I have a Cisco PE Cisco7200 and Huawei CPE with double tagging on sub interface at PE. Huawei CPE has subinterfaces with dot1q termination vlan id (each subinterface has particular CE vlan id applied).
The problem is with BGP session unstable over this service. Even the SSH to CPE drops/hungs in between suspecting it to be with TCP layer.
Tried with possible tcp adjust mss on CPE but no luck. ISP has confirmed no problem with the lease line and supports Q-in-Q feature.
Is there anything that needs to be checked, verified at Cisco or Huawei CPE end ?
as you mentioned SSH connection to CPE (Huawei Rotuer) is dropping/Hanging, it might be a problem related to Access-list allowing management traffic to Router, we had the same problem.
A user who's IP was not white-listed in ACL was able to SSH the router but his connection was getting hang and terminated in between.
After having a Wireshark trace we found that TCP-reset packets are in huge number and further investigation revealed that user IP was not whilte-listed in ACL and same was resolved after adding IP to ACL.
I recommend to take capture on Huawei router and open it in Wireshark to check reason behind packet drop.
Check out our latest release on Cisco Routed Optical Networking solution. Listen: https://smarturl.it/CCRS8E24Follow us: https://twitter.com/ciscochampion Disruptive network transformation may only happen once a decade. First movers c...
BGP flowspec in a nutshell is a feature that will allow you to receive IPv4/IPv6 traffic flow specification (source X, destination Y, protocol UDP, source port A .. etc) and actions that need to be taken on that traffic (drop, or polic...
In EVPN A/A + IRB both PE in same EVI have BVI playing a default GW role. Its not supported to have BVI to be shutdown on one of PEs, In this case if if traffic hit this PE with DMAc equal to BVI Custom MAC, then it will drop this traffic du...
Crosswork Cloud - Crosswork Traffic Analysis - FAQ
Crosswork Cloud - Crosswork Traffic Analysis is a Cloud-hosted Software as a Service platform that provides Netflow based Traffic Analytics. The Crosswork Traffic Analysis platform Traffic Analysis, Peeri...
Cisco Champion Radio · S8|E9 Innovations to Achieve a Trustworthy Infrastructure
How do you know for certain that a router in your network has not been altered with since you deployed it? Wouldn’t it be great if you can cryptographically challenge your r...