[rbak-nsp] Internal icmp ratelimiting?

Jim Tyrrell jim at scusting.com
Wed Sep 14 09:08:18 EDT 2011


Does SEOS have some sort of control plane policing that will drop ICMP 
packets in an MPLS environment?  I have configured a vpn context but 
when testing I'm getting packetloss when pinging the SE600 from our 
Cisco routers.  I have the following setup:

R1 -> R2 -> SE600 -> DSL line (L2TP session)

R1 & R2 can ping each other fine, and they can also ping the DSL line 
with 0 packetloss, but when I ping between the Cisco and SE600 I'm 
getting packetloss:


ping vrf test 172.16.10.3 repeat 100
Sending 100, 100-byte ICMP Echos to 172.16.10.3, timeout is 2 seconds:
!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!.!!!!!!!!!!.!
Success rate is 91 percent (91/100), round-trip min/avg/max = 1/1/4 ms

It seems to be quite regular, and doesnt happen when pinging through the 
SE600 to the DSL line so I'm thinking there is some kind of ratelimiting 
on the SE600 itself?

Thanks.

Jim.


More information about the redback-nsp mailing list