Redundancy in Cisco ASR1002

Hi,
our company is going to purchase a Cisco ASR 1002 and we need to make it Redundant.
I know about the Software Redundancy in Cisco ASR1002 with two IOS on a single Route Processor but If we want to make it Hardware by using two ASR1002 at our location than how can we achieve this ?
We want to make our ASR 1002 Hardware Redundant means we want inter-chassis Redundancy between both the ASRs.
As Inter-chassis Redundancy means that if our Active chassis will goes down than our Secondary chassis takes over.
As I found a link of Inter-chassis Redundancy on ASR1002
http://www.cisco.com/en/US/docs/routers/asr1000/configuration/guide/sbcu/sbc_interHA.pdf
One thing more I want to tell you that according to this link it is mentioned that the secondary chassis will start forwarding the call signalling and Media Forwarding but we are having only Data traffic not Voice traffic.
So, can anybody tell that we can use this Inter-chassis feature in our ASR 1002. If their is any requirement for any special license or module than we can purchase it also.
Thanks & Regards,
Rahul Chhabra
Network Engineer
Spooster IT Services

I know this thing about HSRP, but I want to know that is their any other method of inter-chassis Redundancy like the ASA failover in which all the information is Replicated to Secondary ASA while failover.

Similar Messages

– Enable high availability and redundancy for Cisco WAAS

How this is available
– Enable high availability and redundancy for Cisco WAAS appliances in data centers.
Thank you.

Hi,
You can serially cluster two WAE devices with the Cisco WAE Inline Network Adapter installed to provide higher availability in the data center if a device fails. If the current optimizing device fails, the inline group shuts down, or the device becomes the overloaded, the second WAE device in the cluster provides the optimization services. Deploying WAE devices in a serial inline cluster for scaling or load balancing is not supported.
More deatils here: Clustering Inline WAEs
Hope this helps.
Regards.
PS: Please mark this as Answered, if this answers your question.

Redundancy for Cisco Unified Communications Manager Business Edition 8.0.

Hi,
Is there redundancy for Cisco Unified Communications Manager Business Edition 8.0.
Can I deploy more than one server at a site for redundancy?
Thanks
Mudassir

No. UCM-BE is a single-server solution. You can use CME in SRST mode for survivability if the server is offline.

Achieving Redundancy with Cisco Routers and Switches

I have two 2600 routers connected to two different ISP and in turn these are connected back to our head office to a 3560 series switch.Iam trying to set up the different connections such that if one ISP connection fails the other one takes over immeadiately.I know i could use HSRP for redundancy but the problem iam facing is the two routers are in different subnets, so it may not be possible to use HSRP in this case.I could be wrong but any help will be appreciated.

Hi,
some questions to ask you
1- 3550 is working as L3 or L2
if L3 than you can use static route pointing to two different router.if L2 than use secondary address in ethernet infaces of router and run HSRP but for this you need to match vlan.
2- if intervlan is configured on router's than it will be very easy.
HTH if not write here

Cisco ASR1002-X Netflow version 5 performance

Hello,
customer is asking me regarding 1:1 Netflow version 5 on ASR1002-X.
Is it fully supported?
Is there any known caveat?
I suspect it lowers stability of the system, and need to be sure.
Thank you,
Josef Baloun

Are you referring to the sampling ratio? 1:1 sampling is sending all traffic conversations for NetFlow analysis using sampling. This can result in an increase in CPU and memory utilization on the device - so if this is a traffic heavy network, 1:1 sampling is not recommended.
Regards,
Don Jacob
http://www.solarwinds.com/netflow-traffic-analyzer.aspx
PS: Dont forget to rate and close helpful answers.

IPSEC between Cisco ASR1002 and Juniper SRX.

Hello everyone,
While trying to setup my ipsec sesion with the devices mentioned above without success, I found that there are differents ways to face the configuration for each device:
On the cisco side, I can do:
a)_Crypto-map based configuration, or
b)_ VTI based configuration.
On the juniper side, there is:
a)Route based tunnel config and,
b)_Policy based tunnel config.
I wonder wich is the better combination? The one that both devices are more compatible.
Also if someone can provide any example to follow would bee great.
Any help would be preciated,
Rgrds,
Leo.

I dont't know Junipter config, but for Cisco it should be crypto-map, Juniper could be policy based.
Michael
Please rate all helpful posts

Lost 1 of 3 UCS chassin when upgrade firmeware on Cisco Interconter 6120XP

We have the following system \ environment, two redundantly connected Cisco 6120XP interconectorer linked to three Cisco UCS 5108x chassis with 13st cisco blade servers configured.
As information, I can say that we have NetApp FAS3240 storage and no Nexsus switches. We have vmware virtualization platform.
This is what happened.
We'd upgrade UCS Manager from version 1.4 directly to 2.03 (c).
At the time we had done a failover from the primary to the secondary interconector. We ran at that this time all network traffic through one I / O module on each chassis. When we pressed the upgrade on the primary interconecter so suddenly chassis number two reboot and we lose about 40 servers. VMWare has taken them down neatly but we lost it unfortunately. Now the question is why did this happen?
Rgds
Tobias

Hello Tobias,
Please confirm the sequence of events
1) You initially upgraded secondary FI and when you activated it, secondary FI along with IOMs attached to it came up successfully with upgraded version. Is this correct ?
2) Then you made upgraded ( secondary ) FI as primary by issuing " cluster lead " command from operating primary.
3) Initiated upgrade on old primary. Then activated new version.
Now servers lost connectivity.
Is my understanding correct ?
Few questions
1) Did all servers lose connectivity ( if you have multiple chassis ) ?
2) If not, do you know list of servers that lost the connectivity ?
3) Both LAN & SAN or only LAN or only SAN connectivity ?
4) Did you make any changes to resolve the issue ? If not, how did the connectivity got restored ?
I would suggest to you open a TAC SR with above information and UCSM and corresponding chassis tech support bundle.
Please include approx date / time of the event.
Padma

Cisco WLC 5508 HA AP-SSO not possible

Hi!
A custommer of mine tried to configure HA AP-SSO with two 5508 controllers. After rebooting the primary controller changed into Maintanence Mode.
Version 7.3.101.0
(Cisco Controller) >show redundancy summary
Redundancy Mode = SSO ENABLED
Local State = MAINTENANCE
Peer State = UNKNOWN - Communication Down
Unit = Primary
Unit ID = 25:94:0F:AE:C9:00
Redundancy State = Non Redundant
Mobility MAC = 25:94:0F:AE:C9:00
Maintenance Mode = Enabled
Maintenance cause= Incompatible Software license
Redundancy Management IP Address................. 10.90.249.8
Peer Redundancy Management IP Address............ 10.90.248.8
Redundancy Port IP Address....................... 169.254.249.10
Peer Redundancy Port IP Address.................. 169.254.248.10
License Store: Primary License Storage
StoreIndex: 0 Feature: base Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: Non-Counted
License Priority: Medium
License Store: Primary License Storage
StoreIndex: 1 Feature: base-ap-count Version: 1.0
License Type: Permanent
License State: Active, In Use
License Count: 50 /50 (Active/In-use)
License Priority: Medium
License Store: Evaluation License Storage
StoreIndex: 0 Feature: base-ap-count Version: 1.0
License Type: Evaluation
License State: Inactive
Evaluation total period: 8 weeks 4 days
Evaluation period left: 8 weeks 4 days
License Count: 500 / 0 (Active/In-use)
License Priority: None
Der sekundäre Controller war aktiv, hatte aber nicht die aktuelle Konfig vom Master übernommen. The secondary controller did not take the masters config.
What did he do wrong? Licence problem?
He told me that both controllers have a 50 AP license.
Thanks in advance for any help. I have no experince so far with 7.3

Hi Scott or others listening.
I have come inte problems efter what I presume the "wrong" controller was defined as primary.
After configuration of redundancy IP's on both units I enabled HA SSO on the primary first and not enabling it on the secondary. After the HA SSO was enabled the unit didn't become manageble.
Since I could connect to its Redundancy management IP I could SSH into the unit:
I checked the redundancy status
(Cisco Controller) >show redundancy summary
Redundancy Mode = SSO ENABLED
     Local State = MAINTENANCE
      Peer State = UNKNOWN - Communication Down
            Unit = Primary
         Unit ID = 6C:20:56:BD:60:60
Redundancy State = Non Redundant
    Mobility MAC = 6C:20:56:BD:60:60
Maintenance Mode = Enabled
Maintenance cause= Incompatible Software license
Redundancy Management IP Address................. 10.128.112.202
Peer Redundancy Management IP Address............ 10.128.112.203
Redundancy Port IP Address....................... 169.254.112.202
Peer Redundancy Port IP Address.................. 169.254.112.203
(Cisco Controller) >show license summary
License Store: Primary License Storage
StoreIndex: 0Feature: base                              Version: 1.0
License Type: Permanent
License State: Active, Not in Use
License Count: Non-Counted
License Priority: Medium
License Store: Evaluation License Storage
StoreIndex: 0Feature: base-ap-count                     Version: 1.0
License Type: Evaluation
License State: Active, Not in Use, EULA not accepted
    Evaluation total period: 8 weeks 4 days
    Evaluation period left: 8 weeks 4 days
License Count: 500 / 0 (Active/In-use)
License Priority: None
(Cisco Controller) >show sysinfo
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.3.112.0
Bootloader Version............................... 1.0.16
Field Recovery Image Version..................... 7.0.112.21
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS
System Name...................................... XXXX
System Location.................................. XXXX
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. SSO
IP Address....................................... 10.128.112.200
Last Reset....................................... Software reset
System Up Time................................... 0 days 0 hrs 13 mins 56 secs
System Timezone Location.........................
Configured Country............................... SE - Sweden
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +37 C
External Temperature............................. +18 C
Fan Status....................................... OK
State of 802.11b Network......................... Disabled
State of 802.11a Network......................... Disabled
Number of WLANs.................................. 2
Number of Active Clients......................... 0
Burned-in MAC Address............................ 6C:20:56:BD:60:60
Power Supply 1................................... Present, OK
Power Supply 2................................... Absent
Maximum number of APs supported.................. 0
I then did disable redundancy but unfortunately the unit went unreachable
(Cisco Controller) >config redundancy mode none
All unsaved configuration will be saved.
And the system will be reset. Are you sure? (y/n)y
- No connectivity on either management or redundancy management IP
How can I recover this unit, and why did this happen? How can I veryfy the HA-SSO licence?
- Above license info doesn't make sense

Suspecting ESP 10 to fail in ASR1002

ASR1002 Cisco doesnt recognise ESP 10 module. Log is attached. We need to decide wether the chassi is OK or it is also affected.
We have conducted the following experiment: turned on the ASR1002 without ESP module and assigned 192.168.0.2 adress to an interface.
After that tried to ping 192.168.0.2 from outside, all pings have been lost.
Does the ASR1002 have to respond on the interface without ESP module?
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(3)S1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sat 08-Oct-11 01:16 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
% failed to initialize nvram
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco ASR1002 (2RU) processor with 1700171K/6147K bytes of memory.
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7798783K bytes of eUSB flash at bootflash:.
         --- System Configuration Dialog ---
Would you like to enter the initial configuration dialog? [yes/no]: no
Press RETURN to get started!
*Dec 12 16:40:24.348: %ASR1000_RP_NV-3-NV_ACCESS_FAIL: Initial read of NVRAM contents failed
*Dec 12 16:40:31.211: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Dec 12 16:40:31.211: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Dec 12 16:40:31.211: %LINEPROTO-5-UPDOWN: Line protocol on Interface VoIP-Null0, changed state to up
*Dec 12 16:40:31.212: %LINEPROTO-5-UPDOWN: Line protocol on Interface LI-Null0, changed state to up
*Dec 12 16:40:31.212: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Dec 12 16:40:31.212: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Dec 12 16:40:31.350: %NETCLK-5-NETCLK_MODE_CHANGE: Network clock source not available. The network clock has changed to freerun
*Dec 12 16:40:31.440: %ASR1000_MGMTVRF-6-CREATE_SUCCESS_INFO: Management vrf Mgmt-intf created with ID 1, ipv4 table-id 0x1, ipv6 table-id 0x1E000001
*Dec 12 16:40:31.715: %DYNCMD-7-PKGINT_INSTALLED: The command package 'platform_trace' has been succesfully installed
*Dec 12 16:40:33.429: %LINEPROTO-5-UPDOWN: Line protocol on Interface Lsmpi0, changed state to up
*Dec 12 16:40:33.430: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, changed state to up
*Dec 12 16:40:33.430: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Dec 12 16:40:33.430: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Dec 12 16:40:23.540: %IOSXE-5-PLATFORM: R0/0: xinetd[32286]: xinetd Version 2.3.14 started with no options compiled in.
*Dec 12 16:40:23.554: %IOSXE-5-PLATFORM: R0/0: xinetd[32286]: Started working: 1 available service
*Dec 12 16:40:34.225: %DYNCMD-7-CMDSET_LOADED: The Dynamic Command set has been loaded from the Shell Manager
*Dec 12 16:40:58.021: %LINK-5-CHANGED: Interface GigabitEthernet0/0/0, changed state to administratively down
*Dec 12 16:40:58.022: %LINK-5-CHANGED: Interface GigabitEthernet0/0/1, changed state to administratively down
*Dec 12 16:40:58.022: %LINK-5-CHANGED: Interface GigabitEthernet0/0/2, changed state to administratively down
*Dec 12 16:40:58.023: %LINK-5-CHANGED: Interface GigabitEthernet0/0/3, changed state to administratively down
*Dec 12 16:40:58.023: %LINK-5-CHANGED: Interface GigabitEthernet0, changed state to administratively down
*Dec 12 16:40:59.021: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0, changed state to down
*Dec 12 16:40:59.022: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/1, changed state to down
*Dec 12 16:40:59.022: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/2, changed state to down
*Dec 12 16:40:59.023: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/3, changed state to down
*Dec 12 16:41:02.525: %ASR1000_OIR-6-REMSPA: SPA removed from subslot 0/0, interfaces disabled
*Dec 12 16:41:02.527: %SPA_OIR-6-OFFLINECARD: SPA (4XGE-BUILT-IN) offline in subslot 0/0
*Dec 12 16:41:02.531: %ASR1000_OIR-6-INSCARD: Card (fp) inserted in slot F0
*Dec 12 16:41:02.532: %ASR1000_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Dec 12 16:41:02.532: %ASR1000_OIR-6-ONLINECARD: Card (cc) online in slot 0
*Dec 12 16:41:02.536: %ASR1000_OIR-6-INSSPA: SPA inserted in subslot 0/0
*Dec 12 16:41:02.743: %SYS-5-RESTART: System restarted --
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(3)S1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sat 08-Oct-11 01:16 by mcpre
*Dec 12 16:41:05.577: %SPA_OIR-6-ONLINECARD: SPA (4XGE-BUILT-IN) online in subslot 0/0
Router>
Router>en
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#in
Router(config)#int
Router(config)#interface lo
Router(config)#interface loo
Router(config)#interface loopback 0
Router(config-if)#ip ad
Router(config-if)#ip address 19
*Dec 12 16:42:04.778: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up2.1
Router(config-if)#ip address 192.168.0.1 255.255.255.0
Router(config-if)#exit
Router(config)#exit
Router#sho
Router#show run
Router#show running-config int
Router#show running-config interface
*Dec 12 16:42:18.204: %SYS-5-CONFIG_I: Configured from console by consolelo
Router#show running-config interface lo0
Router#show running-config interface loo
Router#show running-config interface loopback 0
Building configuration...
Current configuration : 65 bytes
interface Loopback0
ip address 192.168.0.1 255.255.255.0
end
Router#ping 192.168.0.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.0.1, timeout is 2 seconds:
Success rate is 0 percent (0/5)
Router#sho
Router#show in
Router#show in
Router#show inte
Router#show interfaces lo
Router#show interfaces loo
Router#show interfaces loopback 0
Loopback0 is up, line protocol is up
Hardware is Loopback
Internet address is 192.168.0.1/24
MTU 1514 bytes, BW 8000000 Kbit/sec, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation LOOPBACK, loopback not set
Keepalive set (10 sec)
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 output buffer failures, 0 output buffers swapped out
Router#
Router#
*Dec 12 16:43:06.922: %TRANSCEIVER-6-INSERTED: SIP0/0: transceiver module inserted in GigabitEthernet0/0/0
Router#sho
Router#show run
Router#show running-config in
Router#show running-config interface gi0/0/
% Incomplete command.
Router#show running-config interface gi0/0
% Incomplete command.
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#in
Router(config)#int
Router(config)#interface gi0/0
% Incomplete command.
Router(config)#interface gi0/0/0
Router(config-if)#no shu
Router(config-if)#no shutdown
Router(config-if)#ip ad
Router(config-if)#ip address 192.1
*Dec 12 16:43:44.764: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed state to down68.2.
*Dec 12 16:43:43.813: %LINK-3-UPDOWN: SIP0/0: Interface GigabitEthernet0/0/0, changed state to down1
*Dec 12 16:43:47.440: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed state to up
*Dec 12 16:43:46.437: %LINK-3-UPDOWN: SIP0/0: Interface GigabitEthernet0/0/0, changed state to up
*Dec 12 16:43:48.440: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0, changed state to up
Router(config-if)#ip address 192.168.2.1 255.255.255.0
Router(config-if)#exit
Router(config)#exit
Router#sho
Router#show run
Router#show running-config int
Router#show running-config interface
*Dec 12 16:43:56.015: %SYS-5-CONFIG_I: Configured from console by consolegi
Router#show running-config interface gigabitEthernet 0/0/0
Building configuration...
Current configuration : 94 bytes
interface GigabitEthernet0/0/0
ip address 192.168.2.1 255.255.255.0
negotiation auto
end
Router#ping 192.168.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:
Success rate is 0 percent (0/5)
Router#sho
Router#show in
Router#show inte
Router#show interfaces gi
Router#show interfaces gigabitEthernet 0/0/0
GigabitEthernet0/0/0 is up, line protocol is up
Hardware is 4XGE-BUILT-IN, address is 8843.e100.7300 (bia 8843.e100.7300)
Internet address is 192.168.2.1/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
Full Duplex, 1000Mbps, link type is auto, media type is LX
output flow-control is off, input flow-control is off
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 00:00:27, output hang never
Last clearing of "show interface" counters never
Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
     17 packets input, 2015 bytes, 0 no buffer
     Received 0 broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 17 multicast, 0 pause input
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 4 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
Router#sho
Router#show pl
Router#show platform
Chassis type: ASR1002
Slot      Type                State                 Insert time (ago)
0         ASR1002-SIP10       ok                    00:06:40
0/0      4XGE-BUILT-IN       ok                    00:03:56
R0        ASR1002-RP1         ok, active            00:06:40
F0                            unknown               00:06:40
P0        ASR1002-PWR-AC      ok                    00:05:28
P1        ASR1002-PWR-AC      ps, fail              00:05:28
Slot      CPLD Version        Firmware Version
0         07120202            12.2(33r)XNC
R0        08011017            12.2(33r)XNC
F0        N/A                 N/A
Router#
System Bootstrap, Version 12.2(33r)XNC, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2009 by cisco Systems, Inc.
Current image running: Boot ROM0
Last reset cause: PowerOn
Last reset at: Fri Dec 12 16:48:51 UTC 2014
ASR1002-RP1 platform with 4194303 Kbytes of main memory
Warning: filesystem is not clean
Located asr1000rp1-adventerprisek9.03.04.01.S.151-3.S1.bin
Image size 312873272 inode num 13, bks cnt 76386 blk size 8*512
Boot image size = 312873272 (0x12a61138) bytes
Missing or illegal ip address for variable DEFAULT_GATEWAY
Using midplane macaddr
Missing or illegal ip address for variable IP_ADDRESS
Missing or illegal ip address for variable IP_SUBNET_MASK
Package header rev 0 structure detected
Calculating SHA-1 hash...done
validate_package: SHA-1 hash:
        calculated 61d80af0:032b96a1:6b3b2b5c:667f969a:ad8e4c9f
        expected   61d80af0:032b96a1:6b3b2b5c:667f969a:ad8e4c9f
Image validated
%IOSXEBOOT-4-FILESYS_ERRORS_CORRECTED: (rp/0): bootflash contained errors which were auto-corrected.
              Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(3)S1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sat 08-Oct-11 01:16 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
% failed to initialize nvram
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco ASR1002 (2RU) processor with 1700171K/6147K bytes of memory.
4 Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7798783K bytes of eUSB flash at bootflash:.
         --- System Configuration Dialog ---
Would you like to enter the initial configuration dialog? [yes/no]:
% Please answer 'yes' or 'no'.
Would you like to enter the initial configuration dialog? [yes/no]:
% Please answer 'yes' or 'no'.
Would you like to enter the initial configuration dialog? [yes/no]: no
Press RETURN to get started!
*Dec 12 16:52:16.032: %ASR1000_RP_NV-3-NV_ACCESS_FAIL: Initial read of NVRAM contents failed
*Dec 12 16:52:24.113: %LINK-3-UPDOWN: Interface Lsmpi0, changed state to up
*Dec 12 16:52:24.114: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Dec 12 16:52:24.114: %LINEPROTO-5-UPDOWN: Line protocol on Interface VoIP-Null0, changed state to up
*Dec 12 16:52:24.115: %LINEPROTO-5-UPDOWN: Line protocol on Interface LI-Null0, changed state to up
*Dec 12 16:52:24.11
Router>5: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to down
*Dec 12 16:52:24.115: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Dec 12 16:52:24.361: %NETCLK-5-NETCLK_MODE_CHANGE: Network clock source not available. The network clock has changed to freerun
*Dec 12 16:52:24.656: %ASR1000_MGMTVRF-6-CREATE_SUCCESS_INFO: Management vrf Mgmt-intf created with ID 1, ipv4 table-id 0x1, ipv6 table-id 0x1E000001
*Dec 12 16:52:25.151: %LINEPROTO-5-UPDOWN: Line protocol on Interface Lsmpi0, changed state to up
*Dec 12 16:52:25.152: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, changed state to up
*Dec 12 16:52:25.152: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Dec 12 16:52:25.152: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Dec 12 16:52:25.546: %DYNCMD-7-PKGINT_INSTALLED: The command package 'platform_trace' has been succesfully installed
*Dec 12 16:52:28.680: %DYNCMD-7-CMDSET_LOADED: The Dynamic Command set has been loaded from the Shell Manager
*Dec 12 16:52:15.830: %IOSXE-5-PLATFORM: R0/0: xinetd[31943]: xinetd Version 2.3.14 started with no options compiled in.
*Dec 12 16:52:15.844: %IOSXE-5-PLATFORM: R0/0: xinetd[31943]: Started working: 1 available service
*Dec 12 16:52:50.090: %LINK-5-CHANGED: Interface GigabitEthernet0/0/0, changed state to administratively down
*Dec 12 16:52:50.091: %LINK-5-CHANGED: Interface GigabitEthernet0/0/1, changed state to administratively down
*Dec 12 16:52:50.091: %LINK-5-CHANGED: Interface GigabitEthernet0/0/2, changed state to administratively down
*Dec 12 16:52:50.091: %LINK-5-CHANGED: Interface GigabitEthernet0/0/3, changed state to administratively down
*Dec 12 16:52:50.092: %LINK-5-CHANGED: Interface GigabitEthernet0, changed state to administratively down
*Dec 12 16:52:51.090: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0, changed state to down
*Dec 12 16:52:51.091: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/1, changed state to down
*Dec 12 16:52:51.092: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/2, changed state to down
*Dec 12 16:52:51.092: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/3, changed state to down
*Dec 12 16:52:57.608: %ASR1000_OIR-6-REMSPA: SPA removed from subslot 0/0, interfaces disabled
*Dec 12 16:52:57.609: %SPA_OIR-6-OFFLINECARD: SPA (4XGE-BUILT-IN) offline in subslot 0/0
*Dec 12 16:52:57.613: %ASR1000_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Dec 12 16:52:57.613: %ASR1000_OIR-6-ONLINECARD: Card (cc) online in slot 0
*Dec 12 16:52:57.615: %ASR1000_OIR-6-INSSPA: SPA inserted in subslot 0/0
*Dec 12 16:52:57.819: %SYS-5-RESTART: System restarted --
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(3)S1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Sat 08-Oct-11 01:16 by mcpre
*Dec 12 16:53:00.828: %SPA_OIR-6-ONLINECARD: SPA (4XGE-BUILT-IN) online in subslot 0/0
Router>en
Router#sho
Router#show pla
Router#show platform
Chassis type: ASR1002
Slot      Type                State                 Insert time (ago)
0         ASR1002-SIP10       ok                    00:02:40
0/0

Are you able to download and install other applications for your Mac?
Try following along with this Apple doc -> Troubleshooting iTunes installation on Mac OS X

Need some direction on FW Redundancy and opening ports

I would appreciate any advice on the current ways of connecting 2 Firewalls directly for redundancy and also the best practice for allowing data through the firewall. Do firewalls have a stacking technology similar to StackWise or FlexStack? I need to allow specific ports through my network into another private network. Although this won't be connected to the internet the same type of security as if it were, is important. Sorry if this is a generic question but what methods would be best for allowing data to and from through my network firewall? I would grealty appreciate any sample configurations (I don't plan on configuring zones) or documentation on the current way of allowing these functions. Thanks for your help!

Hi,
There are 2 different options to my knowledge to have firewall redundancy with Cisco firewalls.
The most common one is Active/Standby Failover which you have 2 identical (hardware & software) Cisco firewalls connected by a Failover link. One of the the firewalls is the Active unit and handles traffic while the other unit is Standby monitoring the state of the Active device (and vice versa). When the Active unit fails the Standby unit will take the Active role.
Another option is Active/Active which basically means that you would be running multiple virtual Firewalls inside the actual hardware firewall. Some virtual firewalls would be Active on hardware unit 1 and some virtual firewalls would be Active unit would be Active on hardware unit 2. Hence the term Active/Active, both firewalls would be handling traffic.
ASA 9.0 Configuration Guide section on Failover
http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/ha_overview.html
The second and new option is Cluster setup where you essentially combine multiple identical firewalls together. This is a subject though that I have not gotten to test myself so my knowledge is very limited. Though to my understanding this is available only with high end ASA5585-X units so it might not be an option for most.
ASA 9.0 Configuration Guide section on Cluster
http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/ha_cluster.html
So most likely you will be using Active/Standby Failover with 2 identical Cisco firewalls.
Their configuration format compared to a standalone firewall doesnt differ much.
You will configure a "standby" IP address also on the ASA that will be the IP address that the Standby unit uses
You will configure the actual Failover interface
You will configure general Failover related settings
You can tune the Failover settings and define which interfaces are monitored (and can effect the Failover) and set some other additional parameters
So there is not that much to configure compared to the standalone Cisco firewall setup.
Your post seems to indicate that this firewall or firewall pair would be used for Internal network usage. I mean a firewall between 2 LAN/DMZ networks. This would in turn mean that unless you specifically need NAT between these network segments, you could actually leave the NAT configuration of the firewall completely blank and only configure the Routing&Firewalling related settings.
How you would configure access between the 2 different network segments would naturally depend on your own setup.
From what I understood from your above post it would seem to me that you should configure ACLs on both interfaces connected to their own network segments. These ACLs would be configured in Inbound direction (which would control traffic heading towards the firewall from that segment and into the other segment). You could then configure both ACLs in the manner that ONLY the required source/destination IP addresses/networks/ports are allowed and all other traffic is blocked.
I am not really sure what kind of example configuration we could give you as we dont really know what the whole setup is going to be.
Hope this helps
- Jouni

ASR1002-ESP10 CPU Stats at 0%

I am having trouble figuring out how to see my CPU usage on an ASR1002-ESP10 and I am convinced it is me doing something wrong...
I used to have a 7204VXR and configured FASTCEF to offload from the CPU. On that router when I started running traffic I would simply run "show processes CPU" to get an idea of what my CPU on the router was.
Now on the Cisco ASR1002 with ESP10 card I setup Distributed CEF which appeared to be the "new cool thing" that cisco implemented. Everything is working so well but I am confused because when I run "show processes cpu" on this bad boy it says 0% everytime.. Even while running very large loads.
So now I am wondering how to know when I hit my limits as it appears the distributed CEF is handling my entire load without even hitting 1% on the CPU...
One more example...
We do SIP and with our old router would scale equally as we increased total SIP paths. Around 4k channels we would be at 90%.... Obviously this new router is 8.5 times more powerful in terms of Packets Per Second but it scares me a bit that the CPU may stay at 0% and then when we hit X amount of channels that it will pull from CPU.. Another words my fear is that we run 30k channels and its 0% CPU but when we go to 32K channels the CPU is at 100% because maybe that ESP card is full at 30k and then the last 2k channels is all hitting CPU...
Maybe I did not explain it well but I guess the simple question is how do I monitor this since CPU is always 0%.

oratest wrote:
Hi,
I am using Oracle 10.2.0.3.
Whenever I generate explain plan for any query, the very last line of explain plan is as below.
cpu costing is off (consider enabling it)_
It seems that optimizer didn't considerd CPU stats while generating plan for this.
How to enable CPU statistics here?
The parameter optimizer_mode value is "CHOOSE", and stats are being gathered at an interval of one week.In your version of the database, the default value of optimizer_mode is ALL_ROWS. Is there any reason why you have changed it? You may want to post the output of following executed in SQL*Plus
show parameter optimizer

How to create A record on DNS server

How do i create an A record on the DNS server (windows server 2008) that would resolve into two ip addresses: PUB & SUB ip addresses respectivly, to enable EM redundancy in Cisco Unified Communications Manager 6.1.
Right now when the PUB failover to the SUB the EM does not work. the Phone services as well as the global directory does not work. the CUCM is fully integrated to LDAP.
Cisco recomends using an SLB but right now i am trying to use the DNS option. what i need now is how to create the A record on the DNS that would resolve into the two ip address of the PUB and SUB.

You can do this but your results won't be quite as expected. I've played around with this and you'll see that the request for when you press the services button will go to server A, then when you click on the EM service your request will go to server B, then the login back to server A even though you started the login session with server B and back and forth, then with the authentication information, etc. Also DNS doesn't know about the state of your servers. If a server is down you'll still have issues if the name resolves to the down IP address. As far as I've seen DNS will always round robin with multiple records for the same name (unless you use an SRV record).

ASR 1002 PPPoE/A Virtual-Access subinterface problem

Hi Guys,
i try to configure a BRAS solution for PPPoE/A termination.
When try to connect a client i receive the following error:
*May 3 00:51:25.043: %LINK-3-UPDOWN: Interface Virtual-Access4, changed state to up
*May 3 00:51:25.046: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access4, changed state to up
*May   3 00:51:25.093: %FMANRP_ESS-4-FULLVAI: Session creation failed due to Full Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and RADIUS features support Virtual-Access sub-interfaces. swidb= 0x40A8D2CC, ifnum= 29
*May 3 00:51:25.098: %LINK-3-UPDOWN: Interface Virtual-Access4, changed state to down
The problem is related to Virtual-Access subinterface, usually, on standard IOS, i work on full mode
In the Cisco DOC i found this:
"If the subinterface is not configured, the following error message is displayed when creating a session with one of the RADIUS attributes:
*Mar 13 22:04:03.358: %FMANRP_ESS-4-FULLVAI: Session creation failed due to Full
Virtual-Access Interfaces not being supported. Check that all applied Virtual-Template and
RADIUS features support Virtual-Access sub-interfaces. swidb= 0x7FA35A42F218, ifnum= 30
To enhance the scalability of per-user configurations, in many cases, different Cisco AV-pairs are available to place the subscriber interface in a Virtual Routing and Forwarding (VRF) instance or to apply a policy map to the session. For example, use the ip:vrf-id and ip:ip-unnumbered VSAs to reconfigure a user's VRF. For information about enhancing scalability see, "Enhancing the Scalability of Per-User Configurations" section."
Ok i try to pass in radreply the following attribute :
test    Cisco-AVPair     +=     ip:vrf-id=RACC_ULL
test    Cisco-AVPair     +=     ip:ip-unnumbered=Loopback 199
Nothing don't work same error ....
If remove a "ip-unnumbered" attribute the Virtual-Access coming up but no ip address is assigned
Any ideas ?
Many thx
show ver
Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVENTERPRISEK9-M), Version 15.1(3)S2, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Mon 12-Dec-11 15:15 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2011 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
ASR-01-BS uptime is 6 days, 18 hours, 6 minutes
Uptime for this control processor is 6 days, 18 hours, 8 minutes
System returned to ROM by reload at 22:08:16 UTC Sat Mar 31 2012
System image file is "bootflash:asr1000rp1-adventerprisek9.03.04.02.S.151-3.S2.bin"
Last reload reason: PowerOn
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco ASR1002 (2RU) processor with 1700062K/6147K bytes of memory.
4 Gigabit Ethernet interfaces
1 ATM interface
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
7757823K bytes of eUSB flash at bootflash:.
Configuration register is 0x2102
show run
aaa new-model
aaa group server radius AAA_RACC_ULL
server-private xx.xx.xx.xx auth-port 1812 acct-port 1813 key xxxxxxx
server-private xx.xx.xx.xx auth-port 1812 acct-port 1813 key xxxxxxx
ip vrf forwarding RACC_ULL
aaa authentication login local_auth local
aaa authentication ppp default group AAA_RACC_ULL
aaa authorization network default group AAA_RACC_ULL
aaa accounting send stop-record authentication failure
aaa accounting update newinfo periodic 60
aaa accounting network default start-stop group AAA_RACC_ULL
aaa accounting connection default start-stop group AAA_RACC_ULL
aaa accounting resource default start-stop group AAA_RACC_ULL
aaa session-id common
aaa policy interface-config allow-subinterface
ip vrf RACC_ULL
description *** VRF Raccolta TEST ***
rd 1:1
vpdn enable
no virtual-template snmp
bba-group pppoe xDSL_PPPoE_ADSL
virtual-template 199
vendor-tag circuit-id service
sessions auto cleanup
interface Loopback199
description *** GW RACCOLTA IP ADSL ***
ip vrf forwarding RACC_ULL
ip address 10.0.0.1 255.255.255.255
interface GigabitEthernet0/0/0
description *** ***
no ip address
no ip proxy-arp
load-interval 30
negotiation auto
interface GigabitEthernet0/0/3.20
description *** DOWNLINK TO DSLAM VLAN ADSL ***
encapsulation dot1Q 20
ip vrf forwarding RACC_ULL
no ip proxy-arp
pppoe enable group xDSL_PPPoE_ADSL
interface Virtual-Template199
description *** PPPoE AUTH ADSL ***
mtu 1488
ip unnumbered Loopback199
peer default ip address pool DYNAMIC_ADSL
ppp authentication chap pap callin
ip local pool DYNAMIC_ADSL 192.168.20.2 192.168.20.254
ip forward-protocol nd
no ip http server
no ip http secure-server
ip route vrf RACC_ULL 0.0.0.0 0.0.0.0 192.168.254.1
ip radius source-interface GigabitEthernet0/0/0.999 vrf RACC_ULL
radius-server vsa send accounting
radius-server vsa send authentication

Hi Manuel,
thanks for your answer.
Below the other attribute send from radius to ASR
Framed-MTU     :=     1488
MS-Primary-DNS-Server     :=     62.97.32.21
MS-Secondary-DNS-Server     :=     62.97.33.21
Framed-Protocol     :=     PPP
Service-Type     :=     Framed-User
Framed-Compression     :=     Van-Jacobsen-TCP-IP
If possible i prefer to work using only virtual-template mode without per-user VRF.
I try con configure VT using ip vrf forwarding RACC_ULL and ip unnumbered ( in the same VRF domain ) without success.

Session Border Controller

Hi,
I want to know that the Session Border Controller is a Interface or device or a technology used in VoIP ?
As we need a Inter chassis Redundancy in Cisco ASR 1002 and we checked a document in which it is mentioned that we need SBC on these devices to run the Inter chassis Redundancy feature on Cisco ASR 1002.
This is the link in which it is mentioned that SBC is for redundancy.
http://www.cisco.com/c/en/us/td/docs/routers/asr1000/configuration/guide/sbcu/2_xe/sbcu_2_xe_book/sbc_interHA.pdf
Thanks & Regards
Aateek Singh
Network Engineer
Spooster IT Services

SBC is typically used to terminate SIP trunks from an ITSP. It is a service that runs on a router and can help provide security features like address hiding and others. If you need redundancy you can set up HSRP.
Your question is a bit unclear but if you just need redundancy between two ASR then HSRP or VRRP will work fine. If you are using SIP then you must use HSRP.
Here is a CUBE / HSRP configuration guide. Make sure you take notes of any caveats.
http://www.cisco.com/c/en/us/support/docs/voice-unified-communications/unified-border-element/112095-cube-hsrp-config-00.html

ASR 1002 Monitor Session doesn't works.

Hello,
I am trying to configure a monitor session in a Cisco ASR1002 but it doesn't works (sniffer is on interface gigabitEthernet 0/0/3).
My config is:
monitor session 10 type local
source interface GigabitEthernet0/0/0
destination interface GigabitEthernet0/0/3
and interfaces are up:
#show interfaces GigabitEthernet0/0/0
GigabitEthernet0/0/0 is up, line protocol is up
5 minute input rate 241240000 bits/sec, 26651 packets/sec
5 minute output rate 4000 bits/sec, 6 packets/sec
#sh interfaces gigabitEthernet 0/0/3
GigabitEthernet0/0/3 is up, line protocol is up (monitoring)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
Is very urgent for me so any help would be very appreciated.
Thanks in advance for your help.
Regards.
Ruben.

Hello,
Please see below.
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe-3s/asr1000/lanswitch-xe-3s-asr1000-book/lnsw-conf-erspan.html#GUID-152D9875-169B-461F-A34B-ABAABD0C1FF8
"The monitor session span-session-number type local command is not supported on Cisco ASR 1000 Series Routers."
===You may though configure ERSPAN to work as a local SPAN===
* Make sure that both the source session and destination session have the same erspan-id
* Use one locally configured IPv4 address to configure the "ip address" and "origin ip address" in source session and "ip address" in destination session
Example snip: Monitor interface Gig0/0/0 traffic, and then send out through interface Gig0/0/1..
monitor session 10 type erspan-source
source interface Gi0/0/0
destination
erspan-id 10
ip address 10.10.10.1
origin ip address 10.10.10.1
monitor session 20 type erspan-destination
destination interface Gi0/0/1
source
erspan-id 10
ip address 10.10.10.1

Redundancy in Cisco ASR1002

Similar Messages

Maybe you are looking for