LISTSERV 16.0 - MICE-DISCUSS Archives

Subscriber's Corner
Email Lists
MICE-DISCUSS Archives

MICE-DISCUSS@LISTS.IPHOUSE.NET

View:

Message:
[
First
Last
]
By Topic:
[
First
Last
]
By Author:
[
First
Last
]
Font:
Proportional Font
		LISTSERV Archives
		MICE-DISCUSS Home
		MICE-DISCUSS July 2014
Subject:
IPv6 neighbor solicitation at the exchange
From:
James Stahr <[log in to unmask]>
Reply-To:
MICE Discuss <[log in to unmask]>
Date:
Thu, 17 Jul 2014 16:07:12 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (218 lines)
First off, Did anyone make any changes on 07/15/2014 around 08:00?

The reason is that I think I've resolved an issue with our IPv6 peering 
with the MICE route servers, Charter, and TDS and I'm looking for a 
larger audience to see if it's my issue or perhaps an issue at the 
exchange.  I believe it to be the latter, but I'm not an IPv6 expert.

Starting two days ago around 8am CDT, we started experiencing BGP 
timeouts on some of our IPv6 BGP sessions.  I was able to work around 
the issue by removing our COPP policy and the BGP sessions were stable 
for 24 hours.  Reapplied the policy, sessions started to drop again.  
Looked at the policy to see which category is being exceeded, it's not 
the routing section which allows BGP/BFD/etc, but the ICMP-v6 one:


ipv6 access-list COPP-icmp-v6
  remark ICMP type 1/3,2,3/0,3/1,4/0,4/1,4/2,130,143
  permit icmp any any destination-unreachable
  permit icmp any any packet-too-big
  permit icmp any any time-exceeded
  permit icmp any any parameter-problem
  remark nd-na, nd-ns, ra, rs
  permit icmp any any nd-na
  permit icmp any any nd-ns
  permit icmp any any router-advertisement
  permit icmp any any router-solicitation
  remark MLD - query, report_v2
  permit icmp any any mld-query
  permit icmp any any 143


which is being policed like this:

  class Icmp-v6
   police 32000 60000 120000 conform-action transmit  exceed-action drop

I've worked around the issue by making a 4x increase in the policing, 
but the question I have is what happened at the exchange to provoke my 
COPP policy?  Alternatively, is this normal or indicate who has the problem:



r-pop-min-1#deb ipv6 icmp
   ICMP Packet debugging is on
r-pop-min-1#
Jul 17 14:36:08.143 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::56E0:3200:50CE:4178, Dst=FF02::1:FF00:1
Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.281 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.281 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.285 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.359 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.433 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.435 CDT: ICMPv6: Sent N-Solicit, 
Src=FE80::CA4C:75FF:FE23:805, Dst=2001:504:27::8252:0:1
Jul 17 14:36:08.459 CDT: ICMPv6: Received N-Advert, 
Src=2001:504:27::8252:0:1, Dst=FE80::CA4C:75FF:FE23:805
Jul 17 14:36:08.535 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.535 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:08.539 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.559 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::8252:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:08.586 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::B664:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:08.617 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.687 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.782 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:08.783 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:08.783 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
r-pop-min-1#
Jul 17 14:36:08.842 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:08.990 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.028 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.070 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.148 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.203 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.322 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.322 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.327 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.399 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.439 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.481 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.533 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::B664:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:09.572 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.572 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:09.581 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.608 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::2E21:72FF:FE71:37B1, Dst=FF02::1:FF00:1
Jul 17 14:36:09.613 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::8252:0:1, Dst=FF02::1:FF00:1
r-pop-min-1#
Jul 17 14:36:09.659 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:09.831 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:09.831 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:09.831 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:09.884 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.069 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.172 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.240 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.320 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.364 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.441 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.521 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.573 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.573 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.588 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::B664:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:10.622 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.659 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::8252:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:10.684 CDT: ICMPv6: Received N-Solicit, 
Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
Jul 17 14:36:10.817 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.830 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:10.830 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:10.830 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
Jul 17 14:36:10.853 CDT: ICMPv6: Received type 130, 
Src=FE80::21B:DFF:FEE7:15C0, Dst=FF02::1
r-pop-min-1#
Jul 17 14:36:10.908 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
Jul 17 14:36:10.925 CDT: ICMPv6: Received N-Solicit, 
Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1

I'm thinking that the answer is that this is not normal, as it looks 
like I'm getting duplicate solicitations in the same second.

-James

########################################################################

To unsubscribe from the MICE-DISCUSS list, click the following link:
?SUBED1=MICE-DISCUSS&A=1
Top of Message | Previous Page | Permalink
Search Archives

Advanced Options
Options

		Log In
		Get Password

		Search Archives

		Subscribe or Unsubscribe