Re: [c-nsp] MPLS EXP on STP Frames (6500)

Williams Custodian Data Centres https://www.CustodianDC.com From: Steve Dodd [mailto:sd...@salesforce.com] Sent: 09 February 2018 16:02 To: Robert Williams <rob...@custodiandc.com> Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] MPLS EXP on STP Frames (6500) IIRC the EXP values for

[c-nsp] MPLS EXP on STP Frames (6500)

an option in this case. I've also tried re-writing it (to EXP 3) on egress out of the box towards the MPLS core, but this isn't supported on this platform. I also tried setting it on the tunnel, but again that is only supported in ingress, not egress... So - any ideas anyone? Cheers! Robert

Re: [c-nsp] IT Assest/Inventory Management

. Cheers, Robert Williams Custodian Data Centres https://www.CustodianDC.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Mohammad Khalil Sent: 06 June 2017 09:41 To: cisco-nsp@puck.nether.net Subject: [c-nsp] IT Assest/Inventory Management

Re: [c-nsp] ASR1002 -- interface stops passing IPv4 traffic?

best option here, or start stripping out features until it stops doing it, then add them back in the same order you removed them (which is what we did, as TAC was taking too long). Not a massive amount of help, but thought I'd share! Cheers, Robert Williams Custodian Data Centre Email: rob

Re: [c-nsp] ASR9k QoS Scale/Usage Query

be a limit and I need to know if we are 1% or 80% of the way there. Best wishes, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: Rimestad, Steinar [mailto:steinar.rimes...@altibox.no] Sent: 16 March 2017 12:30

Re: [c-nsp] ASR9k QoS Scale/Usage Query

is. I guess what I’m really looking for is a means to correlate those figures to actual ‘limits’ in the hardware itself. Best wishes & thanks, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___

Re: [c-nsp] ASR9k QoS Scale/Usage Query

e it! Best wishes & thanks, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puc

[c-nsp] ASR9k QoS Scale/Usage Query

be appreciated. Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

the way to go until such time as the hardware can go a little deeper into the frame to hash. Cheers guys! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net h

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

inal issue :) Cheers, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nethe

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

a section like that in the 6.0.1 tech docs!... > I'm curious to see whether there are any gotchas, like: " Shaping rate is not > scaled if you configure it as a percentage of the available interface > bandwidth". I've got a ticket open for this still, I'll ask :) Cheers, Rob

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

by) the number of ingress NPs when the destination port is a single interface. Hope that may be of some use to anyone looking for this in the future! Cheers, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

: RP/0/RSP0/CPU0:(config)# hw-module all qos-mode ? aggregate-bundle-mode set aggregate bundle mode<<< Typically, I can't find it any of the documentation either! Anyone have any ideas?? Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc

Re: [c-nsp] A9K Netflow export drops

ump. Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

Re: [c-nsp] A9K Netflow export drops

or not? Is that just bad wording on the bug? Cheers! From: ckil...@unixhosts.org [mailto:ckil...@unixhosts.org] On Behalf Of Christian Kildau Sent: 14 June 2016 13:34 To: Lukas Tribus <luky...@hotmail.com> Cc: Robert Williams <rob...@custodiandc.com>; cisco-nsp@puck.nether.net Subject: Re:

Re: [c-nsp] A9K Netflow export drops

...@unixhosts.org [mailto:ckil...@unixhosts.org] On Behalf Of Christian Kildau Sent: 14 June 2016 13:07 To: Robert Williams <rob...@custodiandc.com> Cc: Jimmy <hngji...@gmail.com>; cisco-nsp@puck.nether.net Subject: Re: [c-nsp] A9K Netflow export drops Hi Robert, we've finally received clarif

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

it has a concept of 3 colour - High, Normal and Normal-Low - per output queue - per _CLASS_. Which, if driven by a "I'm ready for Normal and High for VOQ XXX" type of feedback from an egress NP towards the arbiter could (to me) be easily used to drive an egress rate limit at least per class

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

-worded bit of commercial spin. Cheers :) Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: Saku Ytti [mailto:s...@ytti.fi] Sent: 08 June 2016 08:20 To: Adam Vitkovsky <adam.vitkov...@gamma.co.uk> Cc: Robert William

Re: [c-nsp] A9K Netflow export drops

the cache is not being exceeded. Cheers guys! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Jimmy Sent: 23 May 2016 17:16 To: cisco-nsp@puck.nether.net

Re: [c-nsp] A9K Netflow export drops

ampled sampling" and so the rate of flow data is significantly lower than the 9001 which is allowing all 100kpps on one NP which has 4 x 10G interfaces punting into it. mmm... Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Messa

Re: [c-nsp] A9K Netflow export drops

it can export them... Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: Dale W. Carder [mailto:dwcar...@wisc.edu] Sent: 23 May 2016 16:02 To: Robert Williams <rob...@custodiandc.com> Cc: cis

[c-nsp] A9K Netflow export drops

re only around 30,000 of them nicely ticking over? (Note that the timeouts are deliberately low because we use this data as a backup means of inbound DDoS alerting and it needs to export active streams within 60 seconds. This is in case our primary detection system has an issue and we need data fr

Re: [c-nsp] ASR9k Bundle QoS in 6.0.1

separate NPs as in the current model (when used for egress queueing multiple ingress ports to a single egress port)? Either way, I'm very curious to know what the section of text is all about, because it's not present in the 5.3.x and reads like _something_ new is present...? Does anyone know? Chee

[c-nsp] ASR9k Bundle QoS in 6.0.1

ssing from the configuration guide? Any ideas or input? Thanks in advance! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/list

Re: [c-nsp] Strange X2 Temperature Flaps

thanks everyone! Cheers, > Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- > From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of > Saku Ytti > Sent: Thursday, March 17, 2016 12:20 PM > To:

[c-nsp] Strange X2 Temperature Flaps

Any input most welcome! Cheers, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at h

[c-nsp] S2T - XConnect traffic punted when VC is down

when the service is running because the customers expect a ‘transparent’ service. So I see no way to protect against this? What am I missing here? Thanks in advance for any pointers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com

Re: [c-nsp] HSRP failover/failback question

are using, which maybe will also apply during a failover event? (config-if)#standby 0 preempt delay reload ? 0-3600 Number of seconds for reload delay Hope that helps! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message

[c-nsp] explicit-path fails only when ospf is non-broadcast

hope I'm just missing something stupid! Cheers, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp

Re: [c-nsp] explicit-path fails only when ospf is non-broadcast

) but that is not part of this issue or test) I 'think' that's the one you are after, if not please let me know! Best wishes thanks, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun

Re: [c-nsp] BFD bypassing CoPP on 6500

odd about this setup/kit in our lab. Cheers, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: Antonio Soares [mailto:amsoa...@netcabo.pt] Sent: 05 May 2014 12:21 To: Robert Williams; cisco-nsp@puck.nether.net Subject

Re: [c-nsp] BFD bypassing CoPP on 6500

Hi, All cards have DFCs installed, there is a 3C on the 6708 and a 3B on the 6748. Someone else is attempting to replicate my findings now to rule out any 'odd' behaviour with the test rig I'm using here. I'll update when more has been found out. Cheers! Robert Williams Custodian Data

[c-nsp] BFD bypassing CoPP on 6500

’ – just UDP traffic - or at least I thought so? So what am I missing here? Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net

Re: [c-nsp] IP Options Drop

). It now takes 2.2GBit/s across spread across 5 x 1G interfaces (circa 170kpps total) before the RSVP interaction eventually breaks down intermittently. Which is more than sufficient for this particular scenario. Anyway, it's been an interesting little experience! :) Cheers! Robert Williams

Re: [c-nsp] IP Options Drop

! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Dobbins, Roland Sent: 18 April 2014 19:46 To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] IP

[c-nsp] IP Options Drop

of interfaces? The lab kit is running 15.1(2)SY1 in the tests shown above. Any pointers welcome, cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https

[c-nsp] Source-based RTBH on ASR9k - bug?

there already has it working and/or is using next-hop discard in a policy on 5.1.0 with success please would you mind sharing some suggestions? Thanks in advance! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com

[c-nsp] ASR9K RSPAN via bundle-ether

to egress mirrored packets? Oh, and I'm familiar with the mirror-to-pseudowire method, but in this scenario it isn't a particularly nice option for reasons not covered above. So - any thoughts or suggestions are most welcome - Cheers! Robert Williams Custodian Data Centre Email: rob

[c-nsp] ASR9k IPv6 interface stats in 64bit

counters under there are of the 32bit type, which is no good for the octets as these loop too quickly. So I need to find the 64bit version of the counters at 1.3.6.1.2.1.4.31.3.1.X This is under XR 4.3.1 - any pointers please? Thanks in advance! Robert Williams Custodian Data Centre Email: rob

Re: [c-nsp] ASR9k IPv6 interface stats in 64bit

to find the 64bit version of the counters at 1.3.6.1.2.1.4.31.3.1.X you need IF-MIB::ifHCInOctets / IF-MIB::ifHCOutOctets Nick Cheers, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing

Re: [c-nsp] ASR9k IPv6 interface stats in 64bit

for .6 and .33 It’s like they are missing? I’d be curious to know exactly what packages and version you are running? Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com From: Tassos Chatzithomaoglou [mailto:ach...@forthnetgroup.gr] Sent: 22 July 2013

Re: [c-nsp] Sup-720 fabric failures

to swap it out again today, with new parts so will have a deeper look at that mainboard also when it comes back. Thanks for the input everyone, cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: cisco-nsp

Re: [c-nsp] Sup-720 fabric failures

might have either seen something similar with 15.1 or GBICs causing crashes...? Sent from my iPhone On 5 Jul 2013, at 12:24, Phil Mayers p.may...@imperial.ac.uk wrote: On 05/07/13 12:22, Robert Williams wrote: Slightly warmer than that, a cosy 15 degrees Celsius I'm afraid... That's really

Re: [c-nsp] Crazy control-plane CoPP counters?

. (Not just the control-plane) - This was a last-ditch effort to resolve it and it worked. I guess that means software bug then...! Cheers, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: cisco-nsp [mailto:cisco-nsp

[c-nsp] Crazy control-plane CoPP counters?

WS-X6704-10GE 98 CEF720 8 port 10GE with DFCWS-X6708-10GE Any pointers appreciated! Best wishes, Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] Crazy control-plane CoPP counters?

Hi, Yup - unfortunately that command doesn’t seem to be present on 15.1(1)SY or 12.2(33)SXJ Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: ftpftp [mailto:ftp...@volny.cz] Sent: 01 June 2013 16:27

Re: [c-nsp] vlan limit hit...but havent?

! Robert Williams Backline / Operations Team [cid:image91b714.jpg@d504b04e.da2c4ca8]http://www.CustodianDC.com/ Tel: +44 (0)1622 230 382 Email: rob...@custodiandc.commailto:supp...@custodiandc.com Web: www.CustodianDC.comhttp://www.CustodianDC.com/ Status

Re: [c-nsp] Processing one VLAN received on a Q-in-Q port

or using a 2T it still reads (maybe) as if it’s not possible?... Either way, I could do with knowing if this is possible on a 2T at all? Thanks again! From: Pete Lumbis [mailto:alum...@gmail.com] Sent: 25 March 2013 10:13 To: Robert Williams Cc: Adam Vitkovsky; cisco-nsp@puck.nether.net Subject

[c-nsp] rate-limit rspan (6500/sup-720)

traffic. Thus my question is, how do you rate-limit traffic before it is placed onto the rspan vlan? Or at least reduce its priority such that it has no impact at all on all other traffic egressing that port. The platform in question is the 6500 / Sup-720 Cheers! Robert Williams Backline

Re: [c-nsp] Processing one VLAN received on a Q-in-Q port

pointers or maybe suggestions as to IOS versions / Line cards with or without this feature? Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com -Original Message- From: Adam Vitkovsky [mailto:adam.vitkov...@swan.sk] Sent: 25 March

[c-nsp] Processing one VLAN received on a Q-in-Q port

can do it as the ASR may be overkill considering the other requirements of the site. Thanks in advance! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com ___ cisco-nsp mailing list cisco-nsp

Re: [c-nsp] All multicast punting to CPU on 6500

a rather odd and pointless 'test' :) (PS. For the NLB fans, you'll be pleased to know the cluster is now going for good I'm told) Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com Robert Williams Backline / Operations Team Custodian

[c-nsp] All multicast punting to CPU on 6500

snooping ** I've tried with snooping both on and off, no impact. So any ideas on why this is occurring, or how to stop it / limit it? Thanks for your time as always! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com Robert Williams Backline

Re: [c-nsp] All multicast punting to CPU on 6500

transmit exceed-action drop Very sorry I can't directly answer your question but hopefully the above has the info you are asking about? Many thanks! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com Robert Williams Backline / Operations Team

Re: [c-nsp] All multicast punting to CPU on 6500

upstream, triggering high CPU. Thanks again! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622 230382 email: rob...@custodiandc.com http://www.custodiandc.com

Re: [c-nsp] All multicast punting to CPU on 6500

is still hitting the RP CPU as before I'm afraid. Thanks for the pointer on arp though - I'll do some cleanup on some other configs later :) Any other ideas? Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com Robert Williams Backline / Operations Team

Re: [c-nsp] All multicast punting to CPU on 6500

, you might not. State of the art in control-plane resilience to unusual traffic is not great IME :o( I'd be curious to know if anyone with a 2T can confirm if this vulnerability exists still? Cheers as always! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http

Re: [c-nsp] All multicast punting to CPU on 6500

drop It applies without error, however, I'm not getting any matches against the policy. Clearly I'm destined to work on this all day! Any pointers welcome, cheers... Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com Robert Williams Backline

Re: [c-nsp] All multicast punting to CPU on 6500

Sorry ignore my last, I had the documentation for 15M open, this box is running 12SX and that doesn't support it, typically. If anyone has any other suggestions or alternative ideas then do let me know - cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http

Re: [c-nsp] All multicast punting to CPU on 6500

partially possible with 15M it seems. Oh well, time to move on, so thanks again for all the input everyone :) Cheers! Robert Williams Custodian Data Centre Email: rob...@custodiandc.com http://www.CustodianDC.com Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622

Re: [c-nsp] Multiple flow-masks

(like in v4)? I’m wondering if this difference is the reason for its inability to combine the two masks successfully… Cheers! From: Tóth András [mailto:diosbej...@gmail.com] Sent: 08 December 2012 21:09 To: Robert Williams Cc: cisco-nsp NSP Subject: Re: [c-nsp] Multiple flow-masks Hi Robert, A few

Re: [c-nsp] Multiple flow-masks

[mailto:diosbej...@gmail.com] Sent: 09 December 2012 14:47 To: Robert Williams Cc: cisco-nsp NSP Subject: Re: [c-nsp] Multiple flow-masks The outputs you pasted suggests that you're using interface-full flowmask. The workaround is to use full flowmask instead of interface-full as mentioned in my last

[c-nsp] Multiple flow-masks

errors 50 200 mls rate-limit all ttl-failure 1000 100 mls rate-limit all mtu-failure 1000 100 mls cef error action reset ip flow-export source GigabitEthernet1/2 ip flow-export version 9 ip flow-export destination x.x.x.x ip flow-top-talkers Any pointers appreciated! Cheers, Robert Williams

Re: [c-nsp] Multiple flow-masks

correctly at this point, but I cannot enable IPv6 netflow. Can anyone help? Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622 230382 email: rob...@custodiandc.com http://www.custodiandc.com/disclaimer.txt ___ cisco-nsp

[c-nsp] Sup-720 Spurious / Traceback

if that can be related though, but worth mentioning. Any advice or pointers appreciated! Cheers all, Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622 230382 email: rob...@custodiandc.com http://www.custodiandc.com/disclaimer.txt

Re: [c-nsp] Sup-720 Spurious / Traceback

Hi, Thanks for the feedback people, we'll log a TAC for it anyway if it may help locate the bug - but won't rush for a reload now since it seems to be performing just fine. It's set to reload with SXJ4, so it will boot that in the next available window for it. Cheers again! Robert Williams

Re: [c-nsp] vlan limit hit...but havent?

are running 15.0(2) Maybe you can also check: sh vlan br | count act sh vlan | count enet Just out of curiosity, cheers! Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622 230382 email: rob...@custodiandc.com http://www.custodiandc.com/disclaimer.txt

Re: [c-nsp] vlan limit hit...but havent?

just not showing them to you. Cheers, Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622 230382 email: rob...@custodiandc.com http://www.custodiandc.com/disclaimer.txt -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun

[c-nsp] rate-limit rspan (6500/sup-720)

traffic. Thus my question is, how do you rate-limit traffic before it is placed onto the rspan vlan? Or at least reduce its priority such that it has no impact at all on all other traffic egressing that port. The platform in question is the 6500 / Sup-720 Cheers! Robert Williams Backline

Re: [c-nsp] rate-limit rspan (6500/sup-720)

. I'll look at the options for setting DSCP but I can't say I've seen it in there for RSPAN unfortunately. I was hoping there was a way of policing the RSPAN vlan at the source, as a whole, but it's sounding like it isn't possible. Thanks anyway! Robert Williams Backline / Operations Team

Re: [c-nsp] IPv6 BGP peers over SNMP

equal monitoring information for v6 as we have for v4). Very disappointing but I guess we'll just go the SSH/scrape route instead like everybody else is having to do. Cheers, Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622 230382 email: rob...@custodiandc.com

[c-nsp] IPv6 BGP peers over SNMP

at all. I know they are supposed to be encoded back to v4 style, but I'm not seeing any at all - only v4. Is it simply not there or am I looking in the wrong place? Thanks in advance! Robert Williams Backline / Operations Team Custodian DataCentre tel: +44 (0)1622 230382 email: rob