问题:
交换机S5700与防火墙USG5500无法对接Eth-trunk LACP-static模式,两端正常配置后,端口状态显示错误,Eth-trunk端口无法up 。
问题描述:
交换机侧 GE0/0/5和GE 0/0/6 组成Eth-trunk3 通过LACP-static与防火墙对接;防火墙侧采用端口GE0/0/1和GE0/0/2组成Eth-trunk1通过LACP-static与交换机对接。
交换机侧配置:
interface Eth-Trunk3
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 301 321
mode lacp-static
#
interface GigabitEthernet0/0/5
eth-trunk 3
#
interface GigabitEthernet0/0/6
eth-trunk 3
#
防火墙侧的配置:
interface Eth-Trunk1
alias Eth-Trunk1
mode lacp-static
#interface GigabitEthernet0/0/1
undo enable snmp trap updown physic-status
eth-trunk 1
lacp peer-portno 0002
#
interface GigabitEthernet0/0/2
undo enable snmp trap updown physic-status
eth-trunk 1
lacp peer-portno 0003
#
交换机侧端口状态显示:
单独查看物理端口,其物理状态UP;
[Ser-9306-1]disp interface GigabitEthernet 0/0/5
GigabitEthernet0/0/5 current state : UP
Line protocol current state : UP
Description:
Switch Port, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc99-5ec3
Last physical up time : 2014-02-26 16:29 UTC-08:00
Last physical down time : 2014-02-26 16:29 UTC-08:00
Current system time: 2014-02-26 16:29-08:00
Hardware address is 4c1f-cc99-5ec3
Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
Input: 177196 bytes, 1429 packets
Output: 178064 bytes, 1436 packets
Input:
Unicast: 0 packets, Multicast: 1429 packets
Broadcast: 0 packets
Output:
Unicast: 0 packets, Multicast: 1436 packets
Broadcast: 0 packets
Input bandwidth utilization : 0%
Output bandwidth utilization : 0%
[Ser-9306-1]disp interface GigabitEthernet 0/0/6
GigabitEthernet0/0/6 current state : UP
Line protocol current state : UP
Description:
Switch Port, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc99-5ec3
Last physical up time : 2014-02-26 16:29 UTC-08:00
Last physical down time : 2014-02-26 16:29 UTC-08:00
Current system time: 2014-02-26 16:29-08:00
Hardware address is 4c1f-cc99-5ec3
Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
Input: 177072 bytes, 1428 packets
Output: 177568 bytes, 1432 packets
Input:
Unicast: 0 packets, Multicast: 1428 packets
Broadcast: 0 packets
Output:
Unicast: 0 packets, Multicast: 1432 packets
Broadcast: 0 packets
Input bandwidth utilization : 0%
Output bandwidth utilization : 0%
查看Eth-trunk时,却发现成员端口down,与单独查看的物理接口状态不一致!!!
[Ser-9306-1]display interface Eth-Trunk 3
Eth-Trunk3 current state : DOWN
Line protocol current state : DOWN
Description:
Switch Port, PVID : 1, Hash arithmetic : According to SIP-XOR-DIP,Maximal BW: 4294967.29G, Current BW: 0M, The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc99-5ec3
Current system time: 2014-02-26 16:29-08:00
Input bandwidth utilization : 0%
Output bandwidth utilization : 0%
-----------------------------------------------------
PortName Status Weight
-----------------------------------------------------
GigabitEthernet0/0/5 DOWN 1
GigabitEthernet0/0/6 DOWN 1
-----------------------------------------------------
The Number of Ports in Trunk : 2
The Number of UP Ports in Trunk : 0
[Ser-9306-1]display eth-trunk 3 verbose
Eth-Trunk3's state information is:
Local:
LAG ID: 3 WorkingMode: STATIC
Preempt Delay: Disabled Hash arithmetic: According to SIP-XOR-DIP
System Priority: 32768 System ID: 4c1f-cc99-5ec3
Least Active-linknumber: 1 Max Active-linknumber: 8
Operate status: down Number Of Up Port In Trunk: 0
--------------------------------------------------------------------------------
ActorPortName Status PortType PortPri PortNo PortKey PortState Weight
GigabitEthernet0/0/5 Unselect 1000TG 32768 6 913 10110000 1
GigabitEthernet0/0/6 Unselect 1000TG 32768 7 913 10110000 1
Partner:
--------------------------------------------------------------------------------
ActorPortName SysPri SystemID PortPri PortNo PortKey PortState
GigabitEthernet0/0/5 32768 0000-0009-2700 32768 2 128 10100010
GigabitEthernet0/0/6 32768 0000-0009-2700 32768 3 128 10100010
防火墙侧也是类似的效果:
[FW-1]display interface GigabitEthernet 0/0/1
16:48:03 2014/02/26
GigabitEthernet0/0/1 current state : UP
Line protocol current state : UP
Description : Huawei, SRG Series, GigabitEthernet0/0/1 Interface, Route Port
The Maximum Transmit Unit is 1500 bytes, Hold timer is 10(sec)
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 0000-0009-2701
Eth-Trunk number: 1
QoS max-bandwidth : 1000000 Kbps
Output queue : (Urgent queue : Size/Length/Discards) 0/50/0
Output queue : (Frag queue : Size/Length/Discards) 0/1000/0
Output queue : (Protocol queue : Size/Length/Discards) 0/1000/0
Output queue : (FIFO queue : Size/Length/Discards) 0/256/0
[FW-1]display interface GigabitEthernet 0/0/2
16:48:05 2014/02/26
GigabitEthernet0/0/2 current state : UP
Line protocol current state : UP
Description : Huawei, SRG Series, GigabitEthernet0/0/2 Interface, Route Port
The Maximum Transmit Unit is 1500 bytes, Hold timer is 10(sec)
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 0000-0009-2702
Eth-Trunk number: 1
QoS max-bandwidth : 1000000 Kbps
Output queue : (Urgent queue : Size/Length/Discards) 0/50/0
Output queue : (Frag queue : Size/Length/Discards) 0/1000/0
Output queue : (Protocol queue : Size/Length/Discards) 0/1000/0
Output queue : (FIFO queue : Size/Length/Discards) 0/256/0
[FW-1]display interface Eth-Trunk 1
16:48:11 2014/02/26
Eth-Trunk1 current state : DOWN
Line protocol current state : DOWN
Description : Huawei, SRG Series, Eth-Trunk1 Interface, Route Port
Hash arithmetic : According to IP
The Maximum Transmit Unit is 1500 bytes, Hold timer is 10(sec)
Internet protocol processing : disabled
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 0000-0009-2702
Eth-Trunk number: 1
Physical is ETH_TRUNK
Last 300 seconds input rate 0 bits/s, 0 packets/s
Last 300 seconds output rate 0 bits/s, 0 packets/s
packets input, bytes
packets output, bytes
[FW-1]display eth-trunk 1 verbose
16:48:30 2014/02/26
Eth-Trunk1's state information is:
Local:
LAG ID:1 WorkingMode: STATIC
Preempt Delay: Disable Hash Arichmetic: According to IP
System Priority: 32768 System ID: 0000-0009-2700
Lease active-linknumber: 1 Max active-linknumber: 8
Operate Status: down Number of Up Port in Trunk: 2
----------------------------------------------------
ActorPortName Status PortType PortPri PortNo PortKey PortState Weigth
GigabitEthernet0/0/1 Unselect 1GE 32768 2 128 10100010 1
GigabitEthernet0/0/2 Unselect 1GE 32768 3 128 10100010 1
Partner:
----------------------------------------------------
ActorPortName SysPri SystemID PortPri PortNo PortKey PortState
GigabitEthernet0/0/1 65535 0000-0000-0000 65535 0 0 01000000
GigabitEthernet0/0/2 65535 0000-0000-0000 65535 0 0 01000000