I've only done this with SNASw in the lab but I don't see any problems doing the same with DLSw. There wasn't anything special I had to do for this. IPSec can be somewhat CPU intensive though I haven't measured it myself to quantify this. You will also be putting all traffic through that router, but maybe you were doing that anyway. So I'd hesitate to recommend this for a large branch but in most cases it should be fine. Sorry I can't give you any specific numbers. Maybe someone who's done this can share their experience.
Bob, thank you for the information. This is one of those things that it should work... but??? I'm just want to tap somebody's experiance who has deployed this a s a solution. Again thanks for the information.
Yes, multiple customers have deployed this, and it has been tested and measured in specific customer proof of concept labs. The only issue that I'm aware of is that the MTU size requirements are affected by encryption, so be sure to take that into account.
In terms of performance, everyone's traffic is somewhat different, so it's impossible to say for sure. From what I remember of the proof of concept tests, 2600 routers did DLSw+ and software encryption just fine at DS0 rates.
Dan, I noticed that you are with Cisco. I have not contacted any of our SEs about this yet. Can you point or provide me the details on the lab configuration tested and results. Or provide information so I can point the SE in the right direction.
Why do you need native HA: The native HA feature allows two Cisco DCNM
appliances to run as active and standby applications, with their
embedded databases synchronized in real time. Therefore, when the active
DCNM is not functioning, the standby DCNM will...
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...