USG5500防火墙跟S5300静态lacp对接接口不up

发布时间:  2014-01-03 浏览次数:  272 下载次数:  0
问题描述
USG5500 V3R1侧查看:
[USG5500]display interface brief                  //Eth-trunk 2物理和协议都down                                                                                             
11:07:27  2014/01/03                                                                                                               
PHY: Physical                                                                                                                      
*down: administratively down                                                                                                       
^down: standby down                                                                                                                
(s): spoofing                                                                                                                      
InUti/OutUti: input utility/output utility                                                                                         
Interface                   PHY   Protocol InUti OutUti   inErrors  outErrors                                                      
Cellular0/1/0               down  up(s)       0%     0%          0          0                                                      
Eth-Trunk2                  down  down     0.01%  0.01%          0          0                                                      
  GigabitEthernet0/0/2      up    up       0.01%  0.01%          0          0                                                      
  GigabitEthernet0/0/3      up    up       0.01%  0.01%          0          0  

设备配置
S5300:
#                                                                                                                                 
interface Eth-Trunk2                                                                                                           
mode lacp-static
#                                                                                                                                  
interface GigabitEthernet0/0/21

  eth-trunk 2

#                                                                                                                                
interface GigabitEthernet0/0/33                                                                                                   
eth-trunk 2                                                                                                                      
#

USG5500:
#                                                                                                                                  
interface Eth-Trunk2                                                                                                               
alias Eth-Trunk2                                                                                                                  
ip address 10.79.69.81 255.255.255.240                                                                                            
mode lacp-static                                                                                                                 
#                                                                                                                                  
interface GigabitEthernet0/0/2                                                                                                     
undo enable snmp trap updown physic-status                                                                                        
eth-trunk 2                                                                                                                       
#                                                                                                                                  
interface GigabitEthernet0/0/3                                                                                                     
undo enable snmp trap updown physic-status                                                                                        
eth-trunk 2                                                                                                                       
#

告警信息
处理过程
1:USG侧查看eth-trunk的lacp报文有收有发
[USG5500]display  trunk-membership eth-trunk  2    // Eth-trunk 2 down                                                                                
11:08:26  2014/01/03                                                                                                               
Trunk ID                     : 2                                                                                                   
Used Status                  : VALID     
TYPE                         : Ethernet  
Working Mode                 : Load-balance
Working State                : Normal    
Number Of Ports In Trunk     : 2  
Number Of Up Ports In Trunk  : 2
Operate Status               : Down 
Interface GigabitEthernet0/0/2, valid, operate up, weight=1, standby interface NULL 
Interface GigabitEthernet0/0/3, valid, operate up, weight=1, standby interface NULL

[USG5500]display lacp statistics eth-trunk 2       // lacp报文有收有发                                                                              
11:09:24  2014/01/03                                                                                                               
Eth-Trunk2's PDU statistic is   
------------------------------------------------------------------------------                                                   
Port                    LacpRevPdu   LacpSentPdu  MarkerRevPdu MarkerSentPdu                                                      
GigabitEthernet0/0/2    30           31           0            0     
GigabitEthernet0/0/3    30           31           0            0 


2:S5300侧eth-trunk lacp报文只有发没有收
[S5300]display  trunkmembership eth-trunk  2      // Eth-trunk 2 down                                                                               
Trunk ID: 2                   
used status: VALID 
TYPE: ethernet  
Working Mode : Static
Number Of Ports in Trunk = 2  
Number Of UP Ports in Trunk = 0   
operate status: down  
Interface GigabitEthernet0/0/21, valid, operate down, weight=1, 
Interface GigabitEthernet0/0/33, valid, operate down, weight=1, 

[Quidway]display  lacp  statistics eth-trunk  2    // lacp报文只有发没有收                                                                                
Eth-Trunk2's PDU statistic is:                                                                                                    
------------------------------------------------------------------------------                                                    
Port                    LacpRevPdu   LacpSentPdu  MarkerRevPdu MarkerSentPdu                                                      
GigabitEthernet0/0/21   0            157          0            0                            
GigabitEthernet0/0/33   0            157          0            0 


3:解决方案
bpdu enable :  使能BPDU功能只影响BPDU报文的接收,不影响报文发送
#
interface Eth-Trunk2                                                            
mode lacp-static
bpdu enable                                                                    
#

根因
建议与总结
S5300配置静态LACP模式链路聚合时,需要在接口视图下配置bpdu enable命令,使S5300能够接收并处理LACP协议报文;如果不执行该命令,则S5300将LACP协议报文丢弃,Eth-Trunk链路状态为Down。

END