On 13.03.2013 12:18, Tóth András wrote: Hey,
> It could be CoPP related as well if that's dropping packets arriving to > the control-plane. If you have upgraded the N7k from an older release > (4.x or 5.1) you might not have all the latest and necessary CoPP rules > in the policy-map and class-maps matching MPLS. These were added in > 5.2(1) but during an ISSU or classic upgrade the CoPP policies are not > updated automatically. > > One example is the "match protocol mpls" line in > the copp-system-p-class-l2-default class. > > "5.2(1) - Updated the default class maps with support for MPLS LDP, MPLS > OAM, MPLS RSVP, DHCP relay, and OTV-AS." Please see the following link > for details and default copp templates. > > http://www.cisco.com/en/US/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6.x_chapter_011001.html > > You can re-apply the latest factory default CoPP profile with the "copp > profile" global configuration command and choose between strict, > moderate and lenient profiles. Also a good guess, but it's a fresh installation of 6.1(2) and I've verified that there is indeed a CoPP entry for "match protocol mpls". The class is not dropping a lot of traffic. Thanks and keep going :-) Best Regards, Bernhard _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
