06-29-2011 02:45 AM - edited 03-04-2019 12:50 PM
Hello
I have a cisco 7609 running IOS version c7600rsp72043-advipservicesk9-mz.122-33.SRE0a.bin with the following modules..
sh mod
Mod Ports Card Type Model Serial No.
--- ----- -------------------------------------- ------------------ -----------
3 20 7600 ES+ 7600-ES+20G3CXL
4 2 7600 ES+ 7600-ES+2TG3CXL
5 5 Route Switch Processor 720 10GE (Activ RSP720-3CXL-10GE
6 5 Route Switch Processor 720 10GE (Hot) RSP720-3CXL-10GE
7 8 CEF720 8 port 10GE with DFC WS-X6708-10GE
8 8 CEF720 8 port 10GE with DFC WS-X6708-10GE
9 48 CEF720 48 port 1000mb SFP WS-X6748-SFP
The interface in question has the following config..
interface GigabitEthernet3/1.2001
encapsulation dot1Q 2001
ip vrf forwarding XXXXX
ip address 165.7.66.1 255.255.255.248
no ip redirects
no ip proxy-arp
ip verify unicast source reachable-via rx
bfd interval 500 min_rx 500 multiplier 3
no bfd echo
no cdp enable
service-policy output 100M-EVC
end
When i issue the following ping
ping vrf XXXXX165.7.66.2 repeat 100
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to 165.7.66.2, timeout is 2 seconds:
!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!!
.!!!!!!!!!!!.!!!!!!!!!!!.!!!!!
Success rate is 92 percent (92/100), round-trip min/avg/max = 1/1/4 ms
The circuit has been tested as clean , so for the moment we have to assume that it is not a circuit issue
We also have another idential 7600 in another POP with similar config that does not display the same problem
Any ideas as to what this could be / DDTS etc ?
Many thanks
Khurram
06-29-2011 03:04 AM
Hello Khurram,
verify that CoPP control plane policing is not configured with a rate limitation for ICMP this could explain the output
as you see there is a regular pattern in the drops and this looks like the action of a policer
Hope to help
Giuseppe
06-29-2011 04:29 AM
Thank Giuseppe for your reply
We do not have any CoPP that would be effectng ICMP
XXXXXX#sh policy-map control-plane all
XXXXXX#
The service policy atteched to the interface also does not show any drops.
sh policy-map int gig 3/1.2001 | i drop
30 second offered rate 3000 bps, drop rate 0000 bps
(queue depth/total drops/no-buffer drops) 0/0/0
(queue depth/total drops/no-buffer drops) 0/0/0
30 second offered rate 0000 bps, drop rate 0000 bps
Priority: Strict, b/w exceed drops: 0
drop
30 second offered rate 3000 bps, drop rate 0000 bps
(queue depth/total drops/no-buffer drops) 0/0/0
Are there any low level specfic commands that i could run on the e+ card ?
06-29-2011 04:46 AM
We have the following configured ..
sh run | i mls
mls flow ip interface-full
no mls flow ipv6
mls qos
mls rate-limit all mtu-failure 500 10
mls cef error action reset
sh mls rate | i ICMP
ICMP UNREAC. NO-ROUTE On 100 10 Group:0 S
ICMP UNREAC. ACL-DROP On 100 10 Group:0 S
ICMP REDIRECT Off - - -
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide