ExtremeSwitching (EXOS)

Expand all | Collapse all

Extreme Summit Switch Appears to not be Sending any OSPF Hellos

  • 1.  Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-07-2017 23:37
    I am trying to get an OSPF adjacency between a Summit X460G2-48p-G4 and a Palo Alto VM-100. I have done this quite a few times already at other deployments, but I am having a very hard time getting this working at this particular location.

    When I run the show ospf neighbor command, I can see the Palo Alto VM-100 as a neighbor but the neighborship is stuck in "init":

    Neighbor ID Pri State Up/Dead Time Address Interface
    BFD Session State
    ==========================================================================================
    10.130.36.10 1 INIT /DR 00:00:05:41/00:00:00:01 10.130.36.10 Inside
    None

    Looking in the log:

    08/08/2017 01:53:33.87


  • 2.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-08-2017 09:32
    Hi Trevor,

    Are these two devices directly connected or via an intermediate switch?

    Can you share the "show configuration hal" from the switch?



  • 3.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-08-2017 10:23
    Karthik,
    The devices are directly connected with no intermediate switch or device in between. Here is the output of show configuration hal:

    # Module hal configuration.
    #
    configure iproute sharing max-gateways 4

    Thanks



  • 4.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-08-2017 12:07
    Trevor,

    Thanks for sharing the output, i do not see the issue in the hal configuration that i expected.

    Since both the devices are directly connected the next step i would suggest is to do a TCPDUMP in the switch, there are few debug command available to do this from EXOS CLI itself but be wary and read through the complete article before proceeding.

    https://gtacknowledge.extremenetworks.com/articles/How_To/Perform-a-packet-capture-in-the-EXOS-CLI-u...

    Lets see what the packet capture says.



  • 5.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-08-2017 12:13
    I tried the packet capture command, but it would not run at all:

    debug packet capture port 4 on file-name ospftshoot1 count 200
    ^
    %% Invalid input detected at '^' marker.

    I realize the article indicates that this is a "hidden" command but here is what I get if I try to question mark it:

    debug packet ?
    show Display packet details



  • 6.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-08-2017 12:27
    I also ran a packet capture using these commands instead:

    debug packet capture ports 4 on
    debug packet capture ports 4 off

    The switch accepted these commands but there was no packet capture afterwards:

    ls
    drw-r--r-- 2 root root 1024 Apr 14 2016 dhcp
    drw-r--r-- 2 root root 1024 Apr 14 2016 lost+found
    -rw-rw-rw- 1 root root 500783 Aug 8 02:14 primary.cfg
    drw-r--r-- 4 root root 1024 Aug 8 01:19 ssl
    drwxr-xr-x 2 root root 1024 Aug 8 01:19 vmt

    ls /usr/local/tmp
    -rw-rw-rw- 1 root root 36 Aug 8 14:55 capture.log
    drwxrwxrwx 2 root root 1024 Apr 14 2016 dhcp



  • 7.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-08-2017 23:00
    Hi Trevor,

    As your version is 22.1.1, the issue of "no packet capture file" seems to be matched with:

    https://gtacknowledge.extremenetworks.com/articles/Solution/Enabling-Debug-Packet-Capture-on-a-port-...

    So now, you can get packet capture either :
    • Packet capture from Palo Alto VM-100 or
    • Mirror packet for the port in the switch
    Please refer following URL for the way of mirroring on EXOS:
    https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Enable-And-Configure-Mirroring-In-E...

    Regards,
    David



  • 8.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-08-2017 23:14
    Which version the switch is running? I'm afraid you hit below bug.
    https://gtacknowledge.extremenetworks.com/articles/Solution/OSPF-state-is-stuck-in-Init



  • 9.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-09-2017 02:23
    Hi Trevor,

    I would suggest to open up a ticket with GTAC so that we can assist you to collect the packets to the CPU via debug mode (which needs one time password).


  • 10.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-09-2017 02:23
    He's running 22.1, so he should not be hitting this bug.


  • 11.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-09-2017 12:06
    Did you check the usual, like mtu? Is the Palo Alto using also a broadcast link or is it configured as pt2pt?


  • 12.  RE: Extreme Summit Switch Appears to not be Sending any OSPF Hellos

    Posted 08-09-2017 12:20
    I verified that the MTU is 1500 on both the Palo Alto device as well as the switch:

    Extreme Switch:

    debug vlan show vlan "Inside" | i mtu
    flags:0x1100001000[-] mtu:1500 qos:0 l2Protos:0 adminState:1

    Palo Alto Firewall:

    Name: ethernet1/2, ID: 17
    Operation mode: layer3
    Virtual router default
    Interface MTU 1500

    This is the default value in both cases. The Palo Alto is configured to use a broadcast link:



    I supposed I will try upgrading to version 22.3.1.4 this evening to see if it makes any difference in either the OSPF issue and/or the packet capture issue. I will report back tomorrow if this makes any difference as I have to wait until after hours to reboot the switch.

    Thanks