[e-nsp] Extreme switch "show iparp" - IP Rejected

[Erik Bais]

Hi,

You may want to test with disabling IPARP checking on the L3 vlan’s.

A L3 vlan will by default only allow IP addresses that it has configured on the vlan.

If you want to mix L2 and L3 functionality across the same vlan type:

disable iparp vr VR-Default checking

That is a switch wide command, so you basically disable it for the complete switch.

Perhaps it is better to change to a second vlan and have that vlan only travel in L2 across switch A, B and C.
L2 only vlan’s don’t do IPARP checking.

Hope this helps,
Regards,
Erik Bais

From: extreme-nsp-bounces at puck.nether.net [mailto:extreme-nsp-bounces at puck.nether.net] On Behalf Of Robert Lister
Sent: vrijdag 20 juli 2012 10:13
To: root net
Cc: Extreme NSP
Subject: Re: [e-nsp] Extreme switch "show iparp" - IP Rejected


Config snippets may help to work this out.

By 'secondary IP' how is this configured on the cisco, and why?

Rob

--
Robert Lister

Provider assigned a /30 say 172.16.0.0/30<http://172.16.0.0/30> -> his IP is say 172.16.0.1/30<http://172.16.0.1/30>
Switch A is not assigned an IP on the /27. This switch is simple all L2 (tagged/untagged or trunk/access ports)
Switch B is assigned an IP from a /27 say 192.168.0.4/27<http://192.168.0.4/27>
Switch C is assigned an IP from a /27 say 192.168.0.2/27<http://192.168.0.2/27>
Main Router is assigned an IP from a /27 say 192.168.0.1/27<http://192.168.0.1/27> and the secondary IP is 172.16.0.2/30<http://172.16.0.2/30>


sh iparp
Destination     Mac                Age Static  VLAN    [VID]   Port
192.168.0.1  mac-address-here    0   NO  vlan-name-here  [0002]  1
     Dynamic Entries:        1              Static Entries:       0
     Pending Entries:        0
         Out Request:       16                Out Response:      11
          In Request:     1875                 In Response:      19
      Proxy Answered:        0
            Rx Error:        0                 Dup IP Addr:       0
      Rejected count:      480                 Rejected IP: 172.16.0.2
       Rejected Port:        1                Rejected I/F: transport
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/extreme-nsp/attachments/20120720/6ac8d582/attachment-0001.html>