Junos OS

 View Only
last person joined: 2 days ago 

Ask questions and share experiences about Junos OS.
  • 1.  Juniper MX480 - PS Interface Not Working

    Posted 01-17-2018 16:08

    I am attempting to configure a 'ps' interface for psuedowire head-end termination.  I've enabled tunnel-services on the FPC/PIC and I've applied that as my "lt" anchor-point on the PS interface.  The "lt" interface is showing up.  However I am getting this in the logs:

     

    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 fpc1   ifd 222; PFE attach failed
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD hardware address configuration' (opcode 226) failed
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: RT_PFE: NH IPC op 1 (ADD NEXTHOP) failed, err 5 (Invalid) peer_class 0, peer_index 1 peer_type 17
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: RT_PFE: NH details: idx 2222 type 2 ifl 472
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: if_pfe: Error 9 (No IFL) on IF command 37 (Unknown)
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: if_pfe: Error 9 (No IFL) on IF command 31 (IFL maddr add)
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: if_pfe: Error 9 (No IFL) on IF command 34 (IFL config encap)
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: if_pfe: Error 9 (No IFL) on IF command 33 (IFL config flags)
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: if_pfe: Error 9 (No IFL) on IF command 201 (Unknown)
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: if_pfe: Error 9 (No IFL) on IF command 247 (Unknown)
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 /kernel: DFW_PFE: msg type 11 subtype 18 opcode 169 failed (err 5)
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:00  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD configuration' (opcode 11) failed
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD media configuration' (opcode 13) failed
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD ioctl' (opcode 10) failed
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD ioctl' (opcode 10) failed
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL add' (opcode 23) failed
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL media address add' (opcode 31) failed
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL encap configuration' (opcode 34) failed
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:01  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL flags configuration' (opcode 33) failed
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL snmp update' (opcode 201) failed
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1    ifl 472; does not exist
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL add channel' (opcode 97) failed
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL L2 ingress and egress stats account overhead' (opcode 247) failed
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL family add' (opcode 35) failed
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD ioctl' (opcode 10) failed
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL add' (opcode 23) failed
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:02  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL media address add' (opcode 31) failed
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 /kernel: if_pfe: Error 8 (No IFD) on IF command 5 (IFD stats)
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL encap configuration' (opcode 34) failed
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL flags configuration' (opcode 33) failed
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL snmp update' (opcode 201) failed
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1    ifl 473; does not exist
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD ioctl' (opcode 10) failed
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL L2 ingress and egress stats account overhead' (opcode 247) failed
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL media address add' (opcode 31) failed
    Jan 18 00:01:03  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL encap configuration' (opcode 34) failed
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL flags configuration' (opcode 33) failed
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL snmp update' (opcode 201) failed
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1    ifl 472; does not exist
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL L2 ingress and egress stats account overhead' (opcode 247) failed
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1 dfw_ifl_msg_set_bind_point:80Received bind IPC for unknown IFL 472
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL media address add' (opcode 31) failed
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL encap configuration' (opcode 34) failed
    Jan 18 00:01:04  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL flags configuration' (opcode 33) failed
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL snmp update' (opcode 201) failed
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1    ifl 473; does not exist
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL L2 ingress and egress stats account overhead' (opcode 247) failed
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1   ifl 473; does not exist
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1 dfw_ifl_msg_set_bind_point:80Received bind IPC for unknown IFL 473
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1 (nh_tag_setup): NULL ifl for index 472
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL family change' (opcode 37) failed
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL media address add' (opcode 31) failed
    Jan 18 00:01:05  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL encap configuration' (opcode 34) failed
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL flags configuration' (opcode 33) failed
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL snmp update' (opcode 201) failed
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1    ifl 472; does not exist
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFL L2 ingress and egress stats account overhead' (opcode 247) failed
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1   ifl 472; does not exist
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1 dfw_ifl_msg_set_bind_point:80Received bind IPC for unknown IFL 472
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1 IFRT: 'IFD stats request' (opcode 5) failed
    Jan 18 00:01:06  dnvrco-cmfl-mx480-1 fpc1   ifd 222; does not exist



  • 2.  RE: Juniper MX480 - PS Interface Not Working

     
    Posted 01-17-2018 22:18

    Sean,

     

    I suspect config issue.. Could you share me config?

    Get the following from edit mode:

     

    show chassic fpc <number> (in your case fpc1)

    show chassis pseudowire-service

    show interfaces <psX>

    show interfaces lt-x/x/x

    show interface <xe>

    show protocols l2circuit

    show protocols lldp

    show protocols mpls

    run show interfaces terse | match ps

    run show interfaces terse | match lt

    run show chassis hardware models

     

    Note: if you are using PS interface for subscribers(such pppoe/dhcp)? if yes, PS interfaces are supported on Modular Port Concentrators (MPCs) with Ethernet Modular Interface Cards (MICs) only.

     

     



  • 3.  RE: Juniper MX480 - PS Interface Not Working

    Posted 01-18-2018 05:12

    show chassis fpc 1
    pic 0 {
        tunnel-services;
    }
    pic 1 {
        power off;
    }
    pic 2 {
        power off;
    }
    pic 3 {
        power off;
    }
    ir-mode IR;

    show chassis pseudowire-service
    device-count 128;

    show interfaces ps0
    ps0 {
        apply-groups PWHT-PPPOE;
        anchor-point {
            lt-1/0/0;
        }
    }

    show groups
    PWHT-PPPOE {
        interfaces {
            <ps*> {
                flexible-vlan-tagging;
                auto-configure {
                    vlan-ranges {
                        dynamic-profile single-vlan-prof {
                            accept pppoe;
                            ranges {
                                2-4094;
                            }
                        }
                        access-profile aaa-profile;
                    }
                    remove-when-no-subscribers;
                }
                mtu 9100;
                no-gratuitous-arp-request;
                unit 0 {
                    encapsulation ethernet-ccc;
                }
            }
        }
    }

    run show interfaces terse | match lt-
    lt-0/1/0                up    up
    lt-1/0/0                up    up


    run show chassis hardware models
    Hardware inventory:
    Item             Version  Part number  Serial number     FRU model number
    Midplane         REV 40   750-047862   ACRH8480          CHAS-BP3-MX480-S
    FPM Board        REV 04   760-059208   CAGY3339          CRAFT-MX480-S
    PEM 0            Rev 01   740-063045   QCS1639T047       PWR-MX480-2400-DC-S
    PEM 1            Rev 01   740-063045   QCS1639T04E       PWR-MX480-2400-DC-S
    Routing Engine 0 REV 03   740-051822   9016033851        RE-S-1800X4-32G-S
    CB 0             REV 07   750-062572   CAHE5488          SCBE2-MX-S
    FPC 0            REV 08   750-063180   CAHE3296          MPC3E-3D-NG-Q
      MIC 0          REV 35   750-028392   CAGT2026          MIC-3D-20GE-SFP
      MIC 1          REV 12   750-033307   CAHJ0074          MIC3-3D-10XGE-SFPP
    FPC 1            REV 60   750-045715   CAES8032          MPC5EQ-40G10G
    Fan Tray                                                 FFANTRAY-MX480-HC-S

     

    I've tried using 0/1/0 as the anchor and 1/0/0, both have the same error messages.   "run show interfaces ps0" takes like 5-10 seconds to return and everytime generates similar IFL/IFD error messages in the log. It's getting choked up on something.  The error in logs states "PFE attach failed" -- I'm assuming that is the root of the issue, I just don't see what would cause that in my configuration and anchor card choice.



  • 4.  RE: Juniper MX480 - PS Interface Not Working

     
    Posted 01-18-2018 21:25

    Sean,

     

    Thanks for sharing the output. I dont see the l2circuit configuration.  Have you configured l2circuit?

     

    show protocols l2circuit

    show protocols lldp

    show protocols mpls

     

    Also, you must apply bandwithd for tunnel:

    set chassis fpc 1 pic 0 tunnel-services bandwidth 1g

     

     

     

     

     



  • 5.  RE: Juniper MX480 - PS Interface Not Working

    Posted 01-21-2018 20:18
    Yes, the l2circuit is there and the PW is up (but not actually working and accepting pppoe packets).

    I read the bandwidth is not required and actually not preferred for MX using MPC/MIC: “Note: When you use MPCs and MICs, tunnel interfaces are soft interfaces and allow as much traffic as the forwarding-path allows, so it is advantageous to set up tunnel services without artificially limiting traffic by use of the bandwidth option. However, you must specify bandwidth when configuring tunnel services for MX Series routers with DPCs or FPCs. The GRE key option is not supported on the tunnel interfaces for DPCs on MX960 routers.”

    Are you certain it is required?


  • 6.  RE: Juniper MX480 - PS Interface Not Working
    Best Answer

     
    Posted 01-21-2018 20:30

     

    It is required, please configure it and let me know.

     

     

     

     

     



  • 7.  RE: Juniper MX480 - PS Interface Not Working

    Posted 01-22-2018 07:13

    It appears that solved the issue.   No more errors in log and " run show interfaces ps0" returns instantly instead of hanging.

     

    Juniper should update that documentation!



  • 8.  RE: Juniper MX480 - PS Interface Not Working

     
    Posted 01-22-2018 18:01

     

    Glad to know that it's solved, 

    We'll log a KB as document ref.

     

     

     

     



  • 9.  RE: Juniper MX480 - PS Interface Not Working

    Posted 09-28-2018 06:14

    I did something similar here over a l2circuit, but it seems the pppoe negotiantion gets stuck after PADS. No authentication happens. But it works fine when testing on a physica interface instead of the tunnel.

     

    The other end is a mikrotik routeros box. Maybe something needs to be tweaked on the l2circuit?