3560 Switch Mac Add Flapping facing NE40(huawei Router)

joshualuna12 · ‎01-09-2014

Hi Guys,

Logs seen on switch:

FLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:26:37: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:27:06: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 252 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:28:06: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:28:37: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:29:10: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:31:50: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:32:26: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:32:39: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:33:28: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:34:34: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:35:38: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:36:35: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:37:39: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:38:06: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:38:38: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:39:00: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:40:40: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:41:15: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:41:38: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:42:45: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:43:27: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:43:40: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:43:59: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:46:01: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:46:57: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:47:29: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/5, changed state to down

Jan 7 17:47:30: %LINK-3-UPDOWN: Interface GigabitEthernet0/5, changed state to down

Jan 7 17:48:03: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:48:44: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/25 and port Gi0/26

Jan 7 17:49:02: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:49:46: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:50:14: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Jan 7 17:50:49: %SW_MATM-4-MACFLAP_NOTIF: Host 707b.e8b9.5a36 in vlan 250 is flapping between port Gi0/26 and port Gi0/25

Switch Configuration:

!

interface GigabitEthernet0/25

switchport trunk encapsulation dot1q

switchport trunk allowed vlan 250-252

switchport mode trunk

speed nonegotiate

!

interface GigabitEthernet0/26

switchport trunk encapsulation dot1q

switchport trunk allowed vlan 250-252

switchport mode trunk

speed nonegotiate

!

--------------

I believe that NE40(huawei router) is configured with VRRP and Layer 3 Port Channel,

so I tried to configure port channel(but only Layer 2..because of not capable of sub interface port chan/ needed because we have VLANS with IPs) for Gi0/25 & Gi0/26... the flapping is gone but some error appeared in NE40 router.See below.

Jan 3 2014 15:36:26+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[0]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.250, VrId=7, InetType=IPV4)
Jan 3 2014 15:36:26+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[1]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Eth-Trunk11.250, VrId=7, InetType=IPV4)
Jan 3 2014 15:36:25+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[2]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.251, VrId=8, InetType=IPV4)
Jan 3 2014 15:36:25+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[3]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Eth-Trunk11.251, VrId=8, InetType=IPV4)
Jan 3 2014 15:35:24+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[4]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.252, VrId=9, InetType=IPV4)

FYI. Ne40 is a third party device.

Is it not possible to have Layer 2 and layer 3 portchannel connectivity? if not, based on above info what do you recommend?

Can you please help me guys. Thanks

Leo Laohoo · ‎01-09-2014

Is it not possible to have Layer 2 and layer 3 portchannel connectivity? if not, based on above info what do you recommend?

I'd by asking you WHY are the two ports not in an etherchannel.

joshualuna12 · ‎01-09-2014

The switch is not capable of port channel subinterface, they want that I think because of routing config in router side(huawei NE40 that they needed to route in specific port channel sub interface).

What do you thing my friend?

Leo Laohoo · ‎01-09-2014

The switch is not capable of port channel subinterface

Who said that? All Cisco switches are capable of port channel.

joshualuna12 · ‎01-09-2014

Yes I can do port channel, I mean the command for example

config t

int port-channel 11.250

is not working

See below Thread https://supportforums.cisco.com/thread/2070565

Leo Laohoo · ‎01-09-2014

int port-channel 11.250

Errrr ... You are doing SUB-INTERFACE on a portchannel. Why not do portchannel?

joshualuna12 · ‎01-09-2014

When I do portchannel, VRRP error in router stated to appear . See below.

Jan 3 2014 15:36:26+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[0]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.250, VrId=7, InetType=IPV4)
Jan 3 2014 15:36:26+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[1]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Eth-Trunk11.250, VrId=7, InetType=IPV4)
Jan 3 2014 15:36:25+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[2]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.251, VrId=8, InetType=IPV4)
Jan 3 2014 15:36:25+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[3]:Virtual Router state BACKUP changed to MASTER, because of protocol timer expired. (Interface=Eth-Trunk11.251, VrId=8, InetType=IPV4)
Jan 3 2014 15:35:24+08:00 CNR-CS-RTR-002 %%01VRRP/4/STATEWARNINGEXTEND(l)[4]:Virtual Router state MASTER changed to BACKUP, because of priority calculation. (Interface=Eth-Trunk11.252, VrId=9, InetType=IPV4)

The router Guys said that they configured it with L3 portchannel

devils_advocate · ‎01-09-2014

joshualuna12 wrote:

The router Guys said that they configured it with L3 portchannel

This could be why, a Layer 3 port channel needs an IP address in the same subnet as the Router end.

You were/are using a L2 Trunk port.

Is the router acting as the default gateway for any of your Vlans?

If so, a Layer 3 port channel will create an issue for you.

If not, create a L3 port channel and set the Cisco switch to have a default route pointing to the router as its next hop.

Leo Laohoo · ‎01-09-2014

The router Guys said that they configured it with L3 portchannel

Layer 3 etherchannel. Right.

Go here: Configuring Layer 3 EtherChannels

joshualuna12 · ‎01-09-2014

They are using subinterface portchannel. Can you verify their confgi ? See NE40 config below

Leo Laohoo · ‎01-09-2014

I can't comment on Huawei because I have never used one.

Can you try to get the Huawei router to do just Layer 2 etherchannel and observe?

devils_advocate · ‎01-09-2014

The switch is recieving frames with the same source MAC address from both trunk links.

Think about the switches CAM table, it needs an entry for MAC Address 1111.2222.3333 so it knows which port to forward frames out of destined for this address. Currently it is seeing frames from ports 25 and 26 with this source MAC so what does it add to its CAM table??

This would be fine if they were part of a port channel but not when they are standard L2 trunks.

There is a misconfiguration somewhere. Can you advise on the config on the router side??

joshualuna12 · ‎01-09-2014

See below for Huawei router config

#

interface Eth-Trunk11

description For ITP Link

mode lacp-static

#

interface Eth-Trunk11.250

vlan-type dot1q 250

description For ITP Signaling

shutdown

ip binding vpn-instance SIGTRAN

ip address

vrrp vrid 7 virtual-ip

vrrp vrid 7 priority 140

statistic enable

#

interface Eth-Trunk11.251

vlan-type dot1q 251

description For ITP Application

shutdown

ip binding vpn-instance BE

ip address

vrrp vrid 8 virtual-ip

vrrp vrid 8 priority 140

statistic enable

#

interface Eth-Trunk11.252

vlan-type dot1q 252

description For ITP OM

shutdown

ip binding vpn-instance OM

ip address

vrrp vrid 9 virtual-ip

vrrp vrid 9 priority 140

statistic enable

#

interface GigabitEthernet5/1/4

description To ITP L3 Switch2

undo shutdown

eth-trunk 11

#

interface GigabitEthernet5/1/5

description To ITP L3 Switch2

undo shutdown

eth-trunk 11

#

devils_advocate · ‎01-09-2014

joshualuna12 wrote:

#

interface Eth-Trunk11

description For ITP Link

mode lacp-static

#

As this is not a Cisco Router, they are using LACP for thier port-channel. I know nothing about Huawei but I suspect you need to create a L3 LACP Port channel

#interface Po1
no switchport

#ip address

#interface GigabitEthernet0/25
#no swichport

#no ip address

#channel-group 1 mode active

#interface GigabitEthernet0/26

#no swichport

#no ip address

#channel-group 1 mode active

joshualuna12 · ‎01-09-2014

As per IP core, that's their standard //to have layer 3 portchannel-subinterface

BTW thanks guys