Table Of Contents
Cisco 10008 Router Performance Routing Engine 3 Installation
Replacement Installation Guidelines
Installing or Replacing a PRE3
Troubleshooting the Installation
Forcing Failover in a Redundant Pair
Managing System Boot Parameters
Changing the Software Configuration Register Settings
Upgrading Software from a PRE2 to a PRE3
Procedure to Upgrade a PRE2 to a PRE3
Upgrading Software on a Single PRE3
Upgrading Software on Redundant PRE3s
Managing the Router Using the Network Management Ethernet Port
Configuring the NME Port on the PRE3
Manually Setting the Duplex Mode for the NME Port for the PRE3
Manually Setting the Speed for the NME Port for the PRE3
Analyzing and Troubleshooting Packets
Packet Statistics and PXF Counters
Hardware and Software Components
Displaying Packet Statistics for ACLs
Displaying IP Forwarding Statistics
Displaying Queueing Statistics
Feature Information for Installing a PRE3
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Product Alerts and Field Notices
Obtaining Technical Assistance
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Cisco 10008 Router Performance Routing Engine 3 Installation
Product Number: ESR-PRE3
This publication contains instructions for installing and upgrading the Performance Routing Engine 3 (PRE3) in a Cisco 10008 router.
Finding Feature Information in This Module
Your Cisco IOS software release may not support all of the features documented in this module. To reach links to specific feature documentation in this module and to see a list of the releases in which each feature is supported, use the "Feature Information for Installing a PRE3" section.
Finding Support Information for Platforms and Cisco IOS Software Images
Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at the login dialog box and follow the instructions that appear.
Contents
The following sections are included in this installation document:
•
Prerequisites and Preparation
•
•
•
•
•
•
•
•
•
•
Product Overview
The Performance Routing Engine 3 (PRE3) is the fourth generation Parallel Express Forwarding (PXF) packet processing and scheduling engine for the Cisco 10008 router. Figure 1 shows the front of the Cisco 10008 router.
Figure 1 Cisco 10008 Router Chassis—Front View
Blower module
PRE3—slot 0A
Primary Power Entry Module (PEM)
PRE3—slot 0B
Redundant PEM
Line card slots 5 to 8
Line card slots 1 to 4
The PRE3 performs all Layer 2 and Layer 3 packet manipulation related to routing and forwarding through the Cisco 10008 router. Its advanced application-specific integrated circuit (ASIC) technology supports very high performance throughput with IP services enabled on each port.
The PRE3 consists of two main logical and physical cards:
•
•
The PRE3 runs Cisco IOS Release 12.2(31)SB2 and later releases. Benefits of the PRE3 include:
•
•
•
•
•
•
•
•
By centralizing packet processing in the PRE3, the Cisco 10008 router architecture frees up space on line cards, enabling high interface density, yet retaining the compact Network Equipment Business Systems (NEBS) transmission equipment form factor.
Redundant PRE3s
You can configure two PRE3s in a single chassis for redundancy. If the active PRE3 fails, the standby PRE3 automatically takes over operation of the router. Because all the line cards are physically connected to both the active and standby PRE3s, the failure of a single PRE3 does not require user intervention. If a failure occurs, all line cards automatically reset to the redundant PRE3. Startup and running configurations of the standby PRE3 are synchronized with the active PRE3, ensuring the fastest possible cut-over time if the active PRE3 fails.
PRE3 Front Panel
This section describes the PRE3 front panel (see Figure 2).
PRE3 Connectors
The front panel on the PRE3 contains three ports with RJ-45 connectors (see Figure 2).
•
•
•
CompactFlash Card Slot
The internal CompactFlash card slot can store the Cisco IOS image or a system configuration file on a flash memory card. The system can also boot from the software stored on the flash memory card.
Figure 2 PRE3 Front Panel
LED Indicators and Buttons
LEDs on the front panel of the PRE3 provide a visual indication showing the status of PRE3 operation. Table 1 describes the PRE3 LEDs and buttons. Use Figure 2 and Table 1 to understand the LEDs and buttons.
Note
http://www.cisco.com/univercd/cc/td/doc/product/aggr/10000/hdwr/index.htm
Alphanumeric Display
The alphanumeric display on the front panel provides information on the state of the PRE3. The display consists of two four-character LED panels. Table 2 describes the most common messages. If you report a problem to Cisco, it is helpful to include the message on the PRE3 alphanumeric display in your problem report.
Prerequisites and Preparation
Before you perform any of the procedures in this guide, we recommend that you:
•
Cisco 10008 Router Hardware Installation Guide
http://www.cisco.com/univercd/cc/td/doc/product/aggr/10000/hdwr/8-hig/index.htm•
•
•
The following documents may be used as reference material while performing procedures in this document:
–
http://www.cisco.com/univercd/cc/td/doc/product/aggr/10000/hdwr/index.htm–
http://www.cisco.com/univercd/cc/td/doc/product/aggr/10000/tblshoot/trblgd/index.htmSafety Guidelines
Before you begin the PRE3 installation procedure, review the safety guidelines in this section to avoid injuring yourself or damaging the equipment. Before you install, configure, or perform maintenance on the router, you should also review the safety warnings listed in the Regulatory Compliance and Safety Information for Cisco 10000 Series Routers document.
Safety Warnings
Safety warnings appear throughout this publication in procedures that, if performed incorrectly, may harm you. A warning symbol precedes each warning statement. The following warning is an example of a safety warning. It identifies the warning symbol and associates it with a bodily injury hazard.
Warning
This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071
SAVE THESE INSTRUCTIONS
Note
Software Compatibility
The PRE3 has specific Cisco IOS software requirements.
Table 3 shows the minimum required Cisco IOS software for the PRE3.
Table 3 PRE3 Software Compatibility
ESR-PRE3
12.2(31)SB2
12.2(31)SB2
Use the show version command to display the system software version that is currently loaded and running.
If the output of the show version command indicates that the Cisco IOS software is a version earlier than the version identified as the minimum Cisco IOS software release in Table 3, check the contents of the CompactFlash memory to determine if the required images are available on your system.
The output of the show flash command provides a list of all files stored in the CompactFlash memory. If the correct software version is not installed, contact Cisco Customer Service (see the "Obtaining Technical Assistance" section).
Installation Guidelines
This section contains guidelines for the following:
•
•
•
The PRE3 is hot-swappable, which means you can remove and replace a PRE3 while the system is operating—if you have a standby (redundant) PRE3 installed in the chassis. This feature allows you to add, remove, or replace a PRE3 while the system maintains all routing information and ensures session preservation.
Caution
Caution
New Installation Guidelines
If you are replacing the PRE3 in a non-redundant system, you must configure the PRE3 using the configure command. For configuration information, refer to the "Configuring a PRE3" section.
Replacement Installation Guidelines
If the PRE3 is replaced in a redundant system containing two PRE3s, the standby (or newly installed) PRE3 automatically assumes the configuration of the active PRE3; do not configure the new PRE3.
Required Tools and Equipment
You need the following tools and equipment to install the PRE3:
•
•
•
Powering Off the System
If you are installing or replacing a single PRE3, power down the system using the following procedure:
Caution
Step 1
Step 2
Step 3
Figure 3 Setting DC Power Switch to the Off Position
Figure 4 Setting AC Power Switch to the Off Position
Installing or Replacing a PRE3
This section describes how to install or replace the PRE3 in the Cisco 10008 chassis. It contains the following information:
•
Installing a PRE3
Use the following procedure to install the PRE3 into slot 0A or slot 0B in the Cisco 10008 chassis.
Step 1
Step 2
Step 3
Step 4
The PRE3 cycles through its power-on self-test. The FAIL LED stays on briefly (10 to 15 seconds) and then shuts off.
Step 5
Caution
Step 6
Figure 5 ESD Chassis Connection
Figure 6 Inserting and Removing the PRE3
Figure 7 Closing and Opening the PRE3 Ejector Levers
Figure 8 PRE3 Captive Screw Locations
Configuring a PRE3
After the PRE3 is successfully installed, you can configure it for network use. For information about configuring the PRE3, see "Managing the Router Using the Network Management Ethernet Port" section.
Note
Removing a PRE3
Use the following procedure to remove a PRE3 from the chassis:
Step 1
Step 2
Note
Step 3
Step 4
Step 5
Note
Warning
Step 6
Troubleshooting the Installation
Refer to Figure 2 and Table 1 for descriptions of the LEDs on the PRE3. Follow the instructions in Table 4 to troubleshoot the installation.
Table 4 PRE3 Installation Troubleshooting
If these troubleshooting procedures do not correct the problem, refer to the Cisco 10000 Series Router Troubleshooting Guide for additional information.
Forcing Failover in a Redundant Pair
To manually force the active and standby devices in a redundant pair to failover, use the redundancy force-failover command. Manually force the active and standby PRE3s to reverse roles if you need to replace the active one. You can then replace the PRE3 while causing only minimal disruption of traffic.
The following example shows how to set the standby PRE3 to be active:
Router# redundancy force-failover main-cpuThis command does not generate an alarm.
Managing System Boot Parameters
During the boot process, the system reads a software configuration register that defines certain system parameters. The software configuration register is a 16-bit register in NVRAM used to define such characteristics as:
•
•
•
By modifying the boot parameters, you can customize your Cisco 10008 router. For example, a common configuration register setting in some lab environments is 0x2100. Using this setting, the system boots to the ROM monitor (ROMmon) prompt, where a technician can load a specific image by entering the boot command at the ROMmon prompt.
Changing the Software Configuration Register Settings
The factory default value for the software configuration register is 0x2102. This value is a combination of the following: binary bit 8 = 0x0100, bits 00 through 03 = 0x0002, and bit 13 = 2000.
To change the software configuration register settings while you are running system software, perform the following steps:
Step 1
Router(config)# config-register 0x2100Consult the hexadecimal column in Table 5 for the possible settings to enter as the 4-bit value parameter.
Step 2
Router(config)# Ctrl-Z Router#Step 3
Router# show version ... #Configuration register is 0x141 (will be 0x2100 at next reload)Step 4
Router# copy running-config startup-configStep 5
The router reboots using the new register settings. The software configuration register setting takes affect only after you reload the system. This happens when you issue the reload command from the console or reboot the router.
Upgrading Software
This section describes the following methods for upgrading Cisco IOS images on the Cisco 10008 router:
•
•
•
Upgrading Software from a PRE2 to a PRE3
This section describes the procedures for upgrading the Performance Routing Engine from a PRE2 to a PRE3. Procedures for downgrading from a PRE3 to a PRE2 are also described.
•
Note
Prerequisites
For all of the software features supported by your current PRE2 (c10k2-p11-mz) image to function correctly, they must be supported by the PRE3 image. Check with the Cisco Technical Assistance Center (TAC) to verify the correct upgrade path before initiating the upgrade.
The upgrade should be performed by a qualified engineer. This person must be familiar with the Cisco router console interface and be able to perform basic router operations, such as configuration loading and router reload functions.
Caution
Upgrade Considerations
•
•
Procedure to Upgrade a PRE2 to a PRE3
Follow this procedure to upgrade a single PRE2 in a Cisco 10008 chassis that does not have a redundant, standby PRE2.
Step 1
Step 2
Caution
Step 3
Note
Step 4
Step 5
Step 6
a.
Note
Step 7
Step 8
Booting from a TFTP Server
If you saved the PRE2 image on a TFTP server that is reachable from the router (for example, if the router and server are on the same LAN or there is a default proxy server), boot the router from the TFTP server.
In the following example, the router boots the PRE3 image from a network server with the IP address 172.16.15.112:
> boot tftp://172.16.15.112/c10k3-p11-mzThe configuration dialog appears.
You can now proceed to step 9.
Booting from Disk0
If the image was saved to Disk0, boot that image.
The following boot command loads the PRE3 image from Disk0:
> boot disk0:c10k3-p11-mzThe configuration dialog appears.
You can now proceed to step 9.
Booting from the eboot Image
If you did not save the PRE3 image to a TFTP server, boot the eboot (c10k3-eboot-mz) image stored in bootflash.
In the following example, the router boots from the eboot image:
> boot bootflash:c10k3-eboot-mzThe configuration dialog appears.
Proceed to the "Did Not Save the Configuration" section.
Step 9
Saved the Configuration on a CompactFlash Card
If you booted the PRE3 image and saved the previous configuration to a CompactFlash card:
a.
b.
The router is available for normal operations and the upgrade is complete.
Saved the Configuration on a TFTP Server
If you booted the PRE3 image, and you saved the previous configuration to a TFTP server:
a.
b.
c.
d.
The router is available for normal operations and the upgrade is complete.
Did Not Save the Configuration
If you did not save the PRE2 image to a TFTP server and you booted the PRE3 image:
a.
b.
c.
d.
Upgrading Software on a Single PRE3
To upgrade software for a single PRE3, follow these steps:
Step 1
Router# copy tftp disk0: Address or name of remote host []? 223.255.254.254 Source filename []? pre3/images/c10k3-p11-mz Destination filename [c10k3-p11-mz]? Accessing tftp://223.255.254.254/pre3/images/c10k3-p11-mz... Loading pre3/images/c10k3-p11-mz from 223.255.254.254 (via FastEthernet0/0/0):.... [OK - 25251732 bytes] 25251732 bytes copied in 50.356 secs (501464 bytes/sec) Router#Step 2
Router(config)# boot system flash disk0:c10k3-p11-mzStep 3
Router# copy running-config startup-configStep 4
Router# reloadThe system is now using the new Cisco IOS image.
Upgrading Software on Redundant PRE3s
To upgrade software for redundant PRE3s, follow these steps:
Step 1
Router# show redundancy statesmy state = 13 -ACTIVEpeer state = 8 -STANDBY HOTMode = DuplexUnit = PrimaryUnit ID = 0Redundancy Mode (Operational) = SSORedundancy Mode (Configured) = SSORedundancy State = SSOMaintenance Mode = DisabledManual swact enabledCommunications = Upclient count = 38client_notification_TMR = 30000 millisecondsRF debug mask = 0x0Step 2
Router# copy tftp disk0:Address or name of remote host []? 223.255.254.248Source filename []? c10008/c10k3-p11-mzDestination filename [c10k3-p11-mz]?Accessing tftp://223.255.254.248/c10008/c10k3-p11-mz...Loading c10008/c10k3-p11-mz from 223.255.254.248(via FastEthernet0/0/0):!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!...[OK - 25750196 bytes]25750196 bytes copied in 50.64 secs (508495 bytes/sec)Step 3
Router# copy tftp stby-disk0The output is similar to that shown in the previous step.
Step 4
Router# dir disk0:Directory of disk0:/1 -rw- 25750196 Mar 4 2000 00:13:24 +00:00 c10k3-p11-mz256503808 bytes total (230752256 bytes free)Router# dir stby-disk0:Directory of stby-disk0:/1 -rw- 25750196 Mar 4 2000 00:14:56 +00:00 c10k3-p11-mz257544192 bytes total (231792640 bytes free)Step 5
Router# show run | i bootboot-start-markerboot system flash disk0:c10k3-p11-mz.mce_rp_isp-20060127boot-end-markerexception crashinfo file bootflash:crashinfoStep 6
Router# configure terminalEnter configuration commands, one per line. End with CNTL/Z.Router(config)#Step 7
Router(config)# no boot system flash disk0:c10k3-p11-mz.mce_rp_isp-20060127Step 8
Router(config)# boot system flash disk0:c10k3-p11-mzStep 9
Router(config)# config-register 0x2100Step 10
Router(config)# exitRouter#Step 11
Router# copy running-config startup-configDestination filename [startup-config]?Building configuration...[OK]Step 12
Router# show bootvarBOOT variable = disk0:c10k3-p11-mz,1;CONFIG_FILE variable =BOOTLDR variable =Configuration register is 0x0Standby BOOT variable = disk0:c10k3-p11-mz,1;Standby CONFIG_FILE variable =Standby BOOTLDR variable =Standby Configuration register is 0x0Step 13
Router# reloadProceed with reload? [confirm]Resetting ..........Both PRE3s are now using the new Cisco IOS image with the new register settings.
Managing the Router Using the Network Management Ethernet Port
The network management Ethernet (NME) port on the PRE3 is used to manage the Cisco 10008 router. The duplex mode and speed of the NME port are configurable.
The following sections describe how to configure the duplex mode and speed of the NME port for the PRE3.
Configuring the NME Port on the PRE3
The NME port for PRE3 supports the following operational modes:
•
•
•
Default configurations do not appear in the router's configuration file.
We recommend that you allow the NME port to autonegotiate the duplex mode. When autonegotiation mode is enabled, the NME port responds only to IEEE 802.3x pause frames from another device.
If the negotiation of duplex mode fails and a duplex mode mismatch occurs, manually set the duplex mode for full-duplex or half-duplex operation. Setting duplex mode disables autonegotiation mode. When you manually set duplex mode, the NME port does not support IEEE 802.3x flow control.
When you manually configure duplex mode, the NME port can experience problems. If this occurs, disable duplex mode by entering the no full-duplex or no half-duplex command. When you enter the no duplex command, the operational mode reverts to autonegotiation mode.
To configure the NME port, perform the following optional configuration tasks:
•
•
Manually Setting the Duplex Mode for the NME Port for the PRE3
Note
To manually set the duplex operational mode of the NME port for the PRE3, enter either of the following commands in interface configuration mode:
Manually Setting the Speed for the NME Port for the PRE3
To manually set the speed of the NME port for PRE3, enter the following command in interface configuration mode. The default speed of the NME port is 100 Mbps.
Analyzing and Troubleshooting Packets
The PXF engine of the PRE3 is responsible for processing and forwarding packets. As processing occurs, PXF counters increment to reflect the internal behavior of the PRE. The router collects this statistical information from the counters and appropriately displays it when you enter specific show pxf cpu commands. The output from these commands is useful in analyzing and troubleshooting denied and logged packets.
To correctly interpret packet statistics, it is important that you understand the behavior of the router during packet and access list processing, and the counters that provide the statistical data. This section briefly describes access list processing, some PXF counters and their behavior, and some of the commands you can use to display statistical information. This section is based on PRE3 with differences noted for other PREs.
Access Control Lists
The Cisco 10008 router provides traffic filtering capabilities using Access Control Lists (ACLs). Access lists filter network traffic by controlling whether routed packets are forwarded or blocked at the router's interfaces. Using ACLs, you can do such things as restrict the contents of routing updates, provide traffic flow control, and provide security for your network.
The Cisco 10008 router supports the following ACL types and features:
•
•
•
•
The access-list command is used to configure an ACL. For example, the following configuration creates ACL 108:
access-list 108 permit udp any host 10.68.1.10 range 0 5000 logaccess-list 108 permit udp host 10.1.1.10 range 0 5000 any logAfter creating an ACL, it is applied to an interface using the ip access-group command. The router executes the ACL from top to bottom, denying or permitting packets as directed by the access-list entries (ACEs). When the log keyword is specified in an ACE, the router sends packet information to the console.
The last line of an ACL is an implicit deny statement that appears to the router as:
deny any anyThis statement causes the router to deny any packets remaining after processing the ACEs of the access list. The implicit deny statement does not include the log keyword; therefore, the router does not send packet information to the console for those packets denied by the implicit deny statement.
For example, the router processes the following ACL from top to bottom as follows:
access-list 108 permit udp any host 10.68.1.10 range 0 5000 logaccess-list 108 permit udp host 10.1.1.10 range 0 5000 any log•
•
•
Packet Statistics and PXF Counters
The Cisco 10008 router PRE3 provides high performance Layer 3 processing using its PXF engine and Route Processor (RP). As the PXF engine processes packets, counters such as the following reflect the internal operation of the PRE3:
The statistical information that the PXF counters provide is useful in analyzing and troubleshooting denied and logged packets. Because the internal operation of the PRE3 differs for ACLs, the PXF counters are inconsistent between the PREs. However, system-wide router behavior is consistent for PREs despite the differences in counters.
The following sections describe the PXF counters and the way in which they increment.
IP Forwarding Counter
A Forwarding Information Base (FIB) lookup is one of the initial steps in forwarding a packet. When the router forwarding processor needs information to forward a packet, it performs a lookup operation on the FIB table. The IP forwarding counter reflects the state of that lookup operation. It does not reflect whether or not the packet was forwarded. This counter increments each time an FIB lookup successfully occurs.
ICMP Created Counters
Some FIB lookup operations can cause Internet Control Message Protocol (ICMP) messages to be generated. For example, if a packet's time-to-live (TTL) expires, an address is unreachable, or an ACL-denied packet is dropped, an ICMP message is generated. The ICMP created counters reflect the number of ICMP packets created. The counters increment each time an FIB lookup results in the generation of an ICMP message.
Feedback Counter
Sometimes the PXF engine cannot complete the processing of a packet before the packet completes a single pass through the PXF; the packet requires additional processing. As a result, the packet is fed back through the PXF and processing continues. This is referred to as a feedback operation.
The following are examples of packets that can cause feedbacks to occur:
•
•
•
The feedback counter reflects the total number of feedbacks through the PXF by all packets. The counter increments one time for each additional pass a packet makes.
When a packet is denied because of an ACL deny statement, the router drops the packet. Dropped packets do not need further processing and, therefore, are not fed back through the PXF. In this case, the feedback counter does not increment.
Displaying Packet Statistics
The Cisco 10008 router supports show pxf cpu commands that allow you to determine the following information:
•
•
•
•
For detailed information about the show pxf cpu commands, refer to the Cisco 10000 Series Router Broadband Aggregation, Leased-Line, and MPLS Configuration Guide.
To display packet statistics for the PRE3, enter the following commands:
IPv6 Forwarding over MPLS
The Cisco 10008 router supports PXF-accelerated IPv6 packet forwarding over Multiprotocol Label Switching (MPLS) on the PRE3. This feature is enabled by default.
Table 6 lists common IPv6 over MPLS commands. For detailed information about configuring IPv6, refer to the Cisco 10000 Series Router Broadband Aggregation, Leased-Line, and MPLS Configuration Guide.
Table 6 IPv6 Forwarding over MPLS Commands
Sample Case Study
For the purposes of this case study, assume that the following ACL is configured on the router's outbound serial 1/0/0 interface:
access-list 108 permit udp any host 10.68.1.10 range 0 5000 logaccess-list 108 permit udp host 10.1.1.l0 range 0 5000 any logA traffic simulator is used to send 100 UDP packets to the Cisco 10008 router with the source and destination ports of the packets set to 6000. Packets arrive on the Gigabit Ethernet 2/0/0 interface and are supposed to leave the router through the serial 1/0/0 interface.
After processing the 100 UDP packets, the show pxf cpu commands are entered to display statistical information about the packets.
Hardware and Software Components
Table 7 lists the hardware and software components used in the case study.
Table 7 Hardware and Software Components
12.2(31)SB2
ESR-PRE3
c10k3-p11-mz
Displaying Packet Statistics for ACLs
The show pxf cpu statistics security command provides statistical information about the packets denied, permitted, and logged by ACLs. The router collects statistics for mini-compiled ACLs, but not for turbo-compiled ACLs.
The following example output provides packet information before sending the 100 packets. Notice that the Packets Denied field indicates that no packets have been denied by ACL 108. The Denied and Log field indicates that no denied packets have been logged.
Router# show pxf cpu statistics securityACL Pkts Pkts Denied PermitName Denied Permitted & Log & Log108 0 0 0 0The following example output results after sending the 100 packets. Notice that the Packets Denied field now indicates that 100 packets have been denied. Recall that the router denied the packets because they matched the implicit deny statement. This statement does not include a log keyword, which causes information to be sent to the console. Therefore, no logging occurs and the Denied and Log fields indicate this.
Router# show pxf cpu statistics securityACL Pkts Pkts Denied PermitName Denied Permitted & Log & Log108 100 0 0 0Displaying IP Forwarding Statistics
The show pxf cpu statistics ip command provides statistical information about IP forwarding. The following example output indicates the count of the IP forwarding counter before sending the 100 packets. Notice that the count is 402.
Router# show pxf cpu statistics ipFP ip statisticsdropped 0forwarded 402punted 540input_packets 942icmps_created 0noadjacency 0...The following example output results after sending the 100 packets. Notice that the IP forwarding counter is now 502
Router# show pxf cpu statistics ipFP ip statisticsdropped 0forwarded 502 /*incremented by 100*/punted 540input_packets 942icmps_created 0noadjacency 0...Displaying Queueing Statistics
The show pxf cpu queue command provides queueing statistics for one interface, all interfaces, or a queue identifier (QID). The following example displays PXF queuing statistics for QID 267.
Router# show pxf cpu queue 267ID : 267Priority : LoCIR (in-use/configured) : 0/65535EIR (in-use/configured) : 0/0MIR (in-use/configured) : 0/65535Maximum Utilization configured : noLink : 2Flowbit (period/offset) : 32768/32768Burst Size : 1024 bytesBandwidth : 133920 KbpsChannel : 0Packet Descriptor Base : 0x00000100ML Index : 0Length/Average/Alloc : 0/0/32Enqueues (packets/octets) : 293352/9280610Dequeues (packets/octets) : 293352/9280610Drops (tail/random/max_threshold) : 0/0/0Drops (no_pkt_handle/buffer_low) : 0/0WRED (weight/avg_smaller) : 0/0WRED (next qid/drop factor) : 0/0WRED (min_threshold/max_threshold/scale/slope):precedence 0 : 0/0/0/0precedence 1 : 0/0/0/0precedence 2 : 0/0/0/0precedence 3 : 0/0/0/0...Displaying Drop Statistics
The show pxf cpu statistics drop command provides information about dropped packets and ICMP packets. The following example output indicates the count of the icmp_unrch_interval counter before sending the 100 packets. Notice that the count is zero.
Router# show pxf cpu statistics dropFP drop statisticspackets bytesgeneric 0 0mpls_no_eos 0 0fib_zero_dest 0 0fib_drop_null 0 0fib_icmp_no_adj 0 0fib_icmp_bcast_dst 0 0mfib_ttl_0 0 0mfib_disabled 0 0mfib_rpf_failed 0 0mfib_null_oif 0 0tfib_rp_flag 0 0tfib_eos_violation 0 0tfib_nonip_expose 0 0tfib_label_invalid 0 0tfib_path_unknown 0 0tfib_nonip_ttl_exp 0 0icmp_unrch_interval 0 0 /*no ICMP packets created*/icmp_on_icmp 0 0icmp_bad_hdr 0 0icmp_multicast 0 0icmp_frag 0 0macr_bad_tag_num 0 0...The following example output indicates the count of the icmp_unrch_interval counter after sending the 100 packets. Notice that the icmp_unrch_interval count now indicates 100 due to the dropped packets.
Router# show pxf cpu statistics dropFP drop statisticspackets bytesgeneric 0 0mpls_no_eos 0 0fib_zero_dest 0 0fib_drop_null 0 0fib_icmp_no_adj 0 0fib_icmp_bcast_dst 0 0mfib_ttl_0 0 0mfib_disabled 0 0mfib_rpf_failed 0 0mfib_null_oif 0 0tfib_rp_flag 0 0tfib_eos_violation 0 0tfib_nonip_expose 0 0tfib_label_invalid 0 0tfib_path_unknown 0 0tfib_nonip_ttl_exp 0 0icmp_unrch_interval 100 12276 /*incremented by 100*/icmp_on_icmp 0 0icmp_bad_hdr 0 0icmp_multicast 0 0icmp_frag 0 0macr_bad_tag_num 0 0...Displaying PXF Traffic Loads
The show pxf cpu context command provides the current and historical loads on the PXF. The following example shows how busy the PXF forwarding process (FP) is with the current traffic load. The FP context statistics section displays the number of contexts of each type that have entered the PXF engine since it was last reloaded. If counters are idle, the PXF pipeline is hung.
Router# show pxf cpu contextFP context statistics count rate (since last time command was run)--------------------- ------------- ----------feed_back 168635 0new_work_from_lc 7474477 13new_work_from_rp 964679 1new_work_from_replay 0 0null_context 3797097495884 6312156----------6312170FP average context/sec 1min 5min 60min--------------------- ---------- ---------- ----------feed_back 0 0 0 cpsnew_work_from_lc 8 8 8 cpsnew_work 1 1 1 cpsnew_work_from_replay 0 0 0 cpsnull_context 6312260 6312261 6312250 cps--------------------- ---------- ---------- ----------Total 6312270 6312271 6312260 cpsFP context utilization 1min 5min 60min--------------------- ---------- ---------- ----------Actual 0 % 0 % 0 %Theoretical 0 % 0 % 0 %Maximum 98 % 98 % 98 %Displaying Feedback Counts
The show pxf cpu feedback command provides the total number of feedbacks through the PXF by all packets.
Router# show pxf cpu feedbackLoad for five secs: 5%/0%; one minute: 6%; five minutes: 2%Time source is hardware calendar, *21:13:02.615 UTC Tue Nov 29 2005FP column 0 feedback countsGlobal packet handle retry counter = 0Name Current Difference (since last show)--------------------- ---------- ----------bypass = 0 0schedule retry = 0 0WRED sample = 0 0MLPPP linkq update = 0 0IP frag = 0 0ICMP = 0 0layer2 divert = 0 0tunnel lookup = 0 0tunnel RX = 0 0tunnel TX = 0 0output qos = 0 0tag not ip = 0 0netflow accumulate = 0 0netflow age = 0 0netflow swap = 0 0...Feature Information for Installing a PRE3
Table 8 lists the release history for this feature.
Not all commands may be available in your Cisco IOS software release. For release information about a specific command, see the command reference documentation.
Cisco IOS software images are specific to a Cisco IOS software release, a feature set, and a platform. Use Cisco Feature Navigator to find information about platform support and Cisco IOS software image support. Access Cisco Feature Navigator at http://www.cisco.com/go/fn. You must have an account on Cisco.com. If you do not have an account or have forgotten your username or password, click Cancel at the login dialog box and follow the instructions that appear.
Note
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. This section explains the product documentation resources that Cisco offers.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
The Product Documentation DVD is a library of technical product documentation on a portable medium. The DVD enables you to access installation, configuration, and command guides for Cisco hardware and software products. With the DVD, you have access to the HTML documentation and some of the PDF files found on the Cisco website at this URL:
http://www.cisco.com/univercd/home/home.htm
The Product Documentation DVD is created and released regularly. DVDs are available singly or by subscription. Registered Cisco.com users can order a Product Documentation DVD (product number DOC-DOCDVD= or DOC-DOCDVD=SUB) from Cisco Marketplace at the Product Documentation Store at this URL:
http://www.cisco.com/go/marketplace/docstore
Ordering Documentation
You must be a registered Cisco.com user to access Cisco Marketplace. Registered users may order Cisco documentation at the Product Documentation Store at this URL:
http://www.cisco.com/go/marketplace/docstore
If you do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Documentation Feedback
You can provide feedback about Cisco technical documentation on the Cisco Support site area by entering your comments in the feedback form available in every online document.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you will find information about how to do the following:
•
•
•
A current list of security advisories, security notices, and security responses for Cisco products is available at this URL:
To see security advisories, security notices, and security responses as they are updated in real time, you can subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html
Reporting Security Problems in Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you have identified a vulnerability in a Cisco product, contact PSIRT:
•
An emergency is either a condition in which a system is under active attack or a condition for which a severe and urgent security vulnerability should be reported. All other conditions are considered nonemergencies.
•
In an emergency, you can also reach PSIRT by telephone:
•
•
Tip
Never use a revoked encryption key or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
The link on this page has the current PGP key ID in use.
If you do not have or use PGP, contact PSIRT to find other means of encrypting the data before sending any sensitive material.
Product Alerts and Field Notices
Modifications to or updates about Cisco products are announced in Cisco Product Alerts and Cisco Field Notices. You can receive these announcements by using the Product Alert Tool on Cisco.com. This tool enables you to create a profile and choose those products for which you want to receive information.
To access the Product Alert Tool, you must be a registered Cisco.com user. Registered users can access the tool at this URL:
http://tools.cisco.com/Support/PAT/do/ViewMyProfiles.do?local=en
To register as a Cisco.com user, go to this URL:
http://tools.cisco.com/RPF/register/register.do
Obtaining Technical Assistance
Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco Support website on Cisco.com features extensive online support resources. In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not have a valid Cisco service contract, contact your reseller.
Cisco Support Website
The Cisco Support website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day at this URL:
http://www.cisco.com/en/US/support/index.html
Access to all tools on the Cisco Support website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Note
Tip
If you suspect that the browser is not refreshing a web page, force the browser to update the web page by holding down the Ctrl key while pressing F5.
To find technical information, narrow your search to look in technical documentation, not the entire Cisco.com website. After using the Search box on the Cisco.com home page, click the Advanced Search link next to the Search box on the resulting page and then click the Technical Support & Documentation radio button.
To provide feedback about the Cisco.com website or a particular technical document, click Contacts & Feedback at the top of any Cisco.com web page.
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest
For S1 or S2 service requests, or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
To open a service request by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411
Australia: 1 800 805 227
EMEA: +32 2 704 55 55
USA: 1 800 553 2447For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.
Severity 1 (S1)—An existing network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operations are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of the network is impaired while most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
