[c-nsp] GRE tunnels between Cisco ME3600X

paul.magee at agencyport.com paul.magee at agencyport.com
Tue Apr 17 12:03:40 EDT 2012


It certainly sounds like a plausible explanation. I guess my next
question is can I force a CEF punt?

-----Original Message-----
From: Gert Doering [mailto:gert at greenie.muc.de] 
Sent: 17 April 2012 14:10
To: paul.magee at agencyport.com
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] GRE tunnels between Cisco ME3600X

Hi,

On Tue, Apr 17, 2012 at 01:40:46PM +0100, paul.magee at agencyport.com
wrote:
> I have a GRE tunnel established between two of these things, they show

> up in each other's CDP neighbours, a BGP session is established 
> between them, and they are exchanging routes. BGP learned routes are 
> inserted into the routing table but it doesn't seem to actually route 
> through the tunnel, as though for some reason, the route in the 
> routing table is ignored. If I add a static route to the remote tunnel

> address, both it & the learned route are immediately dropped from the 
> routing table. On a probably related note there is no arp entry for 
> the remote tunnel address on either router...

This sounds like "the control plane knows how to do GRE, but the
forwarding plane does not".  

So your BGP and CDP speaker can insert packets into the tunnel, but the
hardware forwarding engine has no idea how to handle that - and while it
could give the packet to the CPU to handle it, it sanely decides to not
do that.

But that's just guesswork.

gert
--
USENET is *not* the non-clickable part of WWW!
 
//www.muc.de/~gert/
Gert Doering - Munich, Germany
gert at greenie.muc.de
fax: +49-89-35655025
gert at net.informatik.tu-muenchen.de
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed.

If you have received this email in error please notify the
originator of the message. This footer also confirms that this
email message has been scanned for the presence of computer viruses.

Any views expressed in this message are those of the individual
sender, except where the sender specifies and with authority,
states them to be the views of Agencyport Software Ltd.

Scanning of this message and addition of this footer is performed
by Websense Email Security software in conjunction with 
virus detection software.







More information about the cisco-nsp mailing list