[c-nsp] unnumbered SVI on 6500/sup720 (was: Private VLANs for customer isolation on sup720/12.2(33))

Phil Mayers p.mayers at imperial.ac.uk
Wed Apr 27 06:44:55 EDT 2011


On 19/04/11 18:22, Jon Harald Bøvre wrote:
> Done similar to this with SXF (for FTTH rollout):
>
> interface vlan xxx (might be possible to use loopback intf)
> ip address x.x.x.x 255.255.252.0
> ip local-proxy-arp
>
> interface vlan xxx+1
> desc server1
> ip unnumbered vlan xxx (or ip unnumbered loopback xxx)
> ip local-proxy-arp
>
> interface vlan xxx+2
> desc server2
> ip unnumbered vlan xxx (or ip unnumbered loopback xxx)
> ip local-proxy-arp
>
> to avoid burning av vlan for each server(customer), consider using
> switchport protected on access switch (if feature exists)
>
>
> Configuration from my head, might contain errors.

I've been unable to get this working on sup720/12.2(33)SXI5. I get:

IP ARP req filtered src 155.198.60.2 0011.0a3a.a9c7, dst 155.198.60.1 
0000.0000.0000 wrong cable, interface Vlan600

...implying that something isn't working right. Config is:


interface Loopback60
  ip address 155.198.60.1 255.255.255.0
  ip local-proxy-arp
  ! next two lines apparently added by the above command:
  no ip redirects
  ip route-cache same-interface

interface Vlan600
  ip unnumbered Loopback60
  ip local-proxy-arp
  ! next two lines apparently added by the above command:
  no ip redirects
  ip route-cache same-interface


I get the same results if I use a vlan instead of a loopback. Any 
suggestions?


More information about the cisco-nsp mailing list