05-27-2015 12:03 PM
Hi Guys,
We are currently in the process of migrating our subscribers from a Ericsson SmartEdge to a ASR9K. Up until last night things have been going fairly well and we had 4500 IPOE Dhcp and 450 PKT subs active, split between 2 NPU on a Mod80-SE line card.
Last night we tried to move over another 2000 subscribers and things did not go so well. We cut over all 48 vlans and 2000 subscribers at the same time and the ASR console started to become sluggish. Then it started to freeze all together for 5-10 min periods and eventually stopped processing Dhcp traffic. We could see the ASR is receiving the Dhcp discover messages but wasn't forwarding them to our Dhcp server. We did notice the Iedged process seemed to be hanging around 25%. At this point we thought maybe we were moving to many subscribers at one time so we deleted all the Sub-Interfaces on the ASR and this again caused the console to freeze again for 10 minutes.
Then we tried to start migrating our subscribers vlan by vlan and things seemed to be going smoother until we started to reach the end of the migration. At this point again the console started to freeze and the Asr stopped processing DHCP traffic for those interfaces.
We are really stumped as to what happened as we figured 2000 subs should be no problem for a beast router like the ASR9K. We have opened a ticket but wanted to reach out to you guys as well.
Has anyone experience anything similar?
We are wondering if having initiator unclassified on the same interface as DHCP could be causing an issue?
Does anything stand out in our config that we are doing wrong?
Really appreciate any insight someone could offer.
Thanks, Chris
Here is a sample of the config for the interfaces and policy maps we were using:
dhcp ipv4
profile QUEBEC proxy
allow-move
helper-address vrf default X.X.X.X giaddr X.X.X.X
interface Bundle-Ether100.802 proxy profile QUEBEC
interface Bundle-Ether100.803 proxy profile QUEBEC
interface Bundle-Ether100.804 proxy profile QUEBEC
interface Bundle-Ether100.805 proxy profile QUEBEC
interface Bundle-Ether100.806 proxy profile QUEBEC
interface Bundle-Ether100.807 proxy profile QUEBEC
interface Bundle-Ether100.808 proxy profile QUEBEC
interface Bundle-Ether100.809 proxy profile QUEBEC
type ipsubscriber BIND_QUEBEC_PUBLIC
ipv4 unnumbered Loopback801
!
type ipsubscriber BIND_QUEBEC_SWITCH
ipv4 unnumbered Loopback815
dynamic-template
type service NET25
service-policy input IN_10M
service-policy output OUT_25M
policy-map IN_10M
class VOIP_CLASS
priority level 1
police rate 500 kbps
!
!
class VIDEO_CLASS
priority level 2
police rate 1 mbps
!
!
class NETWORK_PROTOCOL_CLASS
police rate 512 kbps
!
!
class class-default
police rate 10 mbps burst 1280 kbytes peak-burst 2560 kbytes
!
!
end-policy-map
policy-map OUT_25M
class VOIP_CLASS
priority level 1
police rate 512 kbps
!
!
class VIDEO_CLASS
priority level 2
police rate 30 mbps
!
!
class NETWORK_PROTOCOL_CLASS
shape average 512 kbps
!
class class-default
shape average 25 mbps
!
end-policy-map
interface Bundle-Ether100.803
ipv4 point-to-point
ipv4 unnumbered Loopback815
arp gratuitous ignore
service-policy type control subscriber QUEBEC_PM
encapsulation dot1q 803
ipsubscriber ipv4 l2-connected
initiator dhcp
initiator unclassified-source
!
!
interface Bundle-Ether100.804
ipv4 point-to-point
ipv4 unnumbered Loopback815
arp gratuitous ignore
service-policy type control subscriber QUEBEC_PM
encapsulation dot1q 804
ipsubscriber ipv4 l2-connected
initiator dhcp
initiator unclassified-source
ETC...
interface Loopback801
ipv4 address X.X.X.X 255.255.255.0
ipv4 address X.X.X.X 255.255.255.128 secondary
!
interface Loopback815
ipv4 address 10.8.0.0 255.255.0.0
router static
address-family ipv4 unicast
10.8.2.0/24 Bundle-Ether200.802
10.8.3.0/24 Bundle-Ether200.803
10.8.4.0/24 Bundle-Ether200.804
10.8.5.0/24 Bundle-Ether200.805
10.8.6.0/24 Bundle-Ether200.806
10.8.7.0/24 Bundle-Ether200.807
10.8.8.0/24 Bundle-Ether200.808
10.8.9.0/24 Bundle-Ether200.809
class-map type control subscriber match-any STATIC
match source-address ipv4 X.X.X.X 255.255.255.240
end-class-map
!
class-map type control subscriber match-any QUEBEC_SWITCH
match source-address ipv4 10.8.0.0 255.255.0.0
end-class-map
policy-map type control subscriber QUEBEC_PM
event session-start match-first
class type control subscriber DHCP do-until-failure
10 activate dynamic-template BIND_QUEBEC_PUBLIC
20 authorize aaa list default format USERNAME password novus
!
class type control subscriber STATIC do-until-failure
10 activate dynamic-template BIND_STATIC
20 authorize aaa list default format IPSTATIC password novus
!
class type control subscriber QUEBEC_SWITCH do-all
10 activate dynamic-template BIND_QUEBEC_SWITCH
20 activate dynamic-template NET25
!
!
event authorization-no-response match-first
class type control subscriber class-default do-all
10 activate dynamic-template ACC_START
20 activate dynamic-template NET25
06-03-2015 05:19 AM
hi there!
I think you had a tac case open for this also right? your account SE pointed me to this and we had a few suggestions to resolve this. let me check the tac case you have open to make sure everything is going smooth there in terms of communication and resolution.
cheers
xander
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide