[e-nsp] Extreme switch "show iparp" - IP Rejected
root net
rootnet08 at gmail.com
Fri Jul 20 12:51:29 EDT 2012
Perhaps you are right. There really wasn't a need to have provider VLAN be
L3 outside of pinging that VLAN in the initial stages. I will remove the IP
and make it solely L2 VLAN.
Thanks for the help.
On Fri, Jul 20, 2012 at 4:08 AM, Erik Bais <erik at bais.name> wrote:
> Hi, ****
>
> ** **
>
> You may want to test with disabling IPARP checking on the L3 vlan’s. ****
>
> ** **
>
> A L3 vlan will by default only allow IP addresses that it has configured
> on the vlan. ****
>
> ** **
>
> If you want to mix L2 and L3 functionality across the same vlan type: ****
>
> ** **
>
> disable iparp vr VR-Default checking ****
>
> ** **
>
> That is a switch wide command, so you basically disable it for the
> complete switch. ****
>
> ** **
>
> Perhaps it is better to change to a second vlan and have that vlan only
> travel in L2 across switch A, B and C. ****
>
> L2 only vlan’s don’t do IPARP checking. ****
>
> ** **
>
> Hope this helps,****
>
> Regards,****
>
> Erik Bais ****
>
> ** **
>
> *From:* extreme-nsp-bounces at puck.nether.net [mailto:
> extreme-nsp-bounces at puck.nether.net] *On Behalf Of *Robert Lister
> *Sent:* vrijdag 20 juli 2012 10:13
> *To:* root net
> *Cc:* Extreme NSP
> *Subject:* Re: [e-nsp] Extreme switch "show iparp" - IP Rejected****
>
> ** **
>
> ** **
>
> Config snippets may help to work this out.****
>
> ** **
>
> By 'secondary IP' how is this configured on the cisco, and why?****
>
> ** **
>
> Rob
>
> -- ****
>
> Robert Lister****
>
> ** **
>
> Provider assigned a /30 say 172.16.0.0/30 -> his IP is say 172.16.0.1/30
> Switch A is not assigned an IP on the /27. This switch is simple all L2
> (tagged/untagged or trunk/access ports)
> Switch B is assigned an IP from a /27 say 192.168.0.4/27
> Switch C is assigned an IP from a /27 say 192.168.0.2/27
> Main Router is assigned an IP from a /27 say 192.168.0.1/27 and the
> secondary IP is 172.16.0.2/30
>
>
> sh iparp
> Destination Mac Age Static VLAN [VID] Port
> 192.168.0.1 mac-address-here 0 NO vlan-name-here [0002] 1
> Dynamic Entries: 1 Static Entries: 0
> Pending Entries: 0
> Out Request: 16 Out Response: 11
> In Request: 1875 In Response: 19
> Proxy Answered: 0
> Rx Error: 0 Dup IP Addr: 0
> Rejected count: 480 Rejected IP: 172.16.0.2
> Rejected Port: 1 Rejected I/F: transport****
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/extreme-nsp/attachments/20120720/a1d2211b/attachment.html>
More information about the extreme-nsp
mailing list