cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2722
Views
10
Helpful
14
Replies

C9300 ISIS redistribute connected not working

Frank Osberg
Level 4
Level 4

Hi guys,

 

I have to replace two old c6500 with two new C9300 switches in my DC.

 

My old C6500 is running ISIS config up against our Nexus 7k and that work like a charm.

 

My new C9300 also runs ISIS config up against our Nexus 7k and the ISIS is comming up all is good, but my connected switches, interface vlan is not been redistributed to our Nexus 7K.

 

From the the 7K I can ping the interface vlan on my C9300, but I cannot ping the next switch behind the C9300.

 

From the C9300 I can ping all switches there is connected to it.

 

I have compared config from the my C6500 to my C9300 and they are more or less look the same.

 

My ISIS config from C6500:

 

router isis 1
 net 49.6600.0010.0255.0011.0239.00
 is-type level-2-only
 authentication mode md5 level-2
 authentication key-chain SOLAR level-2
 metric-style wide
 set-overload-bit on-startup 30
 no hello padding point-to-point
 redistribute connected
 passive-interface default
 no passive-interface TenGigabitEthernet1/1/8

 

My ISIS Config from C9300:

 

router isis 1
 net 49.6600.0010.0255.0011.0240.00
 is-type level-2-only
 authentication mode md5 level-2
 authentication key-chain SOLAR level-2
 metric-style wide
 set-overload-bit on-startup 30
 no hello padding point-to-point
 redistribute connected
 passive-interface default
 no passive-interface TenGigabitEthernet1/1/1
 no passive-interface TenGigabitEthernet2/1/1

 

Interface config from C6500:

 description *** dc2-core-01 ***
 no switchport
 mtu 9216
 ip address 10.255.10.89 255.255.255.252
 ip router isis 1
 wrr-queue bandwidth 1 25 4 10 10 10 10
 wrr-queue queue-limit 10 25 10 10 10 10 10
 wrr-queue random-detect min-threshold 1 80 100 100 100
 wrr-queue random-detect min-threshold 2 80 100 100 100
 wrr-queue random-detect min-threshold 3 70 80 90 100
 wrr-queue random-detect min-threshold 4 70 80 90 100
 wrr-queue random-detect min-threshold 5 70 80 90 100
 wrr-queue random-detect min-threshold 6 70 80 90 100
 wrr-queue random-detect min-threshold 7 60 70 80 90
 wrr-queue random-detect max-threshold 1 100 100 100 100
 wrr-queue random-detect max-threshold 2 100 100 100 100
 wrr-queue random-detect max-threshold 3 80 90 100 100
 wrr-queue random-detect max-threshold 4 80 90 100 100
 wrr-queue random-detect max-threshold 5 80 90 100 100
 wrr-queue random-detect max-threshold 6 80 90 100 100
 wrr-queue random-detect max-threshold 7 70 80 90 100
 wrr-queue random-detect 4
 wrr-queue random-detect 5
 wrr-queue random-detect 6
 wrr-queue random-detect 7
 wrr-queue dscp-map 1 1 1 2 3 4 5 6 7 8
 wrr-queue dscp-map 1 1 9 11 13 15 17 19 21 23
 wrr-queue dscp-map 1 1 25 27 29 31 33 39 41 42
 wrr-queue dscp-map 1 1 43 44 45 47
 wrr-queue dscp-map 2 1 0
 wrr-queue dscp-map 3 1 14
 wrr-queue dscp-map 3 2 12
 wrr-queue dscp-map 3 3 10
 wrr-queue dscp-map 4 1 22
 wrr-queue dscp-map 4 2 20
 wrr-queue dscp-map 4 3 18
 wrr-queue dscp-map 5 1 30 35 37
 wrr-queue dscp-map 5 2 28
 wrr-queue dscp-map 5 3 26
 wrr-queue dscp-map 6 1 38 49 50 51 52 53 54 55
 wrr-queue dscp-map 6 1 57 58 59 60 61 62 63
 wrr-queue dscp-map 6 2 36
 wrr-queue dscp-map 6 3 34
 wrr-queue dscp-map 7 1 16
 wrr-queue dscp-map 7 2 24
 wrr-queue dscp-map 7 3 48
 wrr-queue dscp-map 7 4 56
 priority-queue dscp-map 1 32 40 46
 mls qos trust dscp
 isis circuit-type level-2-only
 isis network point-to-point
 isis authentication mode md5
 isis authentication key-chain SOLAR
 no isis hello padding
 isis csnp-interval 10 level-2
 service-policy output PM-QOS-MARKING
end

 

 

Interface config from my C9300:

 

 description # dc2-core-01 | E1/14 #
 no switchport
 ip address 10.255.10.129 255.255.255.252
 ip router isis 1
 isis circuit-type level-2-only
 isis network point-to-point
 isis authentication mode md5
 isis authentication key-chain SOLAR
 no isis hello padding always
 isis csnp-interval 10 level-2
 service-policy output PM-QOS-MARKING
end

 

Anybody there has come great ideas on how to fix this?? :)

 

Frank

1 Accepted Solution

Accepted Solutions

Alright I got the issue fixed today with TAC. :) 

 

It was so simple that I did not even think that thought.... :) I was missing ip routing in the config.... Ups.. 

View solution in original post

14 Replies 14

Rick1776
Level 5
Level 5
Try without the authentication keys

Hi Rick, 

 

What should that Help? Just so i understand what the impact can be here. ☺ 

I just use that as a first step. Not saying it will do anything. In the past I have run into several issues with different platforms and routing auth.

But just to jeep in mind that i have ISIS running and the routing table is been exchanged from the nexus 7k

Weird, has to be some weird bug with the new CatN9K.

Rick1776
Level 5
Level 5

Is the MTU setting the same on the CaT 9K

I just correct the MTU in both ends so they are mtu 9198, but that did not change anything.

Cannot still not ping anything there is conneted to the C9300.

New config:

N7:
interface Ethernet1/14
description *** dc2-gitdst-02 ***
mtu 9198
medium p2p
service-policy type qos input PM-QOS-INGRESS-ETHERNET-MARKING
service-policy type queuing output PM-QOS-M-QUEUING-EGRESS
no ip redirects
ip address 10.255.10.130/30
ip router isis 1
no isis hello-padding always
isis circuit-type level-2
isis authentication-type md5
isis authentication key-chain SOLAR
isis bfd disable
no shutdown

Removing the key don´t think will help, since the ISIS is up and run.

N7k:
dc2-gitdst-02 N/A 2 UP 00:00:32 Ethernet1/14 <-- is the C9300.

Time to call TAC.

Year think you are right... I have to look at that tonight :) 

You know I was thinking, what if you configure another IGP like EIGRP (lower ad) with a very simple configuration and see if that works.

Alright I got the issue fixed today with TAC. :) 

 

It was so simple that I did not even think that thought.... :) I was missing ip routing in the config.... Ups.. 

Thanks for sharing. Was it a feature that you needed to add to the CAT 9300's?

Year I just needed to put ip routing in my global mode config, if that is not there, it wont route the traffic. :)

Thanks for sharing
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: