Problem Checking

IP Sevice of Icon Network

Sharing Session

2016
 Content

• Customer Premises Checking for Service Metro

• Core Premises Checking for Service Metro
• Customer Premises Checking for Service IPVPN
• Core Premises Checking for Service IPVPN
• Customer Premises Checking for Service IP Transit
• Core Premises Checking for Service IP Transit
• Customer Premises Checking for Service Internet Corporate
• Core Premises Checking for Service Internet Corporate
 Chapter 1

Service Metro Checking

 Chapter 1
CHECKLIST:
1. Interface access status on POP Lastmile A & B

2. MAC address port access checking on POP Lastmile A & B

3. MAC address vlan service checking on POP Lastmile A & B

4. Crossconnect status checking between POP Local & Remote

on both POPs

5. Test PING crossconnect of POP Local & Remote in both sides

 Customer Premises Checking for Service Metro

On Cisco Device
• Check Physical Connection peering to customer
Check port status facing to customer, ensure that the status is up.
[Link]-C3750-UPE-01#show interfaces description | in Fa1/0/3
Fa1/0/3 up up 0990000020265672 Metronet Astra Internasional Bogor Siliwangi T260

• Check MAC Address Table

Check MAC Address Table and ensure that the table is filled correctly
[Link]-C3750-UPE-01#show mac address-table dynamic interface Fa1/0/3

Mac Address Table

-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----
579 001a.a150.5b0e DYNAMIC Fa1/0/3
579 001a.a189.212e DYNAMIC Fa1/0/3
 Customer Premises Checking for Service Metro

• Checking Traffic from and to customer

[Link]-C3750-UPE-01#show interfaces Fa1/0/3 | in rate
Queueing strategy: fifo
5 minute input rate 121000 bits/sec, 50 packets/sec
5 minute output rate 162000 bits/sec, 49 packets/sec
 Customer Premises Checking for Service Metro

On Juniper Device
• Check Physical Connection peering to customer
Check port status facing to customer, ensure that the status is up.
[Link]@[Link]-JAJAR-ACX4000-UPE-02> show interfaces descriptions ge-1/0/2
Interface Admin Link Description
ge-1/0/2 up up 0990000320330000 Metro Tirta Kencana Jl Adi Sumarmo Solo - Jl Satelit SBY

• Checking Interface utilization

Check traffic utilization on interface facing customer
[Link]@[Link]-JAJAR-ACX4000-UPE-02> show interfaces ge-1/0/2 | match rate

Input rate : 6584 bps (10 pps)

Output rate : 64424 bps (12 pps)
 Core Premises Checking for Service Metro

On Cisco Device
• Check Cross Connect Status of UPEs
[Link]-C3750-UPE-01#show mpls l2transport vc 579

Local intf Local circuit Dest address VC ID Status

------------- -------------------------- --------------- ---------- ----------
Vl579 Eth VLAN 579 [Link] 579 UP
 Core Premises Checking for Service Metro

• Ping Test Cross Connect of UPE

[Link]-C3750-UPE-01#ping mpls pseudowire [Link] 579 repeat 100
Sending 100, 100-byte MPLS Echos to [Link],
timeout is 2 seconds, send interval is 0 msec:
. . . . . .
Type escape sequence to abort.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 1/5/9 ms
 Core Premises Checking for Service Metro
On Juniper Device

• Check Cross Connect Status of UPEs

[Link]@[Link]-JAJAR-ACX4000-UPE-02> show l2circuit connections interface ge-1/0/2.0

Layer-2 Circuit Connections:

…………..

Neighbor: [Link]

Interface Type St Time last up # Up trans

ge-1/0/2.0(vc 94) rmt Up May 10 07:31:09 2016 1

Remote PE: [Link], Negotiated control-word: No

Incoming label: 299776, Outgoing label: 50

Negotiated PW status TLV: No

Local interface: ge-1/0/2.0, Status: Up, Encapsulation: ETHERNET

Description: 0990000320330000 Metro Tirta Kencana Jl Adi Sumarmo Solo - Jl Satelit SBY
 Core Premises Checking for Service Metro

• Ping Test Cross Connect of UPEs

[Link]@[Link]-JAJAR-ACX4000-UPE-02> ping mpls l2circuit virtual-circuit 94 neighbor [Link] count 100
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
--- lsping statistics ---
100 packets transmitted, 100 packets received, 0% packet loss
 Core Premises Checking for Service Metro
• Trace route in Core Premises
[Link]@[Link]-JAJAR-ACX4000-UPE-02> traceroute [Link]

traceroute to [Link] ([Link]), 30 hops max, 40 byte packets

1 [Link] ([Link]) 1.349 ms 1.101 ms 0.918 ms

2 [Link] ([Link]) 0.673 ms 0.786 ms 0.625 ms

3 [Link] ([Link]) 2.723 ms 4.243 ms 3.801 ms

4 [Link] ([Link]) 18.516 ms 8.383 ms 8.380 ms

MPLS Label=16233 CoS=0 TTL=255 S=1

5 [Link] ([Link]) 19.486 ms 8.274 ms 15.467 ms

MPLS Label=16123 CoS=0 TTL=255 S=1

6 [Link] ([Link]) 8.220 ms 6.481 ms 6.456 ms

MPLS Label=125 CoS=0 TTL=1 S=1

7 [Link] ([Link]) 6.418 ms 6.608 ms 6.473 ms

MPLS Label=403 CoS=0 TTL=1 S=1

8 [Link] ([Link]) 6.434 ms 6.426 ms 6.599 ms

MPLS Label=17 CoS=0 TTL=1 S=1

9 [Link] ([Link]) 8.372 ms * 16.086 ms

 Core Premises Checking for Service Metro
On Cisco Device
• Hub and Spoke Topology
Spoke Checking
[Link]-C3750-UPE-03#show running-config interface Vl1441
Building configuration...

Current configuration : 228 bytes

!
interface Vlan1441
description 0990000320383593 Metro BTPN 0073 KCP TANJUNGSARI, 0990000320383580 Metro 0061 KCP UJUNG BERUNG
no ip address
xconnect [Link] 1441 encapsulation mpls
service-policy input 1024Kbps
end
 Core Premises Checking for Service Metro
On Cisco Device
• Hub and Spoke Topology
Spoke Checking
[Link]-C3750-UPE-03#show mac address-table dynamic vlan 1441
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----
1441 442b.03ac.dad7 DYNAMIC Fa1/0/22
1441 6c41.6aeb.d312 DYNAMIC Gi1/1/1
1441 84b8.0246.da52 DYNAMIC Fa1/0/22
1441 b414.8900.8c07 DYNAMIC Gi1/1/1
 Core Premises Checking for Service Metro
On Cisco Device
• Hub and Spoke Topology
Spoke Checking
[Link]-C3750-UPE-03#show mpls ldp neighbor [Link]
Peer LDP Ident: [Link]:0; Local LDP Ident [Link]:0
TCP connection: [Link].13935 - [Link].646
State: Oper; Msgs sent/rcvd: 162216/165021; Downstream
Up time: 12w0d
LDP discovery sources:
Targeted Hello [Link] -> [Link], active, passive
Addresses bound to peer LDP Ident:
[Link] [Link] [Link] [Link]
[Link] [Link] [Link] [Link]
[Link] [Link] [Link] [Link]
[Link] [Link] [Link] [Link]
[Link]
 Core Premises Checking for Service Metro
On Cisco Device
• Hub and Spoke Topology
Spoke Checking
[Link]-C3750-UPE-03#traceroute mpls ipv4 [Link] [Link]
Tracing MPLS Label Switched Path to [Link]/32, timeout is 2 seconds
. . . . . .
Type escape sequence to abort.
0 [Link] MRU 9000 [Labels: 688 Exp: 0]
L 1 [Link] MRU 9216 [Labels: 16038 Exp: 0] 185 ms
L 2 [Link] MRU 9202 [Labels: 16027 Exp: 0] 25 ms
L 3 [Link] MRU 9000 [Labels: implicit-null Exp: 0] 9 ms
! 4 [Link] 8 ms
 Core Premises Checking for Service Metro
On Cisco Device
• Hub and Spoke Topology
Hub Checking
[[Link]@terminal2 ~]# t [Link]
Trying [Link]...
Connected to [Link].
RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#sho l2vpn bridge group ICONPLUS bd-name 1441-Bank-BTPN-P2MP
Tue May 17 14:45:45.359 WIB
Bridge group: ICONPLUS, bridge-domain: 1441-Bank-BTPN-P2MP, id: 129, state: up, ShgId: 0, MSTi: 0
Aging: 300 s, MAC limit: 4000, Action: none, Notification: syslog
Filter MAC addresses: 0
ACs: 0 (0 up), VFIs: 0, PWs: 250 (214 up), PBBs: 0 (0 up)
List of ACs:
List of Access PWs:
Neighbor [Link] pw-id 1441, state: down, Static MAC addresses: 0
 Core Premises Checking for Service Metro
On Cisco Device
• Hub and Spoke Topology
Hub Checking
RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#sh runn | b 1441-Bank-BTPN-P2MP

Mon May 16 17:19:55.545 WIB

Building configuration...

bridge-domain 1441-Bank-BTPN-P2MP

mac

secure

action none

logging

mtu 1998

neighbor [Link] pw-id 1441

neighbor [Link] pw-id 1441

split-horizon group

!
 Core Premises Checking for Service Metro
On Cisco Device
• Hub and Spoke Topology
Hub Checking
RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show l2vpn forwarding bridge-domain ICONPLUS:1441-Bank-BTPN-P2MP mac-address location 0/0/CPU0
Mon May 16 17:26:18.376 WIB
To Resynchronize MAC table from the Network Processors, use the command...
l2vpn resynchronize forwarding mac-address-table location <r/s/i>

Mac Address Type Learned from/Filtered on LC learned Resync Age Mapped to

--------------------------------------------------------------------------------
0008.2f78.b499 dynamic ([Link], 1441) 0/0/CPU0 Resyncing N/A
000a.f4dc.edd4 dynamic ([Link], 1441) 0/0/CPU0 Resyncing N/A
000e.3854.df99 dynamic ([Link], 1441) 0/0/CPU0 Resyncing N/A
[Link] dynamic ([Link], 1441) 0/0/CPU0 Resyncing N/A
0014.a8b0.fb98 dynamic ([Link], 1441) 0/0/CPU0 Resyncing N/A
 Chapter 2

Service IPVPN
 IPVPN Topology

• CHECKLIST:
1. Interface access Status checking in POP Lastmile
2. MAC address port or vlan checking in POP Lastmile
3. ARP checking in POP Lastmile
4. Test PING from POP Lastmile to IP Lastmile
5. Test PING from POP HO to IP Lastmile
 Customer Premises Checking for Service IPVPN
On Cisco Device
• Check interface status
JKT-ANGKE-ME3600-UPE-01#show interfaces GigabitEthernet0/3 description
Interface Status Protocol Description
Gi0/3 up up 0990000320416690 IPVPN BRI Jakarta Kota

• Check MAC Address table

JKT-ANGKE-ME3600-UPE-01#show mac address-table dynamic vlan 136
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----
136 0001.2e1e.9480 DYNAMIC Gi0/3
136 000e.7fdc.3b52 DYNAMIC Gi0/3
136 0015.621f.fc58 DYNAMIC Gi0/3
136 001b.78ec.bad7 DYNAMIC Gi0/3
136 001b.78ef.fbc0 DYNAMIC Gi0/3
 Customer Premises Checking for Service IPVPN

• Check ARP for L3 service users

JKT-ANGKE-ME3600-UPE-01#show ip arp vrf WAN-BRI | i Vlan136
Internet [Link] - 88f0.7793.e340 ARPA Vlan136
Internet [Link] 0 78e3.b5ac.9b72 ARPA Vlan136
Internet [Link] 14 c04a.0092.8551 ARPA Vlan136
Internet [Link] 93 001b.78ec.bad7 ARPA Vlan136
Internet [Link] 23 001b.78ef.fbc0 ARPA Vlan136
Internet [Link] 109 000e.7fdc.3b52 ARPA Vlan136

• Ping test to lastmile

JKT-ANGKE-ME3600-UPE-01#ping vrf WAN-BRI [Link] repeat 100 size 1500
Type escape sequence to abort.
Sending 100, 1500-byte ICMP Echos to [Link], timeout is 2 seconds:
!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!
!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!
Success rate is 84 percent (84/100), round-trip min/avg/max = 1/2/4 ms
 Customer Premises Checking for Service IPVPN

On Juniper Device

• Check interface status

[Link]@[Link]-ACX4000-UPE-02> show interfaces descriptions ge-1/1/0
Interface Admin Link Description
ge-1/1/0 up up 0140000008240084 IPVPN BRI Cab Solo Riyadi

• Check L2 Connection from UPE to NPE

[Link]@[Link]-ACX4000-UPE-02> show l2circuit connections interface ge-1/1/0.0
Layer-2 Circuit Connections:
Neighbor: [Link]
Interface Type St Time last up # Up trans
ge-1/1/0.0(vc 214) rmt Up May 9 13:58:39 2016 1
Remote PE: [Link], Negotiated control-word: No
Incoming label: 299936, Outgoing label: 455393
Negotiated PW status TLV: No
Local interface: ge-1/1/0.0, Status: Up, Encapsulation: ETHERNET
Description: 0140000008240084 IPVPN BRI Cab Solo Riyadi
 Customer Premises Checking for Service IPVPN

• Check interface description

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show interfaces descriptions | match bri
lt-1/0/0.10214 up up 0140000008240084 IPVPN BRI Cab Solo Riyadi

• Check ARP customer

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show arp vpn VPN-WAN-BRI | match lt-1/0/0.10214
e6:1f:13:c3:74:b4 [Link] [Link] lt-1/0/0.10214 none
00:02:b3:0e:fc:af [Link] [Link] lt-1/0/0.10214 none
28:10:7b:49:da:ad [Link] [Link] lt-1/0/0.10214 none
00:1b:78:ef:0c:c2 [Link] [Link] lt-1/0/0.10214 none
00:02:b3:0e:fd:2e [Link] [Link] lt-1/0/0.10214 none
 Customer Premises Checking for Service IPVPN

• PING Test to host lastmile

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> ping routing-instance VPN-WAN-BRI [Link] count 100 rapid
PING [Link] ([Link]): 56 data bytes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
--- [Link] ping statistics ---
100 packets transmitted, 100 packets received, 0% packet loss
round-trip min/avg/max/stddev = 1.227/1.724/9.955/1.242 ms
 Customer Premises Checking for Service IPVPN
• Check Route to HO
[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show route table [Link].0 [Link] detail

[Link].0: 976 destinations, 1865 routes (976 active, 0 holddown, 0 hidden)

[Link]/0 (2 entries, 1 announced)
*BGP Preference: 170/-101
Route Distinguisher: 65000:30009
Next hop type: Indirect
Address: 0xadf4328
Next-hop reference count: 10
Source: [Link]
Next hop type: Router, Next hop index: 10663
Next hop: [Link] via xe-0/0/0.0, selected
Label operation: Push 1211, Push 16358(top)
Label TTL action: prop-ttl, prop-ttl(top)
Protocol next hop: [Link]
Router ID: [Link]
. . . . .
Primary Routing Table bgp.l3vpn.0
 Customer Premises Checking for Service IPVPN
• PING Test Lastmile from HO

[[Link]@terminal2 ~]# t [Link]

Trying [Link]...
Connected to [Link].

User Access Verification

Username: [Link]
Password:

JKT-SENAYAN-ME3600-UPE-03#ping vrf WAN-BRI [Link] repeat 100 size 1500

Type escape sequence to abort.
Sending 100, 1500-byte ICMP Echos to [Link], timeout is 2 seconds:
!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!
!.!!!!!.!!!!!.!!!!!.!!!!!.!!!!
Success rate is 84 percent (84/100), round-trip min/avg/max = 4/4/8 ms
 Core Premises Checking for Service IPVPN
On Cisco Device

• Check IGP status

JKT-ANGKE-ME3600-UPE-01#show ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

[Link] 0 FULL/ - 00:00:14 [Link] TenGigabitEthernet0/1

JKT-ANGKE-ME3600-UPE-01#show ip ospf interface brief

Interface PID Area IP Address/Mask Cost State Nbrs F/C
Lo0 100 33 [Link]/32 1 P2P 0/0
Te0/1 100 33 [Link]/30 10 P2P 1/1
 Core Premises Checking for Service IPVPN
• Check BGP status
JKT-ANGKE-ME3600-UPE-01#sh ip bgp all summary
For address family: VPNv4 Unicast
BGP router identifier [Link], local AS number 65000
BGP table version is 1528730, main routing table version 1528730
. . . . . . . . .
BGP activity 134864/131230 prefixes, 746419/740208 paths, scan interval 60 secs

Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd

[Link] 4 65200 0 0 1 0 0 never Idle
[Link] 4 65000 17202748 290259 1528730 0 0 25w6d 2559
[Link] 4 65000 6312905 80915 1528730 0 0 7w1d 2559
[Link] 4 65027 13255 18905 1528730 0 0 1w2d 3
 Core Premises Checking for Service IPVPN
• Check MP-BGP routing table
JKT-ANGKE-ME3600-UPE-01#show bgp vpnv4 unicast vrf WAN-PLN-DISJAYA
BGP table version is 1528733, local router ID is [Link]
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found

Network Next Hop Metric LocPrf Weight Path

Route Distinguisher: 65000:11022 (default for vrf WAN-PLN-DISJAYA)
*>i [Link] [Link] 0 100 0 65002 65010 ?
* i [Link]/24 [Link] 0 100 0 ?
*>i [Link] 0 100 0 ?
*>i [Link]/24 [Link] 0 100 0 65002 65010 i
*>i [Link]/24 [Link] 0 100 0 65002 65010 i
*>i [Link]/24 [Link] 0 100 0 65002 65010 i
*>i [Link]/24 [Link] 0 100 0 65002 65010 i
*>i [Link]/24 [Link] 0 100 0 65002 65010 i
 Core Premises Checking for Service IPVPN
• Check LDP status
JKT-ANGKE-ME3600-UPE-01#show mpls ldp neighbor [Link]
Peer LDP Ident: [Link]:0; Local LDP Ident [Link]:0
TCP connection: [Link].65130 - [Link].646
State: Oper; Msgs sent/rcvd: 293943/314166; Downstream
Up time: 22w6d
LDP discovery sources:
Targeted Hello [Link] -> [Link], active
Addresses bound to peer LDP Ident:
[Link] [Link] [Link] [Link]
[Link] [Link] [Link] [Link]
[Link] [Link]
 Core Premises Checking for Service IPVPN
• Check routing table to reach peer UPE

JKT-ANGKE-ME3600-UPE-01#show ip route [Link]

Routing entry for [Link]/32
Known via "ospf 100", distance 110, metric 15, type inter area
Last update from [Link] on TenGigabitEthernet0/1, 05:23:22 ago
Routing Descriptor Blocks:
* [Link], from [Link], 05:23:22 ago, via TenGigabitEthernet0/1
Route metric is 15, traffic share count is 1
 Core Premises Checking for Service IPVPN
On Juniper Device

• Check IGP status

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show ospf neighbor
Address Interface State ID Pri Dead
[Link] xe-0/0/0.0 Full [Link] 1 14
[Link] xe-0/0/1.0 Full [Link] 128 12
[Link] ge-0/2/2.0 Full [Link] 128 10

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show ospf interface

Interface State Area DR ID BDR ID Nbrs
ge-0/2/1.0 Down [Link] [Link] [Link] 0
lo0.0 DRother [Link] [Link] [Link] 0
xe-0/0/0.0 PtToPt [Link] [Link] [Link] 1
xe-0/0/1.0 PtToPt [Link] [Link] [Link] 1
 Core Premises Checking for Service IPVPN
• Check LDP status

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show ldp neighbor

Address Interface Label space ID Hold time
[Link] lo0.0 [Link]:0 0
[Link] xe-0/0/0.0 [Link]:0 12
[Link] xe-0/0/1.0 [Link]:0 13
[Link] xe-1/0/0.0 [Link]:0 14

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show ldp interface

Interface Label space ID Nbr count Next hello
lo0.0 [Link]:0 19 0
xe-0/0/0.0 [Link]:0 1 2
xe-0/0/1.0 [Link]:0 1 0
xe-0/1/0.0 [Link]:0 0 0
 Core Premises Checking for Service IPVPN
• Check LDP status

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show ldp session

Address State Connection Hold time
[Link] Operational Open 28
[Link] Operational Open 28
[Link] Operational Open 28
[Link] Operational Open 28
[Link] Operational Open 28
[Link] Operational Open 28
 Core Premises Checking for Service IPVPN
• Check MP-BGP status

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show bgp summary

Groups: 16 Peers: 36 Down peers: 13
Table Tot Paths Act Paths Suppressed History Damp State Pending
inet.0 0 0 0 0 0 0
bgp.l3vpn.0 17231 8609 0 0 0 0
inet6.0 0 0 0 0 0 0
bgp.l2vpn.0 0 0 0 0 0 0
Peer AS InPkt OutPkt OutQ Flaps Last Up/Dwn State|#Active/Received/Accepted/Damped...
[Link] 64555 0 0 0 0 29w5d23h Idle
[Link] 64555 9556 9639 0 193 3d 1:04:34 Establ
[Link].0: 6/6/6/0
[Link] 64555 46883 47262 0 52 2w0d22h Establ
[Link].0: 2/2/2/0
[Link] 65103 324631 356659 0 2 65w0d21h Idle
[Link] 65103 250 297 0 30 55w2d0h Idle
 Core Premises Checking for Service IPVPN
• Check Route to reach UPE customer’s termination

[Link]@JATENG-JAJAR-MX.480-NPE-01-RE0> show route table VPN-WAN-BRI [Link] detail

[Link].0: 976 destinations, 1865 routes (976 active, 0 holddown, 0 hidden)

[Link]/24 (2 entries, 1 announced)

*BGP Preference: 170/-101

Route Distinguisher: 65000:30005

Next hop type: Indirect

. . . . . .

Source: [Link]

Next hop type: Router, Next hop index: 5836

Next hop: [Link] via xe-0/0/1.0, selected

Label operation: Push 31

Label TTL action: prop-ttl

Protocol next hop: [Link]

Push 31

Indirect next hop: bd342b8 1048658

. . . . . . . . . .
 Chapter 3

Service IP Transit
 Chapter 3

• CHECKLIST:
1. PING P2P Test from Internet Gateway Router
2. BGP neighbor Status Check between INET GW
and IP host user/lastmile
3. Check received prefix IP address from BGP
neighbor (user lastmile)
4. Test PING & Traceroute from looking glass
internasional (Cth : [Link]) to IP address
user which is received from BGP neighbor
 Customer Premises Checking for Service IP Transit

On Cisco Device
• Check Interface facing to customer status
[Link]-C3750-UPE-01#show ip interface brief Fa1/0/10
Any interface listed with OK? value "NO" does not have a valid configuration

Interface IP-Address OK? Method Status Protocol

FastEthernet1/0/10 unassigned YES unset up up

[Link]-C3750-UPE-01#show interfaces Fa1/0/10 | in rate

Queueing strategy: fifo
5 minute input rate 71000 bits/sec, 119 packets/sec
5 minute output rate 2484000 bits/sec, 196 packets/sec
 Customer Premises Checking for Service IP Transit

• Check ARP from Gateway L3 IP transit

RP/0/RSP0/CPU0:JKT-GANDUL-ASR9006-INETGW-02#show arp | i GigabitEthernet0/0/0/1.307
Sat Jun 27 16:02:53.968 WIB
[Link] - b4a4.e392.69a5 Interface ARPA GigabitEthernet0/0/0/1.307
[Link] 00:15:43 dcd2.fc02.e122 Dynamic ARPA GigabitEthernet0/0/0/1.307

• PING Test to lastmile

RP/0/RSP0/CPU0:JKT-GANDUL-ASR9006-INETGW-02#ping [Link] source [Link] count 100
Sat Jun 27 16:04:30.728 WIB
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to [Link], timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 8/12/29 ms
 Customer Premises Checking for Service IP Transit

• Check MAC Address Table from UPE terminating to customer

JKT-GATSU-C3750-UPE-02#show mac address-table dynamic vlan 294
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----
294 000c.42b2.fe80 DYNAMIC Fa1/0/17
294 288a.1ca6.719c DYNAMIC Gi1/1/2
Total Mac Addresses for this criterion: 2
 Core Premises Checking for Service IP Transit

• Interface status from NPE gateway to UPE

RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show interfaces description | in Te0/0/0/3.294
Wed May 11 16:22:40.710 WIB
Te0/0/0/3.294 up up 0990000020260918 IP Transit PT COGINDO DAYA BERSAMA

• Check Configuration xconnect from NPE to UPE

RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show running-config l2vpn | in 294
Wed May 11 16:40:04.537 WIB
p2p XC_294
interface TenGigE0/0/0/3.294
neighbor [Link] pw-id 294
 Core Premises Checking for Service IP Transit

• IGP status from NPE gateway to UPE

RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show ospf neighbor | in [Link]
Wed May 11 16:43:18.902 WIB
[Link] 1 FULL/ - 00:00:12 [Link] GigabitEthernet0/2/0/13

• Check LDP status from NPE gateway to UPE

RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show mpls ldp neighbor [Link]
Wed May 11 16:29:21.183 WIB

Peer LDP Identifier: [Link]:0

TCP connection: [Link]:51413 - [Link]:646
Graceful Restart: Yes (Reconnect Timeout: 120 sec, Recovery: 120 sec)
Up time: 3w4d
LDP Discovery Sources:
Targeted Hello ([Link] -> [Link], active/passive)
Addresses bound to this peer:
[Link] [Link]
 Core Premises Checking for Service IP Transit

• Check interface description connecting to customer via xconnect to UPE from NPE gateway
RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show interfaces description | in Te0/0/0/3.294
Wed May 11 16:22:40.710 WIB
Te0/0/0/3.294 up up 0990000020260918 IP Transit PT COGINDO DAYA BERSAMA

• Check Cross Connect status from NPE to UPE terminating

RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show l2vpn xconnect interface TenGigE0/0/0/3.294
Wed May 11 16:21:06.227 WIB
Legend: ST = State, UP = Up, DN = Down, AD = Admin Down, UR = Unresolved,
SB = Standby, SR = Standby Ready

XConnect Segment 1 Segment 2

Group Name ST Description ST Description ST
------------------------ ------------------------- -------------------------
EoMPLS XC_294 UP Te0/0/0/3.294 UP [Link] 294 UP
--------------------------------------------------------------------------------
 Core Premises Checking for Service IP Transit

• Check interface description NPE gateway to NPE Internet Gateway

RP/0/RSP0/CPU0:[Link]-ASR9010-NPE-01#show interfaces description | in Te0/0/0/3
Wed May 11 16:51:34.325 WIB
Te0/0/0/3 up up Trunk to [Link]-MX480-01

• Check ARP table of customer from NPE Internet Gateway

[Link]@[Link]-MX480-01> show interfaces descriptions
Interface Admin Link Description
xe-1/0/0 up up Link-to-JKT-GANDUL-ASR9006-INETGW-02

[Link]@[Link]-MX480-01> show arp | match xe-1/1/0.294

00:0c:42:b2:fe:80 [Link] [Link] xe-1/1/0.294 none
 Core Premises Checking for Service IP Transit

• Check BGP neighbor to customer from NPE internet Gateway

[Link]@[Link]-MX480-01> show bgp neighbor [Link]
Peer: [Link]+179 AS 131732 Local: [Link]+59663 AS 38757
Type: External State: Established Flags: <Sync>
Last State: OpenConfirm Last Event: RecvKeepAlive
Last Error: Hold Timer Expired Error

• Check Route Receive protocol BGP from customer to NPE internet Gateway
[Link]@[Link]-MX480-01> show route receive-protocol bgp [Link]

inet.0: 593148 destinations, 1609400 routes (593148 active, 0 holddown, 2 hidden)

Prefix Nexthop MED Lclpref AS path
* [Link]/24 [Link] 131732 I
Core Premises Checking for Service IP Transit
 Chapter 4

Service Internet (IX & IIX)

 Chapter 4

• CHECKLIST:
1. Interface access status checking in POP
Lastmile
2. MAC address port or vlan checking in POP
Lastmile
3. ARP and test PING from POP Lastmile to
customer Lastmile
4. Test PING from POP Lastmile to DNS
ICON/Google
• IP DNS : [Link] (ICON), [Link]
(Google), [Link] (Nawala IIX)
 Customer Premises Checking for Service Internet (IX & IIX)

On Cisco Device

• Check Interface status from UPE to Customer

JKT-JABABEKA-C3750-UPE-02#show ip interface brief Fa1/0/7
Any interface listed with OK? value "NO" does not have a valid configuration

Interface IP-Address OK? Method Status Protocol

FastEthernet1/0/7 unassigned YES unset up up

JKT-JABABEKA-C3750-UPE-02#show interfaces Fa1/0/7 | in rate

Queueing strategy: fifo
5 minute input rate 290000 bits/sec, 184 packets/sec
5 minute output rate 2469000 bits/sec, 242 packets/sec
 Customer Premises Checking for Service Internet (IX & IIX)

• Check Configuration interface from UPE to Customer

JKT-JABABEKA-C3750-UPE-02#show running-config interface Vl55
Building configuration...

Current configuration : 169 bytes

!
interface Vlan55
description 0990000320323745 Internet PT HPMT Artoda Indonesia
ip vrf forwarding INTERNET-CORPORATE
ip address [Link] [Link]
end
 Customer Premises Checking for Service Internet (IX & IIX)

• Check MAC address customer from UPE

JKT-JABABEKA-C3750-UPE-02#show mac address-table dynamic vlan 55
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----
55 9061.0c1c.e30e DYNAMIC Fa1/0/7

• Check ARP address customer from UPE

JKT-JABABEKA-C3750-UPE-02#show ip arp vrf INTERNET-CORPORATE | i Vlan55
Internet [Link] - 04fe.7f21.5a5a ARPA Vlan55
Internet [Link] 224 9061.0c1c.e30e ARPA Vlan55
 Customer Premises Checking for Service Internet (IX & IIX)

• PING Test to Customer

JKT-JABABEKA-C3750-UPE-02#ping vrf INTERNET-CORPORATE [Link] repeat 100
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to [Link], timeout is 2 seconds:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 99 percent (99/100), round-trip min/avg/max = 1/4/16 ms

• PING Test to Internet

JKT-JABABEKA-C3750-UPE-02#ping vrf INTERNET-CORPORATE [Link] source [Link] repeat 100
Type escape sequence to abort.
Sending 100, 100-byte ICMP Echos to [Link], timeout is 2 seconds:
Packet sent with a source address of [Link]
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (100/100), round-trip min/avg/max = 16/20/26 ms
 Customer Premises Checking for Service Internet (IX & IIX)

On Juniper Device
• Check Interface status from UPE to Customer

[Link]@[Link]-ACX4000-UPE-01> show interfaces descriptions | match

ge-1/1/5.30 up up 0990000320330375 Internet PLN PLTU Pacitan

[Link]@[Link]-ACX4000-UPE-01> show interfaces ge-1/1/5 | match rate

Input rate : 296624 bps (323 pps)
Output rate : 1574352 bps (224 pps)
 Customer Premises Checking for Service Internet (IX & IIX)

• Check Configuration interface from UPE to Customer

[Link]@[Link]-ACX4000-UPE-01> show configuration interfaces ge-
1/1/5.30
description "0990000320330375 Internet PLN PLTU Pacitan";
encapsulation vlan-ccc;
vlan-id 30;
family ccc;
 Customer Premises Checking for Service Internet (IX & IIX)

• Check L2 Circuit Connection from UPE to NPE

[Link]@[Link]-ACX4000-UPE-01> show l2circuit connections interface ge-1/1/5.30
Layer-2 Circuit Connections:

Legend for interface status

Up -- operational
Dn -- down
Neighbor: [Link]
Interface Type St Time last up # Up trans
ge-1/1/5.30(vc 30) rmt Up Apr 10 15:06:05 2016 1
Remote PE: [Link], Negotiated control-word: No
Incoming label: 299920, Outgoing label: 520768
Negotiated PW status TLV: No
Local interface: ge-1/1/5.30, Status: Up, Encapsulation: VLAN
Description: 0990000320330375 Internet PLN PLTU Pacitan
 Customer Premises Checking for Service Internet (IX & IIX)

• Check interface for service customer from NPE

[Link]@JATENG-PEDAN-MX.480-NPE-01-RE0> show interfaces descriptions | match lt-
1/0/0.10738
lt-1/0/0.10738 up up 0990000320425456 INTERNET PT. SCG READYMIX INDONESIA (JAYAMIX)
Jl. Raya Telukan Km. 7 SOLO

• Check ARP address customer from NPE

[Link]@JATENG-PEDAN-MX.480-NPE-01-RE0> show arp vpn INTERNET-CORPORATE | match
lt-1/0/0.10738
24:be:05:02:f8:6d [Link] [Link] lt-1/0/0.10738 none
50:46:5d:67:d4:42 [Link] [Link] lt-1/0/0.10738 none
00:1f:c6:14:39:8f [Link] [Link] lt-1/0/0.10738 none
 Core Premises Checking for Service Internet (IX & IIX)

On Cisco Device

• Check Routing Table to reach internet from UPE

JKT-JABABEKA-C3750-UPE-02#show ip route vrf INTERNET-CORPORATE | in [Link]
Gateway of last resort is [Link] to network [Link]
B* [Link]/0 [200/0] via [Link], 3d11h
 Core Premises Checking for Service Internet (IX & IIX)
• Trace route to reach ABR Cloud NAP
JKT-JABABEKA-C3750-UPE-02#trac mpls ipv4 [Link] [Link]
Tracing MPLS Label Switched Path to [Link]/32, timeout is 2 seconds

Codes: '!' - success, 'Q' - request not sent, '.' - timeout,

'L' - labeled output interface, 'B' - unlabeled output interface,
'D' - DS Map mismatch, 'F' - no FEC mapping, 'f' - FEC mismatch,
'M' - malformed request, 'm' - unsupported tlvs, 'N' - no label entry,
'P' - no rx intf label prot, 'p' - premature termination of LSP,
'R' - transit router, 'I' - unknown upstream index,
'X' - unknown return code, 'x' - return code 0

Type escape sequence to abort.

0 [Link] MRU 9000 [Labels: 16450 Exp: 0]
L 1 [Link] MRU 9000 [Labels: 16029 Exp: 0] 8 ms
L 2 [Link] MRU 9000 [Labels: implicit-null Exp: 0] 8 ms
! 3 [Link] 9 ms
 Core Premises Checking for Service Internet (IX & IIX)
• Trace route to reach internet from UPE
JKT-JABABEKA-C3750-UPE-02#traceroute vrf INTERNET-CORPORATE

Protocol [ip]:

Target IP address: [Link]

Source address: [Link]

Numeric display [n]:

Tracing the route to [Link]

1 [Link] [MPLS: Label 17165 Exp 0] 0 msec

[Link] 0 msec

2 [Link] 8 msec

[Link] 0 msec

3 [Link] 9 msec

[Link] 0 msec

4 [Link] 8 msec

[Link] 17 msec

5 [Link] 16 msec

[Link] 26 msec

6 [Link] 16 msec

[Link] 26 msec

7 [Link] 16 msec

[Link] 17 msec

8 [Link] 16 msec

[Link] 16 msec
 Core Premises Checking for Service Internet (IX & IIX)
On Juniper Device

• Check Routing Table to reach ABR from NPE

[Link]@JATENG-PEDAN-MX.480-NPE-01-RE0> show route [Link]

inet.0: 2468 destinations, 2469 routes (2468 active, 0 holddown, 0 hidden)

Restart Complete
+ = Active Route, - = Last Active, * = Both

[Link]/32 *[OSPF/10] 1d 17:53:16, metric 5

> to [Link] via xe-0/0/0.0

inet.3: 2404 destinations, 2404 routes (2404 active, 0 holddown, 0 hidden)

Restart Complete
+ = Active Route, - = Last Active, * = Both

[Link]/32 *[LDP/9] 1w1d 09:52:44, metric 5

> to [Link] via xe-0/0/0.0, Push 16035
 Core Premises Checking for Service Internet (IX & IIX)
• Trace route to reach ABR Cloud NAP
[Link]@JATENG-PEDAN-MX.480-NPE-01-RE0> traceroute mpls ldp [Link]
Probe options: ttl 64, retries 3, wait 10, paths 16, exp 7, fanout 16

ttl Label Protocol Address Previous Hop Probe Status

1 16035 LDP [Link] (null) Success
2 16040 Unknown [Link] [Link] Success
3 16029 Unknown [Link] [Link] Success
4 3 Unknown [Link] [Link] Egress

Path 1 via xe-0/0/0.0 destination [Link]

ttl Label Protocol Address Previous Hop Probe Status

2 16127 Unknown [Link] [Link] Success
3 16029 Unknown [Link] [Link] Success
4 3 Unknown [Link] [Link] Egress

Path 2 via xe-0/0/0.0 destination [Link]

 Core Premises Checking for Service Internet (IX & IIX)
• Trace route to reach internet from NPE
[Link]@JATENG-PEDAN-MX.480-NPE-01-RE0> traceroute routing-instance INTERNET-CORPORATE [Link]
traceroute to [Link] ([Link]), 30 hops max, 40 byte packets
1 [Link] ([Link]) 15.464 ms 14.627 ms 14.296 ms
MPLS Label=16031 CoS=0 TTL=255 S=0
MPLS Label=17165 CoS=0 TTL=255 S=1
2 [Link] ([Link]) 11.926 ms 9.626 ms 11.961 ms
MPLS Label=16036 CoS=0 TTL=255 S=0
MPLS Label=17165 CoS=0 TTL=255 S=1
3 [Link] ([Link]) 12.485 ms 10.553 ms 11.898 ms
MPLS Label=16036 CoS=0 TTL=255 S=0
MPLS Label=17165 CoS=0 TTL=255 S=1
4 [Link] ([Link]) 10.120 ms 9.654 ms 8.781 ms
MPLS Label=17165 CoS=0 TTL=255 S=1
5 [Link] ([Link]) 24.570 ms 24.348 ms 24.492 ms
6 [Link] ([Link]) 25.145 ms 25.099 ms 24.487 ms
7 [Link] ([Link]) 26.668 ms [Link] ([Link]) 26.178 ms [Link] ([Link]) 26.708 ms
8 [Link] ([Link]) 26.240 ms [Link] ([Link]) 25.795 ms [Link] ([Link]) 28.095 ms
9 [Link] ([Link]) 29.066 ms 27.106 ms 27.165 ms