Salut,

Am ajuns la vrf-uri, imi functioneaza doar ca in momentul cand vreau
sa fac un inter-vrf routing packetele ce se duc prin alt vrf nu-mi
raspund, daca ma uit prin tcpdump pare in regula. Nu stiu daca
inter-vrf routing functioneaza cand packetele sunt generate local.
Ceva idei?


Ping from green to 172.29.62.100 -> OK

ping 172.29.62.100 -w 1 -O -D -I green
ping: Warning: source address might be selected on device other than green.
PING 172.29.62.100 (172.29.62.100) from 10.104.255.30 green: 56(84)
bytes of data.
[1617780221.851663] 64 bytes from 172.29.62.100: icmp_seq=1 ttl=63 time=1.25 ms

--- 172.29.62.100 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 1.254/1.254/1.254/0.000 ms

Tcpdump:
tcpdump -ttni green
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on green, link-type EN10MB (Ethernet), capture size 262144 bytes
1617780221.849920 IP 10.104.255.30 > 172.29.62.100: ICMP echo request,
id 936, seq 1, length 64
1617780221.851170 IP 172.29.62.100 > 10.104.255.30: ICMP echo reply,
id 936, seq 1, length 64

ip ro ls vrf green
10.104.255.28/30 dev eth0.10 proto kernel scope link src 10.104.255.30
172.29.62.100 via 10.104.255.29 dev eth0.10

----------

ip ro ls vrf red
10.104.255.50/30 dev eth0.10 proto kernel scope link src 10.104.255.50
default dev green

Ping from red to 172.29.62.100 -> Failed
ping 172.29.62.100 -w 1 -O -D -I red
ping: Warning: source address might be selected on device other than red.
PING 172.29.62.100 (172.29.62.100) from 10.104.255.30 red: 56(84) bytes of data.

--- 172.29.62.100 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms

tcpdump -ttni green
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on green, link-type EN10MB (Ethernet), capture size 262144 bytes
1617780229.196446 IP 10.104.255.30 > 172.29.62.100: ICMP echo request,
id 937, seq 1, length 64
1617780229.197263 IP 172.29.62.100 > 10.104.255.30: ICMP echo reply,
id 937, seq 1, length 64


perf out:

ping   857 [000]  2609.657231: fib:fib_table_lookup: table 255 oif 6
iif 1 proto 17 0.0.0.0/53012 -> 172.29.62.100/1025 tos 0 scope 0 flags
4 ==> dev - gw 0.0.0.0 src 0.0.0.0 err -11
ping   857 [000]  2609.657234: fib:fib_table_lookup: table 10 oif 6
iif 1 proto 17 0.0.0.0/53012 -> 172.29.62.100/1025 tos 0 scope 0 flags
4 ==> dev green gw 0.0.0.0 src 10.104.255.30 err 0
ping   857 [000]  2609.657235: fib:fib_table_lookup: table 255 oif 6
iif 1 proto 17 10.104.255.30/53012 -> 172.29.62.100/1025 tos 0 scope 0
flags 4 ==> dev - gw 0.0.0.0 src 0.0.0.0 err -11
            ping   857 [000]  2609.657236: fib:fib_table_lookup: table
10 oif 6 iif 1 proto 17 10.104.255.30/53012 -> 172.29.62.100/1025 tos
0 scope 0 flags 4 ==> dev green gw 0.0.0.0 src 10.104.255.30 err 0
            ping   857 [000]  2609.659176: fib:fib_table_lookup: table
255 oif 6 iif 1 proto 1 0.0.0.0/0 -> 172.29.62.100/0 tos 0 scope 0
flags 4 ==> dev - gw 0.0.0.0 src 0.0.0.0 err -11
            ping   857 [000]  2609.659178: fib:fib_table_lookup: table
10 oif 6 iif 1 proto 1 0.0.0.0/0 -> 172.29.62.100/0 tos 0 scope 0
flags 4 ==> dev green gw 0.0.0.0 src 10.104.255.30 err 0
            ping   857 [000]  2609.659186: fib:fib_table_lookup: table
255 oif 7 iif 1 proto 1 10.104.255.30/0 -> 172.29.62.100/0 tos 0 scope
0 flags 5 ==> dev - gw 0.0.0.0 src 0.0.0.0 err -11
            ping   857 [000]  2609.659188: fib:fib_table_lookup: table
20 oif 7 iif 1 proto 1 10.104.255.30/0 -> 172.29.62.100/0 tos 0 scope
0 flags 5 ==> dev eth0.10 gw 10.104.255.29 src 10.104.255.30 err 0

On Mon, Mar 29, 2021 at 10:58 PM manuel wolfshant <wo...@prolinux.ro> wrote:
>

_______________________________________________
RLUG mailing list
RLUG@lists.lug.ro
http://lists.lug.ro/mailman/listinfo/rlug_lists.lug.ro

Raspunde prin e-mail lui