Re: [j-nsp] SCB-E
What workaround is available? /Per -Oprindelig meddelelse- Fra: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] På vegne af Frank Blankman Sendt: 13. februar 2012 18:02 Til: David Temkin Cc: juniper-nsp@puck.nether.net Emne: Re: [j-nsp] SCB-E We've seen PR718485 get hit on a 960 with SCB-E some 16x10G MPC and 11.4R1, though no recurring hits after applying the workaround. Running a config close to Dave's. Frank On Feb 13, 2012, at 3:26 PM, David Temkin wrote: Not horrible, but similar results in a box with dual SCB-E and 2 16x10G MPCs: $ time snmpbulkwalk -v2c -c # x.x.x.x ifHCInOctets /dev/null real0m6.262s user0m0.028s sys0m0.018s So, it's usable - and I haven't hit any other showstopper bugs thus far - but I'm running purely IP (two full tables + other associated peers). -Dave On 2/8/12 6:10 AM, david@orange.com wrote: Hi, Same results on my side... Just a precision to be sure that there is no mis-understanding : it's not triggered by SCB-E, it is a software issue... But currently we only have this release to play with SCB-E :-) Regards David David Roy IP/MPLS Support engineer - Orange France Ph. +33 2 99 87 64 72 - Mob. +33 6 85 52 22 13 david@orange.com JNCIE-MT/SP #703 JNCIP-ENT -Message d'origine- De : juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] De la part de Daniel Roesen Envoyé : mercredi 8 février 2012 07:44 À : juniper-nsp@puck.nether.net Objet : Re: [j-nsp] SCB-E On Wed, Feb 08, 2012 at 01:23:11AM +, OBrien, Will wrote: Anyone running the SCB-E? I've got a stack of them with a set of fresh MX480s ready to roll out. I'm curious what code your running. Given that there is only one public JUNOS release which supports SCB-E, there aren't many options: 11.4R1 - and that one has unusable SNMP due to new PFE statistics request delays introduced (feature, not bug of course!): foo@lab-MX960 show snmp mib walk ifHCOutOctets | count Count: 413 lines $ time snmpbulkwalk -v2c -c removed x.x.x.x ifHCInOctets /dev/null Timeout: No Response from x.x.x.x real0m26.380s user0m1.647s sys 0m0.133s PR/731833 - fix supposed to come in 11.4R3 slated for May. So as far as things stand, SCB-E not deployable before mid 2012 earliest if (and that's a big if when looking at 10.4 experience) 11.4R3 is going to be usable. Ah, and 11.4R1 floods your log with messages like: mcsn[91713]: %DAEMON-6: krt_decode_nexthop: Try freeing: nh-handle: 0x0 nh-index: 1049083 fwdtype: 3 No idea wether that's service affecting - we haven't observed any impact due to that yet. Best regards, Daniel -- CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SCB-E
PR718485: Workaround: Disable the then log or then syslog in firewall configuration. Am Mittwoch, den 15.02.2012, 12:28 +0100 schrieb Per Randrup Nielsen: PR718485 signature.asc Description: This is a digitally signed message part ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SCB-E
Not horrible, but similar results in a box with dual SCB-E and 2 16x10G MPCs: $ time snmpbulkwalk -v2c -c # x.x.x.x ifHCInOctets /dev/null real0m6.262s user0m0.028s sys0m0.018s So, it's usable - and I haven't hit any other showstopper bugs thus far - but I'm running purely IP (two full tables + other associated peers). -Dave On 2/8/12 6:10 AM, david@orange.com wrote: Hi, Same results on my side... Just a precision to be sure that there is no mis-understanding : it's not triggered by SCB-E, it is a software issue... But currently we only have this release to play with SCB-E :-) Regards David David Roy IP/MPLS Support engineer - Orange France Ph. +33 2 99 87 64 72 - Mob. +33 6 85 52 22 13 david@orange.com JNCIE-MT/SP #703 JNCIP-ENT -Message d'origine- De : juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] De la part de Daniel Roesen Envoyé : mercredi 8 février 2012 07:44 À : juniper-nsp@puck.nether.net Objet : Re: [j-nsp] SCB-E On Wed, Feb 08, 2012 at 01:23:11AM +, OBrien, Will wrote: Anyone running the SCB-E? I've got a stack of them with a set of fresh MX480s ready to roll out. I'm curious what code your running. Given that there is only one public JUNOS release which supports SCB-E, there aren't many options: 11.4R1 - and that one has unusable SNMP due to new PFE statistics request delays introduced (feature, not bug of course!): foo@lab-MX960 show snmp mib walk ifHCOutOctets | count Count: 413 lines $ time snmpbulkwalk -v2c -c removed x.x.x.x ifHCInOctets /dev/null Timeout: No Response from x.x.x.x real0m26.380s user0m1.647s sys 0m0.133s PR/731833 - fix supposed to come in 11.4R3 slated for May. So as far as things stand, SCB-E not deployable before mid 2012 earliest if (and that's a big if when looking at 10.4 experience) 11.4R3 is going to be usable. Ah, and 11.4R1 floods your log with messages like: mcsn[91713]: %DAEMON-6: krt_decode_nexthop: Try freeing: nh-handle: 0x0 nh-index: 1049083 fwdtype: 3 No idea wether that's service affecting - we haven't observed any impact due to that yet. Best regards, Daniel -- CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorization. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, France Telecom - Orange shall not be liable if this message was modified, changed or falsified. Thank you. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SCB-E
We've seen PR718485 get hit on a 960 with SCB-E some 16x10G MPC and 11.4R1, though no recurring hits after applying the workaround. Running a config close to Dave's. Frank On Feb 13, 2012, at 3:26 PM, David Temkin wrote: Not horrible, but similar results in a box with dual SCB-E and 2 16x10G MPCs: $ time snmpbulkwalk -v2c -c # x.x.x.x ifHCInOctets /dev/null real0m6.262s user0m0.028s sys0m0.018s So, it's usable - and I haven't hit any other showstopper bugs thus far - but I'm running purely IP (two full tables + other associated peers). -Dave On 2/8/12 6:10 AM, david@orange.com wrote: Hi, Same results on my side... Just a precision to be sure that there is no mis-understanding : it's not triggered by SCB-E, it is a software issue... But currently we only have this release to play with SCB-E :-) Regards David David Roy IP/MPLS Support engineer - Orange France Ph. +33 2 99 87 64 72 - Mob. +33 6 85 52 22 13 david@orange.com JNCIE-MT/SP #703 JNCIP-ENT -Message d'origine- De : juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] De la part de Daniel Roesen Envoyé : mercredi 8 février 2012 07:44 À : juniper-nsp@puck.nether.net Objet : Re: [j-nsp] SCB-E On Wed, Feb 08, 2012 at 01:23:11AM +, OBrien, Will wrote: Anyone running the SCB-E? I've got a stack of them with a set of fresh MX480s ready to roll out. I'm curious what code your running. Given that there is only one public JUNOS release which supports SCB-E, there aren't many options: 11.4R1 - and that one has unusable SNMP due to new PFE statistics request delays introduced (feature, not bug of course!): foo@lab-MX960 show snmp mib walk ifHCOutOctets | count Count: 413 lines $ time snmpbulkwalk -v2c -c removed x.x.x.x ifHCInOctets /dev/null Timeout: No Response from x.x.x.x real0m26.380s user0m1.647s sys 0m0.133s PR/731833 - fix supposed to come in 11.4R3 slated for May. So as far as things stand, SCB-E not deployable before mid 2012 earliest if (and that's a big if when looking at 10.4 experience) 11.4R3 is going to be usable. Ah, and 11.4R1 floods your log with messages like: mcsn[91713]: %DAEMON-6: krt_decode_nexthop: Try freeing: nh-handle: 0x0 nh-index: 1049083 fwdtype: 3 No idea wether that's service affecting - we haven't observed any impact due to that yet. Best regards, Daniel -- CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SCB-E
Hi, Same results on my side... Just a precision to be sure that there is no mis-understanding : it's not triggered by SCB-E, it is a software issue... But currently we only have this release to play with SCB-E :-) Regards David David Roy IP/MPLS Support engineer - Orange France Ph. +33 2 99 87 64 72 - Mob. +33 6 85 52 22 13 david@orange.com JNCIE-MT/SP #703 JNCIP-ENT -Message d'origine- De : juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] De la part de Daniel Roesen Envoyé : mercredi 8 février 2012 07:44 À : juniper-nsp@puck.nether.net Objet : Re: [j-nsp] SCB-E On Wed, Feb 08, 2012 at 01:23:11AM +, OBrien, Will wrote: Anyone running the SCB-E? I've got a stack of them with a set of fresh MX480s ready to roll out. I'm curious what code your running. Given that there is only one public JUNOS release which supports SCB-E, there aren't many options: 11.4R1 - and that one has unusable SNMP due to new PFE statistics request delays introduced (feature, not bug of course!): foo@lab-MX960 show snmp mib walk ifHCOutOctets | count Count: 413 lines $ time snmpbulkwalk -v2c -c removed x.x.x.x ifHCInOctets /dev/null Timeout: No Response from x.x.x.x real0m26.380s user0m1.647s sys 0m0.133s PR/731833 - fix supposed to come in 11.4R3 slated for May. So as far as things stand, SCB-E not deployable before mid 2012 earliest if (and that's a big if when looking at 10.4 experience) 11.4R3 is going to be usable. Ah, and 11.4R1 floods your log with messages like: mcsn[91713]: %DAEMON-6: krt_decode_nexthop: Try freeing: nh-handle: 0x0 nh-index: 1049083 fwdtype: 3 No idea wether that's service affecting - we haven't observed any impact due to that yet. Best regards, Daniel -- CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp _ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, France Telecom - Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorization. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, France Telecom - Orange shall not be liable if this message was modified, changed or falsified. Thank you. ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SCB-E
On Wed, Feb 08, 2012 at 07:44:10AM +0100, Daniel Roesen wrote: So as far as things stand, SCB-E not deployable before mid 2012 earliest if (and that's a big if when looking at 10.4 experience) 11.4R3 is going to be usable. Given the state of the code and the lack of faith/experience in 11.4 (i.e. I don't know any sane companies with an interesting network running 11.4 right now, and thus I have zero faith that it has been well tested), maybe the correct answer is to backport some kind of SCB-E support to the 10.4 train. Then again, considering that they are STILL introducing new showstopper bugs in a bugfix-only code train even at 10.4R8, maybe this is a bad idea. I really don't know what else to say about this issue, other than: *SIGH* -- Richard A Steenbergen r...@e-gerbil.net http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SCB-E
On Wed, Feb 08, 2012 at 01:23:11AM +, OBrien, Will wrote: Anyone running the SCB-E? I've got a stack of them with a set of fresh MX480s ready to roll out. I'm curious what code your running. Given that there is only one public JUNOS release which supports SCB-E, there aren't many options: 11.4R1 - and that one has unusable SNMP due to new PFE statistics request delays introduced (feature, not bug of course!): foo@lab-MX960 show snmp mib walk ifHCOutOctets | count Count: 413 lines $ time snmpbulkwalk -v2c -c removed x.x.x.x ifHCInOctets /dev/null Timeout: No Response from x.x.x.x real0m26.380s user0m1.647s sys 0m0.133s PR/731833 - fix supposed to come in 11.4R3 slated for May. So as far as things stand, SCB-E not deployable before mid 2012 earliest if (and that's a big if when looking at 10.4 experience) 11.4R3 is going to be usable. Ah, and 11.4R1 floods your log with messages like: mcsn[91713]: %DAEMON-6: krt_decode_nexthop: Try freeing: nh-handle: 0x0 nh-index: 1049083 fwdtype: 3 No idea wether that's service affecting - we haven't observed any impact due to that yet. Best regards, Daniel -- CLUE-RIPE -- Jabber: d...@cluenet.de -- dr@IRCnet -- PGP: 0xA85C8AA0 ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
