i can't ping sub-interface from C8500L-8S4X to sub-interface NCS540 ,

[Dhikra Marghli]

Hello

i have a :C8500L-8S4X  connect to NCS540-CISCO

so my problem i can't ping sub-interface from this router to sub-interface NCS540 ,

so please how i can resolve this problem that i can ping to sub-interfce point-point NCS540 CISCO

so you wil have configuration C8500L

license udi pid C8500L-8S4X sn FLX261803Y0
memory free low-watermark processor 67727
!
diagnostic bootup level minimal
!
!
redundancy
mode none
!
!
!
cdp run
!
!
!
!
!
--More--  !
interface GigabitEthernet0/0/0
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/1
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/4
no ip address
--More--   shutdown
negotiation auto
!
interface GigabitEthernet0/0/5
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/6
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/7
no ip address
shutdown
negotiation auto
!
interface TenGigabitEthernet0/1/0
no ip address
!
interface TenGigabitEthernet0/1/0.3022
encapsulation dot1Q 3022
--More--   ip address 172.25.40.162 255.255.255.252
!
interface TenGigabitEthernet0/1/1
no ip address
shutdown
!
interface TenGigabitEthernet0/1/2
no ip address
shutdown
!
interface TenGigabitEthernet0/1/3
no ip address
shutdown
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
ip http server
ip http authentication local
ip http secure-server
--More--  ip forward-protocol nd
!
ip tftp source-interface GigabitEthernet0
!
!
!
!
!
control-plane
!
!
line con 0
stopbits 1
line aux 0
line vty 0 4
login
transport input ssh

NCS540===>ip address 172.25.40.161 255.255.255.252

I wait a reply from expert switching 

Thanks

[Ramblin Tech]

It appears that the NCS540 is providing an L2VPN transport service between your Cat8500 CE and the provider's ASR9K PE using a bridge domain starting with "BUSINESS-C$" (the "$" indicating that the rest of the name is truncated). Think of this L2VPN transport as a wire that delivers the ethernet frames unchanged. With the ping from the Cat8500 (172.25.40.162) not working to the A9K (172.25.40.161) the issue can be either with:

 1 - The Cat8500 config

 2 - The NCS540 config

 3 - The ASR9K config

 4 - The actual cables connecting these three elements

Let's start with number #1: Is int teng0/0/1.3022 up/up on the Cat8500? If so, can you ping your own address (172.25.40.162)? If not, troubleshoot the Cat8500; if so, let's move on to #2.

Does the Cat8500's MAC address show up in the MAC addr table for your bridging domain (BUSINESS-C$) after a ping attempt? I am assuming that address learning is configured on the bridge domain, but you might confirm with the operator. If the MAC address is not appearing in the table, does the NCS540 have any L2 control protocols enabled that you can peer with to troubleshoot connectivity problems (eg, CDP/LLDP, CFM, Link OAM)? If so, configure those on your Cat8500 to troubleshoot connectivity problems to the NCS540. If MAC addr learning is enabled and both the Cat8500 and NCS540 are up/up, but the address is not being learned on the 540, you have a basic L2 connectivity problem that you will have to work with the operator to troubleshoot (compare interface counters, span to packet capture, etc).

Post back if all is good L2-wise from the 8500 through the 540 to the 9K, as then the focus should be on L3 troubleshooting.

[Dhikra Marghli]

Hello

I access via telnet  to B-PE ( ASR9K ) so i find :

interface BVI513543022
description INBMI-2023-3761
vrf INBMI
ipv4 address 172.25.40.161 255.255.255.252

so what do you think !!! i edit 8500L or what i can configure that allow ping from 8500 to B-PE CISC !!

i wait your reply !! 

say me what's the command that u can send you to trouble!!!

thanks 

[Dhikra Marghli]

I send you show conf from B-PE ASR9K 

please what's commands  show that allow you to test more 

I wait your reply

Thanks

[Ramblin Tech]

You should establish whether you have working L2 connectivity from the 8500 through the 540 to the 9K. When you try to ping the 9K from the 8500, it will first send out an arp to resolve the 9K's MAC address. This arp packet broadcast should be received and forwarded by the 540 to the 9K. If MAC address learning is enabled on the 540, the 8500's MAC address should show up in the MAC address table for the bridge domain BUSINESS-C; does it? If the 540 used point-to-point x-connect instead of a bridge domain, there would be no address learning, but I believe it is optional with bridge domains and enabled by default. 

Likewise, the bridge-domain should also learn the 9K's MAC address when if/when it responds to the arp. If address learning is enabled for the bridge domain, both the 8500's and the 9K's MAC addresses should be in the address table. If one or both are missing, you probably have an L1 or L2 problem. To troubleshoot that, start with the basics: are all interfaces up/up?

[Dhikra Marghli]

Thanks for your reply 

i find in B-PE ,

Hello

I access via telnet  to B-PE ( ASR9K ) so i find :

interface BVI513543022
description INBMI-2023-3761
vrf INBMI
ipv4 address 172.25.40.161 255.255.255.252

so 

NSC-540-kasbah

interface TenGigE0/0/0/22.3022 l2transport

description INBMI

encapsulation dot1q 3022

rewrite ingress tag pop 1 symmetric

my question what's the configuration  in ME3800 that allow ping from ME3800 to 172.25.40.161 255.255.255.252 !!

Please i wait your reply beacuse operator telecom wait th solution .

Thanks 

[Ramblin Tech]

Where does the ME3800 fit into this? Previously, we were talking about Cat8500 -- NCS540 -- ASR9000.

Also, the l2vpn config provided for the NCS 540 is incomplete, as it is only showing the interface tengig0/0/0/22.3022 attachment circuit. There has to be more to the l2vpn configuration than just this (for example: a bridge domain or x-connect to the attachment circuit to the ASR9K) in order to provide L2 connectivity between the Cat8500 and 9K.

[Dhikra Marghli]

Where does the ME3800 fit into this?

Cat8500 to  --  --> ASR9000 (  B-PE  layer 3 ) . to >----->NCS540  ( layer 2 ) ====>  here is this physical connection

this is this physical connection !! 

i wait your reply

thanks

[Ramblin Tech]

"Cat8500 to -- --> ASR9000 ( B-PE layer 3 ) . to >----->NCS540 ( layer 2 ) ====> here is this physical connection"

I am sorry, but I am not following this topology at all. It appears that the Cat8500 (172.25.40.162) is directly connected to the ASR9K (172.25.40.161). If this is the case, then neither the NCS540 nor the ME3800 are in the path and have no impact on ping traffic. Is this really what was meant to be conveyed?