Tuesday, May 27, 2025

Extreme Switch - How to ping IPv6 Link-Local address


Introduction

IPv6 link-local addresses (fe80::/10) are valid only on the local link and require an explicit interface context when you use the ExtremeXOS ping command. Without specifying the VLAN, the switch cannot determine the egress interface and returns an error. By appending “%<vlan_name>” to the link-local address, you indicate exactly which VLAN the packet should originate from, enabling a successful ICMPv6 echo request.


Symptoms

When you try to ping a link-local IPv6 address without a scope identifier, ExtremeXOS reports:

# ping ipv6 fe80::204:96ff:fe98:9d5d
Error: The egress interface cannot be determined. The link local address must be of form LLA%<vlan_name>.

Cause

The CLI needs both the address and the VLAN context because link-local addresses are non-routable and exist on every interface simultaneously. Omitting the scope prevents the switch from knowing which interface to use for the ping.

Resolution

Use the following syntax:

ping ipv6 link-local-address%vlan_name

Steps:

  • Identify the VLAN you want to source the ping from.
  • Append “%VLAN_NAME” directly to the fe80:: address (no spaces).
  • Run the ping command with the full, scoped address. 1

Example

To ping fe80::204:96ff:fe98:9d5d from VLAN “Test”:

EXOS# ping ipv6 fe80::204:96ff:fe98:9d5d%Test
Ping(ICMP6) fe80::204:96ff:fe98:9d5d: 4 packets, 8 data bytes, interval 1 second(s).
16 bytes from fe80::204:96ff:fe98:9d5d: icmp_seq=0 ttl=64 time=7.398 ms
16 bytes from fe80::204:96ff:fe98:9d5d: icmp_seq=1 ttl=64 time=0.523 ms
16 bytes from fe80::204:96ff:fe98:9d5d: icmp_seq=2 ttl=64 time=5.025 ms
16 bytes from fe80::204:96ff:fe98:9d5d: icmp_seq=3 ttl=64 time=0.524 ms

--- fe80::204:96ff:fe98:9d5d ping statistics ---
4 packets transmitted, 4 packets received, 0% loss

References

Solution: Getting error when trying to ping fe80 ipv6 address | Extreme Portal


Links

Search articles with a tag ‘IPv6’

Thursday, May 22, 2025

Extreme Switch - Troubleshooting BGP issue in EXOS


A reliable Border Gateway Protocol (BGP) session is vital when your Extreme switch is the hand-off to an ISP or upstream peer. Below is a field-tested checklist—expanded with IPv6 examples—to help you move methodically from physical reachability to policy filters and quickly locate the root cause of missing routes or a stuck session.


Verify the BGP neighbors

Display BGP neighbor information

show bgp neighbor

EXOS # show bgp neighbor
=============================================================================
Peer               AS     MsgRcvd MsgSent OutQ  Up/Down          State        |  PfxRcvd  PfxSent  PfxAcct
-----------------------------------------------------------------------------------------------------------------------------------
198.51.100.1     64512     38,912  38,840     0  4d03h22m18s     Established  |   64,820      120   Enabled
2001:db8::1      64513        679     672     0     00h15m12s    Established  |    1,189       55   Enabled
=============================================================================

Verify that the session is really up

show bgp neighbor 198.51.100.1

Look for the line State : ESTABLISHED. If the FSM is anything else (Idle, Active, Connect, OpenSent/Confirm), focus on layer-3 reachability, TCP/179 ACLs, or authentication first. (Extreme Networks)

[!tip] Finite State Machine (FSM)

FSM stands for Finite State Machine. In BGP, the FSM models how a peering session progresses through six well-defined stages. Each transition is triggered by specific events such as successful TCP handshakes, reception of protocol messages, or timers expiring. Errors push the session back to an earlier state or terminate it.

  1. Idle – initial state before any attempt to connect
  2. Connect – TCP port 179 connection attempt in progress
  3. Active – retrying or awaiting a TCP connection
  4. OpenSent – BGP OPEN message sent, waiting for peer’s OPEN
  5. OpenConfirm – OPENs exchanged; waiting for the first Keepalive
  6. Established – Keepalives and Updates flow; routes are actively exchanged

Knowing the current FSM state helps you pinpoint at which step the peering process is failing, making it a fundamental tool for BGP troubleshooting.


IPv6 peer example

show bgp neighbor 2001:db8::1

The output is identical in structure; you will also see separate capability blocks for ipv6-unicast and ipv6-multicast.


Confirm the negotiated address-families

In the neighbor detail you should see Capabilities Config : ipv4-unicast, … , ipv6-unicast under each address-family section. Missing ipv6-unicast means one side never offered it (often because the right license or knob is absent). Extreme notes that IPv6 BGP requires a Premier/Core license on many Summit platforms. (Extreme Networks)


Inspect what you send to the peer

show bgp neighbor 198.51.100.1 transmitted-routes all

Check that every intended prefix appears and carries the correct Next-Hop, Local-Pref, MED and AS-Path. If something is absent:

  • Make sure the network is in the local routing table (RIB).
  • Verify any route-policy out … statements are not filtering it.
  • Confirm next-hop-self is set when advertising iBGP routes to eBGP peers. (Extreme Networks)

EXOS # show bgp neighbor 198.51.100.1 transmitted-routes  all

Advertised Routes:
     Destination                         Next-Hop        LPref Weight MED        AS-Path
----------------------------------------------------------------------------------------
 >?  17.17.17.0/24                       198.51.100.2    100          0         
 >?  24.24.24.24/32                      198.51.100.21   100          0         
 >?  198.51.100.0/24                     198.51.100.21   100          0         

Flags: (*) Preferred BGP route, (>) Active, (d) Suppressed, (h) History
       (s) Stale, (m) Multipath, (u) Unfeasible

Origin: (?) Incomplete, (e) EGP, (i) IGP

BGP Route Statistics
  Advertised Routes : 3

IPv6 equivalent

show bgp neighbor 2001:db8::1 transmitted-routes ipv6-unicast all



Inspect what you receive

show bgp neighbor 198.51.100.1 received-routes all

EXOS # show bgp neighbor 198.51.100.1 received-routes all

Routes:
     Destination         Peer            Next-Hop        LPref Weight MED        AS-Path
----------------------------------------------------------------------------------------
*>?  0.0.0.0/0           198.51.100.1    10.58.106.1     100   1      0         
*>?  1.1.1.1/32          198.51.100.1    198.51.100.1    100   1      0         
*>?  2.2.2.1/32          198.51.100.1    192.168.10.22   100   1      0         
*>?  10.58.106.0/24      198.51.100.1    198.51.100.1    100   1      0         
*>?  192.168.10.0/24     198.51.100.1    198.51.100.1    100   1      0         
*>?  192.168.53.0/24     198.51.100.1    198.51.100.1    100   1      0         
*>?  192.168.55.0/24     198.51.100.1    198.51.100.1    100   1      0         
  ?  198.51.100.0/24     198.51.100.1    198.51.100.1    100   1      0         

Flags: (*) Preferred BGP route, (>) Active, (d) Suppressed, (h) History
       (s) Stale, (m) Multipath, (u) Unfeasible

Origin: (?) Incomplete, (e) EGP, (i) IGP

BGP Route Statistics
  Total Rxed Routes : 8
  Feasible Routes   : 8
  Active Routes     : 7
  Rejected Routes   : 0
  Unfeasible Routes : 0

Display all routes in the RibIN.

show bgp routes all

For IPv6, simply add ipv6-unicast:

show bgp neighbor 2001:db8::1 received-routes ipv6-unicast all


EXOS # show bgp neighbor 2001:db8::1 ipv6-unicast received-routes all

Routes:
     Destination                                 LPref Weight MED
       Peer                                     Next-Hop
       AS-Path
-------------------------------------------------------------------------
*>i  ::/0                                        100   1      0
       2001:db8::1                      2001:db8::1
       6461

Flags: (*) Preferred BGP route, (>) Active, (d) Suppressed, (h) History
       (s) Stale, (m) Multipath, (u) Unfeasible

Origin: (?) Incomplete, (e) EGP, (i) IGP

BGP Route Statistics
  Total Rxed Routes : 1
  Feasible Routes   : 1
  Active Routes     : 1
  Rejected Routes   : 0
  Unfeasible Routes : 0

Check the local BGP and IP routing tables


For IPv4 BGP

show bgp routes all
show iproute

For IPv6 BGP

show bgp routes ipv6-unicast all
show iproute ipv6

Compare what BGP believes is best with what the FIB (iproute) actually programs. If the best path is missing from the FIB, you may be hitting a hardware route-table limit or an administrative distance conflict.



Typical culprits and quick fixes

Symptom Checklist item Likely fix
Neighbor stuck in Active IP reachability / ACLs / auth enable sharing on LAGs, allow TCP/179, verify passwords
No IPv6 routes learned Capabilities missing Check Premier/Core license; show licenses or show licenses detail
Intended prefix not advertised Network not in RIB or outbound policy filters it configure bgp add network …, adjust route-policy out
Received route visible but not active Better path learned elsewhere or policy rejected it Adjust local-preference, MED, or remove rejecting policy
Full-view floods hardware table Platform route scale limit Summarize, filter, or switch to partial route-reflector feed


Handy IPv6 configuration snippets


Advertise a local /48

configure bgp add network ipv6 2001:db8:100::/48

Create an IPv6 eBGP peer

create bgp neighbor 2001:db8::1 remote-AS-number 64512
configure bgp neighbor 2001:db8::1 source-interface ipaddress 2001:db8::20
enable bgp neighbor 2001:db8::1

Display IPv6 routes

show bgp routes ipv6-unicast all


References

How To: How To: Troubleshoot BGP Issues on Switch Engine (EXOS) | Extreme Portal
How To: How to see IPv6 routes transmitted or received by BGP router? | Extreme Portal
How To: How To: Configure BGP on Switch Engine (EXOS) | Extreme Portal
How To: How to add an IPv6 address to a VLAN | Extreme Portal
Q A: Does BGP work with a base license on universal EXOS switches | Extreme Portal

Links

AnalysisMan.com - Search articles with a tag ‘BGP’

Wednesday, May 21, 2025

IPv6 Tools Online for Network Engineers


Here are some useful tools for network engineers to look up IPv6 information—all freely available online.

IPv6 Subnet Calculator

IPv6 Subnet Calculator (SubnettingPractice)

IPv6 Subnet Calculator (Zoho ManageEngine Site24x7)


IPv6 DNS Lookup

IPv6 DNS Lookup (webdnstools)

IPv6 Lookup (dnslookup.online)

DNS Lookup IPv6 (MXToolBox)


IPv6 Prefix Search in ISPs

he.net Super Looking Glass

IPv6 DNS Servers


Google

2001:4860:4860::8888
2001:4860:4860::8844

Cloudflare

2606:4700:4700::1111
2606:4700:4700::1001
Use these if you just want standard DNS resolution.

If you’d like built-in malware filtering, use the following:

2606:4700:4700::1112
2606:4700:4700::1002

For malware filtering and blocking adult content, use these:

2606:4700:4700::1113
2606:4700:4700::1003

Open DNS

2620:0:ccc::2
2620:0:ccd::2

If you want to use IPv6 DNS with filtering to help protect your devices, you’ll need to use the following:

2620:119:35::35
2620:119:53::53


IPv6 settings for your device

Configure your network settings to use Google Public DNS

Test your IPv6 connectivity

Test your IPv6.


References

IPv6 - Wikipedia
Google IPv6 adoption Statistics

Links

Online Network Tools for Network Engineers | AnalysisMan