CE交换机部署M-LAG ID不匹配导致端口down

发布时间:  2016-11-04 浏览次数:  105 下载次数:  0
问题描述


CE12808上面部署M-LAG,在查看M-LAG状态时,发现一组M-LAG状态为up,另外一组全部为down

[~CE12808-01]display dfs-group 1 node 1 m-lag brief

* - Local node

M-Lag ID     Interface      Port State    Status

       1     Eth-Trunk 0    Up            active(*)-inactive

       2     Eth-Trunk 1    Up            active(*)-inactive

       3     Eth-Trunk 2    Up            active(*)-inactive

       4     Eth-Trunk 3    Up            active(*)-inactive

[~CE12808-01]display dfs-group 1 node 2 m-lag brief

* - Local node

M-Lag ID     Interface      Port State    Status

       1     Eth-Trunk 0    Down          inactive-active(*)

       2     Eth-Trunk 1    Down          inactive-active(*)

       3     Eth-Trunk 2    Down          inactive-active(*)

       4     Eth-Trunk 3    Down          inactive-active(*)


1.       逻辑拓扑,图中上面和下面防火墙物理上为同一台防火墙,只是端口不一致。


2.       实施说明,

CE12808-1CE12808-2上部署M-LAG和端口进行绑定,如下表所示

 

设备

M-LAG ID

端口号

Eth-trunk

CE12808-1

1

6/0/0

0

2

7/0/0

1

3

6/0/1

2

4

7/0/1

3

CE12808-2

1

6/0/0

0

2

7/0/0

1

3

6/0/1

2

4

7/0/1

3

配置如下所示,

CE12808-1

#

interface Eth-Trunk0

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 33

port trunk pvid vlan 33

mode lacp-static

dfs-group 1 m-lag 1

#

interface Eth-Trunk1

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 33

port trunk pvid vlan 33

mode lacp-static

dfs-group 1 m-lag 2

#

interface Eth-Trunk2

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 41

port trunk pvid vlan 41

mode lacp-static

dfs-group 1 m-lag 3

#

interface Eth-Trunk3

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 41

port trunk pvid vlan 41

mode lacp-static

dfs-group 1 m-lag 4

 

#

interface 10GE6/0/0

eth-trunk 0

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/1

eth-trunk 2

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/2

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/3

eth-trunk 6

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/4

device transceiver 10GBASE-FIBER

 

CE12808-2

#

interface Eth-Trunk0

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 33

port trunk pvid vlan 33

mode lacp-static

dfs-group 1 m-lag 1

#

interface Eth-Trunk1

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 33

port trunk pvid vlan 33

mode lacp-static

dfs-group 1 m-lag 2

#

interface Eth-Trunk2

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 41

port trunk pvid vlan 41

mode lacp-static

dfs-group 1 m-lag 3

#

interface Eth-Trunk3

port link-type trunk

undo port trunk allow-pass vlan 1

port trunk allow-pass vlan 41

port trunk pvid vlan 41

mode lacp-static

dfs-group 1 m-lag 4

 

#

interface 10GE6/0/0

eth-trunk 0

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/1

eth-trunk 2

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/2

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/3

eth-trunk 6

device transceiver 10GBASE-FIBER

#

interface 10GE6/0/4

device transceiver 10GBASE-FIBER

处理过程

根据上面实施方案,可以看到,从防火墙的角度来看,同一个防火墙的对应的CE交换机的M-LAG ID不一致,如下表所示,

设备

端口

对端设备

对端端口

M-LAG ID

FW-1

2/0/0

CE12808-2 VS0

7/0/0

2

2/1/0

CE12808-1 VS0

6/0/0

1

2/0/1

CE12808-2 VS0

7/0/1

4

2/1/1

CE12808-1 VS0

6/0/1

3

 

设备

端口

对端设备

对端端口

M-LAG ID

FW-2

2/0/0

CE12808-1 VS0

7/0/0

2

2/1/0

CE12808-2 VS0

6/0/0

1

2/0/1

CE12808-1 VS0

7/0/1

4

2/1/1

CE12808-2 VS0

6/0/1

3

根因

同一个防火墙的对应的CE交换机的M-LAG ID不一致

解决方案

将两台CE12808M-LAG标签进行调整,使之与防火墙对应的CE设备之间链路M-LAG ID保持一致,如下

设备

端口

对端设备

对端端口

M-LAG ID

FW-1

2/0/0

CE12808-2 VS0

7/0/0

1

2/1/0

CE12808-1 VS0

6/0/0

1

2/0/1

CE12808-2 VS0

7/0/1

3

2/1/1

CE12808-1 VS0

6/0/1

3

 

设备

端口

对端设备

对端端口

M-LAG ID

FW-2

2/0/0

CE12808-1 VS0

7/0/0

2

2/1/0

CE12808-2 VS0

6/0/0

2

2/0/1

CE12808-1 VS0

7/0/1

4

2/1/1

CE12808-2 VS0

6/0/1

4

调整完后,发现问题解决,

[~CE12808-01]display dfs-group 1 node 1 m-lag brief

* - Local node

M-Lag ID     Interface      Port State    Status

       1     Eth-Trunk 0    Up            active(*)-inactive

       2     Eth-Trunk 1    Up            active(*)-inactive

       3     Eth-Trunk 2    Up            active(*)-inactive

       4     Eth-Trunk 3    Up            active(*)-inactive

[~CE12808-01]display dfs-group 1 node 2 m-lag brief

* - Local node

M-Lag ID     Interface      Port State    Status

       1     Eth-Trunk 0    Up          inactive-active(*)

       2     Eth-Trunk 1    Up          inactive-active(*)

       3     Eth-Trunk 2    Up          inactive-active(*)

       4     Eth-Trunk 3    Up          inactive-active(*)

建议与总结
在规划M-LAG时,需要考虑双归到同一台设备的两条线路对应的M-LAG ID要保持一致。

END