[c-nsp] arp & vrf
Sorin CONSTANTINESCU
consta at gmail.com
Tue Nov 16 11:53:40 EST 2004
Hi,
I tested it now, and it still doesn't work. Here is the config, and the debug:
=== cut here ===
Router#show ip vrf test
Name Default RD Interfaces
test 1:1 GigabitEthernet6/0
Router#sh cdp nei
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater
Device ID Local Intrfce Holdtme Capability
Platform Port ID
Router Gig 6/0 160 R
12008/GRP Gig 4/0
Router Gig 4/0 160 R
12008/GRP Gig 6/0
Router#sh run int gi4/0
Building configuration...
Current configuration : 155 bytes
!
interface GigabitEthernet4/0
mac-address 00bb.bbbb.bbbb
mtu 4470
ip address 10.1.1.1 255.255.255.252
no ip directed-broadcast
negotiation auto
end
Router#sh run int gi6/0
Building configuration...
Current configuration : 151 bytes
!
interface GigabitEthernet6/0
mtu 4470
ip vrf forwarding test
ip address 10.1.1.2 255.255.255.252
no ip directed-broadcast
negotiation auto
end
Router#
=== and here ===
and the "debug arp" and ping command:
=== cut here ===
Router#ping vrf test 10.1.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.1, timeout is 2 seconds:
01:55:24: IP ARP: creating incomplete entry for IP address: 10.1.1.1
01:55:24: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:24: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
01:55:26: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0.
01:55:28: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:28: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
01:55:30: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:30: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
01:55:32: IP ARP: sent req src 10.1.1.2 00b0.c285.4b00,
dst 10.1.1.1 0000.0000.0000 GigabitEthernet6/0
01:55:32: IP ARP req filtered src 10.1.1.2 00b0.c285.4b00, dst
10.1.1.1 0000.0000.0000 it's our address.
Success rate is 0 percent (0/5)
Router#ping 10.1.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:
01:55:40: IP ARP: creating incomplete entry for IP address: 10.1.1.2
01:55:40: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:40: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:42: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:42: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:44: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:44: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:46: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:46: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
01:55:48: IP ARP: sent req src 10.1.1.1 00bb.bbbb.bbbb,
dst 10.1.1.2 0000.0000.0000 GigabitEthernet4/0
01:55:48: IP ARP req filtered src 10.1.1.1 00bb.bbbb.bbbb, dst
10.1.1.2 0000.0000.0000 it's our address.
Success rate is 0 percent (0/5)
Router#
=== and here ===
On Tue, 16 Nov 2004 08:05:49 -0500, Rodney Dunn <rodunn at cisco.com> wrote:
> If you change the mac-address for one of the
> interfaces does it work then?
>
> From an IP standpoint the router shouldn't
> do any comparison between a vrf and non-vrf
> interface for ip address conflict.
>
> Rodney
>
>
>
> On Tue, Nov 16, 2004 at 09:10:29AM +0200, Sorin CONSTANTINESCU wrote:
> > Hi,
> >
> > I have a GSR running 120-28.S1, with 2 GigabitEthernet LC
> > crossconnected via an optical fiber patch. One of the interfaces is in
> > the default routing table (Gi4/0), and the other one is in a vrf.
> >
> > #sh run int gi4/0
> > Building configuration...
> >
> > Current configuration : 120 bytes
> > !
> > interface GigabitEthernet4/0
> > ip address 10.0.0.1 255.255.255.252
> > no ip directed-broadcast
> > no negotiation auto
> > end
> >
> > #sh run int gi7/0
> > Building configuration...
> >
> > Current configuration : 146 bytes
> > !
> > interface GigabitEthernet7/0
> > ip vrf forwarding test#4
> > ip address 10.0.0.2 255.255.255.252
> > no ip directed-broadcast
> > no negotiation auto
> > end
> >
> > I tried to ping 10.0.0.2 from the default routing table, but the
> > router couldn't learn an ARP entry because the router knew that
> > 10.0.0.2 was on the same router.
> >
> > #debug ip arp shows:
> >
> > #show log | i 00b0.c285.4a00|0000.0000.0000
> > Nov 16 08:51:38: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> > dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:38: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> > Nov 16 08:51:40: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> > dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:42: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> > dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:42: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> > Nov 16 08:51:44: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> > dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:44: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> > Nov 16 08:51:46: IP ARP: sent req src 10.0.0.1 00b0.c285.4a00,
> > dst 10.0.0.2 0000.0000.0000 GigabitEthernet4/0
> > Nov 16 08:51:46: IP ARP req filtered src 10.0.0.1 00b0.c285.4a00, dst
> > 10.0.0.2 0000.0000.0000 it's our address
> >
> > The solution was to set static arp entries:
> >
> > arp 10.0.0.2 00b0.c285.4b80 ARPA
> > arp vrf test#4 10.0.0.1 00b0.c285.4a00 ARPA
> >
> > Is there another way to make traffic pass via the GBICs?
> >
> > Regards,
> > --
> > Sorin CONSTANTINESCU
> > consta at gmail.com
> > Linux Registered User #222086
> > _______________________________________________
>
>
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
>
--
Sorin CONSTANTINESCU
consta at gmail.com
Linux Registered User #222086
More information about the cisco-nsp
mailing list