No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

The newly created ipv6 address is not pingable from internet

Publication Date:  2017-12-24 Views:  412 Downloads:  0
Issue Description

The topology of the customers' network: CE(Vlanif13) -- Intermediate Routers -- Internet 

After the customer created a new ipv6 address 2A03:2100:0:10D::1/64, it was reported not reachable from the Internet, the other ipv6 addresses which are created before are ok.
#
interface Vlanif13
 ipv6 enable
 ip address 95.173.178.249 255.255.255.248
 ip address 192.168.240.5 255.255.255.252 sub
 ipv6 address 2A03:2100:0:14::1/64
 ipv6 address 2A03:2100:0:15::1/64
 ipv6 address 2A03:2100:0:17::1/64
 ipv6 address 2A03:2100:0:19::1/64
 ipv6 address 2A03:2100:0:1A::1/64
 ipv6 address 2A03:2100:0:1B::1/64
 ipv6 address 2A03:2100:0:105::1/64
 ipv6 address 2A03:2100:0:107::1/64
 ipv6 address 2A03:2100:0:109::1/64
 ipv6 address 2A03:2100:0:10A::1/64
 ipv6 address 2A03:2100:0:10B::1/64
 ipv6 address 2A03:2100:0:10D::1/64
#

Alarm Information

===============================================================================
                 display alarm active verbose
===============================================================================

Sequence    : 8880     
AlarmId     : 0x95E2022             AlarmName : hwBoardResThresholdExceed                                      
AlarmType   : processing_error      Severity  : Major            State : active
RootKindFlag: Independent          
StartTime   : 2017-11-21 02:31:31                    
Description : The number of forwarding resources reaches the alarm threshold. (Slot = 8, Chassis = 1, Threshold = 100, Reason = 3, Description : The number of IPv6 FIBs exceeded the specification of the forwarding engine resources.)

Sequence    : 8879     
AlarmId     : 0x95E2022             AlarmName : hwBoardResThresholdExceed                                      
AlarmType   : processing_error      Severity  : Major            State : active
RootKindFlag: Independent          
StartTime   : 2017-11-21 02:31:14                    
Description : The number of forwarding resources reaches the alarm threshold. (Slot = 7, Chassis = 1, Threshold = 100, Reason = 3, Description : The number of IPv6 FIBs exceeded the specification of the forwarding engine resources.)

Handling Process

1) Check the ping from internet https://centralops.net/co/ , the newly created ipv6 address on CE switch is not pingable from internet, but trace is ok.

 

   

2) Also ping the internet target with the new ipv6 address as the source is failed, but trace is ok.


ping ipv6 -a 2A03:2100:0:10D::1 2607:f0d0:1001:118::1
  PING 2607:F0D0:1001:118::1 : 56  data bytes, press CTRL_C to break
    Request time out
    Request time out
    Request time out
    Request time out
    Request time out
                  
  ---2607:F0D0:1001:118::1 ping statistics---
    5 packet(s) transmitted
    0 packet(s) received
    100.00% packet loss
    round-trip min/avg/max=0/0/0 ms

Without source:
ping ipv6 2607:f0d0:1001:118::1
  PING 2607:F0D0:1001:118::1 : 56  data bytes, press CTRL_C to break
    Reply from 2607:F0D0:1001:118::1
    bytes=56 Sequence=1 hop limit=52 time=10 ms
    Reply from 2607:F0D0:1001:118::1
    bytes=56 Sequence=2 hop limit=52 time=169 ms
    Reply from 2607:F0D0:1001:118::1
    bytes=56 Sequence=3 hop limit=52 time=169 ms
    Reply from 2607:F0D0:1001:118::1
    bytes=56 Sequence=4 hop limit=52 time=168 ms
    Reply from 2607:F0D0:1001:118::1
    bytes=56 Sequence=5 hop limit=52 time=169 ms
                  
  ---2607:F0D0:1001:118::1 ping statistics---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max=10/137/169 ms

tracert ipv6 2607:f0d0:1001:118::1
traceroute to 2607:F0D0:1001:118::1  30 hops max,60 bytes packet
1 2A01:358:5400:3::1 1 ms  2 ms  1 ms
 2  *  *  *
3 2001:728:0:5000::CC5 62 ms  63 ms  62 ms
 4 2001:728:0:2000::141 71 ms  70 ms  72 ms
 5 2001:418:0:6000::10D 147 ms  148 ms  147 ms
 6 2001:418:0:2000::116 148 ms  147 ms  149 ms
 7 2001:418:0:2000::2C5 159 ms  143 ms  155 ms
 8 2001:418:0:5000::105 148 ms  139 ms  138 ms
 9 2607:F0D0:2:2::374 140 ms   * 149 ms
10 2607:F0D0:2:2::2AD 157 ms  152 ms  149 ms
11 2607:F0D0:2:2::2AD 152 ms   *  *
12 2607:F0D0:2:2::243 168 ms  202 ms   *
13 2607:F0D0:2:2::245 174 ms  176 ms  167 ms
14 2607:F0D0:1000:1::46 166 ms  177 ms  176 ms


3) Use the command "display ipv6 fib slot 8 statistics" to check, the total fib on slot 8 is 9413, which is more than the fib limit 8K of CE-L48XS-EC board.
 


===============================================================================
                 display device
===============================================================================

CE12808S's Device status:
-------------------------------------------------------------------------------
Slot  Card   Type                  Online   Power Register     Alarm     Primary       
-------------------------------------------------------------------------------
7     -      CE-L48XS-EC           Present  On    Registered   Normal    NA            
8     -      CE-L48XS-EC           Present  On    Registered   Normal    NA            
9     -      CE-MPUA-S             Present  On    Registered   Normal    Master        
10    -      CE-MPUA-S             Present  On    Registered   Normal    Slave         
11    -      CE-SFUC-S             Present  On    Registered   Normal    NA            
12    -      CE-SFUC-S             Present  On    Registered   Normal    NA            
13    -      CE-SFUC-S             Present  On    Registered   Normal    NA            
14    -      CE-SFUC-S             Present  On    Registered   Normal    NA            
15    -      CMU(MPU 9)            Present  On    Registered   Normal    Master        
16    -      CMU(MPU 10)           Present  On    Registered   Normal    Slave         
PWR1  -      PHD-3000WA            Present  On    Registered   Normal    NA            
PWR2  -      PHD-3000WA            Present  On    Registered   Normal    NA            
PWR3  -      PHD-3000WA            Present  On    Registered   Normal    NA            
PWR4  -      PHD-3000WA            Present  On    Registered   Normal    NA            
PWR5  -      PHD-3000WA            Present  On    Registered   Normal    NA            
PWR6  -      PHD-3000WA            Present  On    Registered   Normal    NA            
PWR7  -      PHD-3000WA            Present  On    Registered   Normal    NA            
PWR8  -      PHD-3000WA            Present  On    Registered   Normal    NA            
FAN1  -      FAN-600A-B            Present  On    Registered   Normal    NA            
FAN2  -      FAN-600A-B            Present  On    Registered   Normal    NA            
FAN3  -      FAN-600A-B            Present  On    Registered   Normal    NA            
FAN4  -      FAN-600A-B            Present  On    Registered   Normal    NA            
FAN5  -      FAN-600A-B            Present  On    Registered   Normal    NA            
FAN6  -      FAN-600A-B            Present  On    Registered   Normal    NA            
-------------------------------------------------------------------------------

4) Use the command "display ipv6 routing-table statistics" to check, the total ipv6 routes are 44439.

 

 

5) Check the fib for the newly created ipv6 address and the old ipv6 address.

Detail /128 route for the new ip address is not generated because ipv6 fib reaches the limit, so the ping is failed.
 

Detail /128 route for the old ip address is generated and is pingable.
 

 

Root Cause

Fib table has exceeded the fib limit 8K of CE-L48XS-EC board.

Solution

 The solution is to configure the summary/aggregation for BGP ipv6 routes, or upgrade the hardware.

END