Controllerless Networks

last person joined: an hour ago 

Aruba Instant Wi-Fi: Meet the controllerless Wi-Fi solution that's easy to set-up, is loaded with security and smarts, and won't break your budget.
Expand all | Collapse all

What's the switchport configuration for IAP225's?

Jump to Best Answer
  • 1.  What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 09:06 AM

    Hi All,

     

    I've got some IAP225's and an Aruba S2500 PoE switch and I'm setting up a little lab. (also have an HP Microserver running Clearpass and Airwave.. I digress)


    I'd like to patch both ports from the IAP225's into the switch to provide over 1Gbit of wired throughput.

     

    What's the appropriate instant and switch configuration?

     

    Static or LACP port channel? Some other setting?

     

    Cheers

    J



  • 2.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 09:19 AM

    On the Corvina side:

     

    1) Create a trunk interface-profile

    225-corvina-switchingprofile-trunk.PNG

     

    2) Create the port-channel and associate switchports

    225-corvina-port-channel.PNG

     

     

    On the Instant side, there is no configuration, but you can see the LACP status with:

    show lacp status

     



  • 3.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 09:43 AM

    interface fastethernet 1/0
    description "FE1/0"
    trusted vlan 1-4094
    lacp group 0 mode active


    interface fastethernet 1/1
    description "FE1/1"
    trusted vlan 1-4094
    lacp timeout short
    lacp group 0 mode active

     

    No config is done on the IAP side as the IAP will automatically detect LACP running on the link.



  • 4.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 09:49 AM

    Thanks Tim.


    This is the configuration that I already tried and the AP keeps reloading after being up for a minute or so...

     

    Here's the console output:

     

    AP rebooted Thu Jan 1 00:01:28 UTC 1970; master transitioned to local (new master 192.168.222.251, uplink flaps 0, max beacon miss 1)
    shutting down watchdog process (nanny will restart it)...
    Completed SW FIPS KAT test

    <<<<< Welcome to the Access Point >>>>>

    Launching IAP CLI...
    [ 27.992854] process `snmpd_sap' is using obsolete setsockopt SO_BSDCOMPAT

    [ 49.190387] i am master now
    [ 49.223774] (00:00:48) !!! Init ---> Master
    [ 49.273814] asap_send_elected_master: sent successfully
    User: [ 64.428162] ethernet_device_event: dev eth1 is up
    admin[ 65.169482] OOPS. someone else thinks hes the master too
    [ 65.233092] I am MASTER. recv-ed a master normal-beacon.
    [ 65.296668] (00:01:04) Beacon ap-class, 25 vs. 25
    [ 65.352956] (00:01:04) Beacon ap-ip, 192.168.222.252 vs. 192.168.222.251
    [ 65.433184] (00:01:05) Beacon uptime, 32510 vs. -2
    [ 65.490497] (00:01:05) !!! Win the master election
    [ 65.547814] OOPS. someone else thinks hes the master too
    [ 65.611372] I am MASTER. recv-ed a master normal-beacon.
    [ 65.674954] (00:01:05) master provision, 0 vs. 0
    [ 65.730189] (00:01:05) Beacon ap-ip, 192.168.222.252 vs. 192.168.222.251
    [ 65.810432] (00:01:05) Beacon 3G capability, 0 vs. 0
    [ 65.869835] (00:01:05) Beacon ap-class, 25 vs. 25
    [ 65.926109] (00:01:05) Beacon uptime, 32756 vs. 4847445
    [ 65.988632] (00:01:05) !!! Lose the master election
    [ 66.046987] (00:01:05) !!! Master ---> Slave
    [ 66.098054] Add bridge entry for magic vlan GW, ifindex 8453, 18:64:72:c5:47:0c
    [ 66.185580] wait for stm to initialize over
    [ 66.235615] asap_send_elected_master: sent successfully
    [ 67.945755] PHY: eth1 (mdio@ffe24000:01) - Link is Up
    [ 68.006225] - 1000/Full
    The Sending SIGKILL to all processes.
    Please stand by while rebooting the system.
    [ 78.249120] Restarting system.

    FYI I have 2 other AP up that are patched into access ports.

    I unplugged the APs patched into the access ports and the trunked AP stayed up.

     

    The LACP status shows as unconfigured though...


    ap225 lacp.PNG

     

    I patched the other APs back in and they came up fine though. 

     

    Just doing a little more testing....

     

    Cheers
    J



  • 5.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 09:54 AM

    Try creating an LACP profile with mode ACTIVE and applying it to the individual switchports.

     

     

    (EDGE-S1500) (config) #interface-profile lacp-profile "IAP-225-1
    (EDGE-S1500) (LACP ""IAP-225-1") #group-id 7
    (EDGE-S1500) (LACP ""IAP-225-1") #mode active
    (EDGE-S1500) (config) #interface gigabitethernet 0/0/5
    (EDGE-S1500) (gigabitethernet "0/0/5") #lacp-profile IAP-225-1

     



  • 6.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 10:46 AM

    Attemped to use LACP to configure the ports but I'm unable to get the AP to come up.

     

    I've tried:

     

    active mode and short timeout

    active mode and long timeout

    passive mode and short timeout

    passive mode and long timeout

     

    The AP boots but the 5GHz and 2.4GHz lights stay amber. 


    The AP doesn't appear to have any network connectivity.

     

    I'm unable to ping it from the switch and vice versa.

     

    -------------

     

    When I set the port channel that the AP is patched into to be STATIC instead of LACP the AP comes up and seems to work. When I configured another STATIC port channel and patched another AP in, I'm getting mixed results. First time the switch became unresponsive till I unpatched the 2nd AP. Second time I tried it the AP just keeps rebooting.... with the following showing up on the console as before....

     

    Completed SW FIPS KAT test

    <<<<< Welcome to the Access Point >>>>>

    Launching IAP CLI...
    [ 27.871029] process `snmpd_sap' is using obsolete setsockopt SO_BSDCOMPAT

    [ 49.227780] i am master now
    [ 49.261163] (00:00:48) !!! Init ---> Master
    [ 49.311221] asap_send_elected_master: sent successfully
    User: [ 64.345585] ethernet_device_event: dev eth1 is up
    [ 65.580893] OOPS. someone else thinks hes the master too
    [ 65.644510] I am MASTER. recv-ed a master normal-beacon.
    [ 65.708126] (00:01:05) master provision, 0 vs. 0
    [ 65.763371] (00:01:05) Beacon ap-ip, 192.168.222.253 vs. 192.168.222.252
    [ 65.843603] (00:01:05) Beacon 3G capability, 0 vs. 0
    [ 65.903007] (00:01:05) Beacon ap-class, 25 vs. 25
    [ 65.959288] (00:01:05) Beacon uptime, 32763 vs. 1993937
    [ 66.021821] (00:01:05) !!! Lose the master election
    [ 66.080173] (00:01:05) !!! Master ---> Slave
    [ 66.131251] Add bridge entry for magic vlan GW, ifindex 8453, 18:64:72:c5:46:da
    [ 66.218782] wait for stm to initialize over
    [ 66.268829] asap_send_elected_master: sent successfully
    [ 67.732507] PHY: eth1 (mdio@ffe24000:01) - Link is Up - 1000/Full
    Sending SIGKILL to all processes.
    Please stand by while rebooting the system.

     

    Might log this with TAC... :smileyhappy:

     

     



  • 7.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 12:01 PM

    Working with TAC on this now...

     

    I seemed to be running a code version on my IAPs that's been pulled from the support site.. I've downgraded but still haven't got this working.



  • 8.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 14, 2014 01:41 PM

    There is a quirk on the AOS based AP-225 with LACP in that you need to have only one link (Eth0) connected to start.  Next, get LACP running on the switch in Active Mode, lastly, connect the second port on the IAP (Eth1).  I'm not sure if the IAP-225 has the same issue or not.  Might be worth a quick test to drop both links then bring up Eth0, check LACP, then connect Eth1.

     

    Let us know how it goes with TAC.



  • 9.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 15, 2014 05:14 AM

    Hi Marcus,

     

    I'm still getting the same results after following your tip.

     

    Here's how it's configured on the switch side:

     

    http://pastebin.com/LQ2i8KGw 

     

    Notice that there are NO LACPDURx counters so it doesn't look like the AP is responding to the LACP requests from the switch.

     

    Here's the LACP status from the AP....

     

    AP01-47:0c# show lacp

    LACP Not Configured

     

    Will post back when I've got some news from TAC... They're currently recreating the setup in their lab..

     

    Cheers

    J



  • 10.  RE: What's the switchport configuration for IAP225's?

    Posted Jan 15, 2014 12:26 PM

    TAC have got this working but had to reboot the AP they were using 2-3 times before the LACP came up.

     

    I'm still unable to get LACP working at all. They're possibly logging it as a bug.



  • 11.  RE: What's the switchport configuration for IAP225's?
    Best Answer

    Posted Jan 16, 2014 05:43 AM

    Ok it appears that the APs do not respond to the LACP requests from the switch when the IP address on the AP is static.

     

    When the IP is set via DHCP it works fine.

     

    The config I'm using is:

     

    (ArubaS2500-48P) #show interface-profile lacp-profile active-short

    LACP "active-short"
    -------------------
    Parameter Value
    --------- -----
    Group identifier 0
    Priority 255
    Mode active
    Timeout short

     

    (ArubaS2500-48P) #show interface-profile switching-profile trunk

    switching profile "trunk"
    -------------------------
    Parameter Value
    --------- -----
    Switchport mode trunk
    Access mode VLAN 1
    Trunk mode native VLAN 1
    Enable broadcast traffic rate limiting Enabled
    Enable multicast traffic rate limiting Disabled
    Enable unknown unicast traffic rate limiting Enabled
    Max allowed rate limit traffic on port in percentage 50
    Trunk mode allowed VLANs 1-4094

     

    (ArubaS2500-48P) #show interface-config port-channel 0

    port-channel "0"
    ----------------
    Parameter Value
    --------- -----
    LACP active-short
    Interface MSTP Profile default
    Interface Rapid PVST Profile default
    Interface GVRP Profile N/A
    Interface Ethernet Link Profile pc_default
    Interface QoS Profile N/A
    Interface Policer Profile N/A
    Ingress Port Mirroring Profile N/A
    Egress Port Mirroring Profile N/A
    Interface Shutdown Disabled
    Interface MTU 1514
    Interface Ingress ACL N/A
    Interface Egress ACL N/A
    Interface QoS Trust Mode aruba-device
    Interface Description N/A
    Interface Switching Profile trunk
    Interface Security Profile N/A
    Static IGMP Multicast Router port for the VLANs 0
    Static MLD Multicast Router port for the VLANs 0
    HSL backup interface N/A
    HSL preemption mode Off
    HSL preemption delay 100
    Port channel member list N/A

     

    LACP Status on the AP:

     

    AP01-47:0c# show lacp

    AP LACP Status
    --------------
    Link Status LACP Rate Num Ports Actor Key Partner Key Partner MAC
    ----------- --------- --------- --------- ----------- -----------
    Up slow 2 17 1 00:1a:1e:09:85:c0
    Slave Interface Status
    ----------------------
    Slave I/f Name Permanent MAC Addr Link Status Member of LAG Link Fail Count
    -------------- ------------------ ----------- ------------- ---------------
    eth0 18:64:72:c5:47:0c Up Yes 0
    eth1 18:64:72:c5:47:0d Up Yes 0
    Traffic Sent on Enet Ports
    --------------------------
    Radio Num Enet 0 Tx Count Enet 1 Tx Count
    --------- --------------- ---------------
    0 0 0
    1 0 0
    non-wifi 2 506

     

    Note: The wired setting on the AP ports are set to trunk, native VLAN 1.

     

    Cheers

    J