[j-nsp] LDP flaps specifically present on ACX Juniper routers (ACX4000 and ACX1100)

[Mileto Tales]

Upgrade the firmware to version 12.3X54-D25. There is a bug in version D20. We had the same problem and the fix was the upgrade.

MT

> On 30 de abr de 2016, at 16:51, joel ahumuza <ahm.joel at gmail.com> wrote:
> 
> Hi Leonidas,
> We have our boxes running 12.3X54-D20.7, what version do you have ?
> 
> 
>> On 30 April 2016 at 22:48, Leonidas Romualdo <leo.ghoul at gmail.com> wrote:
>> 
>> Upgrade the Firmware!
>> 
>> We had the same problem with the ACXs..
>> 
>> 
>>> On Saturday, 30 April 2016, joel ahumuza <ahm.joel at gmail.com> wrote:
>>> 
>>> Hi Alexandre,
>>> 
>>> Unfortunately the filters are not helping, the flaps are still present 😞.
>>> Still looking for ways to mitigate this issue.
>>> 
>>>> On 29 April 2016 at 11:14, joel ahumuza <ahm.joel at gmail.com> wrote:
>>>> 
>>>> Hi All,
>>>> Aaron,
>>>> Not all ldp interfaces are /32, my loopbacks are /32s other interfaces
>>>> attached to the ldp process are p2p links with /31 masks.
>>>> 
>>>> Alexandre,
>>>> Thank you, I have applied the filters to our devices. I will monitor and
>>>> advise.
>>>> 
>>>> On 28 April 2016 at 23:43, Alexandre Guimaraes <
>>>> alexandre.guimaraes at ascenty.com> wrote:
>>>> 
>>>>> Had experienced the same thing.
>>>>> 
>>>>> After adding this to the loopback filter, the problem gone
>>>>> 
>>>>> 
>>>>> set firewall family inet filter PROTECT-RE term aceita-ldp from
>>> protocol
>>>>> tcp
>>>>> set firewall family inet filter PROTECT-RE term aceita-ldp from
>>> protocol
>>>>> udp
>>>>> set firewall family inet filter PROTECT-RE term aceita-ldp from
>>>>> source-port 646
>>>>> set firewall family inet filter PROTECT-RE term aceita-ldp from
>>>>> destination-port 646
>>>>> set firewall family inet filter PROTECT-RE term aceita-ldp then accept
>>>>> 
>>>>> Alexandre
>>>>> 
>>>>> -----Mensagem original-----
>>>>> De: juniper-nsp [mailto:juniper-nsp-bounces at puck.nether.net] Em nome
>>> de
>>>>> joel ahumuza
>>>>> Enviada em: quinta-feira, 28 de abril de 2016 12:38
>>>>> Para: juniper-nsp at puck.nether.net
>>>>> Cc: tech at roketelkom.co.ug
>>>>> Assunto: [j-nsp] LDP flaps specifically present on ACX Juniper routers
>>>>> (ACX4000 and ACX1100)
>>>>> 
>>>>> Hi All,
>>>>> 
>>>>> We are experiencing an issue with ACX routers running on 12.3X54-D20.7
>>>>> where the LDP sessions are continuously flapping, the logs indicate the
>>>>> following;
>>>>> 
>>>>> Apr 21 03:36:31  hostname rpd[2299]: RPD_LDP_SESSIONDOWN: LDP session
>>>>> x.x.x.x is down, reason: hold time expired Apr 21 03:36:34  hostname
>>>>> rpd[2299]: RPD_LDP_NBRDOWN: LDP neighbor x.x.x.x
>>>>> (lo0.0) is down
>>>>> Apr 21 03:36:38  hostname rpd[2299]: RPD_LDP_NBRDOWN: LDP neighbor
>>> x.x.x.x
>>>>> (lo0.0) is down
>>>>> Apr 21 03:36:38  hostname rpd[2299]: RPD_LDP_SESSIONDOWN: LDP session
>>>>> x.x.x.x is down, reason: all adjacencies down Apr 21 03:55:34  hostname
>>>>> rpd[2299]: RPD_LDP_SESSIONDOWN: LDP session x.x.x.x is down, reason:
>>>>> received notification from peer Apr 21 03:55:34  hostname rpd[2299]:
>>>>> RPD_LDP_SESSIONDOWN: LDP session x.x.x.x is down, reason: received
>>>>> notification from peer Apr 21 03:55:35  hostname rpd[2299]:
>>>>> RPD_LDP_SESSIONDOWN: LDP session x.x.x.x is down, reason: received
>>>>> notification from peer Apr 21 03:55:35  hostname rpd[2299]:
>>>>> RPD_LDP_SESSIONDOWN: LDP session x.x.x.x is down, reason: received
>>>>> notification from peer
>>>>> 
>>>>> The physical connections are okay, no flaps or errors on the p2p
>>>>> connections We are running ISIS as the IGP, whose adjacency is stable.
>>>>> 
>>>>> Actions taken from our team was;
>>>>> - Increase the hold time setting on the ldp enabled interfaces.
>>>>> - Increase the time interval on the same ldp enabled interfaces.
>>>>> - setting the ldp session protection setting on the ldp enabled
>>> loopback
>>>>> interface.
>>>>> 
>>>>> Unfortunately the actions did not yield much since the flaps have been
>>>>> ongoing.
>>>>> 
>>>>> Anyone have any Idea on what the problem / solution might be?
>>>>> 
>>>>> --
>>>>> Blessings,
>>>>> 
>>>>> AJ.
>>>>> SkypeID - jl.hmz
>>>>> ahumuza-joel.blogspot.ug
>>>>> _______________________________________________
>>>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>>>> 
>>>> 
>>>> 
>>>> --
>>>> Blessings,
>>>> 
>>>> AJ.
>>>> SkypeID - jl.hmz
>>>> ahumuza-joel.blogspot.ug
>>> 
>>> 
>>> 
>>> --
>>> Blessings,
>>> 
>>> AJ.
>>> SkypeID - jl.hmz
>>> ahumuza-joel.blogspot.ug
>>> _______________________________________________
>>> juniper-nsp mailing list juniper-nsp at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/juniper-nsp
>> 
>> 
>> 
>> --
>> Enviado do Gmail para celular
> 
> 
> 
> -- 
> Blessings,
> 
> AJ.
> SkypeID - jl.hmz
> ahumuza-joel.blogspot.ug
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp