Monday, June 30, 2014

OTV example on ASR1000

OTV COMMANDS on ASR1000

OTV running configuration

COMMON OTV MISCONFIGURATION


1. OTV adds extra overhead around 46 bytes which reduce the data throughput from default size of 1500 - 46= 1554.  Since OTV  sends all data packet with  DF-BIT set by default,  make  sure end to end MTU is working fine else OTV adjacency will not come up.

2. For Unicast mode, adjaceny-server needs to configure on the server side and use-adjacensy-server needs to configure on remote side which will register with Adjacency server.


TOPOLOGY
=======

                      Site-1                                                                              Site-2                                                                       

3750-1----Gig0/0/1-ASR-1001---Gig0/0/0--(      ISP     )---Gig0/0/0--ASR1002---gig0/0/1------3750-2

192.168.1.1                            IP   1.1.1.1    -------------    IP   1.1.1.2                                    192.168.1.2


Site-1 
======

ASR1000-1#show run | i pim
 ip pim passive
ip pim ssm default

ip multicast-routing distributed

ASR1000-1#


ASR1000-1#show run | section otv
otv site bridge-domain 1 ---->  Note : It should match with EVC brdige domain configured under layer 2 side.
otv fragmentation join-interface GigabitEthernet0/0/0
otv site-identifier 1111.1111.1111
 


ASR1000-1#show running-config interface gigabitEthernet 0/0/0
Building configuration...

Current configuration : 125 bytes
!
interface GigabitEthernet0/0/0
 ip address 1.1.1.1 255.255.255.0
 ip pim passive
 ip igmp version 3
 negotiation auto
end

ASR1000-1#show run int ovErlay 1
Building configuration...

Current configuration : 237 bytes
!
interface Overlay1
 no ip address
 otv control-group 225.0.0.1
 otv data-group 232.0.0.0/8
 otv join-interface GigabitEthernet0/0/0
 otv vpn-name OTV-1
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 1

  otv mac flood 1111.1111.1111
 !
end

ASR1000-1#show running-config interface gigabitEthernet 0/0/1
Building configuration...

Current configuration : 149 bytes
!
interface GigabitEthernet0/0/1
 no ip address
 negotiation auto
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 1
 !
end




Site-2
======

ASR1000-2#show run | i pim
 ip pim passive
ip pim ssm default

ip multicast-routing distributed

ASR1000-2#


ASR1000-2#show run | i otv
otv site bridge-domain 2
otv fragmentation join-interface GigabitEthernet0/0/0
otv site-identifier 2222.2222.2222

ASR1000-2#show run int gigabitEthernet 0/0/0
Building configuration...

Current configuration : 125 bytes
!
interface GigabitEthernet0/0/0
 ip address 1.1.1.2 255.255.255.0
 ip pim passive
 ip igmp version 3
 negotiation auto
end


ASR1000-2#show run int overlay 2
Building configuration...

Current configuration : 237 bytes
!
interface Overlay2
 no ip address
 otv control-group 225.0.0.1
 otv data-group 232.0.0.0/8
 otv join-interface GigabitEthernet0/0/0
 otv vpn-name OTV-2
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 2
 !
end


ASR1000-2#show run int gigabitEthernet 0/0/1
Building configuration...

Current configuration : 149 bytes
!
interface GigabitEthernet0/0/1
 no ip address
 negotiation auto
 service instance 100 ethernet
  encapsulation dot1q 100
  bridge-domain 2
 !
end

ASR1000-2#

ASR1000-1#




ASR1000-1#show otv detail
Overlay Interface Overlay1
 VPN name                 : OTV-1
 VPN ID                   : 1
 State                    : UP
 AED Capable              : Yes
 IPv4 control group       : 225.0.0.1
 Mcast data group range(s): 232.0.0.0/8
 Join interface(s)        : GigabitEthernet0/0/0
 Join IPv4 address        : 1.1.1.1
 Tunnel interface(s)      : Tunnel0
 Encapsulation format     : GRE/IPv4
 Site Bridge-Domain       : 1
 Capability               : Multicast-reachable
 Is Adjacency Server      : No
 Adj Server Configured    : No
 Prim/Sec Adj Svr(s)      : None
 OTV instance(s)          : 0
 FHRP Filtering Enabled   : Yes
 ARP Suppression Enabled  : No
 ARP Cache Timeout        : 600 seconds


 

ASR1000-1#show otv adjacency
Overlay 1 Adjacency Database
Hostname                       System-ID      Dest Addr       Up Time   State
ASR1000-2                      4c00.8257.0a00 1.1.1.2         06:18:14  UP  
 

     
ASR1000-1#show otv site
Site Adjacency Information (Site Bridge-Domain: 1)

Overlay1 Site-Local Adjacencies (Count: 1)

  Hostname       System ID      Last Change Ordinal    AED Enabled Status
* ASR1000-1      C08C.60EF.5800 00:41:39    0          site       overlay
ASR1000-1#
 

ASR1000-1#show otv vpn OTV-1
Overlay Interface Overlay1
 VPN name                 : OTV-1
 VPN ID                   : 1
 State                    : UP
 AED Capable              : Yes
 IPv4 control group       : 225.0.0.1
 Mcast data group range(s): 232.0.0.0/8
 Join interface(s)        : GigabitEthernet0/0/0
 Join IPv4 address        : 1.1.1.1
 Tunnel interface(s)      : Tunnel0
 Encapsulation format     : GRE/IPv4
 Site Bridge-Domain       : 1
 Capability               : Multicast-reachable
 Is Adjacency Server      : No
 Adj Server Configured    : No
 Prim/Sec Adj Svr(s)      : None

 

ASR1000-1#show otv route

Codes: BD - Bridge-Domain, AD - Admin-Distance,
       SI - Service Instance, * - Backup Route

OTV Unicast MAC Routing Table for Overlay1

 Inst VLAN BD     MAC Address    AD    Owner  Next Hops(s)
----------------------------------------------------------
 0    100  1      b0fa.eb84.b1c1 50    ISIS   ASR1000-2
 0    100  1      b0fa.eb90.7a81 40    BD Eng Gi0/0/1:SI100
 0    100  1      b0fa.eb90.7ac2 40    BD Eng Gi0/0/1:SI100

3 unicast routes displayed in Overlay1

----------------------------------------------------------
3 Total Unicast Routes Displayed

ASR1000-1#show otv route ?
  bridge-domain     Display unicast MAC routes for a specific bridge-domain
  neighbor-address  Filter output on neighbor address
  owner             Filter output on owner
  vlan              Display unicast MAC routes for a specific VLAN
  |                 Output modifiers
  <cr>




ASR1000-1#show otv arp-nd-cache 

Overlay1 ARP/ND L3->L2 Address Mapping Cache
BD     MAC            Layer-3 Address  Age (HH:MM:SS) Local/Remote
1      b0fa.eb84.b1c1 192.168.1.2      00:00:06       Remote

ASR1000-1#show otv arp-nd-cache
Overlay1 ARP/ND L3->L2 Address Mapping Cache
BD     MAC            Layer-3 Address  Age (HH:MM:SS) Local/Remote
1      b0fa.eb84.b1c1 192.168.1.2      00:00:07       Remote

ASR1000-1#


ASR1000-1#show otv vlan authoritative
Key:  SI - Service Instance

Overlay 1 VLAN Configuration Information
 Inst VLAN  Bridge-Domain  Auth  Site Interface(s)
 0    100   1              yes   Gi0/0/1:SI100
 Total VLAN(s): 1
 Total Authoritative VLAN(s): 1

ASR1000-1#



ASR1000-1#show otv summary
OTV Configuration Information, Site Bridge-Domain: 1

Overlay VPN Name        Control Group   Data Group(s)      Join Interface State
1       OTV-1           225.0.0.1       232.0.0.0/8        Gi0/0/0        UP   
Total Overlay(s): 1
  
ASR1000-1#show otv statistics
OTV App Statistics
 RIB route update messages sent: 0
  Success responses: 0
  Sys Limit Failure responses: 0
  Topo Limit Failure responses: 0
  Sys and Topo Limit Failure responses: 0
  Other Failure responses: 0
 RIB route delete messages sent: 0
  Success responses: 0
  Not Found Failure responses: 0
  Other Failure responses: 0
 RIB route lookup messages sent: 0
  Route found responses: 0
  Route not found responses: 0
  Failure responses: 0

 OTV App Event Count:
  Invalid event                      : 0
  Configured control-group           : 1
  Configured data-group              : 1
  Configured join-interface          : 1
  Configured ARP/ND suppression      : 3
  Configured active-source           : 0
  Configured fragmentation           : 1
  External interface address change  : 0
  Bridge-domain VLAN assigned        : 1
  Bridge-domain VLAN unassigned      : 0
  Request to walk topologies         : 1
  Request for topology VLAN          : 0
  Request to walk multicast mappings : 1
  AED change pending notification    : 1
  Delete feature data                : 0
  MLRIB event received               : 7
  Send MLRIB MAC flood update        : 0
  Send MLRIB redist registration     : 1
  First/Last Overlay event           : 1
  Tunnel repopulation request        : 0
  Multicast HA DG sync               : 0
  Multicast HA checkpoint mapping    : 0
  ISIS mapping received              : 0
  ISIS flush mappings                : 0
  ISIS overlay adjacency change      : 3
  ISIS NSF mapping complete          : 0
  ISIS NSF adjacency complete        : 0
  Send MLRIB repopulation complete   : 0
  MLRIB NSF redistribution complete  : 0
  Join-interface OIR event           : 0

ASR1000-1# 


ASR1000-1#show otv mroute
OTV Multicast Routing Table for Overlay1

Bridge-Domain = 1, s = *, g = *
 Outgoing interface list:
  Default, NoRedist
 Incoming interface count = 0, Outgoing interface count = 1


1 multicast routes displayed in Overlay1

----------------------------------------------------------
1 Total Multicast Routes Displayed


ASR1000-1#show otv log ?
  error  Error buffer
  event  Event buffer


ASR1000-1#show otv isis ?
  Overlay        Overlay interface
  database       ISIS database information
  hostname       IS-IS Dynamic hostname mapping
  lsp-log        IS-IS LSP log
  neighbors      IS-IS neighbors
  nsf            Non-stop forwarding state
  protocol       IS-IS protocol details
  rib            ISIS local RIB information
  site           IS-IS L2 Site process
  spf-log        IS-IS SPF log
  vlan-database  ISIS VLAN database information



ASR1000-1#show otv data-group ?
  bridge-domain    Filter output on bridge-domain ID
  delivery-group   Filter output on delivery-group address
  delivery-source  Filter output on delivery-source address
  detail           Show detailed info
  group            Filter output on group address
  instance         Filter output on OTV instance
  local            Show only local data-group sources
  remote           Show only remote data-group sources
  source           Filter output on source address
  vlan             Filter output on VLAN ID
  |                Output modifiers
  <cr>

ASR1000-1#show otv data-group
No remote data-group mappings
No local data-group mappings



ASR1000-2#show ip mroute
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
       L - Local, P - Pruned, R - RP-bit set, F - Register flag,
       T - SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,
       X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
       U - URD, I - Received Source Specific Host Report,
       Z - Multicast Tunnel, z - MDT-data group sender,
       Y - Joined MDT-data group, y - Sending to MDT-data group,
       G - Received BGP C-Mroute, g - Sent BGP C-Mroute,
       Q - Received BGP S-A Route, q - Sent BGP S-A Route,
       V - RD & Vector, v - Vector
Outgoing interface flags: H - Hardware switched, A - Assert winner
 Timers: Uptime/Expires
 Interface state: Interface, Next-Hop or VCD, State/Mode

(*, 225.0.0.1), 07:09:05/stopped, RP 0.0.0.0, flags: DC
  Incoming interface: Null, RPF nbr 0.0.0.0
  Outgoing interface list:
    Tunnel0, Forward/Sparse-Dense, 07:09:05/00:02:54
    GigabitEthernet0/0/0, Forward/Sparse-Dense, 07:08:59/Proxy

(1.1.1.1, 225.0.0.1), 07:09:05/00:02:51, flags: T
  Incoming interface: GigabitEthernet0/0/0, RPF nbr 0.0.0.0
  Outgoing interface list:
    Tunnel0, Forward/Sparse-Dense, 07:09:05/00:02:54

(1.1.1.2, 225.0.0.1), 07:09:05/00:01:29, flags: T
  Incoming interface: GigabitEthernet0/0/0, RPF nbr 0.0.0.0
  Outgoing interface list:
    Tunnel0, Forward/Sparse-Dense, 07:09:05/00:02:54
    GigabitEthernet0/0/0, Forward/Sparse-Dense, 07:08:59/Proxy




OTV Troubleshooting Commands



show otv
Show otv adjacency
show otv vlan
show ethernet service instance id 100 interface t0/0/1 mac dynamic address | i 12bf(Target Mac address)
show bridge-domain <n> | i l2
show bridge-domain <n>
show otv route bridge-domain 100
show otv route vlan <n>
show otv isis rib redistribution mac-----
sh otv adjacency-server replication-list
show l2fib bridge-domain <number> otv encap <IP address>
show l2fib output-list <Olist number>
show l2fib bridge-domain <number> detail
show l2fib log error
show l2fib log event
show platform hardware qfp active statistics drop all | e 0
show platform hardware qfp active feature bridge-domain  datapath <number>

 Debug commands/Tools

packet-tracer /debug condition
Monitor capture on ASR
Debug otv isis-adj-commands
Access-list matching UDP port 8472 on join interface
Debug ip udp  port 8472 address <remote join interface>





 

 For more information :

 http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/OTV/config_guide/b_Cisco_Nexus_7000_Series_NX-OS_OTV_Configuration_Guide/adv-otv.html


OTV on ASR

http://www.cisco.com/c/en/us/support/docs/routers/asr-1000-series-aggregation-services-routers/117158-configure-otv-00.html

http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCI/whitepaper/DCI3_OTV_Intro/DCI_1.html



OTV example on CSR100v.

http://www.ccierants.com/2013/04/ccie-dc-roll-your-own-otv.html


Please refer   DC to Cloud VM mobility: L2 extension in   below document.

https://www.ciscolive2014.com/connect/fileDownload/session/190E2760454F8AD6B560E616754AC22F/LTRSPG-2960-lf_Lab_Manual_v1.pdf


OTV adjacency server feature to use as otv transport if multicast core is not available.

 http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wan_otv/configuration/xe-3s/wan-otv-xe-3s-book/wan-otv-adj-server.html

1 comment:

  1. In a multihomed design how does the customer L2 switch mac tables get updated when the WAN overlay drops on the on the active OTV router. I have an issue at the moment where I have to wait 5 minutes for the mac address table to age out before comms are restored?

    ReplyDelete