Description

The message, ‘vlan id out of oif's range’ may occur in a VPLS scenario when an interface is not configured for VLAN 10 and prevent packets from being sent out of that interface. This behavior is expected. An example and explanation for this behavior is provided in this article.

Symptoms

In a VPLS scenario, the PFE (packet forwarding engine) returns the following error counter:

vlan id out of oif's range

Solution

Example VPLS configuration of the PE (provider edge) router: 

root@PE1> show configuration interfaces
ge-0/0/1 {
    hierarchical-scheduler maximum-hierarchy-levels 2;
    flexible-vlan-tagging;
    encapsulation flexible-ethernet-services;
    unit 9 {
        encapsulation vlan-vpls;
        vlan-id 9;
    }
    unit 10 {
        encapsulation vlan-vpls;
        vlan-id 10;
    }
}

root@PE1> show configuration routing-instances
BNG {
    instance-type vpls;
    vlan-id all;
    interface ge-0/0/1.9;
    interface ge-0/0/1.10;
    no-local-switching;
    route-distinguisher 1.1.1.1:100;
    vrf-target target:65000:100;
    protocols {
        vpls {
            site-range 9999;
            label-block-size 2;
            mac-table-size {
                32000;
            }
            interface-mac-limit {
                4096;
            }
            no-tunnel-services;
            site JTAC {
                site-identifier 10;
                multi-homing;
                site-preference primary;
                interface ge-0/0/1.9;
                interface ge-0/0/1.10;
            }
            mac-flush;
        }
    }
}

The VPLS mac-table has the ability to learn from the CPE facing ge-0/0/1.9 interface: 

root@PE1> show vpls mac-table

MAC flags       (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
    O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : BNG_Backhaul_RWDA_01
 Bridging domain : __BNG_Backhaul_RWDA_01__, VLAN : 9
   MAC                 MAC      Logical          NH     RTR
   addresssss          flags    interface        Index  ID
   00:00:5e:00:01:01   D        lsi.1048576
   56:68:a6:6b:35:c9   D        ge-0/0/1.9

root@PE1>

The mac-table is clear and the CPE is shut down so it does not respond to remote ping requests. Notice the error counter numbers: 

root@PE1> show vpls mac-table

root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range         DISC(32)          3583     204074

The ping from remote CPE is initiated. Since the MAC is not in table, PE should treat this unknown unicast and flood to all the interfaces in the site.

Interface ge-0/0/1.10 is not configured for VLAN 10, hence the packet cannot be sent out of that interface. This causes the error counter ‘vlan id out of oif's range’ to increase: 

root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range         DISC(32)          3655     211418

The CPE interface is open and can respond to pings. Once the MAC address is learnt by VPLS domain, flooding is not needed and the error counter stops: 

root@PE1> show vpls mac-table

MAC flags       (S -static MAC, D -dynamic MAC, L -locally learned, C -Control MAC
    O -OVSDB MAC, SE -Statistics enabled, NM -Non configured MAC, R -Remote PE MAC)

Routing instance : BNG_Backhaul_RWDA_01
 Bridging domain : __BNG_Backhaul_RWDA_01__, VLAN : 9
   MAC                 MAC      Logical          NH     RTR
   addresssss          flags    interface        Index  ID
   00:00:5e:00:01:01   D        lsi.1048576
   56:68:a6:6b:35:c9   D        ge-0/0/1.9

root@PE1> show pfe statistics exceptions fpc 0 |match "vlan id out of oif's range"
vlan id out of oif's range         DISC(32)          3655     211418