asr-1004 balance on lacp port-channel

ikochergin · ‎07-27-2013

Hi,

I am trying to configure lacp port-channel on ASR 1004 RP2 (with IOS XE asr1000rp2-advipservicesk9.03.06.01.S.152-2.S1.bin).

PPPoE3#sh run int port-c 1

Building configuration...

Current configuration : 88 bytes

!

interface Port-channel1

no ip address

no negotiation auto

load-balancing flow

end

PPPoE3#show interfaces port-channel 1 etherchannel

All IDBs List contains 4 configured interfaces

Port: GigabitEthernet1/0/6 (index: 0)

Port: GigabitEthernet1/0/7 (index: 1)

Port: GigabitEthernet1/0/8 (index: 2)

Port: GigabitEthernet1/0/9 (index: 3)

Active Member List contains 4 interfaces

Port: GigabitEthernet1/0/6

LACP Mode: Active

Port: GigabitEthernet1/0/7

LACP Mode: Active

Port: GigabitEthernet1/0/8

LACP Mode: Active

Port: GigabitEthernet1/0/9

LACP Mode: Active

Passive Member List contains 0 interfaces

Load-Balancing method applied: flow-based

Bucket Information for Flow-Based LB:

Interface: Buckets

GigabitEthernet1/0/6:

Bucket 0 , Bucket 1 , Bucket 2 , Bucket 3

GigabitEthernet1/0/7:

Bucket 4 , Bucket 5 , Bucket 6 , Bucket 7

GigabitEthernet1/0/8:

Bucket 8 , Bucket 9 , Bucket 10, Bucket 11

GigabitEthernet1/0/9:

Bucket 12, Bucket 13, Bucket 14, Bucket 15

PPPoE3#

ASR doesn't balance, it sends all traffic to the 1st port.

In its turn the switch does balance correctly and sends traffic to all 4 ports.

What am I doing wrong?

bhumindesai · ‎08-25-2013

Same problem to me , i have ASR 1001 and 2 ports to port-ch 1.. and not able to balance PPPOVlan traffic to LACP..i have around 6500+ pppov sessions. and 1.2Gbc+ traffic.. but currently not more then 950MB.

if any one has any solution please help us..

Dmytro Skotnikov · ‎08-27-2013

Hello bhumin desai, Ilya!

Flow-based LB is not supported for PPPoEoGEC setup, basically due to lack of code which supports this functionality there is no way to get this type of configuration to work.

In order to achieve LB over GEC interface you can evalute the possibility of VLAN Based LB, which is supported for ASR1K platform.

Please, take a look into this document, it describes manual LB on per vlan basis. It will allow you to manually assign VLANs to a different port-channel members.

http://www.cisco.com/en/US/partner/docs/ios/lanswitch/configuration/guide/lsw_cfg_gecvlan.html

In general it requires to assign a Primary and Secondary GEC member under sub-interface for a particular VLAN.

-- Best regards, Dmitry Skotnikov

Iulian Vaideanu · ‎08-30-2013

Hello Dmytro,

Do you happen to know whether support for PPPoEoGEC is planned for the near future? We hit the same problem yesterday trying to do balancing on an ASR1002-RP1, and in the end we got manual (Vlan-based) balancing working, but it would be really nice to have flow-based balancing with PPPoE as well...

Thank you.

Dmytro Skotnikov · ‎08-30-2013

Hello Iulian,

I believe it's on a radar, but I don't know the details. I would suggest you to contact your local account team in order to get more info.

Thank you

--
Best regards,
Dmitry Skotnikov

-- Best regards, Dmitry Skotnikov

chirag_123 · ‎09-04-2013

@Ilya Kochergin as we know that currently auto loadbalancing not working properly on ASR1004 so try with manual VLAN base and it works. But now we are facing new problem after updating ios from

asr1000rp1-advipservices.03.05. to asr1000rp1-adventerprisek9.03.07.01. pppoe is working absolutly fine but no TAL users will able to register its MAC on asr. it all shows 00-00-00-00-00-00. Here i am sending you log from my ASR

Surat-Gateway#

*Sep 4 10:59:49.136: %SYS-5-CONFIG_I: Configured from console by suratadm on vty0 (X.X.X.X)

Surat-Gateway#

*Sep 4 11:00:06.545: RADIUS/ENCODE(00004110):Orig. component type = Iedge IP SIP

*Sep 4 11:00:06.545: RADIUS(00004110): Config NAS IPv6: ::

*Sep 4 11:00:06.545: RADIUS/ENCODE(00004110): acct_session_id: 17684

*Sep 4 11:00:06.545: RADIUS: Attribute 55 not sent, as system clock is not set

*Sep 4 11:00:06.545: RADIUS(00004110): sending

*Sep 4 11:00:06.545: RADIUS(00004110): Sending a IPv4 Radius Packet

*Sep 4 11:00:06.545: RADIUS(00004110): Send Access-Request to X.X.X.X:1812 id 21646/71,len 165

*Sep 4 11:00:06.545: RADIUS: authenticator 68 0E EF 53 96 82 5B 6F - 9A CB D5 F4 60 9F 11 8D

*Sep 4 11:00:06.545: RADIUS: User-Name [1] 16 "X.X.X.X"

*Sep 4 11:00:06.547: RADIUS: User-Password [2] 18 *

*Sep 4 11:00:06.547: RADIUS: Framed-IP-Address [8] 6 X.X.X.X

*Sep 4 11:00:06.547: RADIUS: Vendor, Cisco [26] 23

*Sep 4 11:00:06.547: RADIUS: ssg-account-info [250] 17 "SX.X.X.X"

*Sep 4 11:00:06.547: RADIUS: Calling-Station-Id [31] 24 "0/0/3/2:0000.0000.0000"

*Sep 4 11:00:06.547: RADIUS: NAS-Port-Type [61] 6 PPPoEoVLAN [33]

*Sep 4 11:00:06.547: RADIUS: NAS-Port [5] 6 0

*Sep 4 11:00:06.547: RADIUS: NAS-Port-Id [87] 9 "0/0/3/2"

*Sep 4 11:00:06.547: RADIUS: Service-Type [6] 6 Outbound [5]

*Sep 4 11:00:06.547: RADIUS: NAS-IP-Address [4] 6 X.X.X.X

*Sep 4 11:00:06.547: RADIUS: Acct-Session-Id [44] 10 "00004514"

*Sep 4 11:00:06.547: RADIUS: Nas-Identifier [32] 15 "Surat-Gateway"

*Sep 4 11:00:06.547: RADIUS(00004110): Started 5 sec timeout

*Sep 4 11:00:06.549: RADIUS: Received from id 21646/71 X.X.X.X:1812, Access-Accept, len 95

*Sep 4 11:00:06.549: RADIUS: authenticator EE 3E AF 78 4F 4E 12 28 - A0 CF 8C 3F 99 F4 4D 88

*Sep 4 11:00:06.549: RADIUS: Idle-Timeout [28] 6 3600

*Sep 4 11:00:06.549: RADIUS: Service-Type [6] 6 Framed [2]

*Sep 4 11:00:06.549: RADIUS: Vendor, Cisco [26] 18

*Sep 4 11:00:06.549: RADIUS: ssg-account-info [250] 12 "AUnLimited"

*Sep 4 11:00:06.549: RADIUS: Vendor, Cisco [26] 18

*Sep 4 11:00:06.549: RADIUS: ssg-account-info [250] 12 "NUnLimited"

*Sep 4 11:00:06.549: RADIUS: Vendor, Cisco [26] 27

*Sep 4 11:00:06.549: RADIUS: ssg-service-info [251] 21 "QU;600000;D;600000;"

*Sep 4 11:00:06.551: RADIUS(00004110): Received from id 21646/71

*Sep 4 11:00:06.553: RADIUS/ENCODE(00004110):Orig. component type = Iedge IP SIP

*Sep 4 11:00:06.553: RADIUS(00004110): Config NAS IPv6: ::

*Sep 4 11:00:06.553: RADIUS/ENCODE(00004110): acct_session_id: 17684

*Sep 4 11:00:06.553: RADIUS: Attribute 55 not sent, as system clock is not set

*Sep 4 11:00:06.553: RADIUS(00004110): sending

*Sep 4 11:00:06.554: RADIUS(00004110): Sending a IPv4 Radius Packet

*Sep 4 11:00:06.555: RADIUS(00004110): Send Access-Request to X.X.X.X:1812 id 21646/72,len 126

*Sep 4 11:00:06.555: RADIUS: authenticator BB 82 25 33 90 49 AE AB - 92 37 91 7B 56 EE 5B F1

*Sep 4 11:00:06.555: RADIUS: User-Password [2] 18 *

*Sep 4 11:00:06.555: RADIUS: User-Name [1] 11 "UnLimited"

*Sep 4 11:00:06.555: RADIUS: Calling-Station-Id [31] 19 ":Surat-Gateway.::"

*Sep 4 11:00:06.555: RADIUS: NAS-Port-Type [61] 6 PPPoEoVLAN [33]

*Sep 4 11:00:06.555: RADIUS: NAS-Port [5] 6 0

*Sep 4 11:00:06.555: RADIUS: NAS-Port-Id [87] 9 "0/0/3/2"

*Sep 4 11:00:06.555: RADIUS: Service-Type [6] 6 Outbound [5]

*Sep 4 11:00:06.555: RADIUS: NAS-IP-Address [4] 6 X.X.X.X

*Sep 4 11:00:06.555: RADIUS: Acct-Session-Id [44] 10 "00004514"

*Sep 4 11:00:06.555: RADIUS: Nas-Identifier [32] 15 "Surat-Gateway"

*Sep 4 11:00:06.555: RADIUS(00004110): Started 5 sec timeout

*Sep 4 11:00:11.584: RADIUS(00004110): Request timed out!

*Sep 4 11:00:11.585: RADIUS: Retransmit to (X.X.X.X:1812,1813) for id 21646/72

*Sep 4 11:00:11.585: RADIUS(00004110): Started 5 sec timeout

*Sep 4 11:00:16.618: RADIUS(00004110): Request timed out!

*Sep 4 11:00:16.618: RADIUS: Retransmit to (X.X.X.X :1812,1813) for id 21646/72

*Sep 4 11:00:16.618: RADIUS(00004110): Started 5 sec timeout

*Sep 4 11:00:21.632: RADIUS(00004110): Request timed out!

*Sep 4 11:00:21.632: RADIUS: Retransmit to (X.X.X.X :1812,1813) for id 21646/72

*Sep 4 11:00:21.632: RADIUS(00004110): Started 5 sec timeout

*Sep 4 11:00:26.669: RADIUS(00004110): Request timed out!

*Sep 4 11:00:26.669: RADIUS: No response from (X.X.X.X :1812,1813) for id 21646/72

*Sep 4 11:00:26.669: RADIUS/DECODE: No response from radius-server; parse response; FAIL

*Sep 4 11:00:26.669: RADIUS/DECODE: Case error(no response/ bad packet/ op decode);parse response; FAI

And also these are the list of attributes i have used with this ios

radius-server attribute 44 include-in-access-req default-vrf

radius-server attribute 218 mandatory

radius-server attribute 6 on-for-login-auth

radius-server attribute 8 include-in-access-req

radius-server attribute 32 include-in-access-req

radius-server attribute 32 include-in-accounting-req

radius-server attribute 55 include-in-acct-req

radius-server attribute 55 access-request include

radius-server attribute 25 access-request include

radius-server attribute 61 extended

radius-server attribute 31 mac format default lower-case

radius-server attribute 31 send nas-port-detail

radius-server attribute 31 remote-id

radius-server source-ports extended

radius-server unique-ident 74

radius-server vsa send accounting

radius-server vsa send authentication

all this configuration is working fine with ios 9.03

any suggestions....