Does anyone know if there are any specific performance limitations given the following: Catalyst 6500 with Supervisor 720 6708 linecard Configured as a MPLS PE using SXI software multicast VPN (standard service provider setup, with multicast enabled mpls core) I understand that due to ingress replication, and subsequent recirculation, I won't get line rate performance with multicast over a mVPN. In fact, problems may start with a throughput as low as 3Gbps on a PE port) Does anyone have any real-world experience on this topic that they could share? ... View more

Hi, I have a pair of 6509's with Sup-720's and ACE modules. IOS is SXI3, ACE software is 3.0. When I do a manual ACE failover from one chassis to another I see this behaviour (from debug ip routing) switch1: Jan 14 09:13:32.210 CET: RT(test-context): del 10.0.2.1/32 via 10.0.0.1, static metric [77/0] switch2: Jan 14 09:13:34.211 CET: RT(test-context): add 10.0.2.1/32 via 10.0.0.1, static metric [77/0] My question is this - why two seconds to install the static route on the second switch? The VIP is there pretty much instantly but the static route is lagging behind by two seconds. Is there any way to speed up the process or is it hardwired? (I've tried other versions of IOS and other versions of ACE code - no difference) thanks, Andrew. ... View more

Hi, In the case of Enterprise MPLS where VPN's are used to separate business units (a few dozen), with the entry points all firewalled, what is "best practise" regarding the inter-VPN communication? I've seen a couple of approaches, but they all involve some kind of external "fusion router" concept - I'm thinking that perhaps having another VPN dedicated purely for transit might be an option? Can anyone share their experience on how they tackled the issue of inter-vpn communication when the VPN's are all firewalled? (There will likely be a number of firewall concentration points on multiple locations.) thanks, Andrew ... View more

Hi, Has anyone used the bandwidth estimation feature in IOS? I have a question about the methodology that I'd like clarified, as follows: Basically, what I think happens is that you define a bandwidth (% or whatever) and then define QoS targets (drop, delay, etc) and then you let it run for a while (or not? does it calculate immediately or perform traffic analysis?) After you get the corvil bandwidth you change your original estimate (which could be too low or too high) to what the output suggests. Is it a one-off process, or do you need to do it continuously? thanks, Andrew. ... View more

Hi, I'm interested to know what tools people are using to monitor their ACE Appliances? Is anyone using ANM or CiscoWorks? or third-party tools? I'm especially interested in how you are dealing with traps from the ACE if you have a lot of different contexts configured. Andrew. ... View more

Hi, I have an Appliance with an Admin context (for management) and a User context (for the Internet-facing VIP's). I can monitor the User context using snmp via the Admin context no problem, but I really want traps from the User context to be forwarded from the Admin context (otherwise I need to mess about with routing and firewalls to get the traps to the right place). I don't think it's possible, but I could be missing something - anyone managed to get this to work? thanks, Andrew. ... View more