PM, Waris Sagheer (waris) <waris at cisco.com>
wrote:

ME3600X does not support Netflow and WCCP in the current release.
If the configuration guide does not cover the features then it is not be
supported.
Netflow and WCCP features are not covered in the configuration guide.

-Waris



-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Colby Glass
Sent: Wednesday, July 27, 2011 4:27 PM
To: Sigurbjörn Birkir Lárusson
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] ME3600X Netflow and WCCP?

Thanks guys. Before posting, I noticed that it's listed in the unsupported
commands of an older IOS, but not in the newer one. That gave me some hope.
Though, none of the guides I saw listed anything for configuring WCCP or
Netflow. The feature nav listed WCCP Version 2 though. It's not looking
good.

On Wed, Jul 27, 2011 at 5:59 PM, Sigurbjörn Birkir Lárusson <
sigurbjornl at vodafone.is> wrote:

> I wouldn't trust that, you can configure stuff on the ME3600X that doesn't
> actually work (or in fact do anything at all) in practice, you can even
> configure stuff that is in the manual, and is supposed to work, but still
> doesn't work ;)
>
> I turned on flow on a couple of interfaces, turned on top-talkers and got
> nothing.  I then setup netcat to listen to a UDP port, configured export
> to send it, and according to show ip flow export it's not exporting
> anything.
>
> It also doesn't bode well for the support that ip flow-export is in the
> list of unsupported commands in the configuration guide, nor does the fact
> that there is only one reference to wccp in the configuration guide and
> that's under the traffic-classifier for the CPU traffic...
>
> Kind regards,
> Sibbi
>
> Þann 27.7.2011 21:31, skrifaði "Jason Lixfeld" <jason at lixfeld.ca>:
>
> >On 2011-07-27, at 4:45 PM, Colby Glass wrote:
> >
> >> All,
> >>
> >> Does anyone happen to know if the ME3600 supports Netflow and WCCP? I
> >>have a
> >> customer considering them for the WAN edge and the docs/feature
> >>navigator
> >> are coming up somewhat ambiguous.
> >
> >I haven't tested it, but...
> >
> >systems02.151front71(config)#ip flow-?
> >flow-aggregation  flow-cache        flow-capture  flow-egress
> >flow-export       flow-top-talkers
> >
> >systems02.151front71(config)#ip flow-export ?
> >  destination  Specify the Destination IP address
> >  source       Specify the interface for source address
> >  template     Specify the template specific configurations
> >  version      Specify the version number
> >
> >systems02.151front71(config)#ip flow-export version ?
> >  1
> >  5
> >  9
> >
> >systems02.151front71(config)#int g0/1
> >systems02.151front71(config-if)#no switchport
> >systems02.151front71(config-if)#ip route-cache ?
> >  cef             Enable Cisco Express Forwarding
> >  flow            Enable Flow fast-switching cache
> >  policy          Enable fast-switching policy cache for outgoing packets
> >  same-interface  Enable fast-switching on the same interface
> >  <cr>
> >
> >systems02.151front71(config-if)#ip wccp ?
> >  <0-254>    Dynamically defined service identifier number
> >  redirect   Set packet redirection options
> >  web-cache  Standard web caching service
> >
> >systems02.151front71(config-if)#
> >
> >This is on 12.2(52)EY1
> >_______________________________________________
> >cisco-nsp mailing list  cisco-nsp at puck.nether.net
> >https://puck.nether.net/mailman/listinfo/cisco-nsp
> >archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>


--
Colby Glass
Network Engineer
http://blog.alwaysthenetwork.com
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/




-- 
Colby Glass
Network Engineer
http://blog.alwaysthenetwork.com

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

More information about the cisco-nsp mailing list