3.1.1-45:vRouter responds to a non-existent MAC for an overlay ping.

[Sandeep Sridhar]

If an overlay ping (https://www.juniper.net/techpubs/en_US/junos14.1/topics/reference/command-summary/ping-vxlan-qfx-series.html) is triggered from TOR to a non-existent MAC, vRouter responds back saying "Overlay-segment present at RVTEP". This behavior is not correct.

root@QFX5100-28> show ovsdb mac
Logical Switch Name: Contrail-cedb806e-4a96-4920-8e1f-e8ab0f311903
  Mac IP Encapsulation Vtep
  Address Address Address
  ff:ff:ff:ff:ff:ff 0.0.0.0 Vxlan over Ipv4 1.1.1.28
  02:85:80:63:30:84 0.0.0.0 Vxlan over Ipv4 10.204.74.5
  40:a6:77:d8:77:c1 0.0.0.0 Vxlan over Ipv4 1.1.1.230
  54:4b:8c:3a:58:01 0.0.0.0 Vxlan over Ipv4 1.1.1.230
  d0:67:e5:ef:a8:89 0.0.0.0 Vxlan over Ipv4 1.1.1.230
  ff:ff:ff:ff:ff:ff 0.0.0.0 Vxlan over Ipv4 10.204.74.4

{master:0}
root@QFX5100-28> ping overlay vni 4 tunnel-dst 10.204.74.5 tunnel-src 1.1.1.28 mac 02:85:80:63:30:84 tunnel-type vxlan count 2 <<<existing mac example>>>

ping-overlay protocol vxlan

        vni 4
        tunnel src ip 1.1.1.28
        tunnel dst ip 10.204.74.5
        mac address 02:85:80:63:30:84
        count 2
        ttl 255

        WARNING: following hash-parameters are missing -
                hash computation may not succeed

                end-host smac
                end-host dmac
                end-host src ip
                end-host dst ip
                end-host input-ifd-idx
                end-host protocol
                end-host l4-src-port
                end-host l4-dst-port

Request for seq 1, to 10.204.74.5, at Jan 24 2017 17:25:15.166 IST
Response for seq 1, from 10.204.74.5, at Dec 07 2031 18:26:32.-1296629248 IST, rtt 1 msecs

  Overlay-segment present at RVTEP 10.204.74.5

Request for seq 2, to 10.204.74.5, at Jan 24 2017 17:25:16.168 IST
Response for seq 2, from 10.204.74.5, at Jun 18 2032 22:46:48.1572798976 IST, rtt 11 msecs

  Overlay-segment present at RVTEP 10.204.74.5

Here are the packets:

tcpdump: WARNING: em1: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on em1, link-type EN10MB (Ethernet), capture size 65535 bytes
14:31:16.322717 2c:21:31:e9:a8:05 > f8:bc:12:33:41:c8, ethertype IPv4 (0x0800), length 144: 1.1.1.28.37317 > 10.204.74.5.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x01), vni 31
41:0b:00:00:01:3a > 00:00:00:01:58:87, 802.3, length 44: LLC, dsap Null (0x00) Individual, ssap Null (0x00) Command, ctrl 0x0000: Information, send seq 0, rcv seq 0, Flags [Command], length 30
14:31:16.322985 f8:bc:12:33:41:c8 > 2c:21:31:e9:a8:05, ethertype IPv4 (0x0800), length 144: 10.204.74.5.37317 > 1.1.1.28.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x02), vni 31
41:0b:00:00:01:3a > 00:00:00:01:58:87, ethertype Unknown (0xdc7e), length 44:
 0x0000: 0000 89ed 0400 0001 0014 0000 0400 0101 ................
 0x0010: 011c 0001 0008 0285 8063 3084 0000 .........c0...
14:31:17.324311 2c:21:31:e9:a8:05 > f8:bc:12:33:41:c8, ethertype IPv4 (0x0800), length 144: 1.1.1.28.37317 > 10.204.74.5.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x01), vni 31
41:0c:00:00:01:3c > 00:00:00:02:58:87, 802.3, length 44: LLC, dsap Null (0x00) Individual, ssap Null (0x00) Command, ctrl 0x0000: Information, send seq 0, rcv seq 0, Flags [Command], length 30
14:31:17.324605 f8:bc:12:33:41:c8 > 2c:21:31:e9:a8:05, ethertype IPv4 (0x0800), length 144: 10.204.74.5.37317 > 1.1.1.28.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x02), vni 31
41:0c:00:00:01:3c > 00:00:00:02:58:87, ethertype Unknown (0xdd7e), length 44:
 0x0000: 0000 daf3 0400 0001 0014 0000 0400 0101 ................
 0x0010: 011c 0001 0008 0285 8063 3084 0000 .........c0...

{master:0}
root@QFX5100-28> ping overlay vni 4 tunnel-dst 10.204.74.5 tunnel-src 1.1.1.28 mac 02:85:80:63:30:94 tunnel-type vxlan count 2 <<<non-existing MAC example>>>

ping-overlay protocol vxlan

        vni 4
        tunnel src ip 1.1.1.28
        tunnel dst ip 10.204.74.5
        mac address 02:85:80:63:30:94
        count 2
        ttl 255

        WARNING: following hash-parameters are missing -
                hash computation may not succeed

                end-host smac
                end-host dmac
                end-host src ip
                end-host dst ip
                end-host input-ifd-idx
                end-host protocol
                end-host l4-src-port
                end-host l4-dst-port

Request for seq 1, to 10.204.74.5, at Jan 24 2017 17:25:22.544 IST
Response for seq 1, from 10.204.74.5, at Aug 28 2035 00:48:24.-780597248 IST, rtt 1 msecs

  Overlay-segment present at RVTEP 10.204.74.5

Request for seq 2, to 10.204.74.5, at Jan 24 2017 17:25:23.546 IST
Response for seq 2, from 10.204.74.5, at Mar 09 2036 05:08:40.-125892608 IST, rtt 11 msecs

  Overlay-segment present at RVTEP 10.204.74.5

Here are the packet captures:

tcpdump: WARNING: em1: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on em1, link-type EN10MB (Ethernet), capture size 65535 bytes
14:33:02.661538 2c:21:31:e9:a8:05 > f8:bc:12:33:41:c8, ethertype IPv4 (0x0800), length 144: 1.1.1.28.37317 > 10.204.74.5.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x01), vni 31
41:75:00:00:02:8f > 00:00:00:01:58:87, 802.3, length 44: LLC, dsap Null (0x00) Individual, ssap Null (0x00) Command, ctrl 0x0000: Information, send seq 0, rcv seq 0, Flags [Command], length 30
14:33:02.661823 f8:bc:12:33:41:c8 > 2c:21:31:e9:a8:05, ethertype IPv4 (0x0800), length 144: 10.204.74.5.37317 > 1.1.1.28.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x02), vni 31
41:75:00:00:02:8f > 00:00:00:01:58:87, ethertype Unknown (0x467f), length 44:
 0x0000: 0000 1e19 0a00 0001 0014 0000 0400 0101 ................
 0x0010: 011c 0001 0008 0285 8063 3094 0000 .........c0...
14:33:03.663475 2c:21:31:e9:a8:05 > f8:bc:12:33:41:c8, ethertype IPv4 (0x0800), length 144: 1.1.1.28.37317 > 10.204.74.5.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x01), vni 31
41:76:00:00:02:91 > 00:00:00:02:58:87, 802.3, length 44: LLC, dsap Null (0x00) Individual, ssap Null (0x00) Command, ctrl 0x0000: Information, send seq 0, rcv seq 0, Flags [Command], length 30
14:33:03.663715 f8:bc:12:33:41:c8 > 2c:21:31:e9:a8:05, ethertype IPv4 (0x0800), length 144: 10.204.74.5.37317 > 1.1.1.28.4789: VXLAN, flags [I] (0x09), vni 4
00:00:5e:90:00:00 > 00:00:5e:90:00:01, ethertype IPv4 (0x0800), length 94: 127.0.0.1.4789 > 127.0.0.0.4789: VXLAN, flags [.] (0x02), vni 31
41:76:00:00:02:91 > 00:00:00:02:58:87, ethertype Unknown (0x477f), length 44:
 0x0000: 0000 8720 0a00 0001 0014 0000 0400 0101 ................
 0x0010: 011c 0001 0008 0285 8063 3094 0000 .........c0...

Please fix this.

Greetings,
Sandeep.

[Sandeep Sridhar (ssandeep)]

Hi Jayaram,

  When we run overlay ping tests between QFX switches,

"End-System Present" or "End-System Not Present" is shown
other than "Overlay-segment present at RVTEP" or "Overlay-segment Not present at RVTEP."

Can we please implement the same behavior when we run ping overlay in between vRouter and QFX.

Greetings,
Sandeep.

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/28375
Submitter: Hari Prasad Killi (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/28375
Committed: http://github.org/Juniper/contrail-controller/commit/203a6554a6d4fe503d651beabc857f12dc59f096
Submitter: Zuul (<email address hidden>)
Branch: R3.1

commit 203a6554a6d4fe503d651beabc857f12dc59f096
Author: Hari <email address hidden>
Date: Fri Feb 3 00:11:07 2017 +0530

Check the received MAC in overlay ping

Process the sub-TLV for mac addresses and update the return code
based on whether the MAC is present or not. Also update the timestamp
sent in the packet appropriately.

Change-Id: I54c12f9ada02d01c8323e3fa308dd0e8ea9debf0
closes-bug: #1658876

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/28466
Submitter: Hari Prasad Killi (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/28467
Submitter: Hari Prasad Killi (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/28467
Committed: http://github.org/Juniper/contrail-controller/commit/829fb4dbc8ed7f299ff7dbf054b629f8299438af
Submitter: Zuul (<email address hidden>)
Branch: master

commit 829fb4dbc8ed7f299ff7dbf054b629f8299438af
Author: Hari <email address hidden>
Date: Fri Feb 3 00:11:07 2017 +0530

Check the received MAC in overlay ping

Process the sub-TLV for mac addresses and update the return code
based on whether the MAC is present or not. Also update the timestamp
sent in the packet appropriately.

Conflicts:
 src/vnsw/agent/diag/diag.cc
 src/vnsw/agent/diag/diag_pkt_handler.cc

Change-Id: I54c12f9ada02d01c8323e3fa308dd0e8ea9debf0
closes-bug: #1658876

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/28466
Committed: http://github.org/Juniper/contrail-controller/commit/980a965adf1951a226089a505def57b41d30ef71
Submitter: Zuul (<email address hidden>)
Branch: R3.2

commit 980a965adf1951a226089a505def57b41d30ef71
Author: Hari <email address hidden>
Date: Fri Feb 3 00:11:07 2017 +0530

Check the received MAC in overlay ping

Process the sub-TLV for mac addresses and update the return code
based on whether the MAC is present or not. Also update the timestamp
sent in the packet appropriately.

Conflicts:
 src/vnsw/agent/diag/diag.cc
 src/vnsw/agent/diag/diag_pkt_handler.cc

Change-Id: I54c12f9ada02d01c8323e3fa308dd0e8ea9debf0
closes-bug: #1658876

[Sandeep Sridhar (ssandeep)]

This is the output now. Tested with vRouter 3.2.2.0-33 and QFX 14.1X53-D40.8

root@QFX-88> show ovsdb mac
Logical Switch Name: Contrail-615d07ed-1c34-4872-b5c7-14321ccaba45
  Mac IP Encapsulation Vtep
  Address Address Address
  ff:ff:ff:ff:ff:ff 0.0.0.0 Vxlan over Ipv4 1.1.1.81
  00:19:e2:55:f2:c3 0.0.0.0 Vxlan over Ipv4 1.1.1.81
  02:67:31:ce:0e:ad 0.0.0.0 Vxlan over Ipv4 10.204.74.5
  ff:ff:ff:ff:ff:ff 0.0.0.0 Vxlan over Ipv4 10.204.74.4

{master:1}
root@QFX-88> ping overlay vni 4 tunnel-dst 10.204.74.5 tunnel-src 1.1.1.81 mac 02:67:31:ce:0e:ad tunnel-type vxlan count 1

ping-overlay protocol vxlan

        vni 4
        tunnel src ip 1.1.1.81
        tunnel dst ip 10.204.74.5
        mac address 02:67:31:ce:0e:ad
        count 1
        ttl 255

        WARNING: following hash-parameters are missing -
                hash computation may not succeed

                end-host smac
                end-host dmac
                end-host src ip
                end-host dst ip
                end-host input-ifd-idx
                end-host protocol
                end-host l4-src-port
                end-host l4-dst-port

Request for seq 1, to 10.204.74.5, at Apr 27 2017 12:12:33.777 UTC
Response for seq 1, from 10.204.74.5, at Apr 27 2017 12:12:33.-550521791 UTC, rtt 1 msecs

  Overlay-segment present at RVTEP 10.204.74.5

      End-System Present

{master:1}
root@QFX-88> ping overlay vni 4 tunnel-dst 10.204.74.5 tunnel-src 1.1.1.81 mac 02:67:31:ce:0e:af tunnel-type vxlan count 1

ping-overlay protocol vxlan

        vni 4
        tunnel src ip 1.1.1.81
        tunnel dst ip 10.204.74.5
        mac address 02:67:31:ce:0e:af
        count 1
        ttl 255

        WARNING: following hash-parameters are missing -
                hash computation may not succeed

                end-host smac
                end-host dmac
                end-host src ip
                end-host dst ip
                end-host input-ifd-idx
                end-host protocol
                end-host l4-src-port
                end-host l4-dst-port

Request for seq 1, to 10.204.74.5, at Apr 27 2017 12:12:39.805 UTC
Response for seq 1, from 10.204.74.5, at Apr 27 2017 12:12:39.-544494423 UTC, rtt 1 msecs

  Overlay-segment present at RVTEP 10.204.74.5

      End-System Not Present

When a non-existent MAC is overlay ping'ed, we get Overlay-segment present at rvtep but end system not present. This issue is fixed now.

-Sandeep.