[c-nsp] unnumbered SVI on 6500/sup720 (was: Private VLANs for customer isolation on sup720/12.2(33))
Phil Mayers
p.mayers at imperial.ac.uk
Wed Apr 27 06:44:55 EDT 2011
On 19/04/11 18:22, Jon Harald Bøvre wrote:
> Done similar to this with SXF (for FTTH rollout):
>
> interface vlan xxx (might be possible to use loopback intf)
> ip address x.x.x.x 255.255.252.0
> ip local-proxy-arp
>
> interface vlan xxx+1
> desc server1
> ip unnumbered vlan xxx (or ip unnumbered loopback xxx)
> ip local-proxy-arp
>
> interface vlan xxx+2
> desc server2
> ip unnumbered vlan xxx (or ip unnumbered loopback xxx)
> ip local-proxy-arp
>
> to avoid burning av vlan for each server(customer), consider using
> switchport protected on access switch (if feature exists)
>
>
> Configuration from my head, might contain errors.
I've been unable to get this working on sup720/12.2(33)SXI5. I get:
IP ARP req filtered src 155.198.60.2 0011.0a3a.a9c7, dst 155.198.60.1
0000.0000.0000 wrong cable, interface Vlan600
...implying that something isn't working right. Config is:
interface Loopback60
ip address 155.198.60.1 255.255.255.0
ip local-proxy-arp
! next two lines apparently added by the above command:
no ip redirects
ip route-cache same-interface
interface Vlan600
ip unnumbered Loopback60
ip local-proxy-arp
! next two lines apparently added by the above command:
no ip redirects
ip route-cache same-interface
I get the same results if I use a vlan instead of a loopback. Any
suggestions?
More information about the cisco-nsp
mailing list