Re: OER / PfR Learn List driving me nuts !!

From: Andy Reid <ccie_at_reid.it>
Date: Mon, 05 Apr 2010 02:14:36 +0800

I have created a configuration that appears to work - by creating an
oer-map referencing the MGMT application "refname". I then fed the
oer-map back into the MC configuration using the policy-rules statement.
The Telnet traffic is now being captured correctly:

Rack1R6# show run | se oer
oer master
 policy-rules MANAGEMENT
 logging
 !
 border 150.1.4.4 key-chain OER
  interface FastEthernet0/0 external
  interface FastEthernet0/1 internal
  interface Serial0/2/0 external
 !
 border 150.1.6.6 key-chain OER
  interface FastEthernet0/0.67 external
  interface FastEthernet0/0.146 internal
  interface Serial0/1/0 external
 !
 learn
  throughput
  delay
  periodic-interval 0
  monitor-period 1
  list seq 1 refname MGMT
   traffic-class application nbar telnet
   aggregation-type prefix-length 32
   delay
 periodic 90
 !
oer border
 local Loopback0
 master 150.1.6.6 key-chain OER
oer-map MANAGEMENT 10
 match oer learn list MGMT

*Apr 4 17:39:24.010: %OER_MC-5-NOTICE: Discovered Exit for Appl Prefix
150.1.8.8/32 telnet, BR 150.1.4.4, i/f Se0/2/0
Rack1R6#show oer master traffic-class learned list MGMT
OER Prefix Statistics:
 Pas - Passive, Act - Active, S - Short term, L - Long term, Dly - Delay
(ms),
 P - Percentage below threshold, Jit - Jitter (ms),
 MOS - Mean Opinion Score
 Los - Packet Loss (packets-per-million), Un - Unreachable
(flows-per-million),
 E - Egress, I - Ingress, Bw - Bandwidth (kbps), N - Not applicable
 U - unknown, * - uncontrolled, + - control more specific, @ - active
probe all
 # - Prefix monitor mode is Special, & - Blackholed Prefix
 % - Force Next-Hop, ^ - Prefix is denied

DstPrefix Appl_ID Dscp Prot SrcPort DstPort
SrcPrefix
           Flags State Time CurrBR CurrI/F
Protocol
         PasSDly PasLDly PasSUn PasLUn PasSLos PasLLos
EBw IBw
         ActSDly ActLDly ActSUn ActLUn ActSJit ActPMOS ActSLos
ActLLos
--------------------------------------------------------------------------------
150.1.2.2/32 telnet defa N N N
0.0.0.0/0
                         INPOLICY* @70 150.1.4.4
Se0/2/0 U
              48 48 0 0 19073 19073
1 6
              59 59 0 0 N N
N N

150.1.8.8/32 telnet defa N N N
0.0.0.0/0
                          DEFAULT* @44 150.1.4.4
Se0/2/0 U
               U U 0 0 0 0
1 0
               U U 0 0 N N
N N

Rack1R6#show oer master
OER state: ENABLED and ACTIVE
  Conn Status: SUCCESS, PORT: 3949
  Version: 2.2
  Number of Border routers: 2
  Number of Exits: 4
  Number of monitored prefixes: 3 (max 5000)
  Max prefixes: total 5000 learn 2500
  Prefix count: total 3, learn 2, cfg 0
  PBR Requirements met
  Nbar Status: Active

Border Status UP/DOWN AuthFail Version
150.1.6.6 ACTIVE UP 00:03:22 0 2.2
150.1.4.4 ACTIVE UP 00:03:22 0 2.2

Global Settings:
  max-range-utilization percent 20 recv 0
  mode route metric bgp local-pref 5000
  mode route metric static tag 5000
  trace probe delay 1000
  logging
  exit holddown time 60 secs, time remaining 0

Default Policy Settings:
  backoff 300 3000 300
  delay relative 50
  holddown 300
  periodic 90
  probe frequency 56
  number of jitter probe packets 100
  mode route observe
  mode monitor both
  mode select-exit good
  loss relative 10
  jitter threshold 20
  mos threshold 3.60 percent 30
  unreachable relative 50
  resolve delay priority 11 variance 20
  resolve range priority 12 variance 0
  resolve utilization priority 13 variance 20

Learn Settings:
  current state : STARTED
  time remaining in current state : 67 seconds
  throughput
  delay
  no inside bgp
  no protocol
  monitor-period 1
  periodic-interval 0
  aggregation-type prefix-length 24
  prefixes 100
  expire after time 720

  Learn-List seq 1 refname MGMT
    Configuration:
     Traffic-Class Application: telnet
     Aggregation-type: prefix-length 32
     Learn type: delay
     Session count: 50 Max count: 100
     Policies assigned: 10
    Stats:
     Traffic-Class Count: 1

regards Andy

Blogs and organic groups at http://www.ccie.net
Received on Mon Apr 05 2010 - 02:14:36 ART

This archive was generated by hypermail 2.2.0 : Sat May 01 2010 - 09:49:56 ART