Switch vs. Router for Metro-E Customer Premise Solution

What is the best customer premise solution for Metro-E connection? I am geting conflicting recommendations - If you have over 40 MAC addressess, use a router; less than 40, use a switch?

I think it should be more feature driven. i.e. basic connectivity then simple switches - policy control etc then use a router.

Similar Messages

Using 3750 switches & 2821 router for video & http qos

Hello all,
I know that the 3750 switches and 2821 routers are aging platforms, though, was curious if it they are capable of providing QoS for video (such as WebEx) and HTTP/HTTPS, in addition to voice traffic?
Thanks

Thank you Reza.
One reason we're looking into this, is that we wanted to see if we could give priority to traffic destined for, and arriving from, certain servers (in addition to certain classes of traffic). Is that possible? Most of our switches have IPBase images (12.2(55)SE1).
Thanks

Developing in cloud for cloud and on premise solutions

Hello,
I'll be developing software and plan on doing the development in the cloud to help with programs like Successfactors. Will the programs that I develop in the cloud be useable, 'as is' for the on-prem versions of that software? Is this the same for all other SAP cloud offerings?
Thanks,

Hi Jim,
You can become a partner with access to a SuccessFactors system for a very reasonable price:
https://www.sapappsdevelopmentpartnercenter.com/en/get-started/cloud-applications/successfactors-extensions/
however, I'm not sure this would give you access to the provisioning area of SuccessFactors where you need to make the SAML/SSO configurations.
Generally you must be a SuccessFactors partner and have completed the Introduction to Mastery course before you get provisioning access.
But if anyone can help you out the SAP teams in this area are the most helpful anywhere!
Good luck.
Chris

I purchased a time capsule last year and we have been using for our backup of our apple devices (iMac, laptop, iPad and now 5 iPhones). we have not used it as our router for wifi but would like to now switch to it. need directions for switching please.

i am using time capsule for backup only but would like to switch to it for our wifi. directions on apple discuss original set up of time capsule for wi fi but not switching from existing wi fi router. were can i get help with this?

Well, it depends on what ISP you use.
Reply back with your ISP and connection type (cable, ADSL). Also, do you use an ISP router or do you have a modem connected to a router that you provide?

Using Cisco MDS 9148 switch for switching and routing

Hi Gurus,
Can you please advice me! Can i configure interface trunking, routing and dhcp services on the Cisco MDS 9148 switch?
Thanks for your response!!

Tommy,
MDS9148 is a Storage SAN Fibre Channel switch, it doesn't support Ethernet, IP, VLANs, VLAN trunking, 802.1Q, IP routing, DHCP. It's meant for Fibre Channel connectivity between Fibre Channel server HBAs and Fibre Channel storage.
Roman

Branch office setup with L3 switch and router with IOS security

Hello,
I am in the process of putting together a small branch office network and I am in need of some design advise. The network will support about 10-15 workstations/phones, 3-4 printers, and 4-5 servers. In addition we will eventually have up to 25-30 remote users connecting to the servers via remote access VPN, and there will also be 2-3 site-to-site IPSec tunnels to reach other branches.
I have a 2911 (security bundle) router and 3560 IP Base L3 switch to work with. I have attached a basic diagram of my topology. My initial design plan for the network was to setup separate VLANs for workstation, phone, printer, and server traffic. The 3560 would then be setup with SVIs to perform routing between VLANs. The port between the router and switch would be setup as a routed port, and static routes would be applied on the switch and router as necessary. The thought behind this was that I'd be utilizing the switch backplane for VLAN routing instead instead of doing router-on-a-stick.
Since there is no firewall between the switch and router my plan was to setup IOS firewalling on the router. From what I am reading ZBF is my best option for this. What I was hoping for was a way to set custom policies for each VLAN, but it seems that zones are applied per interface. Since the interface between the router and switch is a routed interface, not a trunk/subinterface(s), it doesn't seem like there would be a way for me to use ZBF to control traffic on different VLANs. From what I am gathering I would have to group all of my internal network into one zone, or I would have to scrap L3 switching all together and do router-on-a-stick if I want to be able to set separate policies for each VLAN. Am I correct in my thinking here?
I guess what I am getting at is that I really don't want to do router-on-a-stick if I have a nice switch backplane to do all of the internal routing. At the same time I obviously need some kind of firewalling done on the router, and since different VLANs have different security requirements the firewalling needs to be fairly granular.
If I am indeed correct in the above thinking what would be the best solution for my scenario? That is, how can I setup this network so that I am utilizing the switch to do L3 routing while also leveraging the firewall capabilities of IOS security?
Any input would be appreciated.
Thanks,
Austin

Thanks for the input.
1. I agree, since I have only three to four printers, they need not be in a separate VLAN. I simply was compartmentalizing VLANs by function when I initially came up with the design.
2. Here's a little more info on the phone situation. The phones are VoIP. The IP PBX is on premise, but they are currently on a completely separate ISP/network. The goal in the future is to converge the data and voice networks and setup PBR/route maps to route voice traffic out the voice ISP and data traffic out the other ISP. This leads up to #3.
3. The reason a router was purchased over a firewall was that ASA's cannot handle routing and dual ISPs very well. PBR is not supported at all on an ASA, and dual ISPs can only be setup in an active/standby state. Also, an ASA Sec+ does not have near the VPN capabilities that the 2911 security does. The ASA Sec+ would support only 25 concurrent IPSec connections while the 2911 security is capable of doing an upwards of 200 IPSec connections.
Your point about moving the SVI's to a firewall to perform filtering between VLANs makes sense, however, wouldn't this be the same thing as creating subinterfaces on a router? In both cases you are moving routing from the switch backplane to the firewall/routing device, which is what I am trying to avoid.

Router for small business Internet connection

One of our clients recently switched ISPs to Speakeasy who installed a Hatteras HN 407 bridge. We have had Internet connectivity problems using their SonicWall 3060 firewall, and we experienced similar problems when attempting to use a newer Sonicwall TZ180. We temporarily installed a Linksys W54GT router, which has been working perfectly; however, we would like to have a more robust router for their 25 user network - additional security options, performance, VPN, two WAN connections, etc. Can you recommend a small business router with 2 WAN connections? This customer has a business ethernet 3Mbps (up and down) Internet connection, uses an online medical scheduling program, normally has 10 - 20 uses using the Internet connection and will be installing a backup DSL line that we would like to use for load balancing.

Our recommendation for Dual WAN would be RV082 This would be the prefect VPN router for small Business and if you are looking for more ports on the Ethernet, then we would recommend the RV016

3 reasons why i won't switch to Lightroom for now

Lightroom is so nice, so intuitive & user-friendly that I almost switch from Bibble to Lightroom even if there are some very important features missing in order to call lightroom a professional grade application.
Here are the major reasons why i wont switch to Lightroom for now:
1. Missing a good sharpening tool
2. Missing a good noise reduction tool like Noise Ninja
3. Missing an automated lens correction tool like PTLens
I think the last 3 will not be a problem any more when Adobe releases the SDK When do you think the SDK will be available ?
Would also be very useful:
1. Ability to export a slideshow to DVD (as a wedding photographer, i usually provide my customers with a low res slideshow of their pictures at the end of the wedding day).
2. Option to print to file or option to export to any color profile (the lab where I send most of my print work have their printer profiled & they provide those custom profiles). As a work around, i can for now have an export action that do the profile conversion thru a Photoshop droplet this work but would be better to have that feature built in
In order to work around for the print to file or to jpg file that Im missing, I tried 1 of those virtual printer driver like Miraplacid Publisher It does work but there seems to be a problem with color management... When I print from Photoshop to this virtual printer, I get a jpg file that match exactly what I see on the screen when I try the same with lightroom, I get a jpg file where colors are not exactly what Im expecting
Should those features be available, I would not hesitate even 1 minute to switch to lightroom.

My answer to your reasons:
1) and 2) I just take care of taking sharp pictures. I can't see the need of a sharpening tool. I use LR as my digital darkroom, if I want to retouching a picture I have PS Elements and Noise Ninja. AND the new LR 1.1 has a much improved noise reduction and sharpening tool.
OK. I'm not saying that everybody should learn how to shoot properly so that the use of sharpening or noise reduction wouldn't be required, but there are IMHO other tools that can fit the requirements of the casual photographer or photoblogger.
The same for 3. I never needed any lens correction mechanism. I can't see a reason for that either. I don't have lenses that need any correction and I don't like to do fancy stuff on my pictures.
LR gives me exactly what I need, and waht I need is a program to download and work with several hundreds of pictures from my digital SLR, this means basically cropping and applying a colour profile. And IMHO LR does this pretty well, plus all the catalogue and managing stuff. I can care myself for the rest pretty well.

Protocol Router for Rich Client Front Controller

Hello,
I would like to support multiple client types in my J2EE application - Web Client and Rich Client (Swing Application).
Java BluePrints (Designing Enterprise Applications
with the J2EETM Platform, Second Edition) suggests using a Protocol Router for centralized control in case of supporting multiple client types with multiple controllers - http://java.sun.com/blueprints/guidelines/designing_enterprise_applications_2e/web-tier/web-tier5.html.
I have several doubts with this approach and will appreciate very much any help with clarifying the following:
1) How does a Rich Client communicate to Protocol Router? Using HTTP? That means then that each request/response has to be wrapped in HTTP Request/Response object. It may impact the performance and make the communication between Rich Client and back-end slower.
2) If rich client communicates with Protocol Router through HTTP, what is the difference between Fron Controller for Web Client and for Rich Client?
3) The J2EE Tutorial on the other hand, shows direct connection from Application (Rich) Client to EJB layer - http://java.sun.com/j2ee/tutorial/1_3-fcs/doc/Ebank.html.
It will be greatly appreciated to know how would you address the above doubts.
Best Regards.

1) How does a Rich Client communicate to Protocol
Router? Using HTTP? Yes, HTTP . You are right about performance issues. That protocol router seems to me like like overengineering. Anyway, I think a WEB service could be better choice. It's a standart way how to wrap remote requests in HTTP.
2) If rich client communicates with Protocol Router
through HTTP, what is the difference between Fron
Controller for Web Client and for Rich Client?I think the difference is in types of requests. WEB client would request
WEB pages, SWING client doesnt need WEB pages. It would request contents
of list boxes and things like that.
I would suggest you to use EJB's with session facade pattern. Provide WEB service style access to your app. Many app. servers provide feature to expose SLSB as WEB services. Thus you will support almost any types of clients (.NET, Perl, whatever). You can also use WEB service to connect from you'r SWING client. If later you are not satisfied with performance, you can switch to RMI. If you use BusinessDelegate pattern then you will need to change BusinessDelegate only, just one class.
I have written an example EJB based app. which can be accessed by SWING client using RMI or SOAP, WEB client, .NET client and CORBA.
You can get it from:
http://www.datapro.lv/~mariso/ejb.html
feel free to ask questions, if you have any
Maris Orbidans

Best Switch to use for Link Aggregation

Looking to buy a new switch and was hoping that someone is already doing link aggregation on a current switch. Looking for 48 ports, I have a lot of Xserves.
What model have you had the best luck with? THX

Switches are like so many other things in life - you get what you pay for.
Sometimes you can pay less and get enough (i.e. it works well enough)
Sometimes you can pay less and not know what you're missing (you don't know what some of those advanced features are anyway, even though they could be useful)
Sometimes you pay more and get features you don't need/want/understand
Sometimes you find just the right option.
Start off by determining the importance to your business. If the switch blows out and all your servers go dark, how much will that cost you if it takes an hour to get it back up? 4 hours? a minute?
Look also at how much traffic you're pushing through your network. If you just need ports but aren't pushing many packets then a cheaper switch may suffice, but if you need every port to run at full line rate with no packet drops then you need something bigger.
Do you need the switch to just pass traffic, or do you want statistics (e.g. SNMP, RMON, etc.) so you can track which ports are busiest?
Then, of course, there's a budget. It could be $100. It could be $10,000. Your options are limited at $100, but $10K will cover a lot of options.
While you're doing this, consider expansion room. Are you likely to need more ports soon? Are 48 ports enough? Maybe a chassis-based switch that's expandable would be a better option.
At the high end you might consider anything from Cisco. Their Catalyst range of switches are the workhorses of many networks. They also come with a matching price tag.
Other options worth considering at the higher end would be Force 10's. Force 10 is known for their 10-gigabit network equipment, but their S Series switches are a powerful play.
Then there's Juniper's EX range. Juniper are known more for their routing platform (I guarantee most of your internet traffic goes through a Juniper router at some point), but their switches are a natural progression.
Coming down the line a little, look at Brocade's FastIron switches. Formerly Foundry Networks (before they got bought out), I" ve used (and continue to use) their switches in my network. If all those are above your price bracket then HP ProCurve switches are worth a look.
All of the above still may do more than you need, though. If all you really, really want is link aggregation and don't care about the rest then I'd probably go for a NetGear over the other lower-end players such as D-Link or LinkSys (even though LinkSys is now owned by Cisco).

Multiple switch vlan routing, almost there!

Hello,
I'm hoping this is a blatantly obvious issue, but we all know how late night thinking tends to be fairly foggy!
Anyway, I have 3 3400cl HP switches and a 2610 Poe switch. One of the 3400's is acting as the core, with the other 3 switches lacp trunked into it.
Currently trying to get vlan 40 traffic properly routed for internet access. This is a leap into vlan configs, so the existing domain traffic is still on vlan 1 (yes I know, not ideal).
The config so far successfully allows clients on vlan 40 to receive DHCP addresses via the ip helper, but no access to internet sites. I can resolve a dns address just can't see any hopes beyond the vlan 40 IP.
Two other points if anyone wishes to comment:
The HP 2610 is slotted to be replaced with a Cisco 3750 Poe switch. Any comments and making cisco and HP play nicely together?
And second, if anyone wants to suggest best practice words of wisdom for migrating existing services into a more detailed vlan setup, please type away!
Here is the config: The 'lower' named switch will mirror the 3rd 3400 so I didn't see the need to include that one.
hostname "NHB-Core"
interface 19
   no lacp
exit
interface 20
   no lacp
exit
interface 21
   no lacp
exit
interface 22
   no lacp
exit
interface 23
   no lacp
exit
interface 24
   no lacp
exit
trunk 19-20 Trk1 LACP
trunk 21-22 Trk2 LACP
trunk 23-24 Trk3 LACP
ip routing
snmp-server community "public" Unrestricted
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-18,Trk1-Trk3
   ip address 10.10.4.59 255.255.255.0
   exit
vlan 40
   name "VLAN40"
   ip address 10.10.10.1 255.255.255.0
   ip helper-address 10.10.4.29
   tagged Trk1-Trk3
   exit
ip route 0.0.0.0 0.0.0.0 10.10.4.98
spanning-tree Trk1 priority 4
spanning-tree Trk2 priority 4
spanning-tree Trk3 priority 4
hostname "NHB-Poe"
trunk 25-26 Trk1 LACP
ip default-gateway 10.10.4.59
snmp-server community "public" Unrestricted
vlan 1
   name "DEFAULT_VLAN"
   untagged 1,3-24,27-28,Trk1
   ip address 10.10.4.62 255.255.255.0
   no untagged 2
   exit
vlan 40
   name "VLAN40"
   untagged 2
   tagged Trk1
   exit
spanning-tree Trk1 priority 4
hostname "NHB-lower"
interface 23
   no lacp
exit
interface 24
   no lacp
exit
trunk 23-24 Trk1 LACP
ip default-gateway 10.10.4.59
snmp-server community "public" Unrestricted
vlan 1
   name "DEFAULT_VLAN"
   untagged 1-22,Trk1
   ip address dhcp-bootp
   exit
vlan 40
   name "VLAN40"
   tagged Trk1
   exit
spanning-tree Trk1 priority 4

I am sorry, but to get your issue more exposure, I would suggest posting it in the commercial forums, since this is a commercial product. You can click here for the link.
TwoPointOh
I work on behalf of HP
Please click “Accept as Solution ” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the bottom to say “Thanks” for helping!

Alerts for metro ethernet link

Hi,
Kindly let me know " How to enable alerts for metro ethernet link"
Thanks..

Hello Gureshi,
they are probably referring to OAM, CFM and other mechanisms to detect link or service failure in metro ethernet scenarios
see
http://www.cisco.com/en/US/docs/switches/metro/me3400e/software/release/12.2_52_se/configuration/guide/swoam.html
Hope to help
Giuseppe

Routing for a single domaion

Hello All,
A little background information first. I'm an IT specialist with the National Oceanic and Atmospheric Administration (NOAA) and provide technical support and mail system development to our fleet of ocean survey vessels.
We have a somewhat unique requirement to support our ocean going research vessel mesaaging systems. Since the vessels are at sea, and moving, they
do not have a connecion to the internet or NOAA WAN. We've developed a custom MTA solution that receives email from the Sun messaging server as SMTP traffic and then stores the e-mail as a compressed text file. These compressed files are then transferred between ship and shore via sattelite link or cell phones. The files are decompressed, read and then sent via SMTP to the relaying messaging server on shore. Message delivery to the ship works the same way, only in the reverse direction. This system has been in use for 6 years using Netscape Messaging Server 4.
Although our MTA system overcomes the lack of a TCPIP conncetion for message delivery, the problem that still exists is the synchroniztion of the LDAP.
Since we can not keep the LDAP synchronized we create one LDAP to contain all shipboard accounts , that the messagging server uses for lookup, and another instance that contains all other @noaa.gov addresses which is provided only as an IMAP client lookup directory. This apporach worked fine with Netscape as it only used the User ID lookup, did not care about the domain, to verify that a user was local.
Here is the problem we now face:
1) NOAA requires that all users, shipboard and shore based, have an email address in the @noaa.gov domain.
2) The direcories can not be synchronized between ship and shore to stay current.
We can configure the Sun MTA, using imta.cnf to deliver "noaa.gov" domain locally but any addresses that are not in the ship LDAP ( shore based addresses) are rejected with a 5.1.1 error code at the client SMTP session.
We can configure the system to send all @noaa.gov mail to our Ship MTA, bu then no mail is delivered locally.
The question: Is there any way to accomplish both on Sun Messaging Server 6.3 as we did on Netscape 4?
Ideally we would prefer to have a rewrite rule, or other mechanism, that routes all local mail to the Sun system and any @noaa.gov addresses not in the LDAP to the Ship MTA system via SMTP. These rules both have to work at the same time and of course the mail domain name is the same for local mail and relayed mail.

BruceStone-NOAA wrote:
Here is the problem we now face:
1) NOAA requires that all users, shipboard and shore based, have an email address in the @noaa.gov domain.
2) The direcories can not be synchronized between ship and shore to stay current.
We can configure the Sun MTA, using imta.cnf to deliver "noaa.gov" domain locally but any addresses that are not in the ship LDAP ( shore based addresses) are rejected with a 5.1.1 error code at the client SMTP session.
We can configure the system to send all @noaa.gov mail to our Ship MTA, bu then no mail is delivered locally.
The question: Is there any way to accomplish both on Sun Messaging Server 6.3 as we did on Netscape 4? Assuming I have a full grasp of your requirements this should be pretty straight-forward.
The mailroutingsmarthost: LDAP domain attribute allows you to specify a 'fall-back' system for email addresses of a domain that are not defined in the LDAP directory. This is usually used during migration between non-LDAP legacy systems and Sun Messaging Server when there are legacy accounts for an email domain that haven't been migrated.
So for example I have two test MTA's configured with the same domain (aus.sun.com) but pointing at different directories and they have different users defined.
For the LDAP directory instance that mta1 uses I added the following (schema 2):
bash-3.00# ldapmodify -D "cn=directory manager" -w ********
dn: o=aus.sun.com,dc=aus,dc=sun,dc=com
changetype: modify
add: mailroutingsmarthost
mailroutingsmarthost: mta2.aus.sun.com
I then sent an email to "[email protected]" to mta1.aus.sun.com, this was accepted and then relayed to mta2.aus.sun.com (where I defined the address "[email protected]" as an alias of a user in mta2's LDAP directory) and the email was accepted/delivered locally into mta2's store.
Any addresses defined in mta1's LDAP directory are delivered locally to mta1 as per usual.
Regards,
Shane.

Which Switch and Router to choose?

I am interested in purchasing a Cisco Switch and Router, or possible a Cisco Switch Router.
However, I am not sure of what model to go with.
Currently, we have a network with about 200 Workstations and 30 Servers for our Corporation Infrastructure.
Also, for our lab, we have about 50 Linux Based Servers, and 30 Solaris Based Servers, that are part of our Network. We are a Research and Development Company, and we have had issues with the Lab machines bringing down our network, as well as our corporate network adversely affecting the lab machines. What we would like to do is segment the network so that the different areas will be isolated. However, we also would like to have a lot of control over the traffic that will be able to cross from our network into the lab so that users will still be able to run their tests.
Security is also an issue, and it would be great to have more control, and a better view of what kind of traffic is running through our network.
Currently, we have about 8 Gigabyte Switches which are unmanaged (Linksys and NetGear). Our idea was to get a 1 or 2 Cisco Switch Routers, and then split them up into VLANS and cascade our current switches so that we can still make use of them. The other ideas was to just get a Cisco Switch and use our CheckPoint Router/Firewall to do the routing.
Can you give me any advice as to what model of Cisco Product you would recommend?
Is it better to go with a Switch Router, or simply get a separate Switch and Router?
Please note that all of our Machines have 10/100/1000 NICs, so the device will need to be Gigabyte.
Thanks you so much!

You have two choices. Either to use a chassis based solution or to use stacable switches such as a 3750. Are all the cat 5(or 5e,6) runs coming into one centralized location ? Or are there separate wiring closets that you plan to put. If then we need to put separate switches at those locations and run fiber back to the central location which has a chassis based or stackable switch.
If using a chassis based solution, you can get a 4506 (4507 for redundancy, with a redundant supervisor engine). Supervisor engine is nothing but the CPU of the switch. 4506 is a 6 slot modular switch with 2 power supplies for redundancy. You cannot add two Supervisor engines on a 4506 (4507 can).
Slot 1 is always for supervisor engine, the remaining 5 slots you can fill using 48 port 10/100/1000 modules.(48 * 5 = 240). So your maximum port density is 240 ports on a 4506. (Note that there are 4507, 4510 which are similar models with more slots)
If using 3750, you can stack upto 9 switches in a stack using stacking cables on the back side of the switch. Each switch will have 48 ports (10/100/1000) and you can stack 5 switches to get 240 ports.
For the firewall I would recommend using a PIX 515E, (Why go for Checkpoint firewall when you can use all Cisco). For routing between the vlans, the switches that I recommended above are all Layer 3 switches. They will route between the different vlans. You can also configure ACLs to restrict traffic between multiple vlans.
HTH

What is the best router for mugs connectivity

i am looking for best networking institute in India, for optical networking please suggest, have heard about Networkers Zone (http://networkerszone.com/) , however needs suggestion and what is the best router for mugs connectivity.

For training on the Cisco Optical I would rrecommend Fastlane http://www.fastlane.si/ they would be able to fullfill your training requirements either in India or at another location even at the Cisco Factory in Monza, they can tailor courses to your specific requirements and also do switching and routing courses too, I have know one of the instructors for over 10 years they are very good.
As far as recommending the best router, that all depends on the application, not what you mean by mugs connectivity, I know what mugs is in English but not sure if thats what you mean or if it is an acronym for something else in any case if you post in the router section of Net-Pro with your specific requirements I'm sure someone woule be able to help/advise accordingly.

Switch vs. Router for Metro-E Customer Premise Solution

Similar Messages

Maybe you are looking for