icmp unreachables and secondary ip addresses on MSFC2
when configuring secondary ip addresses to vlan interfaces on an MSFC2 ip unreachables are disabled automatically. when reinstalling the unreachables there is a message like this:
ip secondary address exists, may affect IP HW switching between subnets
within the same vlan - out of sequence packets could occur
can somebody describe me a real network situation when these out of sequence packets could occur ? is the command just entered for protection of the MSFC2 or are there any real threats that have slipped my mind ?
(i do NOT use any ACLs on the interface, there is a document out that describes scenarios with ACL that I completely agree with).
Re: icmp unreachables and secondary ip addresses on MSFC2
As an example for a situation, when out of sequence packets can occur, using per-packet load balancing to share the traffic load across available paths to a given destination can cause out-of-sequence packets in a particular data flow. This can result in unsatisfactory data transmission for video and voice streaming.
I guess the issue with MSFC2 ip unreachables has been documented, you could look for bugs related to the same. Removing the secondary seems to be the only option, especially if it will not be an issue to reconfigure. I don't think there is any other way to ensure that out of sequence packets will be seen with the secondary ip's configured.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...