Symptom

On any Nexus 9000 switch with a Cloud Scale ASIC (such as 9200 models, as well as any models ending with -EX, -FX, and -FX2), file transfers through in-band/front-panel interfaces is very slow. With the default CoPP profile of "strict", incrementing packet drops are observed under the cu-copp-class-management CoPP class: class cu-copp-class-management set cos 2 police cir 10000 kbps bc 32000 bytes conform transmit violate drop class-map copp-system-p-class-management (match-any) match access-group name copp-system-p-acl-ftp match access-group name copp-system-p-acl-ntp match access-group name copp-system-p-acl-ssh match access-group name copp-system-p-acl-http match access-group name copp-system-p-acl-ntp6 match access-group name copp-system-p-acl-sftp match access-group name copp-system-p-acl-snmp match access-group name copp-system-p-acl-ssh6 match access-group name copp-system-p-acl-tftp match access-group name copp-system-p-acl-https match access-group name copp-system-p-acl-snmp6 match access-group name copp-system-p-acl-tftp6 match access-group name copp-system-p-acl-radius match access-group name copp-system-p-acl-tacacs match access-group name copp-system-p-acl-telnet match access-group name copp-system-p-acl-radius6 match access-group name copp-system-p-acl-tacacs6 match access-group name copp-system-p-acl-telnet6 set cos 2 police cir 10000 kbps , bc 32000 bytes module 1 : transmitted 137568186 bytes; dropped 4044452 bytes; <<< Drops due to low CIR/BC values

Conditions

+++ Any Nexus 9000 device with a Cloud Scale ASIC, which includes Nexus 9200 models as well as model numbers ending with -EX, -FX, and -FX2. +++ CoPP profile is configured with the default profile of "strict". +++ File transfer is being performed through in-band/front-panel interfaces as opposed to the mgmt0 interface within the "management" VRF.

Workaround

1. Perform file transfer over the built-in mgmt0 interface in the "management" VRF. Data over this interface is not subject to CoPP. 2. Modify the "strict" CoPP profile to increase CIR/BC values for the class cu-copp-class-management. +++ Current setting in "strict" CoPP profile: class cu-copp-class-management set cos 2 police cir 10000 kbps bc 32000 bytes conform transmit violate drop +++ An example of a modified CoPP profile with increased CIR/BC values: class cu-copp-class-management set cos 2 police cir 36000 kbps bc 512000 bytes conform transmit violate drop

Further Problem Description