Recommended ASBR - 2x10GE, IPv4/v6,netflow

[ar]

Hi.

I am researching for the recommended ASBR router in a service provider environment.

That router will run eBGP peer to an external provider and cater full routes.

Intefaces should be multiple 10GE. Currently running 2x10GE.

Support for IPv6.

And should have no issue with full netflow.

I will use the router to work with a DDOS solution based on flows.

Thanks

[Leo Laohoo]

ASR9K with RSP 440.

Cisco ASR 9000 Transceiver Modules: Line Card Support

Cisco ASR 9000 Series 24-Port 10 Gigabit Ethernet Line Cards

Cisco ASR 9000 Series 36-Port 10 Gigabit Ethernet Line Cards

Cisco ASR 9000 Series 1-Port 100 Gigabit Ethernet Line Cards

Cisco ASR 9000 Series 2-Port 100 Gigabit Ethernet Line Cards

[ar]

Thanks.

Would you know if ASR9K can do ipv6 to ipv4 NAT?

Any other options?

[Leo Laohoo]

ASR9K can do `em all.

ASR9K is designed to work in a Service Provider environment like Globe. 

[ar]

thanks.

Im trying to look for any secondary option..Probably a smaller box...

[Alexei Kiritchenko]

Hello Allan,

Few additions. We can’t really claim full NetFlow is supported. New generation Typhoon LCs have 200kpps policer per LC for exporting NetFlow. So if the traffic rate is not high we can sample 1:1 otherwise NP engine would drop the rest.

For NAT we need to have a dedicated A9K-ISM-100 blade in the chassis.

Regard,

/A

[ar]

Hi Alexei.

Thanks for this info.

My objective is 20Gbps of  internet traffic and growing.

Then apply netflow on inbound traffic.

Appreciate your recommendations?

[Alexei Kiritchenko]

Unfortunately XR systems don’t do full NetFlow, only sampled and recommendation is 1:10000 for 10G interface.

http://www.cisco.com/en/US/docs/routers/asr9000/software/asr9k_r4.2/netflow/command/reference/b_netflow_cr42asr9k_chapter_01.html#wp1703968574

Bug again, all would depend on your real traffic rate going though a single LC and we may say we can sample 1:1 if traffic on this LC has no more than 200kpps.

Regards,

/A

[Leo Laohoo]

Unfortunately XR systems don’t do full NetFlow,

Thanks Alexei.  So much for "truth in advertising".  The words "full netflow" is found in the ASR 9K data sheet. 

Would it be possible if this can be ammended?

[ar]

Thanks again.

If not full flow, sampling will be fine I guess.

As long as the box can handle netflow and dont have similar problem with 7600 where tcam shoots up.