Building metro ethernet using cat3750

Hi,
I am Mazlan and work for one of ISP in Malaysia. We would like to discover metro ethernet technologies.
We would like to use our current backbone network to create this metro network and we are planning to use cat3750.
The design is something like this.
R1--cat3750--RA--[WAN}--RB--cat3750--R2
R1 and R2 is in different location but will be running on same VLAN (with help of cat3750). Let say there is customer connected to R1 and their branch at R2, they will only feel they are in same LAN, but actly they are in different location.
We need some opinion of builidng this network. I need help for the configuration in cat3750 as well in the router. We have no experince in this technologies.
Perhaps somebody whos is interested to help me out can email me at [email protected]
Your help is highly appriciated.
--mazlan

The Catalyst 3750 switch supports IEEE 802.1Q tunneling and Layer 2 protocol tunneling.
configure guide
http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_guide_chapter09186a00805a650e.html
http://www.cisco.com/en/US/products/hw/switches/ps5023/products_configuration_example09186a00801cc828.shtml

Similar Messages

Metro Ethernet

Hi all
iam trying to Build metro Ethernet in my own town
I have office with a distannce of 10Km
i want to bring them in metro ring and connect failover ring
So i have 5500 Switch at central end
and I have 2 3750 Switched with LH Giga Module SFP in it 2 ports
Now iam confused, what kind of CARDs i need to Buy for 5500 so i can integrate with 3750SFP ports with 5500 with ring protection
I have in 5500 Supervisor III with 100MB MMF,
What kind of Modules need to connected with 3750 ( situated other 2 office)
so all 3 going to be in ring protection
help will be appriciated
hari

yes, you can integrate with 3750SFP ports with 5500 with ring protection .
CISCO WS-X5302=. Catalyst 5000 Route Switch Module will be module that can be used.

EIGRP with over 1000 neighbors using Metro Ethernet

No documentation about using EIGRP with what kind router can build a large network using Metro Ethernet. Cisco7600 become unstable unstable after applying over 600 eigrp neighbors.

Is there a reason you need EIGRP? If you're scaling to 1000 neighbors you should really use BGP. It's meant to be scalabale (I have routers that have 150,000 BGP routes in it). It's really designed for scalability, where as I find EIGRP is preferable in a low-neighbor routing environment.
-Mike
http://cs-mars.blogspot.com

Help with setting up Metro Ethernet

Can someone please help and give suggestions and possible configuration options for setting up metro ethernet in the following senario:
Will be setting up ME between headquarters and three remote branch offices. Each remote branch will be provisioned to 10MB, and the headquarters will have one link for the aggregate provisioned to 30MB.
My questions, we will have routers at the remotes, but how will this terminate at the headquarters? Do we connect the one ME aggregate connection to a router, or to a L3 switch? And how do you configure the headquarters devices to separate the traffic? Do you use sub interfaces like in frame relay? Please provide a sample config if possible.
Thanks

HI,
Assume you have 3560 SW at your HQ and where you can terminate the ME circuts.
Configuration in Switch as:
3560SW#sh run int Fa0/5
Building configuration...
Current configuration : 123 bytes
interface FastEthernet0/5
description ***************
switchport access vlan 40
switchport mode access
end
Create a SVI interface at the Router, the configuration is as:
7604-Backbone-RTR#sh run int Vl40
Building configuration...
Current configuration : 119 bytes
interface Vlan40
description *********
ip vrf forwarding 1234-NAME-MESH
ip address xx.xx.xx.xx 255.255.255.252
end
In the above configuration, VRF is applied on Interface to make the pefix unique across the Backbone.
is it here at the remotes where I will configure the "sub-interfaces"?
A. Yes, the case for remote is same as that of HQ.
Pls Rate if HELPS
Best Regards,
Guru Prasad R.

STP/RSTP/MST in a Metro Ethernet ring

We are building a large Metro ethernet Network . The topology consists of BN ( cat 3550 switches ) on a GIG ethernet ring . We intend to use 14 Building node (3550)siwtches in the ring and then aggregate the Gigabit ring onto a 7609 at the Aggregation site .
Can anybody suggest whether I should use RSTP or MST and minimise the convergence/reconvergence period in cases of fiber cut on the ring .
Hrishikesh

Of the two, RSTP is the simpler techonology, while
MST obviously scales better. There are more edge
cases to consider with MST, and we concluded it
needed lots more lab testing before we would be
comfortable with it. RSTP (in Cisco's Rapid-PVST
version) is very simple to deploy.
We are using Rapid-PVST everywhere we can.

VPLS and H-VPLS w.r.t Metro Ethernet

Can someone please explain me VPLS and H-VPLS as to how it can be used in a Metro Ethernet Environment????Any diagramatic explanation will be highly appreciable...
Regards,
NISHA

Thanks a lot for the presentations Harot...
As I'm a bit new to MPLS technology, I have some doubts in my mind so far Layer 3 VPNs are concerned. Let's consider a typical Scenario :
CE-->PE-->P-->P-->PE-->CE....
Could u pls tell me where MP-BGP runs (whether in PE to P or PE to CE b'coz somewhere i read the protocol used between PE-CE is MP-BGP and that's why I'm confused) and what is it's purpose. So far I know MP-BGP is run in order to make the VPNv4 routes unique i.e IPV4+VPNv4. I would highly appreciate ur feedback if u explain the layer 3 concept entirely protocol wise...i.e IGP, MP-BGP in a MPLS domain. What I know so far is CE-PE protocol can be anything right from static to BGP. P-PE is MP-BGP.
Kindly pl. correct me wherever I'm wrong...
Thanks in advance...
NISHA

Customer Equipment for Metro Ethernet Link

Hi All
It has been some time since I utilised Cisco network kit to provide private circuit point to point connectivity and I wonder if someone could give me a little guidence.
The customer is shortly to implement a new 100Mb Metro Ethernet link to connect two of their branches. They initially intend to use the link for data only traffic but eventually will want to route VOIP traffic across the link so bandwidth management and QoS will be essential components. It is unlikely that further links will be added to this link so built in expansion of the chosen routers may not be required.
Budget will be an issue on this so I would appreciate any advice or recomendations.
Thanks
J.

Hello James,
I think it would be better to get in touch with your Cisco Account Team as this question cannot be answered on a forum post.
Thanks,
Karim

Best way to detect failure in Metro ethernet networks

Hello ,
I am working for a well known provider and I am currently migrating one of my client from Frame-relay to Metro-ethernet link .
I am actually looking for advices on what sort of mechanism to implement to detect a failure in the ME parth .
As you probably know , failure on one of the links might cause the CE-SWITCH-PE interfaces to stay up/up and the network will not neceseraliy start converging .
So far I have implemented BFD along with IP SLA route tracking , I am happy with BFD but the IP SLA is acting "weird" .
- IP SLA ICMP tracking rely on ICMP packets and was too sensitive to packets lost
- We switched to ip route sla tracking but I am still unsure about the best way to use or implement this .
Is there some sort of best practices available somewhere for this ?
thanks ¨
T

Hello Thomas,
From what i have seen BFD is best bet as it allows to relax the L3 protocols timers ( BGP / any other protocol used between CE- PE ). Another option is to have gre tunnel between the PE - CE link and track this tunnel interface.
Regards,
Shreeram

Is it possible to build a firewall using labview??

Is it possible to build a firewall using labview??
RAJESH

There are several kinds of firewalls, for example:
(1) so called "personal firewall software" which applies some policies to incoming and outgoing ethernet traffic on the computer it is running.
(2) Dedicated hardware firewalls (having at least two ethernet interfaces) that enforce policies of traffic flowing across. These can be bridging, routing, or even be proxying.
LabVIEW does NOT have access to the low level packet structure (ethernet header, ip header, tcp header, etc.) and relies on the OS for routing decisions. LabVIEW only deals with TCP and UDP and only at a very high level. A firewall must also make decisions for e.g. ICMP, GRE, or other IP packets, must know the status of all TCP flags (SYN, ACK, URG, PSH, FIN, RST), must check for valid fragmentations, et., etc.. LabVIEW cannot do any typical firewall tasks unless you do most of your work with external routines. In this case, LabVIEW just provides the UI.
(Even simple ftp traffic would be quite complicated. For example the ports for the secondary data connections must be dynamically allowed based on information gleaned from the control connection, in this particular case the PORT command and the reply to the PASV command).
I would say the answer is NO! Not with the networking tools provided with LabVIEW alone.
With lots of work, you might be able to built a simple proxy server using LabVIEW, but this would seem quite useless...
LabVIEW Champion . Do more with less code and in less time .

Metro Ethernet Design question

Hello,
I was wondering how service providers guarantee their security protection in the Metro Ethernet model, especially when Internet is one of the applications used over the Metro network.
For example: The customer edge switch (3550) is connected directly to the service provider aggregation layer(either Cisco Catalyst 4500 and 6500 Series switches ) .
In the network core, Cisco 12000 or Cisco 7600 Series routers.
So where is the security devices in this architecture, where is the firewalls, the IDS/IPS, that protects the service provider core from any threats.
Providing the customer with Internet in Ethernet switching technology the service will put the provider in a vulnerable position.
Am I thinking wrong here?

Hi
The CE will be hardened using storm control both multicast as well as broadcast on the ports where the end users are connected.
About the accesiability between the other users who are connected on the ports of same switches you have switchport security coded which will take care of the access violation part.
Also the maximum no of MAC address which can be permitted/allowed over the ports.
This inturn will send u a trap and can shut the port if theres any violation detected on those ports..
In the next layer where u say 6500 or 7600 u will have FWSM modules which will be taking care of filtering and other funtionalities which is very much similar to a standalone PIX firewall.
you can have redundandcy or even load balancing with
the FWSM modules over there in the 6500 switches.
And ofcourse the IP addressing schemes deployed would be in private scopes and will have either NAT pools or PAT enabled in the FWSM.
you got to have more n more ACLS on all the devices to mitigate the general known worms/virus or their variants in the network applied in applicable points.
regds

Metro Ethernet Design With Redundant Head Ends

We're getting ready to turn up some metro ethernet circuits that were just installed by AT&T. AT&T has provided a VLAN for each remote site (so each site has its own VLAN), and those VLANs are trunked to our head end switches (Cisco 3750 Metro Switches).
I'm struggling with the best design for IP routing. We currently use OSPF on our internal network, and I was going to extend OSPF to our metro solution as well, but I'm not so sure now.
I don't want routing to occur directly between head end #1 and head end #2, we already have redundant paths within our corporate network, and allowing our two head ends to route between each other via our metro ethernet solution is not what we want. However, running OSPF on each of the VLANs which have been provisioned for us would permit routing between the head ends.
We simply need to allow redundanny for our remote locations in the event that one head end were to fail, all of the traffic to/from the remote site would be routed through the head end which is still online.
Anyone suggestions on the best routing design for this situation would be greatly appreciated. I've attached a network diagram to make things clear. I believe I can also go back to AT&T and request one VLAN that includes all sites if that would simply things. I just need to make sure I can still do our traffic shaping because the remote sites are only 10mbps and the head ends are 1gbps.
Thanks,
-Steve

just at a glance it looks as if you should be able to have stp on and setup 1 site as primary and other as secondary

Metro Ethernet in RAIL Transportation (MRTS) applications

Dear Sir,
I have a query related to Metro Ethernet technology.
We are into TRANSPORTATION SYSTEMS. We are coming up with a MRTS Project in Mumbai , India. We are at a planning stage at the moment. As per our experience, companies in RAIL MRTS Applications are using SDH technology (MUX and access multiplexers).
Could you please suggest , should we go for METRO ETHERNET of SDH Technology.
Are there any players/ any Metro Projects who have implemented Metro Ethernet ( instead of SDH).

Hi Pankaj
What kinda applications you are going to use and what kinda bandwidth requirement you have in place ?
Also do revert back the number of locations and a bit more onto your topology which mite help to get back with our suggestions..
regds

Comcast Metro Ethernet Setup

We have one customer with one ASA and one 3750 switch in headquater. 6 1801 Routers in 6 branches.
All connected via MPLS/BGP provided by ATT. And it was terminated at one port on 3750.
We plan to replace that with Metro Ethernet Hub/Spoke topology since the customer mentioned each office never talks to each other. Later on we found they have IP phones do need to talk with each other at branches.
Question - can we still use the MetroE service but configure routing to make each office talk with each other and how that would work?? I would assume some routings on 3750.
Any info is appreciated. thanks!
Ben

Hi Ben,
It will work for sure since this is what ( in a much more complex scenario) we are implementing in our company since ab few months. Just take care of defining data and voice subnets as technically unrelated so to be free implementing very flexible and easy to manage routing policies. Is ATT providing L3VPN or what?
Hope to help
Alessio
Sent from Cisco Technical Support iPad App

Traffic Shaping on 6880 between sites over metro ethernet

Hi
I have a new dual site setup with 6880s at the core at one side and 3650 stack at the other. We have a 200mbps ethernet solution from our service provider but on testing we are maxing at a bit over 100mbps, iperf tests directly on the link are giving 200mbps so I need to apply some shaping to get the full usage from the link. In the past I have used srr bandwidth on metro switches but the 6880s don't support this. So I assume I need to setup policy maps and apply to the physical interface? The interfaces are layer 2 trunks and we are stretching vlans between the sites. E.g. siteA has vlan20 and site B has vlan 20 over the metro ethernet service, site b is layer2 only and all routing and services are provided at siteA
Is it as simple as this? It seems too easy :) So I may be missing something. I just apply this on the physical interface at each side?
policy-map POLICY-S2S-200MB
class class-default
shape average 204800000
policy-map POLICY-S2S-200MB-IN
class class-default
police cir 204800000
conform-action transmit
exceed-action drop
~
int gi1/1/1
service-policy out POLICY-S2S-200MB-OUT out
service-policy out POLICY-S2S-200MB-IN in
Your input would due treaty appreciated!
Thanks,
Aidan.

Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Ah, well that's great! (Hmm, now I wonder if same feature is available on 6500 with sup2T or 6807.)
In that case, your output policy might be just as simple as what's in your OP. Cisco isn't really clear whether all their shapers (or policers) are counting L2 and L3 or just L3. I suspect many just count L3. If that's true in this case, you may need to shape about 10 to 15% slower to allow for L2 overhead (this assuming your provider is providing 200 Mbps of "wire" bandwidth.
If you're able to shape on the other side, then there should be no need to also police the ingress. Also, assuming provider limits bandwidth, there's no reason to police ingress at CIR rate.

Metro ethernet, Ethernet protection ring.

Hi everybody.
I hope everybody is doing great. A quick question for you guys.
Let say we have Ethernet switches connected in a ring .We want to use Ethernet protection ring for loop avoidance and faster convergence.
One of the switch will be RPL owner, and of the link in our ring will be chosen as RPL link.
1)My question is what is the criteria for RPL owner selection and RPL link? ( For e.g in STP, we use lowest bridge priority for root bridge)
2) Is Ethernet protection ring provide an alternative to stp when we switches connected in ring toplogy and fast convergence is required as is the case with metro ethernet commonly ?
Have a great evening.

Dear Friend
If you want to deploy and use L2 VPN service you should
define whst is he type of core
do you want to use L2 VPN service based on IP or MPLS?

Building metro ethernet using cat3750

Similar Messages

Maybe you are looking for