[c-nsp] GSR 12012 problem with 10720 VPN connection

[Oliver Boehmer (oboehmer)]

Joe,

50% packet loss in a load-sharing environment points to a possible problem in the FIB/LFIB over one of the two paths. This also explains why disabling/enabling MPLS on this interface fixed the problem.
Without any additional information, it is difficult to troubleshoot further. 12.0(18)ST is pretty old code, so you might want to consider upgrading to a more recent IOS release (if you're still using linecards with 64MB route memory, 12.0(23)S6, otherwise a more recent 12.0S like 12.0(26)S5). 

	oli

Joe Shen <> wrote on Tuesday, February 01, 2005 5:52 AM:

> Hi,
> 
> we met a problem with Cisco GSR 12012 which acts as P
> router in our mpls vpn network.
> 
> A 10720 router acts as MPLS-VPN PE which connects to
> GSR 12012 with a GE link. This morning, our customer
> said their router could not learn VPN route. And, we
> found 50% packets lost when we ping the problemetic
> 10720 from an catalyst6509 switch, which connects to
> the core router with two GE links. (vlan 11, vlan22).
> Packets from vlan 11 could reach problemetic 10720,
> but vlan 22 could not.
> 
> I remove the tag-switching config from the GE
> configuration on GSR, and re-config it. everything
> recovered.
> 
> Why? Is there any bug with IOS 12.0(18)ST which will
> cause such a selective packet drop on tag-switching
> interface?
> 
> How could we avoid such problem in future?
> 
> thanks
> 
> Joe
> 
> _________________________________________________________
> Do You Yahoo!?
> 注册世界一流品质的雅虎免费电邮
> http://cn.rd.yahoo.com/mail_cn/tag/1g/*http://cn.mail.yahoo.com/
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/