Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

FAQ
It is currently Wed Aug 23, 2017 8:57 am


Author Message
mandrei99
Post  Post subject: Junos VPLS Virtual circuit stuck in "VC-Dn" state  |  Posted: Tue Jul 09, 2013 9:48 am

Joined: Tue Aug 04, 2009 9:16 am
Posts: 245

Offline
 

Junos VPLS Virtual circuit stuck in "VC-Dn" state

Code:
# run show vpls connections
Layer-2 VPN connections:

Legend for connection status (St)   
EI -- encapsulation invalid      NC -- interface encapsulation not CCC/TCC/VPLS
EM -- encapsulation mismatch     WE -- interface and instance encaps not same
VC-Dn -- Virtual circuit down    NP -- interface hardware not present
CM -- control-word mismatch      -> -- only outbound connection is up
CN -- circuit not provisioned    <- -- only inbound connection is up
OR -- out of range               Up -- operational
OL -- no outgoing label          Dn -- down                     
LD -- local site signaled down   CF -- call admission control failure     
RD -- remote site signaled down  SC -- local and remote site ID collision
LN -- local site not designated  LM -- local site ID not minimum designated
RN -- remote site not designated RM -- remote site ID not minimum designated
XX -- unknown connection status  IL -- no incoming label
MM -- MTU mismatch               MI -- Mesh-Group ID not available
BK -- Backup connection          ST -- Standby connection
PF -- Profile parse failure      PB -- Profile busy
RS -- remote site standby        SN -- Static Neighbor
VM -- VLAN ID mismatch

Legend for interface status
Up -- operational           
Dn -- down                             

Instance: VPLS
  Local site: B (2)
    connection-site           Type  St     Time last up          # Up trans
    1                         rmt   VC-Dn  -----                          0
      Remote PE: 10.0.0.1, Negotiated control-word: No
      Incoming label: 262145, Outgoing label: 262146
      Local interface: lsi.1048577, Status: Up, Encapsulation: VPLS
        Description: Intf - vpls VPLS local site 2 remote site 1


"VC-Dn" state means that the Junos device data plane is not up, only the control plane is up because bgp neighbours are in "Established" state and there are routes in bgp.l2vpn.0 table:

Code:
# run show bgp summary
Groups: 1 Peers: 1 Down peers: 0
Table          Tot Paths  Act Paths Suppressed    History Damp State    Pending
inet.0               
                       0          0          0          0          0          0
bgp.l2vpn.0         
                       1          1          0          0          0          0
bgp.l3vpn.0         
                       0          0          0          0          0          0
Peer                     AS      InPkt     OutPkt    OutQ   Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
10.0.0.1              65533         40         38       0       0       15:36 Establ
  inet.0: 0/0/0/0
  bgp.l2vpn.0: 1/1/1/0
  VPLS.l2vpn.0: 1/1/1/0
  bgp.l3vpn.0: 0/0/0/0


Code:
# run show route table bgp.l2vpn.0 extensive

bgp.l2vpn.0: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
10.60.1.254:100:1:1/96 (1 entry, 0 announced)
        *BGP    Preference: 170/-101
                Route Distinguisher: 10.60.1.254:100
                Next hop type: Indirect
                Address: 0x9254568
                Next-hop reference count: 5
                Source: 10.0.0.1
                Protocol next hop: 10.0.0.1
                Indirect next hop: 2 no-forward
                State: <Active Int Ext>
                Local AS: 65533 Peer AS: 65533
                Age: 15:54      Metric2: 1
                Task: BGP_65533.10.0.0.1+52067
                AS path: I
                Communities: target:65533:100 Layer2-info: encaps:VPLS, control flags:, mtu: 0, site preference: 100
                Import Accepted
                Label-base: 262145, range: 8
                Localpref: 100
                Router ID: 10.60.1.254
                Secondary Tables: VPLS.l2vpn.0
                Indirect next hops: 1   
                        Protocol next hop: 10.0.0.1
                        Indirect next hop: 2 no-forward
                        Indirect path forwarding next hops: 1
                                Next hop type: Router
                                Next hop: 10.0.0.1 via ge-0/0/3.0
                        10.0.0.0/24 Originating RIB: inet.0
                          Node path count: 1
                          Forwarding nexthops: 1
                                Next hop type: Interface
                                Nexthop: via ge-0/0/3.0


The problem is "10.0.0.0/24 Originating RIB: inet.0". Bgp needs "protocol next-hop"s routes to be present in "inet.3" table:
Code:
# run show route 10.0.0.1 table inet.3 |count                 
Count: 0 lines


Depending on your configuration, either enable IGP to carry loopbacks (if you use "next-hop self" as internal bgp export policy action) or a static route in "inet.3" RIB:
Code:
# top set routing-options rib inet.3 static route 10.0.0.1 next-table inet.0
# commit
# run show route 10.0.0.1 table inet.3                             

inet.3: 1 destinations, 1 routes (1 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

10.0.0.1/32        *[Static/5] 00:00:08
                      to table inet.0



Now that I have the /32 route for the VPLS route next-hop in inet.3 table, let's check the vpls connections again:
Code:
# run show vpls connections                 
Layer-2 VPN connections:

Legend for connection status (St)   
EI -- encapsulation invalid      NC -- interface encapsulation not CCC/TCC/VPLS
EM -- encapsulation mismatch     WE -- interface and instance encaps not same
VC-Dn -- Virtual circuit down    NP -- interface hardware not present
CM -- control-word mismatch      -> -- only outbound connection is up
CN -- circuit not provisioned    <- -- only inbound connection is up
OR -- out of range               Up -- operational
OL -- no outgoing label          Dn -- down                     
LD -- local site signaled down   CF -- call admission control failure     
RD -- remote site signaled down  SC -- local and remote site ID collision
LN -- local site not designated  LM -- local site ID not minimum designated
RN -- remote site not designated RM -- remote site ID not minimum designated
XX -- unknown connection status  IL -- no incoming label
MM -- MTU mismatch               MI -- Mesh-Group ID not available
BK -- Backup connection          ST -- Standby connection
PF -- Profile parse failure      PB -- Profile busy
RS -- remote site standby        SN -- Static Neighbor
VM -- VLAN ID mismatch

Legend for interface status
Up -- operational           
Dn -- down                             

Instance: VPLS
  Local site: B (2)
    connection-site           Type  St     Time last up          # Up trans
    1                         rmt   Up     Jul  9 17:06:12 2013           1
      Remote PE: 10.0.0.1, Negotiated control-word: No
      Incoming label: 262145, Outgoing label: 262146
      Local interface: lsi.1048577, Status: Up, Encapsulation: VPLS
        Description: Intf - vpls VPLS local site 2 remote site 1





Top
Display posts from previous:  Sort by  
E-mail friendPrint view

Topics related to - "Junos VPLS Virtual circuit stuck in "VC-Dn" state"
 Topics   Author   Replies   Views   Last post 
There are no new unread posts for this topic. Example of BGP update message sent from Junos for a VPLS circuit

mandrei99

0

673

Fri Jul 19, 2013 9:24 am

mandrei99 View the latest post

There are no new unread posts for this topic. Junos VPLS Label Block Operations - Example with BGP signaling

mandrei99

0

1722

Thu Jul 04, 2013 7:44 am

mandrei99 View the latest post

There are no new unread posts for this topic. OSPF neighbors stuck in ExStart - case 1 - interface type mismatch

mandrei99

0

3861

Wed Dec 10, 2014 5:42 am

mandrei99 View the latest post

There are no new unread posts for this topic. Attachment(s) Twisted LDP signaled VPLS scenario using Juniper SRX selective packet services

mandrei99

1

1465

Mon Apr 13, 2015 3:25 am

Tripple26 View the latest post

There are no new unread posts for this topic. How to configure Junos ipv6 default route

mandrei99

0

2998

Mon Feb 16, 2015 6:29 pm

mandrei99 View the latest post

There are no new unread posts for this topic. Junos: BGP label allocation failure: Need a nexthop address on LAN

mandrei99

1

1108

Mon Nov 10, 2014 4:28 am

mandrei99 View the latest post

There are no new unread posts for this topic. Example of BGP update message sent from Junos device when export policy is modified

mandrei99

0

578

Fri Jul 19, 2013 9:09 am

mandrei99 View the latest post

There are no new unread posts for this topic. Junos: error: VRF: vrf-import needs at least one target community or a reject policy for vrf in

mandrei99

0

866

Wed Jul 03, 2013 8:39 am

mandrei99 View the latest post

There are no new unread posts for this topic. Junos: GRE interface in VR with local tunnel endpoint in main routing instance

mandrei99

0

2649

Thu May 23, 2013 9:33 am

mandrei99 View the latest post

There are no new unread posts for this topic. Junos router advertisements - Unix IPv6 stateless autoconfiguration via SLAAC

admin

0

2909

Mon Jun 23, 2014 5:23 am

admin View the latest post

 

Who is online
Users browsing this forum: No registered users and 0 guests
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
Jump to:  
News News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC - 5 hours [ DST ]



phpBB SEO