<html><head></head><body data-blackberry-caret-color="#00a8df" style="background-color: rgb(255, 255, 255); line-height: initial;"><div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);">Hence we came to know that don't focus on one side :)</div> <div style="width: 100%; font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);"><br style="display:initial"></div> <div style="font-size: initial; font-family: Calibri, 'Slate Pro', sans-serif; color: rgb(31, 73, 125); text-align: initial; background-color: rgb(255, 255, 255);"></div> <table width="100%" style="background-color:white;border-spacing:0px;"> <tbody><tr><td colspan="2" style="font-size: initial; text-align: initial; background-color: rgb(255, 255, 255);"> <div id="_persistentHeader" style="border-style: solid none none; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding: 3pt 0in 0in; font-family: Tahoma, 'BB Alpha Sans', 'Slate Pro'; font-size: 10pt;"> <div><b>From: </b>Matthew Huff</div><div><b>Sent: </b>Friday, June 28, 2013 8:21 PM</div><div><b>To: </b>Matthew Huff; 'cisco-nsp (cisco-nsp@puck.nether.net)'; 'ipv6-ops@lists.cluenet.de'</div><div><b>Subject: </b>RESOLVED: Weird IPv6 problem passing Layer3 traffic</div></div></td></tr></tbody></table><div style="border-style: solid none none; border-top-color: rgb(186, 188, 209); border-top-width: 1pt; font-size: initial; text-align: initial; background-color: rgb(255, 255, 255);"></div><br><div id="_originalContent" style="">The issue was a CoPP filter on the ISP side. The session is up now. <br><br>Been working on them with them for 3 days, and each engineer kept coming back to our BGP configuration. <br><br>----<br>Matthew Huff | 1 Manhattanville Rd<br>Director of Operations | Purchase, NY 10577<br>OTA Management LLC | Phone: 914-460-4039<br><br><br>> -----Original Message-----<br>> From: Matthew Huff<br>> Sent: Friday, June 28, 2013 10:34 AM<br>> To: 'cisco-nsp (cisco-nsp@puck.nether.net)'; 'ipv6-ops@lists.cluenet.de'<br>> Subject: Weird IPv6 problem passing Layer3 traffic<br>> <br>> Trying to bring up a new BGP peering session with a ISP. IPv4 peering is working fine on the same<br>> interface. The BGP peering fails early in trying to go active. Using "debug tcp transactions", I see<br>> the SYN going out, but no ACK ever returning. I can't telnet to their box on port 179 either (debug<br>> packet shows it doing the same, SYN begin sent, but no packets, including ACK). However, I can ping<br>> their interface.<br>> <br>> The interface config has been stripped, and still doesn't work. I've reset the interface, and even<br>> rebooted our router, with no change in behavior.<br>> <br>> We have a Cisco 7204VXR with NPE-G2, running 15.2(4)S1. I have an identical router with same version<br>> connected to another ISP and a tunnel to HE.net. It's not my first time at the rodeo. We are connected<br>> via metro Ethernet to a sub-interface on a JunOS box (model and version unknown). My suspicion is that<br>> either they have an ACL that's blocking it, or their BGP process isn't listening on that sub-<br>> interface. But they claim that it isn't their problem. I have zero JunOS experience and they seem to<br>> be flopping around.<br>> <br>> Anyone have any idea what else the problem might be?<br>> <br>> From our side (simplied config to test):<br>> <br>> <br>> interface FastEthernet2/1<br>> ip address 162.211.110.2 255.255.255.252<br>> speed auto<br>> duplex auto<br>> ipv6 address 2607:F518:15F::2/126<br>> ipv6 enable<br>> end<br>> <br>> rtr-inet2#show ipv6 cef 2607:F518:15F::1<br>> 2607:F518:15F::1/128<br>> attached to FastEthernet2/1<br>> <br>> rtr-inet2#show ipv6 cef exact-route 2607:F518:15F::2 2607:F518:15F::1<br>> 2607:F518:15F::2 -> 2607:F518:15F::1 => IPV6 adj out of FastEthernet2/1, addr 2607:F518:15F::1<br>> <br>> rtr-inet2#show ipv6 neighbors<br>> IPv6 Address Age Link-layer Addr State Interface<br>> 2607:F518:15F::1 0 0021.5903.1367 REACH Fa2/1<br>> <br>> rtr-inet2#ping 2607:F518:15F::1<br>> Type escape sequence to abort.<br>> Sending 5, 100-byte ICMP Echos to 2607:F518:15F::1, timeout is 2 seconds:<br>> !!!!!<br>> Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms<br>> <br>> ----<br>> Matthew Huff | 1 Manhattanville Rd<br>> Director of Operations | Purchase, NY 10577<br>> OTA Management LLC | Phone: 914-460-4039<br><br></div></body></html>