cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
979
Views
5
Helpful
1
Replies

ASR1002-X ambiguous QinQ limits

atdp03
Level 1
Level 1

Hello.

We faced strange problem, while migrating from single .1q to QinQ, on ASR1002-X.

Initially, we have about 1600 vlans, that we convert to double tagged, using 'vlan per port' scheme.

So, configs changed from:

interface Port-channel1.888
 description v888
 encapsulation dot1Q 888
...

to:

interface Port-channel1.896
 description vlan 896 qinq
 encapsulation dot1Q 896 second-dot1q 250-3000

Other parts of configs remains the same, except for different 'service-policy type control ', for authenticate users using two vlans, and not Opt82.

After migrating about 560 SVLANs, we faced a problem while deleting or adding encapsulations:

Jan 19 17:03:39: %ASR1000_SPA_ETHER-3-TCAM_QINQ_VLAN_ERROR: SIP0/3: Failed to delete VLAN outer 896 inner 250-3000 to/from interface TenGigabitEthernet0/3/0 (status = 2)
Jan 19 17:05:00: %ASR1000_SPA_ETHER-3-TCAM_QINQ_VLAN_TABLE_FULL: SIP0/1: Failed to add VLAN outer 896 inner 250-3000 to interface TenGigabitEthernet0/1/0

After trimming CVLAN ranges on some previously configured SVLANs, we was able to change encapsulation.

We have no problems with TCAM, as i can see:

show platform hardware qfp active tcam resource-manager usage

show platform hardware qfp active tcam resource-manager usage 

Total
TCAM Cell Usage Information
----------------------------------
Name                                : TCAM #0 on CPP #0
Total number of regions             : 3
Total tcam used cell entries        : 2546
Total tcam free cell entries        : 521742
Threshold status                    : below critical limit

We also have no problems with idb:

#sh vlans dot1q internal | cou .1Q
Number of lines which match regexp = 1690
#sh idb a

Maximum number of Software IDBs 131072.  In use 16443.


Maximum number of Micro Software IDBs 49152.  In use 0.

                       HWIDBs     SWIDBs          uHWIDBs    uSWIDBs
Active                     25       5214                0          0
Inactive                   15      11229                0          0
Dirty                       0          0                0          0
Total IDBs                 40      16443                0          0
Size each (bytes)        4880       1920             3784        616
Total bytes            195200   31570560                0          0

So, question is: are this some hard limitation, or we can tweak something?

1 Reply 1

lukas.tribus
Level 1
Level 1

By default the ASR1000 appears to handle this in the SPA, which has limited scalability especially when it comes to specific second-dot1q matches.

 

Use the following command to handle this in the QFP instead:

hw-module subslot slot/subslot ethernet vlan unlimited

 

Read more about this here:

https://www.cisco.com/c/en/us/td/docs/interfaces_modules/shared_port_adapters/configuration/ASR1000/modular_ethernet_linecard/b-ASRmelcconf/ASRmelcconf_chapter_011.html#task_1233716

 

 

Fun fact: if you hit this TCAM exhaustion problem in older releases, you don't even get this error message. This subinterface will simply not work.

 

 

Also consider using "second-dot1q any" instead of a specific c-vlan range if possibile, as this will use very little TCAM ressources.

Review Cisco Networking for a $25 gift card