I'm sending a framed-route attribute from Radius server to ASR 9k6. I'm Using l2-connected, DHCP initiated, DHCP server is local, but i'm passing framed-route via radius. I'm running IOS XR 6.4.2
The problem is I see the route is installing correctly and I have connectively, but it's hitting the Adjacency control plane and is punting the packets in the downstream direction and limiting to about 10meg per second. I believe i have verified this is the issue by increasing the adjacency expection rate to 10000, which took my download to almost 100meg. When no routed network is applied qos functions correctly in both directions and speeds are as expected
RP/0/RSP0/CPU0:Lab-ASR-9006#show lpts pifib hardware static-police location 0/0/cpu0 | i PUNT_ADJ
PUNT_ADJ NETIO_LOW 1000 200 706698 220839 Local
****configuration changed to get download over 10 meg***
Lab-ASR-9006(config)#exception adjacency rate 10000
****ASR 9k6 configuration****
pool vrf default ipv4 DHCP1
network 172.22.0.0/24 default-router 172.22.0.1
dhcp ipv4
profile DHCP_SERVER1 server
lease 0 0 10
pool DHCP1
dns-server 192.168.168.2
!
interface Bundle-Ether2.82 server profile DHCP_SERVER1
type ipsubscriber IPOE_Template
ipv4 unnumbered Loopback12
ipv4 unreachables disable
interface Bundle-Ether2
description Subscriber_Inbound-interface
arp learning disable
bundle load-balancing hash dst-ip
interface Bundle-Ether2.82
description DHCP-Test
ipv4 point-to-point
ipv4 unnumbered Loopback12
arp learning disable
ipv4 unreachables disable
service-policy type control subscriber IPOE_PM-4
encapsulation dot1q 82
ipsubscriber ipv4 l2-connected
initiator dhcp
!
ipv4 access-group DHCP-ONLY ingress
interface Loopback12
description loopback for DHCP_triggered IP service
ipv4 address 172.22.0.1 255.255.255.0
aaa attribute format IPOE_AUTH_FORMAT
circuit-id
class-map type control subscriber match-any DHCP_CM
match protocol dhcpv4
end-class-map
policy-map type control subscriber IPOE_PM-4
event session-start match-first
class type control subscriber DHCP_CM do-until-failure
5 activate dynamic-template IPOE_Template
10 authorize aaa list BNG_RADIUS format IPOE_AUTH_FORMAT password xxx
!
!
event authorization-failure match-all
class type control subscriber DHCP_CM do-all
10 disconnect
!
****show subscriber routes and radius response***
RP/0/RSP0/CPU0:Lab-ASR-9006#show subscriber session all
Thu Apr 6 07:28:17.526 UTC
Codes: IN - Initialize, CN - Connecting, CD - Connected, AC - Activated,
ID - Idle, DN - Disconnecting, ED - End
Type Interface State Subscriber IP Addr / Prefix
LNS Address (Vrf)
--------------------------------------------------------------------------------
PPPoE:PTA BE2.42.pppoe5630 AC 172.16.91.138 (default)
IP:DHCP BE2.82.ip90 AC 172.22.0.253 (default)
IP:DHCP BE2.82.ip78 AC 172.22.0.22 (default)
RP/0/RSP0/CPU0:Lab-ASR-9006#show route subscriber
Thu Apr 6 07:29:46.948 UTC
A 172.16.91.138/32 is directly connected, 1w2d, Bundle-Ether2.42.pppoe5630
A 172.22.0.22/32 is directly connected, 19:54:20, Bundle-Ether2.82.ip78
A 172.22.0.253/32 is directly connected, 01:09:43, Bundle-Ether2.82.ip90
A 172.23.1.0/29 [1/0] via 172.22.0.253, 01:09:43
RP/0/RSP0/CPU0:Lab-ASR-9006#show dhcp ipv4 server binding
Thu Apr 6 07:30:22.834 UTC
Lease
MAC Address IP Address State Remaining Interface VRF Sublabel
-------------- -------------- --------- --------- ------------------- --------- ----------
4877.461a.8c51 172.22.0.22 BOUND 319 BE2.82 default 0x16c
3872.c0e0.9efe 172.22.0.253 BOUND 583 BE2.82 default 0xff
Radius Debug
radiusd[1155]: RADIUS: Received from id 207 192.168.168.5:1812, Access-Accept, len 257
radiusd[1155]: RADIUS: authenticator CE 97 3B 9E F9 52 92 C9 - 99 89 EA 05 DE C0 9E AE
radiusd[1155]: RADIUS: Framed-IP-Address [8] 6 172.22.0.253
radiusd[1155]: RADIUS: Vendor,Cisco [26] 35
radiusd[1155]: RADIUS: Cisco AVpair [1] 29 ip:sub-qos-policy-out=50meg
radiusd[1155]: RADIUS: Vendor,Cisco [26] 41
radiusd[1155]: RADIUS: Cisco AVpair [1] 35 ip:sub-qos-policy-in=50meg-upload
radiusd[1155]: RADIUS: Vendor,Cisco [26] 56
radiusd[1155]: RADIUS: Cisco AVpair [1] 50 subscriber:accounting-list=BNG_ACCOUNTING_RAD3.0
radiusd[1155]: RADIUS: Acct-Interim-Interval[85] 6 86400
radiusd[1155]: RADIUS: Vendor,Cisco [26] 33
radiusd[1155]: RADIUS: Cisco AVpair [1] 27 primary-dns=192.168.168.2
radiusd[1155]: RADIUS: Framed-IP-Netmask [9] 6 255.255.255.0
radiusd[1155]: RADIUS: Vendor,Cisco [26] 39
radiusd[1155]: RADIUS: Cisco AVpair [1] 33 ipv4-default-gateway=172.22.0.1
radiusd[1155]: RADIUS: Framed-Route [22] 15 172.23.1.0/29
