Summary, Fault symptom, Fault analysis – Panasonic NN46240-710 User Manual

Page 98

Attention! The text in this document has been recognized automatically. To view the original document, you can use the "Original mode".

Nortel Secure Router 8000 Series

Troubleshooting - VPN___________

3 BGP/MPLS IP VPN troubleshooting

—End

Summary

When jumbo packets cannot be received, check whether the MTU is too small.

3.3.4 PE cannot ping through the remote CE network segment

Fault symptom

Figure 3-7

PE cannot ping through the remote CE network segment

vpn1

As shown in Figure 3-7, after binding multiple private network interfaces with the same VPN

instance, use the

ping 10.3.1.1

command on CE1 and CE2 to ping the remote CE3 segment of

PE1 successfully. The

ping -vpn-instance vpn1 10.3.1.1

command on PE1 cannot ping

through the CE3 segment.

Fault analysis

After binding multiple private network interfaces on the ingress (PE) with the same VPN

instance, if you ping or tracert the remote CE segment from PE, the source address of the
Internet Control Message Protocol (ICMP) packet is a private network address that is Up on the
local PE. If the remote CE does not import the address, no response packet returns.

Therefore, to use the

ping -vpn-instance

vpn-instance-name dest-ip-address command to ping

the remote CE segment successfully, ensure the remote CE uses the Up private network

addresses of the local PE.

Issue 5.3 (30 March 2009)

Nortel Networks Inc.

3-19