Jump to content

Проблема с service-policy на ASR1k

Доброго времени суток. Есть cisco ASR1001 с asr1001-universalk9.03.13.00.S.154-3.S-ext которая терминирует кучу туннелей.

На каждый туннель вешается сервайс полиси

 

interface Tunnel10811
bandwidth qos-reference [b]N[/b]000
ip address 172.28.1.1 255.255.255.252
ip mtu 1400
ip access-group DMZ_IN in
ip access-group DMZ_OUT out
ip tcp adjust-mss 1360
ip policy route-map Forward_GlobalIP
ip ospf network point-to-point
ip ospf mtu-ignore
ip ospf cost 10
qos pre-classify
tunnel source 1.1.1.1
tunnel destination 2.2.2.2
tunnel protection ipsec profile IPSec-AES
service-policy input Tunnel_[b]N[/b]M_IN
service-policy output Tunnel_[b]N[/b]M_OUT

 

Туннели идентичны в своих настройках, меняется bw меняется tunnel destination меняется имя интерфейса.

 

Процентах на 10 из туннелей не применяется service-policy output Tunnel_NM_OUT

 

В логе в таком случае:

Aug  7 15:22:07.277: %QOS-6-POLICY_INST_FAILED: 
Service policy installation failed 
Aug  7 15:22:07.280: %FMFP-3-OBJ_DWNLD_TO_CPP_FAILED: SIP0: fman_fp_image:  Batch type 1 ID 2882382797  download to CPP failed

 

Есть мысли куда можно посмотреть?

Share this post


Link to post
Share on other sites

QFP TCAM Usage Information

80 Bit Region Information
--------------------------
Name                                : Leaf Region #0
Number of cells per entry           : 1
Current 80 bit entries used         : 0
Current used cell entries           : 0
Current free cell entries           : 0

160 Bit Region Information
--------------------------
Name                                : Leaf Region #1
Number of cells per entry           : 2
Current 160 bits entries used       : 2648
Current used cell entries           : 5296
Current free cell entries           : 6992

320 Bit Region Information
--------------------------
Name                                : Leaf Region #2
Number of cells per entry           : 4
Current 320 bits entries used       : 48
Current used cell entries           : 192
Current free cell entries           : 3904


Total TCAM Cell Usage Information
----------------------------------
Name                                : TCAM #0 on CPP #0
Total number of regions             : 3
Total tcam used cell entries        : 5488
Total tcam free cell entries        : 60048
Threshold status                    : below critical limit

Собственно это бага, решилось сменой IOS на asr1001-universalk9.03.16.00.S.155-3.S-ext

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.