cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
724
Views
0
Helpful
1
Replies

GRE tunnel is software switched - %C4K_NOVAFFM-4-L3TUNADJOPTIONSENABLED

JonatanHoey
Level 1
Level 1

Hello!

We just upgraded our two C4500x Catalyst 4500x-32 SFP+ Switch to version 03.07.03.E.152-3.E3 running in VSL configuration, in hopes of having our GRE tunnels hardware switched. 

System image file is "bootflash:cat4500e-universalk9.SPA.03.07.03.E.152-3.E3.bin"
Jawa Revision 2, Winter Revision 0x0.0x41

And the license should allow Hardware GRE tunnel:

License Information for 'WS-C4500X-32'
License Level: entservices Type: Permanent
Next reboot license Level: entservices

Unfortunately we are recieving the following error:

Feb 16 13:58:45.944: %C4K_NOVAFFM-4-L3TUNADJOPTIONSENABLED: 1 ffm: %Warning: Feature not supported in hardware. Tunnel601 packets will be software switched
Feb 16 13:58:45.944: %C4K_NOVAFFM-4-L3TUNADJOPTIONSENABLED: STANDBY:11 ffm: %Warning: Feature not supported in hardware. Tunnel601 packets will be software switched

We are unble to think of what could be causing this error, our guess is that it's "Layer 3 Adjacency Options Enabled" but we are not aware whice options are enabled. The GRE tunnel has an unique source and destination address, and checksum and sequencing is disabled.

Tunnel configuration:

Core-Vib-1#sh run int tun601
Building configuration...
Current configuration : 192 bytes

!
interface Tunnel601
bandwidth 1000000
ip vrf forwarding vrf601
ip address 172.20.254.1 255.255.255.248
tunnel source Loopback601
tunnel destination 192.168.102.227
tunnel key 601
end

Tunnel source configuration:

Core-Vib-1#sh run int lo601 
Building configuration...

Current configuration : 73 bytes
!
interface Loopback601
ip address 192.168.102.195 255.255.255.255
end
Vrf Configuration: 
Core-Vib-1#sh run | s ip vrf vrf601
ip vrf vrf601
description Telefon
rd 601:601

Vlan601 configuration:

Core-Vib-1#sh run int vlan601
Building configuration...

Current configuration : 115 bytes
!
interface Vlan601
description Telefoni
ip vrf forwarding vrf601
ip address 172.20.254.12 255.255.255.248
end

OSPF 601 configuration:

Core-Vib-1#sh run | se ospf 601
router ospf 601 vrf vrf601
redistribute static subnets
network 172.20.0.0 0.0.255.255 area 0

This is from one one side of the GRE tunnel, it is set up the same way on the other side of the tunnel.

Does anyone have any ideas as to what is preventing us from hardware switching our GRE Tunnel?

Best regards

Jonatan Hoey

1 Reply 1

Morten Poulsen
Level 1
Level 1

Hi Jonatan

Hardware-switching of the packets occurs when GRE is configured without any tunneling options such as checksum and sequence number. I would guess that means

"

tunnel key 601

"

But will try to lab this one.

/Morten

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: