HMB
HMB AGGREGATIONS links primary and bkup
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show interfaces descriptions | match HMB-ho
xe-0/0/1.1045 up up HMB-HOAgg-S-MetroFiber:2010947939:140MB:active pri
xe-0/0/1.1046 up up HMB-HOAggLLBkp-S-MetroFiber:2020440488:10Mb:Active
xe-0/0/1.1354 up up HMB-HOAggVPN-S-MetroFiber:2020440475:140MB:active BK up
xe-0/0/1.1355 up up HMB-HObackup-MetroFiber:2012602364:10MB:INT:Active
PRIMARY:
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show arp interface xe-0/0/1.1045 no-resolve
MAC Address Address Interface Flags
e0:23:ff:00:6c:20 [Link] xe-0/0/1.1045 none
{master}
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show bgp summary | match [Link]
[Link] 64601 131448 118232 0 37 5w4d 22:46:57 Establ
SECONDARY:
xe-0/0/1.1354 up up HMB-HOAggVPN-S-MetroFiber:2020440475:140MB:active
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show arp interface xe-0/0/1.1354 no-resolve
MAC Address Address Interface Flags
e0:23:ff:00:6c:21 [Link] xe-0/0/1.1354 none
[Link] 64601 131332 118125 0 17 5w4d 21:56:11 Establ
We can access fortiget with public IP.
We have to check bgp of internet link and get bgp and also run below commands to access device.
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show bgp summary | match 64601
[Link] 64601 131372 118095 0 39 5w4d 22:47:31 Establ
[Link] 64601 131325 117990 0 15 5w4d 21:56:10 Establ
[Link] 64601 125459 118106 0 39 5w4d 22:52:30 Establ
[Link] 64601 131332 118125 0 17 5w4d 21:56:11 Establ
[Link] 64601 131449 118233 0 37 5w4d 22:47:33 Establ
[Link] 64601 131439 118240 0 42 5w4d 22:52:42 Establ
xe-0/0/1.1046 up up HMB-HOAggLLBkp-S-MetroFiber:2020440488:10Mb:Active prim internet
xe-0/0/1.1355 up up HMB-HObackup-MetroFiber:2012602364:10MB:INT:Active secondary internet
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show arp interface xe-0/0/1.1046 no-resolve
MAC Address Address Interface Flags
e0:23:ff:00:6c:20 [Link] xe-0/0/1.1046 none
{master}
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show route receive-protocol bgp [Link]
inet.0: 8312 destinations, 11718 routes (8282 active, 0 holddown, 51 hidden)
Prefix Nexthop MED Lclpref AS path
* [Link]/29 [Link] 20 64601 I
* [Link]/29 [Link] 20 64601 I
* [Link]/29 [Link] 20 64601 I
* [Link]/29 [Link] 20 64601 I
TO access fortiget:
* [Link] IP on web browser:
Admin
bsd@ldn123
We can check IPLC from fortiget CLI:
KHI_HMB_HO # execute ping-options source [Link]
KHI_HMB_HO # execute ping [Link]
PING [Link] ([Link]): 56 data bytes
64 bytes from [Link]: icmp_seq=0 ttl=251 time=147.6 ms
64 bytes from [Link]: icmp_seq=1 ttl=251 time=147.5 ms
64 bytes from [Link]: icmp_seq=2 ttl=251 time=147.4 ms
64 bytes from [Link]: icmp_seq=3 ttl=251 time=147.5 ms
64 bytes from [Link]: icmp_seq=4 ttl=251 time=147.5 ms
--- [Link] ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 147.4/147.5/147.6 ms
KHI_HMB_HO # execute ping-options source [Link]
KHI_HMB_HO # execute ping [Link]
PING [Link] ([Link]): 56 data bytes
64 bytes from [Link]: icmp_seq=0 ttl=251 time=147.5 ms
64 bytes from [Link]: icmp_seq=1 ttl=251 time=147.4 ms
64 bytes from [Link]: icmp_seq=2 ttl=251 time=147.5 ms
64 bytes from [Link]: icmp_seq=3 ttl=251 time=147.4 ms
64 bytes from [Link]: icmp_seq=4 ttl=251 time=147.4 ms
--- [Link] ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 147.4/147.4/147.5 ms
we can also check traces:
KHI_HMB_HO # execute traceroute [Link]
traceroute to [Link] ([Link]), 32 hops max, 3 probe packets per hop, 84 byte packets
1 [Link] 2.637 ms 2.197 ms 1.259 ms
2 [Link] 112.953 ms 112.871 ms 112.840 ms
3 [Link] 291.262 ms 291.797 ms 291.984 ms
4 [Link] 311.761 ms 311.818 ms 311.741 ms
ALSO we can check from APC: Same commands can use.
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> telnet [Link] no-resolve
Trying [Link]...
Connected to [Link].
Escape character is '^]'.
KHI_HMB_HO login: admin
Password: bsd@ldn123
We can also check IPLC circuit directly:
APC 2 stats below:
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-02> show interfaces descriptions | match pccw
ae3.731 up up INFRA-->PCCW-London-KHIAPC-EX4200-06-ge-0/0/12-NE834-13/1 its hmb iplc
interconnect
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-02> show interfaces ae3.731
Logical interface ae3.731 (Index 858) (SNMP ifIndex 1609)
Description: INFRA-->PCCW-London-KHIAPC-EX4200-06-ge-0/0/12-NE834-13/1
Flags: Up SNMP-Traps 0x4000 VLAN-Tag [ 0x8100.731 ] Encapsulation: ENET2
Statistics Packets pps Bytes bps
Bundle:
Input : 749393643 2 271083125509 3832
Output: 674879724 2 146364706693 4160
Adaptive Statistics:
Adaptive Adjusts: 0
Adaptive Scans : 0
Adaptive Updates: 0
Protocol inet, MTU: 1500
Max nh cache: 75000, New hold nh limit: 75000, Curr nh cnt: 1, Curr new hold cnt: 0, NH drop cnt: 0
Flags: Sendbcast-pkt-to-re, User-MTU
Addresses, Flags: Is-Preferred Is-Primary
Destination: [Link]/30, Local: [Link], Broadcast: [Link]
Protocol multiservice, MTU: Unlimited
{master}
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-02> show route [Link]/30
VPN_HMB.inet.0: 388 destinations, 759 routes (386 active, 0 holddown, 4 hidden)
+ = Active Route, - = Last Active, * = Both
[Link]/30 *[Direct/0] 1w5d 17:56:11
> via ae3.731
[Link]/32 *[Local/0] 1w5d 17:56:11
Local via ae3.731
{master}
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-02> ping routing-instance VPN_HMB [Link] source
[Link] rapid count 100
PING [Link] ([Link]): 56 data bytes
!!!!!!!!!!!!!!!!^C
--- [Link] ping statistics ---
17 packets transmitted, 16 packets received, 5% packet loss
round-trip min/avg/max/stddev = 146.929/152.098/226.132/19.117 ms
{master}
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-02> ping routing-instance VPN_HMB [Link] source
[Link]
PING [Link] ([Link]): 56 data bytes
64 bytes from [Link]: icmp_seq=0 ttl=253 time=147.060 ms
64 bytes from [Link]: icmp_seq=1 ttl=253 time=147.074 ms
64 bytes from [Link]: icmp_seq=2 ttl=253 time=147.050 ms
64 bytes from [Link]: icmp_seq=3 ttl=253 time=147.019 ms
64 bytes from [Link]: icmp_seq=4 ttl=253 time=147.036 ms
64 bytes from [Link]: icmp_seq=5 ttl=253 time=147.050 ms
^C
--- [Link] ping statistics ---
7 packets transmitted, 6 packets received, 14% packet loss
round-trip min/avg/max/stddev = 147.019/147.048/147.074/0.017 ms
another option: APC1
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show interfaces descriptions | match pccw
ae3.122 up up INFRA-->PCCW-Singapore-KHIAPC-EX4200-05-ge-0/0/12
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> show route [Link]/30
VPN_HMB.inet.0: 490 destinations, 724 routes (488 active, 0 holddown, 5 hidden)
+ = Active Route, - = Last Active, * = Both
[Link]/30 *[Direct/0] 1w0d 10:52:08
> via ae3.122
[Link]/32 *[Local/0] 1w0d 10:52:08
Local via ae3.122
{master}
muhammad.tahir8@FIX-KHIAPC-AGG-MX480-01> ping routing-instance VPN_HMB [Link] source
[Link]
PING [Link] ([Link]): 56 data bytes
^C
--- [Link] ping statistics ---
7 packets transmitted, 0 packets received, 100% packet loss