The message, ‘vlan id out of oif's range’
may occur in a VPLS scenario when an interface is not configured for VLAN 10 and prevent packets from being sent out of that interface. This behavior is expected. An example and explanation for this behavior is provided in this article.
In a VPLS scenario, the PFE (packet forwarding engine) returns the following error counter:
vlan id out of oif's range
Example VPLS configuration of the PE (provider edge) router:
root@PE1> show configuration interfaces
ge-0/0/1 {
hierarchical-scheduler maximum-hierarchy-levels 2;
flexible-vlan-tagging;
encapsulation flexible-ethernet-services;
unit 9 {
encapsulation vlan-vpls;
vlan-id 9;
}
unit 10 {
encapsulation vlan-vpls;
vlan-id 10;
}
}
root@PE1> show configuration routing-instances
BNG {
instance-type vpls;
vlan-id all;
interface ge-0/0/1.9;
interface ge-0/0/1.10;
no-local-switching;
route-distinguisher 1.1.1.1:100;
vrf-target target:65000:100;
protocols {
vpls {
site-range 9999;
label-block-size 2;
mac-table-size {
32000;
}
interface-mac-limit {
4096;
}
no-tunnel-services;
site JTAC {
site-identifier 10;
multi-homing;
site-preference primary;
interface ge-0/0/1.9;
interface ge-0/0/1.10;
}
mac-flush;
}
}
}
The VPLS mac-table has the ability to learn from the CPE facing ge-0/0/1.9 interface:
root@PE1> show vpls mac-table
MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)
Routing instance : BNG_Backhaul_RWDA_01
Bridging domain : __BNG_Backhaul_RWDA_01__, VLAN : 9
MAC MAC Logical NH RTR
addresssss flags interface Index ID
00:00:5e:00:01:01 D lsi.1048576
56:68:a6:6b:35:c9 D ge-0/0/1.9
root@PE1>
The mac-table is clear and the CPE is shut down so it does not respond to remote ping requests. Notice the error counter numbers:
root@PE1> show vpls mac-table
root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range DISC(32) 3583 204074
The ping from remote CPE is initiated. Since the MAC is not in table, PE should treat this unknown unicast and flood to all the interfaces in the site.
Interface ge-0/0/1.10 is not configured for VLAN 10, hence the packet cannot be sent out of that interface. This causes the error counter ‘vlan id out of oif's range’ to increase:
root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range DISC(32) 3655 211418
The CPE interface is open and can respond to pings. Once the MAC address is learnt by VPLS domain, flooding is not needed and the error counter stops:
root@PE1> show vpls mac-table
MAC flags (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)
Routing instance : BNG_Backhaul_RWDA_01
Bridging domain : __BNG_Backhaul_RWDA_01__, VLAN : 9
MAC MAC Logical NH RTR
addresssss flags interface Index ID
00:00:5e:00:01:01 D lsi.1048576
56:68:a6:6b:35:c9 D ge-0/0/1.9
root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range DISC(32) 3655 211418