[prev in list] [next in list] [prev in thread] [next in thread]
List: nanog
Subject: Cisco SCTP response packet from global instead of vrf
From: Karsten Thomann via NANOG <nanog () nanog ! org>
Date: 2019-04-24 8:32:23
Message-ID: 4277545.5UVyRhzKDD () linne
[Download RAW message or body]
Hello,
I've an interessting problem I've never saw before.
We have two Routers (19xx and 4451) with the same configuration design:
Dialer 1 and 1 LAN Interface in global table with default route over the LAN
Dialer 2 and 1 LAN Interface in vrf internet, default via dialer 2 towards the core.
The router is receiving a SCTP packet destined to the dialer 2 IP and sends a response
packet not via the expected dialer 2 interface within the internet vrf where it was
received, but sends it via the default route in global table...
Does anyone know why the response is send from another routing table?
The configuration is pretty basic without any leaking, just a global table for a vpn service
and an internet vrf for an internet connection.
Thanks in Advance
Karsten
[Attachment #3 (unknown)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" \
"http://www.w3.org/TR/REC-html40/strict.dtd"> <html><head><meta name="qrichtext" \
content="1" /><style type="text/css"> p, li { white-space: pre-wrap; }
</style></head><body style=" font-family:'Tahoma'; font-size:8.25pt; font-weight:400; \
font-style:normal;"> <p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; \
margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Hello,</p> \
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; \
margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p> \
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; \
-qt-block-indent:0; text-indent:0px;">I've an interessting problem I've never saw \
before.</p> <p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; \
margin-right:0px; -qt-block-indent:0; text-indent:0px;">We have two Routers (19xx and \
4451) with the same configuration design:</p> <p style=" margin-top:0px; \
margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; \
text-indent:0px;">Dialer 1 and 1 LAN Interface in global table with default route \
over the LAN</p> <p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; \
margin-right:0px; -qt-block-indent:0; text-indent:0px;">Dialer 2 and 1 LAN Interface \
in vrf internet, default via dialer 2 towards the core.</p> <p \
style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; \
margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p> <p style=" \
margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; \
-qt-block-indent:0; text-indent:0px;">The router is receiving a SCTP packet destined \
to the dialer 2 IP and sends a response packet not via the expected dialer 2 \
interface within the internet vrf where it was received, but sends it via the default \
route in global table...</p> <p style="-qt-paragraph-type:empty; margin-top:0px; \
margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; \
text-indent:0px; "> </p> <p style=" margin-top:0px; margin-bottom:0px; \
margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px;">Does anyone \
know why the response is send from another routing table?</p> <p style=" \
margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; \
-qt-block-indent:0; text-indent:0px;">The configuration is pretty basic without any \
leaking, just a global table for a vpn service and an internet vrf for an internet \
connection.</p> <p style="-qt-paragraph-type:empty; margin-top:0px; \
margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; \
text-indent:0px; "> </p> <p style=" margin-top:0px; margin-bottom:0px; \
margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px;">Thanks in \
Advance</p> <p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; \
margin-right:0px; -qt-block-indent:0; text-indent:0px;">Karsten</p></body></html>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic