Tuesday, August 13, 2019

Pinging from router works, but not from the client under the same router

Good morning,

I have a problem with this topology:

https://imgur.com/a/k4PqASj (Upper part and lower part attached).

Basically, I if i ping from CE1A (172.16.0.1/32) to CE2A (172.16.0.2/32) everything's ok, but if I ping CE2A from Ubuntu-1 it stops at LER1 (10.0.1.1/30).

  • Ping from CE1A to CE2A:

CE1A#traceroute 172.16.0.2 Tracing the route to 172.16.0.2 VRF info: (vrf in name/id, vrf out name/id) 1 10.0.1.1 11 msec 4 msec 5 msec 2 10.0.9.5 [MPLS: Labels 18/22 Exp 0] 12 msec 9 msec 10 msec 3 10.0.9.2 [MPLS: Labels 18/22 Exp 0] 8 msec 10 msec 8 msec 4 10.0.2.1 [MPLS: Label 22 Exp 0] 9 msec 8 msec 9 msec 5 10.0.2.2 13 msec 8 msec 9 msec 
  • Ping from Ubuntu-1 to CE2A:

root@Ubuntu-1:~# traceroute 172.16.0.2 traceroute to 172.16.0.2 (172.16.0.2), 30 hops max, 60 byte packets 1 193.246.121.33 (193.246.121.33) 16.047 ms 26.029 ms 27.279 ms 2 10.0.1.1 (10.0.1.1) 31.465 ms 32.350 ms 37.331 ms 3 * * * 4 * * * 5 * * * 6 * * * 7 * * * 8 *^C root@Ubuntu-1:~# 
  • LER1 configuration:

LER1#sh run Building configuration... IOMEM size set to 53477376 bytes. Current configuration : 4370 bytes ! ! Last configuration change at 09:24:44 UTC Tue Aug 13 2019 ! version 15.6 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname LER1 ! boot-start-marker boot-end-marker ! ! ! no aaa new-model ethernet lmi ce ! ! ! no process cpu autoprofile hog memory-size iomem 5 mmi polling-interval 60 no mmi auto-configure no mmi pvc mmi snmp-timeout 180 ! ! ! ! ! no ip icmp rate-limit unreachable ! ! ! ip vrf Customer_A rd 65000:1 route-target export 65000:1 route-target import 65000:1 ! ip vrf Customer_B rd 65000:2 route-target export 65000:2 route-target import 65000:2 ! ! ! ! no ip domain lookup ip cef no ipv6 cef ! multilink bundle-name authenticated ! ! ! ! archive log config hidekeys ! redundancy ! no cdp log mismatch duplex no cdp run ! ip tcp synwait-time 5 ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 10.0.0.3 255.255.255.255 ip ospf network point-to-point ip ospf 1 area 0 ! interface GigabitEthernet0/0 ip address 10.0.9.6 255.255.255.252 ip ospf 1 area 0 duplex auto speed auto media-type rj45 mpls ip no cdp enable ! interface GigabitEthernet0/1 ip vrf forwarding Customer_A ip address 10.0.1.1 255.255.255.252 ip ospf 2 area 0 duplex auto speed auto media-type rj45 no cdp enable ! interface GigabitEthernet0/2 ip vrf forwarding Customer_B ip address 10.0.1.5 255.255.255.252 ip ospf 3 area 0 duplex auto speed auto media-type rj45 no cdp enable ! interface GigabitEthernet0/3 no ip address shutdown duplex auto speed auto media-type rj45 no cdp enable ! router ospf 2 vrf Customer_A router-id 10.0.1.1 redistribute bgp 65000 subnets ! router ospf 3 vrf Customer_B router-id 10.0.1.5 redistribute bgp 65000 subnets ! router ospf 1 router-id 10.0.0.3 ! router bgp 65000 bgp log-neighbor-changes neighbor 10.0.0.4 remote-as 65000 neighbor 10.0.0.4 update-source Loopback0 ! address-family vpnv4 neighbor 10.0.0.4 activate neighbor 10.0.0.4 send-community extended exit-address-family ! address-family ipv4 vrf Customer_A redistribute ospf 2 exit-address-family ! address-family ipv4 vrf Customer_B redistribute ospf 3 exit-address-family ! ip forward-protocol nd ! ! ip http server no ip http secure-server ! ! ! ! control-plane ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous escape-character 3 line aux 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 login transport input none ! no scheduler allocate ! end 

I don't understand why this happens. I set the default gateway of the Ubuntu-1 client to 193.246.121.33, so is it correct to say that the packet which arrives at LER1 comes from CE1A? Why the ping from Ubuntu-1 isn't it treated as if it started from CE1A?

Thank you in advance.

David

EDIT: The final goal would be to ping Ubuntu-2 from Ubuntu-1, using the MPLS network I already built. The packet must enter into CE1A and exit from CE2A. If anyone has any ideas that would be awesome. In particular I don't know if I'm using the right approach to do so (creating VLANs for example).

Thank you.



No comments:

Post a Comment