Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Software Release 6.0.2 and Pipe 50



Re,

On Mon, Apr 27, 1998 at 10:02:47AM +0200, Ronald McCarty wrote:
> > Are you by chance doing MPP on this link ? We have found ASA to fail on
> > a MPP link - it suddenly starts to drop stuff that clearly should pass
> > (and passes again as soon as the link is down to one channel). We have
> > a TR open for this. Now this was on a 1800 and it was a _leased_ line
> > at Nailed/Mpp. But it may well be a general problem of ASA in conjunction
> > with any multilink profile in general or MPP in particular.
> 
> This could well be the problem.  The combination here is
> Pipe 50 to Pipe 50 leased line.  Settings on both sides
> are:  Switch Type=NET 3, Chan Usage=Super Dig 128,
> Encaps=MPP.  We haven't fiddled with the settings yet since
> it's not (yet) our baby...not that we're looking forward to
> inheriting the service agreement :-) for this particular
> setup, but we still want to get a feel as to why its
> happening.

Now that is not the same situation like ours. If you do MPP on a SuperDig128
you end up with one channel (that is low level bundled from two Bs), while
we saw the problem with a high level bundle (when MPP actually has two
channels). We were under the impression that the problem is specific to
an MPP link that runs on more than one channel. But of course, there may
be other things happening inside. You could just try to run this link with
plain PPP (as said, if you got a working SuperDig128 [lucky one - is this
a DDV line or how did you get a D64S2 that is octet synchronous?] you have
one "big pipe" to do PPP framing on, so you don't need any MP or MPP stuff
to gain 128kbps).

> Have you, by any chance, received any feedback from Ascend
> as to when the problem you reported would be fixed?

It was identified as a known problem (TR#250196) and we will be informed
as soon as a version which fixes it is available. No deadlines, though.

Maybe you should open a ticket with EMEA as well, just point into the
direction of TR#250196. Maybe this helps to increase the TRs priority.
You should argument that it is a security flaw (who knows if the bug
always blocks allowed traffic, it may as well pass unallowed traffic)
and the only real working solution (switching off the ASA Firewall) is
a security flaw anyway and if you purchased ASA you want to use it.

-- 

Kanther-Line: PGP SSH IDEA MD5 GOST RIPE-MD160 3DES RSA FEAL32 RC4

+-o-+--------------------------------------------------------+-o-+
| o |               \\\- Brain Inside -///                   | o |
| o |                   ^^^^^^^^^^^^^^                       | o |
| o | Andre' Beck  (ABPSoft)   AB10-RIPE   XLink PoP Dresden | o |
+-o-+--------------------------------------------------------+-o-+
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


References: