Skip navigation
Cisco Learning Home > CCIE Routing and Switching Study Group > Discussions
440 Views 7 Replies Latest reply: Apr 29, 2012 2:23 PM by aaceituno RSS

Currently Being Moderated

Help with troubleshooting basic connectivity

Apr 29, 2012 10:44 AM

abioseibi 24 posts since
Jun 24, 2010

This should be a rather simple scenario but couldnt get my head around it.

 

R1 and R2 are connected to SW1 (3560) in the same vlan and subnet but R1 cannot reach R2.

In order to try and isolate the problem I created an SVI for the vlan on SW1 and assigned it an ip add in the same subnet. From R1 i could ping the SVI address and vice-versa but from the SVI i could not ping R2. Making it seem the issue is isolated to between SW1 and R2

 

R1 is able to learn the mac address of R2

All concerned ports on the switch are in STP designated/forwarding state for the vlan

All concerned ports show as connected and assigned to the vlan (no err-disabled or notconnected)

 

I do not have access to R2 ( But as per requirement, if everyting is ok on the devices I have access to, I should be able to reach R2)

 

I looked through each line of the switch config and it is almost basic i.e. there is nothing strange present.

No ACL

No vlan-maps/filters

No private vlans

No SPAN sessions

No STP commands

etc etc

Reloaded both R1 and SW1

 

The one strange thing I noticed which I cant explain is when I do a debug ip icmp on R1 with pings to the SVI i see the icmp request/echo in the debug messages. But when i do a debug ip icmp on R1 and i ping to R2 i do not see icmp request/echo (samething when ping from SW1 to R2). I'm thinking atleast I should see my icmp request going out even if there were some ACL(or anything else blocking) on R2

 

At the end of the day, I am supposed to have a bgp session established between R1 and R2. But with this problem in place, it just remains active.

 

Any insights to what else might be checked on R1 and SW1 to establish this connectivity would be appreciated. (Unfortunately configs not available at this time)

  • Nersas Marin 61 posts since
    Oct 24, 2009
    Currently Being Moderated
    1. Apr 29, 2012 11:05 AM (in response to abioseibi)
    Re: Help with troubleshooting basic connectivity

    Hello, If you don't have the configuration is going to be hard but anyways, I will give you my thoughts after reading your issue.

     

    * Like you said before, getting connectivity from R1 to SW1 (SVI) and viceversa and NO-CONNECTIVITY from/to R2 --> Focus on SW1 & R2. Did you review that the same configuration using on over R1-SW1 is exactly the same in the other side??

     

    * If you don't get it, can you restore R2 to default configuration ?? It would give you all default parameter in the router (even the ones that you cannot see over show-run command).


    * I wouldn't focus on STP because there is no way to get loops in the connections R1-SW1-R2

     

    Just a quick review. Let me know how are you doing and I will be back.

    P.S. The configurations would be great.

  • Nersas Marin 61 posts since
    Oct 24, 2009
    Currently Being Moderated
    3. Apr 29, 2012 11:20 AM (in response to abioseibi)
    Re: Help with troubleshooting basic connectivity

    Sorry, I didn't pay enough attention to the fact that you cannot reach R2. So that, my guess is that you are missing something from the other side that is not letting you get the connectivity. If there is NO WAY that you get the configuration from the other side........ I would try to run debug commands to figure out what is going on. Right now, nothing else is comming to my mind.

  • aaceituno 242 posts since
    Feb 18, 2009
    Currently Being Moderated
    4. Apr 29, 2012 1:03 PM (in response to abioseibi)
    Re: Help with troubleshooting basic connectivity

      Hi.

     

      If you get the arp for R2, then there is L2 connectivity. If you said you cand do ping, you dont get replies, your bgp session stuck in active, then for sure there is an access list in R2 that is blocking all this traffic. I suppose the exercise objetive is test your troubleshooting skills.

     

      So, first think there is a access lists that block everything except BGP tcp connections, and traffic with other destination networks. Check this with a debug ip tcp transactions, you should see there is tcp sessions establishment, but after few seconds this should go down. Then, you have a AS number problem, the R2 router should reject every incoming bgp session, and your R1 router should do the same, because you are not using the right AS number and R1 is configured with other AS. Maybe you have to use the local-as feature in R1 router. How do you get the right AS number, check the logs, and/or do a debug ip bgp events. You will get some ex numbers, that you will have to convert to decimal and get the right AS number.

     

     

       Br

      Alex.

  • aaceituno 242 posts since
    Feb 18, 2009
    Currently Being Moderated
    5. Apr 29, 2012 1:06 PM (in response to abioseibi)
    Re: Help with troubleshooting basic connectivity

      btw, there is something i dont understand about your post, you said you get the R2 arp at R1, but you dont see the icmp requests from R1 to R2. This cant be right, if you have the arp your router will send the icmp request. But if you dont have the ARP you will not be able to send icmp request packets.

      Check your arp, check this points to the right interface, check you dont have the R2 ip address configured in R1 in other interface even as secondary.

     

      Br

      Alex.

  • aaceituno 242 posts since
    Feb 18, 2009
    Currently Being Moderated
    7. Apr 29, 2012 2:23 PM (in response to abioseibi)
    Re: Help with troubleshooting basic connectivity

        On some platforms, the router or switch generated traffic is not able to show on the debugs, usually have to configure a local policy that loop self generated traffic through a loopback interface. Then this traffic is considered transit and will be shown on every debug.

         When you configure the as peer, you will not get any warning or error till the tcp session is establiched. It would be good if you could do the debug ip tcp transactions, or if you configure an input access lists, with a permit tcp any any log, permit ip any any log, this will show if R2 try to connect to R1.

     

       If you have the arp, then problem is a access list at R2. Both R1 and R2 will try to establish the peer relationship on tcp port 179. Check this point. Or you could try to telnet to port 179, if connection opens bgp sessions are allowed, so problem is a access lists that drop icmp traffic.

     

      Br

      Alex.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)