From owner-freebsd-isp Wed Jul 14 11:51:12 1999 Delivered-To: freebsd-isp@freebsd.org Received: from mail.go2france.com (go2france.com [209.51.193.70]) by hub.freebsd.org (Postfix) with SMTP id 193C115453 for ; Wed, 14 Jul 1999 11:51:04 -0700 (PDT) (envelope-from lconrad@Go2France.com) Received: from superviseur [62.161.63.210] by mail.go2france.com with ESMTP (SMTPD32-4.03) id A79081200A0; Wed, 14 Jul 1999 13:23:28 EDT Message-Id: <4.2.0.56.19990714203040.02d640b0@go2france.com> X-Sender: lconrad@go2france.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.0.56 (Beta) Date: Wed, 14 Jul 1999 20:49:10 +0200 To: freebsd-isp@freebsd.org From: Len Conrad Subject: Re: Any experience with T3/HSSI cards and FreeBSD? In-Reply-To: <199907141822.OAA11834@yaga.razorfish.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=====================_35963262==_.ALT" Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --=====================_35963262==_.ALT Content-Type: text/plain; charset="us-ascii"; format=flowed Hans, I'm looking at using fbsd with a www.etinc.com HSSI card to receive an E3 line coming out of the HSSI interface of a Kentrox E3 ISDU. Still some weeks away though. There aren't tons of choices at T3/E3 levels. www.digitallink.com has an E3 DSU, and www.sdl-comm.com also has an HSSI card, but there isn't a fbsd driver for the new SDL Comm WANic that isn't available yet. The WANic is substantially cheaper than the ET card. Apart from that, I didn't find much else in hardware. But several comments from various people and contexts indicate the FreeBSD and a PCI HSSI should have no trouble handling T3/E3 speeds. Dennis @ etinc.com and Doug Haas at imagestream-is.com confirm without reservation and from experience that their cards can support ET/T3 speeds just fine. I wouldn't start by asking the same box to run ipfilter with 40 rules, NAT, and squid and IPsec, though, and keep up with T3/E3 wire speeds. BGP4 and basic packet forwarding with some light filtering seems doable and unavoidable if you have to have more than one backbone feed. btw, I'm also fishing around availability of the Ariel PRI RS2000 card under fbsd. Len. =================== >We have just added a layer of complexity to the router that we are designing >and I wanted to hear about some real world experience. We want to have >two T1s >to the internet using BGP routing, then a leased T3 directly to an branch >office. We would also like to make this machine our firewall and IPSec/VPN >machine. Any words of advice or comments would be greatly appreciated. > >-Hans > > | || ||| || r a z o r f i s h , inc. > > hans-christoph steiner > [ network systems manager ] --=====================_35963262==_.ALT Content-Type: text/html; charset="us-ascii" Hans,

I'm looking at using fbsd with a www.etinc.com HSSI card to receive an E3 line coming out of the HSSI interface of a Kentrox E3 ISDU.  Still some weeks away though.

There aren't tons of choices at T3/E3 levels.  www.digitallink.com has an E3 DSU, and www.sdl-comm.com also has an HSSI card, but there isn't a fbsd driver for the new SDL Comm WANic that isn't available yet.  The WANic is substantially cheaper than the ET card.

Apart from that, I didn't find much else in hardware.

But several comments from various people and contexts indicate the FreeBSD and a PCI HSSI should have no trouble handling T3/E3 speeds.  Dennis @ etinc.com and Doug Haas at imagestream-is.com confirm without reservation and from experience that their cards can support ET/T3 speeds just fine.

I wouldn't start by asking the same box to run ipfilter with 40 rules, NAT, and squid and IPsec, though, and keep up with T3/E3 wire speeds.  BGP4 and basic packet forwarding with some light filtering seems doable and unavoidable if you have to have more than one backbone feed.

btw, I'm also fishing around availability of the Ariel PRI RS2000 card under fbsd.

Len.

===================

We have just added a layer of complexity to the router that we are designing 
and I wanted to hear about some real world experience.  We want to have two T1s 
to the internet using BGP routing, then a leased T3 directly to an branch 
office.  We would also like to make this machine our firewall and IPSec/VPN 
machine.  Any words of advice or comments would be greatly appreciated.

-Hans

 |    ||   |||  ||         r a z o r f i s h , inc.

 hans-christoph steiner
        [ network systems manager  ]
--=====================_35963262==_.ALT-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message