Re: Cannot ping VRF destination

If u have a routes on Both sites routing table
Than Look at labels, There Could be some issue

On Mon, Aug 2, 2010 at 4:36 PM, Garth Bryden <
hacked.the.planet.on.28.8k.dialup_at_gmail.com> wrote:

> Hiya,
>
> This is how I would approach this to try and find the issue
>
> 1. Lets test PE-PE/PE-CE connectivity with the source/dest that will be
> used for our VPN's IGP Label forwarding..
>
> ping 150.1.6.6 source 150.1.5.5
>
> ping vrf VPN_A <ce-address> source <ce-directly connected int>
>
> If that works then I would say we can assume at least the MPLS core appears
> to be working.
>
>
> 2. Lets double check out BGP on both PE's and the VRF RDs/RTs
>
> show ip vrf
> show ip bgp vpnv4 all summ
> show ip bgp vpnv4 all
> show ip bgp vpnv4 all labels
> show ip bgp vpnv4 all x.x.x.x <- your route for each site
>
> 3. If we still haven't managed to find the problem here then i'd go back to
> looking at your mpls forwarding table end-to-end to make sure there isn't
> some funky going on with the tags
>
> HTH
>
> On Mon, Aug 2, 2010 at 5:43 PM, syed zubair ahmad <s_zubair82_at_yahoo.com>wrote:
>
>> Hi Garth/Prakash,
>>
>> I can ping the next hop using global routing,
>>
>> R5#ping 150.1.6.6
>> Type escape sequence to abort.
>> Sending 5, 100-byte ICMP Echos to 150.1.6.6, timeout is 2 seconds:
>> !!!!!
>> Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms
>> R5#
>> No joy using the source address,
>>
>> R5#ping vrf VPN_A 155.1.67.6 so 155.1.58.5
>> Type escape sequence to abort.
>> Sending 5, 100-byte ICMP Echos to 155.1.67.6, timeout is 2 seconds:
>> Packet sent with a source address of 155.1.58.5
>>
>> .....
>> Success rate is 0 percent (0/5)
>> R5#
>>
>> Thanks & Regards,
>> Zubair
>>
>>
>> --- On *Mon, 2/8/10, Garth Bryden <
>> hacked.the.planet.on.28.8k.dialup_at_gmail.com>* wrote:
>>
>>
>> From: Garth Bryden <hacked.the.planet.on.28.8k.dialup_at_gmail.com>
>> Subject: Re: Cannot ping VRF destination
>> To: "Prakash Kalsaria" <kalsaria.prakash_at_gmail.com>
>> Cc: "syed zubair ahmad" <s_zubair82_at_yahoo.com>, "Group Study" <
>> comserv_at_groupstudy.com>, "Group Study" <ccielab_at_groupstudy.com>
>> Date: Monday, 2 August, 2010, 10:14
>>
>>
>> Hehe I totally forget to do that myself so often!
>>
>> On Monday, August 2, 2010, Prakash Kalsaria <kalsaria.prakash@gmail.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=kalsaria.prakash@gmail.com>>
>> wrote:
>> >
>> > Try to ping Using a source interface
>> >
>> >
>> > http://prakashkalsaria.wordpress.com
>> >
>> > On Mon, Aug 2, 2010 at 2:23 PM, syed zubair ahmad <s_zubair82@yahoo.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=s_zubair82@yahoo.com>>
>> wrote:
>> > hi Garth,
>> >
>> > Yes I am using MPLS as a transport,
>> >
>> > R5#sh ip route
>> > Gateway of last resort is not set
>> >
>> > 155.1.0.0/24 is subnetted, 2 subnets
>> > O 155.1.146.0 [110/65] via 155.1.45.4, 14:20:40, Serial0/1/0
>> > C 155.1.45.0 is directly connected, Serial0/1/0
>> > 150.1.0.0/32 is subnetted, 3 subnets
>> > O 150.1.6.6 [110/66] via 155.1.45.4, 14:20:40, Serial0/1/0
>> > C 150.1.5.5 is directly connected, Loopback0
>> > O 150.1.4.4 [110/65] via 155.1.45.4, 14:20:40, Serial0/1/0
>> > R5#
>> >
>> > R5#sh mpls forwarding-table
>> > Local Outgoing Prefix Bytes Label Outgoing Next Hop
>> > Label Label or VC or Tunnel Id Switched interface
>> > 16 Pop Label 150.1.4.4/32 0 Se0/1/0
>> point2point
>> > 18 No Label 155.1.146.0/24 0 Se0/1/0
>> point2point
>> > 19 No Label 155.1.58.0/24[V] <http://155.1.58.0/24%5BV%5D> <
>> http://155.1.58.0/24%5BV%5D> 2678 aggregate/VPN_A
>> > 20 No Label 155.1.5.0/24[V] <http://155.1.5.0/24%5BV%5D> <
>> http://155.1.5.0/24%5BV%5D> 0 aggregate/VPN_B
>> > 21 16 150.1.6.6/32 0 Se0/1/0
>> point2point
>> > R5#
>> >
>> >
>> >
>> > Thanks & Regards,
>> > Zubair Ahmad Syed
>> >
>> > --- On Mon, 2/8/10, Garth Bryden <
>> hacked.the.planet.on.28.8k.dialup@gmail.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=hacked.the.planet.on.28.8k.dialup@gmail.com>
>> >
>> > wrote:
>> >
>> >
>> > From: Garth Bryden <hacked.the.planet.on.28.8k.dialup@gmail.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=hacked.the.planet.on.28.8k.dialup@gmail.com>
>> >
>> > Subject: Re: Cannot ping VRF destination
>> > To: "syed zubair ahmad" <s_zubair82@yahoo.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=s_zubair82@yahoo.com>
>> >
>> > Cc: "Group Study" <comserv@groupstudy.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=comserv@groupstudy.com>>,
>> "Group Study"
>> > <ccielab@groupstudy.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=ccielab@groupstudy.com>
>> >
>> > Date: Monday, 2 August, 2010, 9:46
>> >
>> >
>> >
>> > Hey,
>> >
>> > Do you have some more information such as the configs for the two
>> routers, are
>> > you using mpls for transport?
>> >
>> > What does the global route table look like?
>> >
>> > I've seen issues around this relating to php removing the IGP tag a hop
>> sooner
>> > than it should (ie at the P and not PE)
>> >
>> > Cheers
>> >
>> > Garth
>> >
>> >
>> > On Mon, Aug 2, 2010 at 4:41 PM, syed zubair ahmad <s_zubair82@yahoo.com<http://uk.mc506.mail.yahoo.com/mc/compose?to=s_zubair82@yahoo.com>
>> >
>> > wrote:
>> >
>> > Hi Guys,
>> >
>> > I can see the routes in the VRF routing table but cannot ping or
>> > traceroute the destination prefix, can you please help me out what can
>> be the
>> > reason?
>> >
>> > R5#sh ip route vrf VPN_A
>> > Routing Table: VPN_A
>> > Gateway of last resort is not set
>> > 155.1.0.0/24 is subnetted, 2 subnets
>> > C 155.1.58.0 is directly connected, FastEthernet0/0
>> > B 155.1.67.0 [200/0] via 150.1.6.6, 14:15:05
>> > R5#
>> >
>> > R5#ping vrf VPN_A 155.1.67.6
>> > Type escape sequence to abort.
>> > Sending 5, 100-byte ICMP Echos to 155.1.67.6, timeout is 2 seconds:
>> > .....
>> > Success rate is 0 percent (0/5)
>> > R5#
>> > R5#
>> > R5#traceroute vrf VPN_A 155.1.67.0
>> > Type escape sequence to abort.
>> > Tracing the route to 155.1.67.0
>> > 1 * * *
>> > 2 * * *
>> > 3 * * *
>> > 4
>> > R5#
>> >
>> >
>> > Thanks & Regards,
>> > Zubair
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> > _______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> > _______________________________________________________________________
>> > Subscription inform

Blogs and organic groups at http://www.ccie.net
Received on Mon Aug 02 2010 - 17:42:49 ART