[j-nsp] ipv6 routing

Thu Apr 1 13:37:44 EDT 2010

I agree with Chris. Everything looks configured right. Since you can ping, the only problem seems to be with OSPFv3. Anything in the logs? I'd restart RPD as well... Do you have a lab box you can try it on?

Serge

----- Original Message ----
From: Ramesh Karki <rameshkarki at gmail.com>
To: Chris Grundemann <cgrundemann at gmail.com>
Cc: juniper-nsp at puck.nether.net; Serge Vautour <serge at nbnet.nb.ca>
Sent: Thu, April 1, 2010 2:07:02 PM
Subject: Re: [j-nsp] ipv6 routing

Hi Serge,

Are you able to ping your Cisco router's FF80 address?
Yes I can ping both the link local address and the manually assigned
address.

What do you see if you run "monitor interface traffic fe-0/1/0" while you
run your pings?

The captured output seems okay (I have tried with tcpdump from shell mode
too..)

22:02:36.895648 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 44, length 16
22:02:36.896282  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 44, length 16
22:02:37.895555 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 45, length 16
22:02:37.896414  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 45, length 16
22:02:38.896466 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 46, length 16
22:02:38.901718  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 46, length 16
22:06:06.206997  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, neighbor advertisment, tgt is fe80::20c:31ff:fe95:a400, length 24
22:06:06.529913  In IP fe1-1.beetle.subisu.net.np > OSPF-ALL.MCAST.NET:
OSPFv2, Hello, length 60
22:06:06.865791  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, neighbor solicitation, who has fe80::217:cbff:fe77:1f, length 32
22:06:06.865867 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, neighbor advertisment[|icmp6]
22:06:06.866165 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 6, length 16
22:06:06.866752  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 6, length 16
22:06:07.866094 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 7, length 16
22:06:07.866812  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 7, length 16
22:06:08.866000 Out IP6 fe80::217:cbff:fe77:1f > fe80::20c:31ff:fe95:a400:
ICMP6, echo request, seq 8, length 16
22:06:08.866736  In IP6 fe80::20c:31ff:fe95:a400 > fe80::217:cbff:fe77:1f:
ICMP6, echo reply, seq 8, length 16

Do you have any neighbors picked up by ND (show ipv6 neighbors)?

V6 neighbors are discovering :

IPv6 Address                 Linklayer Address  State       Exp Rtr
Interface
abcd:3800:1:1::2             00:18:73:46:12:32  stale       797 yes
ge-0/0/0.0
abcd:3800:2:1::2             00:0c:31:95:a4:00  stale       345 yes
fe-0/1/0.0
fe80::202:17ff:fed8:4c00     00:02:17:d8:4c:00  stale       57  yes
ge-0/0/0.0
fe80::20c:31ff:fe95:a400     00:0c:31:95:a4:00  stale       224 yes
fe-0/1/0.0
fe80::218:73ff:fe46:1232     00:18:73:46:12:32  stale       152 yes
ge-0/0/0.0

Do you have any Firewall Filters attached to Loop0 that would block some
traffic?
yes, I have applied a firewall filter policy on Lo0 to filter some specific
tcp/udp services rest are accepted.

I am not sure if it is a Licensing problem, I have not found any related doc
on the web too..

Chris,
This is my productions box, so I can restart the rpd process only on our
regular maintains day.

thank you,

Ramesh
On Thu, Apr 1, 2010 at 10:11 PM, Chris Grundemann <cgrundemann at gmail.com>wrote:

> On Thu, Apr 1, 2010 at 09:59, Serge Vautour <sergevautour at yahoo.ca> wrote:
> > This is very odd. The "OSPF instance is not running" message makes me
> wonder if there's a licensing problem. I haven't been able to find anything
> on the Juniper web site...
>
> There should be no issue with licensing - IPv6 has been a standard
> feature in Junos for quite some time. I don't have any experience with
> 9.2R2 on an M10i specifically though - I guess it is possible there is
> a bug...
>
> >
> > Are you able to ping your Cisco router's FF80 address? What do you see if
> you run "monitor interface traffic fe-0/1/0" while you run your pings? Do
> you have any neighbors picked up by ND (show ipv6 neighbors)? Do you have
> any Firewall Filters attached to Loop0 that would block some traffic?
>
> Good ideas.
>
> Also, is this a production or lab box Ramesh? if it's a lab box you
> might try restarting rpd - these problems seem to be quite odd indeed
> (from what I can tell you are configuring things properly).
>
> >
> > HTH,
> > Serge
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>
>
> --
> @ChrisGrundemann
> weblog.chrisgrundemann.com
> www.burningwiththebush.com
> www.coisoc.org
>
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

      __________________________________________________________________
Make your browsing faster, safer, and easier with the new Internet Explorer® 8. Optimized for Yahoo! Get it Now for Free! at http://downloads.yahoo.com/ca/internetexplorer/