ASR1002-X issue after upgrading

[ammar-taha]

Hi guys 

I have 4 ASR 1002-x acting as PPPOE server 

i upgrade three of them to asr1002x-universalk9.16.09.07.SPA.bin and Rommon to 16.7(1r) as recommended in 

https://www.cisco.com/c/en/us/td/docs/routers/asr1000/rommon/asr1000-rommon-upg-guide.html#con_60840

but since the upgrade our PPPOE users start suffer from sudden stop in some websites and apps for 1 minutes or more and at random times then everything return to normal 

this issue keep happing along the day , this issue keep happening along the day , the sites are reachable through ping and DNS resolve its domain normally,  the issue happen only on two of this three routers 

if you have any clarify i will be appreciate

[Georg Pauwen]

Hello,

post the configuration of your ASR, maybe we can spot something...

[ammar-taha]

hello bro

check the attached file 

[Georg Pauwen]

Hello,

config looks good, you might want to try the additions marked in bold:

bba-group pppoe global
virtual-template 1
vendor-tag circuit-id service
vendor-tag remote-id service
sessions max limit 65333
sessions per-vc limit 500
sessions per-mac limit 1
sessions per-vlan limit 50000 inner 5000
sessions per-vc throttle 10 1 5
sessions per-mac throttle 1 1 10
sessions per-vlan throttle 50 1 5
--> sessions auto cleanup

interface Virtual-Template1
--> mtu 1460
--> ip tcp adjust-mss 1420
ip unnumbered Loopback1
ip nat inside
ip access-group BLOCK in
ip tcp adjust-mss 1420
no peer default ip address
ppp authentication pap chap
ppp ipcp dns 192.168.99.98 192.168.99.99
service-policy input UPLOAD

[ammar-taha]

I already try to adjust  the MTU ad MSS

for the  sessions auto cleanup the PPPOE session stay connected and some websites are open normally 

[Georg Pauwen]

Hello,

--> for the sessions auto cleanup the PPPOE session stay connected and some websites are open normally

Does this mean that configuring 'sessions auto cleanup' leads to an improvement ?

[ammar-taha · Accepted solution]

no it was the same after this but i say the PPPOE session remain connected but some websites are open and some stopped 

i found the solution it was NAT issue after i applied  the below  configuration it has been fixed 

ip nat translation timeout 500
ip nat translation tcp-timeout 500
ip nat translation udp-timeout 30
ip nat translation finrst-timeout 30
ip nat translation syn-timeout 30
ip nat translation dns-timeout 30
ip nat translation icmp-timeout 30