error: ffp_intf_ifd_hier_tagging_config_verify: Modified IFD "xe-3/0/9" is in use by BBE subscriber, commit denied - flexible-vlan-tagging config changed
error: foreign file propagation (ffp) failed
Goal is to change xe-3/0/9 which is used for dynamic-vlan/PPPoE subscribers from a xe interface to a leg in a new AE interface. When the commit is performed, a commit error is returned.
> configure
Entering configuration mode
{master}[edit]
# set interfaces xe-3/0/9 disable
# commit
exit
re0:
configuration check succeeds
re1:
commit complete
# exit
Exiting configuration mode
{master}
> show subscribers physical-interface xe-3/0/9 | count
Count: 12 lines
> show subscribers physical-interface xe-3/0/9
Interface IP Address/VLAN ID User Name LS:RI
xe-3/0/9.3221351123 0x8100.1008 0x8100.446 default:default
xe-3/0/9.3221351062 0x8100.1002 0x8100.30 default:default
xe-3/0/9.3221351051 0x8100.1008 0x8100.3862 default:default
xe-3/0/9.3221351026 0x8100.1030 0x8100.60 default:default
xe-3/0/9.3221350988 0x8100.1008 0x8100.444 default:default
xe-3/0/9.3221350981 1004 default:default
xe-3/0/9.3221350973 1009 default:default
xe-3/0/9.3221350971 0x8100.1008 0x8100.599 default:default
xe-3/0/9.3221350967 1003 default:default
xe-3/0/9.3221350839 0x8100.1011 0x8100.1011 default:default
xe-3/0/9.3221350798 1000 default:default
clear auto-configuration interfaces xe-3/0/9
12 interfaces, 0 interface-sets removed from device xe-3/0/9
Total subscribers: 0, Active Subscribers: 0
======================= Then the below configuration was added in ===================================
set routing-instances schools routing-options static route 87.192.46.0/24 next-hop 89.127.192.237
set routing-instances schools routing-options static route 85.91.0.64/26 next-hop 85.91.9.13
set routing-instances schools routing-options static route 85.91.2.0/24 next-hop 85.91.9.13
del interfaces xe-3/0/8
del interfaces xe-3/0/9
set interfaces xe-3/0/8 gigether-options 802.3ad ae10
set interfaces xe-3/0/8 desc "pw-sw1 xe-0/0/34 ae10"
set interfaces xe-3/0/9 gigether-options 802.3ad ae10
set interfaces xe-3/0/9 desc "pw-sw1 xe-0/0/35 ae10"
set interfaces ae10 aggregated-ether-options lacp active
set interfaces ae10 aggregated-ether-options lacp periodic fast
set interfaces ae10 description "[INTERCONNECT][SBN] multiple providers via pw-sw1 xe-0/0/35 xe-0/0/34 ae10"
set interfaces ae10 flexible-vlan-tagging
set interfaces ae10 auto-configure stacked-vlan-ranges dynamic-profile svlan-dynamic-profile accept pppoe
set interfaces ae10 auto-configure stacked-vlan-ranges dynamic-profile svlan-dynamic-profile ranges 1000-1006,any
set interfaces ae10 auto-configure stacked-vlan-ranges dynamic-profile svlan-dynamic-profile ranges 1008-1027,any
set interfaces ae10 auto-configure stacked-vlan-ranges dynamic-profile svlan-dynamic-profile ranges 1030-1031,any
set interfaces ae10 auto-configure vlan-ranges dynamic-profile vlan-dynamic-profile accept pppoe
set interfaces ae10 auto-configure vlan-ranges dynamic-profile vlan-dynamic-profile ranges 1000-1006
set interfaces ae10 auto-configure vlan-ranges dynamic-profile vlan-dynamic-profile ranges 1008-1027
set interfaces ae10 auto-configure vlan-ranges dynamic-profile vlan-dynamic-profile ranges 1030-1032
set interfaces ae10 unit 1007 description "[INTERCONNECT][SBN] Magnet"
set interfaces ae10 unit 1007 vlan-id 1007
set interfaces ae10 unit 1007 family inet address 85.91.9.14/30
set interfaces ae10 unit 1029 description "[INTERCONNECT][SBN] Imagine"
set interfaces ae10 unit 1029 vlan-id 1029
set interfaces ae10 unit 1029 family inet address 89.127.192.238/30
del routing-instances schools interface xe-3/0/9.0
del routing-instances schools interface xe-3/0/9.1007
del routing-instances schools interface xe-3/0/9.1029
set routing-instances schools interface ae10.0
set routing-instances schools interface ae10.1007
set routing-instances schools interface ae10.1029
On commit you get this error yet no subscribers are seen on the interface xe-3/0/9. You can see this above
As we first diabled and then clear down the 12 subscribers/autoconfigurations before the commit attempt
These commit error indicates that a subscriber is still present while making a change to the IFD. In this specific issue, the correct steps were completed as follows.
1) disable client facing interface/commit
2) clear all subscribers remaining bound to that IFD
3) Make change/commit
In this case, the output of show subscriber indicated that no subscribers were logged in and the commit check still failed.
Looking at this issue, the configuration is not using "remove-when-no-subscribers" which will remove dynamic-vlans when no subscribers are logged in. For this issue one dynamic-vlan was not being cleared manually.
IFD configured for dynamic-vlan: Disabled. You can see that a dynamic-vlan is still present which is preventing the commit from passing.
> show interfaces xe-3/0/9 extensive
Jun 26 16:56:50
Physical interface: xe-3/0/9, Administratively down, Physical link is Down
Interface index: 223, SNMP ifIndex: 2463, Generation: 226
.
Logical interface xe-3/0/9.3221351079 (Index 537002280) (SNMP ifIndex 200131368) (Generation 129619)
Flags: Device-Down VLAN-Tag [ 0x8100.1011 ] Encapsulation: ENET2
Demux:
Underlying interface: xe-3/0/9 (Index 223)
In order to clear this dynamic-vlan we want to see if it is in the subscriber database.
clear auto-configuration interfaces xe-3/0/9.3221351079
Jun 26 16:57:22
VLAN xe-3/0/9.3221351079 deleted
But the dynamic-vlan was not actually removed.
show interfaces xe-3/0/9 extensive
Jun 26 16:57:30
In such cases, you will need to clear this dynamic-vlan manually in order to do this we need to find the session-id.
start shelll
Jun 26 16:58:16
% vty -s 7208 128.0.0.1
show ifl xe-3/0/9.3221351079 detail
etailed IFL Info
IFL handle: 0x12f5c810
IFL Name: xe-3/0/9.3221351079
IFL Type: DVLAN
IFL BBE Index: 131368
IFL Seq num: 1
IFL Gen num: 129619
IFL RefCnt: 2
IFL Nexthop Total: 0
Installed on PFE: True
IFL Flags: 0x10002
IFL Local Flags: 0x0
IFL RefCnt owner: SELF (1)
IFL RefCnt owner: IFF (1)
IFL Flow Index: 131368
Parent IFD Index: 223
Phy IFD Index: 223
UIFL Index: 131040
UIFL Name: xe-3/0/9.32767
Pseudo IFL BBE Index: 131042
Pseudo IFL Name: demux0.2147487615
Session Id: 125608 *****write this down as it will be needed to use for clearing this dynamic-vlan out.
Num stacked ifls: 0
Num stacked iflsets: 0
vtag: 0x13f3000
tpid: 0x8100 0x0
Parent IFD name: xe-3/0/9
Phy IFD name: xe-3/0/9
Hardware address: f4:a7:39:a8:63:eb
IFL LSRI Index: 0
Mcast Adjust Rate: 0
COS Shaping Rate: 0
Effective Shaping Rate: 0
SP Ingress Shaping Rate: 0
SP Egress Shaping Rate: 0
Overhead Acct Mode: Not Set
ANCP Calc Down Rate: 0
ANCP Calc Up Rate: 0
ANCP COS Down Rate: 0
ANCP Overhead Acct Mode: 0
ANCP Frame Mode Bytes: 0
ANCP Cell Mode Bytes: 0
QOS Adjust Bits: 0x0000
Exit:
Now we can clear this dynamic-vlan out using the session-id.
From CLI: Command is hidden so please type if out fully.
request system subscriber-management release session id 125608
Jun 26 17:05:36
Session will be forcibly released.
Do you want to continue ? [yes,no] (no) yes
Jun 26 17:05:39
Client-session ID 125608 released
Now, Commit will succeed:
Jun 26 17:08:03