Multi-VRF CE Speed Limitation

Hi,
I've got a 64Kbps BW between PE (3640) and CE (2600) and I'm planning to configure the 2600 as Lite-VRF CE so that I can connect 2 to 4 VPNs to this box. Does the Lite-VRF support a 64Kbps BW serial connection? If yes, what will be the encapsulation type to be used?
Your help is appreciated.
Thanks,
Galie

Hello,
Could you verify whether it supports a 64K BW between PE (3640) and Lite-VRF CE (2600)? I could not find this in any Cisco documentations. I need to know if this setup is possible. If yes, then what's the required minimum BW for each VRF in serial connection.
Thanks,
Galie

Similar Messages

Multi-vrf CE/vrf lite Instances

I'm currently looking at deploying vrf lite on our ce's but I'm unable to locate the limitations on how many instances can be run. I realise that the low-end ce's (1700, 2600) the limitation is 5 instances. Is there any other CE related devices that can run more instances, if so, how many and what devices?
Regards
Mark

Hi,
The 5 instances restriction comes from the "Designing MPLS Extensions for Customer Edge Routers" Product bulletin. The following script from that document is:
Conclusions
In order to ensure that their data is kept private while traveling across a Service Providers network, customers are presented many VPN options to suit their needs. This paper has focused on one particular type of VPNs: MPLS-VPNs. A general description was outlined for MPLS-VPNs in order to discuss the new feature in Cisco IOS release 12.2: Multi-VRF CE.
Multi-VRF CE extends limited PE functionality to CE devices by allowing the traditional LAN network behind a CE router to be segmented into separate VRFs. With this feature, the CE router is now able to segment their LAN traffic into a maximum of 5 separate VRFs.
So, I'm not sure whether this is just a standard feature set for all models, or this particular feature has been upgraded to support more vrfs, which as you say, will require the appropriate capacity.
Regards
Mark

Multi-VRF

Hi.
I intend to understand what a multi-vrf is, but the bottm line is, I don't seem to understand them very well.
I was asked about it and I was surprised that I was not able to find an easy way to explain them.
If you are to explain what a multi-vrf is, how would you do it?
What are the basic ups and downs?
Thanks

Hello Jayson,
a Multi-VRF CE is a device that has multiple VRFs and is shared between different customers and is generally owned and managed by the service provider.
From a technical point of view the multi-VRF CE has a subset of the features of an MPLS PE.
It has the capability to segregate traffic of different customers and to support address overlapping but:
there is no support of MPLS forwarding so there are only VRF access links both to the customer both to the real MPLS PE.
There is no support/need of the MP-BGP for address-family Vpnv4.
The uplink is usually made with an high speed 802.1Q trunk where each vlan carried is mapped to a different VRF/Customer.
The customer benefits are the sharing of the CE device and of the high speed uplink(s).
Scalability is the issue in comparison with a real PE:
a PE with N VRFs can use N+1 interfaces (N access links + 1 MPLS backbone link)
a multi VRF CE with N VRFs needs 2*N interfaces (for each VRF one link towards the customer and one towards the SP PE)
The same is true for the routing relationships: on each VRF a different routing relationship exist with PE (it can be eBGP in VRF or IGP OSPF or EIGRP in VRF) while a real PE has one/two BGP relationships with the RRS and this is enough for all defined VRFs.
Often a Multi-VRF CE is a multilayer switch that can offer high port density at a cheap price.
Hope to help
Giuseppe

Multi-VRF CE: Number of VRF's

Are there hard and fast limitations to the number of VRF's you can configure on a given router platform using Multi-VRF CE functionality? Or, are the only limitations those imposed by the available memory, CPU, and available routing processes on a given router.

There is no hard limit that I know of. As you stated the limitation is rather to resources available on the node itself.
Hope this helps,

2009 Macbook issue: download speed limitation

Hi
Mi wife got a late 2009 white macbook that's driving me crazy. Despite we got a 7Mbit ADSL connection and all others macs at home (we got 2 more 2008 macbooks and a 2008 macbook pro) with the very same OS version (10.6.4) and network settings are working properly and downloading at full speed, her one looks to have some kind of speed limitation in download to around 1.5 Mbps.
The ping and upload speeds are the very same of other computers, and apparently randomly the download speed also on that computer gets back to around 7 Mbps...
I just spent the afternoon doing tests and I got nowhere but maybe I found a pattern...
First what I excluded:
-doesn't depend on how it's hooked to the net, same behavior by ethernet or wifi in both cases the other service was off
-any other mac using the same connection is working properly, did side by side tests
-ping is always the same on both computers used for test
-it is not a DNS issue
-deleted and created a new position in Network panel
-did several restarts, no solution
-doesn't depend on a specific app being used (but maybe apps can matter, see below)
-none of possible fixes I found online did work
-probably it isn't related to OS version or updates, this issue has likely been there since a lot of time, and over more os updates (not really sure of this, we had unrelated netwok issues and changed provider for that reason in last year, we cot a stable and uniform environment just recently)
Now what I noticed:
-As soon as the computer is started and I open a single browser (be it Safari, Chrome or Firefox doesn't change) speedtest.net test is ok, 7Mbps download.
-work and navigate with it, it's ok, download speed remains 7Mbps
-As soon another internet using application is opened (Mail, another browser) the connection speed drops to 1.5 Mbps (this is ALWAYS the limit, no relevant fluctuation in this)
-If I close any of above apps and remain with a single browser, running tests initially report still the 1.5 limit, but shortly after (one or two minutes) the speed gets back to 7Mbps
My wife needs to work with Mail, Skype, and at least two browsers open, so this limit is giving her great troubles

taylor.henderson wrote:
-none of possible fixes I found online did work
This doesn't really help narrow down the problem
{quote}
doh, you are right... sorry... the possible fixes I had found around are the ones reported right before...
Create a new user account on the problem computer and see if the slow speeds and strange behaviour persists in it.
I did, it does...
- created a new user and logged in
- opened Safari, speedtest returns 7Mbit/s in download
- opened Firefox, after a little speed drops to 1.4
- some successive test starts slow (1.4) then sometimes speeds up, but most remain at 1.4
- start chrome too, same behaviour
- close Safari and Firefox, wait a little (1 or 2 minutes) do the test with Chrome, back to 7Mbit/s
Then go through stuff like this http://www.gballard.net/macrant/osx_troubleshooting.html.
I went through it and did most of what's suggested there (it's a little complex because when I am not working my wife is usually using her macbook to study and needs to use it all the time)...
- unused disk space is 95,6 GB
- booted in single user mode and did a fsck -fy
- repaired permissions
Nothing changed, both the behavior takes place in new user account, and in main one, where any internet using application (Mail, Skype...) opened together causes the download slow down...

What does multi, one, premium and limited mean in the context of Indesign servers please?

what does multi, one, premium and limited mean in the context of Indesign servers please

You will likely get better program help in a program forum InDesign
The Cloud forum is not about using individual programs
The Cloud forum is about the Cloud as a delivery & install process
If you will start at the Forums Index https://forums.adobe.com/welcome
You will be able to select a forum for the specific Adobe product(s) you use
Click the "down arrow" symbol on the right (where it says All communities) to open the drop down list and scroll

Multi-VRF on the same device

Hi, I have a certain design that I am thinking of implementing however need some help to understand the feasability as well as confirm if it is indeed possible to do it. It is sort of like configuring multi-vrf on the same device and leak routes from them into a global routing table. It seems impractical to do it however if I want to limit connectivity between various vlan's on a L3 level without ACL's this seems the better option. Please do correct me if that is not so.
Design
A device which has a number of vlan interfaces on the north side let's say a 6500 configured with a number of vlan's. Each vlan has its own vrf. The SVI interfaces are where I apply the ip vrf forwarding XXX command. This device will be like the PE I assume?
Now I might be running various routing protocols (EIGRP, RIP, Static, BGP) within these vrf's with the devices on the other end that have no idea about vrf's. Since I have a number of routes I have learnt within their own vrf's I want to either export all these routes into the global table or create a global vrf where I can export all these routes.
The reason being that I want to propogate all these routes to the south side. The south side interface of this PE 6500 is physically connected to a firewall via a L3 point-to-point interface. That firewall's south interface in turns connects to another switch.
I am going to form a BGP session with between the Top PE 6500 Switch and the bottom switch and I would like to propogate all the routes that I have in their own individual vrf's on the Top 6500 PE switch to the bottom switch via BGP.
I don't think I can run MP-BGP due to the firewalls being in the physical path. Besides I would like to run a normal BGP IPv4 session between the top and bottom switch to keep it simple and familiar.
The reason I would like to have every vlan in its own vrf is to limit connectivity between the vlan's without configuring ACL's. It provides a bit more security between the VLAN's.
What I am not sure about is how the packet forwarding would work or if it would work at all.
Thx for your help.

Hi Vikram,
Firstly, you mentioned that the reason for going down this path is for security between the different VLANs. Have you looked at Private VLANs as another option?
Certainly leaking routes between different VRFs can be achieved and I would recommend having a 'Shared VRF' that you leak in and out of. Having the Firewall between the PE nodes does present an issue both for BGP as well as LDP peering if you wanted to establish a MP-BGP session. From what you have mentioned above, this solution might over-complicate what you are trying to do.
Are the network ranges in each VLAN also unique?
Can the Firewall run IGP? If so, maybe you could run Private VLANs and the use an IGP to propogate the networks through the FW across to your other switch? If you were to establish a BGP session between the switches each side of the FW, the FW would also need to either become a BGP peer or have IGP enabled. Each BGP node would then need to inject the BGP routes into IGP. If this isnt done, the FW will drop traffic as there would not be a suitable route.
Are the resources through the FW shared or are they also client connected networks?
Trent Husking

Computer speed limitations for FoxPro 2.6

what are the computer speed limitations for FoxPro 2.6 MS but not Visual
I have done the patch to run on my with windowsXP
How many EZpatch versions are there?
Is the a way to run on a windows7 64bit computer.
I have graphics BUT
Body text cannot contain images or links until we are able to verify your account.
How do I do the verify?

FoxPro 2.6 either DOS or Windows as a 16 bit application cannot run on W7/64. You have to install some DOS emulator or Windows XP in Virtual PC environment.

What is sync speed limited by?

Assuming my line is all ok, what is sync speed limited by?
The reason i ask is im told my exchange and line is rated for 2 meg (which i was syncing at around 2.5), on sppedtest was getting 2 meg download...so all is looking well...but then randomly one saturday (about 2 weeks ago) i changed over a filter and disconnected the extension wiring, reset the home hub and synced at 3.9 meg, with a nice SNR of 5.9db. Obviously i was well impressed as my speed went up!
Why was this sync different? As im yet to get anywhere near that again?

neild7744 wrote:
Assuming my line is all ok, what is sync speed limited by?
It's essentially governed by the characteristics of the line. Even if the line is OK, it'll still have properties that could limit the possible speed to an extent. eg lines all attenuate the signal, even good lines.
There are other factors, "hard" caps for example can be imposed by the hardware, possibly due to the service you're buying. An "up to 8Mbps" service will never go faster than that, even if the line is capable.
The reason i ask is im told my exchange and line is rated for 2 meg (which i was syncing at around 2.5), on sppedtest was getting 2 meg download...so all is looking well...
Not really relevant to your question, but...while your line may well be "rated for 2 meg" the exchange will be capable of more than that. If you get anything less, it's due to one of the reasons above.
but then randomly one saturday (about 2 weeks ago) i changed over a filter and disconnected the extension wiring, reset the home hub and synced at 3.9 meg, with a nice SNR of 5.9db. Obviously i was well impressed as my speed went up!
Why was this sync different? As im yet to get anywhere near that again?
On the face of it, it sounds as though either the filter or the extension wiring is causing some noise/interference on the line, which was slowing things down.
If this behaviour is consistent and repeatable, it should be fairly easy to find and eliminate the cause, which may give a very worthwhile improvement to your speed.

What target address does IPM select if the target IPSLA device is a multi-VRF CE?

What target address does IPM select if the target IPSLA device is a multi-VRF CE?
With IPM 4.2.1 it is not possible to select the correct target IP address when configuring a collector between two multi-VRF devices. It looks as if the primary management address for the target device is used in the collector configuration which, of course, belongs in a different VRF entirely.

One example, and there may be others, is the (free) DynDNS dynamic DNS service which publishes a domain name for the WAN port of your router which can then be resolved, like all other domain names, to the actual IP address of the WAn port of your router. This service provides a solution to the problem of having a proper domain name in cases where your public IP address changes over time. Unless you pay for a static IP address, virtually all ISPs change your public IP address over time.
So, you can register for a free DynDNS account at www.dyndns.com and that is how you come up with the User: and Password: information; use whatever User and Password you register at dyndns.com with.
The first part of the hostname you can define as you wish, subject only to someone else having used it previously, and the remaining parts of the domain name might be "dyndns.org" or one of the other domain names provided by the DynDNS service. So, you could publish, via DynDNS, the name of your public IP address as, for example, joehlam.dyndns.org however you might want something less descriptive or more vague.

3745 Multi VRF with modules ??

Hi,
Please anyone can tell wheather Gig modules are supported on 3745 and if yes then how many? Also please tell which is the Gig module I could not find on cisco.com.
And also do the onboard LAN ports support Multi VRF function ?
Thanks
NK

We use VRFLite with the onboard LAN ports and it works just as expected.
hth
-birgit

Multi-VRF support on Catalyst IOS Hybrid

Hi,
I have Catalyst 6509/Sup720. I intend to use hybrid sw (CatOS [SP] + IOS [RP]).
I am planning to configure Multi-VRF feature.
Is the Multi-VRF feature on hybrid version.? If no, is there a plan to support it in the future.
I saw this feature supported on Cat IOS system native, but can't seem to find on the hybrid one.
Thanks
SSng

Multi-VRF (VRF-Lite) is not supported in Hybrid mode. I don't think that there are any plans to support it in the future either. You would have to migrate to Native mode.
Hope this helps,

Multi-VRF CE or VRF-Lite support on 1800/2800

Can anyone please confirm whether ISR 1800 and 2800 series devices support Multi-VRF CE functionality and which IOS release should be used?
I could not find any document which is explicitly mentioning the above for the mentioned boxes.
Actually my Purchase Order has been held up due to this... ;-)
Thanks...

Yes, they both do. For specific IOS version required, please refer to the Cisco IOS features navigator:
http://tools.cisco.com/ITDIT/CFN/jsp/index.jsp
Hope this helps,

Multi VRF CE and CoS/QoS

Looking for some details on do's and dont's for Multi-VRF CE. Also wondering how CoS/QoS is supported. If I want to do CBWFQ on the CE that is supporting Multi-VRF CE can I do it per subinterface to have a policy per VRF?

It depends on what platform you are using. The 7200 and 7300 do not support CBWFQ on sub-interfaces right now. Ive heard September this year but wont hold my breath. The 12k supports it but only on the E3 card not the 10portgigE4+ card.

Multi-VRF CE

Hi,
I need to know whether we can use the Cisco 2610 router as Multi-VRF C.E. which will be connected to the Cisco 3745 P.E. router (existing) via 786K Serial Connections.
I need to configure two VRF's (IT & SOM)on the Cisco 2610 (Multi-VRF CE) and Cisco 3745 (P.E.) for the two VPNs.
Can someone please let me know whether this is a workable solutions?
Your help is very much appreciated.
Thanks,

Hi,
What is somewhat strange is your statement: "we are using the default encapsulation on the serial interface (i.e. HDLC)".
Multi-VRF is depending on two things. First the control plane is separated, i.e. you have one separate routing context per VRF. Second you need at least a separate interface per VRF. One interface can only belong to one VRF. You can check this with "sh ip vrf interface" or with "show ip route VRF ". If there is no output then your VRF has no interface and thus no BGP session can be established. In other words: a VRF is much like a separate router - unless it has an interface there will be no communication possible.
In your case Frame relay would be the natural choice. An example config with two VRFs could look like this:
ip vrf VRF1
rd 65000:1
ip vrf VRF2
rd 65000:2
interface Serial0/0
no ip address
encapsulation frame-relay
no keepalive
interface Serial0/0.100
ip vrf forwarding VRF1
ip address 10.1.1.1 255.255.255.252
frame-relay interface-dlci 100
interface Serial0/0.200
ip vrf forwarding VRF1
ip address 10.2.2.1 255.255.255.252
frame-relay interface-dlci 200
router bgp 65000
address-family ipv4 vrf VRF1
neighbor 10.1.1.2 remote-as 65100
no auto-summary
no synchronization
exit-address-family
address-family ipv4 vrf VRF2
neighbor 10.2.2.2 remote-as 65100
no auto-summary
no synchronization
exit-address-family
The IPs, interfaces, AS numbers, additional commands etc. need to be adjusted to your environment.
Hope this helps! Please use the rating system.
Regards, Martin

Multi-VRF CE Speed Limitation

Similar Messages

Maybe you are looking for