Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Cisco: NSP

IS-IS Multiarea on 12.2 SR

 

 

First page Previous page 1 2 Next page Last page  View All Cisco nsp RSS feed   Index | Next | Previous | View Threaded


jared.a.gillis at gmail

Nov 4, 2009, 4:30 PM

Post #1 of 26 (1338 views)
Permalink
IS-IS Multiarea on 12.2 SR

Hi all,

I've been having quite a few adventures with IS-IS over the last few weeks and have finally hit a wall, so I'm hoping someone here can give me a hand. Basically, I need to build a network with IS-IS multiarea as described here:
http://www.cisco.com/en/US/products/ps6599/products_data_sheet09186a00800e9780.html

I built up a small lab with 2600s running 12.3 and got it all working exactly as described in the docs and as I needed. I then tried to move that config to production, which is on 7606/Sup720 running 12.2 SRC, and the multiarea features did not function. That is, automatic redistribution of L1 routes into the L2 instance did not occur, nor did advertising of an L2 (default) route into the L1 domain occur. After doing some research, I found this 2007 c-nsp post:
http://puck.nether.net/pipermail/cisco-nsp/2007-May/040686.html
Paragraph 10: "TAC says that Integrated Multi-area IS-IS is not supported."
So, to test this out, I put 12.2 SR onto a 7204VXR in the lab (7606 in the lab is not possible for me at the moment), and inserted into my old 2600 lab, and saw the same behavior as on the 7606, which seems to support the old c-nsp post. The Cisco Feature Navigator (which is definitely not gospel) says that every version of 12.2 SR should support IS-IS multiarea.
Does anyone have any conclusive information on this, have you ever been able to get IS-IS multiarea functioning on a 7606/Sup720? If there's some way we can make this functionality work on that platform, I am dying to find it.

Secondarily, if we can't have true IS-IS multiarea, we may be able to simulate it by manually redistributing from the L1 instances to the L2 instances, and setting default-information originate on the L1 instances. I attempted this in the lab, and while the commands are accepted and appear to be good, neither redist nor default origination is actually happening.
Does anyone have any suggestions on this front? Redist and default origination should "just work".

I'm happy to provide config snippets if needed. Any advice or help is highly appreciated.
Thanks!

-Jared
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


oboehmer at cisco

Nov 5, 2009, 1:54 AM

Post #2 of 26 (1293 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Jared,

> I've been having quite a few adventures with IS-IS over the last few
weeks
> and have finally hit a wall, so I'm hoping someone here can give me a
hand.
> Basically, I need to build a network with IS-IS multiarea as described
here:
>
http://www.cisco.com/en/US/products/ps6599/products_data_sheet09186a0080
0e97
> 80.html

I reckon you need to build this for IP? ISIS multiarea is only supported
for CLNS routing, as stated in the above link under "Restrictions".

> Secondarily, if we can't have true IS-IS multiarea, we may be able to
> simulate it by manually redistributing from the L1 instances to the L2
> instances, and setting default-information originate on the L1
instances. I
> attempted this in the lab, and while the commands are accepted and
appear to
> be good, neither redist nor default origination is actually happening.
> Does anyone have any suggestions on this front? Redist and default
> origination should "just work".

not sure what you mean here as an alternative. You can use
"default-information originate" to originate a 0.0.0.0/0 in the node's
LSPs (instead of using the attached-bit from the L1L2 node, possibly
along with "never-set-attached-bit" and "ingore-attached-bit" knobs to
control ATT bit behaviour), but the L1 -> L2 advertisement requires a
"proper" ISIS design (i.e. no multi-area config when using it for IP).

oli
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


jared.a.gillis at gmail

Nov 5, 2009, 5:00 PM

Post #3 of 26 (1290 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Oliver Boehmer (oboehmer) wrote:
> Jared,
>
>> I've been having quite a few adventures with IS-IS over the last few
> weeks
>> and have finally hit a wall, so I'm hoping someone here can give me a
> hand.
>> Basically, I need to build a network with IS-IS multiarea as described
> here:
> http://www.cisco.com/en/US/products/ps6599/products_data_sheet09186a0080
> 0e97
>> 80.html
>
> I reckon you need to build this for IP? ISIS multiarea is only supported
> for CLNS routing, as stated in the above link under "Restrictions".

I do need this for IP routing, not CLNS. If the feature is only supported for ISO CLNS and not IP routing, why does it work on my lab of 2600s running 12.3 latest, with the exact same config, also in an IP-only environment?
Really, my only need is to prevent my L1 routers from learning the entire area's routes, but my network design requires me to directly connect my L2 router to an L1 (i.e. no room for a L2/L1 between them). I just need the L1 routers to get a default towards its directly attached L2, and the L2 backbone to learn the L1's routes. This is essentially a TS-NSSA in OSPF. If there's some other way I can get this behavior with IS-IS, I'm all ears.

>> Secondarily, if we can't have true IS-IS multiarea, we may be able to
>> simulate it by manually redistributing from the L1 instances to the L2
>> instances, and setting default-information originate on the L1
> instances. I
>> attempted this in the lab, and while the commands are accepted and
> appear to
>> be good, neither redist nor default origination is actually happening.
>> Does anyone have any suggestions on this front? Redist and default
>> origination should "just work".
>
> not sure what you mean here as an alternative. You can use
> "default-information originate" to originate a 0.0.0.0/0 in the node's
> LSPs (instead of using the attached-bit from the L1L2 node, possibly
> along with "never-set-attached-bit" and "ingore-attached-bit" knobs to
> control ATT bit behaviour), but the L1 -> L2 advertisement requires a
> "proper" ISIS design (i.e. no multi-area config when using it for IP).

I have default-information originate on my upstream router, towards the L1 it is connected to. The L1 has no default route in it's table, and is not apparently receiving the ATT bit, as it's not sending traffic towards the upstream. In any case, if I can't get L1->L2 advertisement, the point is moot.

>
> oli

_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


oboehmer at cisco

Nov 5, 2009, 11:50 PM

Post #4 of 26 (1290 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Jared,

> >> I've been having quite a few adventures with IS-IS over the last
few
> > weeks
> >> and have finally hit a wall, so I'm hoping someone here can give me
a
> > hand.
> >> Basically, I need to build a network with IS-IS multiarea as
described
> > here:
> >
http://www.cisco.com/en/US/products/ps6599/products_data_sheet09186a0080
> > 0e97
> >> 80.html
> >
> > I reckon you need to build this for IP? ISIS multiarea is only
supported
> > for CLNS routing, as stated in the above link under "Restrictions".
>
> I do need this for IP routing, not CLNS. If the feature is only
supported
> for ISO CLNS and not IP routing, why does it work on my lab of 2600s
running
> 12.3 latest, with the exact same config, also in an IP-only
environment?

Well, don't really know. It's not tested, but it might work in some
environment/releases.. never looked at it really..

> Really, my only need is to prevent my L1 routers from learning the
entire
> area's routes, but my network design requires me to directly connect
my L2
> router to an L1 (i.e. no room for a L2/L1 between them). I just need
the L1
> routers to get a default towards its directly attached L2, and the L2
> backbone to learn the L1's routes. This is essentially a TS-NSSA in
OSPF. If
> there's some other way I can get this behavior with IS-IS, I'm all
ears.

Hmm, if you stick all L1s into the same area (i.e. "standard" design),
you can't prevent them from seeing the L1 LSPs from the other L1s in the
area. However you could investigate filtering the routes from being
entered into the RIB, similar to "distribute-list in" command in OSPF,
which doesn't exist in IS-IS. But you could try

router isis
distance 255 ip
distance 115 0.0.0.0 255.255.255.255 10
!
access-list 10 permit 0.0.0.0

to have only the default-route in the RIB. Not sure if this helps, not
sure which problem you are trying to solve :)

oli
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


swmike at swm

Nov 6, 2009, 12:09 AM

Post #5 of 26 (1287 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Fri, 6 Nov 2009, Oliver Boehmer (oboehmer) wrote:

> to have only the default-route in the RIB. Not sure if this helps, not
> sure which problem you are trying to solve :)

This is probably the biggest problem, the few people doing L1-L2
separation are those into academia/theoretics (passing a test/exam), when
you go into the real world it's no longer in major use.

I've never bothered to learn about ISIS L1, never needed to, see no use
for it in real life. L2-only is the way to go.

I'd also recommend against it from a sw standpoint. Sure, the sw supports
it, but it hasn't been exposed to real life as much as L2 only because of
above reasons.

--
Mikael Abrahamsson email: swmike [at] swm
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


oboehmer at cisco

Nov 6, 2009, 1:54 AM

Post #6 of 26 (1286 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Mikael,

> > to have only the default-route in the RIB. Not sure if this helps,
not
> > sure which problem you are trying to solve :)
>
> This is probably the biggest problem, the few people doing L1-L2
> separation are those into academia/theoretics (passing a test/exam),
when
> you go into the real world it's no longer in major use.
>
> I've never bothered to learn about ISIS L1, never needed to, see no
use
> for it in real life. L2-only is the way to go.

Well, there are L1L2 networks in production, and when you think about
scaling Layer 3 into the (MetroE) access layer, you start to deal with
>10000 of routers in an ISIS domain, something which can't be handled in
a single area.

> I'd also recommend against it from a sw standpoint. Sure, the sw
supports
> it, but it hasn't been exposed to real life as much as L2 only because
of
> above reasons.

see above, L1L2 is deployed, I personally know of two carriers'
networks. So there is definitly exposure...

oli
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


jared.a.gillis at gmail

Nov 6, 2009, 11:37 AM

Post #7 of 26 (1277 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Oliver Boehmer (oboehmer) wrote:
> Jared,
>
> Well, don't really know. It's not tested, but it might work in some
> environment/releases.. never looked at it really..

Here's a quick lab diagram/config snippet for anyone who's interested:

A----B
|\ /|
| \/ |
|/ \|
C D

All routers are 2620XM running 12.3 ipservices latest.

A and B are multiarea L1/L2 routers:

Router A:
int Fast0/0
desc To C
ip address 192.168.0.1 255.255.255.252
ip router isis C

int Fast0/0
desc To D
ip address 192.168.0.5 255.255.255.252
ip router isis D

int Ser0/0
desc To B
ip address 192.168.255.1 255.255.255.252
ip router isis

router isis
net 00.000c.30ca.5c00.00
is-type level-2-only

router isis C
net 00.000c.30ca.5c00.00
is-type level-1

router isis D
net 00.000c.30ca.5c00.00
is-type level-1

B is similar, with different IP/NET addresses.

Router C:
int loopback 1
ip address 10.0.0.1 255.255.255.255

int Fast0/0
desc To A
ip address 192.168.0.2 255.255.255.252
ip router isis

int Fast0/0
desc To B
ip address 192.168.1.2 255.255.255.252
ip router isis

router isis
net 00.000a.f49d.9640.00
passive-interface loopback 1
is-type level-1

Router D is similar.

In this configuration, routers A and B learn all routes in the network, and exchange them via their L2 link.
Routers C and D are only aware of their directly connected routes, plus a default towards A/B. C does not have Ds routes, and vice-versa, however they are able to ping each other's loops, by following default to A/B which do have the route towards the loop.
I have also taken down the mesh-style connection between A/D and B/C, so the network looks like:
C---A---B---D
And the design works exactly the same.
When I replace A with a 7204VXR running 12.2 SR ipservices, the whole thing breaks. C has no default towards A, and B does not learn any routes that C advertises to A.
The design constraint I have is that in my production network, the C/D routers will be 3750s, which do not have the TCAM space to learn every route in the network I am building, and they will always be a stub (or more exactly an OSPF TS-NSSA), so that's the behavior I am looking for.
I could move to OSPF, but this network will utilize MPLS, and I want to use the MPLS TE extensions of IS-IS. I am aware that OSPF has similar extensions, but IS-IS works better for us, and the network is already built on IS-IS, and an IGP migration is something I'd like to avoid if possible.


> Hmm, if you stick all L1s into the same area (i.e. "standard" design),
> you can't prevent them from seeing the L1 LSPs from the other L1s in the
> area. However you could investigate filtering the routes from being
> entered into the RIB, similar to "distribute-list in" command in OSPF,
> which doesn't exist in IS-IS. But you could try
>
> router isis
> distance 255 ip
> distance 115 0.0.0.0 255.255.255.255 10
> !
> access-list 10 permit 0.0.0.0
>
> to have only the default-route in the RIB. Not sure if this helps, not
> sure which problem you are trying to solve :)

That is interesting, I shall have to play with it. As I noted above, I'm trying to emulate an OSPF TS-NSSA in IS-IS, because my stub area routers don't have the TCAM to handle every route in the domain. I just have trouble believing that in 2009 a widely-used routing protocol like IS-IS doesn't have some way of handling this case.

> oli

_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


justin at justinshore

Nov 6, 2009, 12:08 PM

Post #8 of 26 (1276 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Jared Gillis wrote:
> In this configuration, routers A and B learn all routes in the network, and exchange them via their L2 link.
> Routers C and D are only aware of their directly connected routes, plus a default towards A/B. C does not have Ds routes, and vice-versa, however they are able to ping each other's loops, by following default to A/B which do have the route towards the loop.
> I have also taken down the mesh-style connection between A/D and B/C, so the network looks like:
> C---A---B---D
> And the design works exactly the same.
> When I replace A with a 7204VXR running 12.2 SR ipservices, the whole thing breaks. C has no default towards A, and B does not learn any routes that C advertises to A.

This is why we were forced to deploy a flat L2-only topology on our
network. We could not get multiarea IS-IS for IP to work on our 7600s
running 12.2SR. Since it works on the hardware in your example with the
7200s and simply doesn't work because of the code that I personally call
that a bug that needs to be squashed. I would open a TAC case and
approach it from that angle. The only reason it doesn't work is because
it hasn't been coded in 12.2SR.

> The design constraint I have is that in my production network, the C/D routers will be 3750s, which do not have the TCAM space to learn every route in the network I am building, and they will always be a stub (or more exactly an OSPF TS-NSSA), so that's the behavior I am looking for.
> I could move to OSPF, but this network will utilize MPLS, and I want to use the MPLS TE extensions of IS-IS. I am aware that OSPF has similar extensions, but IS-IS works better for us, and the network is already built on IS-IS, and an IGP migration is something I'd like to avoid if possible.

I was going to through up a red flag about trying to run IS-IS on a 3750
because the last time I looked fixed-config non-ME Cat switches didn't
support IS-IS. However I checked the FN just to be sure since it's been
a long while since I looked and sure enough they added IS-IS to the
3750s with 12.2(50)SE. You did mention MPLS though so I'll go ahead and
bite at that one. Are you planning on running MPLS on your 3750?
You're wording doesn't specify one way or another.

Justin



_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


mtinka at globaltransit

Nov 7, 2009, 11:13 PM

Post #9 of 26 (1266 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Saturday 07 November 2009 04:08:00 am Justin Shore wrote:

> I was going to through up a red flag about trying to run
> IS-IS on a 3750 because the last time I looked
> fixed-config non-ME Cat switches didn't support IS-IS.
> However I checked the FN just to be sure since it's been
> a long while since I looked and sure enough they added
> IS-IS to the 3750s with 12.2(50)SE.

We have IS-IS running on 3560G's and 3750's for L1-only, IOS
12.2(52)SE. All our Ethernet switches run pure Layer 2
switching, so we're only using IS-IS to provide access to
the device's Loopback address, for management.

It works.

Cheers,

Mark.
Attachments: signature.asc (0.82 KB)


mtinka at globaltransit

Nov 7, 2009, 11:20 PM

Post #10 of 26 (1258 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Friday 06 November 2009 04:09:58 pm Mikael Abrahamsson
wrote:

> This is probably the biggest problem, the few people
> doing L1-L2 separation are those into academia/theoretics
> (passing a test/exam), when you go into the real world
> it's no longer in major use.
>
> I've never bothered to learn about ISIS L1, never needed
> to, see no use for it in real life. L2-only is the way to
> go.
>
> I'd also recommend against it from a sw standpoint. Sure,
> the sw supports it, but it hasn't been exposed to real
> life as much as L2 only because of above reasons.

Well, we switched from OSPF to IS-IS in 2008, and we're
running:

* L1-only for all routers/switches in a PoP.
* L1/L2 on all core routers.
* L2-only for all PoP-to-PoP core links.

The above has been stable, runs very well - helps us manage
a multi-Gbps transport network :-).

I will say one thing, though. Dividing the IS-IS domain into
L1 and L2 levels accordingly is meant to help you scale.
However, in this case, we trade scaling for optimality (even
with an L1 and L2 network) by performing Route Leaking on
all core routers. So if you think about it, it sort of moots
the point, and perhaps makes an L2-only network an obvious
choice.

However, we still went ahead to deploy a multi-level IS-IS
backbone, because there could be some day where we only need
L1 routes in a specific PoP (which, to be honest, I can't
see now - but as with anything else in network operations,
better to be prepared).

Cheers,

Mark.
Attachments: signature.asc (0.82 KB)


swmike at swm

Nov 8, 2009, 12:29 AM

Post #11 of 26 (1267 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Sun, 8 Nov 2009, Mark Tinka wrote:

> I will say one thing, though. Dividing the IS-IS domain into
> L1 and L2 levels accordingly is meant to help you scale.

That might make sense if you have all routes in there, but when just
carrying loopbacks it kind of stops making sense (at least to me).

--
Mikael Abrahamsson email: swmike [at] swm
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


mtinka at globaltransit

Nov 8, 2009, 3:17 AM

Post #12 of 26 (1271 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Sunday 08 November 2009 04:29:23 pm Mikael Abrahamsson
wrote:

> That might make sense if you have all routes in there,
> but when just carrying loopbacks it kind of stops making
> sense (at least to me).

Well, a route is a route. The difference between
philosophies is just the volume.

I get your point, but who's to say I won't have 10,000
routers in production?

Mark.
Attachments: signature.asc (0.82 KB)


ras at e-gerbil

Nov 8, 2009, 3:33 AM

Post #13 of 26 (1261 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Sun, Nov 08, 2009 at 07:17:24PM +0800, Mark Tinka wrote:
> On Sunday 08 November 2009 04:29:23 pm Mikael Abrahamsson
> wrote:
>
> > That might make sense if you have all routes in there,
> > but when just carrying loopbacks it kind of stops making
> > sense (at least to me).
>
> Well, a route is a route. The difference between
> philosophies is just the volume.
>
> I get your point, but who's to say I won't have 10,000
> routers in production?

IMHO the rule of thumb for multiple areas in either ISIS or OSPF is "if
you have to ask whether you should use them or not, the answer is you
shouldn't". Their sensible use is so vastly exagerated in books and lab
tests that it isn't even funny.

--
Richard A Steenbergen <ras [at] e-gerbil> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


swmike at swm

Nov 8, 2009, 4:10 AM

Post #14 of 26 (1261 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Sun, 8 Nov 2009, Mark Tinka wrote:

> Well, a route is a route. The difference between
> philosophies is just the volume.
>
> I get your point, but who's to say I won't have 10,000
> routers in production?

In order to detect loopbacks going away and using this to
invalidate/remove next-hops quickly, you can't aggregate anyway.

Sorry, I have yet to hear someone describe an ISP network (designed as per
ISP essentials, carry loopbacks in IGP and everything else in BGP), where
IGP aggregation makes sense. If you have 10k routers in your IGP, well,
you most likely did something wrong earlier in the process.

Also, with modern processorns and techniques such as partial tree
recalculation in modern router OSes, I'm sure even 10k routers would be
manageable in a single area.

--
Mikael Abrahamsson email: swmike [at] swm
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


mtinka at globaltransit

Nov 8, 2009, 10:32 PM

Post #15 of 26 (1244 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Sunday 08 November 2009 07:33:55 pm Richard A Steenbergen
wrote:

> IMHO the rule of thumb for multiple areas in either ISIS
> or OSPF is "if you have to ask whether you should use
> them or not, the answer is you shouldn't". Their sensible
> use is so vastly exagerated in books and lab tests that
> it isn't even funny.

Speaking on my/our own behalf, there wouldn't be a doubt in
our minds whether we needed the hierarchy or not.

In our case, coming from OSPF where Areas were in vast use
(different for each PoP, and we had quite a few), it made
sense, at the time, to maintain a similar hierarchy in IS-
IS, especially since what we wanted the most out of the
migration was its "stretchy" property.

However, like I mentioned in an earlier post, it quickly
dawned on us that since Route Leaking essentially adds all
L1 routes from other PoP's into the L1 database in other
PoP's, and you turn off the ATT bit to gain optimality, the
point of running both L1 and L2 for scaling reasons quickly
becomes moot.

However, having already gone down that path, in actual
practice - operationally - it makes very little difference
(to us) and doesn't add any undue complexity or burden. Only
our core routers are L1/L2 capable, and those are beasts
that forward only on MPLS labels. Everything else, i.e., all
devices within each PoP (edge, peering, upstream, route
reflectors, RTBH routers, aggregation switches, e.t.c.),
speaks L1-only.

Cheers,

Mark.
Attachments: signature.asc (0.82 KB)


ras at e-gerbil

Nov 8, 2009, 11:23 PM

Post #16 of 26 (1243 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Mon, Nov 09, 2009 at 02:32:11PM +0800, Mark Tinka wrote:
> On Sunday 08 November 2009 07:33:55 pm Richard A Steenbergen
> wrote:
>
> > IMHO the rule of thumb for multiple areas in either ISIS
> > or OSPF is "if you have to ask whether you should use
> > them or not, the answer is you shouldn't". Their sensible
> > use is so vastly exagerated in books and lab tests that
> > it isn't even funny.
>
> Speaking on my/our own behalf, there wouldn't be a doubt in
> our minds whether we needed the hierarchy or not.
>
> In our case, coming from OSPF where Areas were in vast use
> (different for each PoP, and we had quite a few), it made
> sense, at the time, to maintain a similar hierarchy in IS-
> IS, especially since what we wanted the most out of the
> migration was its "stretchy" property.
>
> However, like I mentioned in an earlier post, it quickly
> dawned on us that since Route Leaking essentially adds all
> L1 routes from other PoP's into the L1 database in other
> PoP's, and you turn off the ATT bit to gain optimality, the
> point of running both L1 and L2 for scaling reasons quickly
> becomes moot.

I'm not questioning your decision, I'm just stating it for the archives
and for everyone else who has to make this same decision at some point
in the future: If you have to ask, just don't do it. I see way too many
people trying to deploy areas with 10 router networks because they read
somewhere that it was what they were supposed to do to scale, or because
people saw it on an exam somewhere.

--
Richard A Steenbergen <ras [at] e-gerbil> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


mtinka at globaltransit

Nov 9, 2009, 12:22 AM

Post #17 of 26 (1243 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Sunday 08 November 2009 08:10:05 pm Mikael Abrahamsson
wrote:

> In order to detect loopbacks going away and using this to
> invalidate/remove next-hops quickly, you can't aggregate
> anyway.

My point exactly - the use of Route Leaking without the ATT
bit nullifies the need for a multi-level IS-IS network for
the sole purpose of scaling.

> Sorry, I have yet to hear someone describe an ISP network
> (designed as per ISP essentials, carry loopbacks in IGP
> and everything else in BGP), where IGP aggregation makes
> sense. If you have 10k routers in your IGP, well, you
> most likely did something wrong earlier in the process.

Completely agree with you, and I reiterate my statement in
the paragraph above.

While this may apply specifically to MPLS-enabled
environments, you might like to know (in case you don't
already) that 'draft-swallow-mpls-aggregate-fec-01.txt'
proposes an extension to LDP that would allow it to form an
end-to-end LSP without the need to hold each and every
routing entry for all routers in all routers, i.e., it
permits the end-to-end LSP setup while also allowing IGP
route summarization.

Check out:

http://tools.ietf.org/id/draft-swallow-mpls-aggregate-
fec-01.txt

But as mentioned, it only applies to MPLS environments.

It sounds interesting but I'm not sure whether we'd be keen
on a feature like this. Given that we carry only
infrastructure and Loopback addresses in IS-IS (and the fact
that our routers are fairly CPU-able), we're not concerned
about sacrificing scaling for optimality as it pertains to
IGP route summarization, or lack thereof.

> Also, with modern processorns and techniques such as
> partial tree recalculation in modern router OSes, I'm
> sure even 10k routers would be manageable in a single
> area.

Again, completely agree - and while I wouldn't want to start
a "war of the protocols", I think IS-IS is better at this
than OSPFv2, not only because of features such as iSPF, LSP
Lifetime, PRC and SPF Delay, but also because unlike OSPFv2,
IS-IS cleanly separates IP Reachability information from
topology information, as distinct TLV's are used to encode
both bits of information.

Because OSPFv2 carries IP Reachability information in Type 1
and Type 2 LSA's, it means changes in IP Reachability
information only will initiate a potentially unnecessary
update of the topology information as well, e.g., when all
that has changed is the metric for a route, and not a
failure of a link. In this case, PRC in OSPFv2 is relegated
to Type 3, 4, 5 and 7 LSA's, and this starts to get into
OSPF hierarchy (which is the issue under discussion at this
point in this thread).

OSPFv3 has been fixed re: this limitation, as IP
Reachability information and topology information has been
encoded into separate data structures, much like IS-IS.

But coming back to why I think the L1 and L2 separation
might come in handy, is if we decide to isolate a part of
our network for one reason or another. Why, one might ask?
For better or worse, we have a number of scenarios where
deploying networks that should have nothing to do with the
rest of our backbone are being considered (these are mostly
business reasons, not technical - just to be clear, hehe).

In such a case, while the separation of L1 and L2 databases
is not the driving factor for this, it becomes an
unintentional enabling by-product of this structure. Again,
this probably isn't reason enough to do things this way (as
mentioned to Richard in my previous post, our goal for
migration was because IS-IS is "stretchy" and not because
OSPF is eating up too much router CPU), but in our case, the
operational difference between running the network in either
mode is trivial.

Cheers,

Mark.
Attachments: signature.asc (0.82 KB)


petelists at templin

Nov 9, 2009, 7:45 AM

Post #18 of 26 (1234 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Richard A Steenbergen wrote:

> I'm not questioning your decision, I'm just stating it for the archives
> and for everyone else who has to make this same decision at some point
> in the future: If you have to ask, just don't do it. I see way too many
> people trying to deploy areas with 10 router networks because they read
> somewhere that it was what they were supposed to do to scale, or because
> people saw it on an exam somewhere.

+1. I've recently finished a complete overhaul of a 14-router 5-POP
network that had 6 areas (one for each POP), and had area 0 split into
two independent areas 0. Access routers in any POP had no idea that
access routers existed in other POPs, etc.

pt

_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


jared.a.gillis at gmail

Nov 9, 2009, 9:51 AM

Post #19 of 26 (1231 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Mikael Abrahamsson wrote:
> In order to detect loopbacks going away and using this to
> invalidate/remove next-hops quickly, you can't aggregate anyway.
>
> Sorry, I have yet to hear someone describe an ISP network (designed as
> per ISP essentials, carry loopbacks in IGP and everything else in BGP),
> where IGP aggregation makes sense. If you have 10k routers in your IGP,
> well, you most likely did something wrong earlier in the process.
>
> Also, with modern processorns and techniques such as partial tree
> recalculation in modern router OSes, I'm sure even 10k routers would be
> manageable in a single area.

While I agree with these statements, our issue is not tree recalculation/convergence. Our issue and driving need for IS-IS multiarea is the fact that we have 3750ME's which can only hold ~2k routes in the TCAM in our IS-IS domain, and we'll very rapidly exhaust the TCAM unless we can do route summarization (i.e. upstream L2's send default/ATT only).

-Jared
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


ras at e-gerbil

Nov 9, 2009, 11:36 PM

Post #20 of 26 (1220 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Mon, Nov 09, 2009 at 09:51:40AM -0800, Jared Gillis wrote:
> While I agree with these statements, our issue is not tree
> recalculation/convergence. Our issue and driving need for IS-IS
> multiarea is the fact that we have 3750ME's which can only hold ~2k
> routes in the TCAM in our IS-IS domain, and we'll very rapidly exhaust
> the TCAM unless we can do route summarization (i.e. upstream L2's send
> default/ATT only).

So why can't you put the the routes into iBGP, use your IGP only for the
loopbacks, and learn a default route from your upstream devices?

--
Richard A Steenbergen <ras [at] e-gerbil> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


mtinka at globaltransit

Nov 10, 2009, 6:31 AM

Post #21 of 26 (1220 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Monday 09 November 2009 03:23:46 pm Richard A Steenbergen
wrote:

> I'm not questioning your decision, I'm just stating it
> for the archives and for everyone else who has to make
> this same decision at some point in the future: If you
> have to ask, just don't do it. I see way too many people
> trying to deploy areas with 10 router networks because
> they read somewhere that it was what they were supposed
> to do to scale, or because people saw it on an exam
> somewhere.

This makes sense, and I appreciate where you're coming from.

<instructor hat>

However, wearing my "instructor" hat when we give workshops
in various places around the world, we tend to teach folk
how to build large scale networks, based on our own
experiences doing the same.

In some cases, we say build scaling into your operations
even when it may seem "unnecessary", because the general
assumption is that your network is going to grow. Sure, it
could take 5, 10, 15 years, depending on whom you ask, but
if there's a chance it does grow, you don't want to re-work
your entire design to add scaling into the mix; especially
since adding scalability in from the start doesn't add any
incremental cost in terms of $$ or complexity.

And I'm not just talking about OSPF or IS-IS specifically
(since router CPU's are much faster these days, assuming
operators can afford such platforms), but networking in
general, especially for some features or protocols where
thinking about scalability from day one isn't such a bad
idea, even if it might make little sense today.

I'm sure many of us, in our careers as network operators,
have wished that we had done something differently in the
past not to suffer the pain of today - even if it seemed
infeasible, at the time, that we'd get to where we are
today.

</instructor hat>

Cheers,

Mark.
Attachments: signature.asc (0.82 KB)


mtinka at globaltransit

Nov 10, 2009, 6:40 AM

Post #22 of 26 (1219 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Monday 09 November 2009 11:45:28 pm Pete Templin wrote:

> +1. I've recently finished a complete overhaul of a
> 14-router 5-POP network that had 6 areas (one for each
> POP), and had area 0 split into two independent areas 0.
> Access routers in any POP had no idea that access routers
> existed in other POPs, etc.

I may be missing it in your message above, but if you're
able to share, did you collapse the entire backbone into a
single Area, or did you maintain the splits?

Cheers,

Mark.
Attachments: signature.asc (0.82 KB)


jared.a.gillis at gmail

Nov 10, 2009, 11:21 AM

Post #23 of 26 (1227 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

Richard A Steenbergen wrote:
> On Mon, Nov 09, 2009 at 09:51:40AM -0800, Jared Gillis wrote:
>> While I agree with these statements, our issue is not tree
>> recalculation/convergence. Our issue and driving need for IS-IS
>> multiarea is the fact that we have 3750ME's which can only hold ~2k
>> routes in the TCAM in our IS-IS domain, and we'll very rapidly exhaust
>> the TCAM unless we can do route summarization (i.e. upstream L2's send
>> default/ATT only).
>
> So why can't you put the the routes into iBGP, use your IGP only for the
> loopbacks, and learn a default route from your upstream devices?

That's exactly what we are doing, but still expect to exhaust the TCAM before too long, especially if we add support for IPv6 (which is a long-term goal).

-Jared
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


swmike at swm

Nov 10, 2009, 11:26 AM

Post #24 of 26 (1227 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Tue, 10 Nov 2009, Jared Gillis wrote:

> That's exactly what we are doing, but still expect to exhaust the TCAM
> before too long, especially if we add support for IPv6 (which is a
> long-term goal).

Do you realistically see IPv6 support working in the 3750MEs ? Looking at
the scalability numbers I've been kind of sceptic...

--
Mikael Abrahamsson email: swmike [at] swm
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


ras at e-gerbil

Nov 10, 2009, 1:13 PM

Post #25 of 26 (1218 views)
Permalink
Re: IS-IS Multiarea on 12.2 SR [In reply to]

On Tue, Nov 10, 2009 at 10:31:40PM +0800, Mark Tinka wrote:
> <instructor hat>
>
> However, wearing my "instructor" hat when we give workshops
> in various places around the world, we tend to teach folk
> how to build large scale networks, based on our own
> experiences doing the same.
>
> In some cases, we say build scaling into your operations
> even when it may seem "unnecessary", because the general
> assumption is that your network is going to grow. Sure, it
> could take 5, 10, 15 years, depending on whom you ask, but
> if there's a chance it does grow, you don't want to re-work
> your entire design to add scaling into the mix; especially
> since adding scalability in from the start doesn't add any
> incremental cost in terms of $$ or complexity.

<arguing with the teacher hat>

I have nothing against advocating that you design your network to scale
from the very beginning, and (without trying to channel Vijay Gill here)
IMHO if oyu don't design your netwrok to scale then in all likelihood it
WON'T scale. But there is also a point where you start making more
trouble for yourself than you save, and may actually inhibit your growth
by adding unnecessary additional complexity. Smart network engineering
is about knowing the network you are trying to build, and figuring out
where that magic line is so you don't cross it.

I think your argument applies perfectly to situations like "but I only
have a few hundred /30s between my 10 3560s, why can't I just
redistribute connected/static into my IGP and call it a day". Yes you
COULD, but if you grow your network by even a very small amount you'll
start to bump the CAM limits on your stackable switches, and thus you
should probably engineer your network to scale past that limit from the
very beginning. Taking the time to design a system with only loopbacks
into IGP + iBGP loopback peering and redistribution of other routes into
BGP may be more time consuming than just slapping a redist into your
IGP, but it will save you more time in the end.

On the other hand, what level of scale do you need before IGP areas
actually start to pay off, and make it worth the added complexity and
other issues you will impose (inter-area TE problems, etc)? You'd need
to take your 10 routers to what? 100? 1000? 10000? At what point does
your newly expanded network look absolutely nothing like your original
network, to the point that nothing you decided about your 10 router
network has any bearing on your new network? If you're really designing
some massive dial network with the potential for 10000 pops, or the next
IBM Global Services network, you may have a legitimate reason for
needing the IGP areas. But if you're building a more concentrated
network there just may never be a situation where there is any benefit
no matter how big you grow (i.e. I don't think Level 3 has any need for
them :P). There is no right answer for everyone, your network may look
very different from mine, etc. We can both make arguments for simplistic
theories like "you should always design to scale" vs "keep it simple
stupid" until we're blue in the face, but at the end of the day this is
an engineering question to which there is no one correct answer.

</arguing with the teacher hat>

Did I mention I got a lot of D's in class from arguing with the teacher?
:)

--
Richard A Steenbergen <ras [at] e-gerbil> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
_______________________________________________
cisco-nsp mailing list cisco-nsp [at] puck
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

First page Previous page 1 2 Next page Last page  View All Cisco nsp RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.