Port Channel Error
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-17-2019 04:10 AM
Hi guys, i have an extrange issue with some port channels on my cisco 9300 series (stack with 4 members). I have a port channel (4 interfaces) betwenn a Cisco and a Fortinet D500 (firewall) and the issues is this: when i have the four interfaces connected working fine with the port channel up and i unplug one of the interfaces to test the resiliency and connecti this interface back this never come up and stay on "suspended" state. no matter what i do it only came up only if i unplug the primary cable of this port channel and plug it again. only then the first cable that i unplage come up :
example:
interface Port-channel16
description Uplinks xxxx -Zona xxx
switchport trunk native vlan 2
switchport trunk allowed vlan 2-4094
switchport mode trunk
ip arp inspection trust
storm-control broadcast level 80.00
storm-control multicast level 5.00
storm-control unicast level 85.00 65.00
storm-control action trap
ip dhcp snooping trust
end
interface GigabitEthernet1/0/47
description uplink WAN - xxxx
switchport trunk native vlan 2
switchport trunk allowed vlan 2-4094
switchport mode trunk
no logging event link-status
storm-control broadcast level 80.00
storm-control multicast level 5.00
storm-control unicast level 85.00 65.00
storm-control action trap
channel-group 16 mode active
spanning-tree bpdufilter enable
spanning-tree link-type point-to-point
spanning-tree guard root
service-policy output UPLINK-COS-1G
end
interface GigabitEthernet1/0/48
description uplink WAN - xxxx
switchport trunk native vlan 2
switchport trunk allowed vlan 2-4094
switchport mode trunk
no logging event link-status
storm-control broadcast level 80.00
storm-control multicast level 5.00
storm-control unicast level 85.00 65.00
storm-control action trap
channel-group 16 mode active
spanning-tree bpdufilter enable
spanning-tree link-type point-to-point
spanning-tree guard root
service-policy output UPLINK-COS-1G
end
interface GigabitEthernet2/0/47
description uplink WAN - xxxx
switchport trunk native vlan 2
switchport trunk allowed vlan 2-4094
switchport mode trunk
no logging event link-status
storm-control broadcast level 80.00
storm-control multicast level 5.00
storm-control unicast level 85.00 65.00
storm-control action trap
channel-group 16 mode active
spanning-tree bpdufilter enable
spanning-tree link-type point-to-point
spanning-tree guard root
service-policy output UPLINK-COS-1G
end
interface GigabitEthernet2/0/48
description uplink WAN - xxxx
switchport trunk native vlan 2
switchport trunk allowed vlan 2-4094
switchport mode trunk
no logging event link-status
storm-control broadcast level 80.00
storm-control multicast level 5.00
storm-control unicast level 85.00 65.00
storm-control action trap
channel-group 16 mode active
spanning-tree bpdufilter enable
spanning-tree link-type point-to-point
spanning-tree guard root
service-policy output UPLINK-COS-1G
end
CRIRT0001#sho etherchannel summary
Flags: D - down P - bundled in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met
u - unsuitable for bundling
w - waiting to be aggregated
d - default port
A - formed by Auto LAG
Number of channel-groups in use: 18
Number of aggregators: 18
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
16 Po16(SU) LACP Gi1/0/47(P) Gi1/0/48(P) Gi2/0/47(s)
Gi2/0/48(s)
to bring up the interface gi2/0/47 i have to unplug the interface gi1/0/47 and the same for the other one. i tried shutting down both interfaces but it doesnt woked at all.
Can somebody "please" help me with this ????
regards.
- Labels:
-
Catalyst 9000

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-17-2019 04:29 AM
Hello,
the problem could be your Fortigate. Try and set the Cisco to channel-mode 'on' and the Fortigate to 'set lacp-mode static' (if that is not the Fortigate config already)...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-17-2019 04:33 AM - edited 12-17-2019 04:42 AM
What is the Logs shows? another side how is fortunate configured?
EDIT :
i was looking for the URL which was solved some time back - so edited the post. ( mode on is the other option)
https://forum.fortinet.com/tm.aspx?m=106460
