Re: [nsp] dot1q/isl "encapsulation failed"

From: George Robbins (grr@shandakor.tharsis.com)
Date: Thu Mar 08 2001 - 19:28:02 EST


What hardware? We've got about 70 vlans on one Gig-E linecard and it
works fine, though there's a tendency to crash whenever you go to add
another one. 12.0.15S might have a fix, hard to tell.

The cited case look like it's just not finding the thing out on vlan77,
possibly because of the switch not being enabled or set to the dot1q
trunk mode or the port with the target not begin set for access vlan 77.

Also, if you have a tree of switches and don't have vtp set up, you
need to enter vlan 77 in the vlan database for the intermediate
switch(s) or they won't pass the vlan, regardless of the trunk port
vlan configs.

                                                George

> From cisco-nsp-request@puck.nether.net Thu Mar 8 18:57:51 2001
> Resent-Date: Thu, 8 Mar 2001 18:57:29 -0500
> Received-Date: Thu, 8 Mar 2001 18:55:29 -0500
> X-Sender: mr_list@pop.netzero.net
> Date: Thu, 08 Mar 2001 16:03:30 -0800
> To: Dmitri Kalintsev <dek@hades.uz>, cisco-nsp@puck.nether.net
> From: Ramin K <mr_list@netzero.net>
> Subject: Re: [nsp] dot1q/isl "encapsulation failed"
> In-Reply-To: <20010308232058.B15948@hades.uz>
> Resent-From: cisco-nsp@puck.nether.net
> X-Mailing-List: <cisco-nsp@puck.nether.net> archive/latest/5618
> X-Loop: cisco-nsp@puck.nether.net
> Precedence: list
> Resent-Sender: cisco-nsp-request@puck.nether.net
>
> I just spent the better part of a week tracking down a similar problem on a
> set of GSR's. Turns out from my testing that the GSR's would only support 6
> dot1q vlans on my hardware since all my wacky problems went away after
> reducing the number of them to 6 from 8. Still waiting to see what Cisco
> has to say about that. I had no such problems with the VXR's on an FE-ISL
> card, but it may be something to investigate if you are doing several (more
> then the 8 I had working) vlans.
>
> Ramin
>
> At 11:20 PM 3/8/01 +0200, Dmitri Kalintsev wrote:
> >Hi guys,
> >
> >I'm having rather hard time finding what's wrong in seemingly stupid
> >situation:
> >
> >!
> >interface FastEthernet0/0
> > ip address <real ip address> 255.255.255.128
> > no ip directed-broadcast
> > full-duplex
> >!
> >interface FastEthernet0/0.1
> > no ip redirects
> > no ip directed-broadcast
> >!
> >interface FastEthernet0/0.77
> > encapsulation dot1Q 77
> > ip address 10.1.1.5 255.255.255.252
> > no ip directed-broadcast
> >!
> >
> >(I've tried no ip address on maininterface and f0/0.1 in dit1q vlan 1,
> >result is the same).
> >
> >7206-vpn-test#ping 10.1.1.6
> >
> >Type escape sequence to abort.
> >Sending 5, 100-byte ICMP Echos to 10.1.1.6, timeout is 2 seconds:
> >
> >19:41:37: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >sending
> >19:41:37: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >encapsulation failed.
> >19:41:39: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >sending
> >19:41:39: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >encapsulation failed.
> >19:41:41: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >sending
> >19:41:41: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >encapsulation failed.
> >19:41:43: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >sending
> >19:41:43: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >encapsulation failed.
> >19:41:45: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >sending
> >19:41:45: IP: s=10.1.1.5 (local), d=10.1.1.6 (FastEthernet0/0.77), len 100,
> >encapsulation failed.
> >Success rate is 0 percent (0/5)
> >
> >I've tried to change dot1q to ISL, and result is the same, "encapsulation
> >failed". FE works fine, if I don't use VLAN's. I've tried different IOS
> >sets, too. Oh, yes. And a different router. First was 7206vxr with npe300
> >and dual FE IO controller, this current one is 7206 with npe200 and vanilla
> >IO controller. No difference.
> >
> >Switch side I presume is not guilty, as this very same switch runs a few
> >dot1 trunks to other switches without problem. Switch is Cat2948, so it only
> >supports dot1q trunks. Switch and router perfectly see each other on cdp
> >neighbor list, too.
> >
> >7206-vpn-test#sh int f0/0.77
> >FastEthernet0/0.77 is up, line protocol is up
> > Hardware is DEC21140A, address is 0004.de2f.8000 (bia 0004.de2f.8000)
> > Internet address is 10.1.1.5/30
> > MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
> > reliability 255/255, txload 1/255, rxload 1/255
> > Encapsulation 802.1Q Virtual LAN, Vlan ID 77.
> > ARP type: ARPA, ARP Timeout 04:00:00
> >
> >It seem to recognize that it's a VLAN interface, too...
> >
> >There is nothing really I can think of now, and what the hell should I think
> >of? This is a simple configuration, as simple as it gets, and I had it
> >working in dozens of other places. :( Any ideas?
> >
> >SY,
> >--
> >D.K.
>
>
> Shop online without a credit card
> http://www.rocketcash.com
> RocketCash, a NetZero subsidiary
>



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:31 EDT