[c-nsp] Cisco 7600 pseudowire ping

[Mack McBride]

Given the patterned packet loss, I would suspect some kind of rate limiting.
Where it is happening I cannot say.  It could be built in to the pseudowire code.

Mack McBride | Network Architect | ViaWest, Inc.
O: 720.891.2502 | mack.mcbride at viawest.com | www.viawest.com | LinkedIn | Twitter | YouTube


-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Ivan
Sent: Tuesday, July 22, 2014 4:16 AM
To: cisco-nsp
Subject: Re: [c-nsp] Cisco 7600 pseudowire ping

Interesting enough regular mpls ping has no issue:

PE1#ping mpls ipv4 172.16.14.1/32 repeat 100 Sending 100, 100-byte MPLS Echos to 172.16.14.1/32,
      timeout is 2 seconds, send interval is 0 msec:

Codes: '!' - success, 'Q' - request not sent, '.' - timeout,
   'L' - labeled output interface, 'B' - unlabeled output interface,
   'D' - DS Map mismatch, 'F' - no FEC mapping, 'f' - FEC mismatch,
   'M' - malformed request, 'm' - unsupported tlvs, 'N' - no label entry,
   'P' - no rx intf label prot, 'p' - premature termination of LSP,
   'R' - transit router, 'I' - unknown upstream index,
   'X' - unknown return code, 'x' - return code 0

Type escape sequence to abort.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 1/2/4 ms

PE1#ping mpls pseudowire 172.16.14.1 440 repeat 100 Sending 100, 100-byte MPLS Echos to 172.16.14.1,
      timeout is 2 seconds, send interval is 0 msec:

Codes: '!' - success, 'Q' - request not sent, '.' - timeout,
   'L' - labeled output interface, 'B' - unlabeled output interface,
   'D' - DS Map mismatch, 'F' - no FEC mapping, 'f' - FEC mismatch,
   'M' - malformed request, 'm' - unsupported tlvs, 'N' - no label entry,
   'P' - no rx intf label prot, 'p' - premature termination of LSP,
   'R' - transit router, 'I' - unknown upstream index,
   'X' - unknown return code, 'x' - return code 0

Type escape sequence to abort.
!!!!!!!!!!!!!!.!!!!!!!!!!!!!.!!!!!!!!!!!!!!.!!!!!!!!!!!!!!.!!!!!!!!!!!
!!!.!!!!!!!!!!!!!.!!!!!!!!!!!!
Success rate is 94 percent (94/100), round-trip min/avg/max = 1/2/4 ms PE1#

And the rate-limit output on the destination:

PE2#show mls rate-limit | in Rate|On|UCAST
    Rate Limiter Type       Status     Packets/s   Burst  Sharing
         MCAST DFLT ADJ   On              100000     100  Not sharing
           ACL VACL LOG   On                2000       1  Not sharing
       MCAST PARTIAL SC   On              100000     100  Not sharing
         IP RPF FAILURE   On                 100      10  Group:0 S
            TTL FAILURE   On                  97      10  Not sharing
  ICMP UNREAC. NO-ROUTE   On                 100      10  Group:0 S
  ICMP UNREAC. ACL-DROP   On                 100      10  Group:0 S
            MTU FAILURE   On                 997      10  Not sharing
        UCAST IP OPTION   Off                  -       -     -
              IP ERRORS   On                 100      10  Group:0 S

As mentioned before we are only seeing this on devices where we are running 15.2(4)S4a

Thanks

Ivan

On 21/Jul/2014 7:56 p.m., Vitkovský Adam wrote:
> And how about the regular mpls ping does that perform right?
>
> I'd check the rate limiters:
>
> show mls rate-limit
> and look for UCAST IP OPTION -is it ON or OFF though it should be off 
> by default
>
> adam
>
>> -----Original Message-----
>> From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf 
>> Of Ivan
>> Sent: Sunday, July 20, 2014 12:58 AM
>> To: Peter Persson
>> Cc: cisco-nsp
>> Subject: Re: [c-nsp] Cisco 7600 pseudowire ping
>>
>> No CoPP. Direct ping is fine.  Just the PW ping having issues.
>>
>> On 20/Jul/2014 2:13 a.m., Peter Persson wrote:
>>> Do you have any Control-plane policing?
>>> As i understand your email, you are pinging between two 7600's 
>>> directly and not anything behind it?
>>>
>>>
>>>
>>>
>>> 2014-07-19 13:47 GMT+02:00 Ivan <cisco-nsp at itpro.co.nz
>>> <mailto:cisco-nsp at itpro.co.nz>>:
>>>
>>>      I have found that mpls pseudowire pings to some 7600s running
>>>      15.2(4)S4a go missing - I see about 95/100 success rate.  On other
>>>      devices with older software I have no loss.  The problem is not seen
>>>      if the ping interval is increased to 100ms.  Also pinging over the
>>>      VC shows no loss.
>>>
>>>      Given the above I suspect some rate-limiting may be taking place.  I
>>>      am hoping someone will be able to confirm and ideally share some
>>>      commands that show come counters for the drops as so far I have had
>>>      no success.
>>>
>>>      c7600s72033-advipservicesk9-__mz.152-4.S4a.bin
>>>      WS-X6704-10GE
>>>      WS-SUP720-3BXL
>>>
>>>      Thanks
>>>
>>>      Ivan
>>>      _________________________________________________
>>>      cisco-nsp mailing list cisco-nsp at puck.nether.net
>>>      <mailto:cisco-nsp at puck.nether.net>
>>>      https://puck.nether.net/__mailman/listinfo/cisco-nsp
>>>      <https://puck.nether.net/mailman/listinfo/cisco-nsp>
>>>      archive at http://puck.nether.net/__pipermail/cisco-nsp/
>>>      <http://puck.nether.net/pipermail/cisco-nsp/>
>>>
>>>
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/