cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
393
Views
0
Helpful
1
Replies

ASR9K BNG Migration - ASR console Freezing and Stops processing DHCP

administrator
Level 1
Level 1

Hi Guys,

 

We are currently in the process of migrating our subscribers from a Ericsson SmartEdge to a ASR9K. Up until last night things have been going fairly well and we had 4500 IPOE Dhcp and 450 PKT subs active, split between 2 NPU on a Mod80-SE line card. 

Last night we tried to move over another 2000 subscribers and things did not go so well. We cut over all 48 vlans and 2000 subscribers at the same time and the ASR console started to become sluggish. Then it started to freeze all together for 5-10 min periods and eventually stopped processing Dhcp traffic. We could see the ASR is receiving the Dhcp discover messages but wasn't forwarding them to our Dhcp server. We did notice the Iedged process seemed to be hanging around 25%. At this point we thought maybe we were moving to many subscribers at one time so we deleted all the Sub-Interfaces on the ASR and this again caused the console to freeze again for 10 minutes. 

Then we tried to start migrating our subscribers vlan by vlan and things seemed to be going smoother until we started to reach the end of the migration. At this point again the console started to freeze and the Asr stopped processing DHCP traffic for those interfaces.

We are really stumped as to what happened as we figured 2000 subs should be no problem for a beast router like the ASR9K. We have opened a ticket but wanted to reach out to you guys as well.

 

Has anyone experience anything similar? 

We are wondering if having initiator unclassified on the same interface as DHCP could be causing an issue?

Does anything stand out in our config that we are doing wrong?

Really appreciate any insight someone could offer.

Thanks, Chris

 

Here is a sample of the config for the interfaces and policy maps we were using:

 

dhcp ipv4
 profile QUEBEC proxy
  allow-move
  helper-address vrf default X.X.X.X giaddr X.X.X.X


 interface Bundle-Ether100.802 proxy profile QUEBEC
 interface Bundle-Ether100.803 proxy profile QUEBEC
 interface Bundle-Ether100.804 proxy profile QUEBEC
 interface Bundle-Ether100.805 proxy profile QUEBEC
 interface Bundle-Ether100.806 proxy profile QUEBEC
 interface Bundle-Ether100.807 proxy profile QUEBEC
 interface Bundle-Ether100.808 proxy profile QUEBEC
 interface Bundle-Ether100.809 proxy profile QUEBEC
 

 type ipsubscriber BIND_QUEBEC_PUBLIC
  ipv4 unnumbered Loopback801
 !
 type ipsubscriber BIND_QUEBEC_SWITCH
  ipv4 unnumbered Loopback815

dynamic-template
 type service NET25
  service-policy input IN_10M
  service-policy output OUT_25M

policy-map IN_10M
 class VOIP_CLASS
  priority level 1
  police rate 500 kbps
  !
 !
 class VIDEO_CLASS
  priority level 2
  police rate 1 mbps
  !
 !
 class NETWORK_PROTOCOL_CLASS
  police rate 512 kbps
  !
 !
 class class-default
  police rate 10 mbps burst 1280 kbytes peak-burst 2560 kbytes
  !
 !
 end-policy-map

policy-map OUT_25M
 class VOIP_CLASS
  priority level 1
  police rate 512 kbps
  !
 !
 class VIDEO_CLASS
  priority level 2
  police rate 30 mbps
  !
 !
 class NETWORK_PROTOCOL_CLASS
  shape average 512 kbps
 !
 class class-default
  shape average 25 mbps
 !
 end-policy-map

 

 

interface Bundle-Ether100.803
 ipv4 point-to-point
 ipv4 unnumbered Loopback815
 arp gratuitous ignore
 service-policy type control subscriber QUEBEC_PM
 encapsulation dot1q 803
 ipsubscriber ipv4 l2-connected
  initiator dhcp
  initiator unclassified-source
 !
!
interface Bundle-Ether100.804
 ipv4 point-to-point
 ipv4 unnumbered Loopback815
 arp gratuitous ignore
 service-policy type control subscriber QUEBEC_PM
 encapsulation dot1q 804
 ipsubscriber ipv4 l2-connected
  initiator dhcp
  initiator unclassified-source

ETC...

interface Loopback801
 ipv4 address X.X.X.X 255.255.255.0
 ipv4 address X.X.X.X 255.255.255.128 secondary

!
interface Loopback815
 ipv4 address 10.8.0.0 255.255.0.0

router static
 address-family ipv4 unicast
  10.8.2.0/24 Bundle-Ether200.802
  10.8.3.0/24 Bundle-Ether200.803
  10.8.4.0/24 Bundle-Ether200.804
  10.8.5.0/24 Bundle-Ether200.805
  10.8.6.0/24 Bundle-Ether200.806
  10.8.7.0/24 Bundle-Ether200.807
  10.8.8.0/24 Bundle-Ether200.808
  10.8.9.0/24 Bundle-Ether200.809

class-map type control subscriber match-any STATIC
 match source-address ipv4 X.X.X.X 255.255.255.240

 end-class-map
!
class-map type control subscriber match-any QUEBEC_SWITCH
 match source-address ipv4 10.8.0.0 255.255.0.0

 end-class-map


policy-map type control subscriber QUEBEC_PM
 event session-start match-first
  class type control subscriber DHCP do-until-failure
   10 activate dynamic-template BIND_QUEBEC_PUBLIC
   20 authorize aaa list default format USERNAME password novus
  !
  class type control subscriber STATIC do-until-failure
   10 activate dynamic-template BIND_STATIC
   20 authorize aaa list default format IPSTATIC password novus
  !
  class type control subscriber QUEBEC_SWITCH do-all
   10 activate dynamic-template BIND_QUEBEC_SWITCH
   20 activate dynamic-template NET25
  !
 !
 event authorization-no-response match-first
  class type control subscriber class-default do-all
   10 activate dynamic-template ACC_START
   20 activate dynamic-template NET25

 

 

1 Reply 1

xthuijs
Cisco Employee
Cisco Employee

hi there!

I think you had a tac case open for this also right? your account SE pointed me to this and we had a few suggestions to resolve this. let me check the tac case you have open to make sure everything is going smooth there in terms of communication and resolution.

cheers

xander