ASR 9000 IOS-XR 5.22 BNG: PPPoE termination with PWHE

I'm successfully using a classic BNG configuration for PPPoE clients using PW (xconnect).
Now I'm trying in lab the pseudowire headend configuration but without success.
Here is my configuration:
l2vpn
pw-class gia1
encapsulation mpls
protocol ldp
transport-mode ethernet
xconnect group prova
p2p numero1
interface PW-Ether101
neighbor ipv4 192.168.201.1 pw-id 888
interface PW-Ether101.1
service-policy type control subscriber policy1
pppoe enable bba-group bba1
encapsulation dot1q 140
I receive the PPPoE client PADI and in the debug output you can see the PADO who inexplicably is not received from the client CPE:
RP/0/RSP0/CPU0:test_9001#RP/0/RSP0/CPU0:Feb 12 11:25:38.568 : pppoe_ma[453]: PW-Ether101.1: I dst ffff.ffff.ffff src 90f6.525a.ace1: len 46 0x11090000000c01010000010300040000016f00000000000000000000000000000000000000000000000000000000
RP/0/RSP0/CPU0:Feb 12 11:25:38.568 : pppoe_ma[453]: [PADI-Recv]: PW-Ether101.1 peer-mac 90f6.525a.ace1
RP/0/RSP0/CPU0:Feb 12 11:25:38.568 : pppoe_ma[453]: [PADI-Recv]: vlan-id-outer 140
RP/0/RSP0/CPU0:Feb 12 11:25:38.568 : pppoe_ma[453]: [PADI-Recv]: Service-name:
RP/0/RSP0/CPU0:Feb 12 11:25:38.568 : pppoe_ma[453]: [PADI-Recv]: Host-uniq: 0000016f
RP/0/RSP0/CPU0:Feb 12 11:25:38.569 : pppoe_ma[453]: PW-Ether101.1: O dst 90f6.525a.ace1 src e0ac.f112.c675: len 31 0x11070000001901010000010300040000016f01020009746573745f39303031
RP/0/RSP0/CPU0:Feb 12 11:25:38.569 : pppoe_ma[453]: [PADO-Sent]: PW-Ether101.1 peer-mac 90f6.525a.ace1
RP/0/RSP0/CPU0:Feb 12 11:25:38.569 : pppoe_ma[453]: [PADO-Sent]: vlan-id-outer 140
PADO packet disappears and there are zero packet in output in the pw-ether interface (and in the "show l2vpn xconnect detail" too)
RP/0/RSP0/CPU0:test_9001# sh int pw-ether 101.1
Thu Feb 12 11:31:02.071 UTC
PW-Ether101.1 is up, line protocol is up
Interface state transitions: 11
Hardware is VLAN sub-interface(s), address is e0ac.f112.c675
Internet address is Unknown
MTU 1518 bytes, BW 10000 Kbit (Max: 10000 Kbit)
reliability 255/255, txload 0/255, rxload 0/255
Encapsulation 802.1Q Virtual LAN, VLAN Id 140, loopback not set,
Last input 00:00:09, output never
Last clearing of "show interface" counters never
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
352 packets input, 22528 bytes, 0 total input drops
0 drops for unrecognized upper-level protocol
Received 352 broadcast packets, 0 multicast packets
0 packets output, 0 bytes, 0 total output drops
Output 0 broadcast packets, 0 multicast packets
show l2vpn xconnect detail
Statistics:
packets: received 672, sent 0
bytes: received 43008, sent 0
Any ideas?
Thankyou
Gianrico Fichera
ITESYS SRL

Similar Messages

Ask the Experts: Understanding Cisco ASR 9000 Series Aggregation Services Routers Platform Architecture and Packet Forwarding Troubleshooting

With Xander Thuijs
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn how to Cisco ASR 9000 Series Aggregation Services Routers with Cisco expert Xander Thuijs. The Cisco ASR 9000 Series Aggregation Services Routers product family offers a significant added value compared to the prior generations of carrier Ethernet routing offerings. The Cisco ASR 9000 Series is an operationally simple, future-optimized platform using next-generation hardware and software. The ASR 9000 platform family is composed of the Cisco ASR 9010 Router, the Cisco ASR 9006 Router, the Cisco ASR 9922 Router, Cisco ASR 9001 Router and the Cisco ASR 9000v Router.
This is a continuation of the live Webcast.
Xander Thuijs is a principal engineer for the Cisco ASR 9000 Series and Cisco IOS-XR product family at Cisco. He is an expert and advisor in many technology areas, including IP routing, WAN, WAN switching, MPLS, multicast, BNG, ISDN, VoIP, Carrier Ethernet, System Architecture, network design and many others. He has more than 20 years of industry experience in carrier Ethernet, carrier routing, and network access technologies. Xander holds a dual CCIE certification (number 6775) in service provider and voice technologies. He has a master of science degree in electrical engineering from Hogeschool van University in Amsterdam.
Remember to use the rating system to let Xander know if you have received an adequate response.
Xander might not be able to answer each question because of the volume expected during this event. Remember that you can continue the conversation on the Service Providers community XR OS And Platforms shortly after the event. This event lasts through Friday, May 24, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.
Webcast related links:
Slides
Webcast Video Recording
FAQ

Is there a Cisco lab available for ASR 9000
we have "XR4U" stations coming available soon when XR 511 comes alive. The plan is for a downloadable play image like that. In the interim we have 2 demo systems available, and they can be booked via your account manager representative.
How will MOD160 perform with multiple 9000NVS?
very well. the mod 160 has 4 NPU's, 2 per bay. So if you have a 4x10 MPA to serve a satellite, you effectively have a single NPU per 20 1Gigs from the satellite. The pps performance will be stellar. However it might be price technically more ideal to connect satellite with a 36x10. Since the MOD-x has native MPA's with 1G also.
2. Is there a shortcut for a Bundle-EthernetX interface, such as port-channel interface (poX), in Cisco IOS® ?.
usability enhancement is there, we are trying to push this into a new reasonable release. follow CSCuh04526
3. What is the revolutions per minute (RPM) on these hard disk drives (HDDs) compared to the solid state drives (SDDs)? Will the spinning drives be slow?
depends on the type we had avaialble at time of production, you will see different sizes and disks on the RSP2. the rpm of the HD is not so much an issue as much as the buffered writing we used to do in XR. This is fixed up with XR43 where the disk writing performance is much better. the HD/SDD is used for logging storage only (and maybe your pictures) but other then that we're not that concerned with write perf of the HD.
regards
xander

ASR 9000 4.2.1 l2tp vpdn config migration

Hi,
I had a Cisco 7206VXR G2. I used to use vpn l2tp on the router. 7206 config are below:
vpdn-group pppoe_customer
description ***** redback *****
accept-dialin
protocol l2tp
virtual-template 10
terminate-from hostname 192.168.96.149
source-ip 192.168.96.4
local name 192.168.96.4
lcp renegotiation always
l2tp tunnel password 0 ericsson
l2tp tunnel timeout setup 3600
ip mtu adjust
How to migrate or apply on ASR 9000 this config?

Hi,
since there are different approaches and options to consider due to the nature of the ASR9K and IOS XR, I suggest you read this documentation and decide how to do the config based on your knowledge of the network you have.
http://www.cisco.com/en/US/docs/routers/asr9000/software/asr9k_r4.2/bng/configuration/guide/b_bng_cg42asr9k.pdf
plz Rate if it helped,
Soroush.

LMS 3.2/CiscoView 6.1.9 : ASR 9000 not supproted

Hi,
Do you know when ASR 9000 will be supported in ciscoview ?
Many thanks, Elisabeth

It is my understanding that IOS-XR devices will never be supported in CiscoView.

ASR 9000 series PPP session limit

Hello!
Guys could you plese tell how many ppp sessions ASR 9000 can terminate.We are planning no build SP network I know 7600 series routers cаn terminate 64k ppp session per box ( 16K per ESP+ module 8K per SIP module).
Unfortunately I could not find any information regarding this matter anyware.
A believe A9K-SIP-700 module can do that.
Thanks a lot

Correct, when you are using a bundle, the resources are replicated and programmed on all NPU's that have members in that bundle.
So for instance, if you have a MOD80 linecard, and you have 2 members in a bundle, and each member is located on a different NPU, then you will be limited to 32k subs TOTAL on that linecard, because the first limit
There is a limitation of 32k subs per NPU.
is already met.
And well stated indeed! The disadvantage is that we burn the same structures on multiple NPU's, so duplication of programming maybe, but it does provide for Advtange of seamless failover between bundle members.
To continue on your design: if I'd have a 36x10 card, which 6 NPU's and 2 member bundles, I can easily reach 64k
even if the bundle members are spread over 2 NPU's.
I would need 2 linecards for this obviously.
With a MOD80, having 2 NPU's, and 2 member bundles whereby the members are connected to each NPU, I am limited to 32k subs on that LC because of the first limit, but if I have 4 linecards like this I can have 4x32k subs no problemo
because then we hit the system scale clause.
Not sure if this makes it more clear or whether I am confusing you more, but let me know if this makes it more complex
and I'll try again
regards
Xander Thuijs CCIE #6775
Principal Engineer
ASR9000, CRS, NCS6000 & IOS-XR

How to configure snmp on loopback interface, on vrf TEST, in ASR 9000 series

Hi there!
How to configure snmp v2, with community string, for ASR 9000 series, in interface loopback 1, that has vrf TEST
Regards!

oh that is somewhat vague, but let me try...
in order to enable snmp access to an interface in a vrf you need to enable MPP (management plane protection) in that vrf.
Something like this:
control-plane
management-plane
inband
interface Loopback100
allow all
if you have this and it doesn't work, a config snippet and some debugs (like debug snmp packet) will help to define what to do next.
regards
xander

Anomalies found when downgrade ASR 9K IOS XR 4.3.0 to 4.2.1

Hai,
I have problem when downgrade ASR 9K IOS XR version 4.3.0 to version 4.2.1 on RSP 440
This is the capture :
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#sh instal active summary
Wed Apr 17 22:42:21.303 UTC
Default Profile:
SDRs:
    Owner
Active Packages:
    disk0:asr9k-mini-px-4.3.0
    disk0:asr9k-k9sec-px-4.3.0
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#
then this is capture after upgrading proces :
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN#show install active summary
Thu Apr 18 02:14:29.457 UTC
Active Packages:
    disk0:asr9k-services-p-px-4.2.1
    disk0:asr9k-mini-px-4.2.1
    disk0:asr9k-doc-px-4.2.1
    disk0:asr9k-k9sec-px-4.2.1
    disk0:asr9k-mpls-px-4.2.1
    disk0:asr9k-mgbl-px-4.2.1
    disk0:asr9k-mcast-px-4.2.1
    disk0:asr9k-fpd-px-4.2.1
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN#admin
Thu Apr 18 02:14:37.632 UTC
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#show install inactive summary
Thu Apr 18 02:14:42.139 UTC
Default Profile:
SDRs:
    Owner
Inactive Packages:
    disk0:asr9k-mini-px-4.3.0
    disk0:asr9k-k9sec-px-4.3.0
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#
when i verify packages, there are anomalies found
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#install verify packages
Thu Apr 18 02:17:07.973 UTC
Install operation 29 '(admin) install verify packages' started by user 'cisco'
via CLI at 02:17:08 UTC Thu Apr 18 2013.
The install operation will continue asynchronously.
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#Info:     This operation can take up to 2 minutes per package being verified.
Info:     Please be patient.
Info:     0/4/CPU0 [LC] [SDR: Owner]
Info:         meta-data: [SUCCESS] Verification Successful.
----output omitted--------
Info:         /install/asr9k-base-4.2.1: [SUCCESS] Verification Successful.
Info:     0/RSP1/CPU0 [RP] [SDR: Owner]
Info:         meta-data: [ERROR] Detected anomalies.
Info:         /install/iosxr-infra-4.2.1/instdb/component.db: exists with
Info:     unexpected file size.
----output omitted--------
Info:         0/4/CPU0: SUCCESSFUL. No anomalies found.
Info:         0/0/CPU0: SUCCESSFUL. No anomalies found.
Info:         0/7/CPU0: SUCCESSFUL. No anomalies found.
Info:         0/RSP1/CPU0: Too many anomalies found.
Info:         0/RSP0/CPU0: Too many anomalies found.
Info:         Anomalies found on both the RPs.
Info:         Please contact your technical services representative to repair
Info:     the system.
Install operation 29 completed successfully at 02:18:16 UTC Thu Apr 18 2013.
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#RP/0/RSP0/CPU0:Apr 18 02:18:56.272 : canb-server[150]: %PLATFORM-CANB_SERVER-3-MESSAGE_FAILED : Unexpected CBC message received from slot 0/4/CPU0 [ver 20.115] for msg type 3, id 105, len 8
RP/0/RSP0/CPU0:Apr 18 02:23:04.937 : ifmgr[245]: %PKT_INFRA-LINK-3-UPDOWN : Interface MgmtEth0/RSP0/CPU0/1, changed state to Down
RP/0/RSP0/CPU0:PE3-D2-JT2-VPN(admin)#
I did rollback and reinstall, and issue still same.
Anyone please help me.
Thanks

Hi,
We can try to fix the anomalies with a package repair operation or by restarting the instdir process. Please try the repair option first.
' admin install verify packages repair'
Or
'process restart instdir'
Restarting the above process has no service impact on the router.
Let me know the result of trying the above steps.
Thanks,
Sam Milstead
CSE - XR TAC

ASR 9000 route-policy on ipv4 and vpnv4 neighbors

Hi
To reduce configuraton i would like to use the same route-policy for ipv4 and vpnv4 routes from the same neighbors on ASR 9000.
I know that a "pass all" route-policy will work just fine, also a route-policy like this works fine:
route-policy eBGP_NEIGHBORS
    set local-preference 50
endif
end-policy
But why doesn´t this route-policy work?
rd-set EXT_SERVICES_PRIMARY
1.1.1.1:*
end-set
rd-set EXT_SERVICES_SECUNDARY
2.2.2.2:*
end-set
route-policy eBGP_NEIGHBORS
if rd in EXT_SERVICES_PRIMARY then
    set local-preference 120
elseif rd in EXT_SERVICES_SECUNDARY then
    set local-preference 20
else
    set local-preference 80
endif
end-policy
The effect of this is that vpnv4 routes looks just fine but ipv4 routes is missing in bgp table. I have tryed all kind of configs but it just will not work, what am i missing?
The idea of this route-policy is that routes advertised by rd 1.1.1.1 will act as primary and rd 2.2.2.2 as secundary.
1.1.1.1 and 2.2.2.2 is handleing the same routes.
1.1.1.1 is located in one AS and 2.2.2.2 in an other AS
my ASR that i am working on is in a third AS
And alla other routes will have a default local-pref of 80

If you watch the if statement, you're challenging that if the RD is something, or else, else... but, maybe, it doesn't work if you don't have an RD.
Based on the Mohit's answer I think that maybe, that's the reason.
route-policy eBGP_NEIGHBORS
if rd in EXT_SERVICES_PRIMARY then
    set local-preference 120
elseif rd in EXT_SERVICES_SECUNDARY then
    set local-preference 20
else <<< So if not "EXT_SERVICES_PRIMARY" and not "EXT_SERVICES_SECUNDARY", but stills in "if rd.."
    set local-preference 80
endif
Mohit's:
route-policy eBGP_NEIGHBORS
if rd in EXT_SERVICES_PRIMARY then
    set local-preference 120
elseif rd in EXT_SERVICES_SECUNDARY then
    set local-preference 20
endif
    set local-preference 80 >>>> Outside the if statement!
  end-policy.
Let us know if the Mohit's answer worked! Just to learn something new :)

How to terminate a vlan on ASR 9000 and bridge it to a port on asr 9000

hi guys;
so here is another issue i have.
Scenario:
a switch in the north is trunking a VLAN for a client at our central site. The switch in north site is a 3560 and central site node is ASR 9000.
This vlan is extended along with few others to distribution switch (7609) and from there teh same VLAN is trunked to a 2960 device at the same site as that of ASR. The idea is to carry the vlan from teh reote site to teh ASR at our central site and then bridge it to a seperate port on ASR and hook this port up to our fibre patch panel, hence providing a service to the client connecting to us at our northern site and then getting connected to teh internet service provider via teh patch panel.
Since we can not make a port on ASR an access port, i am not sure how we can do the above mentioned interconnect.
please assisst.
regards

Hello Jalal,
Here the configuration example:
interface GigabitEthernet0/0/0/0.100 l2transport
encapsulation dot1q 100
rewrite ingress tag pop 1 symmetric
interface GigabitEthernet0/0/0/1
l2transport
l2vpn
bridge group cust1
bridge-domain cust1
interface GigabitEthernet0/0/0/0.100
interface GigabitEthernet0/0/0/1
GigabitEthernet0/0/0/1 is the access port (untagged).
interface GigabitEthernet0/0/0/0.100 accepts tagged frames with vlan 100.
L2vpn bridge-domain cust1 connects both interfaces together.
GigabitEthernet0/0/0/0.100 has tag rewrite operation. Removing tag on ingress, so sending untagged to GigabitEthernet0/0/0/1, and pushing tag 100 on egress, so untagged frames from gi0/0/0/1 got tagged.
Regards,
/A

ASR 9000 traffic capture - no monitor command

Hello,
unable to capture traffic on asr 9000 (5.1.3) - no 'monitor' command is available.
what software packed need to be installed and activated on asr router to solve this problem?
thanks,
Piotr

Hello Ahmed,
You may want to have a look at below article. The below article has all the things which we require to check and configure the NETFLOW.
https://supportforums.cisco.com/document/113076/asr9000xr-netflow-architecture-and-overview
Below is from CCO suggesting limitations as well.
http://www.cisco.com/c/en/us/td/docs/routers/asr9000/software/asr9k_r4-2/netflow/configuration/guide/b_netflow_cg42asr/b_netflow_cg42asr_chapter_00.html#con_1068018
HTH,
Nikhil

Cisco 7206 vxr to ASR 9000 BGP config migration

Hi,
I had a cisco 7206 vxr. I have just ASR 9000. I'm going to replace c7206vxr to ASR9000. I can tried to bgp config but I didnt see distribute-list for ASR9000.
c7206 config are below:
router bgp 100
no synchronization
bgp log-neighbor-changes
bgp suppress-inactive
neighbor 10.10.10.54 remote-as 101
neighbor 10.10.10.54 description *** ISP1 ***
neighbor 10.10.10.54 password 0 test
neighbor 10.10.10.54 update-source GigabitEthernet0/2.387
neighbor 10.10.10.54 prefix-list RED in
neighbor 10.10.10.54 distribute-list 12 out
neighbor 10.10.10.54 route-map PREF in
neighbor 10.10.10.54 route-map FAR out
neighbor 10.10.10.54 filter-list 9 in
ip prefix-list RED seq 2 deny 192.168.0.0/25
access-list 12 permit 192.168.96.0 0.0.3.255
ip as-path access-list 9 permit ^(101_)+
route-map PREF permit 10
set local-preference 150
route-map PREF permit 20
route-map FAR permit 10
match ip address example
set as-path prepend 100 100 100
route-map FAR permit 10
My ming so confused. Could you help me somebody ? How can migrate this config for the ASR9000 format?

Hello Umit,
The functionality is done with RLP as well. Here is the quick example. (note, I didn’t verify on a life router, but you should get an idea on how to implement it).
prefix-set pfx_acl_12_p1_permit
192.168.96.0/22 ge 22
end-set
route-policy FAR
   prepend as-path 100 3
end-policy
route-policy policy_nbr_10_10_10_54__ipv4_unicast_out
if (destination in pfx_acl_12_p1_permit) then
   apply FAR
endif
end-policy
router bgp 100
bgp log neighbor changes
neighbor 10.10.10.54
remote-as 101
description *** ISP1 ***
password clear Test
update-source Gigabitethernet0/0/0/2.387
address-family ipv4 unicast
   route-policy in
   route-policy policy_nbr_10_10_10_54__ipv4_unicast_out out
Regards,
/A

What's the function of Punt FPGA in RSP switch fabric part of ASR 9000?

What's the function of Punt FPGA in RSP switch fabric part of ASR 9000?

What's the function of Punt FPGA in RSP switch fabric part of ASR 9000?

BFD COS Marking on ASR 9000

I'm trying to set COS 6 on BFD packets originated by ASR 9000. Below is my config. Although BFD packets have IP PREC of 6, COS is set to 0, as seen on Wireshark capture.
Do I need to do something special to set COS for locally originated packets? Specifically BFD?
Also I came across one Cisco presentation mentioning:
LOP (local originated packets) on 12k/CRS
"All LOPs marked with ‘qos-group 0’ – important for uniform/pipe model "
May be my config of qos-group 0 setting COS to 0 is messing it up?
class-map match-any GRP_6
match qos-group 6
match precedence 6
match mpls experimental topmost 6
end-class-map
class-map match-any GRP_7
match qos-group 7
match precedence 7
match mpls experimental topmost 7
end-class-map
class-map match-any GRP_0
match qos-group 0
end-class-map
policy-map MARK_OUT
class GRP_0
set cos 0
class GRP_6
set cos 6
class GRP_7
set cos 7
class class-default
end-policy-map

I'm running 5.1.3, and do not really want to upgrade just because of this issue.
I definitely see BFD, BGP and LDP packets locally originated on 9k marked with PREC 6, MPLS EXP 6 but COS 0.
If I match qos-group 0 in outbound policy-map and set COS 6, then I start seeing this BFD, LDP and BGP packets with COS 6 in Wireshark
class-map match-any GRP_6
match qos-group 6 0
match precedence 6
match mpls experimental topmost 6
end-class-map
policy-map MARK_OUT
class GRP_6
set cos 6
So I assume internally 9k is marking self-originated traffic with qos-group 0. This is not solution for my problem, because any traffic coming in to 9k and not explicitly marked to some qos-group is assumed to be qos-group 0. This way I may end up having excessive unnecessary traffic in COS 6 queue.
The bug mentioned, CSCsr32152, is not public, and I can not view any additional info on it.
So should I assume that
1. Correct behavior for 9k is to set same COS as IPPREC or MPLS EXP for locally originated traffic, if egress interface has dot1q header.
2. This behavior can not be affected by egress policy-map, except matching qos-group 0 (which is mentioned should not be possible, but my Wireshark sees it) (which will catch way too much unwanted traffic)
3. The fact that COS is not the same as IPPREC is abnormal and might be reincarnation of CSCsr32152 already fixed in 3.9.

Asr 9000 evc grouping

Do the ASR 9000's support EVC grouping / service group qos similar to the ES-20's cards?
http://www.cisco.com/en/US/docs/routers/7600/install_config/ES20_config_guide/bald_qos.html#wp1453539

The ASR9000 has a feature called "Shared Policy Instance" which allows to apply a service-policy to the aggregate traffic of a set of subinterfaces:
http://www.cisco.com/en/US/docs/routers/asr9000/software/asr9k_r4.0/qos/configuration/guide/qc40clas.html#wp1895131
Hope this helps,
JC

What is the difference between Service Edge Optimized line cards and Packet Transport line cards in the ASR 9000

Hi Folks,
What is the deep dive difference between the service edge optimized cards and the packet transport line cards in the ASR 9000?
I know that QoS is the difference in general, for example, the service edge optimized has advanced QoS features while the Packet Transport line cards has basic QoS features but I want to know some more details please.
Thanks

There are four main deiffences (unfortunately don't have a reference link).
L3 Interfaces:
TR: 8k/LC, SE: 20k/LC
L2 Interfaces:
TR: 16k/LC, SE: 64k/LC
QoS:
TR: only 8 Queues per port, 8k policers per Network Processor
SE: 256k Queues per port, 256k policers per NP
ACL:
TR: 24k ACE
SE: 96k ACE
Number of FIB/mFIB/MAC etries, L3 VRFs, PWs available per TR/SE linecard are the same.

ASR 9000 IOS-XR 5.22 BNG: PPPoE termination with PWHE

Similar Messages

Maybe you are looking for