Forum Discussion
IGMP quierer packets drops from management interface on Cisco FEX
Hi,
we are running two F5 BigIP 2000s (11.4.1 - HF2) connected to Cisco Nexus FEX (N2K-C2248TP-E-1GE, SW: 5.2(1)N1(6)). Cisco drops IGMP packets on FEX Ports since software version 5.2(1)N1(6). We get following log on Cisco Nexus: 2014 Mar 28 10:02:10.618 srz3112 %IGMP-4-QUERY_DROP_ON_SAT_PORT: igmp [3321] Since router ports on fexes is not supported, dropping queries received on fex interface Eth111/1/5.
On BigIP I can see following IGMP packets using tcpdump: 10:29:15.618323 00:23:e9:68:b7:01 > 01:00:5e:00:00:01, ethertype IPv4 (0x0800), length 46: 0.0.0.0 > 224.0.0.1: igmp query v2 10:31:20.618327 00:23:e9:68:b7:01 > 01:00:5e:00:00:01, ethertype IPv4 (0x0800), length 46: 0.0.0.0 > 224.0.0.1: igmp query v2 10:33:25.618323 00:23:e9:68:b7:01 > 01:00:5e:00:00:01, ethertype IPv4 (0x0800), length 46: 0.0.0.0 > 224.0.0.1: igmp query v2
Is there a way to prevent the BigIP to send those packets?
br Christoph
9 Replies
- Cory_50405
Noctilucent
Are you using a multicast address for network failover?
- Christoph_Lange
Altostratus
No, we use unicast address for network failover. The checkbox for multicast is not marked.
- Cory_50405
Noctilucent
What BIG-IP interface does your MAC address (00:23:e9:68:b7:01) map to?
- Christoph_Lange
Altostratus
eth0 - the management interface [root@adc-2:Active:In Sync] config ifconfig eth0 eth0 Link encap:Ethernet HWaddr 00:23:E9:68:B7:01
inet6 addr: fe80::223:e9ff:fe68:b701/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:201495024 errors:0 dropped:0 overruns:0 frame:0 TX packets:112662872 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:14585685466 (13.5 GiB) TX bytes:9052472000 (8.4 GiB) Interrupt:18[root@adc-2:Active:In Sync] config ifconfig mgmt mgmt Link encap:Ethernet HWaddr 00:23:E9:68:B7:01
inet addr:10.166.121.39 Bcast:10.166.121.63 Mask:255.255.255.224 inet6 addr: fe80::223:e9ff:fe68:b701/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:201432284 errors:0 dropped:0 overruns:0 frame:0 TX packets:112581589 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:10944922485 (10.1 GiB) TX bytes:8578592347 (7.9 GiB)[root@adc-2:Active:In Sync] config ifconfig mgmt.1 mgmt.1 Link encap:Ethernet HWaddr 00:23:E9:68:B7:01
inet addr:127.2.0.2 Bcast:127.2.0.255 Mask:255.255.255.0 inet6 addr: fe80::223:e9ff:fe68:b701/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:200591498 errors:0 dropped:0 overruns:0 frame:0 TX packets:106875364 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:10832559228 (10.0 GiB) TX bytes:7427030558 (6.9 GiB) - Cory_50405
Noctilucent
Unsure what could be causing this then, in absence of something configured to use multicast. There's a known issue with the 2000 platform related to multicast. It doesn't sound like the issue you are having as your code release has it fixed, but I wonder if it's related somehow.
http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14455.html
May be best to open a support case for them to investigate.
- jpavel
Nimbostratus
Hi everybody,
has there been a solution provided for that issue? We are having the same problem on a BigIP VE and are not using multicast network failover. Any chance to stop these igmp queries?
Best regards
Joerg
- nitass
Employee
Any chance to stop these igmp queries?
can you try this? it won't survive after rebooting. you may open a support case for more information.
ID467703 11.4.x management interface sending ipv6 Multicast Listener Query packet
echo 0 > /sys/class/net/mgmt/bridge/multicast_snooping - jpavel
Nimbostratus
Hi nitass,
I will double check with our customer. Thanks for your answer.
--Joerg
- Richard_Willege
Nimbostratus
If you add the "echo 0 > /sys/class/net/mgmt/bridge/multicast_snooping" line to the /config/startup file, it will be added again after reboot.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com