Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Bronze

N5000 & ICMP Rate Limit

All,

Does the N5000 run an ICMP rate limiter by default ?

I just connected a N5000 up to a C6500 chassis. When i ping the N5000 (inline ! on a SVI interface) from the C6500, he drops everytime the 95th ping request :-)

TESTC6500#   ping 10.102.78.66 df-bit size 1500 repeat 100

Type escape sequence to abort.
Sending 100, 1500-byte ICMP Echos to 10.102.78.66, timeout is 2 seconds:
Packet sent with the DF bit set
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!
Success rate is 99 percent (99/100), round-trip min/avg/max = 1/1/4 ms
TESTC6500#   ping 10.102.78.66 df-bit size 1500 repeat 100

Type escape sequence to abort.
Sending 100, 1500-byte ICMP Echos to 10.102.78.66, timeout is 2 seconds:
Packet sent with the DF bit set
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!
Success rate is 99 percent (99/100), round-trip min/avg/max = 1/1/4 ms
TESTC6500#   ping 10.102.78.66 df-bit size 1500 repeat 100

Type escape sequence to abort.
Sending 100, 1500-byte ICMP Echos to 10.102.78.66, timeout is 2 seconds:
Packet sent with the DF bit set
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!
Success rate is 99 percent (99/100), round-trip min/avg/max = 1/1/4 ms
TESTC6500#   ping 10.102.78.66 df-bit size 1500 repeat 100

Type escape sequence to abort.
Sending 100, 1500-byte ICMP Echos to 10.102.78.66, timeout is 2 seconds:
Packet sent with the DF bit set
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!
Success rate is 99 percent (99/100), round-trip min/avg/max = 1/1/4 ms
TESTC6500#

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: N5000 & ICMP Rate Limit

There is no (configurable) rate-limiter function in the N5k.  I think what you are seeing is a result of process/scheduler timing, but I would have to look up some tests to back that up.

I can do the same operation and I see the packet mising is either 95, 96, none, 97... it varies.  With a true rate-limiter, you will typically see a much more defined pattern.

The Nexus 7000 has hardware and software control-plane policing (CoPP), but the Nexus 5000 does not.  I think it's possible you will see software CoPP in the Nexus 5000 in the future, but time will tell.

Regards,

John Gill

1 REPLY
New Member

Re: N5000 & ICMP Rate Limit

There is no (configurable) rate-limiter function in the N5k.  I think what you are seeing is a result of process/scheduler timing, but I would have to look up some tests to back that up.

I can do the same operation and I see the packet mising is either 95, 96, none, 97... it varies.  With a true rate-limiter, you will typically see a much more defined pattern.

The Nexus 7000 has hardware and software control-plane policing (CoPP), but the Nexus 5000 does not.  I think it's possible you will see software CoPP in the Nexus 5000 in the future, but time will tell.

Regards,

John Gill

1251
Views
0
Helpful
1
Replies