Frame generated by Nexus 7000 contains unexpected trailer when using GRE
I have observed some unexpected behaviour on a Nexus 7000 running 6.1(2) in respect of the Ethernet II frame generated when the Nexus 7000 is a GRE Tunnel endpoint.
The device receiving the Frame is discarding it and I waiting for the vendor to confirm the reason for this discard. However in case the reason is due to the Ethernet frame being "unusual" I am curious if any one else has come across this.
To generate the Frame I perform a ping (on a workstation) which the Nexus 7000 in encapsulating in a GRE tunnel. Using Wireshark on the Nexus 7000 egress interface I observed that the Frame contains the following protocols as expected; ETH:IP:GRE:IP:ICMP:data
When I issue the command "ping -l 1" on the workstation the Frame details from Wireshark are:
Frame 84 bytes on wire
Total IP payload = 53 bytes
Outer IP header (20 bytes)
GRE ( 4 bytes)
Inner IP header (20 bytes)
ICMP (header 8 bytes payload 1 byte)
Ethernet Trailer length = 17 bytes
What is curious about this Frame is that;
a) No Ethernet Trailer is needed as the IP payload exceeds 46 bytes
b) The amount of padding applied is what would be needed if the Inner IP datagram were encapsulated directly in an Ethernet II Frame. The Inner ip datagram is 29 bytes octets and hence padding needed = 46 - 29 = 17.
By doing ping sweep from length 1 to 18 the observed padding was;
1,17
2,16
3,15
17,1
18,0
So it would appear that the Nexus is adding padding to the Ethernet frame as though it were containing the pre GRE payload only.
What module are you using?
Ron
Similar Messages
-
Safari may unexpectedly quit when using flash type games that require farmville
Safari may unexpectedly quit when using flash type games that require farmville
Safari may unexpectedly quit when using flash type games that require farmville
-
Illustrator CS5 Unexpectedly Quits when use Hotkey's
Hello,
Does anyone have an issue when using hotkey's in Illustrator CS5? Every time I switch using a hotkey, my Illustrator unexpectedly quits. It is a paid student edition.Well the app should not be crashing simply using tool shortcuts.
First thing to try would be trash the prefenceses file.
Quit Illustrator.
Go to Users/[your account]/Library/Preferences/Adobe Illustrator CS5 Settings/en_US/ and drag the "Adobe Illustrator Prefs" file to your desktop.
Then relaunch Illustrator and see if the problem is fixed.
If it's fixed, simply trash the file on yoru desktop.
If it's not fixed you may need to look into an OS issue by logging in as a new user and trying it, or booting into Safe Mode (hold shift while booting system) to see if that fixes the issue. -
"Final Cut Pro generated an error or unexpectedly" Error when using Qmaster
Hello all I have Final Cut Studio 3. I am using the latest Final Cut and the latest compressor.
I have a Core i7 so i am trying to use all 8 virtual threads or at least four. However when I use the "This Computer" option in compressor it is not an issue. It will compress fine. However, when i use the virtual cluster i set up with QMaster i get the dreaded "Final Cut Pro generated an error or unexpectedly" and it fails. I am unsure what to do. Here are the circumstances:
When I to compressor from FCP and use "this computer" it is no problem.
When I send to compressor from FCP and try to use your personalized cluster (taking advantage of those expensive cores!) it won't work. it fails and give me the aforementioned error.
I have enclosed a video which can be seen at:
http://www.youtube.com/watch?v=ZyKsw8ii5Ig
PS I know that I can make the file quick time self contained, but this program should work on it own.Virtual Clustering works by launching multiple copies of the Compressor encoder, each of which needs access to the source media that you are compressing. This is fine if you are compressing from a source movie clip, as they can just open the file multiple times.
But when you export from Final Cut Pro, FCP can only communicate with one copy of the encoder - it cannot launch multiple copies of itself. *Consequently, you cannot export to a virtual cluster from the Send to Compressor command.*
A common misconception is that exporting to a QuickTime movie is slower. This is wrong - it is actually faster for two reasons - 1) it is faster to read the file directly than to request each frame from FCP and 2) you have access to virtual clustering. If your timeline is completely or partially rendered, deselect Make Self-Contained and the QuickTime export will be quicker.
Another issue is that you are using up all of your virtual cores, leaving nothing left over for the operating system. There are varying schools of thought on how many to choose, ranging from the total number of cores minus one to half the number of cores (the latter being Apple's official suggestion). Also remember that each instance requires at least 1 GB of RAM, and remember to leave some extra for the OS and running applications. -
Satellite L505-10K - Unexpected error when using recovery disk creator
Toshiba Satellite L505-10k
Can't make any recovery disc when I open toshiba recovery media creator, it says: an unexpected error occurred. Close the program and then restart it (error code: 0D00F6-49-00000015) and then I click ok and then it comes again and then I click ok and it comes again and I click ok and then the program comes and when I create the disc it comes to the verification, but then it says: Unable to read the following file. E: \ Boot \ fonts \ chs_boot.ttf (error code: 02015-20-00000000).
I really do need help, I'm afraid something will happen to my computer, so is there anyone who knows something about this kind of problem?
Thankful for your help.Hi
I don't now if that works be cause when I got my computer I tried to create an recovery disc but it says yeah, you know, and I was looking in the folder if the file was there as it says that it could not read but the file isn't there so I don't think that it works to do an recovery from the HDD but I know that I can order an recovery disc from toshiba but I don't know if it works to do an recovery with it du you think so? but if I order an recovery disc do you think that I can get it for my language? I'm from sweden. -
Unexpected error when using appendChild() in SDK 3.4 and above
I'm using an API class to build XML objects within AS3 and passing them as a String (of well-formed XML) to a Web service. This class has worked just fine in Flex 3.0:
public class MyXMLClass
private var message:XML = <root></root>;
public function MyXMLClass()
message.appendChild(<arguments></arguments>);
public function setArgument(name:String):void
message.arguments[0].appendChild("<argument name=\"" + name +"\"></argument>");
public function setArgumentValue(name:String,value:String):void
message.arguments[0].argument.(@name == name).appendChild("<value>" + value + "</value>");
public function getMessage():XML
return message;
//Take the result of getMessage().toXMLString() and pass that into the Web service as a String.
But now that I am running Flash Builder whether I compile with 3.4 or 4.0 SDK I get:
Error #1086: The appendChild method only works on lists containing one item.
The line of code it chokes on is the setArgumentValue function.Yeah that was it Alex. The following code change worked:
public function setArgument(name:String):void
message.arguments[0].appendChild(<argument name={ name }></argument>);
public function setArgumentValue(name:String,value:String):void
message.arguments[0].argument.(@name == name).appendChild(<value>{ value }</value>);
This now works in SDK 3.4. Unfortunately SDK 4.0 (Adobe Forums: Discrepancy in XML between Flex 3.4 and...) breaks all my XML but at least I can cross this one off. Thanks.
11/15/09: Glad to report having found a workaround for the other issue mentioned above. -
Otlook 2007 unexpectedly quits when using Acrobat 8.1 Automatic Archival
I can't seem to use Auto Archival or Convert to Adobe PDF functions in Office Outlook 2007. After processing a few emails, Outlook unexpectedly quits. Any thought about it? Thanks.
If you are having problems creating a PDF, there are two steps you should do FIRST
Go to the appropriate vendor web site and apply all updates to the program you are using (several recent messages have concerned problems with MS Office conversion, with the response that different versions of Office have different BUGS that must be fixed by a download from Microsoft - and MS Office products are not the only ones which may, from time to time, need to be updated to work properly)
Go to the Acrobat update page and apply the updates for your version of Acrobat
IN NUMBER ORDER (updates are not cumulative so, using version 8 as an example, you must apply 8.1.0 before the 8.1.1 update)
http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows -
Unexpected result when using Ls -L
I'm no code warrior, and I'm studying the ATS book Mac OSX Support Essentials.
When I type Ls -L, I get a list of the folders/directories in the home folder but not the info that the CLI returns for the book.
Typing Ls -Le returns the exact same result as typing Ls -L.
I've tried both multiple times.
This discrepancy is really not helping me understand, and I MUST pass this exam. If I can't even get past chap 3, I'm dead.
Any help will be greatly appreciated.
DLSI get a list of Folders in a table format:
test-installs-macbook-pro:~ testinstall$ Ls -L
Desktop Movies Send Registration
Documents Music Sites
Downloads Pictures
Library Public
In the Book it returns a list format with the item type and permissions followed by number of subitems, owner, assigned group, modification date and the item's name.
The format in the book looks like this:
drwx----------+ 5 owner staff 170 Aug 20 15:49 Desktop
drwx----------+ 3 owner staff 102 Aug 20 01:08 Documents
I don't get this so I hit a brick wall for the rest of the lesson which builds upon this.
Thanks for your help
DLS
Message was edited by: MacDLS -
Directory strructure containing albums duplicated when using ADD FOLDER
I have a media PC that I hold all my albumns on networked... Ive used itunes on my laptop and added the root directory to the library (add folder etc). However if i add new albums to the media pc itunes doesnt pick them up and if I re-add the route directory I get the whole lot duplicated (plus the new ones)... is there a way to refresh so itunes only picks up the new ones ?
I cant just remember the albums as they are stored by artist not albumanybody ???
-
Nexus 7000 - unexpected shutdown of vPC-Ports during reload of the primary vPC Switch
Dear Community,
We experienced an unusual behavior of two Nexus 7000 switches within a vPC domain.
According to the attached sketch, we have four N7Ks in two data centers - two Nexus 7Ks are in a vPC domain for each data center.
Both data centers are connected via a Multilayer-vPC.
We had to reload one of these switches and I expected the other N7K in this vPC domain to continue forwarding over its vPC-Member-ports.
Actually, all vPC ports have been disabled on the secondary switch until the reload of the first N7K (vPC-Role: primary) finished.
Logging on Switch B:
20:11:51 <Switch B> %VPC-2-VPC_SUSP_ALL_VPC: Peer-link going down, suspending all vPCs on secondary
20:12:01 <Switch B> %VPC-2-PEER_KEEP_ALIVE_RECV_FAIL: In domain 1, VPC peer keep-alive receive has failed
In case of a Peer-link failure, I would expect this behavior if the other switch is still reachable via the Peer-Keepalive-Link (via the Mgmt-Port), but since we reloaded the whole switch, the vPCs should continue forwarding.
Could this be a bug or are there any timers to be tuned?
All N7K switches are running on NX-OS 6.2(8)
Switch A:
vpc domain 1
peer-switch
role priority 2048
system-priority 1024
peer-keepalive destination <Mgmt-IP-Switch-B>
delay restore 360
peer-gateway
auto-recovery reload-delay 360
ip arp synchronize
interface port-channel1
switchport mode trunk
switchport trunk allowed vlan <x-y>
spanning-tree port type network
vpc peer-link
Switch B:
vpc domain 1
peer-switch
role priority 1024
system-priority 1024
peer-keepalive destination <Mgmt-IP-Switch-A>
delay restore 360
peer-gateway
auto-recovery reload-delay 360
ip arp synchronize
interface port-channel1
switchport mode trunk
switchport trunk allowed vlan <x-y>
spanning-tree port type network
vpc peer-link
Best regardsProblem solved:
During the reload of the Nexus 7K, the linecards were powerd off a short time earlier than the Mgmt-Interface. As a result of this behavior, the secondary Nexus 7K received at least one vPC-Peer-Keepalive Message while its peer-link was already powerd off. To avoid a split brain scenario, the VPC-member-ports have been shut down.
Now we are using dedicated interfaces on the linecards for the VPC-Peer-Keepalive-Link and a reload of one N7K won't result in a total network outage any more. -
LMS 4.2.2 Interface utilisation on Nexus 7000
Hi All,
I'm trying to poll some interfaces for their utilization on a nexus 7000 through LMS 4.2.2.
When I create a poller fot the specific instances, the LMS recognises the instances, but after activating the poller I get the error "No Such Instance - The specified instance is not available".
No info is displayed when I generate an interface utilization report for the specific nexus.
When I activate the automonitor for interface utilization, the interfaces on the nexus are polled.
On the cisco website there are some features listed which LMS does not support on the Nexus 7000, but polling is not in that list (neither in the supported feature list).
Any tips?
Thanks for your help.
JorisAny Idea..??
-
Hi all,
I'm trying to configure rule based span on my Nexus 7000.
I want to monitor some vlans, but limit the traffic going to my monitor station by using frame-type ipv4 filter.
The link below explains how to configure it, but my nexus doesn't recognise the command "mode extended".
http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/system_management/configuration/guide/sm_nx_os_cg/sm_14span.html#wp1286697
Am I missing something? I'm running version 6.1.3.
Thanks,
Joris
NEXUS(config)# monitor session 1
NEXUS(config-monitor)# mode extended
^
% Invalid command at '^' marker.
NEXUS(config-monitor)# mode ?
*** No matching command found in current mode, matching in (exec) mode ***
connect Notify system on modem connection
restart Reenabling modem portHi Joris,
The rule based SPAN filtering was not introduced until NX-OS 6.2 so will not be available to you with NX-OS 6.1(3).
See the section SPAN in the NX-OS 6.2 release notes.
Regards -
%ARP-3-DUP_VADDR_SRC_IP on two Nexus 7000 using HSRP
Hi,
I am receiving the error %ARP-3-DUP_VADDR_SRC_IP on two Nexus 7000 switch that is configured with HSRP. I only see this error when the Nexus performs a failover to the HSRP standby unit. I personally think this can be safely ignored,but wanted to get another opinion.
I can generate the error when i initiate the failover of several SVIs that are configured for HSRP. I do not see the error when failover doesn't happen.
I haven't been unable to find any documentation for Nexus on this error.
I have found documentation on this error for Catalyst switches and they seem to indicate a loop in the network. I can confirm that there are no loops in the network.
Has anyone else seen this happen on a Nexus? Any links to documentation would be great too.
Thanksyou have duplicate IP addres on some host connected to portchanel10
probably some access layer switch is connected to your portchanel 10
try to find port where this host is connected in access layer switch
sh mac addr | i ac8f
and dont forget to rate post -
Log configuration changes to syslog on Nexus 7000?
I need to be able to log any configuration changes to syslog on our Nexus switches. On IOS this is easy with the archive commands, but I'm a little stuck trying to do this on our Nexus gear. On the IOS gear I run the commands:
archive
log config
logging enable
logging size 100
hidekeys
notify syslog
How do I do the equivalent on NX-OS?Cisco NX-OS can log configuration change events along with the individual changes when AAA command accounting is enabled.
With command accounting enabled, all CLI commands entered, including configuration commands, are logged to the configured AAA server. Using this information, a forensic trail for configuration change events along with the individual commands entered for those changes can be recorded and reviewed.
Because of this capability, it is strongly advised that AAA command accounting be enabled and configured.
Refer to the “TACACS+ Command Accounting” section of this document for more information.
The Nexus 7000, by default keeps a local accounting log of all the configuration commands entered on the device; you can view this with the 'show accounting log' command.
In NX-OS, we changed the way logging works. We keep a local accounting log of all the
configuration changes ("show accounting log"), but if you want to send those logs to a
server, it must be done with through a TACACS server. Please see the below documentation:
Configuring AAA on Nexus
TACACS command accounting
-Thanks
Vinod
**Encourage Contributors. RATE Them.** -
Hi,
I have some Nexus 7000 with FET-10G with xcvrInval status
Eth7/33 N5k-S1-3T-1/3 xcvrInval trunk auto auto Fabric Exte
and some other FET-10G with notconn status
Eth7/8 FEX-101 notconnec 1 auto auto Fabric Exte
If I inter exchange the position of both FET-10G the status port doesn´t change
FET-10G from 7/8 to 7/33
FET-10G from 7/33 to 7/8
7/33 holds xcvrInval status
7/8 holds notconnec status
I have reconfigured from default interface with same results
Next you´ll find the same serial number in deferent port, the diference is the current
when is xcvrInva or when is notconnec
What can I do to get FET10G in e7/33 validated?
sh interface e7/33 transceiver details
Ethernet7/33
transceiver is present
type is Fabric Extender Transceiver
name is CISCO-FINISAR
part number is FTLX8570D3BCL-C2
revision is A
serial number is FNS17201TE5
nominal bitrate is 10300 MBit/sec
Link length supported for 62.5/125um fiber is 10 m
Link length supported for 50/125um OM3 fiber is 100 m
cisco id is --
cisco extended id number is 4
cisco part number is 10-2566-02
cisco product id is FET-10G
cisco vendor id is V02
number of lanes 1
SFP Detail Diagnostics Information (internal calibration)
Current Alarms Warnings
Measurement High Low High Low
Temperature 19.30 C 75.00 C 5.00 C 70.00 C 10.00 C
[7m--More-- [m
Voltage 3.31 V 3.63 V 2.97 V 3.46 V 3.13 V
Current 0.06 mA -- 11.80 mA 4.00 mA 10.80 mA 5.00 mA
Tx Power N/A 22.69 dBm 8.69 dBm 18.69 dBm 12.69 dBm
Rx Power N/A 22.99 dBm 6.09 dBm 18.99 dBm 10.09 dBm
Transmit Fault Count = 0
Note: ++ high-alarm; + high-warning; -- low-alarm; - low-warning
now in slot 7/8
Ethernet7/8
transceiver is present
type is Fabric Extender Transceiver
name is CISCO-FINISAR
part number is FTLX8570D3BCL-C2
revision is A
serial number is FNS17201TE5
nominal bitrate is 10300 MBit/sec
Link length supported for 62.5/125um fiber is 10 m
Link length supported for 50/125um OM3 fiber is 100 m
cisco id is --
cisco extended id number is 4
cisco part number is 10-2566-02
cisco product id is FET-10G
cisco vendor id is V02
number of lanes 1
SFP Detail Diagnostics Information (internal calibration)
Current Alarms Warnings
Measurement High Low High Low
Temperature 23.17 C 75.00 C 5.00 C 70.00 C 10.00 C
[7m--More-- [m
Voltage 3.30 V 3.63 V 2.97 V 3.46 V 3.13 V
Current 7.50 mA 11.80 mA 4.00 mA 10.80 mA 5.00 mA
Tx Power 17.65 dBm 22.69 dBm 8.69 dBm 18.69 dBm 12.69 dBm
Rx Power -12.21 dBm -- 22.99 dBm 6.09 dBm 18.99 dBm 10.09 dBm
Transmit Fault Count = 0
Note: ++ high-alarm; + high-warning; -- low-alarm; - low-warning
NX7K-1-VDC-3T-S1-L2FP# sh int e7/33
Ethernet7/33 is down (Transceiver validation failed)
admin state is up, Dedicated Interface
Belongs to Po51
Hardware: 1000/10000 Ethernet, address: 8478.ac23.6cec (bia 8478.ac23.6cec)
Description: N5k-S1-3T-1/3
MTU bytes (CoS values): MTU 1500(0-2,4-7) bytes MTU 2112(3) bytes
BW 10000000 Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, medium is broadcast
Port mode is trunk
auto-speed auto-duplex,, media type is 10G
Beacon is turned off
Auto-Negotiation is turned on
Input flow-control is off, output flow-control is off
Auto-mdix is turned on
Rate mode is dedicated
Switchport monitor is off
EtherType is 0x8100
EEE (efficient-ethernet) : n/a
Last link flapped never
Last clearing of "show interface" counters 07:22:09
0 interface resets
Load-Interval #1: 30 seconds
30 seconds input rate 0 bits/sec, 0 packets/sec
30 seconds output rate 0 bits/sec, 0 packets/sec
Load-Interval #2: 5 minute (300 seconds)
300 seconds input rate 0 bits/sec, 0 packets/sec
300 seconds output rate 0 bits/sec, 0 packets/sec
RX
88 unicast packets 0 multicast packets 0 broadcast packets
0 input packets 0 bytes
0 jumbo packets 0 storm suppression packets
0 runts 0 giants 0 CRC/FCS 0 no buffer
0 input error 0 short frame 0 overrun 0 underrun 0 ignored
0 watchdog 0 bad etype drop 0 bad proto drop 0 if down drop
0 input with dribble 0 input discard
0 Rx pause
TX
88 unicast packets 0 multicast packets 0 broadcast packets
0 output packets 0 bytes
0 jumbo packets
0 output error 0 collision 0 deferred 0 late collision
0 lost carrier 0 no carrier 0 babble 0 output discard
0 Tx pause
NX7K-1-VDC-3T-S1-L2FP# sh int e7/33
Ethernet7/8 is down (Link not connected)
admin state is up, Dedicated Interface
Belongs to Po101
Hardware: 1000/10000 Ethernet, address: 8478.ac23.6cd3 (bia 8478.ac23.6cd3)
Description: FEX-101
MTU bytes (CoS values): MTU 1500(0-2,4-7) bytes MTU 2112(3) bytes
BW 10000000 Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, medium is p2p
Port mode is fex-fabric
auto-speed auto-duplex,, media type is 10G
Beacon is turned off
Auto-Negotiation is turned on
Input flow-control is off, output flow-control is off
Auto-mdix is turned on
Rate mode is dedicated
Switchport monitor is off
EtherType is 0x8100
EEE (efficient-ethernet) : n/a
Last link flapped 5week(s) 1day(s)
Last clearing of "show interface" counters never
0 interface resets
Load-Interval #1: 30 seconds
30 seconds input rate 0 bits/sec, 0 packets/sec
[7m--More-- [m
30 seconds output rate 0 bits/sec, 0 packets/sec
Load-Interval #2: 5 minute (300 seconds)
300 seconds input rate 0 bits/sec, 0 packets/sec
300 seconds output rate 0 bits/sec, 0 packets/sec
RX
10588 unicast packets 0 multicast packets 0 broadcast packets
4 input packets 0 bytes
0 jumbo packets 0 storm suppression packets
0 runts 0 giants 0 CRC/FCS 0 no buffer
0 input error 0 short frame 0 overrun 0 underrun 0 ignored
0 watchdog 0 bad etype drop 0 bad proto drop 0 if down drop
0 input with dribble 0 input discard
0 Rx pause
TX
10588 unicast packets 1 multicast packets 0 broadcast packets
4 output packets 5688 bytes
0 jumbo packets
0 output error 0 collision 0 deferred 0 late collision
0 lost carrier 0 no carrier 0 babble 0 output discard
0 Tx pauseHi Ans,
You are rigth, I have defaulted againt the port, now configured with switchport mode FEX, and now the FET-10G is validated
NX7K-1-VDC-3T-S1-L2FP(config-if)# description FEX-101
NX7K-1-VDC-3T-S1-L2FP(config-if)# switchport
NX7K-1-VDC-3T-S1-L2FP(config-if)# switchport mode fex-fabric
NX7K-1-VDC-3T-S1-L2FP(config-if)# fex associate 101
NX7K-1-VDC-3T-S1-L2FP(config-if)# medium p2p
NX7K-1-VDC-3T-S1-L2FP(config-if)# channel-group 101
NX7K-1-VDC-3T-S1-L2FP(config-if)# no shutdown
NX7K-1-VDC-3T-S1-L2FP(config-if)#
NX7K-1-VDC-3T-S1-L2FP(config-if)# sh int e7/33 status
Port Name Status Vlan Duplex Speed Type
Eth7/33 FEX-101 notconnec 1 auto auto Fabric Exte
NX7K-1-VDC-3T-S1-L2FP(config-if)#
Thanks for your help, and have a nice weekend.
Atte,
EF
Maybe you are looking for
-
Hello, i am currently working in PHP/MYSQL/JAVASCRIPT.. I am interesting in Building some Cool Desktop Applications. What is the best way to get started? Software etc?? Thank you
-
hi what are the ALE configurations required to be done in R/3 and XI for Outbound and inbound
-
Aperture 2 - Canon 5D Mark II raw files - Photoshop CS3
Hello I work with Aperture 2 and just bought the new Canon 5D Mark II. Unfortunately the raw files of this camera cannot be opened with PS CS3. As I cannot find an update quickly here in Morocco I need to find another solution fast. With some help fr
-
Occasionally I will be listening to a song on my iPod and it will end before the end of the song. I go to iTunes and the Length of the file is shorter than it should be. I double click on the file and it changes the length to what it should be, I upd
-
Exchange 5.5 Portlet, versions, and CDO Error
I am unable to get the Exchange 5.5 Portlets to work. I am running Portal 3.0.9.8.0, Exchange Server 5.5 SP3 (does it need to be SP4?), and IIS 5.0 on Win2K. The Exchange Server is running on another box (WinNT SP5). When running the test.asp file I