(User gateway address: 184.108.40.206) 5200F��(G3/0/3.4000) NE80E (uplink)―GSR����external network
The user gateway address of the 5200F can be successfully pinged directly from the NE80E or through the address that connects the GSR and the NE80E but cannot on the GSR.
description to NJ-HouDaShuGen-5200F-01 220.127.116.11
control-vid 4000 dot1q-termination-----The problem was solved after vid was changed from 1 to 4000.
dot1q termination vid 4000
ip address 18.104.22.168 255.255.255.252
traffic-policy icmp outbound
arp broadcast enable
trust upstream default
This problem was cause by the QinQ interface running a routing protocol, because, in this case, control-vid and vid must be the same. If an interface needs to support a routing protocol, rt-protocol must be added at the end of the command to be configured. In this manner, you will be reminded if the two parameters are different. If rt-protocol is not added, the two parameters will not be checked for consistency.
[NJ-LZX-R-NE80E-01-GigabitEthernet3/0/3.4000]control-vid 4000 dot1q-termination
rt-protocol Support router protocol
If the two parameters are configured to be different, VLINID in the hardware forwarding table is incorrect, causing abnormal forwarding.
Configure the ACL on the NE80E.
<NJ-LZX-R-NE80E-01>dis acl 3999
Advanced ACL 3999, 5 rules
Acl’s step is 5
rule 5 permit icmp source 22.214.171.124 0 destination 126.96.36.199 0 (2 times matched)
rule 10 permit icmp source 188.8.131.52 0 destination 184.108.40.206 0 (0 times matched)
rule 15 permit icmp source 220.127.116.11 0 destination 18.104.22.168 0 (0 times matched)
rule 20 permit icmp destination 22.214.171.124 0 (31 times matched)
rule 25 permit icmp destination 126.96.36.199 0 (20 times matched)
traffic classifier icmp operator or
if-match acl 3999
traffic behavior icmp
traffic policy icmp
classifier icmp behavior icmp
The policy is applied to the incoming direction of the four uplink interfaces on the NE80E and the sub-interface connecting the NE80E and the 5200F.
Ping the address of the uplink interface (188.8.131.52) and the user gateway address (184.108.40.206) of the 5200F from the public network. The results viewed showed that data came into the NE80E from the uplink interface and went out from the downlink interface in pinging 220.127.116.11 and that the ACL could be matched on the uplink interface of the NE80E and could not on the downlink interface in pinging 18.104.22.168. It indicated that the data with the destination address of the user gateway reached the NE80E but was not forwarded. The test result showed that the NE80E was faulty.
If an interface needs to support a routing protocol, rt-protocol must be added at the end of the command to be configured. In fact, the addition of rt-protocol is to check whether the two parameters are the same. Therefore, you only need to configure the two parameters to be the same.