Manualshelf

R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

ManualsBrandsHP ManualsComputer AccessoriesHP 7100/7200 IPsec dl Module
511512513514515516517518519520
507
MSDP Total Source-Active Cache - 4 entries
MSDP matched 4 entries
(Source, Group) Origin RP Pro AS Uptime Expires
(10.110.3.100, 226.1.1.0) 1.1.1.1 ? ? 00:32:53 00:05:07
(10.110.3.100, 226.1.1.1) 1.1.1.1 ? ? 00:32:53 00:05:07
(10.110.3.100, 226.1.1.2) 1.1.1.1 ? ? 00:32:53 00:05:07
(10.110.3.100, 226.1.1.3) 1.1.1.1 ? ? 00:32:53 00:05:07
Troubleshooting MSDP
MSDP peers stay in down state
Symptom
The configured MSDP peers stay in the down state.
Analysis
• A TCP connection–based MSDP peering relationship is established between the local interface
address and the MSDP peer after the configuration.
• The TCP connection setup will fail if there is a consistency between the local interface address and
the MSDP peer address configured on the router.
• If no route is available between the MSDP peers, the TCP connection setup will also fail.
Solution
1. Check that a route is available between the routers. Carry out the display ip routing-table
command to check whether the unicast route between the routers is correct.
2. Check that a unicast route is available between the two routers that will become MSDP peers to
each other.
3. Verify the interface address consistency between the MSDP peers. Use the display
current-configuration command to verify that the local interface address and the MSDP peer
address of the remote router are the same.
No SA entries in the router’s SA cache
Symptom
MSDP fails to send (S, G) entries through SA messages.
Analysis
• The import-source command is used to control sending (S, G) entries through SA messages to
MSDP peers. If this command is executed without the acl-number argument, all the (S, G) entries will
be filtered off, namely no (S, G) entries of the local domain will be advertised.
• If the import-source command is not executed, the system will advertise all the (S, G) entries of the
local domain. If MSDP fails to send (S, G) entries through SA messages, check whether the
import-source command has been correctly configured.