[c-nsp] SXH2a broken with non-MDT SAFI peers

Phil Mayers p.mayers at imperial.ac.uk
Mon May 19 11:15:33 EDT 2008


All,

All; this is just a heads-up. I'll open a TAC case as soon as Cisco 
un-break my CCO account (aside: what kind of incompetent buffoons do 
Cisco have running their website?)

I'm testing SXH2a on a 6500/sup720 and have run into some problems.

Specifically, we have:

RR1 --- RR2
  |       |
  \--RTR--/

  * RR1 & RR2 are running 12.2(18)SXF, and are route-reflectors
  * RTR is running SXH2a and is a client of both RRs

The MDT SAFI code is supposed to detect a non-MDT capable router and 
send the "old" VPNv4 communities. This doesn't seem to be working, and 
there seems to be an off-by-one-byte error.

On RR1 I see (I realise I'm using real IPs, but it's necessary for the 
demo) using "sh ip bgp vpnv4 all neighbors $RTR routes"

    Network          Next Hop            Metric LocPrf Weight Path

Route Distinguisher: 50688:0:29512344
*>i11.0.0.0         194.82.152.11            0    100      0 ?

If we decode the RD into hex, and back into decimal, it's:

198.0 : 0 : 1.194.82.152

...and then obviously the "11" from the 1st octet of the route.

A working router shows:

Route Distinguisher: 2:39878:1
*>i194.82.152.9/32  194.82.152.9             0    100      0 ?


Sigh.


More information about the cisco-nsp mailing list