Trunk fault when opening webpage of new endpoint

[M81col]

Layout:  New Camera---->POE Injector---->IE-4000---Fiber Trunk---->Cat.9300---->Camera workstation

I recently replaced a faulty camera with a new camera on my network (Layout above).  Every time I open the camera webpage on the camera workstation, the Trunk link on the Cat.9300 flashes amber.  It will flash green for about 5 seconds and then amber and then back to green again for 5 seconds.  If I close the webpage, the port goes back to a steady green flashing.

The trunk MTU is set to 1500 on both sides.  I can ping the camera from the workstation.  I can open the camera webpage.  I cannot view the live feed for this camera on the webpage.  I am assuming its because of the line fault happening on the Cat.9300 trunk.

If I connect a laptop directly to the IE-4000, I can open up the camera webpage and view the live feed with no issues.  There are other cameras connected to this IE-4000 without any issues.  The only issue is this new camera.  I've tried new cables, a different camera, all with the same outcome.  Please help!

[balaji.bandi]

The issue you reporting here the LED Flashing green and amber, or you having issue opening the web page ?

can you post  - what model of cat 9300 ?

show version

show interface x/x  controller  (x/x is the trunk port)

indicator of LED :

Blinking green

Activity. Port is sending or receiving data.

Alternating green-amber

Link fault. Error frames can affect connectivity, and errors such as excessive collisions, cyclic redundancy check (CRC) errors, and alignment and jabber errors are monitored for a link-fault indication.

check section - Table 12. Meaning of Switch LED Colors in Different Modes

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/hardware/install/b_c9300_hig/b_c9300_hig_chapter_01001.html

[M81col]

Hello BB, thank you so much for replying.

I'm assuming the camera feed not being viewable on the camera workstation is because of this line fault condition on the trunk port.  I have multiple cameras on this IE-4000.  All other cameras stay up and connected.  I didn't have this issue until I plugged this new camera into the IE-4000.

C9300-24S

C-9300#show version
Cisco IOS XE Software, Version 17.09.03
Cisco IOS Software [Cupertino], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.9.3, RELEASE SOFTWARE (fc6)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2023 by Cisco Systems, Inc.

C-9300#show interface g1/0/1 control
GigabitEthernet1/0/1 is up, line protocol is up (connected)
Hardware is Gigabit Ethernet
Description: Cisco Network Trunk
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 7/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseLX SFP
input flow-control is on, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:09, output 00:00:00, output hang never
Last clearing of "show interface" counters 1d00h
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 27642000 bits/sec, 2586 packets/sec
5 minute output rate 507000 bits/sec, 625 packets/sec
192909476 packets input, 260135134249 bytes, 0 no buffer
Received 35381 broadcasts (34790 multicasts)
0 runts, 2253 giants, 0 throttles
2253 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 34790 multicast, 0 pause input
0 input packets with dribble condition detected
49264909 packets output, 5014258601 bytes, 0 underruns
Output 160484 broadcasts (462746 multicasts)
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
Transmit GigabitEthernet1/0/1 Receive
329249216646 Total bytes 24945533551720 Total bytes
3061059347 Unicast frames 19327096364 Unicast frames
316589810026 Unicast bytes 24944438064788 Unicast bytes
50635966 Multicast frames 5010736 Multicast frames
9085246961 Multicast bytes 1086702621 Multicast bytes
34834479 Broadcast frames 77750 Broadcast frames
3574159659 Broadcast bytes 8784311 Broadcast bytes
0 System FCS error frames 0 IpgViolation frames
0 MacUnderrun frames 0 MacOverrun frames
0 Pause frames 0 Pause frames
0 Cos 0 Pause frames 0 Cos 0 Pause frames
0 Cos 1 Pause frames 0 Cos 1 Pause frames
0 Cos 2 Pause frames 0 Cos 2 Pause frames
0 Cos 3 Pause frames 0 Cos 3 Pause frames
0 Cos 4 Pause frames 0 Cos 4 Pause frames
0 Cos 5 Pause frames 0 Cos 5 Pause frames
0 Cos 6 Pause frames 0 Cos 6 Pause frames
0 Cos 7 Pause frames 0 Cos 7 Pause frames
0 Oam frames 0 OamProcessed frames
0 Oam frames 0 OamDropped frames
0 Minimum size frames 0 Minimum size frames
3081362480 65 to 127 byte frames 625414394 65 to 127 byte frames
41311703 128 to 255 byte frames 1743983965 128 to 255 byte frames
15358016 256 to 511 byte frames 374155816 256 to 511 byte frames
7375952 512 to 1023 byte frames 708220059 512 to 1023 byte frames
309870 1024 to 1518 byte frames 4651558923 1024 to 1518 byte frames
811771 1519 to 2047 byte frames 11229225774 1519 to 2047 byte frames
0 2048 to 4095 byte frames 0 2048 to 4095 byte frames
0 4096 to 8191 byte frames 0 4096 to 8191 byte frames
0 8192 to 16383 byte frames 0 8192 to 16383 byte frames
0 16384 to 32767 byte frame 0 16384 to 32767 byte frame
0 > 32768 byte frames 0 > 32768 byte frames
0 Late collision frames 3 SymbolErr frames
0 Excess Defer frames 0 Collision fragments
0 Good (1 coll) frames 0 ValidUnderSize frames
0 Good (>1 coll) frames 0 InvalidOverSize frames
0 Deferred frames 374078 ValidOverSize frames
0 Gold frames dropped 0 FcsErr frames
0 Gold frames truncated
0 Gold frames successful
0 1 collision frames
0 2 collision frames
0 3 collision frames
0 4 collision frames
0 5 collision frames
0 6 collision frames
0 7 collision frames
0 8 collision frames
0 9 collision frames
0 10 collision frames
0 11 collision frames
0 12 collision frames
0 13 collision frames
0 14 collision frames
0 15 collision frames
0 Excess collision frames

LAST UPDATE 358 msecs AGO

[balaji.bandi]

clear the counters and check how fast the giants and error increasing, if the high utlising links we see some time that errors.

So you saying only issue with this new camera, all other camera works as expectd ?

is this model of the camera different than working one ? what model those are ?

@Elliot Dierksen also consider this suggestion.

[MHM Cisco World]

match the mtu size in both SW 
MHM

[M81col]

Hello MHM, below is the MTU for both switches.

C-9300#show system mtu
Global Ethernet MTU is 1500 bytes.

IE-4000#show system mtu

System MTU size is 1500 bytes
System Jumbo MTU size is 1500 bytes
System Alternate MTU size is 1500 bytes
Routing MTU size is 1500 bytes

[MHM Cisco World]

you can use 
show monitor capture <<- in c9000 
to detect what IE-4000 MTU or camera use 
MHM

[MHM Cisco World]

still you can use show monitor capture to check the MTU size since you have giants frame 
BUT I check the catalyst 9000 there is no mention that the interface go to showdown/errdisable when it receive giants frame 
it silent discard this or forward it and count then (if it around 1520-1540)
so I think what making trunk go down if the multicast frame is pass ?
1- trunk down if you use strom control level less than the rate of multicast 
2- the multicast is use mac address that conflict with other L2 Protocol

so also please check these two points also

thanks 
MHM

[Elliot Dierksen]

Please post the 'show run interface X' for the camera and he trunk links on both sides. Just guessing, but perhaps the new camera is either sending 802.1Q tags or is configured for jumbo frames. That looks like what is annoying the trunk link.

[M81col]

Hello Elliot, thank you for replying.

It started off with the trunk fault on the C9300 happening whenever I pulled up the webpage for this new camera.  Now it seems to happen when plugging in any camera to the IE-4000.

I disconnected all the endpoints from the IE-4000 and the fault on the C9300 went away, 0 giants, 0 Input errors.  One at a time I reconnected the endpoints.  The fault came back on the C9300 when I got to the endpoints on the Camera Vlan.

Below is the config for the ports.

IE-4000#show run interface f1/11
Building configuration...

Current configuration : 303 bytes
!
interface FastEthernet1/11
description CAMERA
switchport access vlan 20
switchport mode access
switchport nonegotiate
switchport port-security mac-address sticky
switchport port-security mac-address sticky xxxx.xxxx.xxxx
switchport port-security
no cdp enable
spanning-tree portfast edge
end

IE-4000#show run interface g1/1
Building configuration...

Current configuration : 342 bytes
!
interface GigabitEthernet1/1
description Cisco TrustSec link to Network Trunk
switchport trunk allowed vlan 10,20,30
switchport trunk native vlan 500
switchport mode trunk
switchport nonegotiate
no cdp enable
cts manual
sap pmk 6 Q`DVi\NFSBdeg_DETOXG`_AA^GUSXXgeT[GRIHYGFEd]AccDa`VERTP^UMUGbeb^AAB mode-list gcm-encrypt
end

C-9300#show run interface g1/0/1
Building configuration...

Current configuration : 354 bytes
!
interface GigabitEthernet1/0/1
description Cisco Network Trunk
switchport trunk native vlan 500
switchport trunk allowed vlan 10,20,30
switchport mode trunk
switchport nonegotiate
no cdp enable
cts manual
no propagate sgt
sap pmk 6 KMQaD_JYRD\QVXXXVJZJZGLHdG[D^Nb]]ag\JXXXK^gXXXf]B^AAB mode-list gcm-encrypt
end

[M81col]

Does anyone else have any idea what this can be?  Is it Trustsec causing these issues?

The trunk link on the 9300 switch blinks green/amber when connecting devices from a specific vlan on the IE-4000 access switch.  Show logging does not show anything for these ports when the fault happens.

I disconnect the devices from the IE-4000, the green LED on the 9300 goes back to steady green flashing.

I start plugging these devices back in,  the LED on the 9300 flashes green / amber.....

[MHM Cisco World]

try 
sap null
or 
sap no-encap 
I think the IEEE is not support all TrustSec feature 
MHM