Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[MX] Explanation for VPLS PFE Error counter due to ‘vlan id out of oif's range’

0

0

Article ID: KB31223 KB Last Updated: 19 Dec 2016Version: 1.0
Summary:

The message, ‘vlan id out of oif's range’ may occur in a VPLS scenario when an interface is not configured for VLAN 10 and prevent packets from being sent out of that interface. This behavior is expected. An example and explanation for this behavior is provided in this article.

Symptoms:

In a VPLS scenario, the PFE (packet forwarding engine) returns the following error counter:

vlan id out of oif's range
Solution:

Example VPLS configuration of the PE (provider edge) router:

root@PE1> show configuration interfaces
ge-0/0/1 {
    hierarchical-scheduler maximum-hierarchy-levels 2;
    flexible-vlan-tagging;
    encapsulation flexible-ethernet-services;
    unit 9 {
        encapsulation vlan-vpls;
        vlan-id 9;
    }
    unit 10 {
        encapsulation vlan-vpls;
        vlan-id 10;
    }
}

root@PE1> show configuration routing-instances
BNG {
    instance-type vpls;
    vlan-id all;
    interface ge-0/0/1.9;
    interface ge-0/0/1.10;
    no-local-switching;
    route-distinguisher 1.1.1.1:100;
    vrf-target target:65000:100;
    protocols {
        vpls {
            site-range 9999;
            label-block-size 2;
            mac-table-size {
                32000;
            }
            interface-mac-limit {
                4096;
            }
            no-tunnel-services;
            site JTAC {
                site-identifier 10;
                multi-homing;
                site-preference primary;
                interface ge-0/0/1.9;
                interface ge-0/0/1.10;
            }
            mac-flush;
        }
    }
}

The VPLS mac-table has the ability to learn from the CPE facing ge-0/0/1.9 interface:

root@PE1> show vpls mac-table

MAC flags       (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
    O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : BNG_Backhaul_RWDA_01
 Bridging domain : __BNG_Backhaul_RWDA_01__, VLAN : 9
   MAC                 MAC      Logical          NH     RTR
   addresssss          flags    interface        Index  ID
   00:00:5e:00:01:01   D        lsi.1048576
   56:68:a6:6b:35:c9   D        ge-0/0/1.9

root@PE1>

The mac-table is clear and the CPE is shut down so it does not respond to remote ping requests. Notice the error counter numbers:

root@PE1> show vpls mac-table

root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range         DISC(32)          3583     204074

The ping from remote CPE is initiated. Since the MAC is not in table, PE should treat this unknown unicast and flood to all the interfaces in the site.

Interface ge-0/0/1.10 is not configured for VLAN 10, hence the packet cannot be sent out of that interface. This causes the error counter ‘vlan id out of oif's range’ to increase:

root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range         DISC(32)          3655     211418

The CPE interface is open and can respond to pings. Once the MAC address is learnt by VPLS domain, flooding is not needed and the error counter stops:

root@PE1> show vpls mac-table

MAC flags       (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
    O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : BNG_Backhaul_RWDA_01
 Bridging domain : __BNG_Backhaul_RWDA_01__, VLAN : 9
   MAC                 MAC      Logical          NH     RTR
   addresssss          flags    interface        Index  ID
   00:00:5e:00:01:01   D        lsi.1048576
   56:68:a6:6b:35:c9   D        ge-0/0/1.9

root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range         DISC(32)          3655     211418
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search