Mailing List Archive: RE: [c-nsp] MRTG a L2TP VPDN Looback Interface

RE: [c-nsp] MRTG a L2TP VPDN Looback Interface

Dec 21, 2005, 7:28 AM

Post #1 of 3 (2733 views)

Bart Jan,

Netflow would probably do what we need. The only drawback is majority of
Netflow Collection/Analysis software out there is either at a cost or
runs on Unix.

Correct me if I'm wrong.

I was hoping that we could have done this with our current setup i.e
MRTG or RRD, if necessary.

Thanks,
Mark.

-----Original Message-----
From: BartJan Menkveld [mailto:bartjan@routit.nl]
Sent: 21 December 2005 13:49
To: Mark Tohill
Subject: RE: [c-nsp] MRTG a L2TP VPDN Looback Interface

Hello Mark,

I suggest using netflow accounting on a per protocol basis to determine
the amount of l2tp traffic.

With kind regards,

Bart Jan Menkveld

-----Original Message-----
From: cisco-nsp-bounces@puck.nether.net
[mailto:cisco-nsp-bounces@puck.nether.net] On Behalf Of Mark Tohill
Sent: woensdag 21 december 2005 14:30
To: cisco-bba@puck.nether.net
Cc: cisco-nsp@puck.nether.net
Subject: [c-nsp] MRTG a L2TP VPDN Looback Interface

Hi,

We have 7204VXR's with L2TP VPDN traffic servicing DSL users from telco
coming in on a GigEthernet port.

The same port also ships out internet-bound traffic for same users.

Has anyone thoughts on how to determine/poll the VPDN traffic from telco
separately from raw outbound IP traffic?

VPDN tunnels terminate on loopbacks which we have tried to monitor, with
no success. We hoped to subtract this from total in/out traffic on gigE
port and graph results to new chart.

Has anyone a means of getting around this?

Thanks.

Mark.

_______________________________________________
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba

Re: RE: [c-nsp] MRTG a L2TP VPDN Looback Interface [ In reply to ]

achatz at forthnet

Dec 21, 2005, 7:37 AM

Post #2 of 3 (2588 views)

Permalink

Mark Tohill wrote on 21/12/2005 17:28:
> Bart Jan,
>
> Netflow would probably do what we need. The only drawback is majority of
> Netflow Collection/Analysis software out there is either at a cost or
> runs on Unix.
>
> Correct me if I'm wrong.
>
You could try ntop.
http://www.ntop.org/ntop.html

> I was hoping that we could have done this with our current setup i.e
> MRTG or RRD, if necessary.
>
> Thanks,
> Mark.
>
> -----Original Message-----
> From: BartJan Menkveld [mailto:bartjan@routit.nl]
> Sent: 21 December 2005 13:49
> To: Mark Tohill
> Subject: RE: [c-nsp] MRTG a L2TP VPDN Looback Interface
>
> Hello Mark,
>
> I suggest using netflow accounting on a per protocol basis to determine
> the amount of l2tp traffic.
>
> With kind regards,
>
> Bart Jan Menkveld
>
> -----Original Message-----
> From: cisco-nsp-bounces@puck.nether.net
> [mailto:cisco-nsp-bounces@puck.nether.net] On Behalf Of Mark Tohill
> Sent: woensdag 21 december 2005 14:30
> To: cisco-bba@puck.nether.net
> Cc: cisco-nsp@puck.nether.net
> Subject: [c-nsp] MRTG a L2TP VPDN Looback Interface
>
> Hi,
>
>
>
> We have 7204VXR's with L2TP VPDN traffic servicing DSL users from telco
> coming in on a GigEthernet port.
>
> The same port also ships out internet-bound traffic for same users.
>
>
>
> Has anyone thoughts on how to determine/poll the VPDN traffic from telco
> separately from raw outbound IP traffic?
>
> VPDN tunnels terminate on loopbacks which we have tried to monitor, with
> no success. We hoped to subtract this from total in/out traffic on gigE
> port and graph results to new chart.
>
>
>
> Has anyone a means of getting around this?
>
>
>
> Thanks.
>
> Mark.
>
>
>
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-bba mailing list
> cisco-bba@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba
>
_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba

RE: RE: [c-nsp] MRTG a L2TP VPDN Looback Interface [ In reply to ]

oboehmer at cisco

Dec 21, 2005, 7:48 AM

Post #3 of 3 (2569 views)

Permalink

I don't think this can easily be done. But why not use half the
interface load as a reasonable approximation in your environment?

Getting up-to-date/exact statistics without Netflow would likely require
to collect per-user/session stats (IFMIB or VPDN-MIB) and substract it
from the interface counters.

oli

Mark Tohill <> wrote on Wednesday, December 21, 2005 4:29 PM:

> Bart Jan,
>
> Netflow would probably do what we need. The only drawback is majority
> of Netflow Collection/Analysis software out there is either at a cost
> or runs on Unix.
>
> Correct me if I'm wrong.
>
> I was hoping that we could have done this with our current setup i.e
> MRTG or RRD, if necessary.
>
> Thanks,
> Mark.
>
> -----Original Message-----
> From: BartJan Menkveld [mailto:bartjan@routit.nl]
> Sent: 21 December 2005 13:49
> To: Mark Tohill
> Subject: RE: [c-nsp] MRTG a L2TP VPDN Looback Interface
>
> Hello Mark,
>
> I suggest using netflow accounting on a per protocol basis to
> determine the amount of l2tp traffic.
>
> With kind regards,
>
> Bart Jan Menkveld
>
> -----Original Message-----
> From: cisco-nsp-bounces@puck.nether.net
> [mailto:cisco-nsp-bounces@puck.nether.net] On Behalf Of Mark Tohill
> Sent: woensdag 21 december 2005 14:30
> To: cisco-bba@puck.nether.net
> Cc: cisco-nsp@puck.nether.net
> Subject: [c-nsp] MRTG a L2TP VPDN Looback Interface
>
> Hi,
>
>
>
> We have 7204VXR's with L2TP VPDN traffic servicing DSL users from
> telco coming in on a GigEthernet port.
>
> The same port also ships out internet-bound traffic for same users.
>
>
>
> Has anyone thoughts on how to determine/poll the VPDN traffic from
> telco separately from raw outbound IP traffic?
>
> VPDN tunnels terminate on loopbacks which we have tried to monitor,
> with no success. We hoped to subtract this from total in/out traffic
> on gigE port and graph results to new chart.
>
>
>
> Has anyone a means of getting around this?
>
>
>
> Thanks.
>
> Mark.
>
>
>
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-bba mailing list
> cisco-bba@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-bba

_______________________________________________
cisco-bba mailing list
cisco-bba@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-bba