EoMPLSoGRE using ASR 1000

Hi All,
I need to extend Layer 2 between two Data Centers over IP cloud. I am looking at the EoMPLSoGRE option and wondering which ASR I need to buy to have this feature working. Will basic model of ASR 1000 do? Or, do we have to buy any specific model of ASR ( and SPAs) for this EoMPLSoGRE to be working. Any specific version of IOS needed for this feature?
As of now, we have L3 MPLS VPN between the sites, terminated on Cisco 3900 series routers. We want to use this IP cloud to build this L2 extension just temporaily for migrating some servers where we cannot change the IP address of the servers due to application complexities.
Any help is hightly appreciated. Also, if you can point me to a sample setup and configuration for EoMPLSoGRE, it would be of great help.
Thanks and Regards,
Mohan Muthu

Any ASR Model running IOS XE 2.4+ supports ATOM Over GRE, i would recommend you to read this document in detail, and tell us if you need any further help.
http://www.cisco.com/en/US/prod/collateral/routers/ps9343/Deploying_and_Configuring_MPLS_Virtual_Private_Networks_In_IP_Tunnel_Environments.pdf

Similar Messages

EoMPLSoGRE on ASR

Hi All,
I need to extend Layer 2 between two Data Centers over IP cloud. I am looking at the EoMPLSoGRE option and wondering which ASR I need to buy to have this feature working. Will basic model of ASR 1000 do? Or, do we have to buy any specific model of ASR ( and SPAs) for this EoMPLSoGRE to be working. Any specific version of IOS needed for this feature?
As of now, we have L3 MPLS VPN between the sites, terminated on Cisco 3900 series routers. We want to use this IP cloud to build this L2 extension just temporaily for migrating some servers where we cannot change the IP address of the servers due to application complexities.
Any help is hightly appreciated. Also, if you can point me to a sample setup and configuration for EoMPLSoGRE, it would be of great help.
Thanks and Regards,
Mohan Muthu

Hi,
You need IOS XE 2.4.1 minimum to have this feature.
HTH
Laurent.

I have asr 1000 with asr1000rp2-adventerprisek have problem when I gave PPP Multilink to the interface Dialer

Hello,
please Urgent Help
I have ASR 1000 with asr1000rp2-adventerprisek Version, when I give PPP Multilink to the dialer interface it show following error :
FMFP-3-OBJ_DWNLD_TO_CPP_FAILED: F0: fman_fp_image:
MLP bundle , link download to CPP failed
please urgent help

this error comes with the command PPP multilink, it is a lot of letters and numbers and then this last line comes this message
FMFP-3-OBJ_DWNLD_TO_CPP_FAILED: F0: fman_fp_image:
MLP bundle 181, link 178 download to CPP failed
the configuration still not installed but I configured just the following lines
interface Virtual-Template
ip unnumbered Loopback2
ip mtu 1440
ip load-sharing per-packet
ip tcp adjust-mss 1400
no logging event link-status
peer default ip address pool
ipv6 unnumbered Loopback2
ipv6 enable
no ipv6 nd suppress-ra
ppp authentication pap chap callin
ppp multilink
ppp multilink fragment delay 100
ppp multilink mrru local 1546
that were the lines used to configure this Dialer, the image must be asr1000rp2-adventerprisek and not Ipbase but I dont tried to use IPbase.
what do think ?

MPLS PE/P 7600 or ASR 1000

hi,
We are planning to change our 7206VXR as P/PE routers. Currently we only have 2 nodes that is running on STM-1. on each node we have 7206VXR NPEG2 that is acting as PE and P router.
our requirement is getting bigger we will be upgrading our WAN links to STM-4 soon (and to STM-12 in the future) and we will also be adding more nodes.
I'm confused on what platform would be best for our network, 7600 or ASR1000......7600???? 7606 or 7604? ASR 1000???? ASR1004 or ASR 1006.
I want my router to accomodate the growth in the network.
I need your advise/expertise on this.
Thanks in advance....
Rachelle

Hi,
ASR1k runs IOS-XE, which is IOS. It does not run IOS-XR. ASR9k runs IOS-XR.
The newer platforms, like ASR1k, ASR9k, have more throughput, while 7200 e.g. has a bigger
range in different kinds of port adaptors. If you only plan to use ethernet interfaces for example, then
you could only look at the newer platforms like ASR1k, ASR9k, or even 7600 and choose
a specific model based on the number of ports you'd need.
Thanks,
Luc

Where to check license details - ASR 1000 firewall

Hi,
I am looking for for details meaning of license because I cannot found the details install. The license call
FLASR1-FW-RTU(=)
that is used to enable the firewall function in ASR 1000 series. But I don't clear about what feature inside, it is because it only show the "firewall" from website. Is that same as IOS firewall?
Thanks!

Hello,
If you look at the ordering guide: http://www.cisco.com/en/US/prod/collateral/routers/ps9343/product_bulletin_c07-448862.html
Firewall service: The Cisco ASR 1000 Series Router Firewall application requires a RTU license (FLASR1-FW-RTU(=)), which allows you to enable Layer 4-through-Layer 7 firewalling. To enable per subscriber/user firewall in broadband and enterprise deployments, the firewall RTU license, as well as the number-of-session licenses listed in the "Broadband service" section, is required. Please refer to the "Per subscriber/user firewall service" section.
Now, if you want to know more in detail what the ASR1000 can do, you can refer to the product documentation: Network Security Features for Cisco ASR 1000 Series Routers: http://www.cisco.com/en/US/prod/collateral/routers/ps9343/data_sheet__network_security_features_for_cisco_asr_1000_series_routers.html
You have a full paragraph explaning zone based firewall, search for "Cisco IOS Zone-Based Firewall"

Runtime Error in BOM -System attempted use dynpro 1000 program "SAPLXCSA"

Hi Guru's,
While Creating BOM in IS-Retail server using CS01 Tcode,
I am getting a ABAP Runtime Error :
"The system attempted to use dynpro 1000 in program "SAPLXCSA".This dynpro does not exist".
To correct this error Whether any configuration is required in SPRO for BOM ???
Please suggest how to solve the issue ???
Any Input is Highly Appreciated.
Thanks and Regards,
Selva

OSS NOTES

Error message on ASR 1000 logs.

Hi Everyone,
Good day.
I am seeing the below errors from the ASR 1000 that I have and It is not very clear on what the error actually means.
If someone have had experience with this kind of similar error message, kindly assist:
Apr 11 12:02:08.744 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:09.442 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:13.381 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:13.986 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:18.312 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:18.765 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:22.827 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:23.449 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:27.777 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:28.090 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:32.649 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:32.686 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:37.397 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:37.552 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:42.062 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:42.259 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:46.775 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:47.200 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:51.347 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:51.977 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:56.271 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:02:56.835 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:01.140 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:01.787 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:06.064 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:06.325 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:10.949 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:11.039 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:15.533 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Apr 11 12:03:15.858 AEST: ASR1000-INJECT: can't find tunnel adj for 0.0.0.0
Thanks
Kanes.R

Hi,
Ok, the message is indicating that one of the tunnels can't find the adj device through default route (0.0.0.0)
Check your tunnels and make sure they are all working correctly and have peering. I am not sure if this is possible, but see if you can figure out if the tunnels have been running for some times or anyone of them flapping
HTH

Do I need to configure something different,when I'm using SCXI-1000,1102 and 1180, together.?

I am wanting to use SCXI-1000 with 2 modules SCXI-1102, but I also want to access the DAQ (ni pci 6035), through the SCXI-1180, to access some Digital I/O. How can I do that? What cable type between the SCXI and DAQ (6035) do I need to use? Do I need to configure something different? When I only configure the SCXI-1000 and SCXI-1102, I use the cable with 68 pins in both extremities and I don't have problems. But when inserting SCXI-1180, a following error message it is generated:
"Dev1" digital lines 0, 1, 2 & 4 are in use by the connected SCXI subsystem.
It happens when observing DIGITAL I/O in Test Panel in M A X.
thanks
Brás

Thanks for the information! The examples sent me, were useful, but always I use Digital functions, just after I can't perform tests with SCXI, it doesn't respond, it becomes inactive until I reset Traditional NI-DAQ Devices.What can I do to have the VI attached running well? Can you help me?
thanks
José Brás
Attachments:
E_ser_dig_test.vi ‏109 KB

ASR 1000 election

Hello all,
We are about to change our Internet Gateway Routers in our main datacenter. Now we have two C3945 as a Internet Gateway Routers and other two C3945E as Core Routers.
We are evaluating the possible alternatives and we think that the ASR 1000 series is the better solution for us. But we have reviewed the Ordering Guide and we have several doubts about that. Our first approach was buy two ASR 1001 in order to substitute the actual four routers. In theory this solutions offers us 100% redundant scenario (hardware and software) but in the Ordering Guide specifies the following: software redundancy (FLSASR1-IOSRED) is not recommended for Internet Gateway deployments.
What means this exactly ? Why is not recommended the software redundancy in the Internet Gateway deployments?
The second approach is install just one 1006 with redundant RP and ESP. But maybe this deployment is too big for our organizations. Also in this case the solution is not 100% redundant.
Could someone help us with this topic?
Regrads,

Hi Xander,
Thanks for your reply. I apologize if it is not the correct sub-forum to post my question. Maybe the forum description confused me:
Access troubleshooting, configuration, protocols, and technical resource topics on Cisco XR OS and Platforms for enterprise applications and Cisco Product connections, including: XR OS and Platforms, ASR 1000, ASR 9000, ASR9K, MPLS, IOS XR, XR PIEs, XR AS9000.
Anyway, I can understand from your answer that Cisco has not tested yet certain functionalites with dual-IOSd. I do not understand how this can affect in a scenario with double chassis (two ASR1001 for example). Maybe I'm forgetting something important...
I will take a look to the Cisco ASR9001 as you recommend.
Regards,

Can I use SCXI 1000 (110v US model) in 220V 50Hz country?

Somebody is selling SCXI 1000 with couple modules to me at a very good
price. However, it is a US model(110V) while in my region we use 220V
50Hz. Can I use a fransformer to convert 220V to 110V and use
with this chassis? Are there any know issues? This will be used for
hobby projects. Not a mission critical task
Thank you.
Message Edited by System on 08-20-2005 01:35 AM

just4fun,
Let me start my response by saying that most likely there should not be
any problems with using a transformer. If I were you, I would
purchase a voltage adaptor that also changes the frequency of the power
supply from 50 Hz to 60 Hz. Neglecting to change the frequency
could cause problems in some devices that have power supplies not
intended for 60Hz VDC power (this could lead to a noisy DC power line).
With that said, the newer SCXI chassis can handle the different
voltage levels without a voltage adaptor, but you are supposed to
change the fuse inside the power supply to a lower amp fuse if you
switch from 110 to 220. You should be able to determine what
types of power you can connect to the scxi-1000 (110V/60Hz or
220V/50Hz) by reading the labels on the back of the SCXI chassis.
If the labels on the back of the SCXI chassis make no sense, feel free
to reply with the info from the labels in an email and I can help you
decipher them.
I hope this helps,
Lorne Hengst
Application Engineer
National Instruments

Error on executing fpclose.vi when using FP-1000 and two FP-TC-120 modules

I have an error occuring in my LabVIEW program when closing the Field Point connections.
I am using LV8.5 and im connecting to a FP-1000 controller (RS-232 native port) which connects to two FP-TC-120 modules, under XP.
The error i get is 'Error 33589' caused by 'FPClose.vi', it is actually the second 'FPClose.vi' that produces the error as indicated in the picture by the giant arrow. Strangely it doesn't seem to have an effect of the program and it runs and disconnects as it should, its mostly just bugging me.
I can't find this error listed anywhere, nor can i find a nice long list of the errors.
I have a niggling feeling that when i close the FP read tags with the FPClose.VI i'm actually closing connection to the FP module and hence not closing the system down as was intended.
I would be grateful is someone would instruct me as to the cause of the error, and what i should be doing to correctly close down the FP module.
Solved!
Go to Solution.
Attachments:
fperror33589.jpg ‏190 KB

Well I managed to get to the bottom of the problem, it was not caused by FPClose!
The errors where obviously being cascaded through FPClose and while the 'error out' stated that the source was the second 'FP Close.vi' it was actually from the second 'FP Read.vi'. The fact that the IAK was in a loop was not the cause of my problem, however it is a clear sign of poor programming!
FieldPoint Read Error 33589 actually relates to the fact that some channels are deteremined to be OpenLoop. In my case i had all channels of the first bank connected to K-Type thermocouples, but only 2 channels of the second bank connected, and hence the error arose in the second 'FP Read' and cascaded to the second 'FP Close'. To consider it an error is actually a misnomer as it is actually a warning and does not have an influence on the running of the program.
I believe the original example I posted was written for LV 6.1 and FP 3.x. I have updated my own example to the updated methods used in LV 2011 and FP 6.0.9, they run much smoother than the previous method! Hopefully this might help someone else in the future.
Attachments:
NewFPExample.jpg ‏106 KB
NewFieldPointExample.vi ‏16 KB

Ip port-map user on ASR 1000 IOS XE

Hi.
I'm trying to build a firewall and wanted to use the "ip port-map user-xxx ..." command to make a custom protocol that I could then use in protocol statement insice a class-map type inspect.
Is this yet another thing missing from IOS XE, like the lack of object-group command?
Best regards.

Hello Damjan,
You are right Sr,
ASR ZBFW does not support user defined port-mapping
Now, you could match the traffic with an ACL and inspect it, the ZBFW will not break the connection, it will actually be succesfull so even though the command is not supported on the ASR1K you could still make it happen
EDIT: If you are going to create a user-defined protocol the ACL would be the same thing,
If you are trying to map a standard protocol to a non-standard protocol then you need to use the IP port-map command (not supported ASR1K)
So bottom line: In your case with the ACL you will be more than fine
For Networking Posts check my blog at http://laguiadelnetworking.com/
Cheers,
Julio Carvajal Segura

Slow OTV on Cisco ASR 1000

Hello all,
We are having problems with our slow OTV. The topology is setup as:
Main DC:::::::::::::Servers --> Nexus 5K --> ASR1K -----> (Core)---> (WAN)---->::::::::::::DR site::::::::::::::: ASR1K ---> Nexus5K ---> servers (for replication)
We have a 1 gig connection of WAN. but when our server group do replication the maximum speed is 60-70 Mbps on the WAN using the OTV link.
Other configurations are:
No Jumbo frames are allowed.
Fragmentation is allowed at the join interface of both the ASR because the of OTV header of 42 bytes.
We have full connectivity but the link is slow. What could be the possible solution?
Response will really appreciated.
Thanks

Hello, can you run ttcp along with iperf end to end and see what speeds you actually getting (not OTV but routed)
Then set your benchmark, OTV should not be extremely far off the actual speed. Please also make sure MTU is enough all the way from end to end WAN links.
Bilal - CCIE #45032

IPsec over GRE in ASR 1000 with VRF

                   Hi
I´m trying to configure IPsec over GRE tunnel between Cisco 819G remote router and ASR 1002 central router using crypto maps. Currently ASR router has two vrf´s (management vrf and EXTERNOS2 vrf) and in the future we are going to deploy different "virtual" routers from this box. I don´t know why it doesn´t work, tunnel interface doesn´t go up. Taking a view to debugs obtained from ASR router (debug crypto isakmp and debug crypto ipsecI see the following errors:
Oct 3 13:11:33: IPSEC(validate_proposal_request): proposal part #1
Oct 3 13:11:33: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 10.255.68.246:0, remote= 10.200.25.106:0,
    local_proxy= 10.255.68.246/255.255.255.255/256/0,
    remote_proxy= 10.200.25.106/255.255.255.255/256/0,
    protocol= ESP, transform= NONE (Transport),
    lifedur= 0s and 0kb,
    spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
Oct 3 13:11:33: Crypto mapdb : proxy_match
        src addr     : 10.255.68.246
        dst addr     : 10.200.25.106
        protocol     : 0
        src port     : 0
        dst port     : 0
Oct 3 13:11:33: map_db_check_isakmp_profile profile did not match
Oct 3 13:11:33: Crypto mapdb : proxy_match
        src addr     : 10.255.68.246
        dst addr     : 10.200.25.106
        protocol     : 0
        src port     : 0
        dst port     : 0
Oct 3 13:11:33: map_db_check_isakmp_profile profile did not match
Oct 3 13:11:33: map_db_find_best did not find matching map
Oct 3 13:11:33: IPSEC(ipsec_process_proposal): proxy identities not supported
Oct 3 13:11:33: ISAKMP:(35001): IPSec policy invalidated proposal with error 32
Oct 3 13:11:33: ISAKMP:(35001): phase 2 SA policy not acceptable! (local 10.255.68.246 remote 10.200.25.106)
anybody could help me to troubleshoot why it doesn´t work?
I post you involved configuration sections from ASR and 819G routers
B.R.

Ops!! I forgot to paste involved routes from both devices.
ASR router
ip route vrf EXTERNOS2 10.200.24.0 255.255.248.0 10.255.68.245 tag 6
ip route vrf EXTERNOS2 185.1.1.0 255.255.255.0 Tunnel21 tag 6          <--- c819G LAN network
Cisco 819G
ip route 0.0.0.0 0.0.0.0 Tunnel1
ip route 10.255.68.246 255.255.255.255 Cellular0
B.R.

Weirdly fluctuating inaccurate voltages reported using FP 1000

I have been using FP-100 with an FP-AI-100 and LabView for a couple years to monitor two voltages- one is a trigger and the other is the output from a detector. It has been working fine until today. For both voltages, it is reporting numbers that jump about within the reporting range (-6 to 6 volts). I used a voltmeter to measure the voltages at the output from the instrument I am monitoring- they are the fine- the problem is the Field Point unit. I see the same fluctuating values using both Field Point Explorer and LabView. I switched the wires to two different channels- it didn't help. What should I try?

Hi Kate,
It sounds like you are following the proper troubleshooting procedures. You have verified that the signals coming into the unit are still giving good values, and you have tried different input channels on the FP-AI-100. If you are seeing the wrong values in FieldPoint Explorer, then you will not be able to get the good values in LabVIEW, so the problem is somewhere imbetween.
There are a couple of things you could try... first, you could try using a different serial cable for connecting the FP-1000 to the computer in case that is the faulty part. You could also try a different AI module if you happen to have access to one. That could tell us if the problem is with the AI module or with the FP-1000 controller module.
If none of this solves th
e problem, it is possible that the hardware has sustained some type of error. If you feel this is the case, I recommend contacting NI through technical support, either email or phone, in order to finalize troubleshooting and perhaps have it sent in for repair if necessary.
-JohnM

EoMPLSoGRE using ASR 1000

Similar Messages

Maybe you are looking for