nanog mailing list archives

Re: Sites unreachable while traversing Dallas IXP


From: Brian Turnbow via NANOG <nanog () lists nanog org>
Date: Fri, 26 Sep 2025 18:01:49 +0200

HI,

On Fri, 26 Sept 2025 at 17:23, Tom Beecher <beecher () beecher cc> wrote:

Besides what others have mentioned,
Another thing that changed moving from the physical interface to lacp
is going to be the mac used on the ixp lan.
I would check connectivity to all IPs on the peering lan as they may
receive your routes from the route server but not be able to contact
you directly.
You may have already done this but as you mentioned removing the
announcements to the route server, to solve the issue it rang the
route server blackhole bell for me.
It wouldn't be the first time I've seen this happen.


This is an excellent reminder. Many IXPs put a MAC filter on each port that you have to have them change if you 
change your end.

I'm guessing this isn't the case here, since the OP stated his BGP sessions came up and traffic was flowing, but it's 
possible and a good callout.

Yes it is not an acl on his port, as no sessions would come up,  but
maybe a fabric forwarding issue.
I have no idea what they use if flat L2, evpn etc on the peering lan
but it would be something to check.
It could even be some crazy member that fixed static arp tables or L2
acls for "security purposes" ;-)

Brian
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/I2DLDUJMD43ZD7SVKUAWAJ6G4PCL5OHJ/


Current thread: