Got it

Cannot ping

Created: May 7, 2020 18:03:30Latest reply: May 11, 2020 20:29:19 1383 35 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi,

I have this topology: CE1-G0/0/0 , G0/0/1----------CE2 G0/0/2,G0/0/3-------------------G0/0/2,G0/0/3-----CE3 G1/0/1-------------G0/0/1 R

CE1 Config

interface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp-static

#

interface GE1/0/0
 undo shutdown
 eth-trunk 1
#
interface GE1/0/1
 undo shutdown
 eth-trunk 1

interface LoopBack1
 ip address 114.1.1.1 255.255.255.0

interface Vlanif10
 ip address 172.16.1.100 255.255.255.0
#
interface Vlanif20
 ip address 172.16.2.100 255.255.255.0

#

ip route-static 0.0.0.0 0.0.0.0 172.16.1.1


---------------------------------

CE2 Config

interface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp-static
#
interface Eth-Trunk2
 port link-type trunk
 port trunk allow-pass vlan 10 20
 mode lacp-static

#

interface GE1/0/0
 undo shutdown
 eth-trunk 1
#
interface GE1/0/1
 undo shutdown
 eth-trunk 1

#

interface GE1/0/2
 undo shutdown
 eth-trunk 2
#
interface GE1/0/3
 undo shutdown
 eth-trunk 2

#

interface Vlanif10
 ip address 172.16.1.101 255.255.255.0
#

interface Vlanif20
 ip address 172.16.2.101 255.255.255.0

#

ip route-static 0.0.0.0 0.0.0.0 172.16.1.1


-------------------------------------------

CE3 Config

interface Eth-Trunk2
 undo portswitch
 mode lacp-static

#

interface Eth-Trunk2.1
 ip address 172.16.1.1 255.255.255.0
 dot1q termination vid 10
#
interface Eth-Trunk2.2
 ip address 172.16.2.1 255.255.255.0

dot1q termination vid 20

#

interface GE1/0/1
 undo portswitch
 undo shutdown
 ip address 172.19.1.1 255.255.255.0

#

ip route-static 0.0.0.0 0.0.0.0 172.19.1.4
ip route-static 114.1.1.0 255.255.255.0 172.16.1.100


----------------------------------------

Config R1

interface GigabitEthernet0/0/1
 ip address 172.19.1.4 255.255.255.0

#

interface LoopBack0
 ip address 113.1.1.1 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 172.19.1.1

#


From R1 I cannot ping 172.16.1.100, 172.16.1.101,172.16.2.100, 172.16.2.101.

Although I can ping 172.16.1.1 & 172.16.2.1, I think something wrong in the arp in the CE3 for the sub-interface eth-trunk2.1 & 2.2.

And also from R1 I cannot ping 114.1.1.1.

Featured Answers
Popeye_Wang
Admin Created May 11, 2020 08:31:19

Hi,
Your configuration is fine. I guess this is due to the immature simulation function on eNSP.
If you encounter the same problem on a real device, please contact the TAC to locate the fault.
https://e.huawei.com/en/branch-office-query

View more
  • x
  • convention:

Sapte
Sapte Created May 11, 2020 20:31:31 (0) (0)
Configuration is wrong.....vlan terminated layer 3 interface and trunk configured layer2 interface how can work together on layer 2 domain if there is a broadcast packet ?

Please delete your answer to not redirect people in wrong way...and please check my solution  
Sapte
Sapte Created May 11, 2020 20:48:12 (0) (0)
Actually maybe you are right.....i aggree your solution in the below to change interfaces form layer 3 to layer 2 it worked....i'm even in suspicious even though i simulated on eNSP.....OMGGG... :))  
Popeye_Wang
Popeye_Wang Reply Sapte  Created May 12, 2020 06:43:28 (0) (0)
I also made an experiment on eNSP. The Layer 3 sub-interface of the CE should broadcast ARP packets by default. However, the wireshark shows that the packets are discarded after reaching CE3. Use the same configuration to replace CE3 with a router. (add the arp broadcast enable command), the problem does not occur. Alternatively, replace Eth-Trunk2 between CE2 and CE3 with a physical interface, it's work fine too. So I said there is no problem with the configuration. May just cause by eNSP..... 
Waleed.Farouk
Waleed.Farouk Reply Sapte  Created May 19, 2020 20:30:40 (0) (0)
@Sapte ,,,I am right ,,,,please review again the solution ,,it is a concept to make L3 sub-interfaces ,,please you need to review your concept again  
Waleed.Farouk
Waleed.Farouk Reply Popeye_Wang  Created May 19, 2020 20:33:41 (0) (0)
@popeye ,,Right ,,I I did before with the router and I added the command arp broadcast enable because by default the router prevent the broadcast under the subinterface and worked and my question why it is worked with the router and it doesnt work with the switch and it is the same concept  
Waleed.Farouk
Waleed.Farouk Reply Popeye_Wang  Created May 19, 2020 20:47:21 (0) (0)
I would like to add point ,,the command arp broadcast enable doesnt available in the sub-interface trunk in the switch although it is available in the sub-interface eth-trunk in the router  
All Answers
CE1 Config
---------------
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static

interface GE1/0/0
undo shutdown
eth-trunk 1
#
interface GE1/0/1
undo shutdown
eth-trunk 1
interface LoopBack1
ip address 114.1.1.1 255.255.255.0

interface Vlanif10
ip address 172.16.1.100 255.255.255.0
#
interface Vlanif20
ip address 172.16.2.100 255.255.255.0
ip route-static 0.0.0.0 0.0.0.0 172.16.1.1

------------------------
CE2 Config

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static
#
interface Eth-Trunk2
port link-type trunk
port trunk allow-pass vlan 10 20
mode lacp-static

interface GE1/0/0
undo shutdown
eth-trunk 1
#
interface GE1/0/1
undo shutdown
eth-trunk 1

interface GE1/0/2
undo shutdown
eth-trunk 2
#
interface GE1/0/3
undo shutdown
eth-trunk 2

interface Vlanif10
ip address 172.16.1.101 255.255.255.0
#
interface Vlanif20
ip address 172.16.2.101 255.255.255.0

ip route-static 0.0.0.0 0.0.0.0 172.16.1.1

-----------------------------
CE3 Config

interface Eth-Trunk2
undo portswitch
mode lacp-static

interface Eth-Trunk2.1
ip address 172.16.1.1 255.255.255.0
dot1q termination vid 10
#
interface Eth-Trunk2.2
ip address 172.16.2.1 255.255.255.0
dot1q termination vid 20

interface GE1/0/1
undo portswitch
undo shutdown
ip address 172.19.1.1 255.255.255.0

ip route-static 0.0.0.0 0.0.0.0 172.19.1.4
ip route-static 114.1.1.0 255.255.255.0 172.16.1.100

----------------------------------------
Config R1

interface GigabitEthernet0/0/1
ip address 172.19.1.4 255.255.255.0

interface LoopBack0
ip address 113.1.1.1 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 172.19.1.1

From R1 i can not ping 172.16.1.100 , 172.16.1.101 ,172.16.2.100 , 172.16.2.101 although i can ping 172.16.1.1 & 172.16.2.1 ,,,

i thing something wrong in the arp table in the CE3 for the sub-interface eth-trunk2.1 & 2.2 because the command arp broadcast enable command not available to apply it in these sub-interfaces

And also from R1 i can not ping 114.1.1.1
View more
  • x
  • convention:

CE1------ G0/0/0 , G0/0/1 ------CE2------- G0/0/2,G0/0/3 ----CE3 G1/0/1 ------------- G0/0/1 R

CE1 Config
---------------
interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static

interface GE1/0/0
undo shutdown
eth-trunk 1
#
interface GE1/0/1
undo shutdown
eth-trunk 1
interface LoopBack1
ip address 114.1.1.1 255.255.255.0

interface Vlanif10
ip address 172.16.1.100 255.255.255.0
#
interface Vlanif20
ip address 172.16.2.100 255.255.255.0
ip route-static 0.0.0.0 0.0.0.0 172.16.1.1

------------------------
CE2 Config

interface Eth-Trunk1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static
#
interface Eth-Trunk2
port link-type trunk
port trunk allow-pass vlan 10 20
mode lacp-static

interface GE1/0/0
undo shutdown
eth-trunk 1
#
interface GE1/0/1
undo shutdown
eth-trunk 1

interface GE1/0/2
undo shutdown
eth-trunk 2
#
interface GE1/0/3
undo shutdown
eth-trunk 2

interface Vlanif10
ip address 172.16.1.101 255.255.255.0
#
interface Vlanif20
ip address 172.16.2.101 255.255.255.0

ip route-static 0.0.0.0 0.0.0.0 172.16.1.1

-----------------------------
CE3 Config

interface Eth-Trunk2
undo portswitch
mode lacp-static

interface Eth-Trunk2.1
ip address 172.16.1.1 255.255.255.0
dot1q termination vid 10
#
interface Eth-Trunk2.2
ip address 172.16.2.1 255.255.255.0
dot1q termination vid 20

interface GE1/0/2
undo shutdown
eth-trunk 2

interface GE1/0/3
undo shutdown
eth-trunk 2

interface GE1/0/1
undo portswitch
undo shutdown
ip address 172.19.1.1 255.255.255.0

ip route-static 0.0.0.0 0.0.0.0 172.19.1.4
ip route-static 114.1.1.0 255.255.255.0 172.16.1.100

----------------------------------------
Config R1

interface GigabitEthernet0/0/1
ip address 172.19.1.4 255.255.255.0

interface LoopBack0
ip address 113.1.1.1 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 172.19.1.1

From R1 i can not ping 172.16.1.100 , 172.16.1.101 ,172.16.2.100 , 172.16.2.101 although i can ping 172.16.1.1 & 172.16.2.1 ,,,

i thing something wrong in the arp table in the CE3 for the sub-interface eth-trunk2.1 & 2.2 because the command arp broadcast enable command not available to apply it in these sub-interfaces

And also from R1 i can not ping 114.1.1.1

Something wrong in CE3 , Any one can help
View more
  • x
  • convention:

Hello,
Can you upload a topology picture?
View more
  • x
  • convention:

Waleed.Farouk
Waleed.Farouk Created May 8, 2020 14:32:01 (0) (0)
I uploaded  
ping 172.16.1.100,172.16.1.101,172.16.2.100,172.16.2.101 from CE3,can you?
then show arp table and paste here.
View more
  • x
  • convention:

Waleed.Farouk
Waleed.Farouk Created May 8, 2020 14:31:44 (0) (0)
From CE3 , I can ping 172.16.1.100, 172.16.2.100. 172.16.1.101 , 172.16.2.101

But from the router i can not ping them

I can ping from the router 172.16.1.1 , 172.16.2.1

I think the problem in the CE3 can not route the traffic but why ?  
niuhai211
niuhai211 Reply Waleed.Farouk  Created May 9, 2020 08:37:45 (0) (0)
display arp table on ce3 and paste here.
use wireshark capture packet on link ce3 to r and ce3 to ce2.  
Hello,
The problem should not be caused by the arp broadcast. I guess it may be caused by the use of Eth-Trunk as a one-armed route. Try to replace the Eth-Trunk2 between CE2 and CE3 with a single interface.
View more
  • x
  • convention:

Hi,
If the one armed eth-trunk between the CE2 and CE3 and make L3 sub-eth-trunk in the CE3 are wrong ?

As the Huawei technical doc. I can male L3 sub-ethernet with specific vlan tag
Please advise
View more
  • x
  • convention:

https://support.huawei.com/enterprise/en/doc/EDOC1100074758/24ad7c80/configuring-an-eth-trunk-layer-3-sub-interface

As the Huawei technical doc. I can make L3 sub-ethernet with specific vlan tag
View more
  • x
  • convention:

Topology


View more
  • x
  • convention:

Posted by niuhai211 at 2020-05-08 02:21ping 172.16.1.100,172.16.1.101,172.16.2.100,172.16.2.101 from CE3,can you?then show arp table and pa ...

From CE3 , I can ping 172.16.1.100, 172.16.2.100. 172.16.1.101 , 172.16.2.101

But from the router i can not ping them

I can ping from the router 172.16.1.1 , 172.16.2.1

I think the problem in the CE3 can not route the traffic but why ?


View more
  • x
  • convention:

niuhai211
niuhai211 Created May 9, 2020 08:43:47 (0) (0)
display fib
display arp
and paste the output hrere.  
Waleed.Farouk
Waleed.Farouk Reply niuhai211  Created May 9, 2020 09:13:11 (0) (0)
[~CE3]dis arp
ARP Entry Types: D - Dynamic, S - Static, I - Interface, O - OpenFlow
EXP: Expire-time

IP ADDRESS MAC ADDRESS EXP(M) TYPE/VLAN INTERFACE VPN-INSTANCE
------------------------------------------------------------------------------
172.16.1.1 707b-e88d-21ca I Vlanif10
172.16.1.100 707b-e89c-0b43 7 D/10 Eth-Trunk2
172.16.1.101 707b-e888-4e1f 6 D/10 Eth-Trunk2
172.16.2.1 707b-e88d-21ca  
niuhai211
niuhai211 Reply Waleed.Farouk  Created May 10, 2020 00:21:31 (0) (0)
there is no problem with arp table,
paste routing table and fib table here again.  
123
Back to list

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.