OER / PfR monitoring in a semi-production network

From: Andy Reid <ccie_at_reid.it>
Date: Mon, 05 Apr 2010 14:48:55 +0800

Hi All,

I can't seem to get enough of OER and PfR at the moment and after
completing all my lab exercises I decided to deploy OER configuration on
a 1800 router connected to the Internet with a single connection to
monitor the traffic and get a feel for real traffic patterns.

Performance Routing is designed for multihoming, which requires a
minimum of two external interfaces. However, Performance Routing can be
configured to monitor application performance over a single interface by
creating a second dummy interface, which will not forward packets. Use a
Dialer interface for the second interface but do not attach any physical
interfaces to the Dialer. The Dialer interface needs an IP address
because Performance Routing checks that the interfaces are routable. The
IP address assigned to the Dialer does not need to be advertised. My
dummy interface is Dialer2.

Each learned list can be displayed individually with the command: "show
oer master traffic-class learned list NAME" or for all lists: "show oer
master learn list".

The following shows my configuration:

Router#show run | se oer
 policy-rules MONITOR
 logging
 !
 border 192.168.1.254 key-chain OER
  interface Dialer1 external
  interface Dialer2 external
  interface Vlan10 internal
 !
 learn
  throughput
  delay
  periodic-interval 0
  monitor-period 1
  aggregation-type prefix-length 32
  list seq 1 refname TELNET
   traffic-class application nbar telnet
   aggregation-type prefix-length 32
   delay
  list seq 2 refname SSH
   traffic-class application nbar ssh
   aggregation-type prefix-length 32
   throughput
  list seq 3 refname PING
   traffic-class application nbar icmp
   aggregation-type prefix-length 32
   throughput
  list seq 4 refname SKYPE
   traffic-class application nbar skype
   aggregation-type prefix-length 32
   throughput
  list seq 5 refname IMAP
   traffic-class application nbar imap
   aggregation-type prefix-length 32
   throughput
  list seq 6 refname TORRENT
   traffic-class application nbar bittorrent
   aggregation-type prefix-length 32
   throughput
  list seq 7 refname WEB
   traffic-class application nbar http
   aggregation-type prefix-length 32
   throughput
  list seq 8 refname SECURE-WEB
   traffic-class application nbar secure-http
   aggregation-type prefix-length 32
   throughput
 periodic 90
 !
oer border
 local Loopback0
 master 192.168.1.254 key-chain OER
oer-map MONITOR 10
 match oer learn list TELNET
oer-map MONITOR 20
 match oer learn list SSH
oer-map MONITOR 30
 match oer learn list PING
oer-map MONITOR 40
 match oer learn list SKYPE
oer-map MONITOR 50
 match oer learn list IMAP
oer-map MONITOR 60
 match oer learn list TORRENT
oer-map MONITOR 70
 match oer learn list WEB
oer-map MONITOR 80
 match oer learn list SECURE-WEB

Dialer1 REAL YES IPCP
up up
Dialer2 192.168.2.1 YES manual
up up
Loopback0 192.168.1.254 YES manual
up up

------------------------------------------------------

Routershow oer master
OER state: ENABLED and ACTIVE
  Conn Status: SUCCESS, PORT: 3949
  Version: 2.2
  Number of Border routers: 1
  Number of Exits: 2
  Number of monitored prefixes: 1401 (max 5000)
  Max prefixes: total 5000 learn 2500
  Prefix count: total 1401, learn 1341, cfg 0
  PBR Requirements met
  Nbar Status: Active

Border Status UP/DOWN AuthFail Version
192.168.1.254 ACTIVE UP 00:48:22 0 2.2

Global Settings:
  max-range-utilization percent 20 recv 0
  mode route metric bgp local-pref 5000
  mode route metric static tag 5000
  trace probe delay 1000
  logging
  exit holddown time 60 secs, time remaining 42

Default Policy Settings:
  backoff 300 3000 300
  delay relative 50
  holddown 300
  periodic 90
  probe frequency 56
  number of jitter probe packets 100
  mode route observe
  mode monitor both
  mode select-exit good
  loss relative 10
  jitter threshold 20
  mos threshold 3.60 percent 30
  unreachable relative 50
  resolve delay priority 11 variance 20
  resolve range priority 12 variance 0
  resolve utilization priority 13 variance 20

Learn Settings:
  current state : STARTED
  time remaining in current state : 100 seconds
  throughput
  delay
  no inside bgp
  no protocol
  monitor-period 1
  periodic-interval 0
  aggregation-type prefix-length 32
  prefixes 100
  expire after time 720

  Learn-List seq 1 refname TELNET
    Configuration:
     Traffic-Class Application: telnet
     Aggregation-type: prefix-length 32
     Learn type: delay
     Session count: 50 Max count: 100
     Policies assigned: 10
    Stats:
     Traffic-Class Count: 0
  Learn-List seq 2 refname SSH
    Configuration:
     Traffic-Class Application: ssh
     Aggregation-type: prefix-length 32
     Learn type: throughput
     Session count: 50 Max count: 100
     Policies assigned: 20
    Stats:
     Traffic-Class Count: 0
  Learn-List seq 3 refname PING
    Configuration:
     Traffic-Class Application: icmp
     Aggregation-type: prefix-length 32
     Learn type: throughput
     Session count: 50 Max count: 100
     Policies assigned: 30
    Stats:
     Traffic-Class Count: 2
  Learn-List seq 4 refname SKYPE
    Configuration:
     Traffic-Class Application: skype
     Aggregation-type: prefix-length 32
     Learn type: throughput
     Session count: 50 Max count: 100
     Policies assigned: 40
    Stats:
     Traffic-Class Count: 4
  Learn-List seq 5 refname IMAP
    Configuration:
     Traffic-Class Application: imap
     Aggregation-type: prefix-length 32
     Learn type: throughput
     Session count: 50 Max count: 100
     Policies assigned: 50
    Stats:
     Traffic-Class Count: 1
  Learn-List seq 6 refname TORRENT
    Configuration:
     Traffic-Class Application: bittorrent
     Aggregation-type: prefix-length 32
     Learn type: throughput
     Session count: 50 Max count: 100
     Policies assigned: 60
    Stats:
     Traffic-Class Count: 101
  Learn-List seq 7 refname WEB
    Configuration:
     Traffic-Class Application: http
     Aggregation-type: prefix-length 32
     Learn type: throughput
     Session count: 50 Max count: 100
     Policies assigned: 70
    Stats:
     Traffic-Class Count: 5
  Learn-List seq 8 refname SECURE-WEB
    Configuration:
     Traffic-Class Application: secure-http
     Aggregation-type: prefix-length 32
     Learn type: throughput
     Session count: 50 Max count: 100
     Policies assigned: 80
    Stats:
     Traffic-Class Count: 2

regards Andy

Blogs and organic groups at http://www.ccie.net
Received on Mon Apr 05 2010 - 14:48:55 ART

This archive was generated by hypermail 2.2.0 : Sat May 01 2010 - 09:49:56 ART