01-15-2015 12:23 PM
How many HSRP / Subinterfaces will be recomend to be the max in a Teng. port for an ASR-9001.
If i have over 500, what will be the configuration best practice?
I have seen Multiple Group Optimization (MGO) for HSRP as an option, but i dont have a clear example of how to configure it on XR.
01-15-2015 02:33 PM
Hi Diego,
in 43 you have 4k HSRP sessions with a 1K per NPU limit. The asr9001 has 2 NPU's.
The reason for the 1k limit is the vmac table inside the NPU's MAC that is capped by that value.
To configure MGO, which helps, especially in relieving the control plane since we dont need to run HSRP control state for instance on all subinterfaces on a similar PHY, *unless* you want per vlan failover, but generally we want to protect against an interface/platform failover which means that all valns would failover anyway. This however will result in ALL vlan traffic on that phy interface going in one direction instead of being loadbalanced, *unless* we create multiple MGO's to have some vlans LEFT and some vlans RIGHT.
Config:
router hsrp
interface type ten 0/0/0/10.100
address-family ipv4
name SECOND_SET
follow FIRST_SET
(and first_set is assigned to some other interface part of this config)
xander
01-15-2015 04:25 PM
Tks!! this info really works for me.
I do know from the 4 Teng ports they are 2 in one NP and the other 2 in the other NP, also that one Slot goes to one NP and the other Slot goes to the other NP.
But i dont know were to read if I´m near to the 1K of usage (show controller np ¿?)
01-15-2015 04:32 PM
If I recall correctly (I am getting older :) it was structure number 33, dunno what the ENUM name for that is, but this following command will probably help:
show controller np struct 33 det all-entries all loc 0/0/CPU0 | i Entry | util wc -l
util wc -l will count the number of lines printed, the first pipe of Entry will count the tcam entries used for this purpose of the structure number 33 which I recall (for sure on Trident cards) is the virtual-mac programming.
cheers!
xander
01-15-2015 04:55 PM
Last question
so this is BAD :-(
right?????
DZORRILLAF#show controller np struct 33 det all-entries all loc 0/0/CPU0
Thu Jan 15 18:54:16.164 CST
Node: 0/0/CPU0:
----------------------------------------------------------------
NP: 0
Struct 33: VRRP_MAC (maps to uCode Str=17)
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 971, Max Entries: 1024
Entries Shown: 971
-------------------------------------------------------------
...
...
...
End NP Show Structure Display
NP: 1
Struct 33: VRRP_MAC (maps to uCode Str=17)
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 2, Max Entries: 1024
Entries Shown: 2
-------------------------------------------------------------
Entry 1: >>
KEY:50878913cdba0800 KEY SIZE:8
MASK:ffffffffffffffff MASK SIZE:8
RESULT:1100010000000000 RESULT SIZE:8
Entry 2: >>
KEY:50878913cdbb0900 KEY SIZE:8
MASK:ffffffffffffffff MASK SIZE:8
RESULT:1100010000000000 RESULT SIZE:8
End NP Show Structure Display
01-16-2015 05:27 AM
well bad, no, I mean you're not at max, but near on NP0.
NP1 seems to be under used there, so you could consider moving some ports
or future sessions over to NP1 by using the interfaces attached to NP1.
To verify which interfaces map to which NP you can use:
show controller np ports all loc 0/X/cpu0
xander
03-24-2015 04:23 PM
Hi Alexander,
As you can see has been a while, but Im finally moving to 513 and working with MGO.
Just to make you know it dont work as i expect, the reason is that the add hsrp groups most be in the same interface of subinterface, if i configure on dif subinterface the hsrp group following the First then i got error message:
interface TenGigE0/0/0/3.1001
address-family ipv4
hsrp 1001
name PRINCIPAL
address 150.1.1.1
track object PRUEBA_1 40
!
!
!
interface TenGigE0/0/0/3.1003
address-family ipv4
hsrp 1003
address 150.1.3.1
!
!
router hsrp
interface TenGigE0/0/0/3.1003
address-framily ipv4
hsrp 1003 slave
follow PRINCIPAL
Error Message
!% 'hsrp' detected the 'warning' condition 'Group exists but is running in incompatable mode (slave/non-slave)'
Maybe this is not realy a fault, but well, it dont work as I expect.
03-25-2015 04:36 AM
yeah you need to configure it slightly differently. here is a sample:
A sample minimal configuration for HSRP is shown below:
RP/0/0/CPU0:ios#configure RP/0/0/CPU0:ios(config)#interface gigabitEthernet 0/0/0/0 RP/0/0/CPU0:ios(config-if)#ipv4 address 10.0.0.50/24 RP/0/0/CPU0:ios(config-if)#exit RP/0/0/CPU0:ios(config)#router hsrp RP/0/0/CPU0:ios(config-hsrp)#interface gigabitEthernet 0/0/0/0 RP/0/0/CPU0:ios(config-hsrp-if)#address-family ipv4 RP/0/0/CPU0:ios(config-hsrp-ipv4)#hsrp 1 RP/0/0/CPU0:ios(config-hsrp-gp)#address 10.0.0.1
For an HSRP MGO slave, it is also required that it follows a particular extant group. Therefore, the minimum configuration for a Session/Slave MGO pair is as shown below:
RP/0/0/CPU0:ios#configure RP/0/0/CPU0:ios(config)#interface gigabitEthernet 0/0/0/0 RP/0/0/CPU0:ios(config-if)#ipv4 address 10.0.0.50/24 RP/0/0/CPU0:ios(config-if)#exit RP/0/0/CPU0:ios(config)#router hsrp RP/0/0/CPU0:ios(config-hsrp)#interface gigabitEthernet 0/0/0/0 RP/0/0/CPU0:ios(config-hsrp-if)#address-family ipv4 RP/0/0/CPU0:ios(config-hsrp-ipv4)#hsrp 1 RP/0/0/CPU0:ios(config-hsrp-gp)#address 10.0.0.1 RP/0/0/CPU0:ios(config-hsrp-gp)#name AFC RP/0/0/CPU0:ios(config-hsrp-gp)#exit RP/0/0/CPU0:ios(config-hsrp-ipv4)#hsrp 10 slave RP/0/0/CPU0:ios(config-hsrp-slave)#address 10.0.0.10 RP/0/0/CPU0:ios(config-hsrp-slave)#follow AFC
xander
03-25-2015 04:51 AM
hmm I noticed that there is a sysdb config sequencing issue.
to move it from non mgo to mgo, you need to remove the subif config in this sequence:
RP/0/RSP0/CPU0:A9K-BNG(config)#router hsrp
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp)#no int te 0/2/0/3.1003
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp)#router hsrp
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp)# interface TenGigE0/2/0/3.1003
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-if)# address-family ipv4
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-ipv4)# hsrp 1003 slave
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)# follow PRINCIPAL
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)# !
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)# !
RP/0/RSP0/CPU0:A9K-BNG(config-hsrp-slave)#commit
Wed Mar 25 06:49:56.245 EST
RP/0/RSP0/CPU0:Mar 25 06:49:56.401 : config[65935]: %MGBL-CONFIG-6-DB_COMMIT : Configuration committed by user 'root'. Use 'show configuration commit changes 1000000267' to view the changes.
interface TenGigE0/2/0/3.1001
address-family ipv4
hsrp 1001
name PRINCIPAL
address 150.1.1.1
track object PRUEBA_1 40
!
!
!
interface TenGigE0/2/0/3.1003
address-family ipv4
hsrp 1003 slave
follow PRINCIPAL
!
!
03-25-2015 08:16 AM
In spanish ¡¡ APLAUSOS !!
Also i take a look on Struc 33 of the NP, and the max entries change from 1024 to 8192
router hsrp
interface TenGigE0/0/0/3
address-family ipv4
hsrp 4094
name PRINCIPAL
priority 110
track object PRUEBA_1 40
!
!
!
interface TenGigE0/0/0/3.2
address-family ipv4
hsrp 2 slave
follow PRINCIPAL
address 198.18.0.1
!
!
!
interface TenGigE0/0/0/3.3
address-family ipv4
hsrp 3 slave
follow PRINCIPAL
address 198.18.0.9
RP/0/RSP0/CPU0:ASR-9001_1#sh hsrp br
Wed Mar 25 02:13:58.791 MEX
IPv4 Groups:
P indicates configured to preempt.
|
Interface Grp Pri P State Active addr Standby addr Group addr
Te0/0/0/3 4094 70 Init unknown unknown unknown
Te0/0/0/3.2 2 sla Init unknown unknown 198.18.0.1
Te0/0/0/3.3 3 sla Init unknown unknown 198.18.0.9
RP/0/RSP0/CPU0:ASR-9001_1#show controllers np struct 33 np0 location 0/0/CPU0
Wed Mar 25 02:14:30.375 MEX
Node: 0/0/CPU0:
----------------------------------------------------------------
NP: 0 Struct 33: VRRP_MAC
Struct is a PHYSICAL entity
Reserved Entries: 0, Used Entries: 6, Max Entries: 8192
Tks!!!!
03-25-2015 09:06 AM
hey diego,
and in dutch: GEWELDIG :) thanks for letting me know things are working!
talk to you soon
xander
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide