ipv6 on a bvi interface

dhalevi · ‎12-02-2010

hi all,

I am having trouble setting an ipv6 address on a bvi interface. My setup is the following

npe-g1

/ \

2821 sup720

The I have int gi0/1 and gi0/2 on the npeg1 as members of bridge-group 1.

The 2821 is connected to int gi0/1. The sup720 is connectot int gi0/3 which is not part of the bridge-group.

I can ping the ipv6 address of the bvi from the sup720. But I can't ping the bvi interface from the 2821.

Can anyone please give me some input on why I can't ping the BVI Global unicast address from the 2821? thanks in advance!

The config on the npe-g1 is the following

ipv6 unicast-routing

bridge irb

interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
media-type rj45
no negotiation auto
ipv6 enable
bridge-group 1
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
media-type rj45
no negotiation auto
ipv6 enable
bridge-group 1
!
interface GigabitEthernet0/3
no ip address
duplex auto
speed auto
media-type rj45
no negotiation auto
ipv6 address 2001:DB8:C17:1::/64 eui-64
ipv6 enable
!
interface BVI1
ip address 1.1.1.1 255.0.0.0
ipv6 address 2001:DB8:C18:1::/64 eui-64
ipv6 enable

bridge 1 priority 50000
bridge 1 protocol ieee
bridge 1 route ip

GigabitEthernet0/3 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::201:C9FF:FE74:7C19
No Virtual link-local address(es):
Global unicast address(es):
    2001:DB8:C17:1:201:C9FF:FE74:7C19, subnet is 2001:DB8:C17:1::/64 [EUI]
Joined group address(es):
    FF02::1
    FF02::2
    FF02::1:FF74:7C19
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 milliseconds
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
BVI1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::201:C9FF:FE74:7C1B
No Virtual link-local address(es):
Global unicast address(es):
    2001:DB8:C18:1:201:C9FF:FE74:7C1B, subnet is 2001:DB8:C18:1::/64 [EUI]
Joined group address(es):
    FF02::1
    FF02::2
    FF02::1:FF74:7C1B
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is not supported
ND reachable time is 30000 milliseconds
Hosts use stateless autoconfig for addresses

Mohamed Sobair · ‎12-02-2010

Hi,

What IP Address configured on the 2821 facing G0/1 interface , pleae post its configuration here.

Regards,

Mohamed

dhalevi · ‎12-02-2010

hi Mohamed,

Thanks for replying. The config on the 2821 is as follows,

ipv6 unicast-routing

interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
ipv6 address 2001:DB8:C17:1::/64 eui-64
ipv6 enable
!

ipv6 route ::/0 2001:DB8:C17:1:201:C9FF:FE74:7C19

cisco2821# sho ipv6 int gi0/0
GigabitEthernet0/0 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::21D:A1FF:FE88:4B08
No Virtual link-local address(es):
Global unicast address(es):
    2001:DB8:C17:1:21D:A1FF:FE88:4B08, subnet is 2001:DB8:C17:1::/64 [EUI]
Joined group address(es):
    FF02::1
    FF02::2
    FF02::1:FF88:4B08
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 25831)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
cisco2821#

thanks!

Mohamed Sobair · ‎12-02-2010

Hi,

the Interface of the 2821 is on different subnet from the BVI interface, you will need to do the following on the 2821:

interface G0/0

ipv6 address 2001:DB8:C18:1::/64 eui-64

You should now be able to ping the BVI interface.

Note:

Dont forget to change your default route on the 2821 to the BVI IPv6 address.

HTH

Mohamed

dhalevi · ‎12-02-2010

hi Mohamed,

Sorry, I got confused with the interfaces. It is the 6500 that is connected to the bvi.

npe-g1#sho cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater

Device ID          Local Intrfce     Holdtme    Capability   Platform Port ID
6500                 Gig 0/1            132          R S I           WS-C6509 Gig 5/2
cisco2821         Gig 0/3             140          R S I           2821      Gig 0/0

npe-g1#sho ipv6 neighbors
IPv6 Address                                                       Age Link-layer Addr State Interface
2001:DB8:C17:1:21D:A1FF:FE88:4B08                     2 001d.a188.4b08 STALE Gi0/3
FE80::21D:A1FF:FE88:4B08                                    2 001d.a188.4b08 STALE Gi0/3
FE80::2D0:4FF:FE51:2C00                                     10 00d0.0451.2c00 STALE Gi0/1

6500#sho ipv6 neighbors
IPv6 Address                                             Age Link-layer Addr State Interface
FE80::201:C9FF:FE74:7C1B                         1 0001.c974.7c1b STALE GigabitEthernet5/2

6500#sho ipv6 int gi5/2
GigabitEthernet5/2 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::2D0:4FF:FE51:2C00
Global unicast address(es):
    2001:DB8:C18:1:2D0:4FF:FE51:2C00, subnet is 2001:DB8:C18:1::/64
Joined group address(es):
    FF02::1
    FF02::2
    FF02::1:FF51:2C00
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds
ND advertised reachable time is 0 milliseconds
ND advertised retransmit interval is 0 milliseconds
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
Hosts use stateless autoconfig for addresses.
6500#

config on 6500

ipv6 unicast-routing

interface GigabitEthernet5/2
no ip address
media-type rj45
ipv6 address 2001:DB8:C18:1::/64 eui-64
ipv6 enable

ipv6 route ::/0 2001:DB8:C18:1:201:C9FF:FE74:7C1B

when I try to ping the Global unicast address of the bvi interface

6500#ping 2001:DB8:C18:1:201:C9FF:FE74:7C1B

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:C18:1:201:C9FF:FE74:7C1B, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

when I try to ping the link-local address of the bvi it works

6500#ping FE80::201:C9FF:FE74:7C1B
Output Interface: Gigabitethernet5/2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to FE80::201:C9FF:FE74:7C1B, timeout is 2 seconds:
!!!!!

Mohamed Sobair · ‎12-02-2010

Strange !!

from the output of sh ipv6 nei, we can see that ICMP neighbor is discovering an IPv6 neighbor, yet you cant ping a global Ipv6 address.

Can you post the output from (debug icmp) and try to ping the global address again.

HTH

Mohamed

dhalevi · ‎12-02-2010

here it is,

6500#debug ipv6 icmp
ICMP packet debugging is on
6500#ping 2001:DB8:C18:1:201:C9FF:FE74:7C1B

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:C18:1:201:C9FF:FE74:7C1B, timeout is 2 seconds:

1d01h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d01h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d01h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d01h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d01h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
Success rate is 0 percent (0/5)

I turned it on the npe-g1 also, and I get,

npe-g1#debug ipv6 icmp
ICMP packet debugging is on
npe-g1#
Apr 20 08:15:23.285: ICMPv6: Received ICMPv6 packet from FE80::21D:A1FF:FE88:4B08, type 134
Apr 20 08:18:09.865: ICMPv6: Received ICMPv6 packet from FE80::21D:A1FF:FE88:4B08, type 134

This was without ipv6 enable on int gi0/1, which is a member of the bvi. Putting ipv6 enable on int gi0/1 i only get,

6500#ping 2001:DB8:C18:1:201:C9FF:FE74:7C1B

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:C18:1:201:C9FF:FE74:7C1B, timeout is 2 seconds:

1d02h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d02h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d02h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d02h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
1d02h: ICMPv6: Sending echo request to 2001:DB8:C18:1:201:C9FF:FE74:7C1B.
Success rate is 0 percent (0/5)
6500#

I get no messages on the npe-g1.

update, the messages on the npeg1, Apr 20 08:15:23.285: ICMPv6: Received ICMPv6 packet from FE80::21D:A1FF:FE88:4B08, type 134
are coming from the 2821 which is connected to gi0/3, which is not a member of the bvi. The ipv6 above is the link local address of the 2821 interface.

Mohamed Sobair · ‎12-02-2010

Hi,

there is no reason for this to happen, and Since you have local communication between link-local addresses. However, I would again check my IPv6 assigned addresses of the interfaces (Bvi & 6500). I still not sure if the interface's IPv6 GLobal Addresses are correctly configured?

HTH

Mohamed

dhalevi · ‎12-03-2010

Hi Mohamed,

As a sanity check I took int gi0/1 out of the bridge group and gave it the global unicast address. Doing this I was able to ping from the 2821 across the npe-g1 to the 6500. I have now added int gi0/1 to the bridge group, but I have left the global unicast addess on int gi0/1 and not on the BVI 1 interface.

It now seems to be working ok. I can ping accross the npe-g1. Is it wrong to put the unicast global address on the BVI 1 interface?

6500# ping 2001:DB8:C17:1:21D:A1FF:FE88:4B08

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:C17:1:21D:A1FF:FE88:4B08, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/2/4 ms

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 2001:DB8:C18:1:2D0:4FF:FE51:2C00, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0/0/4 ms

npe-g1#sho ipv6 neighbors
IPv6 Address                              Age Link-layer Addr State Interface
2001:DB8:C17:1:21D:A1FF:FE88:4B08           0 001d.a188.4b08 REACH Gi0/3
2001:DB8:C18:1:2D0:4FF:FE51:2C00            0 00d0.0451.2c00 REACH Gi0/1
FE80::21D:A1FF:FE88:4B08                    0 001d.a188.4b08 REACH Gi0/3
FE80::2D0:4FF:FE51:2C00                     0 00d0.0451.2c00 REACH Gi0/1

npe-g1#sho run int gi0/1
Building configuration...

Current configuration : 184 bytes
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
media-type rj45
no negotiation auto
ipv6 address 2001:DB8:C18:1::/64 eui-64
ipv6 enable
bridge-group 1
end

npe-g1#sho run int bvi 1
Building configuration...

Current configuration : 50 bytes
!
interface BVI1
no ip address
ipv6 enable
end

Mohamed Sobair · ‎12-03-2010

Hello,

Its indeed wrong to put the IPv6 GLobal Address on a bridged Interface of the router, and I am wondering how it works with you, that means your bridging between interfaces is not working.

A router has a Layer-3 port , these ports are the ports that needs and IP or IPv6 addresses to start forwarding packets, Once you assign a port as part of a bridge Group, You actually instructing it to become a bridged port NOT a layer-3 port and cant be used directly to forward IPv6 or IP packet.

What IOS Software version you are running? Let me check if this is not an IOS or bug related issue.

Regards,

Mohamed

dhalevi · ‎12-03-2010

hi Mohamed,

I am using, C7200-ADVIPSERVICESK9-M), Version 12.4(9)T

I thought that I would have to have the global address on the BVI interface. I was thinking that this would be the address of the default gateway for all the devices connected to the BVI. I was hoping to have some redundancy for the switches that will connect to the BVI.

Regards,

Doron

Mohamed Sobair · ‎12-03-2010

Hi Doron,

Yes you are correct about what you mentioned, and its actually how it should behave. I apologize as I dont have the right Access now for (Bug Toolkit) to search on known Software bugs for C7200 12.4(9)T, Please check bellow link and let us know if you find some thing related.

www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl

Regards,

Mohamed

Phillip Remaker · ‎01-12-2011

I think you need IOS 15.1(3)T or later for this capability. CSCta27529.

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCta27529