10-13-2007 12:26 AM
I changed the MTU of my gige link from 1500 to 1600, and configured mpls MTU 1538. doing that ISIS does not form adj.
I see CLNS is showing neigbor but as ES-IS? why is that.
Router A:
interface GigabitEthernet0/0/9
description link to RouterB
mtu 1600
ip address x.x.x.x y.y.y.y
no ip directed-broadcast
ip router isis
no negotiation auto
tag-switching mtu 1538
tag-switching ip
isis network point-to-point
isis authentication mode md5
isis authentication key-chain KEY-ISIS
end
Router A neigbor:
RouterA#sh clns neighbors
System Id Interface SNPA State HT Type Protocol
RouterB(P-TGi0/0/9 001a.e3a2.8808 Up 292 IS ES-IS
Other end:
Router B:
interface GigabitEthernet0/0/8
description Connected to Router A
Gig0/0/9
mtu 1600
ip address x.x.x.x y.y.y.y
no ip directed-broadcast
ip router isis
no negotiation auto
tag-switching mtu 1538
tag-switching ip
isis network point-to-point
isis authentication mode md5
isis authentication key-chain KEY-ISIS
end
RouterA(P-EGi0/0/8 001b.2b04.ec09 Up 250 IS ES-IS
I cannot see ISIS neigbor here.
10-16-2007 11:07 AM
Also interestingly I can ping (DF Set)across with Higher MTU:
GSR-A#ping
Protocol [ip]:
Target IP address: x.x.x.69 --> GSR B connected interface IP
Repeat count [5]:
Datagram size [100]: 1550
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface:
Type of service [0]:
Set DF bit in IP header? [no]: y
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 1550-byte ICMP Echos to x.x.x.69, timeout is 2 seconds:
!!!!!
***
GSR-B#ping
Protocol [ip]:
Target IP address: x.x.x.70
Repeat count [5]:
Datagram size [100]: 1550
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface:
Type of service [0]:
Set DF bit in IP header? [no]: y
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 1550-byte ICMP Echos to x.x.x.70, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/5/8 ms
10-16-2007 10:41 AM
Hi,
This gige is connected via DWDM, and MTu is set 9600.
What else we can check for.
Thanks
10-16-2007 12:56 PM
The debug from the other side would give a clue, as this guy seems to be on the lower end of the mtu, as you can see only outbound "sends" no receives.
It seems this side interface falls marked to the remote side mtu.
HTH-Cheers,
Swaroop
10-26-2007 07:54 AM
Here is the log from other side:
G0/0/8 on this side also does not recieve anything. In the middle there is DWDM and MTU is set to 9600, not sure what other reasons can be, setting MTU back to 1500 brings ISIS UP.
Oct 13 02:55:21.723 EST: ISIS-Adj: Rec serial IIH from *HDLC* (POS2/1/0), cir type L2, cir id 03, length 4469
Oct 13 02:55:21.723 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:21.723 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:23.099 EST: ISIS-Adj: Rec serial IIH from 0018.741e.5080 (GigabitEthernet0/0/0), cir type L2, cir id 00, length 1596
Oct 13 02:55:23.099 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:23.099 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:23.927 EST: ISIS-Adj: Sending serial IIH on POS2/1/0, length 4469
Oct 13 02:55:23.947 EST: ISIS-Adj: Sending serial IIH on POS3/1/0, length 4469
Oct 13 02:55:24.051 EST: ISIS-Adj: Rec serial IIH from 001b.2b8b.e41b (GigabitEthernet0/0/9), cir type L2, cir id 00, length 1496
Oct 13 02:55:24.051 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:24.051 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:24.223 EST: ISIS-Adj: Rec serial IIH from *HDLC* (POS3/0/0), cir type L2, cir id 02, length 4469
Oct 13 02:55:24.227 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:24.227 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:24.531 EST: ISIS-Adj: Rec serial IIH from *HDLC* (POS2/0/0), cir type L2, cir id 03, length 4469
Oct 13 02:55:24.531 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:24.531 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:25.568 EST: ISIS-Adj: Sending L2 IIH on GigabitEthernet0/0/8, length 1597
Oct 13 02:55:25.784 EST: ISIS-Adj: Sending serial IIH on POS2/0/0, length 4469
Oct 13 02:55:26.108 EST: ISIS-Adj: Sending serial IIH on GigabitEthernet0/0/9, length 1496
Oct 13 02:55:26.488 EST: ISIS-Adj: Sending serial IIH on GigabitEthernet1/0/0, length 1596
Oct 13 02:55:27.488 EST: ISIS-Adj: Sending serial IIH on POS3/0/0, length 4469
Oct 13 02:55:27.792 EST: ISIS-Adj: Rec serial IIH from 0018.741e.5080 (GigabitEthernet1/0/0), cir type L2, cir id 01, length 1596
Oct 13 02:55:27.792 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:27.792 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:28.292 EST: ISIS-Adj: Sending serial IIH on GigabitEthernet0/0/0, length 1596
Oct 13 02:55:29.080 EST: ISIS-Adj: Rec serial IIH from *HDLC* (POS3/1/0), cir type L2, cir id 01, length 4469
Oct 13 02:55:29.080 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:29.080 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:30.552 EST: ISIS-Adj: Rec serial IIH from *HDLC* (POS2/1/0), cir type L2, cir id 03, length 4469
Oct 13 02:55:30.552 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:30.552 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:30.648 EST: ISIS-Adj: Rec serial IIH from 0018.741e.5080 (GigabitEthernet0/0/0), cir type L2, cir id 00, length 1596
Oct 13 02:55:30.648 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:30.648 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:32.037 EST: ISIS-Adj: Sending serial IIH on POS2/1/0, length 4469
Oct 13 02:55:32.053 EST: ISIS-Adj: Rec serial IIH from *HDLC* (POS3/0/0), cir type L2, cir id 02, length 4469
Oct 13 02:55:32.053 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:32.053 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:32.329 EST: ISIS-Adj: Sending serial IIH on POS3/1/0, length 4469
Oct 13 02:55:33.173 EST: ISIS-Adj: Rec serial IIH from 001b.2b8b.e41b (GigabitEthernet0/0/9), cir type L2, cir id 00, length 1496
Oct 13 02:55:33.173 EST: ISIS-Adj: rcvd state UP, old state UP, new state UP
Oct 13 02:55:33.173 EST: ISIS-Adj: Action = ACCEPT
Oct 13 02:55:33.441 EST: ISIS-Adj: Sending L2 IIH on GigabitEthernet0/0/8, length 1597
Oct 13 02:55:33.529 EST: ISIS-Adj: Rec serial
10-26-2007 10:56 AM
Atif,
Ultimately, you need to verify that the physical network does support 1600 bytes. The best way to do that is by using an extended ping as follow:
R1#ping ip
Target IP address: 172.16.12.2
Repeat count [5]: 1
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface:
Type of service [0]:
Set DF bit in IP header? [no]: yes
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]: y
Sweep min size [36]: 1498
Sweep max size [18024]: 1600
Sweep interval [1]:
Type escape sequence to abort.
Sending 103, [1498..1600]-byte ICMP Echos to 172.16.12.2, timeout is 2 seconds:
!!!.................................................................
...................................
Success rate is 2 percent (3/103), round-trip min/avg/max = 20/36/60 ms
R1#
You see in this case that the MTU is 1500 bytes. The first 3 pings works (1498, 1499, 1500) and the rest of the ping fails.
Regards,
10-26-2007 11:23 AM
ok. there were some layer2 tests done on the circuit and it could pass from 64 bytes to 2000 bytes with nor prpblems.
Tried pings with DF bit set for 1600 bytes p2p link IP and it is also fine.
I can try this as well. and will post the results.
10-16-2007 01:23 PM
Try 'no isis hello padding' on both sides. If adjacency comes up, then it's an MTU issue, otherwise it's something else. Debug from the other side would be indeed helpful.
10-16-2007 04:30 PM
"no isis hello padding" only applies after the session has been established. Hellos sent before session establishment are padded regardless.
Regards,
11-05-2007 03:41 PM
Here is another secnario in the LAB.
P1(GSR) --- P3 (GSR)
P1#sh cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater
Device ID Local Intrfce Holdtme Capability Platform Port ID
P3 POS0/0/0 122 R 12410/PRP POS0/0/0
P1#sh clns neighbors
System Id Interface SNPA State HT Type Protocol
PE1 Gi1/1/0 0019.a98c.1440 Up 23 L2 IS-IS
PE1 Gi1/1/1 0019.a98c.1440 Up 26 L2 IS-IS
P3 PO0/0/0 *HDLC* Up 275 IS ES-IS
P1#
P1#sh run interface pos0/0/0
Building configuration...
Current configuration : 329 bytes
!
interface POS0/0/0
description Connected to P3 - POS 0/0/0
ip address 18.18.18.1 255.255.255.252
no ip directed-broadcast
ip router isis
load-interval 30
tag-switching ip
crc 32
isis authentication mode md5
isis authentication key-chain ISIS
no isis hello padding
end
P1#sh ip int pos0/0/0
POS0/0/0 is up, line protocol is up
Internet address is 18.18.18.1/30
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 4470 bytes
P1 sees other neigbors but not P3:
P1#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
PE1 L2 Gi1/1/0 18.18.19.1 UP 22 01
PE1 L2 Gi1/1/1 18.18.19.49 UP 28 02
P3#sh run interface pos0/0/0
Building configuration...
Current configuration : 382 bytes
!
interface POS0/0/0
description Connected to P1 - POS 0/0/0
ip address 18.18.18.2 255.255.255.252
no ip directed-broadcast
ip router isis
load-interval 30
mpls traffic-eng tunnels
tag-switching ip
crc 32
isis authentication mode md5
isis authentication key-chain ISIS
no isis hello padding
P3#sh clns neighbors
System Id Interface SNPA State HT Type Protocol
PE2 Gi1/1/0 0019.a98c.1400 Up 28 L2 IS-IS
PE3 Gi1/1/1 0019.a98c.1500 Up 29 L2 IS-IS
P1 PO0/0/0 *HDLC* Init 29 L2 IS-IS
P3#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
PE2 L2 Gi1/1/0 18.18.19.17 UP 25 01
PE3 L2 Gi1/1/1 18.18.19.38 UP 27 02
P1 L2 PO0/0/0 18.18.18.1 INIT 28 00
P3#sh ip int pos0/0/0
POS0/0/0 is up, line protocol is up
Internet address is 18.18.18.2/30
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 4470 bytes
Above session is stuck in INIT as MTU is 4470, it was working before but changing the redudnacy mode to SSO, cause reload and it is down.
11-05-2007 03:52 PM
Changin MTU to 1500, it is working:
P1(config)#int pos0/0/0
P1(config-if)#mtu 1500
P1(config-if)#^Z
P1#sh
*Nov 5 19:41:56.638 EST: %SYS-5-CONFIG_I: Configured from console by console
P1#sh isis ne
P1#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
PE1 L2 Gi1/1/0 18.18.19.1 UP 26 01
PE1 L2 Gi1/1/1 18.18.19.49 UP 22 02
P3 L2 PO0/0/0 18.18.18.2 UP 23 00
P1#
other side:
P3(config)#int pos0/0/0
P3(config-if)#mtu 1500
P3(config-if)#^Z
P3#
*Nov 5 11:44:40.103 EST: %SYS-5-CONFIG_I: Configured from console by cisco on vty0sh isis ne
P3#sh i
P3#sh isis
P3#sh isis ne
P3#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
PE2 L2 Gi1/1/0 18.18.19.17 UP 29 01
PE3 L2 Gi1/1/1 18.18.19.38 UP 23 02
P1 L2 PO0/0/0 18.18.18.1 UP 28 00
NOW if I change the MTU to 4470 it is ok, until i reset the interface.
not sure what is happening here.
increasing to 4470:
P3(config)#int pos0/0/0
P3(config-if)#mtu 4470
P3(config-if)#^Z
P3#sh ip int
*Nov 5 11:46:30.491 EST: %SYS-5-CONFIG_I: Configured from console by cisco on vty0pos0/0/0
POS0/0/0 is up, line protocol is up
Internet address is 18.18.18.2/30
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 4470 bytes
P3#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
PE2 L2 Gi1/1/0 18.18.19.17 UP 26 01
PE3 L2 Gi1/1/1 18.18.19.38 UP 24 02
P1 L2 PO0/0/0 18.18.18.1 UP 25 00
P1 has session up too:
P1#sh ip int pos0/0/0
POS0/0/0 is up, line protocol is up
Internet address is 18.18.18.1/30
Broadcast address is 255.255.255.255
Address determined by non-volatile memory
MTU is 4470 bytes
P1#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
PE1 L2 Gi1/1/0 18.18.19.1 UP 24 01
PE1 L2 Gi1/1/1 18.18.19.49 UP 26 02
P3 L2 PO0/0/0 18.18.18.2 UP 21 00
now I shut the interface and no shut again same MTU problem. until i reduce it to 1500 and it comes up then i can make it 4470, only until the next interface reset.
P1(config)#int pos0/0/0
P1(config-if)#sh
*Nov 5 19:47:34.029 EST: %LINEPROTO-5-UPDOWN: Line protocol on Interface POS0/0/0, changed state to down
P1(config-if)#no sh
P1(config-if)#
*Nov 5 19:48:13.596 EST: %LINK-3-UPDOWN: Interface POS0/0/0, changed state to up
P3#sh isis neighbors
System Id Type Interface IP Address State Holdtime Circuit Id
PE2 L2 Gi1/1/0 18.18.19.17 UP 22 01
PE3 L2 Gi1/1/1 18.18.19.38 UP 27 02
P1 L2 PO0/0/0 18.18.18.1 INIT 22 00
again INIT state.
Version 12.0(32)SY3
11-06-2007 10:38 AM
Summary of the problem:
- The problem occurs on ISIS Adj between GSR only.
- POS Links default MTU 4470.
- ISIS Adj Comes up initially; any resetting of neigbour router an interface or line card, line card reload, router reload, ADJ goes down.
- It only comes up when we reduce the MTU on links to 1500.
- After that increasing the MTU back to 4470 works fine until there is another neigbor router interface reset, and ISIS Adj goes down again.
- IOS version on GSR is: 12.0(32)SY3
11-06-2007 02:27 PM
Solution for POS interfaces.
Setting MTU lower than the default value fixes the problem.
We set it to 4460 on both sides and it works even after interface reset.
Gige point-to-point does not support more than 4200 when it is connected back to back.
10-17-2007 11:11 AM
Atif,
Also you might want to verify your ISIS mtu debug what is being sent out. You are going to have to make sure that the ISIS and Tagging mtu are the same accross both devices.
Cheers,
Lamar
10-26-2007 07:56 AM
Can you verify that the configs is ok?
Router A:
interface GigabitEthernet0/0/9
description link to RouterB
mtu 1600
ip address x.x.x.x y.y.y.y
no ip directed-broadcast
ip router isis
no negotiation auto
tag-switching mtu 1538
tag-switching ip
isis network point-to-point
isis authentication mode md5
isis authentication key-chain KEY-ISIS
end
Router A neigbor:
RouterA#sh clns neighbors
System Id Interface SNPA State HT Type Protocol
RouterB(P-TGi0/0/9 001a.e3a2.8808 Up 292 IS ES-IS
Other end:
Router B:
interface GigabitEthernet0/0/8
description Connected to Router A
Gig0/0/9
mtu 1600
ip address x.x.x.x y.y.y.y
no ip directed-broadcast
ip router isis
no negotiation auto
tag-switching mtu 1538
tag-switching ip
isis network point-to-point
isis authentication mode md5
isis authentication key-chain KEY-ISIS
end
RouterA(P-EGi0/0/8 001b.2b04.ec09 Up 250 IS ES-IS
I cannot see ISIS neigbor here.
10-14-2017 12:34 PM
Atif,
I had the same problem, the only difference is that i am running a CSR1000V , i was trying with many commands to disable hello padding and i tried:
Under interface config
no isis hello padding always
Not even needed to shut/no shut the interface. It worked for me, let me know if it does for you.
BR
Yun
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide