[j-nsp] MX80 stops forwarding after enabling inline flow sampling

[Justin M. Streiner]

On Wed, 9 Jul 2014, Scott Granados wrote:

> 	I have an interesting problem.  I have an MX80 where I wish to 
> enable inline flow sampling.  I used the kb entry as a template and 
> configured.  When setting the table size the PFE rebooted which is 
> expected but when it came back online forwarding stopped.  I rebooted 
> again and had the same issue with the exception of after about 20 
> minutes forwarding started to work.  Looking at the logs there seemed 
> to be throttles from the kernel to the PFE and issues that look like 
> ipsec trying to find a phase 2 policy that might have been causing the 
> delay.  However, ipsec isn’t enabled on this box and there is an actual 
> ACL that should block ipsec sessions from establishing so I think this 
> might be a false signal.  Anyone ever see this sort of long delay or 
> have any ideas where I should look further.  I’ve engaged TAC but am 
> looking for things to test in the mean time independently.  Anyone seen 
> this before or have any ideas?

What version of code are you running?  I haven't seen this problem, but I 
don't have any MX80s specifically. I haven't seen this behavior on a pair 
of MX480s running 12.3R6.6.

I have a pair of MX5s I could test with, but I havne't had a chance to get 
them set up in our lab yet.

jms