Hi ismiller, thanks for your assistance.
I connected routers directly and got the same result as You. RouterA gets ARP reply of the RouterB secondary IP address and all works perfectly fine.
Now I'm very confused how a stack of several Cisco 3850 can filter ARP packets in such a way.
... View more
Hello guys! Here is configuration of the ASR1001 interface: ! interface Port-channel1.450 description transport-outside encapsulation dot1Q 450 vrf forwarding WAN-INET-1 ip address X.X.X.10 255.255.255.240 secondary vrf WAN-INET-1 ip address X.X.X.8 255.255.255.240 no ip redirects no ip proxy-arp ip nat outside end I can ping secondary address from primary. RouterA#ping vrf WAN-INET-1 X.X.X.10 so X.X.X.8 Packet sent with a source address of X.X.X.8 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms RouterA#sh arp vrf WAN-INET-1 Protocol Address Age (min) Hardware Addr Type Interface Internet X.X.X.8 - 24e9.b38d.c740 ARPA Port-channel1.450 Internet X.X.X.10 - 24e9.b38d.c740 ARPA Port-channel1.450 RouterA# All seems to be good but router doesn't respond on ARP requests to secondary IP. RouterB#ping X.X.X.8 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to X.X.X.8, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms RouterB#ping X.X.X.10 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to X.X.X.10, timeout is 2 seconds: ..... Success rate is 0 percent (0/5) RouterB#sh arp Protocol Address Age (min) Hardware Addr Type Interface Internet X.X.X.8 7 24e9.b38d.c740 ARPA Port-channel1.450 Internet X.X.X.9 - 24e9.b38d.c840 ARPA Port-channel1.450 Is it a bug or some kind of limitation of ASR1001 platform? RouterA#sh ver Cisco IOS XE Software, Version 03.16.06.S - Extended Support Release Cisco IOS Software, ASR1000 Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S6, RELEASE SOFTWARE (fc3)
... View more