Hi Diego,in 43 you have 4k

DIEGO ZORRILLA · ‎01-15-2015

How many HSRP / Subinterfaces will be recomend to be the max in a Teng. port for an ASR-9001.

If i have over 500, what will be the configuration best practice?

I have seen Multiple Group Optimization (MGO) for HSRP as an option, but i dont have a clear example of how to configure it on XR.

xthuijs · ‎01-15-2015

Hi Diego,

in 43 you have 4k HSRP sessions with a 1K per NPU limit. The asr9001 has 2 NPU's.

The reason for the 1k limit is the vmac table inside the NPU's MAC that is capped by that value.

To configure MGO, which helps, especially in relieving the control plane since we dont need to run HSRP control state for instance on all subinterfaces on a similar PHY, *unless* you want per vlan failover, but generally we want to protect against an interface/platform failover which means that all valns would failover anyway. This however will result in ALL vlan traffic on that phy interface going in one direction instead of being loadbalanced, *unless* we create multiple MGO's to have some vlans LEFT and some vlans RIGHT.

Config:

router hsrp

interface type ten 0/0/0/10.100

address-family ipv4

name SECOND_SET

follow FIRST_SET

(and first_set is assigned to some other interface part of this config)

xander

DIEGO ZORRILLA · ‎01-15-2015

Tks!! this info really works for me.

I do know from the 4 Teng ports they are 2 in one NP and the other 2 in the other NP, also that one Slot goes to one NP and the other Slot goes to the other NP.

But i dont know were to read if I´m near to the 1K of usage (show controller np ¿?)

xthuijs · ‎01-15-2015

If I recall correctly (I am getting older :) it was structure number 33, dunno what the ENUM name for that is, but this following command will probably help:

show controller np struct 33 det all-entries all loc 0/0/CPU0 | i Entry | util wc -l

util wc -l will count the number of lines printed, the first pipe of Entry will count the tcam entries used for this purpose of the structure number 33 which I recall (for sure on Trident cards) is the virtual-mac programming.

cheers!

xander

DIEGO ZORRILLA · ‎01-15-2015

Last question

so this is BAD :-(

right?????

DZORRILLAF#show controller np struct 33 det all-entries all loc 0/0/CPU0
Thu Jan 15 18:54:16.164 CST

Node: 0/0/CPU0:
----------------------------------------------------------------

NP: 0
Struct 33: VRRP_MAC (maps to uCode Str=17)
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 971, Max Entries: 1024
Entries Shown: 971
-------------------------------------------------------------
...
...
...
End NP Show Structure Display

NP: 1
Struct 33: VRRP_MAC (maps to uCode Str=17)
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 2, Max Entries: 1024
Entries Shown: 2
-------------------------------------------------------------
Entry 1: >>
KEY:50878913cdba0800    KEY SIZE:8
MASK:ffffffffffffffff    MASK SIZE:8
RESULT:1100010000000000     RESULT SIZE:8
Entry 2: >>
KEY:50878913cdbb0900    KEY SIZE:8
MASK:ffffffffffffffff    MASK SIZE:8
RESULT:1100010000000000     RESULT SIZE:8

End NP Show Structure Display

xthuijs · ‎01-16-2015

well bad, no, I mean you're not at max, but near on NP0.

NP1 seems to be under used there, so you could consider moving some ports

or future sessions over to NP1 by using the interfaces attached to NP1.

To verify which interfaces map to which NP you can use:

show controller np ports all loc 0/X/cpu0

xander

DIEGO ZORRILLA · ‎03-24-2015

Hi Alexander,

As you can see has been a while, but Im finally moving to 513 and working with MGO.

Just to make you know it dont work as i expect, the reason is that the add hsrp groups most be in the same interface of subinterface, if i configure on dif subinterface the hsrp group following the First then i got error message:

interface TenGigE0/0/0/3.1001
address-family ipv4
   hsrp 1001
    name PRINCIPAL
    address 150.1.1.1
    track object PRUEBA_1 40
   !
!
!
interface TenGigE0/0/0/3.1003
address-family ipv4
   hsrp 1003
    address 150.1.3.1
   !
!

router hsrp
interface TenGigE0/0/0/3.1003
address-framily ipv4
hsrp 1003 slave
follow PRINCIPAL

Error Message

!% 'hsrp' detected the 'warning' condition 'Group exists but is running in incompatable mode (slave/non-slave)'

Maybe this is not realy a fault, but well, it dont work as I expect.

xthuijs · ‎03-25-2015

yeah you need to configure it slightly differently. here is a sample:

A sample minimal configuration for HSRP is shown below:

RP/0/0/CPU0:ios#configure 
RP/0/0/CPU0:ios(config)#interface gigabitEthernet 0/0/0/0 
RP/0/0/CPU0:ios(config-if)#ipv4 address 10.0.0.50/24
RP/0/0/CPU0:ios(config-if)#exit
RP/0/0/CPU0:ios(config)#router hsrp
RP/0/0/CPU0:ios(config-hsrp)#interface gigabitEthernet 0/0/0/0 
RP/0/0/CPU0:ios(config-hsrp-if)#address-family ipv4
RP/0/0/CPU0:ios(config-hsrp-ipv4)#hsrp 1
RP/0/0/CPU0:ios(config-hsrp-gp)#address 10.0.0.1

For an HSRP MGO slave, it is also required that it follows a particular extant group. Therefore, the minimum configuration for a Session/Slave MGO pair is as shown below:

RP/0/0/CPU0:ios#configure 
RP/0/0/CPU0:ios(config)#interface gigabitEthernet 0/0/0/0 
RP/0/0/CPU0:ios(config-if)#ipv4 address 10.0.0.50/24
RP/0/0/CPU0:ios(config-if)#exit
RP/0/0/CPU0:ios(config)#router hsrp
RP/0/0/CPU0:ios(config-hsrp)#interface gigabitEthernet 0/0/0/0 
RP/0/0/CPU0:ios(config-hsrp-if)#address-family ipv4
RP/0/0/CPU0:ios(config-hsrp-ipv4)#hsrp 1
RP/0/0/CPU0:ios(config-hsrp-gp)#address 10.0.0.1
RP/0/0/CPU0:ios(config-hsrp-gp)#name AFC
RP/0/0/CPU0:ios(config-hsrp-gp)#exit
RP/0/0/CPU0:ios(config-hsrp-ipv4)#hsrp 10 slave
RP/0/0/CPU0:ios(config-hsrp-slave)#address 10.0.0.10
RP/0/0/CPU0:ios(config-hsrp-slave)#follow AFC

xander

xthuijs · ‎03-25-2015

hmm I noticed that there is a sysdb config sequencing issue.

to move it from non mgo to mgo, you need to remove the subif config in this sequence:

RP/0/RSP0/CPU0:A9K-BNG(config)#router hsrp
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp)#no int te 0/2/0/3.1003
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp)#router hsrp
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp)# interface TenGigE0/2/0/3.1003
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-if)# address-family ipv4
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-ipv4)#   hsrp 1003 slave
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)#    follow PRINCIPAL
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)#   !
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)# !
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)#commit
Wed Mar 25 06:49:56.245 EST
RP/0/RSP0/CPU0:Mar 25 06:49:56.401 : config[65935]: %MGBL-CONFIG-6-DB_COMMIT : Configuration committed by user 'root'. Use 'show configuration commit changes 1000000267' to view the changes.

interface TenGigE0/2/0/3.1001
address-family ipv4
   hsrp 1001
    name PRINCIPAL
    address 150.1.1.1
    track object PRUEBA_1 40
   !
!
!
interface TenGigE0/2/0/3.1003
address-family ipv4
   hsrp 1003 slave
    follow PRINCIPAL
   !
!

DIEGO ZORRILLA · ‎03-25-2015

In spanish ¡¡ APLAUSOS !!

Also i take a look on Struc 33 of the NP, and the max entries change from 1024 to 8192

router hsrp
interface TenGigE0/0/0/3
address-family ipv4
   hsrp 4094
    name PRINCIPAL
    priority 110
    track object PRUEBA_1 40
   !
!
!
interface TenGigE0/0/0/3.2
address-family ipv4
   hsrp 2 slave
    follow PRINCIPAL
    address 198.18.0.1
   !
!
!
interface TenGigE0/0/0/3.3
address-family ipv4
   hsrp 3 slave
    follow PRINCIPAL
    address 198.18.0.9

RP/0/RSP0/CPU0:ASR-9001_1#sh hsrp br
Wed Mar 25 02:13:58.791 MEX
IPv4 Groups:
                        P indicates configured to preempt.
                        |
Interface      Grp Pri P State   Active addr     Standby addr   Group addr
Te0/0/0/3      4094 70   Init    unknown         unknown        unknown
Te0/0/0/3.2       2 sla   Init    unknown         unknown        198.18.0.1
Te0/0/0/3.3       3 sla   Init    unknown         unknown        198.18.0.9

RP/0/RSP0/CPU0:ASR-9001_1#show controllers np struct 33 np0 location 0/0/CPU0
Wed Mar 25 02:14:30.375 MEX

Node: 0/0/CPU0:
----------------------------------------------------------------
NP: 0 Struct 33: VRRP_MAC
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 6, Max Entries: 8192

Tks!!!!

xthuijs · ‎03-25-2015

hey diego,

and in dutch: GEWELDIG :) thanks for letting me know things are working!

talk to you soon

xander

ASR-9001 - XR_434 - HSRP