topic Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5 in Switching

i can't ping sub-interface from C8500L-8S4X to sub-interface NCS540 ,

Dhikra Marghli — Tue, 31 Oct 2023 12:31:48 GMT

Hello

i have a :C8500L-8S4X connect to NCS540-CISCO

so my problem i can't ping sub-interface from this router to sub-interface NCS540 ,

so please how i can resolve this problem that i can ping to sub-interfce point-point NCS540 CISCO

so you wil have configuration C8500L

license udi pid C8500L-8S4X sn FLX261803Y0
memory free low-watermark processor 67727
!
diagnostic bootup level minimal
!
!
redundancy
mode none
!
!
!
cdp run
!
!
!
!
!
--More-- !
interface GigabitEthernet0/0/0
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/1
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/4
no ip address
--More-- shutdown
negotiation auto
!
interface GigabitEthernet0/0/5
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/6
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/7
no ip address
shutdown
negotiation auto
!
interface TenGigabitEthernet0/1/0
no ip address
!
interface TenGigabitEthernet0/1/0.3022
encapsulation dot1Q 3022
--More-- ip address 172.25.40.162 255.255.255.252
!
interface TenGigabitEthernet0/1/1
no ip address
shutdown
!
interface TenGigabitEthernet0/1/2
no ip address
shutdown
!
interface TenGigabitEthernet0/1/3
no ip address
shutdown
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
ip http server
ip http authentication local
ip http secure-server
--More-- ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
!
!
!
!
!
control-plane
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
login
transport input ssh

NCS540===>ip address 172.25.40.161 255.255.255.252

I wait a reply from expert switching

Thanks

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Torbjørn — Tue, 31 Oct 2023 12:52:18 GMT

That configuration looks fine and should allow pinging the NCS540 address. What does the configuration for the interface(s) on the NCS540 look like? Is the interface up?

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

M02@rt37 — Tue, 31 Oct 2023 13:52:28 GMT

Hello @Dhikra Marghli,

Please provide us the NCS and c8500 output of #show ip interface brief command.

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 13:57:53 GMT

Hello

This configuration in NCS 540 point-to-ponit to C8500L-8S4X

interface TenGigE0/0/0/22.3022 l2transport

description INBMI

encapsulation dot1q 3022

rewrite ingress tag pop 1 symmetric

and this configuration is UP UP

so how i can edit configuration that allow ping from 8500 to NCS540

I wait a reply

Thanks

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 13:58:28 GMT

Hello

This configuration in NCS 540 point-to-ponit to C8500L-8S4X

interface TenGigE0/0/0/22.3022 l2transport

description INBMI

encapsulation dot1q 3022

rewrite ingress tag pop 1 symmetric

and this configuration is UP UP

so how i can edit configuration that allow ping from 8500 to NCS540

I wait a reply

Thanks

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 14:04:27 GMT

Router#show ip arp
Protocol Address Age (min) Hardware Addr Type Interface
Internet 172.25.40.162 - 4488.162d.a688 ARPA TenGigabitEthernet0/1/0.3022

No @MAc from NCS540 cisco

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

M02@rt37 — Tue, 31 Oct 2023 14:07:52 GMT

@Dhikra Marghli

It is a P2P connection? Why l2transport? No VPLS needed.

interface TenGigE0/0/0/22.3022

description INBMI

encapsulation dot1q 3022

ip address 172.25.40.161 255.255.255.252

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 14:19:43 GMT

Thanks for your reply

Telecom operator who works on this nCS54 equipment cannot change configuration on NCS 540 and he tells me how to change configuration in interafce C8500L-8S4X so that allows ping interface from NCS54 to C8500L-8S4X ??

so please how i can change configuration in C8500L-8S4X ???

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Ramblin Tech — Tue, 31 Oct 2023 14:27:23 GMT

Why are you using an l2transport configuration on the NCS540? Is this part of an L2VPN where you are transporting Ethernet frames from one attachment circuit to another? If not, and you only want an L3 interface, get rid of the "l2transport" keyword and replace the "rewrite" config with "ipv4 address 172.25.40.161/30"

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 14:35:10 GMT

Operator Telecom send me from NCS540 :

and he say me that this interface in NCS540 is conneted directly to C8500L-8S4X ( p2P) . Yes , interface in NCS540 is L2VPN

so i can't unterstand how i can edit configuration C8500L-8S4X !!!! that allow to interface in NCS540 !!

RP/0/RP0/CPU0:NCS540-Kasbah-DCN#show l2vpn forwarding bridge-domain BUSINESS-C$

Tue Oct 31 12:13:12.615 CET

To Resynchronize MAC table from the Network Processors, use the command...

l2vpn resynchronize forwarding mac-address-table location <r/s/i>

Mac Address Type Learned from/Filtered on LC learned Resync Age/Last Change Mapped to

-------------- ------- --------------------------- ---------- ---------------------- --------------

b08b.d021.c40e dynamic (10.1.211.19, 513543022) N/A 31 Oct 12:13:13 N/A

RP/0/RP0/CPU0:NCS540-Kasbah-DCN#

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 14:41:54 GMT

Hello

I wait your help please !!

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Ramblin Tech — Tue, 31 Oct 2023 14:44:31 GMT

The address 172.25.40.161 must be attached to an L3 construct (interface), while NCS540 int TenGigE0/0/0/22.3022 is an L2 construct. Has the operator of the NCS540 said where this IP address is attached? To a BVI perhaps?

The L2VPN config from the NCS540 is incomplete, as it is only showing the TenGigE0/0/0/22.3022 attachment circuit and not how/where the ethernet frames are being transported by the 540. Ask the operator for the complete L2VPN config for your service.

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 15:07:53 GMT

Operator say me that configuration is from NCS540 cisco is interface L2

and this NCS540 is connted to router Busniess-PE

this B-PE is conneted to C8500L-8S4X

so configuration in B-PE router : ASR9K has interface L3

interface TenGigE0/0/0/22.3022

encapsulation dot1q 3022

ip address 172.25.40.161 255.255.255.252

so Operator Telecom say me to edit configuration in 8500L !

so please how i can resolve this problem that allow ping from B-PE to 8500L

Thanks

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 15:14:12 GMT

Hello

i explain you topologie but Operator insist change configuration in 8500L !!!

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 15:30:11 GMT

what do you thaink please !! i explain you !! thanks

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Ramblin Tech — Tue, 31 Oct 2023 16:01:35 GMT

It appears that the NCS540 is providing an L2VPN transport service between your Cat8500 CE and the provider's ASR9K PE using a bridge domain starting with "BUSINESS-C$" (the "$" indicating that the rest of the name is truncated). Think of this L2VPN transport as a wire that delivers the ethernet frames unchanged. With the ping from the Cat8500 (172.25.40.162) not working to the A9K (172.25.40.161) the issue can be either with:

1 - The Cat8500 config

2 - The NCS540 config

3 - The ASR9K config

4 - The actual cables connecting these three elements

Let's start with number #1: Is int teng0/0/1.3022 up/up on the Cat8500? If so, can you ping your own address (172.25.40.162)? If not, troubleshoot the Cat8500; if so, let's move on to #2.

Does the Cat8500's MAC address show up in the MAC addr table for your bridging domain (BUSINESS-C$) after a ping attempt? I am assuming that address learning is configured on the bridge domain, but you might confirm with the operator. If the MAC address is not appearing in the table, does the NCS540 have any L2 control protocols enabled that you can peer with to troubleshoot connectivity problems (eg, CDP/LLDP, CFM, Link OAM)? If so, configure those on your Cat8500 to troubleshoot connectivity problems to the NCS540. If MAC addr learning is enabled and both the Cat8500 and NCS540 are up/up, but the address is not being learned on the 540, you have a basic L2 connectivity problem that you will have to work with the operator to troubleshoot (compare interface counters, span to packet capture, etc).

Post back if all is good L2-wise from the 8500 through the 540 to the 9K, as then the focus should be on L3 troubleshooting.

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 17:13:16 GMT

Hello

I access via telnet to B-PE ( ASR9K ) so i find :

interface BVI513543022
description INBMI-2023-3761
vrf INBMI
ipv4 address 172.25.40.161 255.255.255.252

so what do you think !!! i edit 8500L or what i can configure that allow ping from 8500 to B-PE CISC !!

i wait your reply !!

say me what's the command that u can send you to trouble!!!

thanks

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Tue, 31 Oct 2023 17:25:17 GMT

I send you show conf from B-PE ASR9K

please what's commands show that allow you to test more

I wait your reply

Thanks

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Ramblin Tech — Wed, 01 Nov 2023 19:08:13 GMT

You should establish whether you have working L2 connectivity from the 8500 through the 540 to the 9K. When you try to ping the 9K from the 8500, it will first send out an arp to resolve the 9K's MAC address. This arp packet broadcast should be received and forwarded by the 540 to the 9K. If MAC address learning is enabled on the 540, the 8500's MAC address should show up in the MAC address table for the bridge domain BUSINESS-C; does it? If the 540 used point-to-point x-connect instead of a bridge domain, there would be no address learning, but I believe it is optional with bridge domains and enabled by default.

Likewise, the bridge-domain should also learn the 9K's MAC address when if/when it responds to the arp. If address learning is enabled for the bridge domain, both the 8500's and the 9K's MAC addresses should be in the address table. If one or both are missing, you probably have an L1 or L2 problem. To troubleshoot that, start with the basics: are all interfaces up/up?

Re: i can't ping sub-interface from C8500L-8S4X to sub-interface NCS5

Dhikra Marghli — Thu, 02 Nov 2023 08:02:24 GMT

Thanks for your reply

i find in B-PE ,

Hello

I access via telnet to B-PE ( ASR9K ) so i find :

interface BVI513543022
description INBMI-2023-3761
vrf INBMI
ipv4 address 172.25.40.161 255.255.255.252

NSC-540-kasbah

interface TenGigE0/0/0/22.3022 l2transport

description INBMI

encapsulation dot1q 3022

rewrite ingress tag pop 1 symmetric

my question what's the configuration in ME3800 that allow ping from ME3800 to 172.25.40.161 255.255.255.252 !!

Please i wait your reply beacuse operator telecom wait th solution .

Thanks