Re: [c-nsp] Is there a command to check which BGP ingress policy drops the received prefix in Cisco ASR routers?

2015-08-10 Thread Mark Tinka
On 11/Aug/15 00:35, Adam Vitkovsky wrote: There is the show ip bgp route-map in vanilla IOS and show bgp policy route-policy in XR. This is cool. Didn't know about this command. The IPv6 version, of course, is sh bgp ipv6 unicast route-map. And with regards to Martin's question there's

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread Antoine Monnier
so, for my own understanding, are we saying unicast DHCP refresh is still handled ok by the DHCP snooping feature? Is it more a problem of DHCP server restart and/or switch reload? Thanks! On Mon, Aug 10, 2015 at 4:09 PM, Mike mike-cisconspl...@tiedyenetworks.com wrote: On 08/10/2015 06:42 AM,

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread Mike
On 08/10/2015 08:21 AM, Antoine Monnier wrote: so, for my own understanding, are we saying unicast DHCP refresh is still handled ok by the DHCP snooping feature? Is it more a problem of DHCP server restart and/or switch reload? Thanks! The problem is that, if an entry is not in the switch

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread Murphy, William
We are experiencing something that sounds very similar... We have 3850 operating as layer-3 switch with SVI for clients on the 3850... Initial DHCP lease populates binding table but subsequent renewals do not refresh the timer... It appears that initial lease all communication happens via

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread Mike
On 08/10/2015 12:37 PM, Gert Doering wrote: Hi, On Mon, Aug 10, 2015 at 06:31:16AM -0700, Mike wrote: I've loaded SE7 and - suprise - same problem, so it's not fixed. I have a directly connected device I can cause to refresh it's dhcp lease, and sure enough, a refresh doesn't do it, but a

Re: [c-nsp] Is there a command to check which BGP ingress policy drops the received prefix in Cisco ASR routers?

2015-08-10 Thread Adam Vitkovsky
Mark Tinka Sent: 10 August 2015 10:51 However, inbound policy for this BGP neighbor is built of dozen other route-policies using the apply(executes a policy from within another policy) statement. I was hoping that maybe there is a command which displays exactly which route-policy drops

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread Gert Doering
Hi, On Mon, Aug 10, 2015 at 06:31:16AM -0700, Mike wrote: I've loaded SE7 and - suprise - same problem, so it's not fixed. I have a directly connected device I can cause to refresh it's dhcp lease, and sure enough, a refresh doesn't do it, but a reboot of that device which casues a new

[c-nsp] QinQ and Bridging

2015-08-10 Thread Garry
Hi, on a multi-site installation, I've got some additional requirements to implement. Currently, two site (CPE) have a tagged ethernet service to a central site (PE). Now, apart from the L3 traffic, I need to bridge an additional VLAN from site 2 to site 1 in order to provide a guest WLAN which

Re: [c-nsp] Is there a command to check which BGP ingress policy drops the received prefix in Cisco ASR routers?

2015-08-10 Thread Martin T
Mark, thank you for confirming this! regards, Martin On 8/10/15, Mark Tinka mark.ti...@seacom.mu wrote: On 10/Aug/15 09:14, Martin T wrote: Mark, I agree that it is most likely because of inbound policy applied to that neighbor session. Even the sh bgp neighbor for that particular BGP

Re: [c-nsp] Is there a command to check which BGP ingress policy drops the received prefix in Cisco ASR routers?

2015-08-10 Thread Mark Tinka
On 10/Aug/15 09:14, Martin T wrote: Mark, I agree that it is most likely because of inbound policy applied to that neighbor session. Even the sh bgp neighbor for that particular BGP session shows that: Cumulative no. of prefixes denied: 11. No policy: 0, Failed RT match: 0 By

Re: [c-nsp] Is there a command to check which BGP ingress policy drops the received prefix in Cisco ASR routers?

2015-08-10 Thread Martin T
Mark, I agree that it is most likely because of inbound policy applied to that neighbor session. Even the sh bgp neighbor for that particular BGP session shows that: Cumulative no. of prefixes denied: 11. No policy: 0, Failed RT match: 0 By ORF policy: 0, By policy: 11 While I did not

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread Mike
On 08/09/2015 12:49 PM, Frank Bulk wrote: A little googling reveals this: https://tools.cisco.com/bugsearch/bug/CSCus68252/?referring_site=bugquickvie wredir https://tools.cisco.com/bugsearch/bug/CSCui65252 https://tools.cisco.com/bugsearch/bug/CSCug52922 So it's a common problem. I think

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread A . L . M . Buxey
Hi, I've just now discovered a cli command - 'ip dhcp snooping binging ' - which allows me to directly inject the needed information. This would solve my short term problem and let me get back to a reasonably well populated dhcp snooping table, but the question becomes, is this going to

Re: [c-nsp] ASR920 Microbursts

2015-08-10 Thread George Giannousopoulos
Hi, Are you sure the drops are due to microbursts? We have an ongoing issue with drops on ASR920 and TAC informed us that the same counter is used for the mismatched encapsulation packets too. That means, no matter how big your buffer is, you may still see some drops on your interface,

Re: [c-nsp] ASR920 Microbursts

2015-08-10 Thread James Bensley
On 4 August 2015 at 19:05, Mattias Gyllenvarg matt...@gyllenvarg.se wrote: From what I have understood it is a 12MB global buffer pool. That is correct, 12MByte on-chip Packet Buffering, 4K Queues and 512 Sub-Channels, Three level hierarchical queuing (Port, Sub-channel, Queue), 4K Policers.

[c-nsp] Cisco 4500X OSPF?

2015-08-10 Thread Jeffrey Ollie
Is there some magic trick to getting OSPF to work on a 4500X? I've entered all the various configs that I've used successfully in the past to get OSPF working on a wide variety of platforms, but something about the 4500X is eluding me. I've enabled the enterprise services license in evaluation

Re: [c-nsp] Is there a command to check which BGP ingress policy drops the received prefix in Cisco ASR routers?

2015-08-10 Thread Ákos Aranyi
Hi, In XR these two commands might be able to help you match your table against existing route-policies; RP/0/RSP0/CPU0:TEST#sh bgp vpnv4 unicast vrf vrf route-policy route-policy also works on global table RP/0/RSP0/CPU0:TEST#sh bgp vpnv4 unicast vrf vrf policy route-policy route-policy

Re: [c-nsp] dai / dhcp snooping bug

2015-08-10 Thread Mike
On 08/10/2015 06:42 AM, a.l.m.bu...@lboro.ac.uk wrote: Hi, I've just now discovered a cli command - 'ip dhcp snooping binging ' - which allows me to directly inject the needed information. This would solve my short term problem and let me get back to a reasonably well populated dhcp