vrf Mgmt-vrf (managent) issue

[anton.caldeir]

Hi all, 

-I'm trying to configure a interface loopback under default vrf Mgmt-vrf and the follow log appears:

%IOSXE_MGMTVRF-3-INTF_ATTACH_FAIL: Management VRF attach to mgmt loopback failed
%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback100, changed state to up
%LINK-3-UPDOWN: Interface Loopback100, changed state to up

-The interface loopback 100 is up, but when i ping the router gateway ip off the local network with source address loopback 100, the ping fails:

Switch#ping vrf Mgmt-vrf 192.168.66.1 source loopback 100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.66.1, timeout is 2 seconds:
Packet sent with a source address of 10.255.255.118
.....
Success rate is 0 percent (0/5)

-If i ping without source address, no problem....

Switch#ping vrf Mgmt-vrf 192.168.66.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.66.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/4 m

- NOTE: The router gateway have a static route towards the switch loopback 100, through int gi0/0 of management vrf Mgmt-vrf ... so it is not a routing problem...

««««««««««««««««««««««««««««««««««««««««««««««««««««««««««««««

The Switch is a C9200L-48P-4X with version 17.07.01 

««««««««««««««««««««««««««««««««««««««««««««««««««««««««««««««

I google for the logs... but did not find nothing.. can some one help??

Tanks

Fernando

[Harold Ritter]

Hi @anton.caldeir ,

Can you please provide the output for the following command:

show running | sec vrf

Regards,

[anton.caldeir]

Interesting... not showing any interfaces associated with the vrf:

Switch#sh run | sec vrf
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
vrf forwarding Mgmt-vrf
vrf forwarding Mgmt-vrf

But if i do:

Switch#sh run vrf Mgmt-vrf
Building configuration...

Current configuration : 314 bytes
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
ip address 192.168.66.4 255.255.255.248
!
interface Loopback100
vrf forwarding Mgmt-vrf
ip address 10.255.255.118 255.255.255.255

why this behavior ?

Thanks Harold for the help...

[Harold Ritter]

Hi @anton.caldeir ,

Your configuration looks good.

Can you provide the output for the following command:

show ip route vrf Mgmt-vrf

Regards,

[anton.caldeir]

Routing Table: Mgmt-vrf

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, m - OMP
n - NAT, Ni - NAT inside, No - NAT outside, Nd - NAT DIA
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static
route
H - NHRP, G - NHRP registered, g - NHRP registration summary
o - ODR, P - periodic downloaded static route, l - LISP
a - application route
+ - replicated route, % - next hop override, p - overrides from PfR
& - replicated local route overrides by connected

Gateway of last resort is not set

10.0.0.0/32 is subnetted, 1 subnets
C 10.255.255.118 is directly connected, Loopback100
192.168.66.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.66.0/29 is directly connected, GigabitEthernet0/0
L 192.168.66.4/32 is directly connected, GigabitEthernet0/0

[Harold Ritter · Accepted solution]

Hi @anton.caldeir ,

It definitely looks like a bug. I would go with a non default VRF as a workaround, if that works for you.

Regards,

[paul driver]

Hello

---

@anton.caldeir wrote:

%IOSXE_MGMTVRF-3-INTF_ATTACH_FAIL: Management VRF attach to mgmt loopback failed

---

The default mgt vrf should really only used for a mgt interface it should not be shared with any other interface, if yo crease a non default vrf and assign both of these interfaces a member of that new vrf what result do you get then?

[anton.caldeir]

If i test with a non default vrf everything ok ...