[ixpmanager] empty mac address table

Barry O'Donovan (INEX) barry.odonovan at inex.ie
Fri Sep 17 08:49:06 IST 2021


Vladimir,

just to make sure we're all on the same page:

1. The update-l2database.pl script is only for "Discovered" and not 
"Configured" MAC addresses. The distinction is explained here:

https://docs.ixpmanager.org/features/layer2-addresses/

On a modern IX you would ideally be using configured MAC addresses with 
static l2 acls on members ports to match these (either automation or 
manually).

2. Your ixpmanager.conf file should have the following for discovered 
mac addresses:

macdbtype = discovered

Can you share your ixpmanager.conf file with passwords removed?

3. It's critical MySQL works. Have you manually verified MySQL access 
from the command line with the params as set in your ixpmanager.conf file?

mysql -h xxx -u xxx -pxxx xxx


4. The update-l2database.pl script is one of the older legacy elements 
of IXP Manager. It's also probably the last thing that requires the SQL 
views to be in place. See:

https://docs.ixpmanager.org/install/manually/#database-setup under "Some 
older scripts still rely on MySQL view tables. Create these with:"

Then check this manually in your database and ensure this SQL command 
returns data:

SELECT id, switchport, switchportid, spifname, switch, switchhostname, 
status, infrastructure, virtualinterfacename FROM 
view_switch_details_by_custid;


5. There does not seem to be any action at the end of your debug output 
indicating inserting SQL. Line 168 in the script for example which would 
look like:

INSERT: 001122334455 -> switch1.example.com:swp42


6. The last output line for you is from line 147 where it dumps the 
ports. I note that the ports in your output have nothing in common with 
the ports where MAC addresses were found (i.e. the intersection of 
$l2mapping and $ports has nothing in common. This may be the issue. Have 
you the ports set up correctly in IXP Manager and do they match the 
ports on the switch? IXP Manager is uninterested in any ports other than 
those configured as member peering ports.

7. It also doesn't seem to be able to read switch2 and switch3 but it 
can switch1? What's the difference here? Maybe just no ports in use?

  - Barry


vladimir franciz blando wrote on 17/09/2021 07:56:
> What do you think Nick?
>
> Regards,
>
> Vladimir Blando
>
>
> On Thu, Aug 26, 2021 at 4:18 PM vladimir franciz blando 
> <vladimir.blando at gmail.com <mailto:vladimir.blando at gmail.com>> wrote:
>
>     Hi Nick,
>
>     Here's the complete and update output
>     https://paste.opendev.org/show/b40QzDqQz90uuvqU5d5c/
>
>     Regards,
>
>     Vladimir Blando
>
>
>     On Tue, Aug 24, 2021 at 11:57 PM Nick Hilliard <nick at foobar.org
>     <mailto:nick at foobar.org>> wrote:
>
>         Hi Vladimir,
>
>         this doesn't match the pastebin output you provided from a
>         couple of weeks ago.  Can you provide output from the two of
>         them taken at the same time?
>
>         Nick
>
>         vladimir franciz blando wrote on 24/08/2021 07:59:
>>         Hi Nick,
>>
>>         Here's the output from the 3 switches.
>>
>>         switch1
>>         ---
>>         show ethernet-switching table vlan 800
>>         Ethernet-switching table: 7 unicast entries
>>           VLAN              MAC address       Type Age Interfaces
>>           v800-ixp-lan1 *                 Flood          - All-members
>>           v800-ixp-lan1 18:2a:d3:6f:fa:e8 Learn          0 ae11.0
>>         v800-ixp-lan1 80:71:1f:14:0f:cc Learn          0 ae12.0
>>         v800-ixp-lan1 a6:b0:8c:65:e8:90 Learn          0 xe-0/0/13.0
>>         v800-ixp-lan1 d4:af:f7:c5:ef:7d Learn          0 ae3.0
>>         v800-ixp-lan1 d4:af:f7:c5:ef:e8 Learn          0 ae3.0
>>         v800-ixp-lan1 d4:af:f7:c5:ef:f8 Learn          0 ae3.0
>>         v800-ixp-lan1 ee:71:92:73:f9:49 Learn          0 xe-1/0/11.0
>>         ---
>>
>>         switch 2
>>         ---
>>         show ethernet-switching table vlan 800
>>         Ethernet-switching table: 0 unicast entries
>>           VLAN              MAC address       Type       Age Interfaces
>>           v800-ixp-lan1 *                 Flood  - All-members
>>         ---
>>
>>         switch 3
>>         ---
>>         show ethernet-switching table vlan 800
>>         Ethernet-switching table: 1 unicast entries
>>           VLAN              MAC address       Type Age Interfaces
>>           v800-ixp-lan1 *                 Flood          - All-members
>>           v800-ixp-lan1 ee:71:92:73:f9:49 Learn          0 xe-0/0/1.0
>>         ---
>>
>>
>>         Regards,
>>
>>         Vladimir Blando
>>
>>
>>         On Fri, Aug 6, 2021 at 11:16 PM Nick Hilliard
>>         <nick at foobar.org <mailto:nick at foobar.org>> wrote:
>>
>>             vladimir franciz blando wrote on 27/07/2021 14:41:
>>             > Hi Nick,
>>             >
>>             > #1 I did specify the VLAN ID, here's the sample output
>>             > https://paste.opendev.org/show/bbgUwfiVBD0ZTy8H71pr/
>>
>>             that looks odd.  Can you post the output of "show
>>             ethernet-switching
>>             table" on the switch?
>>
>>             Nick
>>
>>
>>
>>         _______________________________________________
>>         INEX IXP Manager mailing list
>>         ixpmanager at inex.ie <mailto:ixpmanager at inex.ie>
>>         Unsubscribe or change options here:https://www.inex.ie/mailman/listinfo/ixpmanager
>
>
>
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> Unsubscribe or change options here: https://www.inex.ie/mailman/listinfo/ixpmanager

-- 

Kind regards,
Barry O'Donovan
INEX

https://www.inex.ie/support/
+353 1 531 3339


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.inex.ie/pipermail/ixpmanager/attachments/20210917/94e3aea1/attachment.htm>


More information about the ixpmanager mailing list