[j-nsp] MX80 stops forwarding after enabling inline flow sampling

[Scott Granados]

I found more to bring this thread home.

The problem I had was covered in PR963060.  
	Basically, a condition would take place where the sampled process would block the programming of the PFE and would break forwarding.  Lots of kernel veto messages were recorded in the log and the path from the RE to the PFE was blocked.  Several releases are available with the fix in place.

Thanks
Scott



On Jul 10, 2014, at 12:19 PM, Justin M. Streiner <streiner at cluebyfour.org> wrote:

> On Wed, 9 Jul 2014, Scott Granados wrote:
> 
>> 	I have an interesting problem.  I have an MX80 where I wish to 
>> enable inline flow sampling.  I used the kb entry as a template and 
>> configured.  When setting the table size the PFE rebooted which is 
>> expected but when it came back online forwarding stopped.  I rebooted 
>> again and had the same issue with the exception of after about 20 
>> minutes forwarding started to work.  Looking at the logs there seemed 
>> to be throttles from the kernel to the PFE and issues that look like 
>> ipsec trying to find a phase 2 policy that might have been causing the 
>> delay.  However, ipsec isn’t enabled on this box and there is an actual 
>> ACL that should block ipsec sessions from establishing so I think this 
>> might be a false signal.  Anyone ever see this sort of long delay or 
>> have any ideas where I should look further.  I’ve engaged TAC but am 
>> looking for things to test in the mean time independently.  Anyone seen 
>> this before or have any ideas?
> 
> What version of code are you running?  I haven't seen this problem, but I 
> don't have any MX80s specifically. I haven't seen this behavior on a pair 
> of MX480s running 12.3R6.6.
> 
> I have a pair of MX5s I could test with, but I havne't had a chance to get 
> them set up in our lab yet.
> 
> jms<ATT00001.c>