Forum Discussion

ktstyle_52699's avatar
ktstyle_52699
Icon for Nimbostratus rankNimbostratus
Dec 09, 2012

MGMT port and last hop

Hi!     I see this good community of professionals. That's good.   We install in our network few clusters 6900 and 3900. With this equipment we use Checkpoint for Layer 3. Checkpoint use...
config
design
ktstyle_52699's avatar
ktstyle_52699
Icon for Nimbostratus rankNimbostratus
Dec 16, 2012
Thank you!

 

 

Sorry for the late reply. I see really problem for VMAC and MGMT interface.

 

This APR table on the switch:

 

===============================================================================

 

IP ARP

 

===============================================================================

 

IP Address Age (min) MAC Address VLAN-Unit/Port/Trunk Flags

 

 

-------------------------------------------------------------------------------

 

172.16.1.255 0 ff:ff:ff:ff:ff:ff VLAN129 LB

 

172.16.1.254 306 00:1c:7f:01:e0:66 VLAN129-37 D

 

172.16.1.253 357 00:1c:7f:32:4d:b5 VLAN129-38 D

 

172.16.1.252 270 00:1c:7f:32:4d:4d VLAN129-37 D

 

172.16.1.0 0 ff:ff:ff:ff:ff:ff VLAN129 LB

 

Total ARP entries : 15

 

-------------------------------------------------------------------------------

 

Flags Legend:

 

S=Static, D=Dynamic, L=Local, B=Broadcast

 

 

It's in Wireshark:

 

No. Time Source Destination Protocol Length Info

 

5 4.352158 10.133.150.1 172.16.1.21 ICMP 74 Echo (ping) request id=0x0010, seq=7107/49947, ttl=124

 

 

Frame 5: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)

 

Ethernet II, Src: CheckPoi_32:4d:4d (00:1c:7f:32:4d:4d), Dst: F5Networ_3e:3c:81 (00:23:e9:3e:3c:81)

 

Internet Protocol Version 4, Src: 10.133.150.1 (10.133.150.1), Dst: 172.16.1.21 (172.16.1.21)

 

Internet Control Message Protocol

 

 

No. Time Source Destination Protocol Length Info

 

6 4.352185 172.16.1.21 10.133.150.1 ICMP 74 Echo (ping) reply id=0x0010, seq=7107/49947, ttl=64

 

 

Frame 6: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)

 

Ethernet II, Src: F5Networ_3e:3c:81 (00:23:e9:3e:3c:81), Dst: CheckPoi_32:4d:4d (00:1c:7f:32:4d:4d)

 

Internet Protocol Version 4, Src: 172.16.1.21 (172.16.1.21), Dst: 10.133.150.1 (10.133.150.1)

 

Internet Control Message Protocol

 

 

 

You can see BIG-IP sent packets to physically address, but must send to VMAC, because 172.16.1.254 has VMAC mac address.

 

 

I used Checpoint GAIA 75.45 in ClusterXL with virtual IP and VMAC.