Connect WLC 4402 and CATALYST 6500 With LAG.

[c-pirault]

Hello !

Side Catalyst 6509 :

cata6#sho running-config interface gigabitEthernet 8/15

Building configuration...

Current configuration : 224 bytes

!

interface GigabitEthernet8/15

switchport

switchport trunk encapsulation dot1q

switchport mode trunk

no ip address

channel-protocol lacp

channel-group 4 mode active

end

cata6#sho running-config interface gigabitEthernet 8/45

Building configuration...

Current configuration : 224 bytes

!

interface GigabitEthernet8/45

switchport

switchport trunk encapsulation dot1q

switchport mode trunk

no ip address

channel-protocol lacp

channel-group 4 mode active

end

et

cata6#sho running-config interface port-channel 4

Building configuration...

Current configuration : 149 bytes

!

interface Port-channel4

description vers wificontrol

switchport

switchport trunk encapsulation dot1q

switchport mode trunk

no ip address

end

Side WLC 4402 :

(Cisco Controller) >show port summary

           STP   Admin   Physical   Physical   Link   Link    Mcast

Pr  Type   Stat   Mode     Mode      Status   Status  Trap   Appliance   POE

-- ------- ---- ------- ---------- ---------- ------ ------- --------- -------

1  Normal  Forw Enable  Auto       1000 Full  Up     Disable Enable     N/A

2  Normal  Forw Enable  Auto       1000 Full  Up     Disable Enable     N/A

(Cisco Controller) >show lag summary

LAG Enabled

and :

(Cisco Controller) >show mirror ap

AP              

-----------------

(Cisco Controller) >show mirror foreignAp

Foreign AP Port

---------------

(Cisco Controller) >show mirror mac      

Client MAC        Type

----------------- -------

On the web admin interface of the 4402,  the 2 ports GigaEthernet are in mirror mode BUT it is not possible to disable (when i click on "apply" it return to enable). Even if i disable the LAG (and i reboot) I CANNOT disable the mirror mode of the 2 ports.

In the config guide it is noted :

"Port mirroring is not supported when link aggregation (LAG) is enabled on the controller"

Yes i agree BUT i cannot disable !!!

The WLAN work apparently good, BUT the traffic is VERY similar across the 2 interfaces (verify by SNMP/rrdtool side catalyst) AND a ping toward the management-interface of the 4402 show a DUP response :

root@net-adm:~# ping wificontrol

PING wificontrol (10.3.254.159) 56(84) bytes of data.

64 bytes from wificontrol (10.3.254.159): icmp_req=1 ttl=64 time=0.393 ms

64 bytes from wificontrol (10.3.254.159): icmp_req=1 ttl=64 time=0.404 ms (DUP!)

64 bytes from wificontrol (10.3.254.159): icmp_req=2 ttl=64 time=0.316 ms

64 bytes from wificontrol (10.3.254.159): icmp_req=2 ttl=64 time=0.323 ms (DUP!)

64 bytes from wificontrol (10.3.254.159): icmp_req=3 ttl=64 time=0.347 ms

64 bytes from wificontrol (10.3.254.159): icmp_req=3 ttl=64 time=0.355 ms (DUP!)

It seems that the traffic is mirrored on the 2 ports !!!

It's not very useful to have the same traffic, instead a sharing between the 2 ports .

WHERE IS MY MISTAKE ???

Thanks a lot for your help.

     Regards.

[Chuck Dillon]

Hello Mitchel,

I do not see a native vlan defined or any other vlans at all.

switchport trunk native vlan

[Stephen Rodriguez · Accepted solution]

Michel,

     The WLC does not negotiate a protocol for etherchannel.

So you'll need to issue the follwoing commands under the G8/15 and 8/45

no channel-protocol lacp

channel-group 4 mode on

As for the WLC side, you should be fine if the native is VLAN 1, or if you are tagging the management/ap-manager interface(s)

HTH,
Steve

----------------------------------------------------------------------------------------------------------

Please remember to rate helpful posts or to mark the quesiton as answered so that it can be found later.

[Kayle Miller · Accepted solution]

Michel,

     Stephen is correct. +5 Stephen.. and a native vlan statement is not needed as long as your management and ap-manager interfaces have a vlan assigned to them in the controller

[c-pirault]

Hello !

I modify this and try again and post the result later.

But i don't undertsand why the ports are in mirror mode ?

Thanks.

[c-pirault]

Hello again !

Good response !

It was the lacp which don't work with the 4402.

I no longer have a duplicate traffic onto the 2 ports and the ping DUP disappear.

But it is always impossible to disable the mirror mode of the 2 ports onto the web user interface of the 4402.

I think for a bug in the GUI.

Thanks a lot and bravo to everybody !

[c-pirault]

Hello !

In fact i am on the default native VLAN : idem for the Giga 8/45 and Giga 8/15

cata6#show interfaces gigabitEthernet 8/15 switchport

Name: Gi8/15

Switchport: Enabled

Administrative Mode: trunk

Operational Mode: down (suspended member of bundle Po4)

Administrative Trunking Encapsulation: dot1q

Negotiation of Trunking: On

Access Mode VLAN: 1 (default)

Trunking Native Mode VLAN: 1 (default)

Voice VLAN: none

Administrative private-vlan host-association: none

Administrative private-vlan mapping: none

Administrative private-vlan trunk native VLAN: none

Administrative private-vlan trunk encapsulation: dot1q

Administrative private-vlan trunk normal VLANs: none

Administrative private-vlan trunk private VLANs: none

Operational private-vlan: none

Trunking VLANs Enabled: ALL

Pruning VLANs Enabled: 2-1001

Capture Mode Disabled

Capture VLANs Allowed: ALL

Unknown unicast blocked: disabled

Unknown multicast blocked: disabled