Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About xthuijs
08-21-2019
Stats
Member since
04-06-2010
1351
Posts
1834
Helpful
191
Solutions
Created by
xthuijs
in XR OS and Platforms
in XR OS and Platforms
07-30-2019
09:25 AM
07-30-2019
09:25 AM
hi Mohamed,
yup that tool still exists. note that this is just a basic conversion and no optimization is done for route-policies or acls etc,
it is merely to be able to commit the ios config to xr.
it also doesnt alert on features used in ios that may or may not be functional on the xr platform in use.
you can send me your config, or open a tac case or connect with your advanced services rep or sales team to share your config
for conversion.
cheers!
xander
... View more
Created by
xthuijs
in Service Providers Documents
in Service Providers Documents
07-29-2019
06:52 AM
07-29-2019
06:52 AM
hey mike! thanks for the note! :) the ipv6 octects/packets rfc specified radius atts should be supported by default. the vsa’s are included if you configure the radius-server vsa send. the vsa’s are a bit easier as they dissect the v4 and the v6 and give you together with the rfc acct-input/putput octets/packets a summary (total) and specific per protocol. cheers! xander
... View more
06-30-2019
04:44 AM
your tunnel attrs are fine, the session is forwarded properly.
what makes me suspicious is in the earlier log it shows that the bng is still dealing with incoming pap acks,
they would need to be forwarded.
the lns debug is trimmed, can you share the full lcp debugs from that end?
it says lcp failed to negotiate, it can be for 2 reasons:
-> the proxy LCP final ack sets sent through l2tp are not acceptable to the LNS, this can be because of an mtu mismatch for instance.
-> confreqs sent and not received or reverse during lcp, this can be caused by a forwarding LAC switch issue on the bng. this would be a sw issue.
the solution to the first problem is to use lcp reneg always under the vpdn group on the lns.
xander
... View more
06-29-2019
11:46 AM
could you share the radius debugs also to see what attributes are being passed from radius?
if we have ipcp like attributes this can coincide with the ability to handle the forward of the subscriber.
(eg ip unnumbered, or the omission of service type outbound)
I would remove this from the template in use also for those same reasons:
ipv4 mtu 1492 ipv4 verify unicast source reachable-via rx
it seems that the lns is not able to complete lcp for some reason. is it an IOS style LNS? if so configure lcp reneg-always
and can you share debugs from the lns side by any chance as well?
cheers!
xander
... View more
Created by
xthuijs
in Service Providers Documents
in Service Providers Documents
06-19-2019
11:04 AM
06-19-2019
11:04 AM
hi!
for the activation of a dynamic template you can use:
cisco-avpair="subscriber:sa=TEMPLATENAME"
sa means service activate.
cheers!
xander
... View more
Created by
xthuijs
in Service Providers Documents
in Service Providers Documents
06-13-2019
11:26 AM
06-13-2019
11:26 AM
Symptoms
It's been a long standing ask for XR to support conditional route advertisements in BGP.
The expected option of using the
if rib-has-route
option in RPL currently can only be used at the default-information originate attachpoint to conditionally advertise a default route out.
The actual request is documented under
CSCue04899 Allow 'rib-has-route' for outbound rpl
there are some reasonable technical limitations as to why it has not happened yet, but there is a neat workaround that I would like to share that provides the exact same behavior!
Components involved
The logic of the workaround solution is as follows:
In BGP one defines a network statement for the route that needs to be conditionally advertised. (One could possible instead of a network statement also use redistribute static with a route-policy using a prefix-set)
This network statement's prefix is defined as a static route under router static
The static route references the outgoing interface Null0 and a object track definition
The object track definition references something that you want to track.
The tracking options include:
bfdrtr track type bfd rtr
line-protocol track type line-protocol; the line protocol of an interface, this interface can be l2transport or an l3 interface of any kind
list track type list; this allows you to track other track definitions in an AND or OR manner
route track type ipv4 route ; the presence of a route
rtr track type ipsla; an IPSLA probe to verify an end to end connectivity or port or anything that IPSLA can monitor!
Detailed Solution
This example talks you through a solution of using the BGP network statement, a conditional static route and the dependency on an interface line state
Config pieces:
Static route that is conditional with a tracker called MYIF
router static address-family ipv4 unicast 192.168.123.0/24 Null0 track MYIF
Tracker MYIF that checks a lineprotocol state:
track MYIF type line-protocol state interface TenGigE0/2/0/3
BGP configuration that advertises a prefix (that is now conditional)
router bgp 64524 address-family ipv4 unicast network 192.168.123.0/24
Sample operation:
Tracking interface is DOWN:
LC/0/2/CPU0:Jun 12 09:41:33 : ifmgr[210]: %PKT_INFRA-LINK-3-UPDOWN : Interface TenGigE0/2/0/3, changed state to Down LC/0/2/CPU0:Jun 12 09:41:33 : ifmgr[210]: %PKT_INFRA-LINEPROTO-5-UPDOWN : Line protocol on Interface TenGigE0/2/0/3, changed state to Dn
Verify the static route is not there:
RP/0/RSP0/CPU0:A9K-BNG(config-if)#do sh route static | i 192.168.123
Wed Jun 12 09:41:18.977 EDT
RP/0/RSP0/CPU0:A9K-BNG(config-if)#
Now bring up the interface, in this case it is not connected so i force it up with a loopback
RP/0/RSP0/CPU0:A9K-BNG(config-if)#loop int
RP/0/RSP0/CPU0:A9K-BNG(config-if)#commit
Wed Jun 12 09:41:33.044 EDT LC/0/2/CPU0:Jun 12 09:41:33 : ifmgr[210]: %PKT_INFRA-LINK-3-UPDOWN : Interface TenGigE0/2/0/3, changed state to Up LC/0/2/CPU0:Jun 12 09:41:33 : ifmgr[210]: %PKT_INFRA-LINEPROTO-5-UPDOWN : Line protocol on Interface TenGigE0/2/0/3, changed state to Up
Notice the tracker detects it and ups the object!
RP/0/RSP0/CPU0:Jun 12 09:41:33 : object_tracking[359]: %SERVICES-OT-6-TRACK_INFO : track MYIF state Track_Up
Verify the static route again:
RP/0/RSP0/CPU0:A9K-BNG(config-if)#do sh route static | i 192.168.123 Wed Jun 12 09:41:58.463 EDT S 192.168.123.0/24 is directly connected, 00:00:24, Null0
Interface that is tracked configuration. Note that you can also track l2transport interfaces!!
interface TenGigE0/2/0/3 description InternalLoop-trackertest loopback internal l2transport !
cheers!
xander
=====
Xander Thuijs, CCIE #6775
Distinguished Engineer ASR9000/NCS5500/IOS-XR
... View more
Labels:
06-03-2019
08:37 AM
hi jonas, this is applicable to all ncs55, it was meant to be fixed in 652, but apparently there is a side-effect to it.
hence that tech qos may be useful to see if there is a limitation or a side effect that needs to be addressed.
that also if the workaround is unusable :)
cheers!
xander
... View more
06-03-2019
06:48 AM
yeah thanks for that test jonas, we were suspecting that class-default colliding with a permit any any and that you just proven.
there had been an issue reported on the same:
CSCvg05548 Fretta - Qos : Classification using ACL with src/dst as any/any traffic always takes default class
but it appears that there is still a gap with it.
as a workaround for this scenario since you can't use the default class, can you use potentially this solution:
permit ipv4 any 0.0.0.0 255.255.255.254
permit ipv4 any 0.0.0.1 255.255.255.254
effectively this would give you an any any thing also, this may bypass that programming issue for the any any condition.
cheers!
xander
... View more
Created by
xthuijs
in XR OS and Platforms
in XR OS and Platforms
06-02-2019
05:31 AM
06-02-2019
05:31 AM
hi sergey, it is more a testing limit,
I see your ranges are quite disjoint and not easy to summarize, but if they can be summarized, I would recommend to do so.
alternatively, you can use the null route option with object tracking enabled on them to redistribute these static routes, it is a bit less user friendly since you need the rpl to exclude other possible static routes you may not want to redistribute, where as the subscrbier state control route give you a natural tracked semi static route of the subscriber kind with a tag that is easier to trap through RPL without much extra config of prefix lists etc.
xander
... View more
06-02-2019
05:24 AM
yeah that is correct, XR64 is the last release for the RSP440. while the code to support it is there for xr65, it is no longer part of our test scenarios so it is not advisable to use that. there is some unclear documentation out there that we are trying to fix to make it a more coherent and clear story.
rsp440 only runs classic XR.
cheers!
xander
... View more
Created by
xthuijs
in XR OS and Platforms
in XR OS and Platforms
06-02-2019
05:22 AM
06-02-2019
05:22 AM
hi valery,
that is correct, the static session for xr bng groups all users together under that same session on the same access interface. the a1k has a solution to define a list to include/exclude sessions in that static subscriber set allowing them to be combined with other session types.
do you have the ability to push an extra tag on these devices to catch them under a unique access interface?
these devcies are completely silent and always use the same address? or is there some way to have them create a packet triggered subscriber interface one time that never times out. eg if the device boots, it should send something that we can use to create the packet trigger sub on and you'd be fine then. alternatively to send down some packet on the access interface for this typical device having it force send something back is an option too as you did there.
cheers!
xander
... View more
05-31-2019
05:58 AM
hi jonas,
the icmp and telnet test traffic that is going through the device and not punted/locally consumed correct?
instead of doing the match any any in that special class, can you use the class default instead?
what class was the telnet traffic matching to? I am suspecting it was hitting a class-default in the child, right?
cheers!
xander
... View more
05-28-2019
10:52 AM
oh sorry I meant to implement this as a flat (child) policy only... can you verify that to see if that meets the need?
cheers!!
xander
... View more
Created by
xthuijs
in XR OS and Platforms
in XR OS and Platforms
05-24-2019
05:34 AM
05-24-2019
05:34 AM
that tool is called SOX, but it is not reachable on CCO.
if you have a config that needs conversion happy to run it through it.
note that it still needs optimization/cleanup, but all the basic conversion is taken care of by that tool to get things going.
(also it doesnt warn if a particular config is not supported etc, it merely converts the cli)
cheers!
xander
... View more
Created by
xthuijs
in XR OS and Platforms
in XR OS and Platforms
05-24-2019
05:28 AM
05-24-2019
05:28 AM
yeah at the 35C inlet you'd see about 8000 rpm fan speed, so this is perfectly fine.
xander
... View more
07-30-2019
hi Mohamed, yup that tool still exists. note that this is just a basic
conversion and no optimizatio...
Created by
xthuijs
in Service Providers Documents
07-29-2019
07-29-2019
hey mike!thanks for the note! :)the ipv6 octects/packets rfc specified
radius atts should be support...
06-30-2019
your tunnel attrs are fine, the session is forwarded properly. what
makes me suspicious is in the ea...
06-29-2019
could you share the radius debugs also to see what attributes are being
passed from radius? if we ha...
Created by
xthuijs
in Service Providers Documents
06-19-2019
06-19-2019
hi! for the activation of a dynamic template you can use:
cisco-avpair="subscriber:sa=TEMPLATENAME" ...
06-13-2019
Symptoms It's been a long standing ask for XR to support conditional
route advertisements in BGP. Th...
06-03-2019
hi jonas, this is applicable to all ncs55, it was meant to be fixed in
652, but apparently there is ...
06-03-2019
yeah thanks for that test jonas, we were suspecting that class-default
colliding with a permit any a...
06-02-2019
hi sergey, it is more a testing limit, I see your ranges are quite
disjoint and not easy to summariz...
06-02-2019
yeah that is correct, XR64 is the last release for the RSP440. while the
code to support it is there...
06-02-2019
hi valery, that is correct, the static session for xr bng groups all
users together under that same ...
05-31-2019
hi jonas, the icmp and telnet test traffic that is going through the
device and not punted/locally c...
05-28-2019
oh sorry I meant to implement this as a flat (child) policy only... can
you verify that to see if th...
05-24-2019
that tool is called SOX, but it is not reachable on CCO. if you have a
config that needs conversion ...
Public Statistics
| Date Registered | 04-06-2010 07:50 AM |
| Date Last Visited | 08-21-2019 12:28 AM |
| Total Messages Posted | 1,351 |
| Total Helpful Votes Received | 1834 |
Helpful Votes From
| User | Helpful Count |
|---|---|
| 18 | |
| 5 | |
| 5 | |
| 5 | |
| 5 |
