No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

There is Much Alarm When NE5000E Enables Weak Policy

Publication Date:  2012-07-27 Views:  40 Downloads:  0
Issue Description
NE5000E version: Version 5.10 (CN), RELEASE 0044, it connects S8505 and double-uplinks to two CRS-1 of C corporation. Enable OSPF route and it is in area0.
After configuring weak policy on NE5000E, there is much alarm on the port.
Configuration:
acl number 3105                                                                 
 rule 5 permit ip source 218.30.160.24 0.0.0.7 destination 130.237.222.2 0      
 rule 10 permit ip source 218.30.160.24 0.0.0.7 destination 213.238.217.1 0     
 rule 15 permit ip source 222.90.73.48 0.0.0.15 destination 202.112.243.0 0.0.0.
255                                                                             
 rule 20 permit ip source 222.90.73.48 0.0.0.15 destination 202.115.243.0 0.0.0.
255                                                                             
 rule 25 permit ip source 222.90.73.48 0.0.0.15 destination 222.21.120.0 0.0.0.3
1                                                                               
 rule 30 permit ip source 222.90.73.48 0.0.0.15 destination 10.40.122.0 0.0.0.25
5                                                                               
 rule 35 permit ip source 222.90.73.48 0.0.0.15 destination 202.205.179.0 0.0.0.
31                                                                              
 rule 40 permit ip source 222.91.98.168 0.0.0.7 destination 218.28.41.0 0.0.0.25
5                                                                               
 rule 45 permit ip source 222.91.98.168 0.0.0.7 destination 211.144.20.0 0.0.0.255                                                                              
#                                                                                       
traffic classifier to-cnc operator and                                          
 if-match acl 3105                                                              
#                                                                                   
traffic behavior to-cnc                                                         
 redirect ip-nexthop 222.91.155.254 
#
interface GigabitEthernet2/0/1                                                  
 ip address 219.145.65.13 255.255.255.252                                       
 traffic-policy 111 inbound                                                     
 description "To-longshou-S8505-GE2/1/3-link2"                                  
Alarm Information
May 18 13:14:19 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:14:29 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:14:40 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:14:50 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:15:01 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:15:11 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:15:22 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:15:32 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:15:43 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:15:53 2006 LongShou_NE5000E PES/4/Log_QoS:Slot=2;                    
[9930]Opcode(0) must be PE_RE(4)                                                
%May 18 13:16:04 2006 LongShou_NE5000E 
Handling Process
Designate interface parameter of next-hop of weak policy and the problem is solved.
Root Cause
Enabling weak policy on NE5000E is problematic:
traffic behavior to-cnc                                                         
 redirect ip-nexthop 222.91.155.254 
It is required to enable strong policy and designate the port:
traffic behavior to-cnc                                                         
 redirect ip-nexthop 222.91.155.254 interface Pos1/0/0
Suggestions
Null

END