[j-nsp] ipv6 routing

[Ramesh Karki]

Hi Serge,

Are you able to ping your Cisco router's FF80 address?
Yes I can ping both the link local address and the manually assigned
address.

What do you see if you run "monitor interface traffic fe-0/1/0" while you
run your pings?

The captured output seems okay (I have tried with tcpdump from shell mode
too..)

22:02:36.895648 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 44, length 16
22:02:36.896282  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 44, length 16
22:02:37.895555 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 45, length 16
22:02:37.896414  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 45, length 16
22:02:38.896466 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 46, length 16
22:02:38.901718  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 46, length 16
22:06:06.206997  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, neighbor advertisment, tgt is fe80::20c:31ff:fe95:a400, length 24
22:06:06.529913  In IP fe1-1.beetle.subisu.net.np > OSPF-ALL.MCAST.NET:
OSPFv2, Hello, length 60
22:06:06.865791  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, neighbor solicitation, who has fe80::217:cbff:fe77:1f, length 32
22:06:06.865867 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, neighbor advertisment[|icmp6]
22:06:06.866165 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 6, length 16
22:06:06.866752  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 6, length 16
22:06:07.866094 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 7, length 16
22:06:07.866812  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 7, length 16
22:06:08.866000 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 8, length 16
22:06:08.866736  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 8, length 16

Do you have any neighbors picked up by ND (show ipv6 neighbors)?

V6 neighbors are discovering :

IPv6 Address                 Linklayer Address  State       Exp Rtr
Interface
abcd:3800:1:1::2             00:18:73:46:12:32  stale       797 yes
ge-0/0/0.0
abcd:3800:2:1::2             00:0c:31:95:a4:00  stale       345 yes
fe-0/1/0.0
fe80::202:17ff:fed8:4c00     00:02:17:d8:4c:00  stale       57  yes
ge-0/0/0.0
fe80::20c:31ff:fe95:a400     00:0c:31:95:a4:00  stale       224 yes
fe-0/1/0.0
fe80::218:73ff:fe46:1232     00:18:73:46:12:32  stale       152 yes
ge-0/0/0.0

Do you have any Firewall Filters attached to Loop0 that would block some
traffic?
yes, I have applied a firewall filter policy on Lo0 to filter some specific
tcp/udp services rest are accepted.


I am not sure if it is a Licensing problem, I have not found any related doc
on the web too..

Chris,
This is my productions box, so I can restart the rpd process only on our
regular maintains day.

thank you,

Ramesh
On Thu, Apr 1, 2010 at 10:11 PM, Chris Grundemann <cgrundemann at gmail.com>wrote:

> On Thu, Apr 1, 2010 at 09:59, Serge Vautour <sergevautour at yahoo.ca> wrote:
> > This is very odd. The "OSPF instance is not running" message makes me
> wonder if there's a licensing problem. I haven't been able to find anything
> on the Juniper web site...
>
> There should be no issue with licensing - IPv6 has been a standard
> feature in Junos for quite some time. I don't have any experience with
> 9.2R2 on an M10i specifically though - I guess it is possible there is
> a bug...
>
> >
> > Are you able to ping your Cisco router's FF80 address? What do you see if
> you run "monitor interface traffic fe-0/1/0" while you run your pings? Do
> you have any neighbors picked up by ND (show ipv6 neighbors)? Do you have
> any Firewall Filters attached to Loop0 that would block some traffic?
>
> Good ideas.
>
> Also, is this a production or lab box Ramesh? if it's a lab box you
> might try restarting rpd - these problems seem to be quite odd indeed
> (from what I can tell you are configuring things properly).
>
> >
> > HTH,
> > Serge
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>
> --
> @ChrisGrundemann
> weblog.chrisgrundemann.com
> www.burningwiththebush.com
> www.coisoc.org
>