Hi All,
We're using StackWise Virtual 9500 switch in a new deployment. Two firewall was running HA and two 9500 stacked together.
All my VLANs gateway are in my firewall and 9500 was only layer2 mode.
We’ve created VLAN interfaces in firewall and trunk port-channel between Firewall and C9500.
The issue is when we tried to ping from user to VLAN Gateways, some VLANs show many packet drops.
We are connecting the Firewall and switch using Fiber cable. When using fiber cable between Firewall and Switch, when we tried to ping the VLANs gateway , random VLAN show many packet drops.Not all VLANs show packet drops. If we have 5 VLANS , 3 VLANS working normal but at lease 2 random VLANs got packet drops.
We’ve tried changing another Fiber Cable, SFP transceiver, change load-balancing method of the port-channel, reboot the switch, reboot the firewall ,changing switch interface,check spanning tree, remove the link from port-channel and testing with only one link ,changing speed, duplex, but still no luck.
And after a long time troubleshooting, we also tried with RJ45/UTP Copper Cable and it’s working normal. As long as we use Copper cable, all VLANs working fine but as soon as we changed back to Fiber cable, random VLANs got packet drops.
We also tested with our old switch 3850 stacked and it's working fine for both Fiber and UTP cable.
Firewall side has only 1G fiber ports , so we are using 1G SFP to connect between Firewall and C9500 although it can support up to 25G.
Now we are planning to change the firmware version of the switch.Anyting else I can do or check on this , please suggest me .Very appreciate for any help.
Cisco IOS XE Software, Version 17.06.03
Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.6.3, RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Wed 30-Mar-22 23:09 by mcpre
ROM: IOS-XE ROMMON
BOOTLDR: System Bootstrap, Version 17.6.1r, RELEASE SOFTWARE (P)
stackwise-virtual
domain 10
no ip routing
!
license boot level network-advantage addon dna-advantage
!
redundancy
mode sso
main-cpu
standby console enable
!
transceiver type all
interface TwentyFiveGigE1/0/45
!
interface TwentyFiveGigE1/0/46
stackwise-virtual dual-active-detection
interface TwentyFiveGigE1/0/47
stackwise-virtual link 1
!
interface TwentyFiveGigE1/0/48
stackwise-virtual link 1
interface TwentyFiveGigE2/0/46
stackwise-virtual dual-active-detection
!
interface TwentyFiveGigE2/0/47
stackwise-virtual link 1
!
interface TwentyFiveGigE2/0/48
stackwise-virtual link 1
