I'm having an issue accessing the management VLAN/IPs of my network behind my 4500X which is acting as the Core/Distribution layer of my site. The issue began occurring after a network upgrade, we removed a piece of equipment that was acting as the distribution layer for the site and connected to a core, by placing a new 4500X into the mix we decided to have the 4500X become the collapsed core.
All end user traffic flows normally and is not impacted, just our management plane.
4500X Config:
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 1-999 priority 4096
Interface Configs:
switchport mode trunk
switchport trunk allowed vlan all
spanning-tree guard root
logging event link-status
Management VLAN config:
IP address 192.168.x.1 255.255.255.0
no ip redirects
no ip proxy-arp
BGP is forwarding the subnet out to the internet
No ACLs preventing traffic to or from the subnet
Access Switch:
Default gateway is set to 192.168.x.1 255.255.255.0
IP addressing in the same subnet 192.168.x.y 255.255.255.0
Spanning-tree priority default 32768
Spanning-tree mode STPG (MSTP)
I've done this upgrade with a total of 30 sites and only 2/30 are having issues if anyone is familiar with any issues like this that have occurred when using mixed hardware it would be much appreciated, however it appears to that the primary cause might be with my 4500X and spanning-tree. I'm always willing to provide more info as needed.
Update: Edited title to better reflect my issue. The real problem is that my traffic for my management subnet over VLAN1 does not respond to pings and does not allow remote sessions to be initiated with the access layer switches behind my 4500X which causes my team members to see alarms populate that are false positives.
There are 0 errors or CRCs on the interface, in addition to that would it be possible to debug and what debug would I want to run to find information that might pin point why I'm having issues with ICMP traffic between devices in my subnet? The 4500X will have to periodically arp to ensure the devices are still up and running which appears to be where the problem is.
sh int status
Port Name Status Vlan Duplex Speed Type
Te1/1 AdminSWT47 connected trunk full a-1000 1000BaseSX
Te1/2 AdminSWT111 connected trunk full a-1000 1000BaseSX
Te1/3 AdminSWT21 connected trunk full a-1000 1000BaseSX
Te1/4 AdminSWT106 connected trunk full a-1000 1000BaseSX
Te1/5 AdminSWT64 connected trunk full a-1000 1000BaseSX
Te1/6 AdminSWT87 connected trunk full a-1000 1000BaseSX
Te1/7 AdminSWT123 connected trunk full a-1000 1000BaseSX
Te1/8 AdminSWT27 connected trunk full a-1000 1000BaseSX
Te1/9 AdminSWT86 connected trunk full a-1000 1000BaseSX
Te1/10 AdminSWT62 connected trunk full a-1000 1000BaseSX
Te1/11 AdminSWT28 connected trunk full a-1000 1000BaseSX
Te1/12 AdminSWT67 connected trunk full a-1000 1000BaseSX
Te1/13 AdminSWT29 connected trunk full a-1000 1000BaseSX
Te1/14 AdminSWT124 connected trunk full a-1000 1000BaseSX
Te1/15 AdminSWT108 connected trunk full a-1000 1000BaseSX
Te1/16 WAN connected routed full a-1000 1000BaseSX
Te1/17 AdminSWT191 connected trunk full a-1000 1000BaseSX
Te1/18 AdminSWT102 connected trunk full a-1000 1000BaseSX
Te1/19 AdminSWT15 connected trunk full a-1000 1000BaseSX
Te1/20 AdminSWT10 connected trunk full a-1000 1000BaseSX
Te1/21 AdminSWT110 connected trunk full a-1000 1000BaseSX
Te1/22 AdminSWT117 connected trunk full a-1000 1000BaseSX
Te1/23 OBMMGMT Switch disabled 1 full auto 1000BaseT
Te1/24 OBMMGMT Switch disabled 1 full auto 1000BaseT
Te1/25 Access Switch connected trunk full a-1000 1000BaseT
Te1/26 disabled 1 full auto No XCVR
Te1/27 disabled 1 full auto No XCVR
Te1/28 disabled 1 full auto No XCVR
Te1/29 disabled 1 full auto No XCVR
Te1/30 disabled 1 full auto No XCVR
Te1/31 disabled 1 full auto No XCVR
Te1/32 disabled 1 full auto No XCVR
