[c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Rolf Hanßen
Hi, today I saw 2x Sup720-3B (default 192K IPv4 routes) that received a full table. After FIB was filled IOS gave a warning that it now may forward in software (and resetted all BGP sessions because of memory issues). I don't have the exact messages. The real problem occured after that. I shut

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Gert Doering
Hi, On Mon, Feb 03, 2014 at 03:09:07PM +0100, Rolf Hanßen wrote: today I saw 2x Sup720-3B (default 192K IPv4 routes) that received a full table. After FIB was filled IOS gave a warning that it now may forward in software (and resetted all BGP sessions because of memory issues). I don't have

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Pete Lumbis
I've never tried it, but you might be able to create a MLS rate limiter/CoPP policy to drop all the FIB Miss packets from being punted and try to reset the HW CEF table and see if that works. I doubt it will, but in a pinch it could be worth a try. On Mon, Feb 3, 2014 at 9:09 AM, Rolf Hanßen

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Chris Welti
Simple answer: No. One of the major design errors of the FIB in the Sup720. Unfortunately, once the FIB is full, the only way to get it back to normal is to restart the whole box. CFIB-SP-STBY-7-CFIB_EXCEPTION : FIB TCAM exception, Some entries will be software switched

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Adam Vitkovsky
better than having the whole box stuck in process switching. adam -Original Message- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Rolf Hanßen Sent: Monday, February 03, 2014 3:09 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Sup720 - FIB full, software

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Lobo
One other thing I noticed from your email and something that we've experienced in the past as well. I think it may also be related to hitting the TCAM limit but check to see if you have this command enabled: mls rate-limit unicast cef receive 1 255 According to Cisco, that command will

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Spyros Kakaroukas
, February 03, 2014 4:09 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] Sup720 - FIB full, software switching Hi, today I saw 2x Sup720-3B (default 192K IPv4 routes) that received a full table. After FIB was filled IOS gave a warning that it now may forward in software (and resetted all BGP

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Rolf Hanßen
Hi, indeed, the limiter was installed. kind regards Rolf One other thing I noticed from your email and something that we've experienced in the past as well. I think it may also be related to hitting the TCAM limit but check to see if you have this command enabled: mls rate-limit unicast

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Pete Templin
On 2/3/14 7:03 AM, Adam Vitkovsky wrote: Is there a way to avoid those issues by let it just ignoring routes not matching into the FIB? Hi Rolf, Unfortunately the only option is to reset the bgp neighbor after the number of received routes crosses a certain threshold. neighbor x.x.x.x

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Don Nightingale
There is a field upgrade available from Cisco for the 3B to convert it to a 3BXL that as I recall was fairly cheap, and was pretty simple to install. -- Don On 2/3/2014 9:09 AM, Rolf Hanßen wrote: Hi, today I saw 2x Sup720-3B (default 192K IPv4 routes) that received a full table. After FIB

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Octavio Alvarez
On 02/03/2014 06:09 AM, Rolf Hanßen wrote: But it started to drop packets, I saw no pattern, it looked nearly random. I needed to reboot both boxes to resolve that issue. That pretty much sums it up. You can set up some inbound filtering to prevent a lot of routes to go into the routing table

Re: [c-nsp] Sup720 - FIB full, software switching

2014-02-03 Thread Gert Doering
Hi, On Mon, Feb 03, 2014 at 10:24:56AM -0500, Lobo wrote: Thanks to the other replies about having to reload the switch to clear the TCAM exception. I didn't know that once you hit it that the only way to fix it was to completely reload the box. Been there, done that. Affected only very