cisco ASR1001x doesn't support QoS on sub port-channel

unfraget1 · ‎01-29-2018

Dear all
I have asr1001x with next configuration:

Chassis type: ASR1001-X

Slot      Type                State                 Insert time (ago)
--------- ------------------- --------------------- -----------------
0         ASR1001-X           ok                    2d23h
 0/0      BUILT-IN-2T+6X1GE   ok                    2d23h
R0        ASR1001-X           ok, active            2d23h
F0        ASR1001-X           ok, active            2d23h
P0        ASR1001-X-PWR-AC    ok                    2d23h
P1        ASR1001-X-PWR-AC    ok                    2d23h
P2        ASR1001-X-FANTRAY   ok                    2d23h

Slot      CPLD Version        Firmware Version
--------- ------------------- ---------------------------------------
0         14041015            16.3(2r)
R0        14041015            16.3(2r)
F0        14041015            16.3(2r)

IOS version:

Cisco IOS XE Software, Version 16.06.02
Cisco IOS Software [Everest], ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.6.2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Wed 01-Nov-17 07:26 by mcpre

i have issue with configuration service-police on sub port-channel

sh policy-map interface Port-channel3.443
 Port-channel3.443
  Service-policy input: 30Mbit
    Service policy 30Mbit is in suspended mode

interface Port-channel3.443
 encapsulation dot1Q 443
 ip flow monitor FLOW-MONITOR-INPUT input
 ip flow monitor FLOW-MONITOR-OUTPUT output
 ip address xx.xx.xx.xx 255.255.255.252
 no ip redirects
 no ip proxy-arp
 service-policy input 30Mbit
end
show policy-map 30Mbit
  Policy Map 30Mbit
    Class class-default
     police cir 30720000 bc 960000
       conform-action transmit
       exceed-action drop

I tried to include platform qos port-channel-aggregate 3, but this not helped.

what should I do?

pigallo · ‎01-29-2018

Hi,

could you try to configure load balancing for port-channel to vlan based?
you can either configure it globally: ' port-channel load-balancing vlan-manual'

or locally: ' load-balancing vlan' under port.channel interface

Local method overrides global method thus if you want to test this for only your port-channel i suggest you to try first the local method.

unfraget1 · ‎01-29-2018

thank you!!

i turned on option load-balancing vlan-manual.

#sh etherchannel load-balancing
EtherChannel Load-Balancing Method:
Global LB Method: vlan-manual
LB Algo type: Source Destination IP
Port-Channel: LB Method
Port-channel1 : vlan-manual (Source Destination IP)
Port-channel3 : flow-based (Source Destination IP)

hmm, very interesting, if turn on platform qos port-channel-aggregate for int Po3 method load-balancing vlan-manual didn't work.

pigallo · ‎01-29-2018

Ok good,

is the port-channel still in suspended mode ?

unfraget1 · ‎02-07-2018

Hello!

I'm sorry that being late with answer!

Yes, policing on sub port-channel its work, also i can setup service instance on main port-channel after configuration port-channel load-balancing vlan-manual in global config.
However commands port-channel load-balancing vlan-manual and port-channel-aggregate for int don't work together - if enabled command "port-channel-aggregate" then stop working EVC on main port-channel and QoS on sub port channel

Today i will be testing load balancing on port-channel without command "port-channel-aggregate for int", before was set up etherchannel from two phy interfaces and traffic was not distributed correctly i.o that is, one interface completely idle on the outgoing traffic

unfraget1 · ‎02-08-2018

i configured etherchannel between 6509 and asr1001x

6509

sh int po85 | i Members
  Members in this channel: Gi9/4 Gi9/5

asr1001x

sh int po2 | i Member
        Member 0 : GigabitEthernet0/0/2 , Full-duplex, 1000Mb/s
        Member 1 : GigabitEthernet0/0/3 , Full-duplex, 1000Mb/s

command  output etherchannel summary
2       Po2(RU)         LACP     Gi0/0/2(bndl) Gi0/0/3(bndl)

also on asr1001x i configered two sub interfases with different vlan:

interface Port-channel2.1618
 encapsulation dot1Q 1618
 ip flow monitor FLOW-MONITOR-INPUT input
 ip flow monitor FLOW-MONITOR-OUTPUT output
 ip address xx.xxx.xxx.xxx 255.255.255.252
 no ip redirects
 no ip proxy-arp
 service-policy input 10Mbit
 service-policy output 10Mbit
end

interface Port-channel2.1619
 encapsulation dot1Q 1619
 ip flow monitor FLOW-MONITOR-INPUT input
 ip flow monitor FLOW-MONITOR-OUTPUT output
 ip address 81.xx.xx.xx 255.255.255.252
end

i connect each laptop to each vlan and starting program for generate traffic
as a result - one interface completely idled for outgoing traffic:

#sh int Gi0/0/2 | i packets
  5 minute input rate 936000 bits/sec, 94 packets/sec
  5 minute output rate 515000 bits/sec, 130 packets/sec
     4920346 packets input, 4513430281 bytes, 0 no buffer
     13077706 packets output, 14919715587 bytes, 0 underruns

sh int Gi0/0/3 | i packets
  5 minute input rate 695000 bits/sec, 67 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     7664488 packets input, 7532245140 bytes, 0 no buffer
     130 packets output, 16640 bytes, 0 underruns

As a result, load balancing was not working properly

pigallo · ‎02-09-2018

@unfraget1 wrote:
if enabled command "port-channel-aggregate" then stop working EVC on main port-channel and QoS on sub port channel

Today i will be testing load balancing on port-channel without command "port-channel-aggregate for int", before was set up etherchannel from two phy interfaces and traffic was not distributed correctly i.o that is, one interface completely idle on the outgoing traffic

Hello,

i don`t know which design are you trying to accomplish but this is expected since configuration of QoS on Ethernet Virtual Circuit (EVC) with an aggregate port-channel interface is not supported.

Distribution of traffic across port-channel should be done according to the config guidelines since you are using vlan MANUAL method.

unfraget1 · ‎02-14-2018

Hi Pigallo !

I use the next scheme

Catalyst 6509 performs the role of distribution layer switches, access switches are connected to it.

Interface port channel 2 on as1001 should be used for multi services such as IPoE, AToM, and vpls. and it all its working.

e.g

l2vpn vfi context TEST
 vpn id 1550
 autodiscovery bgp signaling bgp
 ve id 10
 rd xxx:1048640
 route-target export xxx:1048640
 route-target import xxx:1048640

bridge-domain 1550
 member Port-channel2 service-instance 1550
 member vfi TEST

interface Port-channel2
 description !L2 sw6509 (Gi1/16,Gi1/20) #LAG_2G#
 mtu 1600
 no ip address
 no ip redirects
 no ip proxy-arp
 negotiation auto
 service instance 1550 ethernet
  encapsulation dot1q 1550
 !
!
interface Port-channel2.1352
 encapsulation dot1Q 1352
 xconnect 77.94.177.111 5577 encapsulation mpls
!
interface Port-channel2.1618
 encapsulation dot1Q 1618
 ip flow monitor FLOW-MONITOR-INPUT input
 ip flow monitor FLOW-MONITOR-OUTPUT output
 ip address xx.xx.160.201 255.255.255.252
 no ip redirects
 no ip proxy-arp
 service-policy input 10Mbit
 service-policy output 10Mbit

below output showing that the AToM and VPLS works

#sh l2vpn vfi name TEST detail
Legend: RT=Route-target, S=Split-horizon, Y=Yes, N=No

VFI name: TEST, state: up, type: multipoint, signaling: BGP
  VPN ID: 1550, VE-ID: 10, VE-SIZE: 10
  Control-word: Disabled, Negotiation: Disabled
  RD: xxx:1048640, RT: xxx:1550, xxx:1048640,
  Bridge-Domain 1550 attachment circuits:
  Pseudo-port interface: pseudowire100003
  Interface          Peer Address    VE-ID  Local Label  Remote Label    S
  pseudowire100004   xx.xx.160.1     1      697          327858          Y

#sh mpls l2transport vc 5577

Local intf     Local circuit              Dest address    VC ID      Status
-------------  -------------------------- --------------- ---------- ----------
Po2.1352       Eth VLAN 1352              xx.xx.177.111   5577       UP

#sh policy-map interface Po2.1618
 Port-channel2.1618

 Service-policy input: 10Mbit

 Class-map: class-default (match-any)
 34848 packets, 4005570 bytes
 5 minute offered rate 0000 bps, drop rate 0000 bps
 Match: any
 police:
 cir 10240000 bps, bc 320000 bytes
 conformed 34848 packets, 4005570 bytes; actions:
 transmit
 exceeded 0 packets, 0 bytes; actions:
 drop
 conformed 0000 bps, exceeded 0000 bps

 Service-policy output: 10Mbit

 Class-map: class-default (match-any)
 32811 packets, 2455016 bytes
 5 minute offered rate 0000 bps, drop rate 0000 bps
 Match: any
 police:
 cir 10240000 bps, bc 320000 bytes
 conformed 32811 packets, 2455016 bytes; actions:
 transmit
 exceeded 0 packets, 0 bytes; actions:
 drop
 conformed 0000 bps, exceeded 0000 bps

Policing/AToM/VPLS and EVC its work together and on one port-channel, just load-balancing isn't work i.e traffic balancing is incorrect.

If port channel configured from two links as shown in pic. above on one of the interfaces of the router there is no outgoing traffic.
.