Re: Cannot ping VRF destination

Hiya,

This is how I would approach this to try and find the issue

1. Lets test PE-PE/PE-CE connectivity with the source/dest that will be used
for our VPN's IGP Label forwarding..

ping 150.1.6.6 source 150.1.5.5

ping vrf VPN_A <ce-address> source <ce-directly connected int>

If that works then I would say we can assume at least the MPLS core appears
to be working.

2. Lets double check out BGP on both PE's and the VRF RDs/RTs

show ip vrf
show ip bgp vpnv4 all summ
show ip bgp vpnv4 all
show ip bgp vpnv4 all labels
show ip bgp vpnv4 all x.x.x.x <- your route for each site

3. If we still haven't managed to find the problem here then i'd go back to
looking at your mpls forwarding table end-to-end to make sure there isn't
some funky going on with the tags

HTH

On Mon, Aug 2, 2010 at 5:43 PM, syed zubair ahmad <s_zubair82_at_yahoo.com>wrote:

> Hi Garth/Prakash,
>
> I can ping the next hop using global routing,
>
> R5#ping 150.1.6.6
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 150.1.6.6, timeout is 2 seconds:
> !!!!!
> Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
> R5#
> No joy using the source address,
>
> R5#ping vrf VPN_A 155.1.67.6 so 155.1.58.5
> Type escape sequence to abort.
> Sending 5, 100-byte ICMP Echos to 155.1.67.6, timeout is 2 seconds:
> Packet sent with a source address of 155.1.58.5
>
> .....
> Success rate is 0 percent (0/5)
> R5#
>
> Thanks & Regards,
> Zubair
>
>
> --- On *Mon, 2/8/10, Garth Bryden <
> hacked.the.planet.on.28.8k.dialup_at_gmail.com>* wrote:
>
>
> From: Garth Bryden <hacked.the.planet.on.28.8k.dialup_at_gmail.com>
> Subject: Re: Cannot ping VRF destination
> To: "Prakash Kalsaria" <kalsaria.prakash_at_gmail.com>
> Cc: "syed zubair ahmad" <s_zubair82_at_yahoo.com>, "Group Study" <
> comserv_at_groupstudy.com>, "Group Study" <ccielab_at_groupstudy.com>
> Date: Monday, 2 August, 2010, 10:14
>
>
> Hehe I totally forget to do that myself so often!
>
> On Monday, August 2, 2010, Prakash Kalsaria <kalsaria.prakash@gmail.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=kalsaria.prakash@gmail.com>>
> wrote:
> >
> > Try to ping Using a source interface
> >
> >
> > http://prakashkalsaria.wordpress.com
> >
> > On Mon, Aug 2, 2010 at 2:23 PM, syed zubair ahmad <s_zubair82@yahoo.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=s_zubair82@yahoo.com>>
> wrote:
> > hi Garth,
> >
> > Yes I am using MPLS as a transport,
> >
> > R5#sh ip route
> > Gateway of last resort is not set
> >
> > 155.1.0.0/24 is subnetted, 2 subnets
> > O 155.1.146.0 [110/65] via 155.1.45.4, 14:20:40, Serial0/1/0
> > C 155.1.45.0 is directly connected, Serial0/1/0
> > 150.1.0.0/32 is subnetted, 3 subnets
> > O 150.1.6.6 [110/66] via 155.1.45.4, 14:20:40, Serial0/1/0
> > C 150.1.5.5 is directly connected, Loopback0
> > O 150.1.4.4 [110/65] via 155.1.45.4, 14:20:40, Serial0/1/0
> > R5#
> >
> > R5#sh mpls forwarding-table
> > Local Outgoing Prefix Bytes Label Outgoing Next Hop
> > Label Label or VC or Tunnel Id Switched interface
> > 16 Pop Label 150.1.4.4/32 0 Se0/1/0
> point2point
> > 18 No Label 155.1.146.0/24 0 Se0/1/0
> point2point
> > 19 No Label 155.1.58.0/24[V] <http://155.1.58.0/24%5BV%5D> <
> http://155.1.58.0/24%5BV%5D> 2678 aggregate/VPN_A
> > 20 No Label 155.1.5.0/24[V] <http://155.1.5.0/24%5BV%5D> <
> http://155.1.5.0/24%5BV%5D> 0 aggregate/VPN_B
> > 21 16 150.1.6.6/32 0 Se0/1/0
> point2point
> > R5#
> >
> >
> >
> > Thanks & Regards,
> > Zubair Ahmad Syed
> >
> > --- On Mon, 2/8/10, Garth Bryden <
> hacked.the.planet.on.28.8k.dialup@gmail.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=hacked.the.planet.on.28.8k.dialup@gmail.com>
> >
> > wrote:
> >
> >
> > From: Garth Bryden <hacked.the.planet.on.28.8k.dialup@gmail.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=hacked.the.planet.on.28.8k.dialup@gmail.com>
> >
> > Subject: Re: Cannot ping VRF destination
> > To: "syed zubair ahmad" <s_zubair82@yahoo.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=s_zubair82@yahoo.com>
> >
> > Cc: "Group Study" <comserv@groupstudy.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=comserv@groupstudy.com>>,
> "Group Study"
> > <ccielab@groupstudy.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=ccielab@groupstudy.com>
> >
> > Date: Monday, 2 August, 2010, 9:46
> >
> >
> >
> > Hey,
> >
> > Do you have some more information such as the configs for the two
> routers, are
> > you using mpls for transport?
> >
> > What does the global route table look like?
> >
> > I've seen issues around this relating to php removing the IGP tag a hop
> sooner
> > than it should (ie at the P and not PE)
> >
> > Cheers
> >
> > Garth
> >
> >
> > On Mon, Aug 2, 2010 at 4:41 PM, syed zubair ahmad <s_zubair82@yahoo.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=s_zubair82@yahoo.com>
> >
> > wrote:
> >
> > Hi Guys,
> >
> > I can see the routes in the VRF routing table but cannot ping or
> > traceroute the destination prefix, can you please help me out what can be
> the
> > reason?
> >
> > R5#sh ip route vrf VPN_A
> > Routing Table: VPN_A
> > Gateway of last resort is not set
> > 155.1.0.0/24 is subnetted, 2 subnets
> > C 155.1.58.0 is directly connected, FastEthernet0/0
> > B 155.1.67.0 [200/0] via 150.1.6.6, 14:15:05
> > R5#
> >
> > R5#ping vrf VPN_A 155.1.67.6
> > Type escape sequence to abort.
> > Sending 5, 100-byte ICMP Echos to 155.1.67.6, timeout is 2 seconds:
> > .....
> > Success rate is 0 percent (0/5)
> > R5#
> > R5#
> > R5#traceroute vrf VPN_A 155.1.67.0
> > Type escape sequence to abort.
> > Tracing the route to 155.1.67.0
> > 1 * * *
> > 2 * * *
> > 3 * * *
> > 4
> > R5#
> >
> >
> > Thanks & Regards,
> > Zubair
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription inform

Blogs and organic groups at http://www.ccie.net
Received on Mon Aug 02 2010 - 19:06:04 ART