Etherchannel error on 2811 router

[Safar Safarov]

Hello,

I have faced with 2 issues related to Etherchannel.

1. I have two servers connected to Etherswitch on 2811 Router via 3-port Etherchannels. All computers in the network can see both servers, but servers are unable to see each other, i.e. ping, network access, etc. doesn't work. Related config:

GC21RR01#sh inv
NAME: "2811 chassis", DESCR: "2811 chassis"
PID: CISCO2811         , VID: V07 , SN: FCZ14027226

NAME: "ADSL over POTS on Slot 0 SubSlot 0", DESCR: "ADSL over POTS"
PID: HWIC-1ADSL        , VID: V01 , SN: FOC14473PJ6

NAME: "16 Port 10BaseT/100BaseTX EtherSwitch on Slot 1", DESCR: "16 Port 10BaseT/100BaseTX EtherSwitch"
PID: NM-16ESW          , VID: V01 , SN: FOC14445QB8

GC21RR01#sh ver
Cisco IOS Software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version 15.1(1)T,                                                                               RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Mon 22-Mar-10 01:25 by prod_rel_team

ROM: System Bootstrap, Version 12.4(13r)T11, RELEASE SOFTWARE (fc1)

GC21RR01 uptime is 23 hours, 15 minutes
System returned to ROM by reload at 13:48:11 BKU Sun Mar 20 2011
System restarted at 13:49:35 BKU Sun Mar 20 2011
System image file is "flash:c2800nm-advsecurityk9-mz.151-1.T.bin"
Last reload type: Normal Reload

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html you require further assistance please contact us by sending email to
export@cisco.com. 2811 (revision 53.51) with 245760K/16384K bytes of memory.
Processor board ID FCZ14027226
18 FastEthernet interfaces
1 ATM interface
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity enabled.
239K bytes of non-volatile configuration memory.
62720K bytes of ATA CompactFlash (Read/Write)

If

Cisco

License Info:

License UDI:

-------------------------------------------------
Device#   PID                   SN
-------------------------------------------------
*0        CISCO2811             FCZ14027226

Configuration register is 0x2102

GC21RR01#sh etherchannel detail
                Channel-group listing:
                -----------------------

Group: 1
----------
Group state = L2
Ports: 3   Maxports = 8
Port-channels: 1 Max Port-channels = 1
                Ports in the group:
                -------------------
Port: Fa1/0
------------

Port state    = Up Mstr In-Bndl
Channel group = 1           Mode = On/FEC     Gcchange = 0
Port-channel  = Po1         GC   = 0x00010001    Pseudo port-channel = Po1
Port index    = 0
Age of the port in the current state: 00d:23h:15m:05s
Port: Fa1/1
------------

Port state    = Up Mstr In-Bndl
Channel group = 1           Mode = On/FEC     Gcchange = 0
Port-channel  = Po1         GC   = 0x00010001    Pseudo port-channel = Po1
Port index    = 1
Age of the port in the current state: 00d:23h:15m:05s
Port: Fa1/2
------------

Port state    = Up Mstr In-Bndl
Channel group = 1           Mode = On/FEC     Gcchange = 0
Port-channel  = Po1         GC   = 0x00010001    Pseudo port-channel = Po1
Port index    = 2
Age of the port in the current state: 00d:23h:15m:05s
                Port-channels in the group:
                ----------------------

Port-channel: Po1
------------

Age of the Port-channel   = 00d:23h:15m:22s
Logical slot/port   = 8/0           Number of ports = 3
GC                  = 0x00010001      HotStandBy port = null
Port state          = Port-channel Ag-Inuse

Ports in the Port-channel:

Index   Port   EC state
------+------+------------
  0     Fa1/0    on
  1     Fa1/1    on
  2     Fa1/2    on

Time since last port bundled:    00d:23h:15m:05s    Fa1/2

Group: 2
----------
Group state = L2
Ports: 3   Maxports = 8
Port-channels: 1 Max Port-channels = 1
                Ports in the group:
                -------------------
Port: Fa1/4
------------

Port state    = Up Mstr In-Bndl
Channel group = 2           Mode = On/FEC     Gcchange = 0
Port-channel  = Po2         GC   = 0x00020001    Pseudo port-channel = Po2
Port index    = 0
Age of the port in the current state: 00d:23h:15m:05s
Port: Fa1/5
------------

Port state    = Up Mstr In-Bndl
Channel group = 2           Mode = On/FEC     Gcchange = 0
Port-channel  = Po2         GC   = 0x00020001    Pseudo port-channel = Po2
Port index    = 1
Age of the port in the current state: 00d:23h:15m:05s
Port: Fa1/6
------------

Port state    = Up Mstr In-Bndl
Channel group = 2           Mode = On/FEC     Gcchange = 0
Port-channel  = Po2         GC   = 0x00020001    Pseudo port-channel = Po2
Port index    = 2
Age of the port in the current state: 00d:23h:15m:05s
                Port-channels in the group:
                ----------------------

Port-channel: Po2
------------

Age of the Port-channel   = 00d:23h:15m:22s
Logical slot/port   = 8/1           Number of ports = 3
GC                  = 0x00020001      HotStandBy port = null
Port state          = Port-channel Ag-Inuse

Ports in the Port-channel:

Index   Port   EC state
------+------+------------
  0     Fa1/4    on
  1     Fa1/5    on
  2     Fa1/6    on

Time since last port bundled:    00d:23h:15m:05s    Fa1/6

GC21RR01#sh etherchannel summary
Flags:  D - down        P - in port-channel
        I - stand-alone s - suspended
        R - Layer3      S - Layer2
        U - in use
Group Port-channel  Ports
-----+------------+-----------------------------------------------------------
1     Po1(SU)     Fa1/0(P)   Fa1/1(P)   Fa1/2(P)
2     Po2(SU)     Fa1/4(P)   Fa1/5(P)   Fa1/6(P)

2. I cannot show Port-channel information. I was able to do that before router restart:

GC21RR01#sh int po 1
                                          ^
% Invalid input detected at '^' marker.

GC21RR01#sh int po 2
                                          ^
% Invalid input detected at '^' marker.

GC21RR01#sh ip int po 1
                                              ^
% Invalid input detected at '^' marker.

GC21RR01#sh ip int po 2
                                              ^
% Invalid input detected at '^' marker.

Any help is appreciated.

[cadet alain · Accepted solution]

Hi,

You have a L2 etherchannel so sh ip int can't work unless it is a L3 portchannel interface.

Regards.

Alain.

[Safar Safarov]

Got your point. Thank you.

What about inability to ping from server to another? Is there smth related to Etherchannel config? All other computers in the network see both servers, however the servers desn't see each other.

[cadet alain]

Hi,

Your etherchannels seem ok from output of sh ether summary.

The problem with the pings was already there before etherchannelling?

Regards.

Alain.

[Safar Safarov]

No. It start happening after Etherchannelling. The thing is that all computers in the network can access and ping both servers.

[cadet alain]

Hi,

Can you post output of sh span vlanX on both switches, where VlanX is the Vlan where servers and machines are in.

Also put a diagram where all machines appear with their port number on switches.

Regards.

Alain.

[Safar Safarov]

OKay, so there is only one switch which is EtherSwitch and mounted into 2811 Router.

there are 2 VLANs - VLAN101 - for PCs and VLAN102 - for Servers.

Port-channel1 goes to VMWare ESX Server 1 and Port-channel2 goes to VMWare ESX Server 2.

Below is the SPAN output for both VLANs:

GC21RR01#sh span vlan 101

VLAN101 is executing the ieee compatible Spanning Tree protocol
  Bridge Identifier has priority 32768, address 6416.8d33.3e30
  Configured hello time 2, max age 20, forward delay 15
  Current root has priority 32768, address 0021.917e.ca34
  Root port is 49 (FastEthernet1/8), cost of root path is 32339
  Topology change flag not set, detected flag not set
  Number of topology changes 2 last change occurred 03:17:33 ago
          from FastEthernet1/10
  Times:  hold 1, topology change 35, notification 2
          hello 2, max age 20, forward delay 15
  Timers: hello 0, topology change 0, notification 0, aging 300

Port 49 (FastEthernet1/8) of VLAN101 is forwarding
   Port path cost 19, Port priority 128, Port Identifier 128.49.
   Designated root has priority 32768, address 0021.917e.ca34
   Designated bridge has priority 32768, address 0021.917e.ca36
   Designated port id is 128.1, designated path cost 32320
   Timers: message age 2, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 4, received 6229

Port 51 (FastEthernet1/10) of VLAN101 is forwarding
   Port path cost 19, Port priority 128, Port Identifier 128.51.
   Designated root has priority 32768, address 0021.917e.ca34
   Designated bridge has priority 32768, address 6416.8d33.3e30
   Designated port id is 128.51, designated path cost 32339
   Timers: message age 0, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 5942, received 0

Port 52 (FastEthernet1/11) of VLAN101 is forwarding
   Port path cost 100, Port priority 128, Port Identifier 128.52.
   Designated root has priority 32768, address 0021.917e.ca34
   Designated bridge has priority 32768, address 6416.8d33.3e30
   Designated port id is 128.52, designated path cost 32339
   Timers: message age 0, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 6231, received 0

Port 53 (FastEthernet1/12) of VLAN101 is forwarding
   Port path cost 19, Port priority 128, Port Identifier 128.53.
   Designated root has priority 32768, address 0021.917e.ca34
   Designated bridge has priority 32768, address 6416.8d33.3e30
   Designated port id is 128.53, designated path cost 32339
   Timers: message age 0, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 6231, received 0

Port 55 (FastEthernet1/14) of VLAN101 is forwarding
   Port path cost 19, Port priority 128, Port Identifier 128.55.
   Designated root has priority 32768, address 0021.917e.ca34
   Designated bridge has priority 32768, address 6416.8d33.3e30
   Designated port id is 128.55, designated path cost 32339
   Timers: message age 0, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 6231, received 0

GC21RR01#sh span vlan 102

VLAN102 is executing the ieee compatible Spanning Tree protocol
  Bridge Identifier has priority 32768, address 6416.8d33.3e31
  Configured hello time 2, max age 20, forward delay 15
  We are the root of the spanning tree
  Topology change flag not set, detected flag not set
  Number of topology changes 7 last change occurred 01:44:24 ago
          from Port-channel2
  Times:  hold 1, topology change 35, notification 2
          hello 2, max age 20, forward delay 15
  Timers: hello 0, topology change 0, notification 0, aging 300

Port 48 (FastEthernet1/7) of VLAN102 is forwarding
   Port path cost 19, Port priority 128, Port Identifier 128.48.
   Designated root has priority 32768, address 6416.8d33.3e31
   Designated bridge has priority 32768, address 6416.8d33.3e31
   Designated port id is 128.48, designated path cost 0
   Timers: message age 0, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 4491, received 0

Port 321 (Port-channel1) of VLAN102 is forwarding
   Port path cost 9, Port priority 128, Port Identifier 129.65.
   Designated root has priority 32768, address 6416.8d33.3e31
   Designated bridge has priority 32768, address 6416.8d33.3e31
   Designated port id is 129.65, designated path cost 0
   Timers: message age 0, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 6239, received 0

Port 322 (Port-channel2) of VLAN102 is forwarding
   Port path cost 12, Port priority 128, Port Identifier 129.66.
   Designated root has priority 32768, address 6416.8d33.3e31
   Designated bridge has priority 32768, address 6416.8d33.3e31
   Designated port id is 129.66, designated path cost 0
   Timers: message age 0, forward delay 0, hold 0
   Number of transitions to forwarding state: 1
   BPDU: sent 3130, received 0

[cadet alain]

ok,

Can you post output of:

-sh ip route

-sh ip arp

-sh vlan-sw br

-sh int poX switchport

Regards.

Alain.

[Safar Safarov]

GC21RR01#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S*    0.0.0.0/0 is directly connected, Dialer0
      10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks
C        10.21.22.0/30 is directly connected, Tunnel0
L        10.21.22.1/32 is directly connected, Tunnel0
C        10.21.23.0/30 is directly connected, Tunnel1
L        10.21.23.1/32 is directly connected, Tunnel1
C        10.174.21.0/25 is directly connected, Vlan101
L        10.174.21.1/32 is directly connected, Vlan101
C        10.174.21.128/25 is directly connected, Vlan102
L        10.174.21.254/32 is directly connected, Vlan102
S        10.174.22.0/25 [1/0] via 172.16.26.19
S        10.174.22.128/25 [1/0] via 172.16.26.19
S        10.174.23.0/25 [1/0] via 172.16.26.20
S        10.174.23.128/25 [1/0] via 172.16.26.20
      81.0.0.0/32 is subnetted, 1 subnets
C        81.xxx.xxx.2 is directly connected, Dialer0
      93.0.0.0/8 is variably subnetted, 3 subnets, 2 masks
C        93.xxx.xxx.114/32 is directly connected, Dialer0
C        93.xxx.xxx.72/29 is directly connected, Loopback0
L        93.xxx.xxx.73/32 is directly connected, Loopback0
      172.16.0.0/16 is variably subnetted, 2 subnets, 2 masks
C        172.16.26.16/28 is directly connected, FastEthernet0/0
L        172.16.26.18/32 is directly connected, FastEthernet0/0

GC21RR01#sh ip arp
Protocol  Address          Age (min)  Hardware Addr   Type   Interface
Internet  10.174.21.1             -   6416.8d33.3e30  ARPA   Vlan101
Internet  10.174.21.4            17   0019.cb98.2030  ARPA   Vlan101
Internet  10.174.21.5             1   5c26.0a36.b2c6  ARPA   Vlan101
Internet  10.174.21.6             0   0015.b7fe.fcf0  ARPA   Vlan101
Internet  10.174.21.12            0   0024.21e5.ffb1  ARPA   Vlan101
Internet  10.174.21.24            5   0024.21e5.fcb2  ARPA   Vlan101
Internet  10.174.21.36           17   0025.b3fa.fa66  ARPA   Vlan101
Internet  10.174.21.129           0   000c.2945.303c  ARPA   Vlan102
Internet  10.174.21.141         137   000c.292f.2653  ARPA   Vlan102
Internet  10.174.21.151           0   000c.29d9.a770  ARPA   Vlan102
Internet  10.174.21.212          10   0050.564f.6ecd  ARPA   Vlan102
Internet  10.174.21.213         131   0025.b3e1.9dcc  ARPA   Vlan102
Internet  10.174.21.214         129   0050.5647.aa2f  ARPA   Vlan102
Internet  10.174.21.254           -   6416.8d33.3e30  ARPA   Vlan102
Internet  172.16.26.18            -   6416.8d33.3e30  ARPA   FastEthernet0/0
Internet  172.16.26.19          231   b414.89ca.9798  ARPA   FastEthernet0/0
Internet  172.16.26.20            8   b414.89ca.9408  ARPA   FastEthernet0/0

GC21RR01#sh vlan-sw br

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active
101  GC21VL01                         active    Fa1/8, Fa1/10, Fa1/11, Fa1/12
                                                Fa1/13, Fa1/14, Fa1/15
102  GC21VL02                         active    Fa1/3, Fa1/7, Fa1/9, Po1, Po2
1002 fddi-default                     act/unsup
1003 token-ring-default               act/unsup
1004 fddinet-default                  act/unsup
1005 trnet-default                    act/unsup

sh int po1 and sh int po2 don't work as it was mentioned by me in the first post.

[cadet alain]

Can you  try your ping again but with the following debugs:

-logging buffered 20000

-logging buffered debug

-no service timestamp debug

-show access-list to see which number you can attribute to following

-create ACL : access-list 110 permit icmp any any

-debug arp int Vlan102

-debug arp int Vlan 101

-debug ip packet detail 110

-sh logging -----> post output

Regards.

Alain.

[Safar Safarov]

No need anymore.

Thank you very much for your assistance.