CSR1000v to 3750 cant ping and ARP incomplete on one side.

[leafar1988]

Hello , i have a lab environment at home and i am running csr1000v's on an ESXi host and i have them connected to a physical switch, they see each other via CDP so that isn't a problem.

From R1 (CSR1000v) i have a sub interface g2.10 with dot1q 10 going to the switch which i configured an SVI interface vlan 10 in the same subnet as the sub interface on R1. And I cant get them to ping successfully. On the switch, R1's mac/arp entry shows up properly but from R1's perspective its ARP entry for the switch shows incomplete. Can anyone give me advice on how to get this going or what im missing? I followed an INE video exactly and I cant get it to work. Not sure why I cant get the pings going.

Thanks.

[Georg Pauwen]

Hello,

post the configs of both devices...

[leafar1988]

Okay here are the configs and ARP debugs for devices switch 2 (10.0.0.14/24) and router 1's Gig2.10 (10.0.0.20/24). I omitted items so its not so much to go through but here is the main config. Just to clarify they see each other via CDP but ARP entry on R1 shows incomplete thus ping fails.

———————————————————


!
hostname R1
no ip domain lookup
!
!
!
ipv6 unicast-routing
!
!
spanning-tree extend system-id
!
username admin privilege 15 password 0 cisco
!
redundancy
 mode none
!
!
!
!
!
cdp run
!
!
interface GigabitEthernet2
 no ip address
 negotiation auto
 cdp enable
!
interface GigabitEthernet2.10
 encapsulation dot1Q 10
 ip address 10.0.0.20 255.255.255.0
 cdp enable
!
!
!
!
virtual-service csr_mgmt
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
!
!
!
control-plane
!
!
end


———————————

R1#ping 10.0.0.14
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.14, timeout is 2 seconds:

IP ARP: creating incomplete entry for IP address: 10.0.0.14 interface GigabitEthernet2.10
IP ARP: sent req src 10.0.0.20 000c.2970.f695,
                 dst 10.0.0.14 0000.0000.0000 GigabitEthernet2.10
IP ARP rep filtered src 10.0.0.14 0021.55ef.d041, dst 10.0.0.20 000c.2970.f695 wrong cable, interface GigabitEthernet2.
RARP: Rcvd RARP req for 000c.295e.b333
IP ARP throttled out the ARP Request for 10.0.0.14
RARP: Rcvd RARP req for 000c.29f0.b31d.
RARP: Rcvd RARP req for 000c.2961.3fd1
IP ARP: sent req src 10.0.0.20 000c.2970.f695,
                 dst 10.0.0.14 0000.0000.0000 GigabitEthernet2.10
IP ARP rep filtered src 10.0.0.14 0021.55ef.d041, dst 10.0.0.20 000c.2970.f695 wrong cable, interface GigabitEthernet2
RARP: Rcvd RARP req for 000c.291d.49bf.
RARP: Rcvd RARP req for 000c.2961.3fe5
IP ARP: sent req src 10.0.0.20 000c.2970.f695,
                 dst 10.0.0.14 0000.0000.0000 GigabitEthernet2.10
IP ARP rep filtered src 10.0.0.14 0021.55ef.d041, dst 10.0.0.20 000c.2970.f695 wrong cable, interface GigabitEthernet2.
RARP: Rcvd RARP req for 000c.2919.66f6
RARP: Rcvd RARP req for 000c.2919.660a
IP ARP: sent req src 10.0.0.20 000c.2970.f695,
                 dst 10.0.0.14 0000.0000.0000 GigabitEthernet2.10
IP ARP rep filtered src 10.0.0.14 0021.55ef.d041, dst 10.0.0.20 000c.2970.f695 wrong cable, interface GigabitEthernet2
Success rate is 0 percent (0/5)

------------------------------------------------------------------

Switch 2

SW2#sh run brie
Building configuration..
!
hostname SW2
!
boot-start-marker
boot-end-marker
!
logging buffered warnings
!
no aaa new-model
switch 1 provision ws-c3750e-48pd
system mtu routing 1500
ip routing
no ip cef optimize neighbor resolution
!         
!
no ip domain-lookup
vtp domain ABC
vtp mode transparent
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
spanning-tree vlan 1-4094 priority 16384
!
vlan internal allocation policy ascending
!
vlan 10
!
interface FastEthernet0
 no ip address
 no ip route-cache
!         
!
interface GigabitEthernet1/0/48
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
!
interface Vlan1
 no ip address
!
interface Vlan10
 ip address 10.0.0.14 255.255.255.0
!
ip http server
ip http secure-server
!
!
!
!
!
line con 0
 logging synchronous
line vty 0 4
 login
line vty 5 15
 login
!
mac address-table notification change
mac address-table notification mac-move
mac address-table static 0c4d.e9d4.bf10 vlan 1 interface GigabitEthernet1/0/1
end


———————————————
*Switch 2's ARP debug while R1 tried to ping it

SW2#
IP ARP: arp_process_request: 10.0.0.20, hw: 000c.2970.f695; rc: 3
IP ARP: rcvd req src 10.0.0.20 000c.2970.f695, dst 10.0.0.14 Vlan10
IP ARP: ignored gratuitous arp src 10.0.0.20 000c.2970.f695, dst 10.0.0.14 0021.55ef.d041, interface Vlan10
IP ARP: creating entry for IP address: 10.0.0.20, hw: 000c.2970.f695
IP ARP: creating entry for IP address: 10.0.0.20, hw: 000c.2970.f695
IP ARP: sent rep src 10.0.0.14 0021.55ef.d041,
                 dst 10.0.0.20 000c.2970.f695 Vlan10
SW2#
IP ARP: arp_process_request: 10.0.0.20, hw: 000c.2970.f695; rc: 3
IP ARP: rcvd req src 10.0.0.20 000c.2970.f695, dst 10.0.0.14 Vlan10
IP ARP: sent rep src 10.0.0.14 0021.55ef.d041,
                 dst 10.0.0.20 000c.2970.f695 Vlan10
SW2#
IP ARP: arp_process_request: 10.0.0.20, hw: 000c.2970.f695; rc: 3
IP ARP: rcvd req src 10.0.0.20 000c.2970.f695, dst 10.0.0.14 Vlan10
IP ARP: sent rep src 10.0.0.14 0021.55ef.d041,
                 dst 10.0.0.20 000c.2970.f695 Vlan10
SW2#
IP ARP: arp_process_request: 10.0.0.20, hw: 000c.2970.f695; rc: 3
IP ARP: rcvd req src 10.0.0.20 000c.2970.f695, dst 10.0.0.14 Vlan10
IP ARP: sent rep src 10.0.0.14 0021.55ef.d041,
                 dst 10.0.0.20 000c.2970.f695 Vlan10
SW2#
RARP: Rcvd RARP req for 000c.2970.f695

[leafar1988]

I have read at least one other thread with this specific issue when it comes to connecting physical hardware to the CSR1000v's.

Any ideas? I posted the configs hope that helps.

[balaji.bandi]

adding to otehr post, can you check the interface security config, (Configuring promiscuous mode)

https://kb.vmware.com/s/article/1004099

[leafar1988]

Hi thanks for the link. I checked it out and I enabled promiscuous mode and it still didnt help.

[balaji.bandi]

Can you post vSwitch screen shot how you have tagged vlans against interfaces.

[leafar1988]

Here is my vSwitch. All CSR's are connected to it and the vmnic1 is bound to my NIC going to the physical 3750. all vlans are allowed