cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1123
Views
0
Helpful
3
Replies

cisco 7609 dropping ping traffic

khashmi
Level 1
Level 1

Hello

I have a cisco 7609 running IOS version c7600rsp72043-advipservicesk9-mz.122-33.SRE0a.bin with the following modules..

sh mod

Mod Ports Card Type                              Model              Serial No.

--- ----- -------------------------------------- ------------------ -----------

  3   20  7600 ES+                               7600-ES+20G3CXL   

  4    2  7600 ES+                               7600-ES+2TG3CXL   

  5    5  Route Switch Processor 720 10GE (Activ RSP720-3CXL-10GE  

  6    5  Route Switch Processor 720 10GE (Hot)  RSP720-3CXL-10GE    

  7    8  CEF720 8 port 10GE with DFC            WS-X6708-10GE     

  8    8  CEF720 8 port 10GE with DFC            WS-X6708-10GE     

  9   48  CEF720 48 port 1000mb SFP              WS-X6748-SFP   

The interface in question has the following config..

interface GigabitEthernet3/1.2001

encapsulation dot1Q 2001

ip vrf forwarding XXXXX

ip address 165.7.66.1 255.255.255.248

no ip redirects

no ip proxy-arp

ip verify unicast source reachable-via rx

bfd interval 500 min_rx 500 multiplier 3

no bfd echo

no cdp enable

service-policy output 100M-EVC

end

When i issue the following ping

ping vrf XXXXX165.7.66.2 repeat 100

Type escape sequence to abort.

Sending 100, 100-byte ICMP Echos to 165.7.66.2, timeout is 2 seconds:

!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!!

.!!!!!!!!!!!.!!!!!!!!!!!.!!!!!

Success rate is 92 percent (92/100), round-trip min/avg/max = 1/1/4 ms

The circuit has been tested as clean , so for the moment we have to assume that it is not a circuit issue 

We also have another idential 7600 in another POP with similar config that does not display the same problem

Any ideas as to what this could be / DDTS etc ?

Many thanks

Khurram

3 Replies 3

Giuseppe Larosa
Hall of Fame
Hall of Fame

Hello Khurram,

verify that CoPP control plane policing is not configured with a rate limitation for ICMP this could explain the output

as you see there is a regular pattern in the drops and this looks like the action of a policer

Hope to help

Giuseppe

Thank Giuseppe for your reply

We do not have any CoPP that would be effectng ICMP

XXXXXX#sh policy-map control-plane all

XXXXXX#

The service policy atteched to the interface also does not show any drops.

sh policy-map int gig 3/1.2001 | i drop     

      30 second offered rate 3000 bps, drop rate 0000 bps

      (queue depth/total drops/no-buffer drops) 0/0/0

          (queue depth/total drops/no-buffer drops) 0/0/0

          30 second offered rate 0000 bps, drop rate 0000 bps

          Priority: Strict, b/w exceed drops: 0

              drop

          30 second offered rate 3000 bps, drop rate 0000 bps

          (queue depth/total drops/no-buffer drops) 0/0/0

Are there any low level specfic commands that i could run on the e+ card ?

We have the following configured ..

sh run | i mls

mls flow ip interface-full

no mls flow ipv6

mls qos

mls rate-limit all mtu-failure 500 10

mls cef error action reset

sh mls rate | i ICMP

ICMP UNREAC. NO-ROUTE   On                 100      10  Group:0 S

ICMP UNREAC. ACL-DROP   On                 100      10  Group:0 S

         ICMP REDIRECT   Off                  -       -     -

Thanks