[c-nsp] 4500E/SUP6-E uRPF counters

Sebastian Wiesinger cisco-nsp at tracker.fire-world.de
Wed Oct 8 05:40:08 EDT 2008


Hello,

I activated and tested the uRPF feature on a Catalyst 4500E with
SUP6-E. It works fine but the RPF drop counters don't work and stay at
0 packets. IOS is 12.2(46)SG.

  Drop:  13800605 encapsulation failed, 0 unresolved, 0 no adjacency
         1012 no route, 0 unicast RPF, 0 forced drop
         0 options denied, 0 source IP address zero

This is after I sent a few packets which where successfully dropped by
uRPF. Same thing with the SNMP counters:

CISCO-IP-URPF-MIB::cipUrpfIfDrops.114.ipv4 = Counter32: 0 packets
CISCO-IP-URPF-MIB::cipUrpfIfSuppressedDrops.114.ipv4 = Counter32: 0 packets
CISCO-IP-URPF-MIB::cipUrpfIfDropRate.114.ipv4 = Gauge32: 0 packets/second
CISCO-IP-URPF-MIB::cipUrpfIfDiscontinuityTime.114.ipv4 = Timeticks: (131668749) 15 days, 5:44:47.49

Can anyone confirm that the counters don't work?

Another thing, is there any performance impact when activating uRPF on
a large number of vlans?

Regards,

Sebastian

-- 
GPG Key-ID: 0x76B79F20 (0x1B6034F476B79F20)
'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE.
            -- Terry Pratchett, The Fifth Elephant


More information about the cisco-nsp mailing list