Good morning colleagues.
I moved subscribers to Bundled-ethernet, but session-id's were changed in warm-stanby mode. For example:
"clear" session on Master:
RP/0/RSP0/CPU0:asr9k1_master#sh subscriber session filter ipv4-address 10.243.108.16 det int
Tue Jan 23 07:18:48.730
Interface: Bundle-Ether91.403.ip273
Circuit ID: Unknown
Remote ID: Unknown
Type: IP: Packet-trigger
IPv4 State: Up, Tue Jan 23 07:17:37 2018
IPv4 Address: 10.243.108.16, VRF: default
IPv4 Up helpers: 0x00000040 {IPSUB}
IPv4 Up requestors: 0x00000040 {IPSUB}
Mac Address: 0021.913b.6861
Account-Session Id: 00043971
Nas-Port: 1526829937
User name: 0403.0021913b6861.10.243.108.16
Formatted User name: 0403.0021913b6861.10.243.108.16
Client User name: unknown
Outer VLAN ID: 403
Subscriber Label: 0x00000043
Created: Tue Jan 23 07:17:37 2018
State: Activated
Authentication: unauthenticated
Authorization: authorized
Ifhandle: 0x0001fba0
Session History ID: 8
Access-interface: Bundle-Ether91.403
SRG Flags: 0x00004000
Policy Executed:
event Session-Start match-first [at Tue Jan 23 07:17:37 2018]
class type control subscriber class-default do-until-failure [Succeeded]
10 set-timer TIMER_UNAUTH 1 [cerr: No error][aaa: Success]
20 activate dynamic-template DYNTPL_IP_SUB_26 [cerr: No error][aaa: Success]
30 authorize aaa list default [cerr: No error][aaa: Success]
event Timer-Expiry match-first [at Tue Jan 23 07:18:37 2018]
class type control subscriber UNAUTH_TIMER_CLASS do-all [Succeeded]
10 set-timer TIMER_UNAUTH 3 [cerr: No error][aaa: Success]
20 authorize aaa list default [cerr: No error][aaa: Success]
Session Accounting: disabled
Last COA request received: unavailable
User Profile received from AAA:
Attribute List: 0x4a0129c8
1: session-timeout len= 4 value= 3600(e10)
2: primary-dns len= 4 value= 10.117.162.226
3: inacl len= 17 value= ACL_PERMIT_ANY_IN
4: outacl len= 18 value= ACL_PERMIT_ANY_OUT
5: sub-qos-policy-in len= 14 value= QOS_100000K_IN
6: sub-qos-policy-out len= 15 value= QOS_100000K_OUT
7: sub-pbr-policy-in len= 14 value= PBR_PERMIT_ANY
Services:
Name : DYNTPL_IP_SUB_26
Service-ID : 0x4000002
Type : Multi Template
Status : Applied
-------------------------
[Event History]
Jan 23 07:17:37.280 IPv4 Start
Jan 23 07:17:37.664 IPv4 Up
Jan 23 07:18:37.312 SUBDB produce done [many]
Session migrated from Master to Slave once:
RP/0/RSP0/CPU0:asr9k1_slave#sh subscriber session filter ipv4-address 10.243.108.16 det int
Tue Jan 23 07:22:00.224 TOMSK
Interface: Bundle-Ether91.403.ip190
Circuit ID: Unknown
Remote ID: Unknown
Type: IP: Packet-trigger
IPv4 State: Up, Tue Jan 23 07:21:27 2018
IPv4 Address: 10.243.108.16, VRF: default
IPv4 Up helpers: 0x00000040 {IPSUB}
IPv4 Up requestors: 0x00000040 {IPSUB}
Mac Address: 0021.913b.6861
Account-Session Id: 000005ad
Nas-Port: 1526829937
User name: 0403.0021913b6861.10.243.108.16
Formatted User name: 0403.0021913b6861.10.243.108.16
Client User name: unknown
Outer VLAN ID: 403
Subscriber Label: 0x000005d8
Created: Tue Jan 23 07:21:25 2018
State: Activated
Authentication: unauthenticated
Authorization: authorized
Ifhandle: 0x00016060
Session History ID: 10
Access-interface: Bundle-Ether91.403
SRG Flags: 0x00024000
Policy Executed:
Session Accounting: disabled
Last COA request received: unavailable
User Profile received from AAA:
Attribute List: 0x4a012c50
1: session-timeout len= 4 value= 3600(e10)
2: primary-dns len= 4 value= 10.117.162.226
3: inacl len= 17 value= ACL_PERMIT_ANY_IN
4: outacl len= 18 value= ACL_PERMIT_ANY_OUT
5: sub-qos-policy-in len= 14 value= QOS_100000K_IN
6: sub-qos-policy-out len= 15 value= QOS_100000K_OUT
7: sub-pbr-policy-in len= 14 value= PBR_PERMIT_ANY
Services:
Name : DYNTPL_IP_SUB_26
Service-ID : 0x4000002
Type : Multi Template
Status : Applied
-------------------------
[Event History]
Jan 23 07:21:26.912 IPv4 Up
Jan 23 07:21:26.912 SUBDB produce done
Session came back from Slave to Master:
RP/0/RSP0/CPU0:asr9k1_Master#sh subscriber session filter ipv4-address 10.243.108.16 det int
Tue Jan 23 07:21:38.603 TOMSK
Interface: None
Circuit ID: Unknown
Remote ID: Unknown
Type: IP: Packet-trigger
IPv4 State: Up Pending, Tue Jan 23 07:21:37 2018
IPv4 Address: 10.243.108.16, VRF: default
Mac Address: 0021.913b.6861
Account-Session Id: 00000aee
Nas-Port: 1526829937
User name: 0403.0021913b6861.10.243.108.16
Formatted User name: 0403.0021913b6861.10.243.108.16
Client User name: unknown
Outer VLAN ID: 403
Subscriber Label: 0x000005da
Created: Tue Jan 23 07:21:37 2018
State: Connected
Authentication: unauthenticated
Authorization: authorized
Ifhandle: 0x00000000
Session History ID: 0
Access-interface: Bundle-Ether91.403
SRG Flags: 0x00064004
Policy Executed:
Session Accounting: disabled
Last COA request received: unavailable
User Profile received from AAA:
Attribute List: 0x4a012ba0
1: session-timeout len= 4 value= 3600(e10)
2: primary-dns len= 4 value= 10.117.162.226
3: inacl len= 17 value= ACL_PERMIT_ANY_IN
4: outacl len= 18 value= ACL_PERMIT_ANY_OUT
5: sub-qos-policy-in len= 14 value= QOS_100000K_IN
6: sub-qos-policy-out len= 15 value= QOS_100000K_OUT
7: sub-pbr-policy-in len= 14 value= PBR_PERMIT_ANY
Services:
Name : DYNTPL_IP_SUB_26
Service-ID : 0x4000002
Type : Multi Template
Status : Request PD Association
I tried to switch SRG-mode to hot-standby. I saw error messages when sessions were migrating between nodes:
[Event History]
Jan 23 08:03:44.768 SUBDB produce done(fail) [many]
Interface: None
Circuit ID: Unknown
Remote ID: Unknown
Type: IP: Packet-trigger
IPv4 State: Up, Tue Jan 23 07:48:46 2018
IPv4 Address: 10.227.251.178, VRF: default
IPv4 Up helpers: 0x00000040 {IPSUB}
IPv4 Up requestors: 0x00000040 {IPSUB}
Mac Address: c8d3.a3ac.2533
Account-Session Id: 00003323
Nas-Port: 1526871075
User name: 0564.c8d3a3ac2533.10.227.251.178
Formatted User name: 0564.c8d3a3ac2533.10.227.251.178
Client User name: unknown
Outer VLAN ID: 564
Subscriber Label: 0x00000fc3
Created: Tue Jan 23 07:27:02 2018
State: Activated
Authentication: unauthenticated
Authorization: authorized
Ifhandle: 0x00000000
Session History ID: 328
Access-interface: Bundle-Ether91.564
SRG Flags: 0x00030000
Policy Executed:
event Timer-Expiry match-first [at Tue Jan 23 07:46:47 2018]
class type control subscriber UNAUTH_TIMER_CLASS do-all [Succeeded] {repeated 1}
10 set-timer TIMER_UNAUTH 3 [cerr: No error][aaa: Success]
20 authorize aaa list default [cerr: 'iEdge' detected the 'warning' condition 'iEdge SVM, Unable to complete this request'][aaa: Success]
Session Accounting: disabled
Last COA request received: unavailable
User Profile received from AAA: None
No Services
[Event History]
Jan 23 07:48:45.568 IPv4 Up
Jan 23 08:03:46.816 SUBDB produce done(fail) [many]
I put configuration of both routers with this post. What do i incorrect ?
The 2nd question: state-control-routes doesn't work. If node became master - summarized-routes doesn't appear on BGP-advertized-routes and show route subscriber shows only /32 hosts and virtual interfaces of subscribers.
The 3d question is: if i put one physical port in one bundled-ether, and put 2nd physical port from another NP to 2nd bundle. 1st bundle will be Master in SRG 1 and 2nd Bundle will be SLAVE in SRG 2. Can i terminate 64k session (balanced by SRGroups in hot - standby mode) summary on two 9k1 routers ? 32K sessions per SRG, or 16K in 4 SRGs ?
Thank you
Best regards
Sergey
