[c-nsp] arp & vrf

Sorin CONSTANTINESCU consta at gmail.com
Tue Nov 16 11:53:40 EST 2004


Hi,

I tested it now, and it still doesn't work. Here is the config, and the debug:

=== cut here ===
Router#show ip vrf test
  Name                             Default RD          Interfaces
  test                             1:1                 GigabitEthernet6/0
Router#sh cdp nei
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater

Device ID            Local Intrfce         Holdtme   Capability   
Platform   Port ID
Router              Gig 6/0               160            R       
12008/GRP Gig 4/0
Router              Gig 4/0               160            R       
12008/GRP Gig 6/0
Router#sh run int gi4/0
Building configuration...

Current configuration : 155 bytes
!
interface GigabitEthernet4/0
 mac-address 00bb.bbbb.bbbb
 mtu 4470
 ip address 10.1.1.1 255.255.255.252
 no ip directed-broadcast
 negotiation auto
end

Router#sh run int gi6/0
Building configuration...

Current configuration : 151 bytes
!
interface GigabitEthernet6/0
 mtu 4470
 ip vrf forwarding test
 ip address 10.1.1.2 255.255.255.252
 no ip directed-broadcast
 negotiation auto
end

Router#
=== and here ===

and the "debug arp" and ping command:

=== cut here ===
Router#ping vrf test 10.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:

01:55:24: IP ARP: creating incomplete entry for IP address: 10.1.1.1
01:55:24: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
                 dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:24: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
01:55:26: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
                 dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0.
01:55:28: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
                 dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:28: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
01:55:30: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
                 dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:30: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
01:55:32: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
                 dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:32: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
Success rate is 0 percent (0/5)
Router#ping 10.1.1.2         

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:

01:55:40: IP ARP: creating incomplete entry for IP address: 10.1.1.2
01:55:40: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
                 dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:40: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:42: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
                 dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:42: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:44: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
                 dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:44: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:46: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
                 dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:46: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:48: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
                 dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:48: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
Success rate is 0 percent (0/5)
Router#
=== and here ===


On Tue, 16 Nov 2004 08:05:49 -0500, Rodney Dunn <rodunn at cisco.com> wrote:
> If you change the mac-address for one of the
> interfaces does it work then?
> 
> From an IP standpoint the router shouldn't
> do any comparison between a vrf and non-vrf
> interface for ip address conflict.
> 
> Rodney
> 
> 
> 
> On Tue, Nov 16, 2004 at 09:10:29AM +0200, Sorin CONSTANTINESCU wrote:
> > Hi,
> >
> > I have a GSR running 120-28.S1, with 2 GigabitEthernet LC
> > crossconnected via an optical fiber patch. One of the interfaces is in
> > the default routing table (Gi4/0), and the other one is in a vrf.
> >
> > #sh run int gi4/0
> > Building configuration...
> >
> > Current configuration : 120 bytes
> > !
> > interface GigabitEthernet4/0
> >  ip address 10.0.0.1 255.255.255.252
> >  no ip directed-broadcast
> >  no negotiation auto
> > end
> >
> > #sh run int gi7/0
> > Building configuration...
> >
> > Current configuration : 146 bytes
> > !
> > interface GigabitEthernet7/0
> >  ip vrf forwarding test#4
> >  ip address 10.0.0.2 255.255.255.252
> >  no ip directed-broadcast
> >  no negotiation auto
> > end
> >
> > I tried to ping 10.0.0.2 from the default routing table, but the
> > router couldn't learn an ARP entry because the router knew that
> > 10.0.0.2 was on the same router.
> >
> > #debug ip arp shows:
> >
> > #show log | i 00b0.c285.4a00|0000.0000.0000
> > Nov 16 08:51:38: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> >                  dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:38: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> > Nov 16 08:51:40: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> >                  dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:42: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> >                  dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:42: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> > Nov 16 08:51:44: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> >                  dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:44: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> > Nov 16 08:51:46: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> >                  dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:46: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> >
> > The solution was to set static arp entries:
> >
> > arp 10.0.0.2 00b0.c285.4b80 ARPA
> > arp vrf test#4 10.0.0.1 00b0.c285.4a00 ARPA
> >
> > Is there another way to make traffic pass via the GBICs?
> >
> > Regards,
> > --
> > Sorin CONSTANTINESCU
> > consta at gmail.com
> > Linux Registered User #222086
> > _______________________________________________
> 
> 
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> 


-- 
Sorin CONSTANTINESCU
consta at gmail.com
Linux Registered User #222086


More information about the cisco-nsp mailing list