Catalyst 4500 with SUP7L deny power to poe ports

[Ditter]

Hi to all,

i am facing a strange issue with poe devices on a Cat 4500 with SUP7L and the WS-X4648-RJ45V+E  card.

When we disconnect a poe device from the switch and we plug int again , the device gets in power deny state.

And if we plug this device to another port then this additional port also gets in power deny state.

The only way to resolve this is to reboot the card.  Any other command (shut / no shut or power inline never / power inline auto) does not work.  The ports remain in power deny state unless we reboot this specific card or the switch itself.

sw1#sh power inline
Available:3522(w) Used:1595(w) Remaining:1927(w)

Interface Admin Oper Power(Watts) Device Class
From PS To Device
--------- ------ ---------- ---------- ---------- ------------------- -----

Gi2/1 auto off 0.0 0.0 n/a n/a
Gi2/2 auto on 63.2 60.0 Ieee PD 4
Gi2/3 auto on 63.2 60.0 Ieee PD 4
Gi2/4 auto on 63.2 60.0 Ieee PD 0
Gi2/5 auto on 63.2 60.0 Ieee PD 4
Gi2/6 auto on 63.2 60.0 Ieee PD 4
Gi2/7 auto on 63.2 60.0 Ieee PD 4
Gi2/8 auto on 63.2 60.0 Ieee PD 4
Gi2/9 auto power-deny 0.0 0.0 n/a n/a
Gi2/10 auto power-deny 0.0 0.0 n/a n/a
Gi2/11 auto on 63.2 60.0 Ieee PD 4
Gi2/12 auto on 63.2 60.0 Ieee PD 4
Gi2/13 auto on 63.2 60.0 Ieee PD 4

The switch runs  Version 03.07.02.E RELEASE SOFTWARE (fc1)

Chassis Type : WS-C4506-E

Power consumed by backplane : 0 Watts

Mod Ports Card Type Model Serial No.
---+-----+--------------------------------------+------------------+-----------
1 6 Sup 7L-E 10GE (SFP+), 1000BaseX (SFP) WS-X45-SUP7L-E CAT1920LAPS
2 48 10/100/1000BaseT Premium POE E Series WS-X4648-RJ45V+E JAE155102SG
3 48 10/100/1000BaseT (RJ45)V, Cisco/IEEE WS-X4548-GB-RJ45V JAE0947Q9WQ
4 48 10/100/1000BaseT (RJ45)V, Cisco/IEEE WS-X4548-GB-RJ45V JAE0944PNYM
5 48 10/100/1000BaseT (RJ45) WS-X4548-GB-RJ45 JAE13020176
6 48 10/100/1000BaseT (RJ45) WS-X4548-GB-RJ45 JAE130200I6

Any ideas of why this is happening?

Thanks,

Ditter.

[Leo Laohoo]

What does the log say?

IOS-XE version 03.07.02, `nuff said.

[Ditter]

Nothing, the show logging | inc 2/9 or 2/10 does not show anything

thanks.

[Leo Laohoo]

Bounce the port and check the logs.  

Alternatively, post the port config for both ports.  Maybe someone has deliberately disabled port status logging?

[Ditter]

Hi Leo ,

in order to bounce the port i have to send a colleague of mine to do so as the switch in not in our premises.

The port config is as follows:

interface GigabitEthernet2/10
switchport access vlan 9
switchport mode access
switchport port-security maximum 10
switchport port-security aging time 5
switchport port-security aging type inactivity
switchport port-security
ip arp inspection limit rate 50
logging event link-status
no cdp enable
spanning-tree portfast
spanning-tree bpduguard enable
end

All the ports in this specific module have the same config.

Btw, i checked again and now the 2/10 got out of power deny by itself (!) and changed its state to off.

However the 2/9 is still in power deny mode.

Gi2/9 auto power-deny 0.0 0.0 n/a n/a
Gi2/10 auto off 0.0 0.0 n/a n/a

Thanks,

Ditter

[Leo Laohoo]

Enable CDP and remove BPDU Guard.

[Ditter]

Hi Leo,

no meaning to enable cdp on this port as there is no cisco equipment there.  Instead lldp is enabled as it is third party equipment (third party WiFi) .

But i did wht you proposed (both cdp enable as well as remove bpdu guard) but nothing changed.

[Leo Laohoo]

conf t
interface G2/10
 shut
 logging event power-inline-status
 no shut
end

And then check the logs.

[Ditter]

Hi Leo,

used the logging event command you proposed and i was able to catch the following logging message:

ILPOWER-5-ILPOWER_POWER_DENY: Interface Gi2/10: inline power denied. Reason: Requested power(16211) exceeds interface or module capability.

That is strange as this switch comes with 4200W of power supply and we also tried two of them (now it has only one 4200W).

The chassis is the following:

Chassis Type : WS-C4506-E

Power consumed by backplane : 0 Watts

Mod Ports Card Type Model Serial No.
---+-----+--------------------------------------+------------------+-----------
1 6 Sup 7L-E 10GE (SFP+), 1000BaseX (SFP) WS-X45-SUP7L-E CAT1708L175
2 48 10/100/1000BaseT UPOE E Series WS-X4748-UPOE+E CAT1637L45S
3 48 10/100/1000BaseT (RJ45)V, Cisco/IEEE WS-X4548-GB-RJ45V JAE0947Q9UJ
4 48 10/100/1000BaseT (RJ45) WS-X4548-GB-RJ45 JAE130208TM
5 48 10/100/1000BaseT (RJ45) WS-X4548-GB-RJ45 JAE1049GKYS

and the power :

Power Fan Inline
Supply Model No Type Status Sensor Status
------ ---------------- --------- ----------- ------- -------
PS1 PWR-C45-4200ACV AC 4200W good good good
PS1-1 220V good
PS1-2 220V good
PS2 none -- -- -- -- --

Power supplies needed by system : 1
Power supplies currently available : 1

Power Summary Maximum
(in Watts) Used Available
---------------------- ---- ---------
System Power (12V) 638 1360
Inline Power (-50V) 1595 3522
Backplane Power (3.3V) 0 40
---------------------- ---- ---------
Total 2233 (not to exceed Total Maximum Available = 4200)

Power Measurement Inline Power (-50V)
(in Watts) (+/- 50Watts)
------------------ -------------------
PS1 600
------------------ -------------------
Total 600

It seems strange to get this message as there is adequate power.

The AP is an 802.3at so the module 2 which is a UPoE card should not have problem providing power to such AP.

Thanks for your help,

Ditter

[Georg Pauwen]

Hello,

--> When we disconnect a poe device from the switch and we plug int again , the device gets in power deny state.

What device (or devices) are you trying to connect ? Does this occur with devices from the same or from different manufacturers ?

[Ditter]

We are plugging Huawei AirEngine 6760-X1 in a  WS-X4748-UPOE card in a Catalyst 4500 with SUP-7L.

The problem was created when a previously working AP was removed from its port and changed position with another identical one. 

The technicians wanted to check cabling and interchanged two of them in port 2/9 and 2/10 . The result was power deny in 2/9 and off the port 2/10:

Gi2/9 auto power-deny 0.0 0.0 n/a n/a
Gi2/10 auto off 0.0 0.0 n/a n/a

I also send you the lldp output of another huawei AP currently working:

Local Intf: Gi2/13
Chassis id: d44f.67bc.bd70
Port id: MultiGE0/0/0
Port Description: HUAWEI, AP Series, MultiGE0/0/0 Interface
System Name: ap12

System Description:
Huawei AP AirEngine6760-X1
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AirEngine6760-X1 V200R022C00SPC100)
Copyright (C) 2011-2020 Huawei Technologies Co.,Ltd

Time remaining: 116 seconds
System Capabilities: W
Enabled Capabilities: W
Management Addresses:
IP: 10.10.48.204
OID:
0.6.15.43.6.1.4.1.2011.5.25.41.1.2.1.1.1.
Auto Negotiation - not supported
Physical media capabilities - not advertised
Media Attachment Unit type - not advertised
Vlan ID: - not advertised
PoE+ Power-via-MDI TLV:
Power Pair: Spare
Power Class:
Power Device Type: Type 2 PD
Power Source: PSE
Power Priority: low
Power Requested: 51000 mW
Power Allocated: 51000 mW

Total entries displayed: 1

and its power consumption is :

Gi2/12 auto on 63.2 60.0 Ieee PD 4

Thanks.

Ditter

[Ditter]

Found the problem!

UPoE supports only 24 ports @ 60W for a maximux power supply of 1440 W

All the excess APs fall in power deny state. Changed supply to 30W and everything came back to life!

Thank you @Leo Laohoo and @Georg Pauwen for your support.

[Leo Laohoo]

---

@Ditter wrote:
ILPOWER-5-ILPOWER_POWER_DENY: Interface Gi2/10: inline power denied. Reason: Requested power(16211) exceeds interface or module capability.

---

The last sentence was the giveaway.