[e-nsp] Extreme switch "show iparp" - IP Rejected

root net rootnet08 at gmail.com
Fri Jul 20 12:51:29 EDT 2012


Perhaps you are right. There really wasn't a need to have provider VLAN be
L3 outside of pinging that VLAN in the initial stages. I will remove the IP
and make it solely L2 VLAN.

Thanks for the help.


On Fri, Jul 20, 2012 at 4:08 AM, Erik Bais <erik at bais.name> wrote:

> Hi, ****
>
> ** **
>
> You may want to test with disabling IPARP checking on the L3 vlan’s. ****
>
> ** **
>
> A L3 vlan will by default only allow IP addresses that it has configured
> on the vlan. ****
>
> ** **
>
> If you want to mix L2 and L3 functionality across the same vlan type: ****
>
> ** **
>
> disable iparp vr VR-Default checking  ****
>
> ** **
>
> That is a switch wide command, so you basically disable it for the
> complete switch. ****
>
> ** **
>
> Perhaps it is better to change to a second vlan and have that vlan only
> travel in L2 across switch A, B and C. ****
>
> L2 only vlan’s don’t do IPARP checking. ****
>
> ** **
>
> Hope this helps,****
>
> Regards,****
>
> Erik Bais ****
>
> ** **
>
> *From:* extreme-nsp-bounces at puck.nether.net [mailto:
> extreme-nsp-bounces at puck.nether.net] *On Behalf Of *Robert Lister
> *Sent:* vrijdag 20 juli 2012 10:13
> *To:* root net
> *Cc:* Extreme NSP
> *Subject:* Re: [e-nsp] Extreme switch "show iparp" - IP Rejected****
>
> ** **
>
> ** **
>
> Config snippets may help to work this out.****
>
> ** **
>
> By 'secondary IP' how is this configured on the cisco, and why?****
>
> ** **
>
> Rob
>
> -- ****
>
> Robert Lister****
>
> ** **
>
> Provider assigned a /30 say 172.16.0.0/30 -> his IP is say 172.16.0.1/30
> Switch A is not assigned an IP on the /27. This switch is simple all L2
> (tagged/untagged or trunk/access ports)
> Switch B is assigned an IP from a /27 say 192.168.0.4/27
> Switch C is assigned an IP from a /27 say 192.168.0.2/27
> Main Router is assigned an IP from a /27 say 192.168.0.1/27 and the
> secondary IP is 172.16.0.2/30
>
>
> sh iparp
> Destination     Mac                Age Static  VLAN    [VID]   Port
> 192.168.0.1  mac-address-here    0   NO  vlan-name-here  [0002]  1
>      Dynamic Entries:        1              Static Entries:       0
>      Pending Entries:        0
>          Out Request:       16                Out Response:      11
>           In Request:     1875                 In Response:      19
>       Proxy Answered:        0
>             Rx Error:        0                 Dup IP Addr:       0
>       Rejected count:      480                 Rejected IP: 172.16.0.2
>        Rejected Port:        1                Rejected I/F: transport****
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/extreme-nsp/attachments/20120720/a1d2211b/attachment.html>


More information about the extreme-nsp mailing list