IPv6 traffic failed after vSRX2.0 failover, vRouter still send traffic to old active node
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
R3.0 |
Fix Committed
|
High
|
Anand H. Krishnan | |||
R3.0.2.x |
Fix Committed
|
High
|
Anand H. Krishnan | |||
R3.1 |
Fix Committed
|
High
|
Anand H. Krishnan | |||
Trunk |
Fix Committed
|
High
|
Anand H. Krishnan |
Bug Description
Pls keep this as private since this is our Juniper own lab.
Currently we are using allowed-
Contrail https:/
OpenStack http://
Username: admin
Password: contrail123
PC1 (centos-pc1) ipv4 1.1.1.4 ipv6 1000::4
PC2 (centos-pc2) ipv4 10.1.1.4 ipv6 1100::4
vSRX cluster HA-D50-Simon
ipv4 left 1.1.1.3 right 10.1.1.3
ipv6 left 1000::3 right 1100::3
From PC1 we can ping 1100::4 then I do a failover on the vsrx for RG1, but traffic stops for about 10mins then resumes.
You can access the PCs via OpenStack their instance name are centos-pc1 and centos-pc2
How to do failover on VSRX:
#request chassis cluster failover reset redundancy group 1
#request chassis cluster failover redundancy group 1 node 0
I still keep the last working setup, you can find it @(I didn’t see any difference about the setup/configura
https:/
HA setup: HA-0512-ipv6
PC: centos-left
PC: centos-right
Here is the tcpdump from another testbed, but exactly the same neighbor advertisement packets are sent out.
18:01:56.546088 00:10:db:ff:80:00 (oui Unknown) > 33:33:00:00:00:01 (oui Unknown), ethertype IPv6 (0x86dd), length 86: 9000::10 > ff02::1: ICMP6, neighbor advertisement, tgt is 9000::10, length 32
18:01:57.542663 00:10:db:ff:80:00 (oui Unknown) > 33:33:00:00:00:01 (oui Unknown), ethertype IPv6 (0x86dd), length 86: 9000::10 > ff02::1: ICMP6, neighbor advertisement, tgt is 9000::10, length 32
18:01:58.540912 00:10:db:ff:80:00 (oui Unknown) > 33:33:00:00:00:01 (oui Unknown), ethertype IPv6 (0x86dd), length 86: 9000::10 > ff02::1: ICMP6, neighbor advertisement, tgt is 9000::10, length 32
18:01:59.536963 00:10:db:ff:80:00 (oui Unknown) > 33:33:00:00:00:01 (oui Unknown), ethertype IPv6 (0x86dd), length 86: 9000::10 > ff02::1: ICMP6, neighbor advertisement, tgt is 9000::10, length 32
…
18:05:13.798424 00:10:db:ff:80:00 (oui Unknown) > 02:05:3f:2c:c8:30 (oui Unknown), ethertype IPv6 (0x86dd), length 118: 1000::11 > 9000::11: ICMP6, echo request, seq 3492, length 64
18:05:14.798618 00:10:db:ff:80:00 (oui Unknown) > 02:05:3f:2c:c8:30 (oui Unknown), ethertype IPv6 (0x86dd), length 118: 1000::11 > 9000::11: ICMP6, echo request, seq 3493, length 64
18:05:15.177313 00:00:5e:00:01:00 (oui Unknown) > 33:33:00:00:00:01 (oui Unknown), ethertype IPv6 (0x86dd), length 110: fe80::5e00:100 > ff02::1: ICMP6, router advertisement, length 56
18:05:15.798598 00:10:db:ff:80:00 (oui Unknown) > 02:05:3f:2c:c8:30 (oui Unknown), ethertype IPv6 (0x86dd), length 118: 1000::11 > 9000::11: ICMP6, echo request, seq 3494, length 64
18:05:16.798765 00:10:db:ff:80:00 (oui Unknown) > 02:05:3f:2c:c8:30 (oui Unknown), ethertype IPv6 (0x86dd), length 118: 1000::11 > 9000::11: ICMP6, echo request, seq 3495, length 64
Setup information:
[root@spg86-centos ~]# openstack-status
== Nova services ==
openstack-nova-api: active
openstack-
openstack-
openstack-
openstack-
openstack-
== Glance services ==
openstack-
openstack-
== Keystone service ==
openstack-keystone: active
== Horizon service ==
openstack-
== neutron services ==
neutron-server: active
neutron-dhcp-agent: active (disabled on boot)
neutron-l3-agent: failed (disabled on boot)
neutron-
== Cinder services ==
openstack-
openstack-
openstack-
openstack-
== Heat services ==
openstack-heat-api: failed (disabled on boot)
openstack-
openstack-
openstack-
== Support services ==
mysqld: active (disabled on boot)
libvirtd: active
dbus: active
rabbitmq-server: active
memcached: active
== Keystone users ==
Warning keystonerc not sourced
[root@spg86-centos ~]# contrail-status
== Contrail vRouter ==
supervisor-vrouter: active
unix://
== Contrail Control ==
supervisor-control: active
unix://
== Contrail Analytics ==
supervisor-
unix://
== Contrail Config ==
supervisor-config: active
unix://
== Contrail Web UI ==
supervisor-webui: active
contrail-webui active
contrail-
== Contrail Database ==
contrail-database: active
supervisor-
unix://
== Contrail Support Services ==
supervisor-
rabbitmq-server active
[root@spg86-centos ~]# contrail-version
Package Version Build-ID | Repo | RPM Name
-------
contrail-analytics 3.0.1.0-
contrail-config 3.0.1.0-
contrail-
contrail-control 3.0.1.0-
contrail-database 3.0.1.0-
contrail-dns 3.0.1.0-
contrail-docs 3.0.1.0-
contrail-
contrail-heat 3.0.1.0-
contrail-
contrail-lib 3.0.1.0-
contrail-nodemgr 3.0.1.0-
contrail-
contrail-openstack 3.0.1.0-
contrail-
contrail-
contrail-
contrail-
contrail-
contrail-
contrail-setup 3.0.1.0-
contrail-utils 3.0.1.0-
contrail-vrouter 3.0.1.0-
contrail-
contrail-
contrail-
contrail-
contrail-
contrail-web-core 3.0.1.0-23 23
neutron-
python-contrail 3.0.1.0-
python-
python-
[root@spg86-centos ~]# uname -a
Linux spg86-centos 3.10.0-
Changed in juniperopenstack: | |
importance: | Undecided → High |
tags: | added: service-chain vrouter |
information type: | Proprietary → Public |
Oh, just forget that this problem only happen with IPv6 traffic, IPv4 works fine. this is also reproduciable.