[nsp] RE: Re: another counter funny
Martin Wills
MWills at cxtec.com
Thu Apr 29 08:30:03 EDT 2004
Hi,
If the 2x interfaces are set to F.duplex, & the collision counters are
increasing- I'd suspect there's a hardware or software failure. I might
suggest you verify any known-issues in the version of firmware that's
running on the platform(s) & upgrade the code if necessary (if possible- go
w/a mainline ver. that's known-stable). If there does not exist any known
issues w/your existing ver. of OS- I'd be led to believe that there is a
hardware failure- RMA time.
/martin
-----Original Message-----
From: cisco-nsp-request at puck.nether.net
[mailto:cisco-nsp-request at puck.nether.net]
Sent: Thursday, April 29, 2004 4:53 AM
To: cisco-nsp at puck.nether.net
Subject: cisco-nsp Digest, Vol 17, Issue 74
Send cisco-nsp mailing list submissions to
cisco-nsp at puck.nether.net
To subscribe or unsubscribe via the World Wide Web, visit
https://puck.nether.net/mailman/listinfo/cisco-nsp
or, via email, send a message with subject or body 'help' to
cisco-nsp-request at puck.nether.net
You can reach the person managing the list at
cisco-nsp-owner at puck.nether.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of cisco-nsp digest..."
Today's Topics:
1. Re: another counter funny (Benjie Ko)
2. Re: another counter funny (Gert Doering)
3. Re: another counter funny (Gert Doering)
4. RE: Bridging? (Vincent De Keyzer)
5. RE: Bridging? (Vincent De Keyzer)
6. Re: Bridging? (Bruce Pinsky)
7. RE: Bridging? (Vincent De Keyzer)
8. Re: Bridging? (Bruce Pinsky)
9. RE: Bridging? (Vincent De Keyzer)
----------------------------------------------------------------------
Message: 1
Date: Wed, 28 Apr 2004 19:05:27 -0700 (PDT)
From: Benjie Ko <gerwalk1 at yahoo.com>
Subject: Re: [nsp] another counter funny
To: Gert Doering <gert at greenie.muc.de>, cisco-nsp at puck.nether.net
Message-ID: <20040429020527.25397.qmail at web40806.mail.yahoo.com>
Content-Type: text/plain; charset=us-ascii
> Are you sure that this interface did never run
> half-duplex for some time?
pretty sure. configured for full duplex. collisions
are still increasing even if its set to full duplex.
Weird, the increase in collission counters is not
incremental but random at very large numbers.
I cleared the interface just now and from 0 collision
it went to 2145378270.
Anyways no impact on performance.
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
http://hotjobs.sweepstakes.yahoo.com/careermakeover
------------------------------
Message: 2
Date: Thu, 29 Apr 2004 09:19:13 +0200
From: Gert Doering <gert at greenie.muc.de>
Subject: Re: [nsp] another counter funny
To: Hudson Delbert J Contr 61 CS/SCBN
<Delbert.Hudson at losangeles.af.mil>
Cc: cisco-nsp at puck.nether.net
Message-ID: <20040429091913.I26458 at greenie.muc.de>
Content-Type: text/plain; charset=us-ascii
Hi,
On Wed, Apr 28, 2004 at 09:50:03AM -0700, Hudson Delbert J Contr 61 CS/SCBN
wrote:
> who cares as long the bytes flow.
>
> its a long standing credo of cisco software development
> that counting bytes will never be as important as moving them.
We do care. We monitor our interfaces' input and output error counters
closely, and generate alarms if specific events happen.
So it's a major nuisance to get alarms for things that are not broken...
> this focus on how screwed up cisco counters are is an old and
weather-beaten
> thread.
The amazing thing is how new software trains revive old counter bugs
(12.2S has the "show int stuck" behaviour that is long fixed in 12.0S) and
at the same time invent new ones.
[..]
> counters are low priority in the IOS execution space and is treated as
such.
You've never had to bill customers based on bandwidth/volume used, have
you? For the ISP business, working counters are *quite* important.
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany
gert at greenie.muc.de
fax: +49-89-35655025
gert at net.informatik.tu-muenchen.de
------------------------------
Message: 3
Date: Thu, 29 Apr 2004 09:37:52 +0200
From: Gert Doering <gert at greenie.muc.de>
Subject: Re: [nsp] another counter funny
To: Benjie Ko <gerwalk1 at yahoo.com>
Cc: Gert Doering <gert at greenie.muc.de>, cisco-nsp at puck.nether.net
Message-ID: <20040429093752.K26458 at greenie.muc.de>
Content-Type: text/plain; charset=us-ascii
Hi,
On Wed, Apr 28, 2004 at 07:05:27PM -0700, Benjie Ko wrote:
> > Are you sure that this interface did never run
> > half-duplex for some time?
> pretty sure. configured for full duplex. collisions
> are still increasing even if its set to full duplex.
> Weird, the increase in collission counters is not
> incremental but random at very large numbers.
> I cleared the interface just now and from 0 collision
> it went to 2145378270.
> Anyways no impact on performance.
Amazing. This is another new one to me :-)
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany
gert at greenie.muc.de
fax: +49-89-35655025
gert at net.informatik.tu-muenchen.de
------------------------------
Message: 4
Date: Thu, 29 Apr 2004 09:52:01 +0200
From: "Vincent De Keyzer" <vincent at dekeyzer.net>
Subject: RE: [nsp] Bridging?
To: <cisco-nsp at puck.nether.net>
Message-ID:
<0A89B09D5909F94A96C5480667C6BE8936A1E3 at star_academy.office.mactelecom.com>
Content-Type: text/plain; charset="Windows-1252"
Bruce,
thank you so much! PPP half-bridging is exactly what I am trying to achieve.
Now Serial0/0:0 is up (ppp neg complete), but there is a MAC address
problem: when I am trying to ping from the Ethernet host, here is what I see
on the E1 router:
*Mar 1 23:54:03.006 CET: IP ARP: rcvd req src 10.159.159.202
0006.d6ca.4800, dst 10.159.159.201 Serial0/1:0
*Mar 1 23:54:03.010 CET: IP ARP: creating entry for IP address:
10.159.159.202, hw: 0006.d6ca.4800
*Mar 1 23:54:03.010 CET: %IP-4-ZERO_ADDR: Zero MAC address for
10.159.159.201 in ARP cache
2621#sh arp | i 10.159.159.20
Internet 10.159.159.202 2 0006.d6ca.4800 ARPA Serial0/1:0
2621#
Config is as follows:
2621#sh ru int s0/1:0
Building configuration...
Current configuration : 121 bytes
!
interface Serial0/1:0
ip address 10.159.159.201 255.255.255.252
encapsulation ppp
no cdp enable
ppp bridge ip
end
2621#
So it seems that it does not work because there is no MAC address assigned
to this serial interface.
How can I assign one?...
Vincent
> -----Original Message-----
> From: Bruce Pinsky [mailto:bep at whack.org]
> Sent: mercredi 28 avril 2004 23:09
> To: Vincent De Keyzer
> Cc: cisco-nsp at puck.nether.net; 'Todd, Douglas M.'
> Subject: Re: [nsp] Bridging?
>
>
> Vincent De Keyzer wrote:
>
> > Douglas,
> >
> > your efforts to understand my problem are remarkable and I highly
> > appreciate them.
> >
> > But I haven't been clear enough once again (I could say
> it's because
> > english is not my mother language, but I am not sure I
> could do better
> > in french... :) so let me
> > try another way.
> >
> > IP ranges:
> > A.B.1.0/24: backbone ranges
> > A.B.2.0/24: PtP (/30) ranges
> > A.B.3.0/24: customer X range
> > A.B.4.0/24: customer Y range
> >
> > Current situation:
> > * a 2621 with
> > Fa0/0 = A.B.1.2/28
> > Serial 0/0:0 = A.B.2.1/30 for customer X
> > Serial 0/1:0 = A.B.2.5/30 for customer Y
> > * customer X has a 1600+CSU/DSU with
> > Serial0 = A.B.2.2/30
> > Ethernet0 = A.B.3.1/24
> > * customer X has a firewall with
> > WAN = A.B.3.2/24
> > * customer Y has a 1600+CSU/DSU with
> > Serial0 = A.B.2.6/30
> > Ethernet0 = A.B.4.1/24
> > * customer Y has a firewall with
> > WAN = A.B.4.2/24
> >
> > The 2621 is routing IP packets between customer ranges
> A.B.3.0/24 and
> > A.B.4.0/24 and the core network behind Fa0/0.
> >
> > And, after replacing the (1600+CSU/DSU) by a E1/Eth bridge, I would
> > like it to become:
> > * a 2621 with
> > Fa0/0 = A.B.1.2/28
> > Whatever0 = A.B.3.1/24
> > Whatever1 = A.B.4.1/24
> > * customers X&Y have an E1/Eth bridge and their FWs keep the same
> > config
> >
> > ... where "Whatever" interfaces are whatever kind of interface it
> > takes to have this working...
> >
> > Now maybe this is now even called bridging... but is it possible?
> >
> > The goal is of all this is to replace 1600+CSU/DSU by less
> expensive
> > equipment where it's not required.
> >
>
> Sounds like you want PPP half-bridging. See:
> http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1831
/products_configuration_guide_chapter09186a00800d9845.html#1001479
So at the customer site, you need an E1/Eth bridge that does PPP on the E1
side.
--
=========
bep
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
------------------------------
Message: 5
Date: Thu, 29 Apr 2004 10:03:10 +0200
From: "Vincent De Keyzer" <vincent at dekeyzer.net>
Subject: RE: [nsp] Bridging?
To: <cisco-nsp at puck.nether.net>
Message-ID:
<0A89B09D5909F94A96C5480667C6BE8936A1E4 at star_academy.office.mactelecom.com>
Content-Type: text/plain; charset="Windows-1252"
... ok, found the "mac-address" command on the Serial interface:
2621#sh ru int s0/1:0
Building configuration...
Current configuration : 149 bytes
!
interface Serial0/1:0
mac-address 0001.4255.8f40
ip address 10.159.159.201 255.255.255.252
encapsulation ppp
no cdp enable
ppp bridge ip
end
But, although the Ethernet host at the other end sees the MAC address, the
router does not seem to install the MAC address in its own arp table!...
2621#sh arp | i 10.159.159.20
Internet 10.159.159.202 3 0006.d6ca.4800 ARPA Serial0/1:0
2621#
I only see the remote!
Looks like a bug, right? Or am I missing some magic piece of config?
Vincent
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of
> Vincent De Keyzer
> Sent: jeudi 29 avril 2004 9:52
> To: cisco-nsp at puck.nether.net
> Subject: RE: [nsp] Bridging?
>
>
> Bruce,
>
> thank you so much! PPP half-bridging is exactly what I am
> trying to achieve.
>
> Now Serial0/0:0 is up (ppp neg complete), but there is a MAC address
> problem: when I am trying to ping from the Ethernet host,
> here is what I see on the E1 router:
>
> *Mar 1 23:54:03.006 CET: IP ARP: rcvd req src 10.159.159.202
> 0006.d6ca.4800, dst 10.159.159.201 Serial0/1:0 *Mar 1
> 23:54:03.010 CET: IP ARP: creating entry for IP address:
> 10.159.159.202, hw: 0006.d6ca.4800 *Mar 1 23:54:03.010 CET:
> %IP-4-ZERO_ADDR: Zero MAC address for 10.159.159.201 in ARP
> cache 2621#sh arp | i 10.159.159.20
> Internet 10.159.159.202 2 0006.d6ca.4800 ARPA
> Serial0/1:0
> 2621#
>
> Config is as follows:
>
> 2621#sh ru int s0/1:0
> Building configuration...
>
> Current configuration : 121 bytes
> !
> interface Serial0/1:0
> ip address 10.159.159.201 255.255.255.252
> encapsulation ppp
> no cdp enable
> ppp bridge ip
> end
>
> 2621#
>
> So it seems that it does not work because there is no MAC
> address assigned to this serial interface.
>
> How can I assign one?...
>
> Vincent
>
>
> > -----Original Message-----
> > From: Bruce Pinsky [mailto:bep at whack.org]
> > Sent: mercredi 28 avril 2004 23:09
> > To: Vincent De Keyzer
> > Cc: cisco-nsp at puck.nether.net; 'Todd, Douglas M.'
> > Subject: Re: [nsp] Bridging?
> >
> >
> > Vincent De Keyzer wrote:
> >
> > > Douglas,
> > >
> > > your efforts to understand my problem are remarkable and I highly
> > > appreciate them.
> > >
> > > But I haven't been clear enough once again (I could say
> > it's because
> > > english is not my mother language, but I am not sure I
> > could do better
> > > in french... :) so let me
> > > try another way.
> > >
> > > IP ranges:
> > > A.B.1.0/24: backbone ranges
> > > A.B.2.0/24: PtP (/30) ranges
> > > A.B.3.0/24: customer X range
> > > A.B.4.0/24: customer Y range
> > >
> > > Current situation:
> > > * a 2621 with
> > > Fa0/0 = A.B.1.2/28
> > > Serial 0/0:0 = A.B.2.1/30 for customer X
> > > Serial 0/1:0 = A.B.2.5/30 for customer Y
> > > * customer X has a 1600+CSU/DSU with
> > > Serial0 = A.B.2.2/30
> > > Ethernet0 = A.B.3.1/24
> > > * customer X has a firewall with
> > > WAN = A.B.3.2/24
> > > * customer Y has a 1600+CSU/DSU with
> > > Serial0 = A.B.2.6/30
> > > Ethernet0 = A.B.4.1/24
> > > * customer Y has a firewall with
> > > WAN = A.B.4.2/24
> > >
> > > The 2621 is routing IP packets between customer ranges
> > A.B.3.0/24 and
> > > A.B.4.0/24 and the core network behind Fa0/0.
> > >
> > > And, after replacing the (1600+CSU/DSU) by a E1/Eth
> bridge, I would
> > > like it to become:
> > > * a 2621 with
> > > Fa0/0 = A.B.1.2/28
> > > Whatever0 = A.B.3.1/24
> > > Whatever1 = A.B.4.1/24
> > > * customers X&Y have an E1/Eth bridge and their FWs keep the same
> > > config
> > >
> > > ... where "Whatever" interfaces are whatever kind of interface it
> > > takes to have this working...
> > >
> > > Now maybe this is now even called bridging... but is it possible?
> > >
> > > The goal is of all this is to replace 1600+CSU/DSU by less
> > expensive
> > > equipment where it's not required.
> > >
> >
> > Sounds like you want PPP half-bridging. See:
> > http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1831
> /products_configuration_guide_chapter09186a00800d9845.html#1001479
>
> So at the customer site, you need an E1/Eth bridge that does
> PPP on the E1
> side.
>
> --
> =========
> bep
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco> -nsp
> archive at
> http://puck.nether.net/pipermail/cisco-nsp/
>
>
> ---
> Incoming mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
>
>
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
------------------------------
Message: 6
Date: Thu, 29 Apr 2004 01:06:42 -0700
From: Bruce Pinsky <bep at whack.org>
Subject: Re: [nsp] Bridging?
To: Vincent De Keyzer <vincent at dekeyzer.net>
Cc: cisco-nsp at puck.nether.net
Message-ID: <4090B792.9030203 at whack.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Vincent De Keyzer wrote:
> Bruce,
>
> thank you so much! PPP half-bridging is exactly what I am trying to
achieve.
>
> Now Serial0/0:0 is up (ppp neg complete), but there is a MAC address
> problem: when I am trying to ping from the Ethernet host, here is what I
see
> on the E1 router:
>
> *Mar 1 23:54:03.006 CET: IP ARP: rcvd req src 10.159.159.202
> 0006.d6ca.4800, dst 10.159.159.201 Serial0/1:0
> *Mar 1 23:54:03.010 CET: IP ARP: creating entry for IP address:
> 10.159.159.202, hw: 0006.d6ca.4800
> *Mar 1 23:54:03.010 CET: %IP-4-ZERO_ADDR: Zero MAC address for
> 10.159.159.201 in ARP cache
> 2621#sh arp | i 10.159.159.20
> Internet 10.159.159.202 2 0006.d6ca.4800 ARPA Serial0/1:0
> 2621#
>
> Config is as follows:
>
> 2621#sh ru int s0/1:0
> Building configuration...
>
> Current configuration : 121 bytes
> !
> interface Serial0/1:0
> ip address 10.159.159.201 255.255.255.252
> encapsulation ppp
> no cdp enable
> ppp bridge ip
> end
>
> 2621#
>
> So it seems that it does not work because there is no MAC address assigned
> to this serial interface.
>
> How can I assign one?...
>
What version are you running? There are a few bugs that match this symptom.
--
=========
bep
------------------------------
Message: 7
Date: Thu, 29 Apr 2004 10:10:22 +0200
From: "Vincent De Keyzer" <vincent at dekeyzer.net>
Subject: RE: [nsp] Bridging?
To: <cisco-nsp at puck.nether.net>
Message-ID:
<0A89B09D5909F94A96C5480667C6BE8936A1E6 at star_academy.office.mactelecom.com>
Content-Type: text/plain; charset="Windows-1252"
> What version are you running? There are a few bugs that
> match this symptom.
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-D-M), Version 12.2(23a), RELEASE SOFTWARE
(fc2)
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Tue 30-Mar-04 15:04 by kellmill
Image text-base: 0x8000808C, data-base: 0x80B5D1C0
V
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
------------------------------
Message: 8
Date: Thu, 29 Apr 2004 01:13:51 -0700
From: Bruce Pinsky <bep at whack.org>
Subject: Re: [nsp] Bridging?
To: Vincent De Keyzer <vincent at dekeyzer.net>
Cc: cisco-nsp at puck.nether.net
Message-ID: <4090B93F.7020507 at whack.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Vincent De Keyzer wrote:
> Bruce,
>
> thank you so much! PPP half-bridging is exactly what I am trying to
achieve.
>
> Now Serial0/0:0 is up (ppp neg complete), but there is a MAC address
> problem: when I am trying to ping from the Ethernet host, here is what I
see
> on the E1 router:
>
> *Mar 1 23:54:03.006 CET: IP ARP: rcvd req src 10.159.159.202
> 0006.d6ca.4800, dst 10.159.159.201 Serial0/1:0
> *Mar 1 23:54:03.010 CET: IP ARP: creating entry for IP address:
> 10.159.159.202, hw: 0006.d6ca.4800
> *Mar 1 23:54:03.010 CET: %IP-4-ZERO_ADDR: Zero MAC address for
> 10.159.159.201 in ARP cache
> 2621#sh arp | i 10.159.159.20
> Internet 10.159.159.202 2 0006.d6ca.4800 ARPA Serial0/1:0
> 2621#
>
Also, can you get past the router, i.e. is this only when you ping the
router interface? What does "show int" indicate about your PPP status?
--
=========
bep
------------------------------
Message: 9
Date: Thu, 29 Apr 2004 10:46:41 +0200
From: "Vincent De Keyzer" <vincent at dekeyzer.net>
Subject: RE: [nsp] Bridging?
To: <cisco-nsp at puck.nether.net>
Message-ID:
<0A89B09D5909F94A96C5480667C6BE8936A1E7 at star_academy.office.mactelecom.com>
Content-Type: text/plain; charset="Windows-1252"
> Also, can you get past the router, i.e. is this only when you
> ping the router interface?
Quite interestingly, telnet from the host to the router hangs in a way (the
"Open" message) that seems to indicate that *some* 2-way communication
happens:
alfonso>telnet 10.159.159.201
Trying 10.159.159.201 ... Open
...and then nothing. On the router I see an incoming telnet session:
2621>sh users
Line User Host(s) Idle Location
66 vty 0 idle 00:00:00 10.159.159.202
So what: only small packets go both ways?...
> What does "show int" indicate about your
> PPP status?
It's looking good IMHO:
2621>sh int s0/1:0
Serial0/1:0 is up, line protocol is up
Hardware is PowerQUICC Serial
Internet address is 10.159.159.201/30
MTU 1500 bytes, BW 1984 Kbit, DLY 20000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation PPP, loopback not set
Keepalive set (10 sec)
ARP type: ARPA, ARP Timeout 04:00:00
LCP Open
Open: BRIDGECP
Last input 00:00:08, output 00:00:08, output hang never
Last clearing of "show interface" counters 01:09:58
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: weighted fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 0/1/256 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1488 kilobits/sec
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
2615 packets input, 187224 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
446 packets output, 10740 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
Timeslot(s) Used:1-31, SCC: 3, Transmitter delay is 0 flags
2621>
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.670 / Virus Database: 432 - Release Date: 27/04/2004
------------------------------
_______________________________________________
cisco-nsp mailing list
cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
End of cisco-nsp Digest, Vol 17, Issue 74
*****************************************
More information about the cisco-nsp
mailing list