Re: [c-nsp] Pkt forwarding query

2015-11-02 Thread John Neiberger
Would traffic mirroring work? I haven't used it much in IOS XR. I'm not even sure a tunnel can be a destination, but it would be worth a shot. http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r4-3/interfaces/configuration/guide/hc43xasr9kbook/hc43span.html#wp1400132 On Mon,

Re: [c-nsp] IOS-XR and interface discards (input)

2015-05-14 Thread John Neiberger
You can check the NP drop counters using the show drops command on ASR. You can get basically the same data by doing show controller np ports all location location to find the relevant NP then do show controllers np counters np location. There's usually a lot of data there and it can be hard to

[c-nsp] Questions about ASR9K output buffers

2015-01-26 Thread John Neiberger
We've been running into an issue with early tail drops on A9K-8T-L cards and I'm trying to wrap my head around how buffering works on these cards. I get the impression that they don't have dedicated per-interface output queues and instead use some sort of shared buffering mechanism. We have an

Re: [c-nsp] PIM register-source command for IOS XR

2014-08-21 Thread John Neiberger
Or the obligatory oneliner: router pim address-family ipv4 register-source loopback 0 Regards, Steinar On 20/08/14 22:04, John Neiberger jneiber...@gmail.com wrote: I have a use case where I really need to force some ASR9Ks to use their loopback addresses as the source for PIM register

[c-nsp] PIM register-source command for IOS XR

2014-08-20 Thread John Neiberger
I have a use case where I really need to force some ASR9Ks to use their loopback addresses as the source for PIM register messages but there doesn't seem to be a way to do it. I've checked up to version 5.2 and there doesn't seem to be a command to do this like there is in IOS. Do any of you know

[c-nsp] Odd problem with N7K and multicast

2014-07-31 Thread John Neiberger
We ran into an interesting problem this morning and I've been told that we've run into this same problem a couple of times before with other N7Ks. This is ASM. We have a receiver and a source connected to the N7K. The RP is a 7600 elsewhere. The N7K was rebooted (upgraded to 6.1(3), actually) and

Re: [c-nsp] Cisco 7600 and 'show mfib' commands

2014-07-29 Thread John Neiberger
. -- *From:* John Neiberger jneiber...@gmail.com *To:* cisco-nsp@puck.nether.net cisco-nsp@puck.nether.net *Sent:* Tuesday, 29 July 2014 2:47 AM *Subject:* [c-nsp] Cisco 7600 and 'show mfib' commands I'm at a new job and was looking at a few recent trouble

Re: [c-nsp] Cisco 7600 and 'show mfib' commands

2014-07-29 Thread John Neiberger
, John Neiberger jneiber...@gmail.com wrote: This looks like a command that is new in 12.2(33)SRD or SRE. At my old job, all of our 7600s were running 12.2(33)SRC2. My new job has quite a variety of code running. The box I'm on right now is running SRE code and does have these commands

[c-nsp] Cisco 7600 and 'show mfib' commands

2014-07-28 Thread John Neiberger
I'm at a new job and was looking at a few recent trouble tickets. I see that TAC had them use variations of the 'show mfib' commands, like 'show mfib linecard summary'. At my previous job, we had a few hundred 7600s but I don't recall TAC ever directing us to use those commands. I took a peek at

Re: [c-nsp] Stuck route issues on 7600 and ASR1000

2014-05-16 Thread John Neiberger
On Thu, May 15, 2014 at 1:16 PM, Mack McBride mack.mcbr...@viawest.comwrote: CSCuh43027 ​It looks like the bug is triggered when you have deterministic med configured. Did you have that configured or did this bite you without it? John​ ___ cisco-nsp

Re: [c-nsp] Multicast group but no traffic

2014-05-09 Thread John Neiberger
If you see an mroute for it but the traffic is not arriving, either the upstream router isn't sending it to your or the TTL is expiring. If this is IOS, check show ip traffic for the bad hop count and see if it's rapidly increasing. If it is, the TTL is expiring at your hop. Also check for ACLs

Re: [c-nsp] Multicast group but no traffic

2014-05-09 Thread John Neiberger
router, you'll have to use the various show controllers commands to find it. John On Fri, May 9, 2014 at 11:58 AM, John Neiberger jneiber...@gmail.comwrote: If you see an mroute for it but the traffic is not arriving, either the upstream router isn't sending it to your or the TTL is expiring

[c-nsp] ACL TCAM LOU exhaustion on 7600 running 15.1 code

2014-05-05 Thread John Neiberger
We had an interesting issue arise on Friday and I'm still wrestling with it. The short story is that we have a 7600 with a lot of ACLs on it, some of which are very long and most ACEs are port specific. This uses up a lot of ACL TCAM LOUs, or logical objects. I didn't discover that until later,

[c-nsp] Temporal buffer calculations on ASR9K

2014-02-28 Thread John Neiberger
I just want to get a sanity check on some WRED settings. This is a 100G linecard. If I have a class with bandwidth remaining percent 1 configured, as well as random detect 10ms 20ms configured, I believe that means that WRED kicks in when the allotted buffer space is 10 ms full. If I'm reading the

[c-nsp] Multicast NAT

2014-02-17 Thread John Neiberger
In IOS or IOS XR, is there a way to convert an IGMPv3 join to one S,G into a join to a different S,G? For example, if a device on a router joins 10.1.1.1 / 232.1.1.1, is there a way to translate that to 20.2.2.2 / 232.2.2.2? I'm thinking of a case where the original S,G is unavailable but we

Re: [c-nsp] Multicast NAT

2014-02-17 Thread John Neiberger
In this particular use case, anycast won't work for administrative reasons related to the application. That was my first thought. On Mon, Feb 17, 2014 at 3:43 PM, Jason Lixfeld ja...@lixfeld.ca wrote: What about anycast'ing the source? Sent from my iPhone On Feb 17, 2014, at 5:37 PM, John

Re: [c-nsp] IOS-XR: 6PE - next-hop manipulation in route-policy.

2014-02-03 Thread John Neiberger
I don't have time at the moment to look up the details, but I seem to recall that beginning in XR 4.2, there are limitations (or maybe flat out restrictions) on setting the next-hop on an ingress route policy. I do know that we had to change several of our route policies to get around this when

Re: [c-nsp] Bug or feature? 7600s forgetting service policy

2014-01-15 Thread John Neiberger
card will reset dscp value by default, some will trust, e.g ES+ card. Br, On 15 Jan, 2014, at 12:27 pm, John Neiberger jneiber...@gmail.com wrote: We seem to run into this fairly often and I'm curious about it. We use service policies for ingress DSCP marking. Occasionally, an interface

Re: [c-nsp] SPAN destination on oversubscribed module

2014-01-09 Thread John Neiberger
On Thu, Jan 9, 2014 at 7:47 AM, Ben Hammadi, Kayssar (NSN - TN/Tunis) kayssar.ben_hamm...@nsn.com wrote: WS-X6716-10T I presume that this module uses Janus ASICs for replication. If so, keep in mind that this chip doesn't have a huge amount of replication capacity. The ingress Janus chip is

[c-nsp] Cisco 4948 default IPv6 RA Behavior

2014-01-07 Thread John Neiberger
I have a 4948 running 12.2(53)SG2 connected via trunk to an upstream router. I need to do some testing (long, unrelated story) because we're having some IPv6-related issues with devices in a certain VLAN on that switch. I can't test to a production server, so I was thinking about adding an IPv6

Re: [c-nsp] GRE and MSS adjust on ASR9K

2013-12-07 Thread John Neiberger
. http://www.cisco.com/en/US/docs/routers/asr9000/software/asr9k_r4.3/general/release/notes/reln_432a9k.html#concept_49AEDFA126ED408DBD1B04048C1E24B8 -Blake On Fri, Dec 6, 2013 at 10:40 PM, John Neiberger jneiber...@gmail.com wrote: A co-worker is replacing a 7600 with an ASR9K running

[c-nsp] GRE and MSS adjust on ASR9K

2013-12-06 Thread John Neiberger
A co-worker is replacing a 7600 with an ASR9K running 4.2.3. The 7600 currently terminates a GRE tunnel that requires the tcp mss-adjust command. Neither one of us can find a similar feature in the XR command references. Are we just missing it or does this code not have that feature? It seems like

Re: [c-nsp] TAC hits a new record level of aggravation...

2013-11-02 Thread John Neiberger
It would be great if Cisco focus-group tested these 'enhancements' before rolling them out, and knock it off with the Java nonsense. It was in beta for months before they released it publicly. I think the current version is vastly better than when I first saw it. But I guess they didn't have

Re: [c-nsp] Dynamic output buffer allocation on Cisco 4948

2013-09-26 Thread John Neiberger
:17 PM, John Neiberger jneiber...@gmail.com wrote: I've been helping to troubleshoot an interesting problem with variable latency through a 4948. I haven't run into this before. I usually have seen really low latency through 4948s, but this particular application requires consistent low

Re: [c-nsp] Dynamic output buffer allocation on Cisco 4948

2013-09-26 Thread John Neiberger
, but when you were pinging, were you pinging from hosts, or from the routers? -Blake On Thu, Sep 26, 2013 at 9:38 AM, John Neiberger jneiber...@gmail.comwrote: Thanks! I talked to our Cisco NCE about this and he gave me these commands: show qos interface gigabitEthernet x/y- will show you 4

Re: [c-nsp] Dynamic output buffer allocation on Cisco 4948

2013-09-26 Thread John Neiberger
server in the same VLAN could ping it with no latency problems at all. On Thu, Sep 26, 2013 at 9:12 PM, Fwissue fwis...@gmail.com wrote: I would try host to host on the same vlan, then consider flow-control impact Thanks ~mike On Sep 26, 2013, at 8:18 AM, John Neiberger jneiber...@gmail.com

Re: [c-nsp] Dynamic output buffer allocation on Cisco 4948

2013-09-26 Thread John Neiberger
hardware, or just giving up and choosing between delaying the microbursts or dropping them. If it is the second, then have you tried setting up LLQ and treating your app as EF? -Blake On Thu, Sep 26, 2013 at 10:34 PM, John Neiberger jneiber...@gmail.comwrote: Host to host on the same VLAN

[c-nsp] Dynamic output buffer allocation on Cisco 4948

2013-09-24 Thread John Neiberger
I've been helping to troubleshoot an interesting problem with variable latency through a 4948. I haven't run into this before. I usually have seen really low latency through 4948s, but this particular application requires consistent low latency and they've been noticing that latency goes up on

Re: [c-nsp] Dynamic output buffer allocation on Cisco 4948

2013-09-24 Thread John Neiberger
. If you want drops or something like LLQ to occur instead for your app traffic, you can tweak the QoS settings appropriately for your app / switch. -Blake On Tue, Sep 24, 2013 at 2:17 PM, John Neiberger jneiber...@gmail.comwrote: I've been helping to troubleshoot an interesting problem

Re: [c-nsp] IOS XR Null darknet traffic at border without impacting convergence time

2013-09-06 Thread John Neiberger
If I understand the problem, you can implement selective BGP next hop filtering. That allows you to use a route policy to determine which next hops are valid. We use it to ensure that no prefix shorter than a /29 is used to validate next hops in certain situations. This is the basic idea:

Re: [c-nsp] Multicast

2013-09-05 Thread John Neiberger
show int interface counters show ip multicast interface show ip mroute group count On Thu, Sep 5, 2013 at 7:33 AM, Harry Hambi harry.ha...@bbc.co.uk wrote: Wanted to see the multicast traffic counters incrementing/or not, on a specific port Rgds Harry Harry Hambi BEng(Hons) MIET

[c-nsp] Initializing trace files on CRS

2013-08-21 Thread John Neiberger
I'm trying to run a couple of trace commands and I'm running into something unusual. When I try show pim trace I get a handful of lines but nothing useful at all. I should be getting page after page of output, or at least I would expect that since that's what I see on other CRS that I deal with.

[c-nsp] Temporarily disable all forwarding on ASR9K

2013-08-14 Thread John Neiberger
We need to upgrade some ASR9Ks that have a lot of connected devices with complex interrelationships and we have to do a lot of work to make sure all the correct redundancy is in place prior to the upgrade. Since the router takes so long to reload, I'd like to find a way to essentially simulate the

Re: [c-nsp] Temporarily disable all forwarding on ASR9K

2013-08-14 Thread John Neiberger
...@gmail.com wrote: Copy/paste a bunch of null0 routes? deny any acls on interfaces? On Wed, Aug 14, 2013 at 10:54 AM, John Neiberger jneiber...@gmail.com wrote: We need to upgrade some ASR9Ks that have a lot of connected devices with complex interrelationships and we have to do a lot of work

Re: [c-nsp] BGP Signalled VPLS

2013-08-07 Thread John Neiberger
I was about to ask the same question. :-) I'm curious what SR stands for in this context. On Wed, Aug 7, 2013 at 9:18 AM, Blake Dunlap iki...@gmail.com wrote: Ok, I'll bite, what does SR stand for and I'll happily google it myself? -Blake On Wed, Aug 7, 2013 at 3:51 AM, Mark Tinka

Re: [c-nsp] ASR9000 LC CPU Punt

2013-08-06 Thread John Neiberger
only? Whats the command to see punted traffic? Kim On Tuesday, August 6, 2013, John Neiberger wrote: Check the LPTS counters. LPTS (Local Packet Transport Service) is essentially control plane policing. Here's a page that talks about it. Most of the commands are not very user friendly

Re: [c-nsp] ASR9000 LC CPU Punt

2013-08-05 Thread John Neiberger
Check the LPTS counters. LPTS (Local Packet Transport Service) is essentially control plane policing. Here's a page that talks about it. Most of the commands are not very user friendly, but it seems to be fairly powerful. https://supportforums.cisco.com/docs/DOC-23032 I thing the command you'll

[c-nsp] Label still appearing in traceroute after disabling ttl propagation

2013-07-30 Thread John Neiberger
W e're running into an interesting problem. We have a simple lab setup like this: CE1 -- PE1 --- P1 --- P2 --- PE2 --- CE2 We have mpls ip-ttl-propagate disable on all PE and P routers, but if we trace from CE1 to CE2, we still see an MPLS label coming from the PE2 router. If we trace CE2 to

Re: [c-nsp] Label still appearing in traceroute after disabling ttl propagation

2013-07-30 Thread John Neiberger
I think either we're just doing something wrong or perhaps we're running into a bug. I did find this one, which sounds similar: https://tools.cisco.com/bugsearch/bug/CSCtd17126 I'm not sure if that is fixed in 4.1.0 or not. On Tue, Jul 30, 2013 at 11:01 AM, John Neiberger jneiber

Re: [c-nsp] Label still appearing in traceroute after disabling ttl propagation

2013-07-30 Thread John Neiberger
at 12:20 PM, John Neiberger jneiber...@gmail.comwrote: I guess I should rephrase. We have configured mpls ip-ttl-propagate disable to try to hide the labeled part of the path. For whatever reason, we always get something like the following: CE1#trace 10.6.10.1 source lo0 Type escape sequence

Re: [c-nsp] Label still appearing in traceroute after disabling ttl propagation

2013-07-30 Thread John Neiberger
ja...@puck.nether.net wrote: Disable TTL != don't copy label into ICMP TTL Expired message. - Jared On Jul 30, 2013, at 1:37 PM, John Neiberger jneiber...@gmail.com wrote: I think either we're just doing something wrong or perhaps we're running into a bug. I did find this one, which

Re: [c-nsp] Label still appearing in traceroute after disabling ttl propagation

2013-07-30 Thread John Neiberger
was well. On Tue, Jul 30, 2013 at 12:28 PM, John Neiberger jneiber...@gmail.comwrote: After a little more investigation, I think the problem is that our P2 router is not learning a set of prefixes via LDP that it should be, so it is sending them unlabeled to PE2. We assumed that both P routers had

Re: [c-nsp] multicast issue

2013-07-16 Thread John Neiberger
Yep, same here. Lots of multicast video with IQ probes all over the place. I really like them. They've saved my neck many times during overnight maintenance. It's nice to know for sure what is happening around the network as you make your changes. On Tue, Jul 16, 2013 at 8:51 PM,

Re: [c-nsp] multicast issue

2013-07-16 Thread John Neiberger
with Mobile Messaggio originale Da: John Neiberger jneiber...@gmail.com Data: A: jean-francois.d...@videotron.com Cc: james lavespa dim0...@hotmail.com,cisco-nsp cisco-nsp-boun...@puck.nether.net,cisco-nsp@puck.nether.net Oggetto: Re: [c-nsp] multicast issue Yep, same

[c-nsp] Finding source of ISIS authentication failure

2013-07-01 Thread John Neiberger
This one has me and TAC stumped. Let's say you have a 7600 with multiple devices connected to it running ISIS. One of them has the wrong authentication key, so you see a bunch of this in the logs: %CLNS-4-AUTH_FAIL: ISIS: LSP authentication failed How do you find out what neighbor is causing

Re: [c-nsp] Finding source of ISIS authentication failure

2013-07-01 Thread John Neiberger
1, 2013 at 11:41 AM, John Neiberger jneiber...@gmail.comwrote: This one has me and TAC stumped. Let's say you have a 7600 with multiple devices connected to it running ISIS. One of them has the wrong authentication key, so you see a bunch of this in the logs: %CLNS-4-AUTH_FAIL: ISIS: LSP

Re: [c-nsp] Finding source of ISIS authentication failure

2013-07-01 Thread John Neiberger
This box is running 12.2(33)SRC code. The TAC engineer and I haven't really found a good way to find what we're looking for. I have found some debugs that confirm that we're having an authentication problem but they also don't show the source of the problem. Not even an interface. On Mon, Jul 1,

Re: [c-nsp] Finding source of ISIS authentication failure

2013-07-01 Thread John Neiberger
...@puck.nether.net] Im Auftrag von John Neiberger Gesendet: Montag, 1. Juli 2013 18:31 An: Alan Buxey Cc: cisco-nsp@puck.nether.net Betreff: Re: [c-nsp] Finding source of ISIS authentication failure This box is running 12.2(33)SRC code. The TAC engineer and I haven't really found a good way

Re: [c-nsp] Finding source of ISIS authentication failure

2013-07-01 Thread John Neiberger
the md5 check, 1497 bytes, type 16 ISIS-Adj: Authentication failed So the MAC address and interface is recorded. Don't you have these debugs or do your debugs not show this information? Best regards, Daniel Dib CCIE #37149 2013-07-01 18:31 skrev John Neiberger

Re: [c-nsp] Weird IPv6 problem passing Layer3 traffic

2013-06-28 Thread John Neiberger
Do you have CoPP configured? I've seen this exact behavior when I didn't have a permit statement for my neighbor or link address in the right ACL, so it was getting rate-limited to death. On Fri, Jun 28, 2013 at 8:33 AM, Matthew Huff mh...@ox.com wrote: Trying to bring up a new BGP peering

Re: [c-nsp] Weird IPv6 problem passing Layer3 traffic

2013-06-28 Thread John Neiberger
can’t get a TCP session established. ** ** Matthew Huff | 1 Manhattanville Rd Director of Operations | Purchase, NY 10577 OTA Management LLC | Phone: 914-460-4039 ** ** *From:* John Neiberger [mailto:jneiber...@gmail.com] *Sent:* Friday

Re: [c-nsp] RESOLVED: Weird IPv6 problem passing Layer3 traffic

2013-06-28 Thread John Neiberger
Sweet! I've had CoPP filters bite me many times. Everything else will look right but the dang thing just won't work. It can be pretty frustrating to troubleshoot since CoPP usually isn't the first thing people think of. John On Fri, Jun 28, 2013 at 9:20 AM, Matthew Huff mh...@ox.com wrote:

Re: [c-nsp] sh mfib route rate

2013-06-26 Thread John Neiberger
I'm not at a router right now, so I can't check this, but do you you get better (or different) results if you do show mfib hardware route statistics instead? That doesn't show rate information, but it seems to update very quickly as I recall. John On Wed, Jun 26, 2013 at 3:07 AM, Adam Vitkovsky

Re: [c-nsp] BGP Cease notifications with Graceful Restart

2013-05-22 Thread John Neiberger
That's an excellent point. The 7600 in our scenario does not have dual RPs. The Cisco BU is involved, so I will mention this to them. Thanks! John On Wed, May 22, 2013 at 12:24 AM, Mikael Abrahamsson swm...@swm.pp.sewrote: On Tue, 21 May 2013, John Neiberger wrote: the 7600, which the CRS

[c-nsp] BGP Cease notifications with Graceful Restart

2013-05-21 Thread John Neiberger
We ran into an interesting issue recently and I'm not sure what to think of it. We have a 7600 and a CRS peering via eBGP. The session was shutdown on the 7600, which the CRS immediately recognized, but the CRS continued to use those BGP routes until the neighbor's graceful restart timer expired.

[c-nsp] PIM convergence problem

2013-04-19 Thread John Neiberger
We ran into an interesting problem last night and I'm a little stumped. It appears that PIM did not follow a unicast routing change after a BGP peer was shutdown. Imagine this simple topology: [A] - [B] -- [C] --- [D] | | | [D] Router A is a CRS and is forwarding PIM joins

[c-nsp] Monday morning brain teaser

2013-04-01 Thread John Neiberger
This is one of the strangest things I've ever seen. We have an ASR9K (Router A) connected to a 7600 (Router B) via simple L3 link with no ACLs. We can ping from Router A to Router B, and we can ping from Router A to a different L3 interface on Router B. However, we cannot trace from Router A to

Re: [c-nsp] Monday morning brain teaser

2013-04-01 Thread John Neiberger
...@geneseo.edu wrote: On 4/1/2013 11:36 AM, John Neiberger wrote: I honestly don't know what to think about this. I don't think I've ever seen anything like it. I didn't have an ACL in the way, but I did have a policy route map in place, which was a little too aggressive, one upon a time. Similar

Re: [c-nsp] Monday morning brain teaser

2013-04-01 Thread John Neiberger
. On Mon, Apr 1, 2013 at 10:10 AM, Harold 'Buz' Dale buz.d...@usg.edu wrote: Is your traceroute sourced from a different IP? -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto: cisco-nsp-boun...@puck.nether.net] On Behalf Of John Neiberger Sent: Monday, April 01

Re: [c-nsp] Monday morning brain teaser

2013-04-01 Thread John Neiberger
. The interfaces in question are plain L3 interfaces with barely more than an IP address configured. I'm not nearly awake enough to deal with this sort of weird behavior. :) On Mon, Apr 1, 2013 at 9:39 AM, Rick Coloccia coloc...@geneseo.edu wrote: On 4/1/2013 11:36 AM, John Neiberger wrote: I

Re: [c-nsp] Monday morning brain teaser

2013-04-01 Thread John Neiberger
I'm leaning toward some sort of bug. I've expanded my testing and see that any time I trace to something that is not replying, ICMP polls to the ASR9K fail. As soon as I kill the failing trace, polling is immediately successful. On Mon, Apr 1, 2013 at 10:29 AM, John Neiberger jneiber

Re: [c-nsp] Monday morning brain teaser

2013-04-01 Thread John Neiberger
This has been confirmed as a known bug. I can't believe I haven't run into it before. We're running this same code on several routers and I've never noticed it. I guess that's yet another reason to upgrade. :) On Mon, Apr 1, 2013 at 10:39 AM, John Neiberger jneiber...@gmail.comwrote: I'm

Re: [c-nsp] Monday morning brain teaser

2013-04-01 Thread John Neiberger
On Mon, Apr 1, 2013 at 12:42 PM, Jeff Aitken jait...@aitken.com wrote: On Mon, Apr 01, 2013 at 10:45:29AM -0600, John Neiberger wrote: This has been confirmed as a known bug. I can't believe I haven't run into it before. We're running this same code on several routers and I've never

[c-nsp] BGP neighbor fall-over vs BFD

2013-03-11 Thread John Neiberger
I was just reading a bit about next-hop tracking and neighbor fall-over and now I'm a little confused about what fall-over actually does. The docs say that it enables fast peering session deactivation, but I can't tell what that really means. The wording in the docs makes it sound a lot like BFD,

Re: [c-nsp] BGP neighbor fall-over vs BFD

2013-03-11 Thread John Neiberger
On Mon, Mar 11, 2013 at 11:12 AM, Oliver Boehmer (oboehmer) oboeh...@cisco.com wrote: Can someone shed some light on this? What is fall-over really doing and when might it be useful? sorry for the confusion ;-) neighbor fall-over (without the BFD keyword) is for

Re: [c-nsp] BGP neighbor fall-over vs BFD

2013-03-11 Thread John Neiberger
On Mon, Mar 11, 2013 at 11:29 AM, Bruce Pinsky b...@whack.org wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Neiberger wrote: In the case I'm thinking of using it, we do all over our internal BGP peering to loopbacks, which are in OSPF. If we enable fallover, it sounds like

Re: [c-nsp] IOS XR and router rib rump always-replicate

2013-03-01 Thread John Neiberger
Thanks, Oliver! That explains exactly what we were seeing. We doing have a multicast AF enabled in our IGP on the affected routers, so now I understand why we needed the additional replication commands. Thanks again, John On Fri, Mar 1, 2013 at 5:06 AM, Oliver Boehmer (oboehmer)

[c-nsp] IOS XR and router rib rump always-replicate

2013-02-28 Thread John Neiberger
I ran into an issue today that I hadn't seen before. I was helping someone troubleshoot some multicast problems where everything seemed to be correct but the joins weren't working. I was totally stumped until someone noticed the following: router rib address-family ipv4 unicast rump

Re: [c-nsp] OSPF OOB Resync and peer stuck in EXSTART (SeqNumberMismatch)

2013-02-09 Thread John Neiberger
just what I'm thinking, so far. On Sat, Feb 9, 2013 at 3:25 AM, Phil Mayers p.may...@imperial.ac.uk wrote: On 02/09/2013 05:05 AM, John Neiberger wrote: 1. What triggered the OOB resync in the first place? I assume there is nothing in the logs for the device, or adjacent devices, at the time

Re: [c-nsp] OSPF OOB Resync and peer stuck in EXSTART (SeqNumberMismatch)

2013-02-09 Thread John Neiberger
the router think it is restarting. It's really difficult to tell. I'd never even heard of OOB Resync until last night, so much of this is new to me. On Sat, Feb 9, 2013 at 8:26 AM, John Neiberger jneiber...@gmail.com wrote: It's a new-ish Checkpoint firewall, but I have no idea what code it is running

[c-nsp] OSPF OOB Resync and peer stuck in EXSTART (SeqNumberMismatch)

2013-02-08 Thread John Neiberger
This is a new one on me. We had a situation where OSPF between a router and a firewall seemed to go insane and it involves something I've never heard of before: Out of band Resync. Here are the logs from the beginning of the event: Feb 8 23:32:45.777 UTC: %OSPF-5-ADJCHG: Process 100, Nbr 1.2.3.4

Re: [c-nsp] OSPF OOB Resync and peer stuck in EXSTART (SeqNumberMismatch)

2013-02-08 Thread John Neiberger
, Feb 8, 2013 at 9:28 PM, John Neiberger jneiber...@gmail.com wrote: This is a new one on me. We had a situation where OSPF between a router and a firewall seemed to go insane and it involves something I've never heard of before: Out of band Resync. Here are the logs from the beginning

Re: [c-nsp] MPLS VPN over mGRE

2013-01-31 Thread John Neiberger
** ** *From:* John Neiberger [mailto:jneiber...@gmail.com] *Sent:* Wednesday, January 30, 2013 6:16 PM *To:* David Prall *Cc:* Adam Vitkovsky; cisco-nsp@puck.nether.net *Subject:* Re: [c-nsp] MPLS VPN over mGRE ** ** That's exactly right. The part I can't figure out is what triggers

Re: [c-nsp] MPLS VPN over mGRE

2013-01-30 Thread John Neiberger
The type of MPLS VPN over mGRE that we're using doesn't use a preconfigured tunnel interface or NHRP. As I understand it, the peers share tunnel-related information in vpnv4 updates using a SAFI of 64. This tells the other peers that those prefixes are related to the mgre tunnel and that signals

Re: [c-nsp] MPLS VPN over mGRE

2013-01-30 Thread John Neiberger
...@puck.nether.net [mailto:cisco-nsp- boun...@puck.nether.net] On Behalf Of John Neiberger Sent: Wednesday, January 30, 2013 10:55 AM To: Adam Vitkovsky Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] MPLS VPN over mGRE The type of MPLS VPN over mGRE that we're using doesn't use a preconfigured

[c-nsp] MPLS VPN over mGRE

2013-01-29 Thread John Neiberger
I was reading through the configuration guide for MPLS VPN over mGRE to try to reverse engineer a configuration we have at work. This kind of hurts my head, but I think I've almost got it. The method we use is basically the same as this:

[c-nsp] Confirmation of Gigabit Ethernet autonegotiation behavior

2013-01-24 Thread John Neiberger
A few of us at work have been discussing autonegotiation in gigabit Ethernet networks and I wanted to get a clarification. I know that on Cisco devices with Fast Ethernet, if you manually set speed and duplex, this disables Nway autonegotiation completely. However, I don't think that is the case

Re: [c-nsp] Rationale for ISIS default origination behavior

2013-01-22 Thread John Neiberger
We have static routes on the ASBRs that point to the loopback of the eBGP peer, then we redistribute those statics into ISIS. If a peer loopback goes away, the network converges pretty quickly to the other available connections. But thinking about that, it once again makes me wonder why we are

Re: [c-nsp] Rationale for ISIS default origination behavior

2013-01-21 Thread John Neiberger
In the part of the network I'm thinking of, we do use iBGP, so the peers all learn the default in BGP. However, we also configure the routers with eBGP peers to originate defaults into the IGP, presumably for faster convergence, although given the design I really don't know that convergence will

[c-nsp] Rationale for ISIS default origination behavior

2013-01-20 Thread John Neiberger
This is sort of a follow-up to a question I had a few weeks ago about how to configure conditional default origination in IOS XR. It seems that ISIS default origination in both IOS and IOS XR behaves in a pretty suboptimal way. I don't have a lot of history with IS-IS, so I'm curious about this.

Re: [c-nsp] show command for active multicast kbps rate

2013-01-11 Thread John Neiberger
I do recall opening a TAC case on something like this about a year ago. We also were not seeing rates in our multicast traffic. As I recall, they said it was a bug, but I don't have any details. I'll see if I can find the case notes. We were running 4.0.1 at the time. On Fri, Jan 11, 2013 at

[c-nsp] IOS XR and IS-IS default origination

2013-01-09 Thread John Neiberger
I've noticed that in IOS XR, if you have default-information originate configured in ISIS, it will behave similar to default-information originate always in OSPF. It will advertise a default whether or not it has learned one from an external source. I thought this was a bug, but now I'm starting

Re: [c-nsp] IOS XR and IS-IS default origination

2013-01-09 Thread John Neiberger
Ah, Nevermind. I found it. You configure a route policy that matches on if rib-has-route and you specify the next-hop you're looking for. In my case, that will work just fine. On Wed, Jan 9, 2013 at 3:25 PM, John Neiberger jneiber...@gmail.com wrote: I've noticed that in IOS XR, if you have

[c-nsp] IOS XR mtu changes and OSPF

2013-01-03 Thread John Neiberger
I just noticed something that I thought was interesting. In IOS, at least on the platform and image I tested, changing an interface MTU after an OSPF adjacency is full will not affect the adjacency. So, if you need to change a link MTU after OSPF is up and running, it should not affect routing.

Re: [c-nsp] ASR9k: BGP state = Idle (No route to multi-hop neighbor)

2012-12-28 Thread John Neiberger
I'm still a noob to this sort of configuration, so I just have a question. Does it matter that the next hop is in the default global table and not in the VRF? John On Fri, Dec 28, 2012 at 2:58 PM, Jason Lixfeld ja...@lixfeld.ca wrote: Hi there, Unless I'm doing something really silly, I

Re: [c-nsp] IPv6 weirdness

2012-12-07 Thread John Neiberger
On Fri, Dec 7, 2012 at 10:52 PM, Randy a...@djlab.com wrote: On 12/07/2012 5:57 pm, Justin M. Streiner wrote: On Fri, 7 Dec 2012, Randy wrote: User complained his ipv6 gw on his vlan interface was down. On checking, I couldn't ping it either from the local router. This looked

[c-nsp] BGP Path Selection and next-hop reachability (IGP vs BGP)

2012-11-30 Thread John Neiberger
I ran into an interesting situation where I think I understand what is happening, but I can't find any documentation about the path selection process that specifically addresses this. We have a router--let's call it Router A--that has learned a prefix via iBGP from two route reflector clients.

Re: [c-nsp] BGP Path Selection and next-hop reachability (IGP vs BGP)

2012-11-30 Thread John Neiberger
. What about cluster length? Nope, it's the same. Lastly, is it choosing this new path because the neighbor's IP address is lowest? AgainNO! So, what the heck? I'm really stumped. On Fri, Nov 30, 2012 at 2:42 PM, John Neiberger jneiber...@gmail.comwrote: I ran into an interesting situation where

Re: [c-nsp] BGP Path Selection and next-hop reachability (IGP vs BGP)

2012-11-30 Thread John Neiberger
-learned next hop with a MED of 0. I wouldn't have expected that behavior at all! On Fri, Nov 30, 2012 at 6:55 PM, John Neiberger jneiber...@gmail.comwrote: I've been doing some more testing and I even talked to a couple of guys from Cisco Advanced Services and I still don't understand exactly what

Re: [c-nsp] Port-to-Janus or Port-to-Metro mappings on 7600

2012-10-21 Thread John Neiberger
Thanks, that's exactly what I was looking for! I appreciate the help. John On Sat, Oct 20, 2012 at 1:59 AM, Saku Ytti s...@ytti.fi wrote: On (2012-10-19 09:22 -0600), John Neiberger wrote: I've been beating my head against my desk to remember the command that shows the port-to-Janus mappings

[c-nsp] Port-to-Janus or Port-to-Metro mappings on 7600

2012-10-19 Thread John Neiberger
I've been beating my head against my desk to remember the command that shows the port-to-Janus mappings and the port-to-Metro mappings. I thought for sure there was one. I can never remember how ports are mapped to the Metropolis asics. I just remember it's some oddball mapping. Do any of you

[c-nsp] Giants and input errors but no MTU mismatch 7600-to-4948

2012-09-19 Thread John Neiberger
I have an interface on a 4948 that is reporting increasing giants and input errors. The MTU is the default 1500 and so is the interface on the other side of the link. This is a dot1q trunk, if that is relevant. 7600 Side: GigabitEthernet3/3 is up, line protocol is up (connected) Hardware is

Re: [c-nsp] How to see inactive configuration on ASR9K during card failure

2012-09-10 Thread John Neiberger
for you: show configuration history last 10 show configuration commit changes commit-id This is on ver 4.2.1... On 09/10/2012 12:28 AM, John Neiberger wrote: On Sun, Sep 9, 2012 at 3:36 PM, Gary Buhrmaster gary.buhrmas...@gmail.com wrote: On Sun, Sep 9, 2012 at 5:08 PM, John Neiberger

[c-nsp] How to see inactive configuration on ASR9K during card failure

2012-09-09 Thread John Neiberger
We had a linecard fail on an ASR9K and I wanted to verify what was connected to it. However, since the card was down, all configuration information was hidden. How do I see the interface configurations for a module that is not currently active? In other words, how do I see what config will be

Re: [c-nsp] How to see inactive configuration on ASR9K during card failure

2012-09-09 Thread John Neiberger
On Sun, Sep 9, 2012 at 3:36 PM, Gary Buhrmaster gary.buhrmas...@gmail.com wrote: On Sun, Sep 9, 2012 at 5:08 PM, John Neiberger jneiber...@gmail.com wrote: ... In other words, how do I see what config will be enabled once a new linecard is inserted? Check your rancid (backup) configuration

[c-nsp] Fabric buffer-reserve high: what does it actually do?

2012-08-27 Thread John Neiberger
An app owner (Oracle database) has recommended that we enable fabric buffer-reserve high to solve some Oracle problem they seem to be running into. We haven't had a chance to investigate their problem yet, so we're not going to change that just because they asked us to. However, I'm curious about

[c-nsp] Increasing hold-queue to alleviate microbursts with small hardware queues

2012-08-17 Thread John Neiberger
This has come up a few times recently. We continue to run into new situations where we see lots of output queue drops on 6748 blades, especially in cases where a 10g link is feeding a 1g link. We see OQDs long before the interface approaches anything close to line rate on average. Cisco has never

Re: [c-nsp] Increasing hold-queue to alleviate microbursts with small hardware queues

2012-08-17 Thread John Neiberger
be on microbursts if we enabled shaping. Would that give us any additional short-term buffer space? Thanks again, John On Aug 17, 2012 2:44 AM, Phil Mayers p.may...@imperial.ac.uk wrote: On 08/17/2012 07:02 AM, John Neiberger wrote: This has come up a few times recently. We continue to run into new

Re: [c-nsp] Increasing hold-queue to alleviate microbursts with small hardware queues

2012-08-17 Thread John Neiberger
On Aug 17, 2012 7:57 AM, Phil Mayers p.may...@imperial.ac.uk wrote: On 17/08/12 14:48, John Neiberger wrote: Thanks, I suspected that was the case or it would have been mentioned before. We have played around with different queuing parameters and queue depths, but I'm trying to find some

Re: [c-nsp] Increasing hold-queue to alleviate microbursts with small hardware queues

2012-08-17 Thread John Neiberger
On Fri, Aug 17, 2012 at 8:36 AM, Phil Mayers p.may...@imperial.ac.uk wrote: On 17/08/12 15:29, John Neiberger wrote: Can you be more specific here? Where would you shape? I was wondering if an outbound shaping policy on the 1g links would smooth out the peaks of those bursts prior to them

  1   2   3   >