Wake On Lan + VRF On C8300-1N1S-4T2X

[yoav-shneor]

Hello Team,

VPLS with C1000 on all branches and ISR4331 at the center

I Replaced ISR4331 to C8300-1N1S-4T2X 
Also configured vrf lite ( LAN+WAN interfaces under vrf )

Wake On Lan doesnt work since.

I dont know if it is a misconfig or a BUG or known limitation, according to TAC it shoukd work and it doesnt  

router version is c8000be-universalk9.17.03.05.SPA.bin

LAN+WAN configured with  ip directed-broadcast & ip network-broadcast just in case....

monitor capture ( both ) on WAN , gives nothing.

 monitor capture (both ) on LAN  see the WoL coming in from LAN as it should.

Main_8300-Router#show monitor capture wakeonlan buffer detailed
----------------------------------------------------------------------------
# size timestamp source destination dscp protocol
----------------------------------------------------------------------------
0 126 0.000000 172.31.6.160 -> 172.31.160.38 0 BE TCP
0000: 00000C07 AC018018 44EC01B7 08004500 ........D.....E.
0010: 00701F3D 40007F06 DD45AC1F 06A0AC1F .p.=@....E......
0020: A02601BD E5889557 AC90B72D DBD45018 .&.....W...-..P.
0030: 01FFF841 00000000 0044FE53 4D424000 ...A.....D.SMB@.

1 144 2.523020 172.31.6.160 -> 172.31.160.255 0 BE UDP
0000: 00000C07 AC018018 44EC01B7 08004500 ........D.....E.
0010: 00823B05 00007F11 0088AC1F 06A0AC1F ..;.............
0020: A0FFC19F FFFF006E 5F8CFFFF FFFFFFFF .......n_.......
0030: 2CF05D43 F3AC2CF0 5D43F3AC 2CF05D43 ,.]C..,.]C..,.]C

2 144 2.523020 172.31.6.160 -> 172.31.160.255 0 BE UDP
0000: 00000C07 AC018018 44EC01B7 08004500 ........D.....E.
0010: 00823B06 00007F11 0087AC1F 06A0AC1F ..;.............
0020: A0FFC19F 0050006E 5F3CFFFF FFFFFFFF .....P.n_<......
0030: 2CF05D43 F3AC2CF0 5D43F3AC 2CF05D43 ,.]C..,.]C..,.]C

3 144 2.524027 172.31.6.160 -> 172.31.160.255 0 BE UDP
0000: 00000C07 AC018018 44EC01B7 08004500 ........D.....E.
0010: 00823B08 00007F11 0085AC1F 06A0AC1F ..;.............
0020: A0FFC19F 0015006E 5F77FFFF FFFFFFFF .......n_w......
0030: 2CF05D43 F3AC2CF0 5D43F3AC 2CF05D43 ,.]C..,.]C..,.]C

[balaji.bandi]

May be worth opening TAC case and confirm that works or limitation.

[yoav-shneor]

Already got one...

No known bug and no solution until now.

[alexjackson57189]

Troubleshooting Wake On Lan on the new C8300-1N1S-4T2X with VRF setup can be quite a puzzle. Kudos for checking on directed-broadcast and network-broadcast. If TAC is on it, fingers crossed for a Chikii quick resolution!

[Richard Burts]

I wonder about vrf lite. Am I correct in understanding that this was not part of the original config and that you added it on the new 8300? If LAN and WAN interfaces are under same vrf I think it should not be an issue. But I will suggest (as a test) removing vrf lite and see if behavior changes.

[yoav-shneor]

Hi, Happy new year.
You are correct. the VRF lite was not a part of old ISR config .
I did not think about it as a problem.
I will test it without.

[Richard Burts]

Thanks for the update. Please let us know the results of your test without vrf lite.

[yoav-shneor]

Hi,

Tested again this time without the VRF Lite .

Result is the same , WoL reaches the router but doesn't go "out" to the network

[Richard Burts]

Thanks for the update. Looks like you have eliminated one possible source of the problem. So we keep looking. Would you post the interface configs, both the interface receiving the request and the interface it would have gone out on if it were working?

Another question: is logging enabled (hopefully at level of debug) and if so when you are testing WoL are there any log messages generated?

[yoav-shneor]

Hi Rick, Since it is a production network and I am connected from remote station I don't want to take the risk of losing management so I never use debugging level unless I have console on router.

This is the config 

CONFIG -> 

!
interface GigabitEthernet0/0/0.100
description WAN
encapsulation dot1Q 100
ip vrf forwarding VRF_NAME
ip address 192.168.168.253 255.255.255.0
ip directed-broadcast
ip network-broadcast
no cdp enable
!
!
interface GigabitEthernet0/0/1
description LAN
ip vrf forwarding VRF_NAME
ip flow monitor My_Monitor input
ip flow monitor My_Monitor output
ip address 172.27.127.209 255.255.255.240
ip helper-address 172.27.6.50
ip directed-broadcast
ip network-broadcast
standby 1 ip 172.27.127.211
standby 1 priority 110
standby 1 preempt
standby 1 track 10 decrement 10
negotiation auto

Thanks !! 

[Richard Burts]

Thanks for the additional information. Ok - no matter what the logging level is, when you attempt WoL are there any log messages generated?

I am puzzled. In earlier posts clearly the source of the WoL request was 172.31.6.160. That addressing does not match either of these interfaces. Can you help me understand what is going on?

[yoav-shneor]

Hi,
It is not a flat network, Servers segment is not on Connected on physical lan.
We have a switch and a firewall behind it.
Default route sends all traffic to firewall.

No problems there since it worked before router change and on new router monitor capture you can see the original magic packet 

[Richard Burts]

Thanks for the clarification that it is not a flat network. Could you post the output of show ip route, or if you do not want to post that would you tell us the route to 172.31.6.160 and the route to 172.31.160.255?

[yoav-shneor]

Hi, 

172.31.6. is by default route into the Main lan and 172.31.160 is by eigrp neighborship 

Routing entry for 172.31.160.0/24
Known via "eigrp 168", distance 90, metric 3072, precedence routine (0), type internal
Redistributing via eigrp 168
Last update from 192.168.168.5 on GigabitEthernet0/0/0.100, 4d23h ago

Main_8300-Router#sh ip cef 172.31.6.0
0.0.0.0/0

TNX 

[MHM Cisco World]

Hi friend 

Can you config ip helper-address vrf aware 

Since to reach helper ip you need to use vrf.

MHM