[63910] in North American Network Operators' Group
Re: Extreme BlackDiamond
daemon@ATHENA.MIT.EDU (sthaug@nethelp.no)
Mon Oct 13 06:17:16 2003
To: tom@unitedlayer.com
Cc: swmike@swm.pp.se, nanog@merit.edu
From: sthaug@nethelp.no
In-Reply-To: Your message of "Sun, 12 Oct 2003 23:06:22 -0700 (PDT)"
Date: Mon, 13 Oct 2003 12:15:34 +0200
Errors-To: owner-nanog-outgoing@merit.edu
> > I can understand how a virus like Welchia can affect a flow-based
> > architecture like Extremes. I was under the impression that CEF enabled
> > Cisco gear wouldnt have this problem, but Cisco has instructions on their
> > webpage on how deal with it and cites CPU usage as the reason. With CEF I
> > thought the CPU wasn't involved? CEF is perhaps differently implemented on
> > different plattforms?
>
> I think CEF in HW is the key, ASIC based and not Flow based.
> I'm not all-knowlegable on which platforms do this, but the 7500, 12000,
> 2948G-L3, 4908 have it.
Yup. We have 6509s with Sup2/MSFC2/PFC2, and have had no problems with
ICMP in connection with recent virus/worm attacks.
Oh yeah, we also find the 6509s work very well as routers. Full routing
tables, etc. YMMV.
Steinar Haug, Nethelp consulting, sthaug@nethelp.no
