Can you remove the storm-control on the trunk port and try again ?

Okay, to make this easier I put a port directly on the core into this new vlan i'm having troubles with (to rule out a configuration problem on my access switch/physical connection problem). The same problems exsists, i'm downloading/uploading from a laptop to a file server, both are connected to the core. My laptop is on the new vlan (503), and the fileserver is on vlan 1.

There is no problem if I connect my end device to a port thats on vlan 1. Also I have tried changing my source server and my laptop to a desktop, same issue.

File Server: Gi6/9 connected 1 a-full a-1000 10/100/1000BaseT

sh run int:

interface GigabitEthernet6/9

no ip address

switchport

end

sh int:

GigabitEthernet6/9 is up, line protocol is up (connected)

Hardware is C6k 1000Mb 802.3, address is 0015.f9c8.d938 (bia 0015.f9c8.d938)

MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,

reliability 255/255, txload 3/255, rxload 3/255

Encapsulation ARPA, loopback not set

Full-duplex, 1000Mb/s

input flow-control is off, output flow-control is off

Clock mode is auto

ARP type: ARPA, ARP Timeout 04:00:00

Last input never, output 00:00:58, output hang never

Last clearing of "show interface" counters 3d18h

Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 12523000 bits/sec, 1765 packets/sec

5 minute output rate 11969000 bits/sec, 1767 packets/sec

1479157389 packets input, 2162879403953 bytes, 0 no buffer

Received 18120 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 input packets with dribble condition detected

543422299 packets output, 70009375192 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier

0 output buffer failures, 0 output buffers swapped out

Laptop:

sh run int: Gi6/45 connected 503 full 1000 10/100/1000BaseT

nterface GigabitEthernet6/45

no ip address

load-interval 30

speed 1000

duplex full

udld port aggressive

no snmp trap link-status

switchport

switchport access vlan 503

switchport mode access

no cdp enable

spanning-tree portfast

end

sh int:

GigabitEthernet6/45 is up, line protocol is up (connected)

Hardware is C6k 1000Mb 802.3, address is 0015.f9c8.d95c (bia 0015.f9c8.d95c)

MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation ARPA, loopback not set

Full-duplex, 1000Mb/s

input flow-control is off, output flow-control is on

Clock mode is auto

ARP type: ARPA, ARP Timeout 04:00:00

Last input never, output 6d23h, output hang never

Last clearing of "show interface" counters 3d18h

Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

30 second input rate 1296000 bits/sec, 219 packets/sec

30 second output rate 2774000 bits/sec, 284 packets/sec

371026 packets input, 372652101 bytes, 0 no buffer

Received 7 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

0 input packets with dribble condition detected

374292 packets output, 372852419 bytes, 0 underruns

0 output errors, 0 collisions, 1 interface resets

0 babbles, 0 late collision, 0 deferred

0 lost carrier, 0 no carrier

0 output buffer failures, 0 output buffers swapped out

Fun issue ;)

I was expecting to see some sort of duplex mismatch...hmmmmm...Ok, lets narrow down the problem. What happens if you move the server to Vlan 503 w/ the laptop? Do you still have speed issues or is it only inter-vlan transfers?

Jay Killion, CCIE #17873

Unfortunately I can't disconnect the file server, its in production.

I just added another desktop to this vlan on the core, transfers seem fine on the same vlan, 35mB/s.

....this one has me stumped

Ok, next test. Move the desktop over the vlan 1 and try the transfer one more time. After that we'll have a solid baseline to see if it is just intervlan routing that's having a problem.

Yup, desktop and laptop on vlan 1 can transfer just fine, 35mB/s both ways..

Check for Spanning-Tree, if the STP Root for Vlan 1 is different than the STP Root for Vlan 503, the traffic will traverse the trunk.

I see the trunk has a storm-control value for broadcast, perhaps the download you are performing is seeing as broadcast traffic by the port.

As I suggested before, please remove the storm-control from the trunk and try again.

I should have mentioned, I removed the storm control values.

Here is the stp root information:

Root Hello Max Fwd

Vlan Root ID Cost Time Age Dly Root Port

---------------- -------------------- --------- ----- --- --- ------------

VLAN0001 32768 000d.54a9.e960 4 2 20 15 Gi6/48

VLAN0500 32768 0015.c714.35f4 0 2 20 15

VLAN0503 32768 0015.c714.35f7 0 2 20 15

As suspected, Vlan1 STP Root is different from STP Root from Vlan 500 and 503.

Vlan1 STP Root is being learned via G6/48.

Can you provide the STP information from that switch ?

You can also alter the STP configuration to mirror Vlan1's.

uh oh..

The device plugged into 6/48 is an unmanaged 3com switch (used for test devices in the lab office)....

Change the priority for all Vlans to 0 on the 6509. This way, it will become the STP root for all Vlans.

Is changing this priority on vlan 1 going to bring the vlan down for a bit, just worried because their is currently about 300 users connected to this vlan....