03-01-2010 05:48 PM - edited 03-04-2019 07:40 AM
Hi
we have point to point metro ethernet link terminating on 7204VXR router.On this point to point link we are configuring GRE over ipsec. Problem is when the traffic exceeding 8mbps we started getting packet drops.
from the cisco documentation it seems the tunnle bandwidth is by default 8mbps and there is parameter like Inherit/receive but those actullay not change the tunnel interface bandwidth.If we just give tunnle bandwidth with bandwidth mentioned it allows me to give option of 100mbps but again the tunnle interface bandwidth remians 8mbpos only and probabaly that 100mbps is useful only for routing decisions.
i am using advance security 12.4.15T12 image.
can anyone please confirm weather this is a limitation or any other way to go beyond 8mbps for the tunnle interface (7204VXR-NPEG1 processor)
Regards
Sameer
Solved! Go to Solution.
03-01-2010 06:04 PM
You can go beyond 8mbps. It all depends on the IOS Feature Set. If I'm not mistaken Advanced IP Services feature set will enable the "tunnel bandwidth" command.
03-01-2010 06:33 PM
By default Tunnel bandwidth is set to 8mb. I don't remember the exact command but it should be in the vicinity of "tunnel bandwidth transmit
03-01-2010 06:04 PM
You can go beyond 8mbps. It all depends on the IOS Feature Set. If I'm not mistaken Advanced IP Services feature set will enable the "tunnel bandwidth" command.
03-01-2010 06:13 PM
Hi
Thanks for the reply..
in advance security also i am getting the bandwidth command and i can go upto 100mbps but when i do show interface tunnel 0 it shows me bandwidth of 8mbps only.
please have look at attached doc regarding bandwidth command and let me know your opinion.
03-01-2010 06:33 PM
By default Tunnel bandwidth is set to 8mb. I don't remember the exact command but it should be in the vicinity of "tunnel bandwidth transmit
03-01-2010 06:39 PM
Hi
That command was available in 12.3 but in 12.4 they removed this comamnd and it seems only option is bandwidth and the details of the same was attahced in last post,
if anyone can confirm weather the same is possibel anf exact softwrae version required i can check let u know the result.
03-01-2010 06:44 PM
Cisco relocated the command to the "Advanced" feature set.
03-01-2010 06:55 PM
i am already using Advance security.can ypou please confirm which suit u want me to go.
Advance ip services/adnace enterprise servcies.
*in command lookup tool for 12.4T (without any sub category) tunnel bandwidth trans/receive not available.
03-01-2010 07:07 PM
Hi Sameer,
It's one of those days when someone from Cisco forgot to document the command.
If you look for "tunnel bandwidth*" in the Cisco Command Lookup Tool, you'll see it there but what feature is this command supported is not specified.
http://tools.cisco.com/Support/CLILookup/cltSearchAction.do?AT=gD&BM=t&CN="tunnel bandwidth"&IndexOptionId=All IOS Commands&IndexId=IOS
03-01-2010 09:00 PM
Hi
tried changing the software to advance ip services with same version (12.4.15t12) and i am getting the command to define transmit and receive bandwidth over tunnel interface.
i think this will work with my requirement.let me check in live enviornment and confirm back.
03-02-2010 11:30 AM
Hello Sameer,
I've checked on a C7200 VXR with NPE-G2 and
sh ver | inc image
System image file is "disk2:c7200p-advsecurityk9-mz.124-20.T.bin"
router(config)#int tunnel 20
router(config-if)#band
router(config-if)#bandwidth ?
<1-10000000> Bandwidth in kilobits
inherit Specify that bandwidth is inherited
receive Specify receive-side bandwidth
bandwidth 1000
bandwidth receive 200
we see
sh int tu20
Tunnel20 is up, line protocol is down
Hardware is Tunnel
MTU 9108 bytes, BW 1000 Kbit/sec, RxBW 200 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source UNKNOWN
Tunnel protocol/transport GRE/IP
Key disabled, sequencing disabled
Checksumming of packets disabled
Tunnel TTL 255
Fast tunneling enabled
Tunnel transport MTU 1476 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
with
bandwidth 20000
sh int tu20
Tunnel20 is up, line protocol is down
Hardware is Tunnel
MTU 9108 bytes, BW 20000 Kbit/sec, RxBW 200 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source UNKNOWN
Tunnel protocol/transport GRE/IP
Key disabled, sequencing disabled
Checksumming of packets disabled
Tunnel TTL 255
Fast tunneling enabled
Tunnel transport MTU 1476 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/0 (size/max)
a GRE tunnel is a logical interface and so it has some parameters associated to it, I cannot test with traffic but I don't think a single tunnel is limited to those 8 Mbps specified by the lines Tunnel transmit bandwidth and Tunnel receive bandwidth 8000.
I have experience of traffic over MPLS TE tunnels where the configured bandwidth can be easily overcomed.
Also the command modifies the rx BW in bold not the two lines
http://www.cisco.com/en/US/docs/ios/interface/command/reference/ir_a1.html#wp1013415
so or there are other commands to modify those settings or they are administrative (no real limit on traffic on the tunnel)
under tunnel I cannot find a bandwidth option
tunnel ?
checksum enable end to end checksumming of packets
destination destination of tunnel
flow flow options
key security or selector key
mode tunnel encapsulation method
path-mtu-discovery Enable Path MTU Discovery on tunnel
protection Enable tunnel protection
route-via Select subset of routes for tunnel transport
sequence-datagrams drop datagrams arriving out of order
source source of tunnel packets
tos set type of service byte
ttl set time to live
udlr associate tunnel with unidirectional interface
vrf set tunnel vrf membership
Hope to help
Giuseppe
03-02-2010 12:44 PM
Hi Giuseppe,
I believe you need Advanced IP Services feature set to enable "tunnel bandwidth transmit" or "tunnel bandwidth receive" function.
03-02-2010 06:21 PM
Hi Giuseppe / leolaohoo
with plain bangdwidth command its not changing the actual bandwidth of the interface.probabaly that command is just to communicate with higher level protocols which might help in taking routing decisions.
the actual command is tunnle bandwidth transmit/receive which i found in adavance ip services(c7200-advipservicesk9-mz.124-15.T12.bin ==256mb dram 64mb flash) . i am using NPEG1 so when i installed this software i was able to see and configure that command and the tunnel interface was showing proper bandwdith but during boot i was getting the low memory error so finally i shifted to c7200-jk9s-mz.124-25a (Enterprise security==256mb dram/48mb flash) where the same command is available and bootin without any error message.
the command output i have attached for the reference.
thanks
sameer
03-03-2010 02:08 AM
Hello Leo,
I see that my device has advanced security instead!
Sorry for having caused confusion in this thread
But according to your experience, are these tunnel bandwidth TX and RX real limitations or not?
Hope to help
Giuseppe
06-10-2011 07:21 AM
Hi,
I just ran a test in my lab with following results:
c2811#sh int tunnel 100
Tunnel100 is up, line protocol is up
Hardware is Tunnel
Internet address is 192.168.100.1/24
MTU 17912 bytes, BW 100 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 255/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive set (5 sec), retries 3
Tunnel source 192.168.255.1, destination 192.168.255.3
Tunnel protocol/transport GRE/IP
Key 0x64, sequencing disabled
Checksumming of packets disabled
Tunnel TTL 255, Fast tunneling enabled
Tunnel transport MTU 1472 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input 01:15:12, output 00:00:02, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 51
Queueing strategy: fifo
Output queue: 0/0 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 20258000 bits/sec, 1760 packets/sec
962 packets input, 54292 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
4364334 packets output, 2042654264 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
On the other tunnel side:
c1841#sh int tunn 100
Tunnel100 is up, line protocol is up
Hardware is Tunnel
Internet address is 192.168.100.2/24
MTU 17912 bytes, BW 8000 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 255/255
Encapsulation TUNNEL, loopback not set
Keepalive set (5 sec), retries 3
Tunnel source 192.168.255.3, destination 192.168.255.1
Tunnel protocol/transport GRE/IP
Key 0x64, sequencing disabled
Checksumming of packets disabled
Tunnel TTL 255, Fast tunneling enabled
Tunnel transport MTU 1472 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input 00:52:58, output 00:00:02, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 23
Queueing strategy: fifo
Output queue: 0/0 (size/max)
30 second input rate 21082000 bits/sec, 1809 packets/sec
30 second output rate 0 bits/sec, 0 packets/sec
3972616 packets input, 1472446504 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
964 packets output, 53476 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 output buffer failures, 0 output buffers swapped out
So the default settings seem not to be restricting the throughput in fact!
BR,
Milan
06-10-2011 01:01 AM
Hi Leo,
I've got the same question as Giuseppe:
According to your experience, are these tunnel bandwidth TX and RX real limitations or not?
Looking at the command reference
http://www.cisco.com/en/US/customer/docs/ios/interface/command/reference/ir_t2.html#wp1011412
it seems so, but why is it talking about "...the capacity of the satellite link"?
Thanks,
Milan
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide