Morning,
We currently have two L3 EtherChannel configured between our dual chassis core router and two border firewalls. I now have a reason to tag a VLAN across this link so require it to be converted into a L2 EtherChannel.
Please see below for the current config. (Public IP addresses removed from config)
interface Port-channel6
description FW-DC2 trunk
no switchport
ip address 255.255.255.252
ip access-group 102 out
ipv6 address /126
ipv6 enable
ipv6 ospf 100 area 0.0.0.0
!
interface TenGigabitEthernet1/1/26
description FW-DC2 #1
no switchport
no ip address
channel-group 6 mode active
!
interface TenGigabitEthernet2/1/26
description FW-DC2 #2
no switchport
no ip address
channel-group 6 mode active
!
I tried the following config yesterday on our backup firewall but was unable to send traffic to it. (I'm trying not to have to change config on the firewall itself)
vlan 3101
name FW-DC2
!
interface Vlan3101
description FW-DC2 trunk
ip address 255.255.255.252
ip access-group 102 out
ip ospf cost 2
ipv6 address /126
ipv6 enable
ipv6 ospf 100 area 0.0.0.0
ipv6 ospf cost 2
!
interface Port-channel6
description FW-DC2 trunk
switchport
switchport trunk native vlan 3101
switchport mode trunk
switchport trunk allowed vlan 3101
!
interface TenGigabitEthernet1/1/26
description FW-DC2 #2
switchport
switchport trunk native vlan 3101
switchport mode trunk
switchport trunk allowed vlan 3101
channel-group 6 mode active
!
interface TenGigabitEthernet2/1/26
description FW-DC2 #2
switchport
switchport trunk native vlan 3101
switchport mode trunk
switchport trunk allowed vlan 3101
channel-group 6 mode active
!
Am I missing something or should this have worked? Any suggestions or corrections would be greatly appreciated.
Thanks,
William
