11-18-2010 04:26 PM - edited 03-06-2019 02:07 PM
I have a 4006 chassis connected to 2 3560Gs via two port-channels. Those two 3560's are connected to each other via another port channel. Periodically - I get the following log entries - indicating that port-channel 1 on 3560#1 is being blocked because of <see below>. At the same time, I get port channel 2 on 3560#2 with a similar logg entry. Then the next 2 messages state that it is being blocked, then it restores. I don't understand where the BPDU that it refers to is coming from... my simplified topology is after the log entries... all switches are configured for STP, and the 4006 is root with a priority of 1 (it wins).
Show logging on 3560 # 1
--------------------------
004633: .Nov 18 11:48:30: %SPANTREE-7-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk Port-channel1 VLAN1.
004634: .Nov 18 11:48:30: %SPANTREE-7-BLOCK_PORT_TYPE: Blocking Port-channel1 on VLAN0001. Inconsistent port type.
004635: .Nov 18 11:48:45: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking Port-channel1 on VLAN0001. Port consistency restored.
User---4006=====Etherchannel=====3560_1----------------------Server1
|| || <-- Etherchannel
\\======Etherchannel=====3560_2-----------------------Server2
I'd list the entire configuration -- but it is pretty straight forward and representative of the above. When this happens we think users are getting disconnected if they have an active SMB or IP session to either server.
I know this is fairly vague -- but tell me what else I need to explain?
11-18-2010 05:31 PM
If the uplinks from the 4000 to 3560s are trunked, can you check to make sure you are have the same vlans on each side of the connection including the etherchannels, and also same encapsulation an all of them?
HTH
Reza
11-19-2010 09:44 AM
Reza,
Looking at my configurations with your suggestions I think I found the following. The port-group (etherchannels) on my 4006 are in 802.1Q trunking mode, and the Port-Channel(s) on my 3560s are not. Could you look at my attached file and see if this is obvious?
Cisconwtech (or so I thought) :-0
11-19-2010 11:10 AM
Cisconwtech,
I see that on switch 3560-1 you have po3 trunked, but not po1 and the same for 3560-2 po3 is trunked but not po2. If you only have one vlan, then you can turn off dot.1q an all the switches. If you have more then one vlan, then you need to make all your portchannels dot.1q. Keep it consistent.
HTH
Reza
11-24-2010 10:05 AM
Hello,
I understand keeping it consistent. But I don't understand why it is happening. I thought that I had set ports 5/1-6 NOT to trunk by virtue of not turning off trunking in the modle config on the 4006.. But in the default config I see the following lines for 5/1-6. This says that
trunking is auto
dot1q. In the non-default configuration
I do not call out ports 5/1-6 to trunk, as I do in ports 1/1 and 1/2. Does this then declare that they are trying to setup trunking (because of the default command), but my etherchannel on the 3560 side is not set to trunk? Maybe this is obvious but at this point I want to ensure I fully understand the implications. Since all of our traffic on the core side is on Vlan 1, I didn't think I needed to trunk this link, just etherchannel.
Your response is anticipated!
Config items mentioned above are now listed...
Default Configuration item:
set trunk 5/[1-6] auto dot1q 1-1005 (all six ports have the same line)
Non-default configuration, I DO NOT set these ports to trunk, as with other ports...
Star C> (enable) show runn 5
This command shows non-default configurations only.
Use 'show config
..................
begin
!
# ***** NON-DEFAULT CONFIGURATION *****
!
!
#time: Wed Nov 24 2010, 10:02:11 PST
!
#module 5 : 6-port 1000BaseX Ethernet
set port name 5/1 Channel to b52vm1
set port name 5/2 Channel to b52vm1
set port name 5/3 Channel to b52vm1
set port name 5/4 Channel to b52vm2
set port name 5/5 Channel to b52vm2
set udld enable 5/2-4
set port channel 5/1-5 mode on
end
Star C> (enable)
------------ there is no line as below with 1/1-2 ------------
set trunk 1/1 desirable dot1q 1-1005
set trunk 1/2 desirable dot1q 1-1005
================== Trunk details ====================
Star C> (enable) show trunk 5
* - indicates vtp domain mismatch
Port Mode Encapsulation Status Native vlan
-------- ----------- ------------- ------------ -----------
5/1 auto dot1q not-trunking 1
5/2 auto dot1q not-trunking 1
5/3 auto dot1q not-trunking 1
5/4 auto dot1q not-trunking 1
5/5 auto dot1q not-trunking 1
5/6 auto dot1q not-trunking 1
Star C> (enable) show port channel info
Switch Frame Distribution Method: mac both
Port Status Channel Admin Channel Speed Duplex Vlan
mode group id
----- ---------- -------------------- ----- ------- ----- ------ ----
5/1 connected on 110 769 1000 full 1
5/2 connected on 110 769 1000 full 1
5/3 connected on 110 769 1000 full 1
----- ---------- -------------------- ----- ------- ----- ------ ----
5/4 connected on 120 770 1000 full 1
5/5 connected on 120 770 1000 full 1
----- ---------- -------------------- ----- ------- ----- ------ ----
Port ifIndex Oper-group Neighbor Oper-Distribution PortSecurity/
Oper-group Method Dynamic port
----- ------- ---------- ---------- ----------------- -------------
5/1 92 1 mac both
5/2 92 1 mac both
5/3 92 1 mac both
----- ------- ---------- ---------- ----------------- -------------
5/4 94 2 mac both
5/5 94 2 mac both
----- ------- ---------- ---------- ----------------- -------------
Port Device-ID Port-ID Platform
----- ------------------------------- ------------------------- ----------------
5/1 B52-VM1.kaiseraluminum.com GigabitEthernet0/27 cisco WS-C3560G-24PS
5/2 B52-VM1.kaiseraluminum.com GigabitEthernet0/17 cisco WS-C3560G-24PS
5/3 B52-VM1.kaiseraluminum.com GigabitEthernet0/18 cisco WS-C3560G-24PS
----- ------------------------------- ------------------------- ----------------
5/4 B52-VM2.kaiseraluminum.com GigabitEthernet0/17 cisco WS-C3560G-24PS
5/5 B52-VM2.kaiseraluminum.com GigabitEthernet0/18 cisco WS-C3560G-24PS
----- ------------------------------- ------------------------- ----------------
Port Trunk-status Trunk-type Trunk-vlans
----- ------------ ------------- -----------------------------------------------
5/1 not-trunking dot1q 1-1005
5/2 not-trunking dot1q 1-1005
5/3 not-trunking dot1q 1-1005
----- ------------ ------------- -----------------------------------------------
5/4 not-trunking dot1q 1-1005
5/5 not-trunking dot1q 1-1005
----- ------------ ------------- -----------------------------------------------
Port Portvlancost-vlans
----- --------------------------------------------------------------------------
5/1
5/2
5/3
----- --------------------------------------------------------------------------
5/4
5/5
----- --------------------------------------------------------------------------
Port Port Portfast Port Port Port
priority Guard vlanpri vlanpri-vlans
----- -------- -------- ----- ------- ------------------------------------------
5/1 32 disabled none 0
5/2 32 disabled none 0
5/3 32 disabled none 0
----- -------- -------- ----- ------- ------------------------------------------
5/4 32 disabled none 0
5/5 32 disabled none 0
----- -------- -------- ----- ------- ------------------------------------------
Port Guard type
----- ----------
5/1 none
5/2 none
5/3 none
----- ----------
5/4 none
5/5 none
----- ----------
Port IP IPX Group
----- -------- -------- --------
5/1 on auto-on auto-on
5/2 on auto-on auto-on
5/3 on auto-on auto-on
----- -------- -------- --------
5/4 on auto-on auto-on
5/5 on auto-on auto-on
----- -------- -------- --------
Port GMRP GMRP GMRP
status registration forwardAll
----- -------- ------------ ----------
5/1 enabled normal disabled
5/2 enabled normal disabled
5/3 enabled normal disabled
----- -------- ------------ ----------
5/4 enabled normal disabled
5/5 enabled normal disabled
----- -------- ------------ ----------
Port GVRP GVRP GVRP
status registration applicant
----- -------- ------------ ---------
5/1 disabled normal normal
5/2 disabled normal normal
5/3 disabled normal normal
----- -------- ------------ ---------
5/4 disabled normal normal
5/5 disabled normal normal
----- -------- ------------ ---------
Port Auxiliaryvlan
----- -------------
5/1 5/2 5/3 ----- -------------
5/4 5/5 ----- -------------
12-16-2010 11:09 AM
Here is what finally fixed it. In retrospect it is pretty simple...
3 Vlans that were supposed to exist somehow got "deleted", either by inherent VTP settings from the core switch, or because of a fat finger.
We reconfigured the Vlans needed
We trunked all connections
We setup proper pruning so that the trunks were only carrying the required vlans.
Then the problem stopped.
This case is closed. THANKS for all the great help on this one -- it did help!
Mark
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide