{"id":1333,"date":"2010-03-08T01:34:50","date_gmt":"2010-03-08T07:34:50","guid":{"rendered":"http:\/\/gregsowell.com\/?p=1333"},"modified":"2010-03-02T08:53:47","modified_gmt":"2010-03-02T14:53:47","slug":"gathering-information-with-cisco-ip-sla-and-cacti","status":"publish","type":"post","link":"https:\/\/gregsowell.com\/?p=1333","title":{"rendered":"Gathering Information With Cisco IP SLA and Cacti"},"content":{"rendered":"

\"blogbanner2\"<\/a>
\nModern enterprise networks often span provider networks, be it IPSec tunnels through the internet or a leased MPLS connection. If one is experiencing problems, how can you definitively diagnose these issues? There are few tools cheaper and more effective than using Cisco’s IP SLA <\/a>( IP Service Level Agreement), formerly SAA and RTTMON<\/a>.<\/p>\n

In a nutshell IP SLA is a service that runs between two Cisco routers. This service generates statistics on:<\/p>\n

  • Jitter\n
  • —Round Trip Time – Min\/Max\/Average\n
  • —Packet Loss – Source to Destination\/Destination to Source\n
  • —Packet Late\n
  • —Packet Out Of Sequence\n
  • VOIP Scoring\n
  • DNS Querying\n
  • DHCP\n
  • HTTP\n
  • TCP Connection\n

    For my purposes, I use Jitter most frequently. A common scenario would be to test line quality between IPSec connected locations.<\/p>\n

    So what will we need?<\/strong><\/p>\n

  • Install of Cacti\n
  • IP SLA templates<\/a>\n
  • A couple of Cisco routers\n

    For the Cacti install, I always use CactiEZ.<\/p>\n

    For my Cisco routers I usually use whatever I can find, generally the cheaper the better. I’ve got some 1700s from Ebay for $8 each. I just recently grabbed some 836s from Cables and kits for $4.80<\/a> each!<\/p>\n

    Here’s our diagram.
    \n

    \"\"<\/a>
    See the way the light glistens off the shimmering surface of the router...<\/figcaption><\/figure><\/p>\n

    So this setup shows two sites that connect with an IPSec connection. Our users have been seeing what they think is packet loss causing tunnel problems. The ISPs at both locations claim they are having no issues. You are currently graphing the internet bandwidth on both WAN interfaces via your cacti box and you see that you aren’t maxing out your bandwidth. Sooo, it looks like you are having packet loss within one of your ISPs, but how can you prove it?<\/p>\n

    What we do is put an IPSLA probe in both locations and one at a neutral location. We configure SLA server to run on each router, which accepts SLA probe connections. We then configure all sites to probe each other, and add it to cacti.<\/p>\n

    Soooo, if we get packet loss from a single site to all other locations, then we know which ISP to call. On top of that, we will have graphical proof that we can send to the ISP to help prove our point \ud83d\ude42<\/p>\n

    IPSLA1<\/h2>\n

    Setup the jitter probe and have it hit SLA2 every 5 minutes. The frequency is set in seconds.<\/p>\n

    ip sla monitor 1\r\ntype jitter dest-ipaddr 192.168.2.2 dest-port 10000\r\nfrequency 300\r\nip sla monitor schedule 1 life forever start-time now<\/code><\/pre>\n
    IPSLA2<\/h2>\n
    Setup IPSLA2 to respond to the queries.<\/p>\n
    ip sla responder<\/code><\/pre>\n
    Add your graph in cacti and awaaaaaay you go.
    \n
    \"\"<\/a>
    wwwweeeeeeeeeeeee<\/figcaption><\/figure><\/p>\n","protected":false},"excerpt":{"rendered":"
    Modern enterprise networks often span provider networks, be it IPSec tunnels through the internet or a leased MPLS connection. If one is experiencing problems,\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,16,8],"tags":[],"class_list":["post-1333","post","type-post","status-publish","format-standard","hentry","category-cacti","category-cisco","category-networking"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/1333","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1333"}],"version-history":[{"count":19,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/1333\/revisions"}],"predecessor-version":[{"id":1591,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/1333\/revisions\/1591"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1333"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1333"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1333"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}