L2TPv3 tunnel up but pings are failing

revelnambiar · ‎10-29-2014

Hi,

I have configured an L2TP tunnel between loopbacks on an ASR1004 and an ASR1001. The tunnel gets established, and even shows me some two-way traffic counters (they don't increment in line with ICMP requests so don't know if they represent my ping attempts per se).

When I generate ICMP traffic, I learn MAC addresses on both ends, including within the ARP tables on the hosts. However, the pings time out. I have attached a diagram and have pasted some show outputs below.

Any ideas or suggestions would be greatly appreciated, thanks!

Wlg-COR-02#show ver Cisco IOS Software, IOS-XE Software (X86_64_LINUX_IOSD-UNIVERSAL-M), Version 15.1(1)S, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2010 by Cisco Systems, Inc. Compiled Mon 22-Nov-10 12:32 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2010 by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software.

ROM: IOS-XE ROMMON

Wlg-COR-02 uptime is 2 weeks, 6 days, 14 hours, 59 minutes Uptime for this control processor is 2 weeks, 6 days, 15 hours, 0 minutes System returned to ROM by reload at 17:33:31 NZST Tue Aug 12 2014 System restarted at 00:22:39 NZDT Thu Oct 9 2014 System image file is "bootflash:/asr1001-universal.03.02.00.S.151-1.S.bin" Last reload reason: PowerOn

License Info:

License UDI: Device# PID SN UDI -------------------------------------------------------------------------------- *0 ASR1001 JAE15290CAP ASR1001:JAE15290CAP

License Package Information for Module:'asr1001'

Module name Image level Priority Configured Valid license

asr1001 adventerprise 1 NO adventerprise advipservices 2 NO advipservices ipbase 3 NO ipbase

Current License Level: advipservices

cisco ASR1001 (1RU) processor with 1217912K/6147K bytes of memory. 4 Gigabit Ethernet interfaces 32768K bytes of non-volatile configuration memory. 4194304K bytes of physical memory. 7782399K bytes of eUSB flash at bootflash:.

Configuration register is 0x2102

Wlg-COR-02#show l2tun session all

L2TP Session Information Total tunnels 1 sessions 1

Session id 3769661188 is up, logical session id 65548, tunnel id 3529463940 Remote session id is 1878828549, remote tunnel id 1043662242 Remotely initiated session Unique ID is 12 Session Layer 2 circuit, type is Ethernet Vlan, name is Port-channel2.532:532 Session vcid is 532 Circuit state is UP Local circuit state is UP Remote circuit state is UP Call serial number is 2074100010 Remote tunnel name is Air-COR-01 Internet address is 210.48.12.100 Local tunnel name is Wlg-COR-02 Internet address is 210.48.12.105 IP protocol 115 Session is L2TP signaled Session state is established, time since change 03:41:52 57 Packets sent, 48 received 8190 Bytes sent, 6645 received Last clearing of counters never Counters, ignoring last clear: 57 Packets sent, 48 received 8190 Bytes sent, 6645 received Receive packets dropped: out-of-order: 0 other: 0 total: 0 Send packets dropped: exceeded session MTU: 0 other: 0 total: 0 DF bit off, ToS reflect disabled, ToS value 0, TTL value 255 Sending UDP checksums are disabled Received UDP checksums are verified No session cookie information available FS cached header information: encap size = 24 bytes 45000014 00000000 ff73fe48 d2300c69 d2300c64 6ffca605 Sequencing is off Conditional debugging is disabled SSM switch id is 8197, SSM segment id is 8201 Wlg-COR-02# Wlg-COR-02# Wlg-COR-02#show run inter Wlg-COR-02#show run interface Po2.532 Building configuration...

Current configuration : 123 bytes ! interface Port-channel2.532 encapsulation dot1Q 532 xconnect 210.48.12.100 532 encapsulation l2tpv3 pw-class l2tp end

Wlg-COR-02# Wlg-COR-02# Wlg-COR-02#show run | beg pseudowire pseudowire-class mpls-ethernet encapsulation mpls interworking ethernet ! pseudowire-class l2tp encapsulation l2tpv3 ip local interface Loopback4770 !

--------------------------------------------------------------------------------------------------------------------

Air-COR-01#show version Cisco IOS Software, IOS-XE Software (PPC_LINUX_IOSD-ADVIPSERVICESK9-M), Version 15.2(4)S4, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2013 by Cisco Systems, Inc. Compiled Sun 01-Sep-13 09:53 by mcpre

IOS XE Version: 03.07.04.S

Cisco IOS-XE software, Copyright (c) 2005-2013 by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software.

ROM: IOS-XE ROMMON

Air-COR-01 uptime is 35 weeks, 1 day, 15 hours, 26 minutes Uptime for this control processor is 35 weeks, 1 day, 15 hours, 29 minutes System returned to ROM by reload at 23:57:45 NZDT Mon Feb 24 2014 System restarted at 00:01:45 NZDT Tue Feb 25 2014 System image file is "bootflash:asr1000rp1-advipservicesk9.03.07.04.S.152-4.S4.bin" Last reload reason: Reload Command

This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to export@cisco.com.

cisco ASR1004 (RP1) processor with 1688640K/6147K bytes of memory. Processor board ID FOX1544G2KE 16 Gigabit Ethernet interfaces 4 Ten Gigabit Ethernet interfaces 32768K bytes of non-volatile configuration memory. 4194304K bytes of physical memory. 937983K bytes of eUSB flash at bootflash:. 39004543K bytes of SATA hard disk at harddisk:.

Configuration register is 0x2102

Air-COR-01#show l2tun session all

L2TP Session Information Total tunnels 1 sessions 1

Session id 1878828549 is up, logical session id 42736, tunnel id 1043662242 Remote session id is 3769661188, remote tunnel id 3529463940 Locally initiated session Unique ID is 0 Session Layer 2 circuit, type is Ethernet Vlan, name is Port-channel2.532:532 Session vcid is 532 Circuit state is UP Local circuit state is UP Remote circuit state is UP Call serial number is 2074100010 Remote tunnel name is Wlg-COR-02 Internet address is 210.48.12.105 Local tunnel name is Air-COR-01 Internet address is 210.48.12.100 IP protocol 115 Session is L2TP signaled Session state is established, time since change 03:47:28 48 Packets sent, 58 received 6645 Bytes sent, 8437 received Last clearing of counters never Counters, ignoring last clear: 48 Packets sent, 58 received 6645 Bytes sent, 8437 received Receive packets dropped: out-of-order: 0 other: 0 total: 0 Send packets dropped: exceeded session MTU: 0 other: 0 total: 0 DF bit off, ToS reflect disabled, ToS value 0, TTL value 255 Sending UDP checksums are disabled Received UDP checksums are verified No session cookie information available FS cached header information: encap size = 24 bytes 45000014 00000000 ff73fe48 d2300c64 d2300c69 e0b07704 Sequencing is off Conditional debugging is disabled SSM switch id is 14061, SSM segment id is 5875

%No active PPTP tunnels Air-COR-01# Air-COR-01# Air-COR-01# Air-COR-01# Air-COR-01#show run int Air-COR-01#show run interface Po2.532 Building configuration...

Current configuration : 123 bytes ! interface Port-channel2.532 encapsulation dot1Q 532 xconnect 210.48.12.105 532 encapsulation l2tpv3 pw-class l2tp end

Air-COR-01# Air-COR-01# Air-COR-01#show run | beg pseudowire pseudowire-class l2tp encapsulation l2tpv3 ip local interface Loopback4770 !

------------------------------------------------------------------------------------------------------------------

air-agg-1-1#show mac address-table vlan 532

Legend: * - primary entry age - seconds since last seen n/a - not available S - secure entry R - router's gateway mac address entry D - Duplicate mac address entry

Displaying entries from DFC switch [1] linecard [1]:

vlan mac address type learn age ports ----+----+---------------+-------+-----+----------+----------------------------- 532 0050.569e.681d dynamic Yes 150 Po7 532 0050.5695.0f0c dynamic Yes 320 Po7 R 532 0008.e3ff.fc04 static No - Router

------------------------------------------------------------------------------------------------------------------

WLG-AGG-01#show mac address-table vlan 532 Mac Address Table -------------------------------------------

Vlan Mac Address Type Ports ---- ----------- -------- ----- All 0100.0ccc.cccc STATIC CPU All 0100.0ccc.cccd STATIC CPU All 0180.c200.0000 STATIC CPU All 0180.c200.0001 STATIC CPU All 0180.c200.0002 STATIC CPU All 0180.c200.0003 STATIC CPU All 0180.c200.0004 STATIC CPU All 0180.c200.0005 STATIC CPU All 0180.c200.0006 STATIC CPU All 0180.c200.0007 STATIC CPU All 0180.c200.0008 STATIC CPU All 0180.c200.0009 STATIC CPU All 0180.c200.000a STATIC CPU All 0180.c200.000b STATIC CPU All 0180.c200.000c STATIC CPU All 0180.c200.000d STATIC CPU All 0180.c200.000e STATIC CPU All 0180.c200.000f STATIC CPU All 0180.c200.0010 STATIC CPU All ffff.ffff.ffff STATIC CPU 532 0050.5695.0f0c DYNAMIC Po2 532 0050.569e.681d DYNAMIC Po4 Total Mac Addresses for this criterion: 22 WLG-AGG-01#