Forum Discussion

Christoph_Lange's avatar
Christoph_Lange
Icon for Altostratus rankAltostratus
Mar 28, 2014

IGMP quierer packets drops from management interface on Cisco FEX

Hi,

 

we are running two F5 BigIP 2000s (11.4.1 - HF2) connected to Cisco Nexus FEX (N2K-C2248TP-E-1GE, SW: 5.2(1)N1(6)). Cisco drops IGMP packets on FEX Ports since software version 5.2(1)N1(6). We get following log on Cisco Nexus: 2014 Mar 28 10:02:10.618 srz3112 %IGMP-4-QUERY_DROP_ON_SAT_PORT: igmp [3321] Since router ports on fexes is not supported, dropping queries received on fex interface Eth111/1/5.

 

On BigIP I can see following IGMP packets using tcpdump: 10:29:15.618323 00:23:e9:68:b7:01 > 01:00:5e:00:00:01, ethertype IPv4 (0x0800), length 46: 0.0.0.0 > 224.0.0.1: igmp query v2 10:31:20.618327 00:23:e9:68:b7:01 > 01:00:5e:00:00:01, ethertype IPv4 (0x0800), length 46: 0.0.0.0 > 224.0.0.1: igmp query v2 10:33:25.618323 00:23:e9:68:b7:01 > 01:00:5e:00:00:01, ethertype IPv4 (0x0800), length 46: 0.0.0.0 > 224.0.0.1: igmp query v2

 

Is there a way to prevent the BigIP to send those packets?

 

br Christoph

 

application delivery
cisco
LTM
management

9 Replies

Sort By
  • Christoph_Lange's avatar
    Christoph_Lange
    Icon for Altostratus rankAltostratus
    Mar 28, 2014

    No, we use unicast address for network failover. The checkbox for multicast is not marked.

     

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Mar 28, 2014

    What BIG-IP interface does your MAC address (00:23:e9:68:b7:01) map to?

     

  • Christoph_Lange's avatar
    Christoph_Lange
    Icon for Altostratus rankAltostratus
    Mar 28, 2014

    eth0 - the management interface [root@adc-2:Active:In Sync] config ifconfig eth0 eth0 Link encap:Ethernet HWaddr 00:23:E9:68:B7:01

     

    inet6 addr: fe80::223:e9ff:fe68:b701/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:201495024 errors:0 dropped:0 overruns:0 frame:0 TX packets:112662872 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:14585685466 (13.5 GiB) TX bytes:9052472000 (8.4 GiB) Interrupt:18

     

    [root@adc-2:Active:In Sync] config ifconfig mgmt mgmt Link encap:Ethernet HWaddr 00:23:E9:68:B7:01

     

    inet addr:10.166.121.39 Bcast:10.166.121.63 Mask:255.255.255.224 inet6 addr: fe80::223:e9ff:fe68:b701/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:201432284 errors:0 dropped:0 overruns:0 frame:0 TX packets:112581589 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:10944922485 (10.1 GiB) TX bytes:8578592347 (7.9 GiB)

     

    [root@adc-2:Active:In Sync] config ifconfig mgmt.1 mgmt.1 Link encap:Ethernet HWaddr 00:23:E9:68:B7:01

     

    inet addr:127.2.0.2 Bcast:127.2.0.255 Mask:255.255.255.0 inet6 addr: fe80::223:e9ff:fe68:b701/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:200591498 errors:0 dropped:0 overruns:0 frame:0 TX packets:106875364 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:10832559228 (10.0 GiB) TX bytes:7427030558 (6.9 GiB)

     

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Mar 28, 2014

    Unsure what could be causing this then, in absence of something configured to use multicast. There's a known issue with the 2000 platform related to multicast. It doesn't sound like the issue you are having as your code release has it fixed, but I wonder if it's related somehow.

     

    http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14455.html

     

    May be best to open a support case for them to investigate.

     

  • jpavel's avatar
    jpavel
    Icon for Nimbostratus rankNimbostratus
    Sep 03, 2014

    Hi everybody,

     

    has there been a solution provided for that issue? We are having the same problem on a BigIP VE and are not using multicast network failover. Any chance to stop these igmp queries?

     

    Best regards

     

    Joerg

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Sep 03, 2014

    Any chance to stop these igmp queries?

    can you try this? it won't survive after rebooting. you may open a support case for more information.

    ID467703 11.4.x management interface sending ipv6 Multicast Listener Query packet 

     echo 0 > /sys/class/net/mgmt/bridge/multicast_snooping
  • jpavel's avatar
    jpavel
    Icon for Nimbostratus rankNimbostratus
    Sep 03, 2014

    Hi nitass,

     

    I will double check with our customer. Thanks for your answer.

     

    --Joerg

     

  • Richard_Willege's avatar
    Richard_Willege
    Icon for Nimbostratus rankNimbostratus
    Mar 06, 2015

    If you add the "echo 0 > /sys/class/net/mgmt/bridge/multicast_snooping" line to the /config/startup file, it will be added again after reboot.