From: Marvin Greenlee (marvingreenlee@yahoo.com)
Date: Wed May 31 2006 - 20:44:45 ART
I've seen some strange things when doing "match not"
for an ACL on a Frame interface. I don't remember if
it was the keepalive or LMI that it messed up, but
I've seen it take interfaces down.
--- Petr Lapukhov <petrsoft@gmail.com> wrote:
> Dave, this is strange :)
>
> just labbed your config:
>
> --------------
>
> access-list 100 permit icmp any any
>
> class-map match-all NO_VOICE
> match not access-group 100
>
> policy-map FRAGMENT
> class NO_VOICE
>
> map-class frame-relay FRAG
> service-policy output FRAGMENT
> frame-relay fragment 40
>
> interface Serial0/1
> description == Frame-Relay
> ip address 172.16.13.1 255.255.255.0
> encapsulation frame-relay
> frame-relay class FRAG
> frame-relay traffic-shaping
> frame-relay map ip 172.16.13.3 103 broadcast
> no frame-relay inverse-arp
>
> -----------
>
> now, some show outputs:
>
> R1#show policy-map interface serial 0/1 dlci 103
> Serial0/1: DLCI 103 -
>
> Service-policy output: FRAGMENT
>
> Class-map: NO_VOICE (match-all)
> 168 packets, 13525 bytes
> 5 minute offered rate 0 bps
> Match: not access-group 100
>
> Class-map: class-default (match-any)
> 13 packets, 1332 bytes
> 5 minute offered rate 0 bps, drop rate 0 bps
> Match: any
>
> R1#show interfaces serial 0/1 | inc Output queue
> Output queue: high size/max/dropped 0/256/0
> Output queue: 0/128 (size/max)
>
> R1#show frame-relay fragment | inc interf|103
> interface dlci frag-type size
> in-frag out-frag
> dropped-frag
> Se0/1 103 end-to-end 40 0
> 345 0
>
> R1#debug frame-relay fragment interface serial 0/1
> 103
> This may severely impact network performance.
> You are advised to enable 'no logging console
> debug'. Continue?[confirm]
> Frame Relay fragment/packet debugging is on
> Displaying fragments/packets on interface Serial0/1
> dlci 103 only
>
> R1#ping 172.16.13.3 size ?
> <36-18024> Datagram size
>
> R1#ping 172.16.13.3 size 36
>
> Type escape sequence to abort.
> Sending 5, 36-byte ICMP Echos to 10.10.13.3, timeout
> is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip
> min/avg/max = 12/14/16 ms
>
> R1#ping 172.16.13.3 size 100
>
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 10.10.13.3,
> timeout is 2 seconds:
>
> *May 17 10:42:52.670: Serial0/1(o): dlci 103,
> tx-seq-num 458, B bit set,
> frag_hdr 03 B1 82 CA
> *May 17 10:42:52.670: Serial0/1(o): dlci 103,
> tx-seq-num 459, no bit set,
> frag_hdr 03 B1 02 CB
> *May 17 10:42:52.670: Serial0/1(o): dlci 103,
> tx-seq-num 460, E bit set,
> frag_hdr 03 B1 42 CC .
> *May 17 10:42:54.670: Serial0/1(o): dlci 103,
> tx-seq-num 461, B bit set,
> frag_hdr 03 B1 82 CD
> *May 17 10:42:54.670: Serial0/1(o): dlci 103,
> tx-seq-num 462, no bit set,
> frag_hdr 03 B1 02 CE
> *May 17 10:42:54.670: Serial0/1(o): dlci 103,
> tx-seq-num 463, E bit set,
> frag_hdr 03 B1 42 CF .
> *May 17 10:42:56.670: Serial0/1(o): dlci 103,
> tx-seq-num 464, B bit set,
> frag_hdr 03 B1 82 D0
> *May 17 10:42:56.670: Serial0/1(o): dlci 103,
> tx-seq-num 465, no bit set,
> frag_hdr 03 B1 02 D1
> *May 17 10:42:56.670: Serial0/1(o): dlci 103,
> tx-seq-num 466, E bit set,
> frag_hdr 03 B1 42 D2 .
> *May 17 10:42:58.670: Serial0/1(o): dlci 103,
> tx-seq-num 467, B bit set,
> frag_hdr 03 B1 82 D3
> *May 17 10:42:58.670: Serial0/1(o): dlci 103,
> tx-seq-num 468, no bit set,
> frag_hdr 03 B1 02 D4
> *May 17 10:42:58.670: Serial0/1(o): dlci 103,
> tx-seq-num 469, E bit set,
> frag_hdr 03 B1 42 D5 .
> *May 17 10:43:00.670: Serial0/1(o): dlci 103,
> tx-seq-num 470, B bit set,
> frag_hdr 03 B1 82 D6
> *May 17 10:43:00.670: Serial0/1(o): dlci 103,
> tx-seq-num 471, no bit set,
> frag_hdr 03 B1 02 D7
> *May 17 10:43:00.670: Serial0/1(o): dlci 103,
> tx-seq-num 472, E bit set,
> frag_hdr 03 B1 42 D8 .
> Success rate is 0 percent (0/5)
>
> Petr
>
>
This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:23 ART