Cover Route prefix-length is same with subscriber prefix-leng when ipsubscriber ipv4 routed initiator unclassified-ip
Background: planned to replace operating ISG with BNG when working with ipv4 routed subscribers. BNG doesn't work!
Problem: The address assigned on the interface via DHCP proxy/BNG DHCP server does not allow creating a subscriber interface upon arrival of a packet from this address. When switching to another vrf, the interface is created, but there is no routing. What can be done?
type ipsubscriber FREERADIUS vrf NAT accounting aaa list radius type session periodic-interval 1 ipv4 verify unicast source reachable-via rx ipv4 unnumbered Bundle-Ether2.95
sho dhcp ipv4 server bind Lease MAC Address IP Address State Remaining Interface VRF Sublabel -------------- -------------- --------- --------- ------------------- --------- ---------- 5254.006e.e13c 10.223.128.3 BOUND 45 BE1001.1133 NAT 0x0
sho ip route vrf NAT
S* 0.0.0.0/0 [1/0] via 10.254.254.254, 05:55:08 S 10.0.0.0/8 [1/0] via 10.11.34.254, 02:22:33 C 10.11.34.0/24 is directly connected, 02:22:33, Bundle-Ether1001.1134 L 10.11.34.252/32 is directly connected, 02:22:33, Bundle-Ether1001.1134 C 10.222.128.0/18 is directly connected, 02:28:26, Loopback222 L 10.222.128.1/32 is directly connected, 02:28:26, Loopback222 A 10.223.128.3/32 is directly connected, 00:00:30, Bundle-Ether1001.1133 C 10.254.254.0/24 is directly connected, 05:55:08, Bundle-Ether2.95 L 10.254.254.4/32 is directly connected, 05:55:08, Bundle-Ether2.95
class-map type control subscriber match-any ISG-IP match source-address ipv4 10.0.0.0 255.0.0.0 end-class-map ! ! policy-map type control subscriber IPoE-DHCP event session-start match-first class type control subscriber ISG-IP do-until-failure 5 activate dynamic-template FREERADIUS 10 authorize aaa list radius identifier source-address-ipv4 password cisco
event Session-Start match-first [at 1617867836] class type control subscriber ISG-IP do-until-failure [Succeeded] 5 activate dynamic-template FREERADIUS [cerr: No error][aaa: Success] 10 authorize aaa list radius [cerr: No error][aaa: Success]
sho subscr manager disconnect-history last
[ IEDGE DISCONNECT HISTORY LAST SESSIONS ]
Disconnect Reason: IP Subscriber session create failure ( Cover Route prefix-length is same with subscriber prefix-leng Disconnect Cause: AAA_DISC_CAUSE_DEFAULT (0) Abort Cause: AAA_AV_ABORT_CAUSE_NO_REASON (0) Terminate Cause: AAA_AV_TERMINATE_CAUSE_NAS_ERROR (9) Time Disconnected: 2021:04:08 18:24:58 Client: ipsub_ma Subscriber Label: 0x0000007c Interface: No
L 10.222.128.1/32 is directly connected, 00:01:07, Loopback224 A 10.223.128.3/32 [2/0] 00:00:17, Bundle-Ether1001.1133.ip257 C 10.254.254.0/24 is directly connected, 00:01:57, Bundle-Ether2.95 L 10.254.254.4/32 is directly connected, 00:01:57, Bundle-Ether2.95 L 184.108.40.206/32 is directly connected, 1w6d, Loopback2
sho ipsubscriber int
Interface: Bundle-Ether1001.1133.ip259 Type: Routed Access Interface: Bundle-Ether1001.1133 Subscriber IPv4: 10.223.128.3 Subscriber Label: 0x52 IPv4 Initiator: Packet-Trigger VLAN ID: outer 15 inner 1133 Created: Apr 8 19:15:31 (age 00:00:13) VRF: MAGLAN, IPv4 Table: default IPv4 State: Up (old: Adjacency added) Last state change: Apr 8 19:15:33 (00:00:11 in current state)
IOS-XR MPLS TE Auto Tunnel Backup Bandwidth Protection Current Implementation of MPLS TE Auto Tunnel BackupPotential issue with current implementation of MPLS TE auto tunnel backupEnhancement to MPLS TE auto backup in IOS XR 7.5.1Supported HardwareConfig ...
we are trying to monitor the Cisco 9148s SFP status, and have get the Sensor's dBm value from the CISCO-ENTITY-SENSOR-MIB table, meanwile , it has an Index value like "30000xxxx",such as "30001773", entsensorValueTable but we can't sure how to l...
Check out our latest release on Cisco Routed Optical Networking solution. Listen: https://smarturl.it/CCRS8E24Follow us: https://twitter.com/ciscochampion Disruptive network transformation may only happen once a decade. First movers c...
BGP flowspec in a nutshell is a feature that will allow you to receive IPv4/IPv6 traffic flow specification (source X, destination Y, protocol UDP, source port A .. etc) and actions that need to be taken on that traffic (drop, or polic...
In EVPN A/A + IRB both PE in same EVI have BVI playing a default GW role. Its not supported to have BVI to be shutdown on one of PEs, In this case if if traffic hit this PE with DMAc equal to BVI Custom MAC, then it will drop this traffic du...