Re: [f-nsp] Extending Ping

2013-05-09 Thread Eldon Koyle
8.11.1 -- Eldon Koyle Information Technology Utah State University -- BOFH excuse #120: we just switched to FDDI. On May 09 7:29+, Rajesh Singh wrote: > Hi, > > Good day > > Do any one know how to execute extended ping in brocade ? like in cisco we > use ping ip with the s

Re: [f-nsp] Serveriron XL vs ADX

2013-05-13 Thread Eldon Koyle
to decide which server to send traffic to, I think brocade calls it 'content switching'). HTH, -- Eldon Koyle On May 13 18:01+0100, Tamas Csillag wrote: > Hi all, > > While getting ready for the BCLP 2013, I'm considering getting a > Serveriron for my home lab. > Q

Re: [f-nsp] Serveriron XL vs ADX

2013-05-13 Thread Eldon Koyle
. No joke... we got nailed by a 32-vip limit on the base ADX1000. Not cool. I'm still bitter about it. Who sells a box at that price and then limits it to 32 virtual addresses, anyway? -- Eldon Koyle Information Technology Utah State University -- "I don't think so,&qu

Re: [f-nsp] High LP CPU After Upgrade 4001a to 54c Multicast

2013-06-03 Thread Eldon Koyle
they hit the LP CPU, and should at least tell you the source IP, interface, and multicast group for the offending traffic. HTH, -- Eldon Koyle -- BOFH excuse #319: Your computer hasn't been returning all the bits it gets from the Internet. On Jun 03 10:32-0400, Walter Meyer wrote: > W

Re: [f-nsp] ADX under what circumstances can you run source-nat and DSR in the same box?

2013-06-19 Thread Eldon Koyle
DSR and source-nat are mutually exclusive features. If source-nat is enabled globally, you would need to disable it on the VIP you want to use DSR on. -- Eldon Koyle Information Technology Utah State University -- Where the system is concerned, you're not allowed to ask "Why?".

Re: [f-nsp] Secondary IP Address weirdness

2013-07-05 Thread Eldon Koyle
For clarity, the 'secondary' is only needed if you are adding a secondary address in the same subnet as an existing address. You can put multiple addresses on a single interface without any trouble at all. -- Eldon Koyle Information Technology Utah State University -- When the revolu

Re: [f-nsp] Internal vs External routing on an MLX

2013-08-12 Thread Eldon Koyle
onnected to the provider's two routers as it has the least amount of stuff in between that could go wrong. It is possible that your ISP cannot support that (if you are connected to a device that doesn't support BGP, for instance). -- Eldon Koyle Information Technology Utah State University On

Re: [f-nsp] UDP and non-DSR ?

2013-09-19 Thread Eldon Koyle
ly put DNS servers behind the load balancer and use source-nat, just like you do with your webservers. Or are you having difficulty getting DNS replies back to the right backend webserver? -- Eldon Koyle Information Technology Utah State University -- The founding fathers tried to set up a jud

Re: [f-nsp] MLX Route issues after 5.4.0d upgrade

2013-10-28 Thread Eldon Koyle
What does 'show ip bgp routes detail 74.1.1.34' give you on the bad path? Hopefully that will at least tell you which router is redistributing that route. Is it possible that a router somewhere was configured to redistribute OSPF routes into BGP? -- Eldon Koyle Information Techn

Re: [f-nsp] show ip[v6] bgp ?

2013-11-11 Thread Eldon Koyle
tly where the router would not replace a route with admin distance of 255 (even with a static route with admin distance of 1), so be sure to use 254 or less on all of your static routes. We only have ipv4 routes, but I'm assuming ipv6 would be affected as well. -- Eldon Koyle Informat

Re: [f-nsp] slightly OT question

2013-12-11 Thread Eldon Koyle
oose. This I would be interested to see how this was set up. That could be a really useful tool for us. I didn't see anything in the 5.4 docs that talked about forwarding a second copy; it sounded like typical PBR with some VLAN matching added (but that could be a deficiency in the docs). --

Re: [f-nsp] exceed configured CAM size, larger partition size required

2014-01-24 Thread Eldon Koyle
1024 16384 1024 1024 1024 No -- Eldon Koyle -- BOFH excuse #350: paradigm shift...without a clutch On Jan 24 19:20+, Kennedy, Joseph wrote: > Are you using the same line cards in the XMR4 as you are in the XMR8's and > XMR16's?

Re: [f-nsp] SSH or Telnet from mlx to mlx

2014-02-11 Thread Eldon Koyle
access-group or telnet access-group Also check for statements like: ip ssh client Which have a similar functionality to the ACLs. Do ssh/telnet work from other locations? -- Eldon Koyle On Feb 11 16:44+0100, Mathias Wolkert wrote: > Anything special about this? > Does not seem t

Re: [f-nsp] management vrf on mangement port

2014-02-13 Thread Eldon Koyle
think that code is a bit new for most people to be comfortable running it, so this is probably not a well-tested feature. -- Eldon Koyle -- Economists can certainly disappoint you. One said that the economy would turn up by the last quarter. Well, I'm down to mine and it hasn't.

Re: [f-nsp] MLXe-8 cooling

2014-03-18 Thread Eldon Koyle
We have some 2U blowers from APC that pull from the front and push down the side of our MLXe-8's (ACF201BLK or ACF202BLK, depending on your voltage). http://www.apc.com/products/family/index.cfm?id=107 -- Eldon Koyle Information Technology Utah State University -- Science may someday dis

Re: [f-nsp] LACP with Foundry and Linux Machine

2014-04-04 Thread Eldon Koyle
Is this a single TCP/UDP connection? The spec requires LACP to use a hash that guarantees a given flow will always hash to the same interface. For LACP to work effectively, you need multiple flows. -- Eldon Koyle Information Technology Utah State University -- BOFH excuse #175: OS swapped to

Re: [f-nsp] Trying to diagnose a possibly failing FESX648-PREM

2014-05-08 Thread Eldon Koyle
Could it be a cabling issue? Are there any errors? Is flow control enabled? -- Eldon Koyle On May 08 14:13-0700, ebrad...@gmail.com wrote: > Just spoke with a sysadmin working out of a different datacenter. They have > FESX648-PREMs deployed and they're running sxr07400e.bin firmw

Re: [f-nsp] Cisco equivalent of 'portfast' on FCX?

2014-06-16 Thread Eldon Koyle
/1 128 2F FDESIGNATED FORWARDING 0 607c748ef800 1/1/2 128 2F FDESIGNATED FORWARDING 0 607c748ef800 1/1/3 128 2F FDESIGNATED FORWARDING 0 607c748ef800 1/1/4 128 2F FDESIGNATED FORWARDING 0 60

Re: [f-nsp] Netiron 5.6 feedbacks

2014-08-12 Thread Eldon Koyle
I am seeing some invalid data from SNMP on 5.6d. 10G interfaces will periodically transfer at rates of multiple petabits per second and I am also seeing SNMP reporting 4G RX/TX discards on an interface that reports 0 errors/discards on 'show stat' and 'show int'. -- Eldon

Re: [f-nsp] Netiron 5.6 feedbacks

2014-08-13 Thread Eldon Koyle
We are running MLX and MLXe. Opening a ticket with Brocade is on my to-do list. -- Eldon Koyle -- Mathematics deals exclusively with the relations of concepts to each other without consideration of their relation to experience. -- Albert Einstein On Aug 13 6:33+0200, Youssef

Re: [f-nsp] Exported routes from VRF: lost BGP attributes

2014-08-13 Thread Eldon Koyle
rs such as: router bgp ... address-family ipv4 unicast vrf NAME neighbor ... These routes are then redistributed across your provider routers via the BGP vpnv4 address family. -- Eldon Koyle -- If built in great numbers, motels will be used for nothing but illegal purposes. -

Re: [f-nsp] Netiron 5.6 feedbacks

2014-09-05 Thread Eldon Koyle
I finally heard back today, not sure how long it will take them to fix it: DEFECT000527089: 000527089 Seeing unexpected traffic spikes/dips during SNMP IfInOctets Polling I thought saw something about SNMP caching in the changelog... I'm wondering if they did something wrong there. --

Re: [f-nsp] Netiron 5.6 feedbacks

2014-09-07 Thread Eldon Koyle
I don't have any more information than that, sorry. They didn't need my help to reproduce it, so I suspect others have reported the same issue. FWIW, I didn't notice this with 5.6c, but we didn't deploy that version as extensively. -- Eldon Koyle Information Technology U

Re: [f-nsp] Netiron 5.6 feedbacks

2014-09-29 Thread Eldon Koyle
ll be. -- Eldon Koyle Information Technology Utah State University -- BOFH excuse #192: runaway cat on system. On Sep 28 10:48+0200, Youssef Bengelloun-Zahr wrote: > Hello Eldon, > > Any feedbacks from BTAC regarding that SNMP defect ? > > Best regards. > > > >

Re: [f-nsp] Netiron 5.6 feedbacks

2014-09-30 Thread Eldon Koyle
firmware release? -- Eldon Koyle Information Technology Utah State University -- It is much easier to suggest solutions when you know nothing about the problem. On Sep 29 11:40-0600, Eldon Koyle wrote: > I gave up waiting on them. They claimed it was something with 32-bit > counters, but do the

Re: [f-nsp] Netiron 5.6 feedbacks

2014-09-30 Thread Eldon Koyle
All are MLX-4 with single NI-MLX-MR management modules. I haven't noticed other unusual behavior associated with this as of yet. -- Eldon Koyle Information Technology Utah State University -- BOFH excuse #195: We only support a 28000 bps connection. On Oct 01 1:07+0200, Youssef Benge

Re: [f-nsp] IP/ARP: IP address x.y.z.t MAC movement detected, changed from (...)

2014-10-13 Thread Eldon Koyle
I have been getting those messages, but I had just assumed they were correct. Is it possible that the remote device is running VRRP/HSRP? Maybe it is time for me to start packet sniffing on this one. -- Eldon Koyle -- One of the lessons of history is that nothing is often a good thing to do

Re: [f-nsp] IP/ARP: IP address x.y.z.t MAC movement detected, changed from (...)

2014-10-13 Thread Eldon Koyle
It is quite odd that those two MAC addresses differ by one bit. Could this be caused by a bad chip somewhere? I do see both MAC addresses on my network for all of the messages I have checked so far. -- Eldon Koyle -- America is the country where you buy a lifetime supply of aspirin for one

Re: [f-nsp] Unexpected CPU load on NetIron CER

2014-10-20 Thread Eldon Koyle
Are you using PIM or some other multicast routing, by chance? We had some nasty issues where even small amounts of multicast would send the LP cpu to 50% on our MLX routers. You might want to try the latest 5.5 release and see if that helps. -- Eldon Koyle -- The solution of problems is the

Re: [f-nsp] FW: q-in-q termination

2015-04-15 Thread Eldon Koyle
route. -- Eldon Koyle On Apr 16 0:18+0930, Stavros Patiniotis wrote: > Hi, > > > > I'm trying to terminate the inner vlan of a q-in-q frame onto a routed > interface of a CES/CER router. I have the following setup, which isn't > currently work. I can see t

Re: [f-nsp] IPv6 on MLX stopped working

2015-06-15 Thread Eldon Koyle
05600b is a pretty early version. I think the latest is 05600f. I try not no look too closely at release notes, as they can cause various undesirable emotions ranging from depression to sheer terror. -- Eldon Koyle On Jun 15 16:55+0200, "Rolf Hanßen" wrote: > Hello, > >

Re: [f-nsp] Two VSRP Masters on XMR units

2015-09-19 Thread Eldon Koyle
. The default can also be changed globally. This has bit me more than once. -- Eldon Koyle -- Please excuse my autocorrect On Sep 16, 2015 12:16 PM, "Dave Peters - Terabit Systems" < d...@terabitsystems.com> wrote: > Hi all— > > > > Having a little trouble with

Re: [f-nsp] ICX7750 Unstable Control Plane

2015-12-03 Thread Eldon Koyle
I have seen other strange things on the ICX7750, the most concerning of which is a temporary forwarding loop on an MCT LAG during every boot. The code still seems a bit immature... On Sun, Nov 29, 2015 at 4:20 PM, Michael Gehrmann wrote: > I've experienced two weird phenomena recently on ICX7750

Re: [f-nsp] ICX7750 Unstable Control Plane

2015-12-10 Thread Eldon Koyle
on and if it's 10G or > 40G specific. > > Frank > > -Original Message- > From: foundry-nsp [mailto:foundry-nsp-boun...@puck.nether.net] On Behalf Of > Eldon Koyle > Sent: Thursday, December 03, 2015 3:54 PM > To: Michael Gehrmann > Cc: foundry-nsp@puc

Re: [f-nsp] arp problem on brocade mlx

2015-12-17 Thread Eldon Koyle
You might check the number of MAC addresses it sees (sh mac)... if there is a device going insane somewhere, it could exhaust the mac forwarding DB and cause strange behavior. sh default values | inc mac SSH@mlx4#sh default values | inc mac sys log buffers:50 mac age time:300 sec tel

Re: [f-nsp] Experiences with Brocade TAC -> ICX products

2016-02-24 Thread Eldon Koyle
Also, if you don't feel like TAC is handling your case as quickly as they should, you can contact your SE and/or your VAR to put some pressure on them. -- Eldon On Wed, Feb 24, 2016 at 10:32 AM, Nick Cutting wrote: > I found with OSPF – coming from cisco world – it has a much lower maximum > me

Re: [f-nsp] Experiences with Brocade TAC -> ICX products

2016-02-26 Thread Eldon Koyle
Come to think of it, our last ICX issue ended up going around TAC. Apparently, some part of the LLDP parsing for SNMP dies if a device sends LLDP packets without much useful info (ie. windows 8/10, some IP phones, some access points), and SNMP doesn't report hostnames, etc. on any port after that

Re: [f-nsp] "Low pool memory, Pool(2-Global) below 5%" on Brocade MLX box

2016-03-08 Thread Eldon Koyle
Could you also provide the output of 'show default values'? You may need to change your cam-partition profile. -- Eldon On Tue, Mar 8, 2016 at 8:13 AM, Chris Hellkvist via foundry-nsp wrote: > Dear all, > > recently we connected another upstream to a Brocade MLX box. > > We noticed that the ML

Re: [f-nsp] "Low pool memory, Pool(2-Global) below 5%" on Brocade MLX box

2016-03-08 Thread Eldon Koyle
768 0 No > np-openflow-flow-entries : layer23ipv4 3 0 > 32768 0 No > np-openflow-flow-entries : layer23ipv4 4 0 > 32768 0 No > np-openflow-flow-entries : layer23ipv4

Re: [f-nsp] Brocade cam profile / System max values

2016-03-10 Thread Eldon Koyle
dules in this device? -- Eldon Koyle On Thu, Mar 10, 2016 at 8:35 AM, Dennis op de Weegh wrote: > Hi, > > > > We have a Brocade MLXe-4 with one 4x 10 Gbit card and HSF’s. > > > > We get this warning in our logs: > > > > CAM IPv6 partition warning: total 655

Re: [f-nsp] Brocade cam profile / System max values

2016-03-10 Thread Eldon Koyle
Dennis, I guess I mis-read your question. Please provide the output of 'show module'. I suspect that slot 1 is not a -X card (1M IPv4 routes max), but a NI-MLX-10Gx4 (512K ipv4 routes max). -- Eldon Koyle On Thu, Mar 10, 2016 at 11:09 AM, Eldon Koyle wrote: > Hi Dennis, > &

Re: [f-nsp] Brocade cam profile / System max values

2016-03-10 Thread Eldon Koyle
Dennis, What version of code are you running? There could be a bug... What does 'sh ipv6 route summary' say? -- Eldon Koyle On Thu, Mar 10, 2016 at 11:15 AM, Dennis op de Weegh wrote: > Hi Eldon, > > Card 1 is a NI-XMR-10Gx4 > > With the cam profile 768k IPv4 r

Re: [f-nsp] Brocade cam profile / System max values

2016-03-10 Thread Eldon Koyle
might be to contact Brocade TAC :/. -- Eldon Koyle On Thu, Mar 10, 2016 at 11:30 AM, Dennis op de Weegh wrote: > Hi Eldon, > > #sh ipv6 route summary > IPv6 Routing Table - 27613 entries: > 21 connected, 1 static, 0 RIP, 0 OSPF, 27591 BGP, 0 ISIS > Number of prefixes: >

Re: [f-nsp] Double-switched (looped) traffic on Netiron MLX

2016-03-11 Thread Eldon Koyle
VRRP IP address to use a different MAC address... I think Frank proposed this as a solution to a different problem once, although I never heard if it worked. -- Eldon Koyle On Wed, Mar 2, 2016 at 7:00 AM, Nick Cutting wrote: > Or better yet, build a network without two gateways on the same

Re: [f-nsp] MLX ICMPv6 Rate-limit

2016-03-15 Thread Eldon Koyle
the "traffic management configuration guide" (ie. only on physical interfaces, need to run ipv6 rebind-acl after changes, etc). -- Eldon Koyle On Tue, Mar 15, 2016 at 10:42 AM, Nick Adams wrote: > Hi Dave, > > > > Nothing so far. I hope that doesn’t indicate we’re out

Re: [f-nsp] Bigiron rx-8 firmware

2016-03-19 Thread Eldon Koyle
Requests like this are probably not appropriate for this list. I'm pretty sure Brocade frowns on this, and it could get people into legal trouble. -- Eldon Koyle On Wed, Mar 16, 2016 at 2:13 AM, misha wrote: > Hi, guys. > Could someone share firmware for B

Re: [f-nsp] Multicast is being switched by LP CPU on MLXe?

2016-03-29 Thread Eldon Koyle
I remember having a lot of trouble with multicast. I don't have the docs handy, but I think there are some multicast cpu-protection commands you could try. -- Eldon Koyle On Mar 29, 2016 9:21 PM, "Eldon Koyle" wrote: > I remember having a lot of trouble with multicast. I d

Re: [f-nsp] Spanning tree on brocade

2016-05-16 Thread Eldon Koyle
try looking at the output of 'show span detail' and 'show span 802-1w detail' to see if that clears anything up for you. Also, the priority is entered in decimal in the config (so you will probably see a line like: 'spanning tree ... priority 25077' for your device with

Re: [f-nsp] Spanning tree on brocade

2016-05-17 Thread Eldon Koyle
So neither "show span" nor "show 802-1w" shows spanning tree running? Is this turboiron running routing code or switch code? IIRC, the default is single spanning tree on switch code and no spanning tree on routing code. -- Eldon Koyle On May 17, 2016 2:12 PM, "Nick Cu

Re: [f-nsp] Transceiver "not supported" on ICX7750 in Breakout-Mode

2016-05-18 Thread Eldon Koyle
Sorry, my email client keeps using the wrong from address for this list. On May 18, 2016 8:07 AM, "Eldon Koyle" wrote: > You can run 40G without stacking on the 7750, although you may need to > change some default stacking settings. What code version are you running? > >

Re: [f-nsp] Spanning tree on brocade

2016-05-18 Thread Eldon Koyle
d to ON, priority is level0” > > > > I cannot find what this does in any brocade documentation . > > > > Also – any Ideas why a trunk does not lower the cost of the link? Or get > treated as an aggregated link by STP? > > > > > > > > *From:* eko...@g

Re: [f-nsp] Spanning tree on brocade

2016-05-18 Thread Eldon Koyle
> From: Nick Hilliard [mailto:n...@foobar.org] > Sent: Wednesday, May 18, 2016 10:28 AM > To: Eldon Koyle > Cc: Nick Cutting; foundry-nsp > Subject: Re: [f-nsp] Spanning tree on brocade > > > > Eldon Koyle wrote: > > >> That is _really_ old code on the turboiron

Re: [f-nsp] Transceiver "not supported" on ICX7750 in Breakout-Mode

2016-05-19 Thread Eldon Koyle
On May 19, 2016 7:45 AM, "Franz Georg Köhler" wrote: > > Am 18.05.16 um 16:12 schrieb ekoyle+puck.nether.net at gmail.com (Eldon Koyle): > >> You can run 40G without stacking on the 7750, although you may need to >> change some default stacking settings. Wh

Re: [f-nsp] Spanning tree on brocade

2016-05-24 Thread Eldon Koyle
On Wed, 18 May 2016, Nick Cutting wrote: > > > No routing at all > > > > The meltdown is almost certainly the result of 6 Fastirons, 2 > > turboIrons running a combination of IEEE, 802.1w and No spanning tree > > at all. Ive diagrammed this now for each vlan, and

Re: [f-nsp] ICX 7750 sfp port acting weird

2016-06-03 Thread Eldon Koyle
What code version? I've noticed that early code versions tend to have a lot of "quirks". Is it a brocade optic? That is probably the first question TAC will ask. Then they will check the compatibility matrix (the 10G-SFPP-LR is supported): http://www.brocade.com/en/backend-content/pdf-page.htm

Re: [f-nsp] Brocade IPSEC modules

2016-08-15 Thread Eldon Koyle
I'm still trying to recover from the sticker shock. They only have one option for ipsec, a 4-port 10g card that lists for $120k in the US. -- Eldon On Aug 14, 2016 22:21, "Michael Gehrmann" wrote: > Has anyone experienced/used the IPSEC modules for MLX or the like? > > Good/Bad/Ugly? > > -- >

Re: [f-nsp] Brocade IPSEC modules

2016-08-15 Thread Eldon Koyle
st release. Still too new for me. Their confidence in their own code inspires confidence, don't you think? -- Eldon On Aug 15, 2016 4:21 PM, "Michael Gehrmann" wrote: > I agree Eldon. It is pretty steep for a single purpose "one trick pony" > card. > > O

Re: [f-nsp] Brocade IPSEC modules

2016-08-15 Thread Eldon Koyle
to want to risk the new code. > > On 16 August 2016 at 15:39, Eldon Koyle > wrote: > >> One other thing to consider carefully is what code version are you >> required to run to support that line card and are you ready to upgrade past >> the "target path"

Re: [f-nsp] Experiences with Brocade TAC -> ICX products

2016-08-16 Thread Eldon Koyle
We heard back a few months ago and I forgot to update this thread. Their official response is: "The LLDP-MIB is not supported on fastiron. Please send a feature request via your SE". -- Eldon On Fri, Feb 26, 2016 at 9:39 AM, Eldon Koyle wrote: > Come to think of it, our last ICX i

Re: [f-nsp] Brocade IPSEC modules

2016-08-16 Thread Eldon Koyle
Sorry, I'm getting a bit off the topic of this thread. Apparently I am wrong about the end of support version for ICX64xx... It is 08030 that is the last available version. The ICX6430-C12 is only like 3 years old, though... seems a bit early to drop the line from newer code versions. There were

Re: [f-nsp] IPv6 neighbour discovery across an old Foundry FGS648P

2016-10-10 Thread Eldon Koyle
That firmware is ancient... You would probably have better luck if you can upgrade it... -- Eldon On Oct 10, 2016 5:02 PM, "Winston Sorfleet" wrote: > I picked up an old and out-of-support FGS648P for my basement (overkill, > yes, but the PoE was nice for $110 CAD! Plus I wanted to play with

Re: [f-nsp] AAA, TACACS, some users enabled on login, others not

2016-11-04 Thread Eldon Koyle
We use foundry-privlvl = 0 for admin access. See also: http://www.brocade.com/content/html/en/configuration-guide/FI_08030_SECURITY/GUID-A2449097-2DA4-4CD1-B2DA-C531D7A90587.html -- Eldon On Fri, Nov 4, 2016 at 5:26 AM, Tom Storey wrote: > Hi everyone, > > Implementing a TACACS server for a n

Re: [f-nsp] AAA, TACACS, some users enabled on login, others not

2016-11-05 Thread Eldon Koyle
the office and Im at home. > So I guess I'll resume on Monday if anyone else comes up with anything. :-) > > Thanks > Tom > > On 4 November 2016 at 20:53, Eldon Koyle > wrote: > >> We use foundry-privlvl = 0 for admin access. >> >> See also: http://

Re: [f-nsp] AAA, TACACS, some users enabled on login, others not

2016-11-16 Thread Eldon Koyle
_plus & do_auth provided you can distinguish by >> device IP. You can authorize by priv levels or commands. I wrote about it >> years ago here: >> >> http://www.tacacs.org/tacacsplus/2012/02/06/disable-account-on-brocade >> >> On Sat, Nov 5, 2016 at 1:32 PM

Re: [f-nsp] Testing traffic forwarding issues on FESX448-PREM

2016-12-08 Thread Eldon Koyle
We have had issues with one or two older FESX switches where they failed intermittently (ie. it would work after a cold boot for a random period of time, anywhere from days to months, then stop passing traffic on a port region). One was on a fesx 624hf+2xg that had well outlasted its useful lifeti

Re: [f-nsp] Multicast is being switched by LP CPU on MLXe?

2016-12-18 Thread Eldon Koyle
been a while, but I remember having similar issues. I'll have to go dig through my configs and see if it reminds me of anything else. -- Eldon Koyle On Dec 13, 2016 08:29, "Alexander Shikoff" wrote: > Hi! > > > Well, I'd like to bring this thread up again hopin

Re: [f-nsp] Multicast is being switched by LP CPU on MLXe?

2016-12-18 Thread Eldon Koyle
I guess I should have asked whether you are running pim first. Is there a ve on that VLAN with ip pim configured? -- Eldon On Dec 18, 2016 10:03 AM, "Eldon Koyle" wrote: > What does your pim configuration look like? Especially your rp config. > > Making sure there is

Re: [f-nsp] Multicast is being switched by LP CPU on MLXe?

2016-12-19 Thread Eldon Koyle
For IGMP snooping to work, there must be an L3 device acting as an IGMP querier on your L2 domain (typically a router). This device is in charge of keeping track of which IGMP clients have asked for which multicast groups, and periodically asking if they still want it. The MLX would not need to b

Re: [f-nsp] NetIron 5.8f feedbacks

2017-01-26 Thread Eldon Koyle
Do you see any errors on any of the ports involved? -- Eldon On Thu, Jan 26, 2017 at 1:58 AM, Jörg Kost wrote: > Hi, > > i will replace optics and fibre on the affected circuits and let you know. > It is (was) a long time stable short distance (<1m) port channel with 10G > SR-optics and I have

Re: [f-nsp] Basic SNMP MIBs missing

2017-03-09 Thread Eldon Koyle
Heh... this doesn't surprise me, since I was told by BTAC that they do not "support" LLDP-MIB on fastiron/ICX devices. We did end up getting product management involved to get our issue fixed (namely, SNMP is missing LLDP info for ports after a windows 10 device), but only in the 8.0.30 code train

Re: [f-nsp] High CPU on LP

2017-03-29 Thread Eldon Koyle
What protocols are you running over the GRE tunnel? It might be helpful to include the GRE config from both sides. The diagnostic guide says drop code 55 / Layer 3 invalid FID(PFE) means "the forwarding information for a layer 3 packet is invalid in software". -- Eldon On Mar 29, 2017 11:23 PM

Re: [f-nsp] High CPU on LP

2017-03-30 Thread Eldon Koyle
are you running ? Best regards. Le 30 mars 2017 à 07:57, Eldon Koyle a écrit : What protocols are you running over the GRE tunnel? It might be helpful to include the GRE config from both sides. The diagnostic guide says drop code 55 / Layer 3 invalid FID(PFE) means "the forwarding information

Re: [f-nsp] High CPU MLX-4

2017-04-18 Thread Eldon Koyle
Have you disabled icmp redirects? That is a common cause of unexplained high cpu utilization. I think the command is: no ip redirect (either interface or global). Also, which code version are you running? -- Eldon On Apr 18, 2017 7:14 PM, "Joe Lao" wrote: > Hello List > > My colleague poste

Re: [f-nsp] High CPU MLX-4

2017-04-19 Thread Eldon Koyle
65 Copyright > > (config)#sh conf | inc icmp > no ip icmp redirects > > on both > > > > *Sent:* Wednesday, April 19, 2017 at 8:57 AM > *From:* "Eldon Koyle" > *To:* "Joe Lao" > *Cc:* foundry-nsp > *Subject:* Re: [f-nsp] High CPU MLX-4 > H

Re: [f-nsp] High CPU MLX-4

2017-04-19 Thread Eldon Koyle
eived on port 1/3:0 > Packets received on port 1/4:0 > > > After 20 seconds > Sent: Wednesday, April 19, 2017 at 9:22 PM > From: "Eldon Koyle" > To: "Joe Lao" > Cc: foundry-nsp , "Perrin Richardson" > > > Subjec

Re: [f-nsp] High LP CPU usage on MLXe-16

2018-04-12 Thread Eldon Koyle
various packet counts per lp since the last run, I usually ignore the first run. -- Eldon Koyle On Thu, Apr 12, 2018, 08:16 Alexander Shikoff wrote: > Hello! > > I've run in strange issue on my MLXe-16: traffic on port which formerly > had been in LACP LAG and was removed fr

Re: [f-nsp] MLX-8 Policy Based Routing Help

2018-05-07 Thread Eldon Koyle
You should probably start with the basics: get a "show ip osfp neighbors", both working and not. The first thing I would check is whether your route map is matching OSPF traffic (esp. UDP from the peer interface IP to 224.0.0.5 or 224.0.0.6). -- Eldon On Mon, May 7, 2018, 15:32 wrote: > Hell

Re: [f-nsp] MLX-8 Policy Based Routing Help

2018-05-07 Thread Eldon Koyle
On Mon, May 7, 2018, 20:04 Eldon Koyle wrote: > > The first thing I would check is whether your route map is matching OSPF > traffic (esp. UDP from the peer interface IP to 224.0.0.5 or 224.0.0.6). > Sorry, not UDP. OSPF is its own protocol

Re: [f-nsp] GRE Tunnel - Foundry RX-4 to FESX-648 PREM over Public Internet

2018-06-16 Thread Eldon Koyle
The problem you are going to run into is routing outbound traffic the proper way. There the solutions I can come up with are policy based routing (which doesn't seem very elegant) and VRF-lite (not sure if or how well supported it is in your device). For policy based, BGP session from corporate o

Re: [f-nsp] OSPF and BGP flapping when enabling a certain amount of BGP neighbors

2018-06-22 Thread Eldon Koyle
I'll second Dennis. Disabling icmp redirects is extremely important if you have multiple addresses on a single interface. If you have a lot of routes, you may need to change your system-max values. Run 'show default values' and look for ip-route and ip-cache values (and ipv6- equivalents). The

Re: [f-nsp] BR-MLX-MR2-X / BR-MLX-100GX2 modules not recognized,

2018-08-15 Thread Eldon Koyle
Could you include the output of 'show module'? Are these BR-MLX-100GX2-CFP2-X or -M cards? Do you have any non-X cards installed or configured? Does the management module show up as a -X if you erase start and boot without any line cards? -- Eldon On Wed, Aug 15, 2018, 02:42 Franz Georg Köhl

Re: [f-nsp] Layer 2 packet forwarded in hardware(PP)

2018-09-10 Thread Eldon Koyle
You can enable cpu-protection on the vlan IIRC, I don't remember all the caveats; definitely look at the manual before enabling. -- Eldon On Mon, Sep 10, 2018, 04:11 Franz Georg Köhler wrote: > I see on another device traffic hitting the CPU that looks like the same > packet hits twice with di

[f-nsp] MLXe code recommendations

2018-09-12 Thread Eldon Koyle
Does anyone have a recommendation for a code version for MLXe? The last I saw recommended here was recent 5.8, I'm wondering if it is worth investigating 6.0 or later yet (or ever). -- Eldon ___ foundry-nsp mailing list foundry-nsp@puck.nether.net http

Re: [f-nsp] Layer 2 packet forwarded in hardware(PP)

2018-09-13 Thread Eldon Koyle
n the lp cpu, so that may be a red herring. -- Eldon On Thu, Sep 13, 2018, 05:58 Franz Georg Köhler wrote: > On Mo, Sep 10, 2018 at 08:22:19 -0600, Eldon Koyle < > ekoyle+puck.nether@gmail.com> wrote: > > You can enable cpu-protection on the vlan IIRC, I don't

Re: [f-nsp] CAM IPv6 partition warning even if cam partition not full

2018-10-01 Thread Eldon Koyle
Can you check the output of: show default values | inc ipv6 -- Eldon On Sun, Sep 30, 2018, 08:32 Dennis op de Weegh wrote: > Hi Andreas, > > We have for IPv6 system-max: > > system-max ipv6-cache 6 > system-max ipv6-route 6 > > > > Kind regards/Met vriendelijke groet, > > Dennis op

Re: [f-nsp] Spanning-tree event on single VLAN brings down LAG?

2018-10-10 Thread Eldon Koyle
Which flavor of spanning tree are you running? -- Eldon On Wed, Oct 10, 2018 at 11:32 AM Howard, Christopher < christopher-how...@utc.edu> wrote: > One vlan getting blocked by spanning tree should not bring down the lag. > The vlan should only block on the interfaces required to remove the loop

[f-nsp] Opinions on fusion provider edge

2018-11-05 Thread Eldon Koyle
What kind of experiences (good or bad) have people had with Juniper's Fusion Provider edge? Are there any limitations I should be aware of? I'm looking at it to simplify management in a campus network environment. -- Eldon ___ foundry-nsp mailing list

Re: [f-nsp] Opinions on fusion provider edge

2018-11-05 Thread Eldon Koyle
Sorry, wrong list. I'm tired tonight. On Mon, Nov 5, 2018 at 6:22 PM Eldon Koyle wrote: > What kind of experiences (good or bad) have people had with Juniper's > Fusion Provider edge? Are there any limitations I should be aware of? > > I'm looking at it to simp

Re: [f-nsp] 6910 Firmware

2019-03-15 Thread Eldon Koyle
I had never even heard of those, and apparently nobody is claiming them. When Brocade was scattered to the four winds, Broadcom says that device went to Extreme: https://www.broadcom.com/brocade-customers-partners Extreme says it went to Ruckus: https://community.extremenetworks.com/data-center-s

Re: [f-nsp] NP egress buffer on CES

2019-03-27 Thread Eldon Koyle
Does 'dm pstat' exist on the CES? It shows a bunch of counters since the previous run, so ignore the first run. On Wed, Mar 27, 2019, 07:23 Jörg Kost wrote: > Hello, > > do somebody know the reason for these log entries, that start filling up > for a few days now? Platform is CES 2048CX, with 2

Re: [f-nsp] XMR Assistance

2019-06-26 Thread Eldon Koyle
Are you using the default CAM partition profile? It's probably not suitable for a full table. Do all of your cards have the same FIB size, and is this large enough for the number of installed routes? Any IPv6 routes? IIRC, the advertised max FIB sizes are with all CAM allocated to IPv4. -- El

Re: [f-nsp] FIFO Error Message on MLXe

2023-07-06 Thread Eldon Koyle
How many MAC addresses on that card? I haven't seen that one before, but I suspect it means the device was seeing new MAC addresses faster than it could program them in CAM. If you don't expect a lot of L2 learning on that card, it could be a device jabbering and sending random source MAC address