[c-nsp] Weird LAN problem between Cisco and Juniper

[Konstantin Barinov]

Hi,

Thank you. Junipers are out of my control, will ask peer to check.

br
--
Konstantin Barinov
INFONET AS, Tallinn, Estonia



Friday, October 28, 2005, 1:39:04 AM, you wrote:

MP> How are you noticing the packet drops?  If you are sending ICMP packets
MP> to the Juniper understand that the Junipers routers have internal
MP> rate-limiting to protect against DDOS so you may be hitting some
MP> internal rate-limiting.  

MP> You will be able to see this by issuing this command:

MP> [edit]
MP> mario at r4# run show system statistics | find icmp
MP> icmp:
MP>         173 drops due to rate limit <<<<<<  This is what you are looking
MP> for


MP> Thanks,

MP> Mario Puras 
MP> SoluNet/SoluServe TAC Manager 
MP> Web Address:  www.solunet.com 
MP> Mailto: mpuras at solunet.com 
MP> Direct: (321) 309-1410 
MP> Fax: (321) 676-1287
MP> TAC: 888.449.5766 (USA) / 888.SOLUNET (Canada) 


MP> -----Original Message-----
MP> From: cisco-nsp-bounces at puck.nether.net
MP> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Konstantin
MP> Barinov
MP> Sent: Thursday, October 27, 2005 6:17 PM
MP> To: Eric Kagan
MP> Cc: cisco-nsp at puck.nether.net
MP> Subject: Re[2]: [c-nsp] Weird LAN problem between Cisco and Juniper


MP> gigabits via fibers everywhere, counters are clean on switches.


MP> br
MP> --
MP> Konstantin Barinov
MP> INFONET AS, Tallinn, Estonia



MP> Friday, October 28, 2005, 1:03:59 AM, you wrote:

EK>> Quick stab, Duplex mis-match ?  Its burnt me before as its easy to 
EK>> overlook

EK>> Eric

>>> Hi,
>>> 
>>> Weird situation. Any ideas?
>>> 
>>> 145 - cisco 7603
>>> 146 - cisco 3550
>>> 148 - juniper M20
>>> 149 - juniper M20
>>> 
>>> 145 and 146 in one location, connected via several gigabit 
>>> etherchannels to 148 and 149 in second location. Switches in between 
>>> are catalysts 4000 series. No errors on catalyst ports. No errors on 
>>> router ports. No filters, no ACL's, no shapers. Nothing of that kind.
>>> 
>>> In general, high delay and 10-90% packet loss from .145 to
>>> .148 All other combinations work fine.
>>> 
>>> 
>>> br
>>> --
>>> Konstantin Barinov
>>> INFONET AS, Tallinn, Estonia
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> network 1.2.3.144/29
>>> 
>>> 
>>> IP 1.2.3.145
>>> 
>>> akm-bb#ping 1.2.3.148
>>> 
>>> Type escape sequence to abort.
>>> Sending 5, 100-byte ICMP Echos to 1.2.3.148, timeout is 2
>>> seconds: !..!! Success rate is 60 percent (3/5), round-trip 
>>> min/avg/max = 4/14/36 ms
>>> 
>>> akm-bb#ping 1.2.3.149
>>> 
>>> Type escape sequence to abort.
>>> Sending 5, 100-byte ICMP Echos to 1.2.3.149, timeout is 2
>>> seconds: !!!!! Success rate is 100 percent (5/5), round-trip 
>>> min/avg/max = 1/2/4 ms
>>> 
>>> akm-bb#ping 1.2.3.146
>>> 
>>> Type escape sequence to abort.
>>> Sending 5, 100-byte ICMP Echos to 1.2.3.146, timeout is 2
>>> seconds: !!!!! Success rate is 100 percent (5/5), round-trip 
>>> min/avg/max = 1/1/4 ms
>>> 
>>> 
>>> 
>>> IP 1.2.3.146
>>> 
>>> 
>>> akm-l3#ping 1.2.3.148
>>> 
>>> Type escape sequence to abort.
>>> Sending 5, 100-byte ICMP Echos to 1.2.3.148, timeout is 2
>>> seconds: !!!!! Success rate is 100 percent (5/5), round-trip 
>>> min/avg/max = 1/1/1 ms
>>> 
>>> akm-l3#ping 1.2.3.149
>>> 
>>> Type escape sequence to abort.
>>> Sending 5, 100-byte ICMP Echos to 1.2.3.149, timeout is 2
>>> seconds: !!!!! Success rate is 100 percent (5/5), round-trip 
>>> min/avg/max = 1/2/4 ms
>>> 
>>> akm-l3#ping 1.2.3.145
>>> 
>>> Type escape sequence to abort.
>>> Sending 5, 100-byte ICMP Echos to 1.2.3.145, timeout is 2
>>> seconds: !!!!! Success rate is 100 percent (5/5), round-trip 
>>> min/avg/max = 1/1/1 ms
>>> 
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
>>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>> 



MP> _______________________________________________
MP> cisco-nsp mailing list  cisco-nsp at puck.nether.net
MP> https://puck.nether.net/mailman/listinfo/cisco-nsp
MP> archive at http://puck.nether.net/pipermail/cisco-nsp/