攻城獅高級數(shù)據(jù)中心otv技術(shù)設(shè)備配置排錯(cuò)手冊英文overlay transport virtualization

攻城 (技術(shù)+生活)攻城 攻城 (技術(shù)+生活)AdvancedOTV–Configure,VerifyandTroubleshootOTVinYourNetworkAndyGossett::BRKDCT-CustomerSupport2攻城 歸原作者所有本資 試OTVMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding生生itllr

歸原作者所有本資 試OverlayTransportVirtualization(OTV)inaOTVisaMAC-in-IPmethodthatextendsLayer2connectivityacrossatransportnetworkinfrastructureOTVsupportsbothmulticastandunicast-onlytransportOTVusesISISasthecontrolOTVonNexus7000doesnotencryptencapsulated生生itllr

歸原作者所有本資 試PerformsOTVSupportmultipleOTVdevicesperOTVrequirestheTransportServices(TRS)licenseCreatingnondefaultVDC’srequiresAdvancedServiceslicense

Edge 生生itllr Regularlayer2interfacesfacingtheNoOTVconfigurationCurrentlysupportedonlyonM-seriesFutureSupportforF1seriesInternal

?2012Ciscoand/oritsaffiliates.All

Cisco UplinkonEdgedevicethatjoinstheForwardsOTVcontrolanddataLayer3CurrentlysupportedonlyonM-series

Join

?2012Ciscoand/oritsaffiliates.All

Cisco VirtualInterfacewheretheOTVconfigurationsareappliedMulti-accessmulticast-capableEncapsulatesLayer2

?2012Ciscoand/oritsaffiliates.All

Cisco OTVsupportsmultipleedgedevicesperAsingleOTVdeviceiselectedasAEDonaper-vlanbasisTheAEDisresponsibleforadvertisingMACreachabilityandforwardingtrafficintoandoutofthesiteforitsVLANs

AEDforodd

?2012Ciscoand/oritsaffiliates.All

Cisco

歸原作者所有本資 試OTVsupportsmultipleedgedevicesperAsingleOTVdeviceiselectedasAEDonaper-vlanbasisTheAEDisresponsibleforadvertisingMACreachabilityandforwardingtrafficintoandoutofthesiteforitsVLANs

AEDforeven 生生itllr

歸原作者所有本資 試Priorto5.2(1)OTVusedonlycommunicationonthesitevlanforAED

I’mAEDforEvenVLANs

I’mAEDforOdd 生生itllr

歸原作者所有本資 試Priorto5.2(1)OTVusedonlycommunicationonthesitevlanforAEDelection

I’mAEDforAllVLANs

I’mAEDforAllVLANsvMisconfigurationorconnectivityonthesitevlancouldresultinactive/activeAEDmode

生生itllr

歸原作者所有本資 試Terminology:SiteVLANandSite

5.2(1)addedDualSite SiteAdjacencyestablishedacrossthesitevlanOverlayAdjacencyestablishedviatheJoininterfaceacrossLayer3network

I’mAEDforEvenVLANs Site-ID

I’mAEDforOdd Site-ID1.1.1Site-ID

oSite-IDo生生itllr

歸原作者所有本資 試Terminology:SiteVLANandSite

Ifacommunicationproblemoccursonthesitevlan,eachOTVdevicecanstilladvertiseAEDcapabilitiesacrossoverlaytopreventanactive/active

I’mAEDforEvenVLANs Site-ID

I’mAEDforOdd Site-ID1.1.1Site-ID

oSite-IDo生生itllr

歸原作者所有本資 試Terminology:SiteVLANandSiteDualSiteAdjacencyalsohasmechanismforadvertisingAED

I’mnotAED

I’mAEDforEvenVLANs

I’mAEDforOdd

I’mnowAEDALLVLANscapabilitiesonlocalfailuretoimproveJoininterface

I’mnotAED生生itllr Terminology:SiteVLANandSiteDualSiteAdjacencyalsohasmechanismforadvertisingAEDcapabilitiesonlocalfailuretoimproveJoininterfaceInternalVlans

I’mnotAED

I’mAEDforEvenVLANsmnotAED

I’mAEDforOdd

I’mnowAEDALLVLANs

?2012Ciscoand/oritsaffiliates.All

Cisco Terminology:SiteVLANandSiteDualSiteAdjacencyalsohasmechanismforadvertisingAED

I’mnowAEDEVENVLANs

I’mAEDALL

I’mnowAEDODDcapabilitiesonlocalfailuretoimproveJoininterfaceInternalVlansAEDdownor

owI’mnowI’mnow

?2012Ciscoand/oritsaffiliates.All

Cisco OverlayMulticastTransportvs.UnicastPacket IP o,Unicast o,Multicast OTVOTVHeaderforUser

?2012Ciscoand/oritsaffiliates.All

Cisco OTVIntroductionMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco

歸原作者所有本資 試EnableOTVfeature

生生itllr SiteVLANandSiteSiteVLANneedstobeconfiguredandactiveevenifyoudonothavemultipleOTVdevicesinthesamesitesiteVLANshouldnotbeextendedacrossSiteIdentifiercanbeanynumberbetween0000.0000.0001andffff.ffff.ffff.Valuewillalwaysbedis yedinMACformatSiteIdentifiermustbeuniqueforeachSiteIdentifierisrequiredin5.2(1)andaboveforoverlaytocomeup.ThismustbekeptinmindwhenperforminganISSUfromapre-5.2(1)Service

?2012Ciscoand/oritsaffiliates.All

Cisco SiteVLANandSiteotvsite-vlanotvsite-identifier

otvsite-vlanotvsite-identifier

?2012Ciscoand/oritsaffiliates.All

Cisco Join

interfaceport-channelmtuipaddress4/30ipigmpversion3

?2012Ciscoand/oritsaffiliates.All

Cisco OTVIntroductionMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco

歸原作者所有本資 試MulticastTransport:interfaceotvjoin-interfaceport-channel100otvcontrol-groupotvdata-groupotvextend-vlan200-

生生itllr MulticastTransport:Fullfeatureotvsite-vlanotvsite-identifierinterfaceotvjoin-interfaceport-channel100otvcontrol-groupotvdata-group/24otvextend-vlan200-209nointerfaceport-channel100mtu9216ipaddress4/30ipigmpversion3

featureotvsite-vlanotvsite-identifierinterfaceotvjoin-interfaceport-channel100otvcontrol-groupotvdata-group/24otvextend-vlan200-209nointerfaceport-channel100mtu9216ipaddress6/30ipigmpversion3

?2012Ciscoand/oritsaffiliates.All

Cisco OTVIntroductionMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastTransport:OTVcanrunacrossaunicastonlyUnicastTransportrequirestheconfigurationofoneormoreadjacencyservers.OTVdevicesregisterwiththeadjacencyserverwhichinturnprovideseachwithanOTVNeighborList(oNL).ThinkoftheadjacencyserverasaspecialprocessrunningonagenericOTVedgedeviceAprimaryandsecondaryadjacencyservercanbeconfiguredfor

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastTransport:PrimaryAdjacencyServerinterfaceotvjoin-interfaceport-channel100otvextend-vlan200-209otvadjacency-serverunicast-

?2012Ciscoand/oritsaffiliates.All

Cisco

歸原作者所有本資 試UnicastTransport:SecondaryAdjacencyServerinterfaceotvjoin-interfaceport-channel100otvextend-vlan200-209

Primaryotvuse-adjacency-server4unicast-otvadjacency-serverunicast-

生生itllr Unicast interfaceotvjoin-interfaceport-channel100otvextend-vlan200-209

Primary

Secondary

otvuse-adjacency-server46unicast-

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastTransport:Fullfeatureotvsite-vlanotvsite-identifierinterfaceotvjoin-interfaceport-channel100otvextend-vlan200-209

featureotvsite-vlanotvsite-identifierinterfaceotvjoin-interfaceport-channel100otvextend-vlan200-209otvuse-adjacency-server4unicast-onlyotvadjacency-serverunicast-onlynointerfaceport-channel100mtu9216

otvadjacency-serverunicast-nointerfaceport-channel100mtu9216ipaddress

ipaddress

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastTransport:Fullfeatureotvsite-vlanotvsite-identifierinterfaceotvjoin-interfaceport-channel100otvextend-vlan200-209otvuse-adjacency-server46unicast-onlynoshutdown

featureotvsite-vlanotvsite-identifierinterfaceotvjoin-interfaceport-channel100otvextend-vlan200-209otvuse-adjacency-server46unicast-onlynoshutdowninterfaceport-channel100mtu9216ipaddress

interfaceport-channel100mtu9216ipaddress

?2012Ciscoand/oritsaffiliates.All

Cisco OTVsupportsauthenticationof omessagesalongwithauthenticationof!ConfigureOTVkeykeychainOTVKeyskey1key-string0!Applymd5authenticationto interfaceotvisisauthentication-typeotvisisauthenticationkey-chain

!Applymd5authenticationtoOTVotv-isisauthentication-typemd5authenticationkey-chain

?2012Ciscoand/oritsaffiliates.All

Cisco OTVMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency:IPForbothmulticastandunicasttransports,adjacenciescannotbeformedwithoutIPconnectivitybetweenthejoininterfacesofeachOTVedgedeviceWEST_OTVA# EAST_OTVAjoin 6count 6(6):56data64bytesfrom6:icmp_seq=0ttl=251time=1.287--- statistics--1packets d,1packetsreceived,0.00%packetWEST_OTVA# EAST_OTVBjoinWEST_OTVA# WEST_OTVBjoin

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency:Verifyoverlayandsite-vlanareWEST_OTVA#show

Multicast

WEST_OTVA#show

UnicastOTVOverlaySiteIdentifier0001.0001.0001OverlayinterfaceOverlay1 : :endedvlans :200-209(Total:10)Controlgroup :Datagrouprange(s):Joininterface(s) :Po100(4)Sitevlan :210(up)AED- : :Multicast-

OTVOverlaySiteIdentifier0001.0001.0001OverlayinterfaceOverlay1 : :endedvlans :200-209(Total:10)Joininterface(s) :Po100(4)Sitevlan :210(up)AED- : :Unicast-OnlyIsAdjacencyServer:YesAdjacencyServer(s):[None]/

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency: o(IIH)WEST_OTVA#showotvisissitestatistics|beginOTV-IS-ISPDUstatisticsforsite-LAN-000001000000WEST_OTVA#showotvisisOTV-IS-ISprocess::OTV-IS-LAN-00300200000

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency: ooverMulticast oshavepacketsizeof1442Bytesthroughmulticasttransport1400BISIS+42BOTVOTVISISsentonmulticastcontrol-group,sourcedfromjoininterfaceSystemIDandSiteIdentifierincludedin

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency: ooverUnicast oshavepacketsizeof1450Bytesthroughunicasttransport1400BISIS+42BOTVheader+8BUDPOTVISISviaunicast,sourcedanddestinedbetweenjoininterfacesOTVISIS osentencapsulatedinUDPunicastonport8472SystemIDandSiteIdentifierincludedin

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency:ISISOverlayWEST_OTVA#showotvisisOTV-IS-ISprocess:default :Overlay1OTV-IS-ISadjacencydatabase:System LevelStateHoldTimeInterfaceSite- 64a0.e741.c841 Overlay1 64a0.e741.c842 Overlay1 6c9c.ed40.1741 Overlay1

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency:OTVOverlayWEST_OTVA#showotvOverlayOverlay-Overlay1System-DestUp 64a0.e741.c842 19:34:30

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency:ISISSiteWEST_OTVA#showotvisisOTV-ISISsite-informationfor: CSNPNext Next 10

Level AdjsUpPriCircuit 164 *[outputNeighborSystemID:64a0.e741.c842IPv4sitegroups:

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency:OTVSiteWEST_OTVA#showotv

DualAdjacencyState -BothsiteandoverlayadjacencyupPartial-Eithersite/overlayadjacency -Bothadjacenciesaredown(Neighborisdown/unreachable) -Site-IDmismatchdetectedLocalEdgeDevice HostnameSystem-IDSite-Identifier0001.0001.0001Site-VLAN210StateisUpSiteInformationforLocaldeviceisAED-NeighborEdgeDevicesinSite:

System-

?2012Ciscoand/oritsaffiliates.All

Cisco AuthoritativeEdgeDeviceWEST_OTVA#showotvvlan200-OTVExtendedVLANsandEdgeDeviceStateInformation(*- Auth.Edge Vlan

inactive(Non201* E

?2012Ciscoand/oritsaffiliates.All

Cisco Adjacency:OTVOverlayAdjacenciesforMulticastFormulticasttransport,OTVjoininterfacesareconfiguredwithIGMPv3.Therefore,fromthetransport's ,theOTVedgedevicesappearashostsendingandrequestingtrafficfromthecontrol-group

CORE#showipmroute[output(*,

01:15:56/00:03:06,RP,OIFcount:4,flags:),00:47:13/00:03:25,OIFcount:3,flags:),00:47:06/00:03:15,OIFcount:3,flags:),00:56:40/00:03:25,OIFcount:3,flags:),00:57:17/00:03:25,OIFcount:3,flags:

?2012Ciscoand/oritsaffiliates.All

Cisco OTVMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco Unicast

Hostonvlan201IP01MAC

AEDvlan AEDvlan

Hostonvlan201IP02MAC

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastSimplifiedtopologybasedonAEDforvlanLet’sassumethatARPhasalreadyresolvedbetween

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco

歸原作者所有本資 試UnicastForwarding:UseronSiteWestSendsUnicastPackettoSitePacketisreceivedoninternalinterfaceonOTVVerifyCAMentryandOTVWEST_OTVA#showmacaddress-tableaddress001f.6c75.1d42vlan*-primaryentry,G-GatewayMAC,(R)-RoutedMAC,O-OverlayMACage-secondssincelastseen,+-primaryentryusingvPCPeer-Link MAC SecureNTFY vlan

O FWEST_OTVA#showotvrouteOTVUnicastMACRoutingTableForVLANMAC- Metric Next-201001f.6c75.1d42 00:02:25 生生itllr UnicastForwarding:UseronSiteWestSendsUnicastPackettoSiteVerifynexthopIPaddressforWEST_OTVA#showotvOverlayAdjacency

Overlay-InterfaceOverlay1 System- Dest Up 6c9c.ed40.1741 19:34:34 64a0.e741.c841 19:34:30 64a0.e741.c842 19:34:30

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastForwarding:UseronSiteWestSendsUnicastPackettoSiteVerifyincrementingcountersontunnel

WEST_OTVA#showtunnelinternalimplicitotvdetailTunnel16397isupMTU9178bytes,BW9TransportprotocolisinVRF"default"Tunnelprotocol/transportGRE/IPTunnelsource4,destinationLastclearingof"showinterface"counterspacketsoutput,1minuteoutputrate171packetsinput,1minuteinputrate171vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastForwarding:UseronSiteWestSendsUnicastPackettoSiteVerifyhardwareadjacencyandOTVshimincludesanMPLSlabeltoidentifytheencapsulatedVLAN.MPLSLabel=32+vlan32+201=233=0xe9

WEST_OTVA#showsysteminternalforwardingotvoverlay1vlan201DevNo:1MPLSLabel: id:TCAMIdx:0x1ffa9A Idx:0x4302a Type:EoMPLSrc:1ccc:6pv:0l2_fwd:1Packets:0Bytes:(BD:21,VlanId:201,PeerId:DevNo: TCAMIdx:AdjIdx:0x4303d EgressLif:0x8004RDT:1EgressLifBase:5ccc:0 pv:1 l2_fwd:1 rc:1labelhi:0x0 labellow:0xe90 Packets:0 Bytes:0Tunneladjindex:0x43037 GRE:YESDIP:6SIP:vlan

LIF: DI: ccc:Packets: Bytes: zone

L2_FWD::

RDT:

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastForwarding:Encapsulated42ByteOTVheaderoverheadIncreasespacketsizeto142BytesPacketsentunicastthroughtransportwithendpointIP’sofAEDJoininterfaceLabeltoidentifyvlan32+201=233OriginalIPheader

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastForwarding:UseronsiteWestsendsunicastpackettositeEncapsulatedpacketisreceivedonJoininterfaceofEastForDecapsulation,verifyhitsagainstinternalEAST_OTVA#access-|Tcam0Label_a=0x802Bank0-----IPv4Policies:TunnelDecap(TunnelDecaponVRFdefault)[Index]Entry

0/326/328/326/324/326/32

vlan[0010]permitip/0/0

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastForwarding:UseronsiteWestsendsunicastpackettositeVerifyOTVrouteforentrypointstolocalVerifyCAMentryfordestinationMACpointsoutinternalEAST_OTVA#showotvroute001f.6c75.1d42vlanOTVUnicastMACRoutingTableForVLANMAC- Metric Next----------------------------------------------------201001f.6c75.1d42 00:01:50 port-EAST_OTVA#showmacaddress-tableaddress001f.6c75.1d42vlan

0

*-primaryentry,G-GatewayMAC,(R)-RoutedMAC,O-Overlay

-

lastseen,+-primaryentryusingvPCPeer- MAC SecureNTFY

vlan

* F

?2012Ciscoand/oritsaffiliates.All

Cisco UnicastForwarding:UseronsiteWestsendsunicastpackettositePacketwillbesentoutinternalinterfaceatsiteEastandL2switchedtotheReturnpathfromEasttoWestwillbethe

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco OTVMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:IGMPJoinatWestsiterequeststrafficformulticastgroupThereisnoserversendingtrafficforthis

vlanvlanMulticast

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:IGMPJoinMulticastWEST_OTVA#showipigmp groupsvlanType:S-Static,D- -Routerport,F-FabricpathcoreVlanGroup VerTypePort

WEST_OTVA#showotvmroutevlan201OTVMulticastRoutingTableFor(201,*,0),metric:0,uptime:00:00:21,igmpOutgoinginterfacelist:(count:1)Po103,uptime:00:00:21,vlan201

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:IGMPJoinMulticast

(r)meansthereisareceiverthatexistsacrosstheoverlayEAST_OTVA#showotvmroutevlanOTVMulticastRoutingTableFor(201,*,0),metric:0,uptime:00:00:01,overlay(r)Outgoinginterfacelist:(count:1)Overlay1,uptime:00:00:01,isis_otv-

vlan201

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:IGMPJoinUnicastEAST_OTVA#showotvmroutevlan201OTVMulticastRoutingTableFor(201,*,0),metric:0,uptime:00:00:46,overlay(r)Outgoinginterfacelist:(count:1)Overlay1,WEST_OTVA,uptime:00:00:46,isis_otv-

vlan201

OILcontainsOverlayandOTVneighborinunicastmodeasedgedeviceisresponsibleforreplications

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:MulticastServerServeratEastsitestartssendingtraffictogroupThereare srequestingthe

vlan201

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:MulticastServerMulticastEAST_OTVA#showotvmroutevlan201OTVMulticastRoutingTableFor(201,02,0),metric:0,uptime:00:00:30,Outgoinginterfacelist:(count:LocalDelivery:s=6,g=EAST_OTVA#showotvdata-groupvlan201LocalActiveSourcesforOverlay1VLANActive-SourceActive-GroupDelivery-SourceDelivery-GroupJoin-IF

201020 vlan201

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:MulticastServerMulticast

(s)meansthereisasourcethatexistsacrosstheoverlayWEST_OTVA#showotvmroutevlan201OTVMulticastRoutingTableFor

(201,02,0),metric:0,uptime:00:00:53,Outgoinginterfacelist:(count:RemoteDelivery:s=6,g=WEST_OTVA#showotvdata-groupvlan201RemoteActiveSourcesforOverlay1VLANActive- Active- Delivery-SourceDelivery-GroupJoined-vlan201

201

Multicast

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:MulticastServerUnicastEAST_OTVA#showotvmroutevlan201OTVMulticastRoutingTableFor(201,02,0),metric:0,uptime:00:00:11,Outgoinginterfacelist:(count:LocalDelivery:s=,g=EAST_OTVA#showotvdata-groupvlan

Nodeliverygroupinunicast

ActiveSourcesfor

VLANActive-SourceActive-GroupDelivery-SourceDelivery-GroupJoin-IF201020

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:MulticastServerUnicast

NostatecreatedonWestWEST_OTVA#showotvmroutevlan

WEST_OTVA#showotvdata-groupvlan

vlan201

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:Source MulticastWEST_OTVA#showotvmroutevlan201OTVMulticastRoutingTableFor

WestEdgeDevicesendsanIGMPv3SSMjoinfortheDeliverySourceandtheDeliveryGrouponitsJoininterfacevlan201

(201,*,0),metric:0,uptime:00:01:50,Outgoinginterfacelist:(count:Po103,uptime:00:01:50,(201,02,0),metric:0,uptime:00:04:47,overlay(sOutgoinginterfacelist:(count:0)RemoteDelivery:s=6,g=WEST_OTVA#showotvdata-groupRemoteActiveSourcesforOverlay1VLANActive- Active- Delivery-SourceDelivery-GroupJoined-201

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:Source MulticastEAST_OTVA#showotvmroutevlan201OTVMulticastRoutingTableFor(201,*,0),metric:0,uptime:00:01:42,overlay(r)Outgoinginterfacelist:(count:1)Overlay1,uptime:00:01:42,isis_otv-(201,02,0),metric:0,uptime:00:04:42,Outgoinginterfacelist:(count:1)Overlay1,uptime:00:01:42,otvLocalDelivery:s=6,g=EAST_OTVA#showotvdata-groupLocalActiveSourcesforOverlay1VLANActive-SourceActive-GroupDelivery-SourceDelivery-GroupJoin-IF201020

0

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:EncapsulatedPacket,MulticastSourcedfromJoininterface,anddestinedtofirstaddressinLabeltoidentifyvlan32+201=233OriginalIPheader

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:Source Unicast

Sincecoredoesnotsupportmulticast,WestsitecannotsendSSMjoinforgroup.Instead,WestneedsonlytocommunicatetoEastthatithasareceiveranditwillreceivethegroupviaunicast.Onlythe*,Giscreatedinunicastmode WEST_OTVA#showotvmroute

OTVMulticastRoutingTableFor(201,*,0),metric:0,uptime:Outgoinginterfacelist:(count:1)Po103,uptime:00:00:17,igmp

vlan201

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:Source UnicastEAST_OTVA#showotvmroutevlanOTVMulticastRoutingTableFor(201,*,0),metric:0,uptime:00:00:46,overlay(r)Outgoinginterfacelist:(count:1)Overlay1,WEST_OTVA,uptime:00:00:46,isis_otv-

Eachmulticastgroupissentviaunicasttoeachsitewithreceivers(201,02,0),metric:0,uptime:00:01:54,Outgoinginterfacelist:(count:1)Overlay1,WEST_OTVA,uptime:00:00:46,otvEAST_OTVA#showforwardingotvmulticastroutevlan!Someoutput Interface:NULL,

Received

NumberofOutgoingOutgoingInterfaceListIndex:Tunnel16407OutgoingPackets:41096OTVunicasttunnelend-points: vlan:

vlan201MulticastServer

?2012Ciscoand/oritsaffiliates.All

Cisco MulticastForwarding:EncapsulatedPacket,UnicastSourceandDestinationIPbetweenJoinInterfacesLabeltoidentifyvlan32+201=233OriginalIPheader

?2012Ciscoand/oritsaffiliates.All

Cisco OTVMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco AddressResolutionProtocolWewillassumethatnoneofthedevicesinthetopologyhaveARPorCAMentriesforthehostsinvlan201

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco ARP:HostatWestSiteSendsARPRequestforHostatSinceit’sabroadcastpacket,itisforwardedtoboththeOTVdevicesatWestsiteNonAEDatWestsitedropsthebroadcastpacket(loopAEDlearnstheMACaddressonitsinternal

WEST_OTVA#showmacaddress-tablevlan*-primaryentry,G-GatewayMAC,(R)

MAC,O- age-secondssincelastseen,+-

usingvPCPeer- MAC SecureNTFY vlan

* F

?2012Ciscoand/oritsaffiliates.All

Cisco

歸原作者所有本資 試ARP:HostatWestSiteSendsARPRequestforHostatOnlearningnewMAC,WestAEDsendsISISupdatetoallOTVSinglepacketonmulticastcontrolgroup(MulticastOr,unicasttoeachadjacency(UnicastOnlyAEDatremotesitesprogramnewMACintoOTVrouteandCAM

C

EAST_OTVA#showmacaddress-tablevlan*-primaryentry,G-GatewayMAC,(R)-RoutedMAC,O-OverlayMACage-secondssincelastseen,+-primaryentryusingvPCPeer-Link MAC SecureNTFY

vlan O F生生itllr ARP:HostatWestSiteSendsARPRequestforHostatWestAEDperformslookupinARP-ND(ARP-IPv6NeighborDiscover)cacheforEastHostIPIfanentrywerepresent,WestcouldsendARPreply( )tolocalhostwithoutforwardingpacketacrossoverlay

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco ARP:HostatWestSiteSendsARPRequestforHostatSincethereisnoentrypresentincache,WestencapsulatesARPbroadcastandsendstoallOTVdevicesSinglepacketonmulticastcontrolgroup(MulticastOr,unicasttoeachadjacency(Unicast

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco ARP:HostatWestSiteSendsARPRequestforHostatAEDatEastsitereceivespacketonJoininterface,decapsulatesandsendsitoninternalinterfacetowardhostNonAEDatEastwillalsoreceivepacketbutwillnot

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco ARP:HostatEastSiteSendsARPReplyforHostatAEDatEastreceivesunicastReplyonitsinternalEastupdatesitsCAMtablewiththeMACaddresspointingoutitsinternal

EAST_OTVA#showmacaddress-tablevlan *-primaryentry,G-GatewayMAC,(R)-RoutedMAC,O-OverlayMACage-secondssincelastseen,+-primaryentryusingvPCPeer-Link MAC SecureNTFY

vlan O F* F

?2012Ciscoand/oritsaffiliates.All

Cisco ARP:HostatEastSiteSendsARPReplyforHostatOnlearningnewMAC,EastsendsISISupdatetoallOTVSinglepacketonmulticastcontrolgroup(MulticastOr,unicasttoeachadjacency(UnicastOnlyAEDatremotesitesprogramnewMACintoOTVrouteandCAM

WEST_OTVA#showmacaddress-tablevlan*-primaryentry,G-GatewayMAC,(R)

MAC,O-

**0FFO0FFage-secondssincelastseen,+-

usingvPCPeer- MAC SecureNTFY vlan

?2012Ciscoand/oritsaffiliates.All

Cisco ARP:HostatEastSiteSendsARPReplyforHostatEastperformslookupinitsCAMforunicastdestination.BecauseofpreviousISISupdate,EastfindsanentrypointingoutoverlaytowardWestEastencapsulatesARPreplyandsendsviaunicastto

vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco ARP:HostatEastSiteSendsARPReplyforHostatWestreceivespacketonJoinInterface,decapsulatespacketandsendsoutinternalinterfacetowardhostWestupdatesARP-NDcacheforEastHostfromARP

WEST_OTVA#showotvarp-nd-OTVARP/NDL3->L2Address OverlayInterfaceVLANMAC Layer-3 Expires 00:00:04vlan

vlan

?2012Ciscoand/oritsaffiliates.All

Cisco OTVMulticastTransportUnicast-onlyTransportUnicastForwardingMulticastForwarding

?2012Ciscoand/oritsaffiliates.All

Cisco VerifyappropriateMTU betweenOTVjoin‘packet-size’inNxOSrepresentssizeofdatainICMPTotestMTU,mustaccountfor8ByteICMPheader,20ByteIP1442=1414+20+8,usepacket-sizeof1450=1422+20+8,usepacket-sizeof1542=1514+20+8,usepacket-sizeofWEST_OTVA#!VerifytransportsupportsMTUof 6packet-size1514df- 6(6):1514data1522bytesfrom6:icmp_seq=0ttl=251time=2.333

?2012Ciscoand/oritsaffiliates.All

Cisco (!)Flagimpliesamismatchsite-idReceivingsamesite-idacrossoverlaywithoutsiteReceivingdifferentsite-idacrosssiteWEST_OTVA#showotvDualAdjacencyState -BothsiteandoverlayadjacencyPartial-Eithersite/overlayadjacency -Bothadjacenciesaredown(Neighbor -Site-IDmismatch!Someoutput System- Partial

?2012Ciscoand/oritsaffiliates.All

Cisco PartialAdjacencyimplieseitherthesiteoroverlayadjacencyisBotharerequiredtomaintainedafullMostcommonreasonfor‘down’overlayadjacencyisPIMmisconfigurationintransport(multicasttransport)orinsufficientMTUMatchingsite-idconfigurationateachSufficientMTUthroughIPconnectivitybetweeneachedgeCorrectPIMconfigurationthroughcoreformulticast

?2012Ciscoand/oritsaffiliates.All

Cisco ARPandCAMtimerAsymmetricalroutingwithmis-matchARPtimerscancausetraffictoblack-holeacrossOTV

Vlan201:Vlan202:

Vlan201:Vlan202:Host1,vlan01,GW:

Host2,vlan02,GW:

?2012Ciscoand/oritsaffiliates.All

Cisco ARPandCAMtimerSincethetrafficflowbetweenHost1andHost2isroutedtraffic,OTVwillonlyseesourceMACofthegatewaysanddestinationoftheHosts25

DA:Host2SA:N7k1

30

DA:Host2SA:N7k1

DA:Host2SA:N7k1

30

DA:Host2SA:N7k1

4

DA:SA:

an201:an202:

Vlan201:Vlan202:10.202.

DA:Host2SA:N7k1Host1,vlan01,GW:

Host2,vlan02,GW:

?2012Ciscoand/oritsaffiliates.All

Cisco

ARPandCAMtimerSincethetrafficflowbetweenHost1andHost2isroutedtraffic,OTVwillonlyseesourceMACofthegatewaysanddestinationoftheHosts25

DA:Host1SA:6500

30

DA:Host1SA:6500

DA:Host1SA:6500

30

DA:Host1SA:6500

4

DA:Host1SA:6500

an201:an202:

Vlan201:Vlan202:10.202.

DA:SA:Host1,vlan01,GW:

Host2,vlan02,GW:

?2012Ciscoand/oritsaffiliates.All

Cisco

ARPandCAMtimerOTVdoesnotsendunknownunicasttrafficacrossSubsequentpacketsfromEasttowardHost1willbedroppeduntilHost1MACisrelearnedonWest

EAST_OTVA#showmacaddvlan*-primaryentry,G-GatewayMAC,(R)-RoutedMAC,O-OverlayMACage-secondssincelastseen,+-primaryentryusingvPCPeer-Link

Vlan201:Vlan202: MAC SecureNTFY

Host2,vlan* FO F!Host1(001b.d419.1842)MAChasbeen

02,GW:

?2012Ciscoand/oritsaffiliates.All

Cisco

ARPandCAMtimerissue-Solution:Change6500ARPtimertobelessthanOTVCAM25

30

30

25

Vlan201:Vlan202:

Vlan201:Vlan202:Host1,vlan01,GW:

Host2,vlan02,GW:

?2012Ciscoand/oritsaffiliates.All

Cisco

NetworkLoadBalancerSomenetworkloadbalancerservices(NLBS)relyonfloodingtoreachalldevicesintheclusterClustersthatrelyonaunicastIPtomulticastMACwillbeforwardedacrossoverlayinsamefashionasabroadcastpacketwithoutanyadditionalEncapsulatedwithinthecontrolgroup(multicastUnicasttoeachOTVneighbor(unicastClustersthatrelyonaunicastIPtounicastMACwillbe

?2012Ciscoand/oritsaffiliates.All

Cisco

NetworkLoadBalancerServices-AstaticunicastMACentrycanbeconfiguredatasingleFuturesupportnnedforselectiveunicastflooding

EAST_OTVA#showrun|imacaddress-tablestatic0200.0ac9.00a2vlan201interfaceport-EAST_OTVA#showotvroutevlanOTVUnicastMACRoutingTableForVLANMAC- Metric Next-2010200.0ac9.00a2 00:00:11 port-

WEST_OTVA#showotvroutevlanOTVUnicastMACRoutingTableForVLANMAC- Metric