Configuring IS-IS Neighbor Relationship Flapping Suppression
Usage Scenario
If an interface carrying IS-IS services alternates between Up and Down, IS-IS neighbor relationship flapping occurs on the interface. During the flapping, IS-IS reestablishes the neighbor relationship and recalculates routes. In this process, a large number of packets are exchanged, adversely affecting neighbor relationship stability, IS-IS services, and other IS-IS-dependent services, such as LDP and BGP. IS-IS neighbor relationship flapping suppression can address this problem by delaying IS-IS neighbor relationship reestablishment or preventing service traffic from passing through flapping links.
Pre-configuration Tasks
Before configuring IS-IS neighbor relationship flapping suppression, complete the following tasks:
- Configure an IP address for each interface to ensure that neighboring routers are reachable at the network layer.
- Configure basic IPv4 IS-IS functions.
Procedure
- Run system-view
The system view is displayed.
By default, IS-IS neighbor relationship flapping suppression is enabled globally. To disable this function globally, run the suppress-flapping peer disable command in the IS-IS view.
- Run interface interface-type interface-number
The interface view is displayed.
By default, IS-IS neighbor relationship flapping suppression is enabled on all interfaces in the same IS-IS process. To disable the function from one of the interfaces, run the isis suppress-flapping peer disable command.
- Run isis suppress-flapping peer hold-down interval
The Hold-down mode is configured, and its duration is set.
Flapping suppression works in either Hold-down or Hold-max-cost mode.
- Hold-down mode: In the case of frequent flooding and topology changes during neighbor relationship establishment, interfaces prevent neighbor relationship reestablishment during Hold-down suppression, which minimizes synchronization attempts and packet exchanges.
- Hold-max-cost mode: If the traffic forwarding path changes frequently, interfaces use the maximum value (16777214 for the wide mode and 63 for the narrow mode) as the cost of the flapping link during Hold-max-cost suppression, which prevents traffic from passing through the flapping link.
Flapping suppression can also work first in Hold-down mode and then in Hold-max-cost mode.
By default, the Hold-down mode is disabled, but the Hold-max-cost mode is enabled.
To disable this mode, run the isis suppress-flapping peer hold-max-cost disable command.
- Run isis suppress-flapping peer { detecting-interval detecting-interval | threshold threshold | resume-interval resume-interval } *
Detection parameters are configured for IS-IS neighbor relationship flapping suppression.
Each IS-IS interface that has IS-IS neighbor relationship flapping suppression enabled starts a flapping counter. If the interval between two successive neighbor status changes from Full to a non-Full state is shorter than detecting-interval, a valid flapping_event is recorded, and the flapping_count is incremented by 1. When the flapping_count reaches or exceeds threshold, flapping suppression takes effect. If the interval between two successive neighbor status changes from Full to a non-Full state is longer than resume-interval, the flapping_count is reset.
The value of resume-interval must be greater than that of detecting-interval.
By default, the detection interval of IS-IS neighbor relationship flapping suppression is 60s, the suppression threshold is 10, and the interval for exiting from suppression is 120s. Using the default detection parameters is recommended.
- Run quit
The system view is displayed.
- Run quit
The user view is displayed.
- Run reset isis process-id suppress-flapping peer [ interface interface-type interface-number ] [ notify-peer ]
Interfaces are forced to exit from IS-IS neighbor relationship flapping suppression.
Interfaces exit from flapping suppression in the following scenarios:- The suppression timer expires.
- The corresponding IS-IS process is reset.
- An IS-IS neighbor is reset using the reset isis peer command.
- IS-IS neighbor relationship flapping suppression is disabled globally using the suppress-flapping peer disable (IS-IS) command in the IS-IS view.
- The reset isis suppress-flapping peer command is run.
- Suppression is aborted forcibly using the reset isis suppress-flapping peer [ interface-type interface-number ] notify-peer command on the remote device.
Verifying the Configurations
Run the display isis [ process-id ] interface interface-type interface-number verbose command to check the status of IS-IS neighbor relationship flapping suppression.
<HUAWEI> display isis interface verbose
Interface information for ISIS(1)
---------------------------------
Interface Id IPV4.State IPV6.State MTU Type DIS
Vlanif100 001 Up Down 1497 L1/L2 No/No
Circuit MT State : Standard
Description :
SNPA Address : 0000-1382-4569
IP Address : 10.1.1.5
IPV6 Link Local Address :
IPV6 Global Address (es) :
Csnp Timer Value : L1 10 L2 10
Hello Timer Value : L1 10 L2 10
DIS Hello Timer Value : L1 3 L2 3
Hello Multiplier Value : L1 3 L2 3
LSP-Throttle Timer : L12 50
Cost : L1 10 L2 10
Ipv6 Cost : L1 10 L2 10
Priority : L1 64 L2 64
Retransmit Timer Value : L12 5
Bandwidth-Value : Low 1000000000 High 0
Static Bfd : NO
Dynamic Bfd : NO
Dynamic IPv6 Bfd : NO
Fast-Sense Rpr : NO
Suppress flapping peer : enable (flapping-count: 0, threshold: 10)
Suppress flapping peer in the command output indicates the current suppression mode (enable), time when the flapping suppression started, and the remaining time of the flapping suppression.