[c-nsp] 7200+SRC, Netflow fast path no longer supported?

[David Freedman]

Rodney, all interfaces on this box are 802.1q trunks, here is a typical configuration:

!
interface GigabitEthernet0/2
 description Trunk to switch 
 mac-address 0011.2047.501c
 mtu 1548
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 media-type rj45
 speed 1000
 duplex full
 no negotiation auto
 no clns route-cache
 hold-queue 2000 in
!
!
interface GigabitEthernet0/2.1
 description foo
 bandwidth 250000
 encapsulation dot1Q 1 native
 ip address 5.6.7.8 255.255.255.224 secondary
 ip address 1.2.3.4 255.255.255.224
 ip access-group small-v4-acl out
 no ip proxy-arp
 ip mtu 1500
 ip ospf authentication message-digest
 ip ospf message-digest-key 1 md5 7 <key>
 ip ospf cost 2000
 ip flow ingress
 ipv6 address FE80:300:1::5/64
 ipv6 enable
 ipv6 traffic-filter small-v6-acl out
 ipv6 nd ra suppress
end


sh cef int said :

GigabitEthernet0/2 is up (if_number 4)
  Corresponding hwidb fast_if_number 23
  Corresponding hwidb firstsw->if_number 4
  Internet Protocol processing disabled
  Hardware idb is GigabitEthernet0/3
  Fast switching type 1, interface type 27
  IP CEF switching enabled
  IP CEF switching turbo vector
  IP CEF turbo switching turbo vector
  IP prefix lookup IPv4 mtrie 8-8-8-8 optimized
  Input fast flags 0x0, Output fast flags 0x81
  ifindex 4(4)
  Slot  Slot unit 3 VC -1
  Transmit limit accumulator 0x0 (0x0)
  IP MTU 0


GigabitEthernet0/2.1 is up (if_number 21)
  Corresponding hwidb fast_if_number 23
  Corresponding hwidb firstsw->if_number 4
  Internet address is 1.2.3.4/27
  Secondary address 5.6.7.8/27
  ICMP redirects are always sent
  Per packet load-sharing is disabled
  IP unicast RPF check is disabled
  Output features: Access List
  Inbound access list is not set
  Outbound access list is towards-servers
  IP policy routing is disabled
  BGP based policy accounting on input is disabled
  BGP based policy accounting on output is disabled
  IPv6 CEF switching enabled
  Hardware idb is GigabitEthernet0/2
  Fast switching type 1, interface type 27
  IP CEF switching enabled
  IP CEF switching turbo vector
  IP CEF turbo switching turbo vector
  IP prefix lookup IPv4 mtrie 8-8-8-8 optimized
  Input fast flags 0x0, Output fast flags 0x81
  ifindex 4(4)
  Slot  Slot unit 3 VC -1
  Transmit limit accumulator 0x0 (0x0)
  IP MTU 1500






------------------------------------------------
David Freedman
Group Network Engineering 
Claranet Limited
http://www.clara.net



-----Original Message-----
From: Rodney Dunn [mailto:rodunn at cisco.com]
Sent: Thu 3/20/2008 03:46
To: David Freedman
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] 7200+SRC, Netflow fast path no longer supported?
 
I don't have one handy to test.

I'd have to set it up in the lab.

What's the full config on the interface and what does 'sh cef int' say?

On Wed, Mar 19, 2008 at 12:26:38AM -0000, David Freedman wrote:
> Assuming this is a bug but can't find it documented anywhere , either in release notes or bugtool, 
> 
> Upgrading to SRC on 7200 causes all packets on interfaces configured with "ip flow ingress" to start punting to CPU, it considers netflow an "unsupported feature"
> 
> IP    Process   70442014 2336639637   62840525 2296471137
>  Cache misses          0
>  Fast         77      14142          0          0
>  Auton/SSE          0          0          0          0
> 
> 
> RP PAS TTL expired                        0          0      90139
> RP PAS IP options set                     0          0          1
> RP PAS Routed to Null0                   10          0          0
> RP PAS Features                           0  118182453          0
> RP PAS Total                            568  118183210      90222
> All    Total                            568  236366797      90222
> 
> At first I thought this could be CSCsh05677 ("ip flow-cache mpls label-positions 1" hack) 
> but it turns out not to be.
> 
> Has anybody else here seen the same?
> 
> ------------------------------------------------
> David Freedman
> Group Network Engineering 
> Claranet Limited
> http://www.clara.net
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/