LISTSERV mailing list manager LISTSERV 16.0

Help for MICE-DISCUSS Archives


MICE-DISCUSS Archives

MICE-DISCUSS Archives


MICE-DISCUSS@LISTS.IPHOUSE.NET


View:

Message:

[

First

|

Previous

|

Next

|

Last

]

By Topic:

[

First

|

Previous

|

Next

|

Last

]

By Author:

[

First

|

Previous

|

Next

|

Last

]

Font:

Proportional Font

LISTSERV Archives

LISTSERV Archives

MICE-DISCUSS Home

MICE-DISCUSS Home

MICE-DISCUSS  July 2014

MICE-DISCUSS July 2014

Subject:

Re: IPv6 neighbor solicitation at the exchange

From:

Rob Mosher <[log in to unmask]>

Reply-To:

MICE Discuss <[log in to unmask]>

Date:

Fri, 18 Jul 2014 15:06:22 -0400

Content-Type:

text/plain

Parts/Attachments:

Parts/Attachments

text/plain (237 lines)

You shouldn't be grouping neighbor discovery in the same rate limits as 
other type of icmpv6.  If someone starts pinging your router at a high 
rate or if there is a routing loop that generates a bunch of time 
exceeded messages it will cause your neighbor discovery to fail and will 
be unable to reach your peers.  Those are just two examples, but you 
really need neighbor discovery to be handled elsewhere.

--
Rob Mosher
Senior Network and Software Engineer
Hurricane Electric / AS6939

On 7/17/2014 5:07 PM, James Stahr wrote:
> First off, Did anyone make any changes on 07/15/2014 around 08:00?
>
> The reason is that I think I've resolved an issue with our IPv6 
> peering with the MICE route servers, Charter, and TDS and I'm looking 
> for a larger audience to see if it's my issue or perhaps an issue at 
> the exchange.  I believe it to be the latter, but I'm not an IPv6 expert.
>
> Starting two days ago around 8am CDT, we started experiencing BGP 
> timeouts on some of our IPv6 BGP sessions.  I was able to work around 
> the issue by removing our COPP policy and the BGP sessions were stable 
> for 24 hours.  Reapplied the policy, sessions started to drop again.  
> Looked at the policy to see which category is being exceeded, it's not 
> the routing section which allows BGP/BFD/etc, but the ICMP-v6 one:
>
>
> ipv6 access-list COPP-icmp-v6
>  remark ICMP type 1/3,2,3/0,3/1,4/0,4/1,4/2,130,143
>  permit icmp any any destination-unreachable
>  permit icmp any any packet-too-big
>  permit icmp any any time-exceeded
>  permit icmp any any parameter-problem
>  remark nd-na, nd-ns, ra, rs
>  permit icmp any any nd-na
>  permit icmp any any nd-ns
>  permit icmp any any router-advertisement
>  permit icmp any any router-solicitation
>  remark MLD - query, report_v2
>  permit icmp any any mld-query
>  permit icmp any any 143
>
>
> which is being policed like this:
>
>  class Icmp-v6
>   police 32000 60000 120000 conform-action transmit  exceed-action drop
>
> I've worked around the issue by making a 4x increase in the policing, 
> but the question I have is what happened at the exchange to provoke my 
> COPP policy?  Alternatively, is this normal or indicate who has the 
> problem:
>
>
>
> r-pop-min-1#deb ipv6 icmp
>   ICMP Packet debugging is on
> r-pop-min-1#
> Jul 17 14:36:08.143 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::56E0:3200:50CE:4178, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.178 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.281 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.281 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.285 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.359 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.433 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.435 CDT: ICMPv6: Sent N-Solicit, 
> Src=FE80::CA4C:75FF:FE23:805, Dst=2001:504:27::8252:0:1
> Jul 17 14:36:08.459 CDT: ICMPv6: Received N-Advert, 
> Src=2001:504:27::8252:0:1, Dst=FE80::CA4C:75FF:FE23:805
> Jul 17 14:36:08.535 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.535 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.539 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.559 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::8252:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.586 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::B664:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.617 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.687 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.782 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.783 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.783 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> r-pop-min-1#
> Jul 17 14:36:08.842 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:08.990 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.028 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.070 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.148 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.191 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.203 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.322 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.322 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.327 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.399 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.439 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.481 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.533 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::B664:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.572 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.572 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.581 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.608 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::2E21:72FF:FE71:37B1, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.613 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::8252:0:1, Dst=FF02::1:FF00:1
> r-pop-min-1#
> Jul 17 14:36:09.659 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.831 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.831 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.831 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:09.884 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.069 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.172 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.223 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.240 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.320 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.364 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.441 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.521 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.573 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.573 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.588 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::B664:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.622 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.659 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::8252:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.684 CDT: ICMPv6: Received N-Solicit, 
> Src=FE80::221:9BFF:FE8A:D29D, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.817 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.830 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.830 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.830 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::3BA3:0:1, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.853 CDT: ICMPv6: Received type 130, 
> Src=FE80::21B:DFF:FEE7:15C0, Dst=FF02::1
> r-pop-min-1#
> Jul 17 14:36:10.908 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
> Jul 17 14:36:10.925 CDT: ICMPv6: Received N-Solicit, 
> Src=2001:504:27::D1AF:0:2, Dst=FF02::1:FF00:1
>
> I'm thinking that the answer is that this is not normal, as it looks 
> like I'm getting duplicate solicitations in the same second.
>
> -James
>
> ########################################################################
>
> To unsubscribe from the MICE-DISCUSS list, click the following link:
> ?SUBED1=MICE-DISCUSS&A=1

########################################################################

To unsubscribe from the MICE-DISCUSS list, click the following link:
?SUBED1=MICE-DISCUSS&A=1

Top of Message | Previous Page | Permalink

Advanced Options


Options

Log In

Log In

Get Password

Get Password


Search Archives

Search Archives


Subscribe or Unsubscribe

Subscribe or Unsubscribe


Archives

November 2020
October 2020
September 2020
August 2020
July 2020
June 2020
May 2020
April 2020
March 2020
February 2020
January 2020
December 2019
November 2019
October 2019
September 2019
August 2019
July 2019
June 2019
May 2019
April 2019
March 2019
February 2019
January 2019
December 2018
November 2018
October 2018
September 2018
August 2018
July 2018
June 2018
May 2018
April 2018
March 2018
February 2018
January 2018
December 2017
November 2017
October 2017
September 2017
August 2017
July 2017
June 2017
May 2017
April 2017
March 2017
February 2017
January 2017
December 2016
November 2016
October 2016
September 2016
August 2016
July 2016
June 2016
May 2016
April 2016
March 2016
February 2016
January 2016
December 2015
November 2015
October 2015
September 2015
August 2015
July 2015
June 2015
May 2015
April 2015
March 2015
February 2015
January 2015
December 2014
November 2014
October 2014
September 2014
August 2014
July 2014
June 2014
May 2014
April 2014
March 2014
February 2014
January 2014
December 2013
November 2013
October 2013
September 2013
August 2013
July 2013
June 2013
May 2013
April 2013
March 2013
February 2013
January 2013
December 2012
November 2012
October 2012
September 2012
August 2012
July 2012
June 2012
May 2012
April 2012
March 2012
February 2012
January 2012
December 2011
November 2011
October 2011
September 2011
August 2011
July 2011
June 2011
May 2011
April 2011
March 2011
February 2011
January 2011
December 2010
November 2010
October 2010
September 2010
August 2010
July 2010

ATOM RSS1 RSS2



LISTS.IPHOUSE.NET

CataList Email List Search Powered by the LISTSERV Email List Manager