Wireless Access

Hello All,

I was attempting to setup Port Channeling on the two Dual-Media Ports on the 7240 Controllers and I couldn't get it to work to the Aruba MAS.

Is this actually supported on these Ports or it just might have been my mistake?

It is supported. What exactly didn't work? Did the port-channel interface not come up?

I would suggest using LACP Active on the switch (distribution/core) side and passive on the controller side.

[controller]

interface port-channel 0
        add gigabitethernet 0/0/3
        add gigabitethernet 0/0/2
        trusted
        trusted vlan x,x,x,x,x,x,x,x
        switchport mode trunk
        switchport trunk allowed vlan x,x,x,x,x,x
        no spanning-tree
!

The Port Channel comes up active but it doesn't ping out to the MAS.

The Ports are called Dual-Media Ports. Not so sure if I can do Port Channeling on them. See below:

(ArubaControllerB-7240) (config) #show interface port-channel 1

Port-Channel 1 is administratively up
Hardware is Port-Channel, address is 00:1A:1E:00:5E:E8 (bia 00:1A:1E:00:5E:E8)
Description: Link Aggregate
Spanning Tree is disabled
Switchport priority: 0
Member port:
GE 0/0/0, Admin is up, line protocol is up
GE 0/0/1, Admin is up, line protocol is up
Last clearing of "show interface" counters 0 day 0 hr 49 min 38 sec
link status last changed 0 day 0 hr 1 min 8 sec
5519 packets input, 770681 bytes
Received 3750 broadcasts, 0 runts, 0 giants, 0 throttles
0 input error bytes, 0 CRC, 0 frame
3521 multicast, 1769 unicast
3053 packets output, 2233980 bytes
0 output errors bytes, 0 deferred
0 collisions, 0 late collisions, 0 throttles
Port-Channel 1 is TRUSTED

(ArubaControllerB-7240) (config) #ping 172.30.0.1
Press 'q' to abort.
Sending 5, 100-byte ICMP Echos to 172.30.0.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)

Can you post the port-channel config?

Are your VLANs trusted on port-channel?

I didn't specifically trust the VLANs. I thought issuing a "trust" command on the Port Channel implicitly makes all VLANs trusted.

Are you saying that is not the case?

Because the minute I issue that command, I notice all my VLANs become members of the Port Channel.

- You can check to see what VLANs are trusted with the following command: show interface port-channel 1 trusted-vlan

- I always issue the trusted vlan <vlanids> command on the port-channels. Can you try that and see if it works?

Didn't work Tim.

I think those Dual-Media Ports don't support it. I might have to open a Ticket with TAC or something.

Just to confirm.

However, see below for my configuration:

(ArubaS3500-48P) #show interface port-channel 1 switchport brief

Pc1
Link is Up
Flags: Trunk, Trusted
VLAN membership: 930

(ArubaS3500-48P) #

(ArubaControllerB-7240) #show interface port-channel 1 trusted-vlan

Name: Port-Channel1
Trusted Vlan(s)
930-939

(ArubaControllerB-7240) #show interface port-channel 1

Port-Channel 1 is administratively up
Hardware is Port-Channel, address is 00:1A:1E:00:5E:E8 (bia 00:1A:1E:00:5E:E8)
Description: Link Aggregate
Spanning Tree is disabled
Switchport priority: 0
Member port:
GE 0/0/0, Admin is up, line protocol is up
GE 0/0/1, Admin is up, line protocol is up
Last clearing of "show interface" counters 0 day 1 hr 21 min 36 sec
link status last changed 0 day 0 hr 4 min 51 sec
11330 packets input, 1849417 bytes
Received 8130 broadcasts, 0 runts, 0 giants, 0 throttles
0 input error bytes, 0 CRC, 0 frame
7050 multicast, 3200 unicast
5354 packets output, 3563030 bytes
0 output errors bytes, 0 deferred
0 collisions, 0 late collisions, 0 throttles
Port-Channel 1 is TRUSTED

(ArubaControllerB-7240) #

And my client (Laptop) is assigned an IP Address on VLAN 930 which should be passed between the Controller and the MAS.

I must have been doing something wrong. But I finally got it to work.

Thx Tim for your input on this.