[c-nsp] Sup720-3bxl MPLS Ingress PE/P ttl mess

Christoph Loibl c at tix.at
Thu Feb 14 18:33:42 EST 2008


Hello,

I was reading those threads about using the c6500 or c7600 with  
sup720-3bxl as P/PE routers. In my experience those devices work just  
fine with MPLS. But they also do some very nasty things with the ttl  
of the processed frames:

When having "no tag-switching ip propagate-ttl forwarded" configured  
on the ingress PE and encapsulating IP-traffic (no VPNs - only one  
label is pushed in that case). A Sup720 P switch that needs to pop  
this single label (PHP) also decrements the IP-ttl of the resulting  
IP-packet before sending it to the egress router. This behaviour  
leads to ugly traceroutes where the egress router shows up twice in  
the path. (The PHP P switch sends an IP-frame with ttl=0 :-(, it  
simply should not touch the IP-frame at all when doing label  
operations and the ip-ttl is lower than the label's-ttl).

In contrast, having a Sup720 equipped c6500 ingress PE with "no tag- 
switching ip propagate-ttl forwarded" enabled (same situation as  
above, just a single label is pushed). The egress PE does not show up  
in your traceroute at all.

This at least holds true for 12.2(18)SXF9 and as far as I understand  
is covered in CSCef16357. Cisco says this is a hardware issue and  
can't be fixed. But the bug report does not look like they really  
investigated that very much (it does not describe the hole issue very  
precise).

Is there anyone out there who also saw this bug and probably found a  
practical workaround? (Like disabling PHP -> using explicit-null  
labels, but this probably does not fix the problem and needs packet  
re-circulation - I don't know how much this affects the switching  
performance of the overall system in an CFC environment)?

Are there any newer hardware-revisions where this bug is fixed?

Regards

Christoph

-- 
CHRISTOPH LOIBL ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
mailto:c at tix.at   |No trees were killed in the creation of this message.
http://pix.tix.at |However, many electrons were terrible inconvenienced.
CL8-RIPE ++++++++++++++++++++++++++++++++++++ PGP-Key-ID: 0x4B2C0055 +++





More information about the cisco-nsp mailing list