NexusSwitch

[ja.aljaloud]

Hallo,
i had a Problem with Nexus Switch 93180YC-EX, after I updated to version 9.3.8 ( it had NX-OS Release 7.0(3)I7(3) ) and everything is going ok without the ospf.
The ospf neighbours on outside interface to ISP is down, the switch can’t build more the relationship between the outside interface e1/0/7 and the ISP.
We have one link physical ( int e1/7 ) to service provider and vpn tunnel on the interface vlan 2 (SVI).
with VPN the switch can build the ospf neighbours with isp per int VLAN 2, and now we could communicate with other side, here we don not have problems.
But the interface e1/7 which connect directly to isp ( MPLS ) can’t see more the neighbours and can not build the ospf with other side, even we did not change anything in the configuration.

Note : i did the upgrade in this path : 7.0(3)I7(3) → 7.0(3)I7(10) → 9.3(8)

is this problem because of the upgrade?

thanks in advance 

[balaji.bandi · Accepted solution]

Can you post the configuration of the port :

show run interface eth1/7

show interface eth1/7

show ip ospf interface brief

what is the OSPF Logs ? what state ?

just thinking may be MTU or if any authentication Key issues?

[ja.aljaloud]

show run interface eth1/7

interface Ethernet1/7
description Uplink_Medac
no switchport
ip address 10.205.1.254/24
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 7 151F081B012E2E2868
ip ospf cost 10
no ip ospf passive-interface
no shutdown

ONCNX001# show interface ethernet 1/7
Ethernet1/7 is up
admin state is up, Dedicated Interface
Hardware: 100/1000/10000/25000 Ethernet, address: 00be.75db.17bb (bia 00be.75db.17c2)
Description: Uplink_Medac
Internet Address is 10.205.1.254/24
MTU 1500 bytes, BW 1000000 Kbit , DLY 10 usec
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, medium is broadcast
full-duplex, 1000 Mb/s, media type is 1G
Beacon is turned off
Auto-Negotiation is turned on FEC mode is Auto
Input flow-control is off, output flow-control is off
Auto-mdix is turned off
Rate mode is dedicated
Switchport monitor is off
EtherType is 0x8100
EEE (efficient-ethernet) : n/a
admin fec state is auto, oper fec state is off
Last link flapped 04:46:02
Last clearing of "show interface" counters never
2 interface resets
Load-Interval #1: 30 seconds
30 seconds input rate 688 bits/sec, 0 packets/sec
30 seconds output rate 72 bits/sec, 0 packets/sec
input rate 688 bps, 0 pps; output rate 72 bps, 0 pps
Load-Interval #2: 5 minute (300 seconds)
300 seconds input rate 40 bits/sec, 0 packets/sec
300 seconds output rate 112 bits/sec, 0 packets/sec
input rate 40 bps, 0 pps; output rate 112 bps, 0 pps
RX
8083 unicast packets 2871 multicast packets 0 broadcast packets
10954 input packets 1390154 bytes
0 jumbo packets 0 storm suppression bytes
0 runts 0 giants 0 CRC 0 no buffer
0 input error 0 short frame 0 overrun 0 underrun 0 ignored
0 watchdog 0 bad etype drop 0 bad proto drop 0 if down drop
0 input with dribble 0 input discard
0 Rx pause
TX
391 unicast packets 953 multicast packets 6 broadcast packets
1350 output packets 289454 bytes
0 jumbo packets
0 output error 0 collision 0 deferred 0 late collision
0 lost carrier 0 no carrier 0 babble 0 output discard
0 Tx pause

ONCNX001#

ONCNX001# show ip ospf inter
interface internal
ONCNX001# show ip ospf interface brief
OSPF Process ID 1 VRF default
Total number of interface: 12
Interface ID Area Cost State Neighbors Status
Vlan350 8 51.0.0.0 40 DR 0 up
Vlan344 7 51.0.0.0 40 DR 0 up
Vlan343 6 51.0.0.0 40 DR 0 up
Vlan226 12 51.0.0.0 40 DR 0 up
Vlan224 11 51.0.0.0 40 DR 0 up
Vlan218 10 51.0.0.0 40 DR 0 up
Vlan216 9 51.0.0.0 40 DR 0 up
Vlan14 5 51.0.0.0 40 DR 0 up
Vlan12 4 51.0.0.0 40 DR 0 up
Vlan11 3 51.0.0.0 40 DR 0 up
Vlan10 2 51.0.0.0 40 DR 0 up
Vlan2 1 51.0.0.0 40 BDR 1 up

the problem before i do tthe upgrade, everything was ok and working.

How to check the MTU?

Thanks

[Georg Pauwen]

Hello,

just out of curiosity, how did you resolve this ?

[ja.aljaloud]

sorry i did not resolve it yet....

[Georg Pauwen]

Understood. Keep in mind that if you mark a question as 'resolved', people will assume it actually IS resolved, and will usually not look at the post anymore (other than getting to know HOW it was resolved, obviously)...

[Georg Pauwen]

Debug OSPF:

debug ip ospf

then restart the OSPF service, and post the output.

[ja.aljaloud]

OSCNX002# restart ospf 1
OSCNX002# debug ip ospf 1 all
OSCNX002#

Nothing i seeafter i restart

[ja.aljaloud]

2022 Jan 19 20:08:46 OSCNX002 %OSPF-4-RESTART_SHUTDOWN: ospf-1 [23717] OSPF shutting self down via restart command
2022 Jan 19 20:08:50 OSCNX002 %OSPF-5-ADJCHANGE: ospf-1 [30752] Nbr 192.168.5.4 on Vlan2 went TWOWAY
2022 Jan 19 20:08:50 OSCNX002 %OSPF-5-ADJCHANGE: ospf-1 [30752] Nbr 192.168.5.4 on Vlan2 went FULL
OSCNX002#

[balaji.bandi]

what is the Logs showing and try to enable debug for the OSPF Process and check?

show ip ospf neigh 

[ja.aljaloud]

ONCNX001# sh ip ospf neighbors
OSPF Process ID 1 VRF default
Total number of neighbors: 1
Neighbor ID Pri State Up Time Address Interface
192.168.5.5 1 FULL/DR 05:20:35 192.168.5.5 Vlan2
ONCNX001#

this neighbor is just for vpn on int vlan 2.

[balaji.bandi]

i did not see the process initialized with that interface at all?

time for debug?

[ja.aljaloud]

2022 Jan 19 20:08:46 OSCNX002 %OSPF-4-RESTART_SHUTDOWN: ospf-1 [23717] OSPF shutting self down via restart command
2022 Jan 19 20:08:50 OSCNX002 %OSPF-5-ADJCHANGE: ospf-1 [30752] Nbr 192.168.5.4 on Vlan2 went TWOWAY
2022 Jan 19 20:08:50 OSCNX002 %OSPF-5-ADJCHANGE: ospf-1 [30752] Nbr 192.168.5.4 on Vlan2 went FULL
OSCNX002#

just VPN OSPF comes UP

[balaji.bandi]

Can you dig bit more Logs related to Interface eth 1/7

when you get a maintenance window, shutdown the interface and bring up the interface, also capture the logs and run the OSPF debug to see what messages are you getting, why it failing?

[ja.aljaloud]

Here is the command output :   show logging | in 1/7

SCNX002# sh logging | in 1/7
2022 Jan 19 14:38:19 OSCNX002 %ETHPORT-5-IF_DOWN_NONE: Interface Ethernet1/7 is down (Transceiver Absent)
2022 Jan 19 14:38:19 OSCNX002 %ETHPORT-5-IF_DOWN_NONE: Interface Ethernet1/7 is down (Transceiver Absent)
2022 Jan 19 14:38:34 OSCNX002 %ETHPORT-5-IF_HARDWARE: Interface Ethernet1/7, hardware type changed to 1G
2022 Jan 19 14:38:39 OSCNX002 %ETHPORT-5-SPEED: Interface Ethernet1/7, operational speed changed to 1 Gbps
2022 Jan 19 14:38:39 OSCNX002 %ETHPORT-5-IF_DUPLEX: Interface Ethernet1/7, operational duplex mode changed to Full
2022 Jan 19 14:38:39 OSCNX002 %ETHPORT-5-IF_RX_FLOW_CONTROL: Interface Ethernet1/7, operational Receive Flow Control state changed to off
2022 Jan 19 14:38:39 OSCNX002 %ETHPORT-5-IF_TX_FLOW_CONTROL: Interface Ethernet1/7, operational Transmit Flow Control state changed to off
2022 Jan 19 14:38:40 OSCNX002 %ETHPORT-5-IF_UP: Interface Ethernet1/7 is up in Layer3
2022 Jan 19 14:39:08 OSCNX002 %CDP-5-NEIGHBOR_ADDED: Device TS_UG-11-sw01.medac.de discovered of type cisco WS-C4510R-E with port GigabitEthernet3/15 on incoming port Ethernet1/7 with ip addr 10.205.25.17 and mgmt ip 10
.205.25.17
2022 Jan 19 14:39:09 OSCNX002 %LLDP-5-SERVER_ADDED: Server with Chassis ID c47d.4f73.ef3f Port ID Gi3/15 management address 10.205.25.17 discovered on local port Eth1/7 in vlan 0 with enabled capability Bridge Router
2022 Jan 19 15:07:11 OSCNX002 %ETHPORT-5-IF_DOWN_CFG_CHANGE: Interface Ethernet1/7 is down(Config change)
2022 Jan 19 15:07:11 OSCNX002 %CDP-5-NEIGHBOR_REMOVED: CDP Neighbor TS_UG-11-sw01.medac.de on port Ethernet1/7 has been removed
2022 Jan 19 15:07:11 OSCNX002 %LLDP-5-SERVER_REMOVED: Server with Chassis ID c47d.4f73.ef3f Port ID Gi3/15 on local port Eth1/7 has been removed
2022 Jan 19 15:07:11 OSCNX002 %ETHPORT-5-IF_DOWN_ADMIN_DOWN: Interface Ethernet1/7 is down (Administratively down)
2022 Jan 19 15:07:13 OSCNX002 %ETHPORT-5-IF_ADMIN_UP: Interface Ethernet1/7 is admin up .
2022 Jan 19 15:07:18 OSCNX002 %ETHPORT-5-SPEED: Interface Ethernet1/7, operational speed changed to 1 Gbps
2022 Jan 19 15:07:18 OSCNX002 %ETHPORT-5-IF_DUPLEX: Interface Ethernet1/7, operational duplex mode changed to Full
2022 Jan 19 15:07:18 OSCNX002 %ETHPORT-5-IF_RX_FLOW_CONTROL: Interface Ethernet1/7, operational Receive Flow Control state changed to off
2022 Jan 19 15:07:18 OSCNX002 %ETHPORT-5-IF_TX_FLOW_CONTROL: Interface Ethernet1/7, operational Transmit Flow Control state changed to off
2022 Jan 19 15:07:18 OSCNX002 %ETHPORT-5-IF_UP: Interface Ethernet1/7 is up in Layer3
2022 Jan 19 15:07:30 OSCNX002 %LLDP-5-SERVER_ADDED: Server with Chassis ID c47d.4f73.ef3f Port ID Gi3/15 management address 10.205.25.17 discovered on local port Eth1/7 in vlan 0 with enabled capability Bridge Router
2022 Jan 19 15:08:08 OSCNX002 %CDP-5-NEIGHBOR_ADDED: Device TS_UG-11-sw01.medac.de discovered of type cisco WS-C4510R-E with port GigabitEthernet3/15 on incoming port Ethernet1/7 with ip addr 10.205.25.17 and mgmt ip 10
.205.25.17
OSCNX002#

something with port not correct?!