Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread CiscoNSP List
Thanks James - If the queue-limit percent 100 alleviates the issue for the one service instance Ive applied it to, I might look at implementing your solution, if you have had success with it eliminating tail drops. Side note - Are "most" using this type of solution on the ME3600's...we've only

Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread CiscoNSP List
Cheers Adam - I applied what Spyros suggested, and will continue to monitor. From: Adam Vitkovsky Sent: Wednesday, 16 September 2015 8:14 PM To: CiscoNSP List; James Bensley; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Tail drops on ME3600 with shaping

Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread CiscoNSP List
Thanks Spyros - I have applied what you have suggested...no tail drops so far...will keep monitoring. From: Spyros Kakaroukas Sent: Wednesday, 16 September 2015 8:12 PM To: 'CiscoNSP List'; James Bensley; cisco-nsp@puck.nether.net Subject: RE: [c-nsp] Tai

Re: [c-nsp] SFP-10G-LRM in Nexus 5000

2015-09-16 Thread Matthieu Michaud
Hello, Some LRM run on both SM and MM including Cisco's. At $JOB we do use 10G-LRM a lot. It's the predominent transciever because estate standards says "SM EVERYWHERE !@#!", we buy only Cisco brands and LR is 4 times the price of an LRM. It was removed from Nexus compatibility matrix in recent NX

[c-nsp] Cisco Security Advisory: Cisco TelePresence Server Denial of Service Vulnerability

2015-09-16 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Cisco Security Advisory: Cisco TelePresence Server Denial of Service Vulnerability Advisory ID: cisco-sa-20150916-tps Revision 1.0 For Public Release 2015 September 16 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability

2015-09-16 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Cisco Security Advisory: Cisco Prime Collaboration Provisioning Web Framework Access Controls Bypass Vulnerability Advisory ID: cisco-sa-20150916-pcp Revision 1.0 For Public Release 2015 September 16 16:00 UTC (GMT

[c-nsp] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Collaboration Assurance

2015-09-16 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Collaboration Assurance Advisory ID: cisco-sa-20150916-pca Revision 1.0 For Public Release 2015 September 16 16:00 UTC (GMT

Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread James Bensley
On 16 September 2015 at 10:10, CiscoNSP List wrote: > > Thanks very much James - Very helpful! > > > So there's no singular way I can test this (queue-limit percent 100) on a > single service instance under an Interface? i.e. Id have to re-do the entire > qos policy for the Interface and associa

Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread Adam Vitkovsky
Hi The following worked for me (you can be service-instance specific) policy-map customer1-parrent-out ! class class-default shape average 10 mbps service-policy customer1-child-out policy-map customer1-child-out ! class voip-edge police cit 128000 conform-action transmit exceed-

Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread Spyros Kakaroukas
Hey, You can do that as well. You just need a dummy class. So, something like the following should work: class-map match-all DUMMY match qos-group 7 ! policy-map test-100m class DUMMY class class-default shape average 1 queue-limit percent 100 ! interface blah service instance bl

Re: [c-nsp] Cisco ME3600X MPLS OSPF balanced LSP, non LSP drop packets

2015-09-16 Thread Adam Vitkovsky
Where did you enable MPLS please, only in the core or on the edges as well? In other words are some ingress PEs and egress PEs running MPLS VPNs or just pure IP? If only subset of core routers are running MPLS (allocates labels for NHs resulting in single label in the stack) then this should wo

Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread CiscoNSP List
Thanks very much James - Very helpful! So there's no singular way I can test this (queue-limit percent 100) on a single service instance under an Interface? i.e. Id have to re-do the entire qos policy for the Interface and associated service instances? In our current situation, we have ~30 s

Re: [c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread James Bensley
Make sure you are on a decent recent image (worked fine for me from 15.3(3)S3 up to 15.3(3)S6 (haven't ventured into 15.4 or 15.5) and pretty much "queue-limit percent 100" everywhere is the way forward with these boxes. I made some notes on this when I was having the same problem here, I'm a bit

Re: [c-nsp] xDSL LLU Provider - L2TP from BRAS to LNS & FreeRADIUS

2015-09-16 Thread James Bensley
On 16 September 2015 at 01:34, Neil Morris wrote: > Hi Folks, > > Looking some advice where possible. Been going round in circles somewhat > with the provider. When returning the initial RADIUS auth, tunnel ID & > tunnel IP attribs to the provider, the next step is for the tunnel to be > landed

[c-nsp] Tail drops on ME3600 with shaping policy

2015-09-16 Thread CiscoNSP List
Hi Everyone, We've run into a problem with tail drops on a couple of service on ME3600'sour "usual" shaping policy (For example 10Mb) would be: policy-map CUSTA_10M class class-default shape average 980 int foo service instance 1065 ethernet description CUST_A