[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference netcad::hub_mgnt

Title:DEChub/HUBwatch/PROBEwatch CONFERENCE
Notice:Firmware -2, Doc -3, Power -4, HW kits -5, firm load -6&7
Moderator:NETCAD::COLELLADT
Created:Wed Nov 13 1991
Last Modified:Fri Jun 06 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:4455
Total number of notes:16761

1511.0. "RAW IPX and DB900MX Revisited" by AKRON1::SMITH (Sic Semper Potatum Reclinus) Fri Sep 30 1994 19:05

ENVIRONMENT:

Customer has two ethernet segments each connected to it's own DECbridge
900MX which, in turn, is connected to a dual ring FDDI LAN.  It looks
something like this:
                           FDDI
                ================================
                  /                          \
	     DB900MX	                   DB900MX
                |                             |
      |--------------------|        |-------------------------|  (ETHERNETS)
         |                                              |
       NETWARE                                       NETWARE
       CLIENT                                        SERVER

The client and server are both configured for raw IPX (Novell 802.3).

The client and server are Netware V3.11.  The client(s) are using
at NDIS driver configuration partially supplied by Wollongong's PATHway
TCPIP product.  This includes a special datalink driver "overlay" to
Novell's IPX_NDIS.COM, and customized protocol manager (PROTMAN2) and
netbind (PWBIND) files. These customizations are apparently necessary
for the PATHway TCP package and allows PATHway TCPIP, DECnet and Netware
protocol stacks to run concurrently.



SYMPTOMS/PROBLEM:

The Netware client in this case can establish a connection to the server
on the other ethernet segment by executing NETX with a qualifier of
 /ps = "server name".  If, however, the user attempts to logon or execute
a directory command from that file service drive, the function eventually
fails an the "abort,retry,fail" message appears.

This problem only occurs when a client attempts to use a server where
it must span FDDI to make the connection.  This can be reproduced at will.
So far,  the customer has been able to reproduce this on several different
NICs including Cabletron E2200 and Digital Etherworks3.


As a sanity check I configured a PATHworks (V5.0) Netware boot floppy to use
NDIS and configured it to load the Cabletron E2200 driver.  This seemed
to fix to problem.  I could execute directory and copy commands, logon,
etc.  I obtained a trace of both scenarios (working/non-working) and
compared them at the point of failure.  (In the trace from the failing
configuation, the client retransmits the failing frame until it eventually
times out, never receiving the expected acknowledgement.)

The frame below (labeled Frame 57) is from the failing configuration.
The next frame down (labeled Frame 54) is at the same point on the running
configuration.  They are very similar except for one possibly important
point.  The size field says that the data field is 48 bytes.  This frame
in the running configuration really does have 48 bytes.  In the failing
configuration,  the data field contains only 47 bytes.  When I traced
this failure once before, I had probes on both ethernets.  I found
that at the frame at the point of failure never was presented to 
the segment that the server was on (at least not with the address I was
looking for!).


I have heard about the problems with raw IPX and ethernet/FDDI bridges
before but I always thought that the problems were with either the
client or the server on FDDI and the other on ethernet.  This sounds
like a different scenario.

I suspect that this size difference is somehow confusing the translation
processing (ethernet/FDDI) and the frame is being corrupted in some way
so that it can't be received by the server.

    
ANYONE HAVE ANY IDEAS HERE???
    
    
    Jeff Smith
    Cleveland, Ohio
    MCS Networks Support
    DTN 431-2712
    
    
The two trace frames are below.   

THE FAILING FRAME:
- - - - - - - - - - - - - - - - Frame 57 - - - - - - - - - - - - - - - - -

SUMMARY  Delta T     Destination   Source        Summary
    57    0.0022  04500501.0000.. 00000001.0000..  NCP C Dir search *.*

NCP:   ----- Alternate Directory Search Request -----
NCP:   
NCP:   Request code = 63
NCP:   
NCP:   Volume number = 0
NCP:   Dir access handle = 61E2
NCP:   Next search index = -1
NCP:   Search attribute flags = 06
NCP:                .... .1.. = System files allowed
NCP:                .... ..1. = Hidden files allowed
NCP:   Match file name = "*.*"
NCP:   
NCP:   [Normal end of NetWare "Alternate Directory Search Request" packet.]
NCP:   

ADDR  HEX                                                ASCII
0000  00 00 1D 0C F8 F0 00 00  1D 12 55 1D 00 30 FF FF  ..........U..0..
0010  00 2F 00 11 04 50 05 01  00 00 00 00 00 01 04 51  ./...P.........Q
0020  00 00 00 01 00 00 1D 12  55 1D 40 03 22 22 0C 0C  ........U.@.""..
0030  01 00 3F 00 61 E2 FF FF  06 03 AA AE AA           ..?.a........




THE WORKING FRAME:
- - - - - - - - - - - - - - - - Frame 54 - - - - - - - - - - - - - - - - -

SUMMARY  Delta T     Destination   Source        Summary
    54    0.0010  04500501.0000.. 00000001.0000..  NCP C Dir search *.*

NCP:   ----- Alternate Directory Search Request -----
NCP:   
NCP:   Request code = 63
NCP:   
NCP:   Volume number = 0
NCP:   Dir access handle = 4E0C
NCP:   Next search index = -1
NCP:   Search attribute flags = 06
NCP:                .... .1.. = System files allowed
NCP:                .... ..1. = Hidden files allowed
NCP:   Match file name = "*.*"
NCP:   
NCP:   [Normal end of NetWare "Alternate Directory Search Request" packet.]
NCP:   

ADDR  HEX                                                ASCII
0000  00 00 1D 0C F8 F0 00 00  1D 12 55 1D 00 30 FF FF  ..........U..0..
0010  00 2F 00 11 04 50 05 01  00 00 00 00 00 01 04 51  ./...P.........Q
0020  00 00 00 01 00 00 1D 12  55 1D 40 03 22 22 0C 07  ........U.@.""..
0030  01 00 3F 00 4E 0C FF FF  06 03 AA AE AA 00        ..?.N.........



    
                
T.RTitleUserPersonal
Name
DateLines
1511.1NETCAD::ANILFri Sep 30 1994 20:5031
    The best way to fix this problem is to configure the IPX stations
    with "Ethernet v2" encapsulation rather than "raw 802.3".  Most
    Novell customers seem to have realized this through experience.
    
    If you must use raw 802.3, you need to enable the "raw 802.3 IPX"
    mode on both DECbridges.  You can do this with HUBwatch, from the
    bridge configuration screen.
    
    Having said that, I'm not sure that it will work even if you do so.
    The packets that you've shown are even more illegal than the
    usual Novell raw 802.3 stuff.  The 802.3 Length field says that
    there are more bytes than there actually are in the frame.  When
    translating the packet in order to transmit it on the FDDI, the bridge
    has to get rid of the length field (since the FDDI packet format
    is different).  However it uses the length field to determine the
    number of bytes it must transmit.  Now the bridge doesn't mind if
    the length field is LESS than the number of actual bytes in the
    packet, it treats the extra bytes like padding.  However if the length
    field indicates that there is MORE data than the packet contains,
    it assumes that a byte has been lost and the packet is corrupted.
    
    This works from Ethernet to Ethernet, since the packet is not
    changed in that path.  However, in going via the FDDI you lose
    some header (ie, the length field), and the packet needs to be
    reconstructed on the way back out to another Ethernet.  There's no
    way that an 802.3 violation like this can be tracked across an FDDI.
    
    Please contact the manufacturer of the software that is sending
    out these packets - they need to use a correct Length field.

    Anil
1511.2Is this a well traveled road?AKRON1::SMITHSic Semper Potatum ReclinusMon Oct 03 1994 16:4664
    
    Thanks for the quick response!!!
    
    
>>    The best way to fix this problem is to configure the IPX stations
>>    with "Ethernet v2" encapsulation rather than "raw 802.3".  Most
>>    Novell customers seem to have realized this through experience.
  
    I think that this customer realize this now, too.
    I may have to recommend a 802.3 to Ethernet_II novell "router" to
    fix some of these issues....or use the PATHworks Novell client
    which function correctly across the FDDI.
      
>>    If you must use raw 802.3, you need to enable the "raw 802.3 IPX"
>>    mode on both DECbridges.  You can do this with HUBwatch, from the
>>    bridge configuration screen.
    
    We've tried both settings for Raw IPX...no change.... I believe this
    only has purpose if either the client or the server is on FDDI.
    
    
>>    Having said that, I'm not sure that it will work even if you do so.
>>    The packets that you've shown are even more illegal than the
>>    usual Novell raw 802.3 stuff.  The 802.3 Length field says that
>>    there are more bytes than there actually are in the frame.  When
>>    translating the packet in order to transmit it on the FDDI, the bridge
>>    has to get rid of the length field (since the FDDI packet format
>>    is different).  However it uses the length field to determine the
>>    number of bytes it must transmit.  Now the bridge doesn't mind if
>>    the length field is LESS than the number of actual bytes in the
>>    packet, it treats the extra bytes like padding.  However if the length
>>    field indicates that there is MORE data than the packet contains,
>>    it assumes that a byte has been lost and the packet is corrupted.
    
    Does this mean that this frame would never make it to FDDI from the
    "client side" bridge or that it would be discarded by the "server side" 
    bridge?
    
    
    
>>    This works from Ethernet to Ethernet, since the packet is not
>>    changed in that path.  However, in going via the FDDI you lose
>>    some header (ie, the length field), and the packet needs to be
>>    reconstructed on the way back out to another Ethernet.  There's no
>>    way that an 802.3 violation like this can be tracked across an FDDI.
    
    See above question.
    
>>    Please contact the manufacturer of the software that is sending
>>    out these packets - they need to use a correct Length field.

    I will recommend this....  
    
>>    Anil
    
    Could you please identify youself (what group you work for?)?  
    You seem to have gone down this road before.
    
    Thanks again!
    
    Jeff Smith
    
    
    
1511.3Related notes in other conferencesNPSS::MDLYONSMichael D. Lyons - Young enough and dumb enoughMon Oct 03 1994 18:2310
        This road has been arrived at through a variety of routes:
    
    See also:
    
    RANGER::NETWARE notes conference 725.*, 1400.*
    NOTED::DECNIS notes conference 1378.*, 1488.*, 1801.*
    UPSAR::FDDI notes conference 881.*
    SCHOOL::GIGASWITCH notes conference 269.*
    
    ...if you're bored
1511.4NETCAD::ANILMon Oct 03 1994 21:3315
>    Does this mean that this frame would never make it to FDDI from the
>    "client side" bridge or that it would be discarded by the "server side" 
>    bridge?
    
    The former (the packet would be discarded on the Enet->FDDI path
    because it is a corrupted packet).
    
>    Could you please identify youself (what group you work for?)?  
>    You seem to have gone down this road before.
    
    Hub Engineering; Technical leader for the product under discussion.
    Yes, I have been down the raw 802 IPX road before, however this is the
    first I have heard of this particular problem.
    
    Anil
1511.5whats it good for?BSS::AMBERMark Amber, CNS-West (DTN)592-4645Tue Oct 04 1994 17:426
    Not to go too far off the beaten path, but I'm curious...
    
    Over and over it seems customers have problems when then attempt to
    use IPX RAW 802 mode.  The answer most often given is "turn it off".
    So I keep wondering, what good is it?  Why do people even want to
    try it?  It seems to break a lot of rules among other things.
1511.6CSC32::B_GOODWINMCI Mission Critical Support TeamTue Oct 04 1994 19:4511
Mark,

It really started some years ago when novell broke the 802.3 spec and didn't
adhear to it. Now there are some legacy networks out there that are still
running this type of format. When you got hundreds of pc's out there running
this, it makes it hard to convert to ethernet format or 802.3 format. Most new
customers running novell are running ethernet/802.3 format. Novell no longer
suggests running the raw 802.3 because of the problems it causes mixing the
network with other protocols.

Brad
1511.7summaryIDEFIX::COWBURNLegacy Networks ConsultantFri Mar 31 1995 08:51168
I have written a summary of this subject for a customer, and as this appears
to be the latest related note, I thought I'd put the summary here.

If anyone has the time to verify this, I'd appreciate it.

Thanks,
	Ian


Summary
-------


    DECbridge 500/600
    DECswitch EF
    DECNIS

       will switch any protocols concurrently with IPX using
       		Ethernet II
       		IEEE 802.2 SAP
       		IEEE 802.2 SNAP

       when IPX is using IEEE 802.3 ("raw" IPX):

       the first two bytes of the data are FF-FF (=checksum field, defaults 
       to this as checksum not enabled). This corresponds to an IEEE 802.2 
       frame with DSAP=SSAP=FF (=Global LSAP).
       The result of this is that the frames can be switched between 
       Ethernets via the FDDI (being converted to/from FDDI SNAP), allowing 
       stations on the Ethernets to communicate, but not allowing a station 
       on the Ethernet to communicate with one on the FDDI.

       The DECbridge 500/600 and DECswitch EF have a setting to enable "raw 
       IEEE 802.3" processing. When this is enabled, the raw IPX frame is 
       converted to a valid FDDI SNAP IPX frame (and vice-versa) allowing 
       communication between IPX stations both on the Ethernet and on FDDI.
       However, as this mechanism converts valid FDDI SNAP IPX frames to raw 
       802.3 IPX frames, it is not possible to use simultaneously raw IPX 
       802.3 and IPX 802.2 SNAP encapsulation on the Ethernets - the stations 
       using IPX 802.2 SNAP encapsulation on the Ethernets will not be able 
       to communicate across the FDDI.

    Novell and Digital recommend that IEEE 802.3 ("raw" IPX) is NOT used.


Conversions:

    Ethernet II	     IEEE 802.2 SAP	IEEE 802.2 SNAP
        |	     	|			|	  
    FDDI 802.2 SNAP  FDDI 802.2 SAP	FDDI 802.2 SNAP 
        |	     	|			|
    Ethernet II	     IEEE 802.2 SAP	Ethernet II


    IEEE 802.3	     
        |
    FDDI 802.2 SNAP (DSAP=SSAP=FF)
        |
    IEEE 802.3 [~ IEEE 802.2 SNAP (DSAP=SSAP=FF)]


    with "raw IEEE 802.3" enabled on the DECbridge/DECswitch

    IEEE 802.3	     
        |
    FDDI 802.2 SNAP (DSAP=SSAP=E0)
        |
    IEEE 802.3



Details
-------

IPX:
    Possible frame formats on Ethernet

       Ethernet II
       IEEE 802.2 SAP
       IEEE 802.2 SNAP
       IEEE 802.3 ("raw" IPX)


Conversions to/from FDDI:

    Ethernet II

           Ethernet II
           	 	DA  SA  type  data  crc
           	 		=8137
           	 |
           	 V
           FDDI SNAP SAP with CTRL=UI(03) and OUI=000000
           	    FC  DA  SA  DSAP  SSAP  CTRL  OUI     Type  data crc
           	 		=AA   =AA   =03   =000000 =8137
           	 |
           	 V
           Ethernet II
           	 	DA  SA  type  data  crc
           	 		=8137
           
    IEEE 802.2 SAP

           IEEE 802.2
           		DA  SA Len  DSAP  SSAP  CTRL  data  crc
           			    =E0   =E0
           	|
           	V
           FDDI IEEE 802.2 LLC
                    FC  DA  SA  DSAP  SSAP  CTRL  data crc
           			=E0   =E0
           	|
           	V
           IEEE 802.2
           		DA  SA Len  DSAP  SSAP  CTRL  data  crc
           			    =E0   =E0
           
    IEEE 802.2 SNAP OUI=000000

           IEEE 802.2
           		DA  SA Len  DSAP  SSAP  CTRL  OUI     type  data  crc
           			    =AA   =AA         =000000 =8137 
           	|
           	V
           FDDI SNAP SAP with CTRL=UI(03) and OUI=000000
                    FC  DA  SA  DSAP  SSAP  CTRL  OUI     type  data crc
           			=AA   =AA         =000000 =8137
           	|
           	V
           Ethernet II
           		DA  SA  type  data  crc
           			=8137
           
           
    IEEE 802.3 "raw" IPX, with "raw IEEE 802.3" disabled

           IEEE 802.3
           		DA  SA Len  data  crc
           			    =FFFF...
           	|
           	V
           FDDI IEEE 802.2 LLC
                    FC  DA  SA  DSAP  SSAP  CTRL  data crc
           			=FF   =FF
           	|
           	V
           IEEE 802.3
           		DA  SA Len  data  crc
           			    =FFFF...
           
           
    IEEE 802.3 "raw" IPX, with "raw IEEE 802.3" enabled

           IEEE 802.3
           		DA  SA Len  data  crc
           			    =FFFF...
           	|
           	V
           FDDI SNAP SAP with CTRL=UI(03) and OUI=000000
                    FC  DA  SA  DSAP  SSAP  CTRL  OUI     type  data crc
           			=AA   =AA         =000000 =8137 =FFFF...
           	|
           	V
           IEEE 802.3
           		DA  SA Len  data  crc
           			    =FFFF...