Port-Channel blocking causing disconnects?

MARK CHRISTY · ‎11-18-2010

I have a 4006 chassis connected to 2 3560Gs via two port-channels. Those two 3560's are connected to each other via another port channel. Periodically - I get the following log entries - indicating that port-channel 1 on 3560#1 is being blocked because of <see below>. At the same time, I get port channel 2 on 3560#2 with a similar logg entry. Then the next 2 messages state that it is being blocked, then it restores. I don't understand where the BPDU that it refers to is coming from... my simplified topology is after the log entries... all switches are configured for STP, and the 4006 is root with a priority of 1 (it wins).

Show logging on 3560 # 1

--------------------------

004633: .Nov 18 11:48:30: %SPANTREE-7-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk Port-channel1 VLAN1.

004634: .Nov 18 11:48:30: %SPANTREE-7-BLOCK_PORT_TYPE: Blocking Port-channel1 on VLAN0001. Inconsistent port type.

004635: .Nov 18 11:48:45: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking Port-channel1 on VLAN0001. Port consistency restored.

User---4006=====Etherchannel=====3560_1----------------------Server1

|| || <-- Etherchannel

\\======Etherchannel=====3560_2-----------------------Server2

I'd list the entire configuration -- but it is pretty straight forward and representative of the above. When this happens we think users are getting disconnected if they have an active SMB or IP session to either server.

I know this is fairly vague -- but tell me what else I need to explain?

Reza Sharifi · ‎11-18-2010

If the uplinks from the 4000 to 3560s are trunked, can you check to make sure you are have the same vlans on each side of the connection including the etherchannels, and also same encapsulation an all of them?

HTH

Reza

MARK CHRISTY · ‎11-19-2010

Reza,

Looking at my configurations with your suggestions I think I found the following. The port-group (etherchannels) on my 4006 are in 802.1Q trunking mode, and the Port-Channel(s) on my 3560s are not. Could you look at my attached file and see if this is obvious?

Cisconwtech (or so I thought) :-0

Reza Sharifi · ‎11-19-2010

Cisconwtech,

I see that on switch 3560-1 you have po3 trunked, but not po1 and the same for 3560-2 po3 is trunked but not po2. If you only have one vlan, then you can turn off dot.1q an all the switches. If you have more then one vlan, then you need to make all your portchannels dot.1q. Keep it consistent.

HTH

Reza

MARK CHRISTY · ‎11-24-2010

Hello,

I understand keeping it consistent. But I don't understand why it is happening. I thought that I had set ports 5/1-6 NOT to trunk by virtue of not turning off trunking in the modle config on the 4006.. But in the default config I see the following lines for 5/1-6. This says that

trunking is auto

dot1q. In the non-default configuration

I do not call out ports 5/1-6 to trunk, as I do in ports 1/1 and 1/2. Does this then declare that they are trying to setup trunking (because of the default command), but my etherchannel on the 3560 side is not set to trunk? Maybe this is obvious but at this point I want to ensure I fully understand the implications. Since all of our traffic on the core side is on Vlan 1, I didn't think I needed to trunk this link, just etherchannel.

Your response is anticipated!

Config items mentioned above are now listed...

Default Configuration item:

set trunk 5/[1-6] auto dot1q 1-1005 (all six ports have the same line)

Non-default configuration, I DO NOT set these ports to trunk, as with other ports...

Star C> (enable) show runn 5

This command shows non-default configurations only.

Use 'show config all' to show both default and non-default configurations.

..................

begin

!

# ***** NON-DEFAULT CONFIGURATION *****

!

#time: Wed Nov 24 2010, 10:02:11 PST

!

#module 5 : 6-port 1000BaseX Ethernet

set port name 5/1 Channel to b52vm1

set port name 5/2 Channel to b52vm1

set port name 5/3 Channel to b52vm1

set port name 5/4 Channel to b52vm2

set port name 5/5 Channel to b52vm2

set udld enable 5/2-4

set port channel 5/1-5 mode on

end

Star C> (enable)

------------ there is no line as below with 1/1-2 ------------

set trunk 1/1 desirable dot1q 1-1005

set trunk 1/2 desirable dot1q 1-1005

================== Trunk details ====================

Star C> (enable) show trunk 5

* - indicates vtp domain mismatch

Port Mode Encapsulation Status Native vlan

-------- ----------- ------------- ------------ -----------

5/1 auto dot1q not-trunking 1

5/2 auto dot1q not-trunking 1

5/3 auto dot1q not-trunking 1

5/4 auto dot1q not-trunking 1

5/5 auto dot1q not-trunking 1

5/6 auto dot1q not-trunking 1

Star C> (enable) show port channel info

Switch Frame Distribution Method: mac both

Port Status Channel Admin Channel Speed Duplex Vlan

mode group id

----- ---------- -------------------- ----- ------- ----- ------ ----

5/1 connected on 110 769 1000 full 1

5/2 connected on 110 769 1000 full 1

5/3 connected on 110 769 1000 full 1

----- ---------- -------------------- ----- ------- ----- ------ ----

5/4 connected on 120 770 1000 full 1

5/5 connected on 120 770 1000 full 1

----- ---------- -------------------- ----- ------- ----- ------ ----

Port ifIndex Oper-group Neighbor Oper-Distribution PortSecurity/

Oper-group Method Dynamic port

----- ------- ---------- ---------- ----------------- -------------

5/1 92 1 mac both

5/2 92 1 mac both

5/3 92 1 mac both

----- ------- ---------- ---------- ----------------- -------------

5/4 94 2 mac both

5/5 94 2 mac both

----- ------- ---------- ---------- ----------------- -------------

Port Device-ID Port-ID Platform

----- ------------------------------- ------------------------- ----------------

5/1 B52-VM1.kaiseraluminum.com GigabitEthernet0/27 cisco WS-C3560G-24PS

5/2 B52-VM1.kaiseraluminum.com GigabitEthernet0/17 cisco WS-C3560G-24PS

5/3 B52-VM1.kaiseraluminum.com GigabitEthernet0/18 cisco WS-C3560G-24PS

----- ------------------------------- ------------------------- ----------------

5/4 B52-VM2.kaiseraluminum.com GigabitEthernet0/17 cisco WS-C3560G-24PS

5/5 B52-VM2.kaiseraluminum.com GigabitEthernet0/18 cisco WS-C3560G-24PS

----- ------------------------------- ------------------------- ----------------

Port Trunk-status Trunk-type Trunk-vlans

----- ------------ ------------- -----------------------------------------------

5/1 not-trunking dot1q 1-1005

5/2 not-trunking dot1q 1-1005

5/3 not-trunking dot1q 1-1005

----- ------------ ------------- -----------------------------------------------

5/4 not-trunking dot1q 1-1005

5/5 not-trunking dot1q 1-1005

----- ------------ ------------- -----------------------------------------------

Port Portvlancost-vlans

----- --------------------------------------------------------------------------

5/1

5/2

5/3

----- --------------------------------------------------------------------------

5/4

5/5

----- --------------------------------------------------------------------------

Port Port Portfast Port Port Port

priority Guard vlanpri vlanpri-vlans

----- -------- -------- ----- ------- ------------------------------------------

5/1 32 disabled none 0

5/2 32 disabled none 0

5/3 32 disabled none 0

----- -------- -------- ----- ------- ------------------------------------------

5/4 32 disabled none 0

5/5 32 disabled none 0

----- -------- -------- ----- ------- ------------------------------------------

Port Guard type

----- ----------

5/1 none

5/2 none

5/3 none

----- ----------

5/4 none

5/5 none

----- ----------

Port IP IPX Group

----- -------- -------- --------

5/1 on auto-on auto-on

5/2 on auto-on auto-on

5/3 on auto-on auto-on

----- -------- -------- --------

5/4 on auto-on auto-on

5/5 on auto-on auto-on

----- -------- -------- --------

Port GMRP GMRP GMRP

status registration forwardAll

----- -------- ------------ ----------

5/1 enabled normal disabled

5/2 enabled normal disabled

5/3 enabled normal disabled

----- -------- ------------ ----------

5/4 enabled normal disabled

5/5 enabled normal disabled

----- -------- ------------ ----------

Port GVRP GVRP GVRP

status registration applicant

----- -------- ------------ ---------

5/1 disabled normal normal

5/2 disabled normal normal

5/3 disabled normal normal

----- -------- ------------ ---------

5/4 disabled normal normal

5/5 disabled normal normal

----- -------- ------------ ---------

Port Auxiliaryvlan

----- -------------

5/1 5/2 5/3 ----- -------------

5/4 5/5 ----- -------------

MARK CHRISTY · ‎12-16-2010

Here is what finally fixed it. In retrospect it is pretty simple...

3 Vlans that were supposed to exist somehow got "deleted", either by inherent VTP settings from the core switch, or because of a fat finger.

We reconfigured the Vlans needed

We trunked all connections

We setup proper pruning so that the trunks were only carrying the required vlans.

Then the problem stopped.

This case is closed. THANKS for all the great help on this one -- it did help!

Mark