[c-nsp] 7600 cef confusion

[Dmitry Kiselev]

Hello!

Seems something wrong with cef adjacencies on my 7600/3bxl switch:


7600# sh ver
Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SRA1, RELEASE SOFTWARE (fc4)

7600# sh run int vl56
interface Vlan56
 ip address 1.1.1.89 255.255.255.252
 ip verify unicast source reachable-via rx
 ip flow ingress
 arp timeout 600
!

7600# sh mls cef 1.1.1.90
Codes: decap - Decapsulation, + - Push Label
Index  Prefix              Adjacency
135    1.1.1.90/32         Vl56                , 0018.b901.0895

7600# sh ip cef 1.1.1.90
1.1.1.90/32
  attached to Vlan56



7600# sh run int vl57
interface Vlan57
 ip address 1.1.1.93 255.255.255.252
 ip flow ingress
 arp timeout 600
!

7600# sh ip route 1.1.1.94
Routing entry for 1.1.1.92/30
  Known via "connected", distance 0, metric 0 (connected, via interface)
  Routing Descriptor Blocks:
  * directly connected, via Vlan57
      Route metric is 0, traffic share count is 1

7600# sh mls cef 1.1.1.94
Codes: decap - Decapsulation, + - Push Label
Index  Prefix              Adjacency
174    1.1.1.94/32         receive                <=========== ???

7600# sh ip cef 1.1.1.94
1.1.1.94/32
  receive for Vlan66                              <=========== ???

7600# sh arp | inc 1.1.1.94
Internet  1.1.1.94               2   0018.b904.eb69  ARPA   Vlan57

7600# ping 1.1.1.94

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 1.1.1.94, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 ms


7600# sh run int vl66
interface Vlan66
 ip address 1.1.1.61 255.255.255.252
 ip verify unicast source reachable-via rx
 ip flow ingress
 arp timeout 600
!


Problem discovered while I try to add URPF on vlan57: since PFC
has no valid adjacency, traffic from 1.1.1.94 start droping.

Any ideas?

-- 
Dmitry Kiselev