[nsp] Cat3500XL & management VLAN: Encapsulation of IP packetsfails

[Tomas Daniska]

3524XLs had (and still have) tons of bugs regarding arp

we've had many problems due to the switches arping the destination host even if it was outside its subnet (no attempt to contact default gateway etc..)

--

deejay  

> -----Original Message-----
> From: Vincent De Keyzer [mailto:vincent at dekeyzer.net] 
> Sent: 24. októbra 2003 12:49
> To: 'Matti Saarinen'; cisco-nsp at puck.nether.net
> Subject: RE: [nsp] Cat3500XL & management VLAN: Encapsulation 
> of IP packetsfails
> 
> Matti,
> 
> It seems that ARP is failing? No replies are received.
> 
> Here is a successful arp request:
>  Oct 24 10:48:47.001 UTC: IP ARP: sent req src a.b.c.d 0004.dd31.4640,
> dst a.b.c.x 0000.0000.0000 VLAN62
>  Oct 24 10:48:47.004 UTC: IP ARP: rcvd rep src a.b.c.x 0005.9a6e.e470,
> dst a.b.c.d VLAN62
> 
> I have had the "encapsulation failed" message several times, 
> but always
> for different reasons as far as I remember. But if no ARP reply comes,
> no surprise the IP packet cannot be IP encapsulated...
> 
> Does the address .65 appear in your arp cache? (I guess not) Is .65
> still up?
> 
> I am polling a switch with MRTG and it never produced any problems. I
> don't think that Cricket is much nastier than MRTG?
> 
> Vincent
> 
> 
> > -----Original Message-----
> > From: cisco-nsp-bounces at puck.nether.net 
> > [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of 
> Matti Saarinen
> > Sent: jeudi 23 octobre 2003 13:27
> > To: cisco-nsp at puck.nether.net
> > Subject: [nsp] Cat3500XL & management VLAN: Encapsulation of 
> > IP packets fails
> > 
> > 
> > 
> > I configured Cricket to collect information from a Cat 3500XL 
> > stack. Obviously, the commander of the stack did not like the 
> > several SNMP get and getnext queries directed towards and it 
> > stopped sending or receiving IP packets to its managament 
> > VLAN interface. All the VLANs cofigured on the switch work, 
> > even the one to which the management interface belongs.
> > 
> > With debug ip packet and debug IP arp I managed to get the 
> > following output.
> > 
> > sw#ping x.y.z.65
> > 
> > Type escape sequence to abort.
> > Sending 5, 100-byte ICMP Echos to x.y.z.65, timeout is 2 seconds:
> > 
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, sending
> > 32w1d: IP ARP: creating incomplete entry for IP address: 
> > x.y.z.65 interface VLANn
> > 32w1d: IP ARP: sent req src x.y.z.80 0002.fd1a.a240,
> >                  dst x.y.z.65 0000.0000.0000 VLANn
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, 
> > encapsulation failed.
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, sending
> > 32w1d: IP ARP throttled out the ARP Request for x.y.z.65
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, 
> > encapsulation failed.
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, sending
> > 32w1d: IP ARP: sent req src x.y.z.80 0002.fd1a.a240,
> >                  dst x.y.z.65 0000.0000.0000 VLANn
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, 
> > encapsulation failed.
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, sending
> > 32w1d: IP ARP throttled out the ARP Request for x.y.z.65
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, 
> > encapsulation failed.
> > 32w1d: IP: s=x.y.z.80 (local), d=x.y.z.65 (VLANn), len 100, sending
> > 32w1d: IP ARP: sent req src x.y.z.80 0002.fd1a.a240,
> >                  dst x.y.z.65 0000.0000.0000 VLANn
> > 32w1d: IP: s=x.y.z.80 (local), d=130.230.70.65 (VLANn), len 
> > 100, encapsulation failed.
> > 
> > 
> > Has anyone else experienced anything similar? Is there any 
> > way except reload to fix this problem?
> > 
> > Cheers,
> > 
> > -- 
> > - Matti -
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> > https://puck.nether.net/mailman/listinfo/cisco> -nsp
> > archive at 
> > http://puck.nether.net/pipermail/cisco-nsp/
> > 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
>