05-13-2021 04:25 AM
I'm working on replacing the core of my network with a stack of 7150-C12P units running the layer 3 image. So far things have been working pretty well, but I've run into a problem. I'm running the 08.0.95caT213 release.
Specifically, I have one interface setup for route-only traffic to the existing network core, and it has both IPv4 and IPv6 addressing enabled (plus there is OSPF running for both protocols). Interface config is:
SSH@ICX7150-C12 Router>show running-config interface ethernet 1/1/12
interface ethernet 1/1/12
ip address 192.168.100.2 255.255.255.0
ip ospf area 0
ip ospf network point-to-point
ipv6 address fd80:ae6b:5f43:100::2/64
ipv6 ospf area 0
ipv6 nd suppress-ra
SSH@ICX7150-C12 Router>show ipv6 interface ethernet 1/1/12
Interface e 1/1/12 is up, line protocol is up
IPv6 is enabled, link-local address is fe80::7aa6:e1ff:fe3e:842e [Preferred]
Global unicast address(es):
fd80:ae6b:5f43:100::2 [Preferred], subnet is fd80:ae6b:5f43:100::/64
Joined group address(es):
Port belongs to VRF: default-vrf
MTU is 1500 bytes
ICMP redirects are disabled, Router preference: Medium
ND DAD is enabled, number of DAD attempts: 3
ND reachable time is 30000 miliseconds
ND stale time is 7200000 miliseconds
ND retransmit interval is 1000 miliseconds
ND advertised reachable time is 0 seconds
ND advertised retransmit interval is 0 miliseconds
ND router advertisements are sent every 272 seconds
ND router advertisements live for 1800 seconds
Hosts use stateless autoconfig for addresses
No Inbound Access List Set
No Outbound Access List Set
(OSPF point-to-point is not enabled for IPv6 because the router on the other end of the link does not support it).
This works for some period of time, doesn't seem to be a consistent amount of time, and then stops... when it stops, if I watch traffic on that link from the other end, I see IPv6 NS packets being sent for the address fd80:ae6b:5f43:100::2 but the ICX does not respond. Even rebooting the system doesn't help; the ICX still doesn't respond to NS from the other router.
Can anyone suggest additional troubleshooting or configuration I could try?
05-17-2021 03:03 AM
No solution yet, but the ICX started responding again a few days ago, and hasn't stopped since.
05-17-2021 04:29 AM
Could you pls try removing 'ipv6 nd suppress-ra' and check ?
05-17-2021 05:25 AM
Yes, if it stops behaving properly again that's the first thing on my list to try.
At the time that this problem occurred there was very little IPv6 traffic on this interface (pretty much just OSPFv3), but now there is more as there are additional devices on the other side of the ICX that are communicating. It is possible that this was somehow related to the lack of activity.
05-17-2021 06:39 AM
You can use 'show ipv6 neighbor' to check the current state of the neighbor as well.