Cisco WAN :: ASR1002 With Full Bgp Table(s)
Jun 19, 2011
I've inherited a project building an internet connectivity solution for a large corporate. It has its own AS and its own PI space. They are putting in 100Mbit connections from 5 different Tier1's , taking full internet routing from each. Cisco ASR1002's have already been specified and purchased for the job. I'm not familiar with the ASR platform at all - is it up to the job with full routing tables? multiple instances of full tables ? (not likely to put all 5 into one box!)
View 2 Replies
ADVERTISEMENT
Jan 16, 2013
In datasheet of WS-SUP720-3B - link- was said that are only supported around 256K routes (fib?rib?).With this value I can't get 2 full bgp - that is around 850K ..
The supervisor is that control this or just memory ? I said this because I have a 7204-npe-g1 whith 2 fullrouting and 1G of and he are ok..
View 3 Replies
View Related
Feb 19, 2013
My comany is planning get full bgp table from our providers we have mutliple egress providers in order to load balance we are looking for a full table from all of them what would be minumu requiremts we have all edges as 6500 with sup 720 ,is there any memory requrements that need to be upgraded ??
View 4 Replies
View Related
Feb 7, 2012
I'm looking for a Cisco device to run a full BGP table with a 60Mb link. And one of the main restrictions is that my traffic is almost 100% real-time (voip). So the average packet size is small. Today we own a Cisco 7204 NPE400 with 512Mb RAM. I think even though I upgrade it to a G2, due to the small average packet size, the router will be near to its limit. Maybe a Cisco 7300 NSE-150? Or should I think about a switch?
View 3 Replies
View Related
Nov 15, 2012
Region : Thailand
Model : TD-W8961ND
Hardware Version : V1
Firmware Version : 2.0.0 Build 111111 Rel.1111
ISP : 3bb
I have a problem when I am trying to add another static ip address to the list
the message above in title pop up, how can I fix it?
DHCP Table is Full!
View 1 Replies
View Related
Jan 26, 2013
I have recently installed a Cisco 2911 ISR G2 with the default 512 Mb DRAM intending to eBGP peer. I ordered the 2GB upgrade RAM however due to time constraints on backordered parts, I fired up this router and eBGP peered without it. The Peer advertised the whole route table with 400,000+ routes. The BGP session came up then the router crashed due to not enough memory. The router disabled IP CEF due to insufficient memory. I disabled IP CEF permanently and have been running the router in this condition for 3-weeks with a stable eBGP session. This resulted in no CEF, 25% CPU during light traffic, 89% memory, and 50% CPU when traffic is around 30 Mbps through the router.
I am experiencing a hit to the throughput resulting in a lost packet and practically a brief traffic stall roughly every minute. This hit is so quick that it does not always result in packet loss and IP traffic sessions are not reset. I do see this on my live bandwidth graphs that the traffic takes a dive every so often, roughly 1-minute.
I initially thought this problem could be L2 to the upstream eBGP peer but all interfaces are clear of errors. I also thought this could be the BGP session going down, however, It is always up. I thought this could be duplex mismatch on L2, however its solid and no logs on either end. Funny thing is pinging thr router from both the LAN side and the WAN side results in the same packet lost every minute or so.
Even though the CPU and memory always stays the same at under 20-50% CPU and less than 89% memory, do you think this could be the BGP Scanner walking the routing table every minute?
View 6 Replies
View Related
Sep 12, 2011
I have a question about filtering incoming bgp route updates from an internet provider. This provider sends the full internet routing table and default route and on an incoming prefix-filter on the customer switch (C6509-sup720) the default route is only accepted.What happens on the 6509 switch when the BGP peer flaps?Does it need to process all the internet routing updates, and if yes probably it cannot handle all these updates?What happens with the CEF table, will the switch install the routes first?
View 4 Replies
View Related
Aug 25, 2012
I am going to configure the NATing on ASR1002 and expecing to have near about 1Million nat translation. Will ASR1002 support 1million nat translations ? how many NAT translations are supportable on the ASR1002 ?I am going to configure NAT on ASR1002-5G/K9 U& have FLASR1-FWNAT-RED.
View 1 Replies
View Related
May 29, 2013
Right now I have a ASR1002 running a very old IOS version.Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 12.2(33)XNE, RELEASE SOFTWARE (fc1) asr1000rp1-ipbasek9.02.05.00.122-33.XNE.bin – 25-NOV-2009?
I am looking to upgrade to a newer version.I was wondering if there are any tricks when upgradeing this IOS. Is it as easy as loading the IOS onto the ASR and then changing the bootpath or is there an upgrade path I must follow? Also would there any need for a licence between 2.x and 3.x.
View 2 Replies
View Related
Jan 27, 2011
The loopback of the ASR1002 is 2.2.2.2. When I use a browser to access it, I got the authentication dialog box asking for username/password. I input the information and submit. But authentication box comes back again and ask for the username/password.
The username/password is test okay. But somehow, the web GUI just does not use it.
View 2 Replies
View Related
Feb 5, 2009
Is the GLC-LH-SM SFP compatible with the ASR1002 and how does it differ from the SFP-GE-L adapter?
View 4 Replies
View Related
Mar 11, 2012
We have an ASR1002 with asr1000rp1-adventerprisek9.03.05.01.S.152-1.S1.bin software.I couldn't find any documentation on how to attach an L2 interface, in my case a subinterface with a single dot1q vlan, to a BDI interface.I'm able to create a bridge-domain interface but it's down down.The command bridge-domain on the subinterface url...
View 2 Replies
View Related
Aug 17, 2011
I'm aware ACL's are handled in hardware on the ASR platform but wondered if there was any way to inspect how many hits we get on each line of an ACL on the ASR, I can't seem to find a command to do this.
Using LOG is not possible due to the large number of hits.
View 2 Replies
View Related
Jun 25, 2012
One of our customer just purchased ASR1002 router, they have three internet links from different ISPs and they dont have any remote site, they have three different public IP pool as their respective ISPs. So, is it possible to load balance the internet traffic using all three link on Cisco ASR router ( IOS - Advance Enterprise Services)
View 3 Replies
View Related
Oct 14, 2012
We have a cisco7206 router which is going to be replaced with an ASR1002 router. The 7206 has some interfaces in a BVI-group - the config of which i am trying to translate over into IOS XE (which runs on the ASR1002). How to translate this config from IOS to IOS XE.
View 3 Replies
View Related
Oct 18, 2011
We are having an issue with BGP flapping peer. We have a ASR1002 as Route Reflector and it work fine with all peers except with 2 peers.
View 3 Replies
View Related
Apr 6, 2013
im trying to create a VPN between a Cisco ASA5510 and an ASR1002 when my Loopback interface is The Source IP . [code]
View 1 Replies
View Related
Oct 23, 2011
what command is required to configure ip accounting on an interface?
I would have thought to what is required is on the interface, turn on Ip accounting i.e.
int gi0/0/0
ip accounting
However, there is no ip accounting command within the interface. We are running version Version 15.1(1)S2.
View 6 Replies
View Related
Dec 27, 2011
During the boot ios we found the error messages below. How can i clear this messages?
Missing or illegal ip address for variable DEFAULT_GATEWAY Using midplane macaddr
Missing or illegal ip address for variable IP_ADDRESS
Missing or illegal ip address for variable IP_SUBNET_MASK
View 2 Replies
View Related
May 31, 2012
we are using an ASR 1002 for dynamic NAT (with route maps). I do have a Problem with the usage of the NAT pool it self.The total NAT Translations for the pool are:
#sh ip nat stat
[Id: 1] route-map natted-host-01 pool nat-pool-01 refcount 136
pool nat-pool-01: netmask 255.255.254.0
start XX.XX.202.0 end XX.XX.203.255
type generic, total addresses 512, allocated 88 (17%), missee 0
If i now look into the NAT translation Table i do get less entries:
#sh ip nat translations filter map-id dynamic 1 total Total number of translations: 43
Only a deeper look into the QFP gives here the right values:
# sh platform hardware qfp active feature nat data The ouput count matches the values I get if i isue a sh ip nat stat
My question is how is it handled internally.
We do have a problem too, with raising usage of the pool over the time.Once allocated Pool entries are not released after a period of time. And no NAT translation occur for that used IP NAT pool Addresses.
The timer on the device are set:
ip nat translation timeout 300
ip nat translation tcp-timeout 900
ip nat translation pptp-timeout 900
ip nat translation udp-timeout 120
ip nat translation routemap-entry-timeout 900
ip nat translation max-entries 750000
View 1 Replies
View Related
Aug 15, 2011
I am trying to bring up a couple of ASR's. They are fitted with SPA modules (SPA-8X1GE-V2). These have SFP modules GLC-T fitted into them. For the life of me I cannot get these ports to come up. If I have a look at the inv the SFP's show as GE-T's (physically they are GLC-T's)
Is there a compatability problem with these GLC-T's on ASR 100x?
View 3 Replies
View Related
Jun 13, 2013
we are testing an ASR1002-X which acts as LNS for L2TP tunnels.
- All tunnels are UP (sh vpdn all return list of tunnels)
- VirtualAccess interfaces are UP
- C routes are added in routing table
but ping remote IPs don't work !!! [code]
View 1 Replies
View Related
Sep 5, 2012
I am trying to configure the NetFlow Top Talkers function on an ASR1002 with ADVENTERPRISEK9-M, Version 15.2(4)S. With this new Hardware and Software I am surprised to see that the command:
ip flow-top-talkers
top 50
sort-by packets
cannot be found on the CLI - it's just not there.
View 1 Replies
View Related
Jun 30, 2011
I have recently purchased ASR1002-RP1-ESP5 with 2 x 4K Broadband licenses to be used as LNS. Cisco have sent me PAK files for the licenses however when I try to enter the licenses into the device I get an error message saying that Licensing is not supported on this platform.
Any experience with this platform and installation of the broadband licenses?
When I spoke to Cisco TAC they told me that for this particular model the licensing is on "trust" basis where you buy license and do not install it on the actual router - similar to what 7200 used to do.
View 1 Replies
View Related
Aug 30, 2011
We recently purchased a Cisco ASR1002 router with four on-board Gigabit SFP-style Ethernet ports. However, when I do a "show ip interface brief", I see that there's an extra Gigabit Ethernet port. See the last interface in the following output:
ASR_1002_router#sh ip int b
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0/0 unassigned YES manual down down
[Code].....
On the router itself, in addition to the four Ethernet SFP ports, there are four additional RJ-45 ports. They're labeled "BITS", "MGMT", "CON", and "AUX". I know what the Con and Aux ports are, but what are the Bits and Mgmt ports? And is one of them the Gigabit Ethernet interface that I see listed at the bottom of the output? And if it is, is there anything special about it, or is it just another routed Ethernet port? Can I do something special with it, like out-of-line managment?
View 1 Replies
View Related
Apr 19, 2012
We have ASR1002 routers configured to run individual SubPackages, at this point everything is operating without problems.We just received a Cisco Security Advisory informing us SSHv2 is vulnerable in our version of router code.We have to upgrade to the recommended stable release, so we downloaded, installed and expanded the IOS to expose the SubPackages on the ASR routers bootflash.
Since we are running SubPackages, do we need to upgrade all SubPackages (I.E. complete IOS upgrade) of can we just upgrade the vulnerable SubPackage? How do you determine which SubPackage contains the SSHv2 application?
View 2 Replies
View Related
Jun 13, 2013
We are testing an ASR1002-X which acts as LNS for L2TP tunnels.
- All tunnels are UP (sh vpdn all return list of tunnels)
- VirtualAccess interfaces are UP
- C routes are added in routing table
but ping remote IPs don't work !
LNS1# sh ver
Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSAL-M), Version 15.3(2)S1, RELEASE SOFTWARE (fc1)
Technical Support: [URL]
[Code].....
View 1 Replies
View Related
Jun 3, 2012
We are trying to implement the ZBF on our router to assist us in limiting the intial impact of DDOS attacks.We have configured the below and it appears that it's not working, as when un der attack the statistics don't increae.
[code]...
View 2 Replies
View Related
Jun 30, 2010
How to configure SSH on a ASR 1002 and apply it to the Management Interface?
View 3 Replies
View Related
Sep 16, 2012
I cannot receive any OSPF route from Nexus to ASR1002 even they are both OSPF neighbour. I have attached the config for both, Both Nexus and ASR part of Area0.
Config
ASR1002#sh ip ospf neighbor
Neighbor ID Pri State Dead Time Address Interface10.165.117.12 1 FULL/BDR 00:00:35 10.231.175.226 GigabitEthernet0/0/0
[Code].....
View 2 Replies
View Related
Jun 4, 2013
Is it possible to use the mgmt port when in rommon mode? I use the Mgmt port when IOS is loaded and it works fine. I reboot the router, issue a break to put it in rommon and have set some variables but my Mgmt port never has link and I cannot ping it from the network. In rommon mode it looks like this:
PS1=rommon ! >
MCP_STARTUP_TRACEFLAGS=00000000:00000000
BOOT=bootflash:asr1000rp1-adventerprisek9.03.07.03.S.152-4.S3.bin,1;
IP_ADDRESS=10.71.50.101
IP_SUBNET_MASK=255.255.255.0
DEFAULT_GATEWAY=10.71.50.3
BSI=0
RANDOM_NUM=1133006948
RET_2_RTS=13:38:27 EDT Wed Jun 5 2013
RET_2_RCALTS=1370453907
?=0
View 3 Replies
View Related
Apr 16, 2013
I have a router asr1002 and I need that my loopback interface will be accessible from internet ISP adderss space I have
46.xx.x.64 255.255.255.192
interface TenGigabitEthernet0/2/0.301
description -=ISP=-
encapsulation dot1Q 301
ip address 46.xx.x.66 255.255.255.248
[code]...
packets transmitted 9received 0packet loss 100 %time 8063 ms
View 1 Replies
View Related
Feb 28, 2011
I am running ASR1002 with latest XE IOS version asr1000rp1-adventerprisek9.03.02.01.S.151-1.S1.bin configuration bellow
router bgp 65000 bgp router-id 1.1.1.1 bgp log-neighbor-changes timers bgp 5 15 ! address-family ipv4 vrf LABR01-VRF bgp router-id 1.1.1.1 neighbor bgprrclient peer-group neighbor bgprrclient remote-as 65001 neighbor bgprrclient password 7 1234 neighbor bgprrclient update-source Loopback0 neighbor bgprrclient version 4 neighbor bgprrclient route-reflector-client neighbor bgprrclient route-map set_weight in I then tried to create new route-map and get error that match next-hop can not be used on inbound
route-map set_weight permit 10 match ip next-hop prefix-list thirdparty match as-path 1 set weight 1000
LAB-ASR1002(config)#route-map set_weight permit 10LAB-ASR1002(config-route-map)# match ip next-hop prefix-list thirdparty% "set_weight" used as BGP inbound route-map, nexthop match not supported% not supported match will behave as route-map with no match% "set_weight" used as BGP inbound route-map, nexthop match not supported% not supported match will behave as route-map with no match% "set_weight" used as BGP inbound route-map, nexthop match not supported% not supported match will behave as route-map with no match% "set_weight" used as BGP inbound route-map, nexthop match not supported% not supported match will behave as route-map with no match% "set_weight" used as BGP inbound route-map, nexthop match not supported% not supported match will behave as route-map with no match Not sure why Cisco is not supporting a pretty basic feature for BGP route maps.I tried looking into matching other variables but I am unable to get same result as I have same routes on bgp table from multible inbound peers.
I also get this message when configuring tacacs. I looked for "new" cli but no luck:LAB-ASR1002(config)#tacacs-server host 2.2.2.2 This cli will be deprecated soon. Use new server cli
View 1 Replies
View Related
