no ping between devices with EVPN #15667

xdisa · 2024-04-03T09:28:19Z

xdisa
Apr 3, 2024

Hi all!

I have a stand with a test of the EVPN configuration. The bgp session is active, there is an exchange of routes, everything is fine. but there are no pings between these interfaces (the routes of which are transmitted via BGP)! can you help me where to look to solve the problem? Thanks in advance, I am attaching the configuration.

PE1......................................................... core..................................................................................................PE2
eth1:192.168.3.2/24 --------- eth3:192.168.3.1/24| eth2:192.168.4.1/24------------e1p1:192.168.4.2/24
lo1:1.1.1.1/32.........................................................................................................................................lo1:2.2.2.2/32
vrf red(lo1001: 1.0.0.1/32)..................................................................................................................vrf red(lo1001: 1.0.0.2/32)
vrf blue(lo1002: 2.0.0.1/32)...............................................................................................................vrf blue(lo1002: 2.0.0.2/32)

PE1 CONFIGURATION

PE1:# ip ad
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 9c:d3:32:00:dd:07 brd ff:ff:ff:ff:ff:ff
inet 100.100.100.1/24 brd 100.100.100.255 scope global eth0
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 9c:d3:32:00:dd:08 brd ff:ff:ff:ff:ff:ff
inet 192.168.3.2/24 brd 192.168.3.255 scope global eth1
valid_lft forever preferred_lft forever
4: teql0: mtu 1500 qdisc noop state DOWN group default qlen 100
link/void
5: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 5a:a9:cf:c9:1d:eb brd ff:ff:ff:ff:ff:ff
6: lo1: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000
link/ether c2:b1:fd:cc:8b:ce brd ff:ff:ff:ff:ff:ff
inet 1.1.1.1/32 brd 1.1.1.1 scope global lo1
valid_lft forever preferred_lft forever
7: lo1001: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue master red state UNKNOWN group default qlen 1000
link/ether 82:5b:5a:4e:6c:0a brd ff:ff:ff:ff:ff:ff
inet 1.0.0.1/32 brd 1.0.0.1 scope global lo1001
valid_lft forever preferred_lft forever
8: red: <NOARP,MASTER,UP,LOWER_UP> mtu 65536 qdisc noqueue state UP group default qlen 1000
link/ether da:44:22:02:21:cf brd ff:ff:ff:ff:ff:ff
inet 127.0.0.1/8 scope host red
valid_lft forever preferred_lft forever
9: vxlan1001: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br1001 state UNKNOWN group default qlen 1000
link/ether 66:3e:60:63:a2:9f brd ff:ff:ff:ff:ff:ff
10: br1001: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 66:3e:60:63:a2:9f brd ff:ff:ff:ff:ff:ff
11: lo1002: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue master blue state UNKNOWN group default qlen 1000
link/ether 6e:f0:8c:e3:e1:4d brd ff:ff:ff:ff:ff:ff
inet 2.0.0.1/32 brd 2.0.0.1 scope global lo1002
valid_lft forever preferred_lft forever
12: blue: <NOARP,MASTER,UP,LOWER_UP> mtu 65536 qdisc noqueue state UP group default qlen 1000
link/ether 86:ce:6c:3e:a5:0a brd ff:ff:ff:ff:ff:ff
inet 127.0.0.1/8 scope host blue
valid_lft forever preferred_lft forever
13: vxlan1002: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br1002 state UNKNOWN group default qlen 1000
link/ether 1e:77:de:95:71:a4 brd ff:ff:ff:ff:ff:ff
14: br1002: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 1e:77:de:95:71:a4 brd ff:ff:ff:ff:ff:ff
PE1:#

PE1:~# vtysh

PE1# sh run
Building configuration...

Current configuration:
!
frr version 8.5.4
frr defaults traditional
hostname PE1
service integrated-vtysh-config
!
ip route 0.0.0.0/0 192.168.3.1
ip route 2.2.2.2/32 192.168.3.1
!
vrf blue
vni 1002
exit-vrf
!
vrf red
vni 1001
exit-vrf
!
interface lo1002
ip address 2.0.0.1/32
exit
!
interface eth1
description pe1-core
ip address 192.168.3.2/24
exit
!
interface lo1
ip address 1.1.1.1/32
exit
!
interface lo1001
ip address 1.0.0.1/32
exit
!
router bgp 65000
neighbor 2.2.2.2 remote-as 65000
neighbor 2.2.2.2 update-source 1.1.1.1
!
address-family l2vpn evpn
neighbor 2.2.2.2 activate
advertise-all-vni
advertise ipv4 unicast
exit-address-family
exit
!
router bgp 65000 vrf blue
!
address-family ipv4 unicast
redistribute connected
exit-address-family
!
address-family l2vpn evpn
advertise ipv4 unicast
exit-address-family
exit
!
router bgp 65000 vrf red
!
address-family ipv4 unicast
redistribute connected
exit-address-family
!
address-family l2vpn evpn
advertise ipv4 unicast
exit-address-family
exit
!
router ospf
network 1.1.1.1/32 area 0
network 192.168.3.0/24 area 0
exit
!
segment-routing
traffic-eng
exit
exit
!
end

CORE CONF

core-device# sh run
Building configuration...

Current configuration:
!
frr version 8.5.4
frr defaults traditional
hostname core-device
service integrated-vtysh-config
!
ip route 1.1.1.1/32 192.168.3.2
ip route 2.2.2.2/32 192.168.4.2
!
interface eth2
description core-pe2
ip address 192.168.4.1/24
exit
!
interface eth3
description core-pe1
ip address 192.168.3.1/24
exit
!
interface br1
exit
!
router ospf
network 192.168.3.0/24 area 0
network 192.168.4.0/24 area 0
exit
!
segment-routing
traffic-eng
exit
exit
!
end
core-device#

PE2 CONFIGURATION

PE2:# ip ad
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
link/ether 9c:d3:32:00:16:1a brd ff:ff:ff:ff:ff:ff
3: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc mq state DOWN group default qlen 1000
link/ether 9c:d3:32:00:16:1b brd ff:ff:ff:ff:ff:ff
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 9c:d3:32:00:16:1c brd ff:ff:ff:ff:ff:ff
5: teql0: mtu 1500 qdisc noop state DOWN group default qlen 100
link/void
6: e1p1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 9c:d3:32:00:16:1c brd ff:ff:ff:ff:ff:ff
inet 192.168.4.2/24 brd 192.168.4.255 scope global e1p1
valid_lft forever preferred_lft forever
7: e1p2@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue master red state LOWERLAYERDOWN group default qlen 1000
link/ether 9c:d3:32:00:2a:38 brd ff:ff:ff:ff:ff:ff
inet 100.100.100.3/24 brd 100.100.100.255 scope global e1p2
valid_lft forever preferred_lft forever
8: e1p3@eth0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state LOWERLAYERDOWN group default qlen 1000
link/ether 9c:d3:32:00:2a:39 brd ff:ff:ff:ff:ff:ff
9: e1p4@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 9c:d3:32:00:2a:35 brd ff:ff:ff:ff:ff:ff
inet 172.16.1.80/22 brd 172.16.3.255 scope global dynamic noprefixroute e1p4
valid_lft 1833835sec preferred_lft 1596235sec
10: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether fa:2f:d1:50:d7:04 brd ff:ff:ff:ff:ff:ff
11: lo1: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1000
link/ether 0e:99:4c:20:e8:eb brd ff:ff:ff:ff:ff:ff
inet 2.2.2.2/32 brd 2.2.2.2 scope global lo1
valid_lft forever preferred_lft forever
12: lo1001: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue master red state UNKNOWN group default qlen 1000
link/ether ee:13:c1:08:de:86 brd ff:ff:ff:ff:ff:ff
inet 1.0.0.2/32 brd 1.0.0.2 scope global lo1001
valid_lft forever preferred_lft forever
13: red: <NOARP,MASTER,UP,LOWER_UP> mtu 65536 qdisc noqueue state UP group default qlen 1000
link/ether 5e:b0:e7:f1:16:ce brd ff:ff:ff:ff:ff:ff
inet 127.0.0.1/8 scope host red
valid_lft forever preferred_lft forever
14: vxlan1001: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br1001 state UNKNOWN group default qlen 1000
link/ether 52:0c:05:20:cc:e1 brd ff:ff:ff:ff:ff:ff
15: br1001: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 52:0c:05:20:cc:e1 brd ff:ff:ff:ff:ff:ff
16: lo1002: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue master blue state UNKNOWN group default qlen 1000
link/ether 4e:1b:f1:31:ca:32 brd ff:ff:ff:ff:ff:ff
inet 2.0.0.2/32 brd 2.0.0.2 scope global lo1002
valid_lft forever preferred_lft forever
17: blue: <NOARP,MASTER,UP,LOWER_UP> mtu 65536 qdisc noqueue state UP group default qlen 1000
link/ether 76:f2:1d:02:f5:72 brd ff:ff:ff:ff:ff:ff
inet 127.0.0.1/8 scope host blue
valid_lft forever preferred_lft forever
18: vxlan1002: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br1002 state UNKNOWN group default qlen 1000
link/ether b2:c6:33:03:66:c8 brd ff:ff:ff:ff:ff:ff
19: br1002: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether b2:c6:33:03:66:c8 brd ff:ff:ff:ff:ff:ff
PE2:#

PE2:~# vtysh

PE2#
PE2# sh run
Building configuration...

Current configuration:
!
frr version 8.5.4
frr defaults traditional
hostname PE2
service integrated-vtysh-config
!
ip route 0.0.0.0/0 192.168.4.1
ip route 1.1.1.1/32 192.168.4.1/24
!
vrf blue
vni 1002
exit-vrf
!
vrf red
vni 1001
exit-vrf
!
interface lo1002
ip address 2.0.0.2/32
exit
!
interface e1p1
description pe2-core
ip address 192.168.4.2/24
exit
!
interface e1p4
mpls enable
exit
!
interface eth1
description R2-R1
mpls enable
exit
!
interface eth2
description R2-R3
mpls enable
exit
!
interface lo1
ip address 2.2.2.2/32
exit
!
interface e1p2
ip address 100.100.100.3/24
exit
!
interface lo1001
ip address 1.0.0.2/32
exit
!
router bgp 65000
neighbor 1.1.1.1 remote-as 65000
neighbor 1.1.1.1 update-source 2.2.2.2
!
address-family l2vpn evpn
neighbor 1.1.1.1 activate
advertise-all-vni
advertise ipv4 unicast
exit-address-family
exit
!
router bgp 65000 vrf blue
!
address-family ipv4 unicast
redistribute connected
exit-address-family
!
address-family l2vpn evpn
advertise ipv4 unicast
exit-address-family
exit
!
router bgp 65000 vrf red
!
address-family ipv4 unicast
redistribute connected
exit-address-family
!
address-family l2vpn evpn
advertise ipv4 unicast
exit-address-family
exit
!
router ospf
network 2.2.2.2/32 area 0
network 192.168.4.0/24 area 0
exit
!
segment-routing
traffic-eng
exit
exit
!
end
PE2#

here is the conclusion that everything is fine according to the bgp and there is a connection

PE2# sh ip ospf neighbor

Neighbor ID Pri State Up Time Dead Time Address Interface RXmtL RqstL DBsmL
192.168.4.1 1 Full/Backup 20h46m59s 33.446s 192.168.4.1 e1p1:192.168.4.2 0 0 0

PE2#

PE2# show bgp l2vpn evpn summary
BGP router identifier 192.168.4.2, local AS number 65000 vrf-id 0
BGP table version 0
RIB entries 9, using 1224 bytes of memory
Peers 1, using 720 KiB of memory

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc
1.1.1.1 4 65000 1232 1242 0 0 0 18:11:49 2 2 N/A

Total number of neighbors 1
PE2#
PE2#
PE2#
PE2# show bgp l2vpn evpn
BGP table version is 7, local router ID is 192.168.4.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal
Origin codes: i - IGP, e - EGP, ? - incomplete
EVPN type-1 prefix: [1]:[EthTag]:[ESI]:[IPlen]:[VTEP-IP]:[Frag-id]
EVPN type-2 prefix: [2]:[EthTag]:[MAClen]:[MAC]:[IPlen]:[IP]
EVPN type-3 prefix: [3]:[EthTag]:[IPlen]:[OrigIP]
EVPN type-4 prefix: [4]:[ESI]:[IPlen]:[OrigIP]
EVPN type-5 prefix: [5]:[EthTag]:[IPlen]:[IP]

Network Next Hop Metric LocPrf Weight Path
Route Distinguisher: 1.0.0.1:3
*>i[5]:[0]:[32]:[1.0.0.1]
1.1.1.1 0 100 0 ?
RT:65000:1001 ET:8 Rmac:66:3e:60:63:a2:9f
Route Distinguisher: 1.0.0.2:3
*> [5]:[0]:[32]:[1.0.0.2]
2.2.2.2 0 32768 ?
ET:8 RT:65000:1001 Rmac:52:0c:05:20:cc:e1
Route Distinguisher: 2.0.0.1:2
*>i[5]:[0]:[32]:[2.0.0.1]
1.1.1.1 0 100 0 ?
RT:65000:1002 ET:8 Rmac:1e:77:de:95:71:a4
Route Distinguisher: 2.0.0.2:2
*> [5]:[0]:[32]:[2.0.0.2]
2.2.2.2 0 32768 ?
ET:8 RT:65000:1002 Rmac:b2:c6:33:03:66:c8

Displayed 4 out of 4 total prefixes
PE2#
PE2#
PE2# show bgp l2vpn evpn 1.0.0.1
BGP routing table entry for 1.0.0.1:3:[5]:[0]:[32]:[1.0.0.1]
Paths: (1 available, best #1)
Not advertised to any peer
Route [5]:[0]:[32]:[1.0.0.1] VNI 1001
Local
1.1.1.1 (metric 2010) from 1.1.1.1 (192.168.3.2)
Origin incomplete, metric 0, localpref 100, valid, internal, best (First path received)
Extended Community: RT:65000:1001 ET:8 Rmac:66:3e:60:63:a2:9f
Last update: Tue Jan 23 22:28:38 2024
PE2#
PE2#
PE2# show bgp l2vpn evpn 2.0.0.1
BGP routing table entry for 2.0.0.1:2:[5]:[0]:[32]:[2.0.0.1]
Paths: (1 available, best #1)
Not advertised to any peer
Route [5]:[0]:[32]:[2.0.0.1] VNI 1002
Local
1.1.1.1 (metric 2010) from 1.1.1.1 (192.168.3.2)
Origin incomplete, metric 0, localpref 100, valid, internal, best (First path received)
Extended Community: RT:65000:1002 ET:8 Rmac:1e:77:de:95:71:a4
Last update: Tue Jan 23 22:28:38 2024
PE2#
PE2#
PE2#
PE2# show bgp vrf blue ipv4 unicast
BGP table version is 8, local router ID is 2.0.0.2, vrf id 17
Default local pref 100, local AS 65000
Status codes: s suppressed, d damped, h history, * valid, > best, = multipath,
i internal, r RIB-failure, S Stale, R Removed
Nexthop codes: @NNN nexthop's vrf id, < announce-nh-self
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

Network          Next Hop            Metric LocPrf Weight Path

*>i2.0.0.1/32 1.1.1.1< 0 100 0 ?
*> 2.0.0.2/32 0.0.0.0 0 32768 ?

Displayed 2 routes and 2 total paths
PE2#
PE2# sh ip route
babel eigrp kernel openfabric sharp supernets-only vnc
bgp isis nexthop-group ospf static table vrf
connected json nhrp rip summary tag
PE2# sh ip route vrf red
Codes: K - kernel route, C - connected, S - static, R - RIP,
O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
T - Table, v - VNC, V - VNC-Direct, A - Babel, D - SHARP,
F - PBR, f - OpenFabric,
> - selected route, * - FIB route, q - queued, r - rejected, b - backup
t - trapped, o - offload failure

VRF red:
B>* 1.0.0.1/32 [200/0] via 1.1.1.1, br1001 onlink, weight 1, 18:13:35
C>* 1.0.0.2/32 is directly connected, lo1001, 20:54:04
PE2# sh ip route vrf blue
Codes: K - kernel route, C - connected, S - static, R - RIP,
O - OSPF, I - IS-IS, B - BGP, E - EIGRP, N - NHRP,
T - Table, v - VNC, V - VNC-Direct, A - Babel, D - SHARP,
F - PBR, f - OpenFabric,
> - selected route, * - FIB route, q - queued, r - rejected, b - backup
t - trapped, o - offload failure

VRF blue:
B>* 2.0.0.1/32 [200/0] via 1.1.1.1, br1002 onlink, weight 1, 18:13:39
C>* 2.0.0.2/32 is directly connected, lo1002, 20:54:06
PE2#
PE2# sh bgp summary

IPv4 Unicast Summary (VRF default):
BGP router identifier 192.168.4.2, local AS number 65000 vrf-id 0
BGP table version 0
RIB entries 0, using 0 bytes of memory
Peers 1, using 720 KiB of memory

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc
1.1.1.1 4 65000 1236 1246 0 0 0 18:15:37 0 0 N/A

Total number of neighbors 1

L2VPN EVPN Summary (VRF default):
BGP router identifier 192.168.4.2, local AS number 65000 vrf-id 0
BGP table version 0
RIB entries 9, using 1224 bytes of memory
Peers 1, using 720 KiB of memory

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd PfxSnt Desc
1.1.1.1 4 65000 1236 1246 0 0 0 18:15:37 2 2 N/A

Total number of neighbors 1
PE2#

and when I try to ping from 1.0.0.2 to 1.0.0.1, nothing happens, although there should be a ping!

)at first I just pinged myself 1.0.0.2)

PE2# ex
PE2:~# ip vrf exec red ping -I 1.0.0.2 1.0.0.1
PING 1.0.0.1 (1.0.0.1) from 1.0.0.2 : 56(84) bytes of data.
^C
--- 1.0.0.1 ping statistics ---
2 packets transmitted, 0 received, 100% packet loss, time 1021ms

PE2:# ip vrf exec red ping -I 1.0.0.2 1.0.0.2
PING 1.0.0.2 (1.0.0.2) from 1.0.0.2 : 56(84) bytes of data.
64 bytes from 1.0.0.2: icmp_seq=1 ttl=64 time=0.140 ms
64 bytes from 1.0.0.2: icmp_seq=2 ttl=64 time=0.095 ms
^C
--- 1.0.0.2 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1044ms
rtt min/avg/max/mdev = 0.095/0.117/0.140/0.024 ms
PE2:# ip vrf exec red ping -I 1.0.0.2 1.0.0.1
PING 1.0.0.1 (1.0.0.1) from 1.0.0.2 : 56(84) bytes of data.

and that's all. no ping. help solve this problem

xdisa · 2024-04-03T09:46:37Z

xdisa
Apr 3, 2024
Author

This is how I created interfaces and VRF:

ip link add lo1 type dummy
ip link set lo1 up

########vrf red##
ip link add lo1001 type dummy
ip link set lo1001 up

ip link add red type vrf table 1001
ip link set dev red up
ip link set dev lo1001 master red

ip link add vxlan1001 type vxlan id 1001 local 2.2.2.2 dstport 4789
ip link set dev vxlan1001 up

ip link add name br1001 type bridge
ip link set dev vxlan1001 master br1001
ip link set dev br1001 up
#####################

ip link add lo1002 type dummy
ip link set lo1002 up

ip link add blue type vrf table 1002
ip link set dev blue up
ip link set dev lo1002 master blue

ip link add vxlan1002 type vxlan id 1002 local 2.2.2.2 dstport 4789
ip link set dev vxlan1002 up

ip link add name br1002 type bridge
ip link set dev vxlan1002 master br1002
ip link set dev br1002 up

similar on the second device, but with a different IP

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

no ping between devices with EVPN #15667

{{title}}

Replies: 1 comment

{{title}}

Select a reply

no ping between devices with EVPN #15667

xdisa Apr 3, 2024

Replies: 1 comment

xdisa Apr 3, 2024 Author

xdisa
Apr 3, 2024

xdisa
Apr 3, 2024
Author