Layer 3 redundancy; individual layer 3 links vs Portchannel

Does anyone have evidence as to which technique is "better" (more reliable, faster)?
Cat6500, dual SUP720, native IOS mode.
Partial topology:
Sw_1 (5/1)----Layer3 link----(5/1) Sw_2
Sw_1 (5/2)----Layer3 link----(5/2) Sw_2
In the above scenario, there will be 2 equal cost layer3 path from Sw_1 to Sw_2. So, on any link failure, we rely on IGP protocol (in our case, OSPF) for redundancy.
If we have something like,
Sw_1 (5/1)---L3 port-ch----(5/1) Sw_2
Sw_1 (5/2)---L3 port-ch----(5/2) Sw_2
Then, we have to rely on channel hashing algorithm for redundancy.

Hi
I did something like this this week - we found that both worked well, although the failover between the links wasn't great with port-channels.
We have two 100Mb Ethernet presented circuits between two sites - we configured as an L3 port-channel (using 3750s at either end in this case). If you hard code them as on (channel-group 1 mode on) and the link went down beyond the NTEs the ethernet link to the switch never dropped, so the Etherchannel never failed the unavailable link.
If we used PAgP/LACP the switches either end did detect the failure, however it took 2 minutes (presumably 4x the hello time) - this didn't seem to be tunable (at least on that platform).
We ended up using OSPF to control the links - which failed over in a few seconds and also performs even-cost load balancing.
With regard to load balancing FEC bases it's choice of path on source MAC, dest IP or some other factor - although this is configurable on some platforms you need to think it through and trial it for your traffic platforms to get near-even load balancing.
Same applies to routing protocols really - you can per-packet load balance which should be pretty even but it's best avoided if using latency sensitive stuff like voice...
Regards
Aaron
p.s. please rate helpful posts :-)

Similar Messages

End-to-end layer-2 link with CPE administration

Dears
I am working on a scenario to monitor a CPE in a layer-2 setup. The CPE is connected with the local PE across a last mile with a single vlan from the provider. The customer has purchased layer-2 end-to-end connection from local CPE to remote CPE. Within MPLS core, I have configured x-connect between local PE and remote PE to setup layer-2 link. Within the CPEs, I am bridging both the interfaces of the the router to handover end-to-end layer-2 link to customer. I also need to manage and monitor the CPE. What I am thinking of doing is that I have two PE routers within the local POP. On primary PE router, i will extend lastmile vlan from the switch and configure x-connect to remote PE. On the backup PE router, i will extend the same lastmile vlan from the switch and configure IP address on the PE vrf enabled interface to be imported in management network. On the CPE, the interface with lastmile connection is concurrently configured with bridge and IP configuration.
I need to know if is this a standard setup of management for this type of solution and what could be the possible technical limitations/complications within this overall solution keeping in mind that it is a layer-2 end-to-end connection and what impact it can have on my core network.
Regards

Hi All,
Can someone help me in this.
Regards

Layer 2 links netflow monitoring tools

I am trying find Layer 2 netflow monitoring tools at the moment i have checked with solarwinds,manage engine they are not supporting layer2 interfaces netflow export.Is there any other monitoring tool opensource/closed source applications which can export cisco Layer 2 links.
We are having nexus 7k and ASR1k devices
Thanks for your help

Hey Nick,
The tricky part is getting the alert from consumed bandwidth. That will be handled from your NMS software of course. To answer your questions-
#1 - You can use the interface OID in MIB-II. There may be a specific MIB on the 3G, but MIB-II should work just fine. You can check on the 3G MIB here: http://tools.cisco.com/Support/SNMP/do/BrowseOID.do?local=en
#2 - I think that would work. You would flow only your interface and send that to NMS. During an outage the router will hold the Netflow data, but I don't think it can push old stats after the primary link comes online. It would probably work if the outage was short but if it was longer, you would have to jump in the CLI and view the data there. I would lab it up, but I don't have any Netflow software

How to create a "dummy" layer to link other layers to the dummy.

Here is my problem:
I have a bunch of Layers, I want to behave the same way (here scaling, but I had also rotation before). My approach (as used formerly with my 3D applications) is to create a "dummy" layer, where the channnels of the other layers are linked to. For this I used the "Placeholder" item, but rendering obviously got me an error message, because the "placeholder" is intended for other use.
So my question: How do you solve such a situation the intended way?
L.

Found the possible answer by sniffing on other peoples problems: The dummy is called "Null" here!
Unfortunetly, I cannot offer to myself the 10 points!

Soalris Cluster Interconnect over Layer 3 Link

Is it possible to connect two Solaris Cluster nodes over a pure layer 3 (TCP/UDP) network connection over a distance of about 10 km?

The problem with having just single node clusters is that, effectively, any failure on the primary site will require invocation of the DR process rather than just a local fail-over. Remember that Sun Cluster and Sun Cluster Geographic Edition are aimed at different problems: high availability and disaster recovery respectively. You seem to be trying to combine the two and this is a bad thing IMHO. (See the Blueprint http://www.sun.com/blueprints/0406/819-5783.html)
I'm assuming that you have some leased bandwidth between these sites and hence the pure layer 3 networking.
What do you actually want to achieve: HA or DR? If it's both, you will probably have to make compromises either in cost or expectations.
Regards,
Tim
---

How to turn embedded layer into linked

And why when I try to convert it ask me to save instead of open a file I want a link from?

no, I don't want to save it . Why would I if it's usually already always saved inside master file. I want to create a link to the original source file to have it shared among many other files in a project. So I have to overwrite it first? Kind of weird behavior.
ps, Thanks Willi Adelberger, looks like it's only way. Although it's extremely annoying and inconvenient. Why not make it normal as any 3d soft does with resource files?

Layer Effects "linking" when combining layers from separate projects

I am taking a Pshop class and working on a photo-realistic project. I created two main images as separate files. Both have a number of effects, such as bevel and contour or drop shadow. Separately, they look just fine. But when I duplicate the groups of one image and place it into the other, I've noticed that effects do not transfer over but rather take on the attributes of the image I am copying the folders onto.
Here is what I mean. See how the nuts have a contour on them?
Now I will place the layers that make up the guitar into the other file. I did not change anything, just duplicated layers.
Now I lost the countour. Also note that the inner bevel around the bridge (the darker brown area) also got changed. And the drop shadow in the hole of the guitar shifted.
I am guessing that it is taking on the attributes of the original file settings. How can I keep these setting separate?
Hope this question makes sense. Thanks for your help.

Thank you! It's amazing how many little things there are to Pshop. This was driving me crazy!

IPv6 and data link layer

As we have learned, layer design is made to make us and Vendors happy about new inventions on a network field. If so, how come up this statement:
The following data links are supported for IPv6:
ATM permanent virtual circuit (PVC) and ATM LANE,
Ethernet, Fast Ethernet, Gigabit Ethernet,
FDDI,
Frame Relay PVC,
Cisco High-Level Data Link Control (HDLC),
PPP over Packet over SONET (PoS),
ISDN, serial interfaces
dynamic packet transport (DPT).
Is this truth that IPv6 (L3) is connected to lower layer (layer 2)?
Best Regards,
Tirke

> Is this truth that IPv6 (L3) is connected to lower layer (layer 2)?
Well, they have to be, or you couldn't send layer 3 IP packets over the layer 2 links. In IPv4 the connection between layer 3 (IP) and layer 2 (say, ethernet) is most often via the Address Resolution Protocol, layer 2 ethernet type 0x0806 (IPv4 being 0x0800 and IPv6 0x86dd).
In IPv6 the connection is instead via the ICMPv6 neighbor discovery protocol. Neighbor discovery was invented with goals like getting more uniformity into the layer 3->2 transition over different link types, and better duplicate and dead address detection.
-- Jim Leinweber, WI State Lab of Hygiene

Layer 3 peering over VPC+

Hi, we are doing a customer deployment in which 2 x n7ks are fabricpath enabled and are doing vpc+ all the devices that are dual attached to them. We need to connect the ASAs to them and the customer wants to do dynamic layer 3 peering. (Not static routes) .
I am yet to do this in a lab environment, BUT will the ASAs see the 2 x N7Ks as 2 different rouiting-peers? (Same if you connect them to a VPC Domain).
what would be the best way to interconnect the ASAs with the N7Ks?

I am afraid this is an unsupported design and may lead to traffic loss when packets need to be switched via peer link between both N7k.
Simple design would be to use layer2 links between N7k+ASA with VLAN interfaces on both N7ks, then peer the ASA with both of them. Assuming you use 2 ASAs with active/standby you still have redundancy if the single link to the active device goes down.
Oh one more thing: do some failover testing with the ASA and the dynamic routing protocol. If you use OSPF get ready for a disappointing surprise.

LAYER 2 PROBLEM

I have a LTE device which has two different network cards with different MAC addresses that share one virtual IP address. The LTE device is virtually connecting the two ports, for redundancy purposes. This LTE device has one layer 3 link connected to a 6509 to get to the INTERNET.
The problem is that when the LTE device starts to use the second MAC address to send traffic to the switch (6509), the switch drops those packets. Then when you clear the arp table it works.
IS there a way to tell the switch that those two mac address belong to one IP address, and whenever one of these mac addresses initiates traffic do not drop them.
Thanks

Can you do an extended ping from the fa1/15 interface? For extended ping type ping on the command prompt. for Extended commands answer "y" and then give the source interface as FastEthernet1/15.example shown below. Please do tell us the result.
ping
Protocol [ip]:
Target IP address: 10.0.6.10
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: FastEthernet1/15
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.6.10, timeou
Packet sent with a ...

Script that create Layerset with name from layer?

Hello!
This should be easy for someone who know whet is doing so not me:P
I want script to automatically create layerset from each selected layer, name it as that layer and place that layer in it
I found old script that do that but only normal layer not linked or embeded, and I want to do it for all selected layers not only to one
Can someone modify it a little to work little better? I have no idea how to do it and probably would take me like thousands hours or more
thx
#target photoshop
main();
function main(){
if(!documents.length) return;
var doc = activeDocument;
if(doc.activeLayer.kind != LayerKind.NORMAL) return;
var layerRef = doc.activeLayer;
var layerSetRef = doc.layerSets.add();
layerSetRef.name = layerRef.name;
layerRef.move(layerSetRef, ElementPlacement.PLACEATEND);

You could remove the line
if(doc.activeLayer.kind != LayerKind.NORMAL) return;
But it would only work with one selected Layer (and also on selected LayerSets).
To handle more than one selected Layer (or all Layers) some changes would be necessary.

Form Layer 2 to Layer 3 on Distribution and Access

Hi,
Our LAN topology have Core "L3" , Ditribution "L2" and Access "L2". We want to get rid of spanning tree by moving from layer 2 to layer 3 on Access and Distribution layers.
My questions is:
1) Any advice/document on this?
2) in the access switches did I have to configure each interface on 3750 as routed port by issueing "ip routing" and giving an IP address of each port ????. if this is the case than I will need huge amount of IP addresses.
Thanks

Hi
Much of this has already been covered off.
Just to add, I have implemented both routed access-layer and L2 access-layer and each has advantages and disadvantages.
Major advantages for L3
1) STP contained with wiring closet. Yes you can use RPVST+ but you still are extending L2 links between the distribution and access-layer with all that implies eg broadcast traffic. In addtion to utilise both uplinks at the same time requires a lot of extra configuration ie. setting root bridges for odd and even vlans and matching that to active HSRP gateways etc.
2) Automatic equal cost load-balancing (see previous point )
3) Easier troubleshooting. As previous poster said this is a matter of opinion and i have more experience with switching to be honest but i think troubleshooting L3 routing problems is generally easier than L2 STP problems.
Disadvantages
1) Vlan's cannot be extended across floors. May or may not be a problem for you.
2) If your distribution layer utilises 6500's with service modules eg the Firewall Service Module then layer 2 links give you more flexibility in deployment.
3) Cost can be an issue although your 3750's would support EIGRP stub functionality with only the base image.
As another poster pointed out, STP has come a long way from it's 50 seconds failover and with the correct setup it is nowhere near as important that you try and remove it.
I am just as much in favour of L2 access as L3 and most of major sites utilise L2 from the access-layer but with the speed/performance and cost of L3 switching you can get nowadays using L3 is a viable alternative.
HTH
Jon

ANN: New layer capabilities with Presentation Asst v3 (TimeSavers add-on)

The Layer Assistant was recently integrated into the Presentation Assistant (v.3), offering the following capabilities:
Text/Symbol Layer shortcuts
Add the specified string, associated with a layer (with control over font, size and color; horizontal/vertical location adjustment)
Shape Layer shortcuts
(rectangle, rounded rectangle, shaded rectangle and circle; can control fill/border color, line width)
-- optionally also create a link that toggles layer visibility
-- optionally specify that the shape border is visible at all times, regardless of the layer and its visibility
Image Layer shortcuts
Include JPEG images as a layer
(this may also be used to set a non-printing page background tint to reduce screen glare, or for navigation buttons)
Underline/Strikethrough Layer shortcuts
Layers can be created from FM content (text / graphics) based on RGB color composition
(this does not require hypertext markers)
Layer visibility links/bookmarks:
(show layer; hide layer, show layer only, toggle layer, show next/previous layer, show all layers, hide all layers)
Specific layers can be set as initially hidden or as non-printing (through the settings files or through shortcuts)
Support for transparency of shapes and JPEG images
Visit http://www.microtype.com/showcasePresentAsst.html for PDFs demonstrating the new capabilities
[ FrameMaker-to-Acrobat TimeSavers v5.5 required ]
Shlomo Perets
MicroType * http://www.microtype.com
FrameMaker/Acrobat training & consulting * FrameMaker-to-Acrobat TimeSavers/Assistants
1-hour webinars (free), starting 10am PDT | 1pm EDT | 5pm UTC/GMT:
Tuesday, August 18: Enhancing PDFs with Form Fields (with FM-to-Acrobat TimeSavers + Form Asst)
https://student.gototraining.com/register/3420308416844530916
Thursday, Sept. 10: Liven up your PDFs with FrameMaker-to-Acrobat TimeSavers/Assistants
https://student.gototraining.com/register/8019702938678710980

Thanks gimbal2
but I am using the standard TopLink JPA provider shipped with Glassfish. The Eclipse code is called from the standard Glassfish v3 setup. The eclipse code below Here is my persistence domain descriptor:
<?xml version="1.0" encoding="UTF-8"?>
<persistence xmlns="http://java.sun.com/xml/ns/persistence" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="1.0">
<persistence-unit name="persistence_sbss">
<provider>oracle.toplink.essentials.ejb.cmp3.EntityManagerFactoryProvider</provider>
<jta-data-source>sbssJdbcResource</jta-data-source>
<non-jta-data-source>sbssJdbcResource</non-jta-data-source>
<properties>
<property name="toplink.ddl-generation" value="drop-and-create-tables"/>

</properties>
</persistence-unit>
</persistence>
I will try and find the source code though.
Edited by: FritzSolmsA on Mar 10, 2010 11:45 AMg
Edited by: FritzSolmsA on Mar 10, 2010 12:40 PM

Transforming layer and mask in Photoshop CC

I've just upgraded to photoshop CC. I'm trying to resize (i.e. transform) a layer with a layer mask. I want to transform them together (the layer is linked to mask as it usually would vein this case). But when I transform it the layer gets resized independently from the mask, it's acting as if the layer and the mask are unlinked. If I click on the layer mask and resize, the same thing happens - it resizes independently of the layer itself. Why is this happening? And how do I now resize and layer and it's mask together??

Have you tried converting that layer to a Smart Object and then resizing? (right click>Convert to Smart Object)

Layer 3 Etherchannel

Good Day.
How do I get Layer 3 etherchannel to communicate with my Management VLAN ? My etherchannel is Up Up, but my VLAN stays DOWN DOWN.
Any help will be much appreciated......
Here is a sample of my configs
Core 6807 XL
interface Port-channel50
no switchport
ip address 10.34.0.2 255.255.255.254
ip ospf network point-to-point
interface TenGigabitEthernet1/2/1
description # Link to Distribution 0 West Wing #####
no switchport
no ip address
ip ospf network point-to-point
channel-group 50 mode on
interface Vlan60
description # Management VLAN #####
ip address 10.34.1.1 255.255.255.224
no ip route-cache
router ospf 100
router-id 10.34.0.129
log-adjacency-changes
nsf
network 10.34.0.2 0.0.0.1 area 0
network 10.34.0.129 0.0.0.0 area 0
network 10.34.1.0 0.0.0.31 area 0
Distribution 4900
interface Port-channel50
description # Uplink to Core Switch #####
ip address 10.34.0.3 255.255.255.254
ip ospf message-digest-key 10 md5 7 1104391103005A0E577E7C
ip ospf network point-to-point
flowcontrol receive on
interface TenGigabitEthernet1/1
description # Uplink to Core Switch #####
no switchport
no ip address
ip ospf message-digest-key 10 md5 7 03097B1F121D704E1D5D4E
ip ospf network point-to-point
channel-group 50 mode on
interface Vlan60
description # Management VLAN #####
ip address 10.34.1.34 255.255.255.224
standby 60 ip 10.34.1.33
standby 60 priority 108
standby 60 preempt
router ospf 100
router-id 10.34.0.133
log-adjacency-changes
redistribute static subnets
passive-interface default
no passive-interface Port-channel50
network 10.34.0.2 0.0.0.1 area 0
network 10.34.0.133 0.0.0.0 area 0
network 10.34.1.0 0.0.0.31 area 1

An SVI will only come up if an active Layer 2 ports either exists in than Vlan (i.e an access port) or a Trunk port which carries that Vlan tag.
Your connections to other switches are Layer 3 (i.e they have an IP address) so as far as the switch is concerned, the SVI is not needed as there is no active ports requiring it.
A vlan is a layer 2 entity so it will not be tagged across your Layer 3 link, hence why the SVI believes its not yet needed so stays down.
If you just need an IP address for management of the device then use a Loopback interface as they are virtual also but do not require an active Layer 2 link to come up.
Thanks

Layer 3 redundancy; individual layer 3 links vs Portchannel

Similar Messages

Maybe you are looking for