<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">19.01.2018 15:59, Marcin Kuczera пишет:<br>
</div>
<blockquote type="cite"
cite="mid:3c38d3c5-1489-2cff-9b01-c326eaa4c7f1@leon.pl">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<div class="moz-cite-prefix">On 2018-01-19 10:24, Заикин Станислав
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:69416e47-70ce-662e-9654-c4999db417ef@ufanet.ru">19.01.2018
14:03, Marcin Kuczera пишет: <br>
<blockquote type="cite">There is something called FSOL (First
Sign of Life) on Cisco (ASR1001x, ASR9001), however it is bit
different than CLIPS, I mean - IP Pool is bound to particular
vlan, so IP utilization is not most optimal. <br>
I was told that there is some workaround for this, but this
might be a bit difficult to migrate. <br>
</blockquote>
<br>
If you use a unnumbered interface it is possible to keep one
pool to all vlans. <br>
</blockquote>
<br>
Stanislav, could you please drop here an example of configuration
for such case ?<br>
How is radius working with ASR, is it similar as in SmartEdge ?<br>
<br>
Did you try migration from SE to ASR ?<br>
<br>
Regards,<br>
Marcin<br>
<p><br>
</p>
<div class="moz-signature">-- <br>
<p style="font-family: Helvetica, Arial, sans-serif; font-size:
12px; line-height: 14px; color: #999999;"><span
id="name-input" class="txt" style="font-weight: bold;">Marcin
Kuczera</span> <span id="title-sep">/</span> <span
id="title-input" class="txt" style="color: #999;">Wiceprezes
Zarządu / CTO<span><br>
<span id="mobile-input" class="txt" style="color: #999;">+48
32 440 80 71<span id="email-sep" class="txt">/</span> <a
id="email-input" class="link email" style="color:
#51930b;" href="mailto:marcin.kuczera@leon.pl"
moz-do-not-send="true">marcin.kuczera@leon.pl</a></span></span></span></p>
<p style="font-family: Helvetica, Arial, sans-serif; font-size:
12px; line-height: 14px;"><span id="company-input" class="txt"
style="font-weight: bold; color: #999;">Leon Sp. z o.o.</span>
<span id="office-sep" class="txt" style="color: #999;"> </span>
<span id="address-sep"><br>
</span> <span id="address-input" class="txt" style="color:
#999;">ul. Kilińskiego 33d, 44-200 Rybnik </span><br>
<a id="website-input" class="link" style="color: #51930b;"
href="http://www.leon.pl/" moz-do-not-send="true">http://www.leon.pl/</a></p>
<p id="disclaimer-input" class="txt" style="font-family:
Helvetica, Arial, sans-serif; color: #999999; font-size: 12px;
line-height: 14px;">INTERNET | TELEWIZJA | TELEFON</p>
<p style="font-family: Helvetica, Arial, sans-serif; font-size:
12px; line-height: 14px;"><span id="office-sep" class="txt"
style="color: #999;">KRS 0000223101 Sąd Rejonowy w Gliwicach<br>
<span id="mobile-input" class="txt" style="color: #999;"></span><span
id="mobile-input" class="txt" style="color: #999;">
Kapitał zakładowy 576.700 zł<br>
<span id="mobile-input" class="txt" style="color: #999;"></span><span
id="mobile-input" class="txt" style="color: #999;"> NIP:
6332068698</span></span></span></p>
</div>
</blockquote>
<p> We tested A9K and it fully suited our needs, but decided to
didn't move from /// to Cisco. Radius is a bit differ.<br>
</p>
<p>
<blockquote type="cite">interface Loopback4<br>
ipv4 address 10.8.232.1 255.255.255.0<br>
<br>
interface Bundle-Ether30.1232<br>
ipv4 point-to-point<br>
ipv4 unnumbered Loopback4<br>
proxy-arp<br>
arp learning disable<br>
ipv6 nd suppress-ra<br>
ipv6 address 2001:100::1/64<br>
ipv6 enable<br>
service-policy type control subscriber L2_IPoE_policy<br>
bundle load-balancing hash dst-ip<br>
!<br>
!<br>
encapsulation dot1q 30 second-dot1q 1232<br>
ipsubscriber ipv4 l2-connected<br>
initiator unclassified-source<br>
initiator dhcp<br>
!<br>
ipsubscriber ipv6 l2-connected<br>
initiator dhcp<br>
<br>
dhcp ipv4<br>
profile L2_IPoE_DHCP_PROXY proxy<br>
helper-address vrf default 10.8.233.100 giaddr 0.0.0.0<br>
relay information option<br>
relay information policy keep<br>
relay information option allow-untrusted<br>
!<br>
interface Bundle-Ether30.1232 proxy profile L2_IPoE_DHCP_PROXY<br>
!<br>
dhcp ipv6<br>
profile L2_IPoE_DHCP_PROXY proxy<br>
helper-address vrf default 2001:33::100<br>
!<br>
interface Bundle-Ether30.1232 proxy profile L2_IPoE_DHCP_PROXY<br>
!<br>
dynamic-template<br>
type service 5M<br>
service-policy input SUBS_5M_in acct-stats<br>
service-policy output SUBS_5M_out acct-stats<br>
accounting aaa list IPoE type service periodic-interval 1<br>
!<br>
type service ACC<br>
accounting aaa list IPoE type session periodic-interval 1<br>
!<br>
type service 100M<br>
service-policy input SUBS_100M_in<br>
service-policy output SUBS_100M_out<br>
!<br>
type ipsubscriber L2_IPoE<br>
ipv4 unnumbered Loopback4<br>
ipv6 nd other-config-flag<br>
ipv6 nd router-preference high<br>
ipv6 nd managed-config-flag<br>
ipv6 enable<br>
<br>
</blockquote>
I can send you full config and radius logs from our testing stand
if you want.<br>
Also A9K has a cool feature named Geo-Redundancy. It is a L3-based
stateful redundancy mechanism. (On SmartEdge there is no statefull
redundancy at all)<br>
</p>
<pre class="moz-signature" cols="72">--
Stanislav Zaikin
Network Engineer
JSC Ufanet
</pre>
</body>
</html>