I have a problem with SPB implementation for this topology.
Switch Access 1 and Switch Access 2 are able to reach the physical IP address of BEB 1 and BEB 2, but when I try to Ping the VRRP Virtual IP address the result is discontinuous ping.
The two access switches interfaces are configured with DHL.
BEB 1 is always the master switch for VRRP, I see no flapping between master and backup state.
I tried to capture the traffic using tcpdump, there were only echo request without echo reply on the access switch.
Note:
- linkagg 3 is between BEB 1 and BEB 2
- linkagg 2 is hairpin L2
- linkagg 1 is hairpin L3
SCENARIO:
BEB 1:
Code: Select all
spb bvlan 4001 admin-state enable
spb bvlan 4001 name "CONTROL"
spb bvlan 4002 admin-state enable
spb bvlan 4002 name "SERVICE"
spb isis bvlan 4001 ect-id 1
spb isis bvlan 4002 ect-id 2
spb isis control-bvlan 4001
spb isis interface linkagg 3
spb isis admin-state enable
spb ipvpn bind vrf RED isid 2000111 gateway x.x.x.x all-routes
service 1000 spb isid 2000111 bvlan 4002 vlan-xlation enable
auto-fabric protocols spb admin-state disable
#
vrf VRF01NETMGMT ip interface "VLAN10" address 1.1.1.2 mask 255.255.255.0 vlan 10 rtr-port linkagg 2 tagged
#
vrf RED ip vrrp 1 interface "VLAN10" priority 200 preempt interval 100 version v2
vrf RED ip vrrp 1 interface "VLAN10" address 1.1.1.1
vrf RED ip vrrp 1 interface "VLAN10" admin-state enable
#
service 1000 sap port 1/1/1:10
service 1000 sap port 1/1/2:10
service 1000 sap linkagg 1:10
Code: Select all
spb bvlan 4001 admin-state enable
spb bvlan 4001 name "CONTROL"
spb bvlan 4002 admin-state enable
spb bvlan 4002 name "SERVICE"
spb isis bvlan 4001 ect-id 1
spb isis bvlan 4002 ect-id 2
spb isis control-bvlan 4001
spb isis interface linkagg 3
spb isis admin-state enable
spb ipvpn bind vrf RED isid 2000111 gateway x.x.x.x all-routes
service 1000 spb isid 2000111 bvlan 4002 vlan-xlation enable
auto-fabric protocols spb admin-state disable
#
vrf VRF01NETMGMT ip interface "VLAN10" address 1.1.1.3 mask 255.255.255.0 vlan 10 rtr-port linkagg 2 tagged
#
vrf RED ip vrrp 1 interface "VLAN10" priority 200 preempt interval 100 version v2
vrf RED ip vrrp 1 interface "VLAN10" address 1.1.1.1
vrf RED ip vrrp 1 interface "VLAN10" admin-state enable
#
service 1000 sap port 1/1/1:10
service 1000 sap port 1/1/2:10
service 1000 sap linkagg 1:10
Code: Select all
vlan 10 member port 1/1/1 tagged
vlan 10 member port 1/1/2 tagged
dhl 1 name DHL-1
dhl 1 mac-flushing raw
dhl 1 linka port 1/1/1 linkb port 1/1/2
dhl 1 admin-state enable
spantree vlan 10 admin-state enable
ip interface "mgmt-10" address 1.1.1.11 mask 255.255.255.0 vlan 10
Code: Select all
vlan 10 member port 1/1/1 tagged
vlan 10 member port 1/1/2 tagged
dhl 1 name DHL-1
dhl 1 mac-flushing raw
dhl 1 linka port 1/1/1 linkb port 1/1/2
dhl 1 admin-state enable
spantree vlan 10 admin-state enable
ip interface "mgmt-10" address 1.1.1.12 mask 255.255.255.0 vlan 10
Code: Select all
ACCESS_1-> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=64 time=1.31 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=64 time=0.692 ms
64 bytes from 1.1.1.1: icmp_seq=3 ttl=64 time=0.742 ms
64 bytes from 1.1.1.1: icmp_seq=4 ttl=64 time=0.753 ms
64 bytes from 1.1.1.1: icmp_seq=5 ttl=64 time=0.710 ms
64 bytes from 1.1.1.1: icmp_seq=6 ttl=64 time=0.715 ms
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 4997ms
rtt min/avg/max/mdev = 0.692/0.820/1.312/0.223 ms
ACCESS_1-> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=64 time=1.58 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=64 time=0.758 ms
64 bytes from 1.1.1.1: icmp_seq=3 ttl=64 time=0.737 ms
64 bytes from 1.1.1.1: icmp_seq=4 ttl=64 time=0.699 ms
64 bytes from 1.1.1.1: icmp_seq=5 ttl=64 time=0.720 ms
64 bytes from 1.1.1.1: icmp_seq=6 ttl=64 time=0.738 ms
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 4997ms
rtt min/avg/max/mdev = 0.699/0.872/1.582/0.318 ms
ACCESS_1-> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5001ms
ACCESS_1-> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5001ms
ACCESS_1-> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5004ms
ACCESS_1-> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 0 received, 100% packet loss, time 5004ms
ACCESS_1-> ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=64 time=0.782 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=64 time=0.645 ms
64 bytes from 1.1.1.1: icmp_seq=3 ttl=64 time=0.644 ms
64 bytes from 1.1.1.1: icmp_seq=4 ttl=64 time=0.636 ms
64 bytes from 1.1.1.1: icmp_seq=5 ttl=64 time=0.666 ms
64 bytes from 1.1.1.1: icmp_seq=6 ttl=64 time=0.696 ms
--- 1.1.1.1 ping statistics ---
6 packets transmitted, 6 received, 0% packet loss, time 4997ms
rtt min/avg/max/mdev = 0.636/0.678/0.782/0.052 ms
Thank you!
