grpc showing tcp port close from connected interface

[mauricioromanini]

Well I am having a problem when triyng to connect to grpc from a directly connected network. The port is showing as close from the pc but i can connect to the grpc service from xr 2 device without a problem. 

I have tried with another interface with different ip configurations but with the same results.

I have replicated a success telenet connection from another router a hop away, directly connected like the topology shown.

Any suggestions?

Thank you very much

show version
Mon Jun 23 10:08:14.952 ART
Cisco IOS XR Software, Version 7.9.21
Copyright (c) 2013-2023 by Cisco Systems, Inc.

Build Information:
Built By : deenayak
Built On : Tue Nov 7 23:51:57 PST 2023
Built Host : iox-ucs-062
Workspace : /auto/srcarchive16/prod/7.9.21/asr9k-x64/ws
Version : 7.9.21
Location : /opt/cisco/XR/packages/
Label : 7.9.21

cisco ASR9K () processor
System uptime is 1 week 4 days 2 hours 29 minutes

show grpc status
Mon Jun 23 10:17:12.022 ART
*************************show gRPC status**********************
---------------------------------------------------------------
transport : grpc
access-family : tcp
TLS : disabled
trustpoint : NotSet
listening-port : 57400
local-connection : disabled
max-request-per-user : 10
max-request-total : 128
max-streams : 32
max-streams-per-user : 32
server name : DEFAULT
vrf-socket-ns-path : global-vrf
min-client-keepalive-interval : 300
_______________________________________________________________
*************************End of showing status*****************

show runn grpc
Mon Jun 23 10:30:56.601 ART
grpc
port 57400
no-tls
!

sho route 10.1.1.250
Mon Jun 23 10:31:29.375 ART

Routing entry for 10.1.1.0/24
Known via "connected", distance 0, metric 0 (connected)
Installed Jun 12 07:40:02.996 for 1w4d
Routing Descriptor Blocks
directly connected, via GigabitEthernet100/0/0/40.120
Route metric is 0
Redist Advertisers:
5 (protoid=5, clientid=13)

show running-config control-plane
Mon Jun 23 10:32:03.244 ART
control-plane
management-plane
inband
interface Bundle-Ether1
allow SNMP peer
address ipv4 10.1.1.0/24
!
!
interface GigabitEthernet100/0/0/40.120
allow SSH
allow SNMP
!
!

show runn inter gigabitEthernet 100/0/0/40.120
Mon Jun 23 10:36:23.503 ART
interface GigabitEthernet100/0/0/40.120
description xxx
mtu 9216
ipv4 address 10.1.1.1 255.255.255.0
encapsulation dot1q 120

[smilstea]

Not sure if this has changed.

"Note that you can use any operational interface for the update-source, with the exception of dot1q-tagged VLAN sub-interfaces (as of IOS XR 6.2)"

https://xrdocs.io/telemetry/tutorials/2017-05-05-mdt-with-grpc-transport-tricks/

Sam

[mauricioromanini]

RP/0/RSP0/CPU0:ROU-00#bash
Tue Jun 24 08:40:16.341 ART
[ROU-00:~]$ netstat -r
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
default * 0.0.0.0 U 0 0 0 fwdintf
172.31.255.254 * 255.255.255.255 UH 0 0 0 fwd_ew

I have a loopback 0 configured so no need for setting source on tpa as the article describes.

[mauricioromanini]

That was one of the first things i've tried. Set up a new interface with a new network connected a laptop and the exact same thing happened. I dont know if it helps but the test and de collector are both connected through a nv satellite. 

As a side note model driven dial out mode works just fine

[MHM Cisco World]

Try this 

Control-plane

Management-plane 

Inband 

Interface all

Allow all 

MHM

[mauricioromanini]

Applied, no luck.

[MHM Cisco World]

Can I see  

show tcp brief

When you direct connect abd when you not direct connect 

MHM

[mauricioromanini]

show tcp brief in 7.9.21 does not list grpc open ports. I have to bash and ss -punta to get this:

From the collector I see nothing

[ROU-00:~]$ ss -punta
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
tcp LISTEN 0 128 :::57400 :::*

This connection is from second xr device (the one that works)

[ROU-00:~]$ ss -punta
Netid State Recv-Q Send-Q Local Address:Port Peer Address:Port
tcp LISTEN 0 128 :::57400 :::* users:(("emsd",pid=9079,fd=561))
tcp ESTAB 0 0 ::ffff:10.1.200.1:57400 ::ffff:10.27.220.2:42212

[MHM Cisco World]

Show grpc  

Can you share this 

MHM

[mauricioromanini]

RP/0/RSP0/CPU0:ROU-00#show grpc
Tue Jun 24 17:53:10.392 ART

Address family : dual
Port : 57400
DSCP : Default
TTL : 64
VRF : global-vrf
Server : enabled
TLS : disabled
TLS mutual : disabled
Trustpoint : none
Certificate Authentication : disabled
TLS v1.0 : disabled
Maximum requests : 128
Maximum requests per user : 10
Maximum streams : 32
Maximum streams per user : 32

TLS cipher suites
Default : none
Enable : none
Disable : none

Operational enable : none
Operational disable : none