Summary, Fault symptom, Fault analysis – Panasonic NN46240-710 User Manual
Page 98
Attention! The text in this document has been recognized automatically. To view the original document, you can use the "Original mode".
Nortel Secure Router 8000 Series
Troubleshooting - VPN___________
3 BGP/MPLS IP VPN troubleshooting
—End
Summary
When jumbo packets cannot be received, check whether the MTU is too small.
3.3.4 PE cannot ping through the remote CE network segment
Fault symptom
Figure 3-7
PE cannot ping through the remote CE network segment
vpn1
vpn1
vpn1
As shown in Figure 3-7, after binding multiple private network interfaces with the same VPN
instance, use the
ping 10.3.1.1
command on CE1 and CE2 to ping the remote CE3 segment of
PE1 successfully. The
ping -vpn-instance vpn1 10.3.1.1
command on PE1 cannot ping
through the CE3 segment.
Fault analysis
After binding multiple private network interfaces on the ingress (PE) with the same VPN
instance, if you ping or tracert the remote CE segment from PE, the source address of the
Internet Control Message Protocol (ICMP) packet is a private network address that is Up on the
local PE. If the remote CE does not import the address, no response packet returns.
Therefore, to use the
ping -vpn-instance
vpn-instance-name dest-ip-address command to ping
the remote CE segment successfully, ensure the remote CE uses the Up private network
addresses of the local PE.
Issue 5.3 (30 March 2009)
Nortel Networks Inc.
3-19