cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1344
Views
0
Helpful
2
Replies
Tom Teunissen
Beginner

OTV 'rewrite ingress tag translate' command not working as expected

Hi,

I hope someone can help me in resolving this OTV issue. I have setup 2 ASR1002-X routers on a WAN connection and they see each other as adjacent server, so that is working. However in the left datacenter we have a different VLAN numbering we can't use in the right datacenter, so we have to rewrite the VLAN tag...

With these configurations, the mac-addresses located on the left datacenter aren't visible on the right OTV router via 'show otv route vlan 200', it feels like I'm overlooking something really small, but I can't find much on the internet.

Please help? :-) Thanks!

*******************************************************************

LEFT SIDE OTV
otv fragmentation join-interface Port-channel1
otv site-identifier 0001.0001.0001
!
interface Port-channel1
 description *** provider OTV WAN-side ***
 mtu 9216
 ip address 172.30.40.1 255.255.255.224
 no negotiation auto
!
interface Port-channel2
 description *** switch OTV LAN-side ***
 no ip address
 no negotiation auto
!
 service instance 2411 ethernet
  encapsulation dot1q 200
  rewrite ingress tag translate 1-to-1 dot1q 2411 symmetric
  bridge-domain 2411
 !
interface Overlay1
 no ip address
 otv join-interface Port-channel1
 otv vpn-name OTV-VPN
 no otv suppress arp-nd
 otv adjacency-server unicast-only
 service instance 2411 ethernet
  encapsulation dot1q 200
  bridge-domain 2411
 !

*******************************************************************

RIGHT SIDE OTV
otv fragmentation join-interface Port-channel1
otv site-identifier 0002.0002.0002
!
interface Port-channel1
 description *** provider OTV WAN-side ***
 mtu 9216
 ip address 172.30.36.29 255.255.255.224
 no negotiation auto
!
interface Port-channel2
 description *** switch OTV LAN-side ***
 no ip address
 no negotiation auto
!
 service instance 2411 ethernet
  encapsulation dot1q 2411
  bridge-domain 2411
 !
interface Overlay1
 no ip address
 otv join-interface Port-channel1
 otv vpn-name OTV-VPN
 no otv suppress arp-nd
 otv adjacency-server unicast-only
 service instance 2411 ethernet
  encapsulation dot1q 2411
  bridge-domain 2411
 !

*******************************************************************

1 ACCEPTED SOLUTION

Accepted Solutions
j.dzidowski
Beginner

Hello Tom,

Solution of your problem is to correct service instance configuration on Overlay interface on LEFT SIDE OTV.

It should be

 !
interface Overlay1
 no ip address
 otv join-interface Port-channel1
 otv vpn-name OTV-VPN
 no otv suppress arp-nd
 otv adjacency-server unicast-only
 service instance 2411 ethernet
  encapsulation dot1q 2411
  bridge-domain 2411
 !

Then it should works.

This is about a logic how frame is flowing through OTV router. For frames coming from RIGHT SIDE OTV they are going through ports PO1 - Overlay interface - PO2 and vice versa. Currently service instance 2411 on Overlay interface is expecting frames with with VLAN 200 (encapsulation dot1q 200) but your frames has tag with VLAN 2411.

View solution in original post

2 REPLIES 2
j.dzidowski
Beginner

Hello Tom,

Solution of your problem is to correct service instance configuration on Overlay interface on LEFT SIDE OTV.

It should be

 !
interface Overlay1
 no ip address
 otv join-interface Port-channel1
 otv vpn-name OTV-VPN
 no otv suppress arp-nd
 otv adjacency-server unicast-only
 service instance 2411 ethernet
  encapsulation dot1q 2411
  bridge-domain 2411
 !

Then it should works.

This is about a logic how frame is flowing through OTV router. For frames coming from RIGHT SIDE OTV they are going through ports PO1 - Overlay interface - PO2 and vice versa. Currently service instance 2411 on Overlay interface is expecting frames with with VLAN 200 (encapsulation dot1q 200) but your frames has tag with VLAN 2411.

View solution in original post

Tom Teunissen
Beginner

Hello Jacek,

That worked like a charm! Thank you very much!!! :-)

If I run into any problems maybe we will hire you or the company you work for :-P

Cheers, Tom

Content for Community-Ad