取消
显示结果 
搜索替代 
您的意思是: 
cancel
12145
查看次数
0
有帮助
15
回复

堆叠交换机和防火墙做port-channel出错

seasonli72658
Spotlight
Spotlight
本帖最后由 seasonli72658 于 2019-10-28 10:13 编辑
链路聚合失败谁帮忙分析一下是哪里出了问题谢谢:

Port state = Up Cnt-bndl Suspend Not-in-Bndl
Channel group = 7 Mode = On Gcchange = -
Port-channel = null GC = - Pseudo port-channel = Po7
Port index = 0 Load = 0x00 Protocol = -
Age of the port in the current state: 0d:00h:18m:26s
Probable reason: trunk mode of Gi1/0/10 is dynamic, Po7 is access
Port: Gi2/0/10
------------
Port state = Up Cnt-bndl Suspend Not-in-Bndl
Channel group = 7 Mode = On Gcchange = -
Port-channel = null GC = - Pseudo port-channel = Po7
Port index = 0 Load = 0x00 Protocol = -
Age of the port in the current state: 0d:00h:06m:41s
Probable reason: trunk mode of Gi2/0/10 is dynamic, Po7 is access
Port-channels in the group:
---------------------------
Port-channel: Po7
------------
Age of the Port-channel = 0d:00h:22m:19s
Logical slot/port = 12/7 Number of ports = 0
GC = 0x00000000 HotStandBy port = null
Port state = Port-channel Ag-Not-Inuse
Protocol = -
Port security = Disabled
端口配置:
SW3650堆叠核心交换机

interface Port-channel2
switchport access vlan 209
switchport mode access
spanning-tree portfast---这个命令配置不上去
应用到下面两个端口上interface port-channel2

interface GigabitEthernet1/0/10
channel-group 2 mode on
interface GigabitEthernet2/0/10
channel-group 2 mode on
ASA5515防火墙

interface Port-channel2
nameif inside
security-level 100
ip address 10.99.209.1 255.255.255.248
应用到这两个端口下interface port-channel2

interface GigabitEthernet0/1
channel-group 2 mode on
interface GigabitEthernet0/4
channel-group 2 mode on

interface Vlan209
ip address 10.99.209.4 255.255.255.248

配置上去ping 10.99.209.4是通的,但是ping10.99.209.1就不通
这两个channel配置上去交换机的灯由绿灯变为黄灯了这四个端口
15 条回复15

seasonli72658
Spotlight
Spotlight
YilinChen 发表于 2019-10-30 15:04
贴了图,可还是思维描述混乱,是2台ASA 都有和 3650 建立链路聚合的需求,还是只其中一台ASA有这样的需求? ...

ASA5515-SH-new(config)# interface Port-channel1
ASA5515-SH-new(config-if)# nameif inside
ERROR: nameif not allowed on empty etherchannel interface.
ASA5515-SH-new(config-if)# security-level 100
ASA5515-SH-new(config-if)# ip address 10.99.201.1 255.255.255.248
ASA5515-SH-new(config-if)# policy-route route-map rmap-to-Liantong
ASA5515-SH-new(config-if)
能帮我看一下为什么我在channel下面配置nameif inside会报错吗
快捷链接