[j-nsp] bgp routes not passing traffic between routers, traff ic dropped

[Alexander Arsenyev (GU/ETL)]

Hello,

One more question - by any chance, do You have "unicast-reverse-path" configured on router2?
Cheers
Alex

-----Original Message-----
From: Bill Petrisko [mailto:billp at wjp.net]
Sent: 10 November 2004 21:35
To: Alexander Arsenyev (GU/ETL)
Cc: 'Bill Petrisko'; juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] bgp routes not passing traffic between routers,
traff ic dropped


Nope, still failing...

bill at router1> ping 66.173.240.20 rapid count 50 source 69.28.139.250    
PING 66.173.240.20 (66.173.240.20): 56 data bytes
.......^C
--- 66.173.240.20 ping statistics ---
8 packets transmitted, 0 packets received, 100% packet loss

bill at router1> ping 66.173.240.20 rapid count 50 source 69.28.139.254    
PING 66.173.240.20 (66.173.240.20): 56 data bytes
......^C
--- 66.173.240.20 ping statistics ---
7 packets transmitted, 0 packets received, 100% packet loss

I believe the packets are failing on router2.... packets are logged
coming in the router2 interface, but not going out the upstream interface.

Repeated on router2, using the source /30's from the router1 interface:

bill at router2-re0> ping 66.173.240.20 rapid count 50 source 69.28.139.249 
PING 66.173.240.20 (66.173.240.20): 56 data bytes
!!!!!!!!!!!!!!!^C
--- 66.173.240.20 ping statistics ---
16 packets transmitted, 15 packets received, 6% packet loss
round-trip min/avg/max/stddev = 86.195/88.384/111.475/6.203 ms

bill at router2-re0> ping 66.173.240.20 rapid count 50 source 69.28.139.253    
PING 66.173.240.20 (66.173.240.20): 56 data bytes
!!!!!!!!!!!!!!!!!!^C
--- 66.173.240.20 ping statistics ---
19 packets transmitted, 18 packets received, 5% packet loss
round-trip min/avg/max/stddev = 83.872/85.193/100.886/3.833 ms

bill

On Wed, Nov 10, 2004 at 09:35:41PM +0100, Alexander Arsenyev (GU/ETL) wrote:
> Hello,
> 
> Would You be able to repeat the test (ping+traceroute) from router1 but with source address that of
> the server-router1 link, i.e.
> ping/traceroute 66.173.240.20 source <IP address of server-router1 link, on router1 end>
> I believe it would succeed but how about packet drops?
> Thanks
> Alex
> 
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net
> [mailto:juniper-nsp-bounces at puck.nether.net]On Behalf Of Bill Petrisko
> Sent: 10 November 2004 19:47
> To: juniper-nsp at puck.nether.net
> Subject: Re: [j-nsp] bgp routes not passing traffic between routers,
> traffic dropped
> 
> 
> Followup...
> 
> Placing the same filter on all the upstream next-hops on 
> router2, shows NO packets attempting to leave the router
> when packets are sourced from router1.
> 
> So router1->router2->internet  FAILS
>    router2->internet  SUCCEEDS
> 
> It appears that only packets destined for certain prefixes
> from router1 are dropped by router2.  
> 
> bill
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp
>