Network Management

 View Only
last person joined: 2 days ago 

Keep an informative eye on your network with HPE Aruba Networking network management solutions
Back to discussions
Expand all | Collapse all

Aruba AOS-CX 8320 LACP Blocked Issue

This thread has been viewed 17 times

  • 1.  Aruba AOS-CX 8320 LACP Blocked Issue

    Posted Aug 23, 2024 05:26 AM

    Hey! I have a topology as follows; There is HA between FortiGates and there is Aggregate that contains VLANs on port5-port6 and no problem with the config for sure. And Kat-1-L2, Kat-2-L2, Kat-3-L2, Kat-1-2-L2 switches has all vlans and trunks configured well. So no problem with them. SW-L3-A-1 has vsx between SW-L3-A-2. If I don't start SW-L3-A-2 there is no problem, every switch can access each other but if I start it then all lacp ports blocking and nothing works. I have no idea why. L3-A-1 and L3-A-2 configs in the below. (LAG256 was working very well when only Fortigates and SW-L3-A-1, SW-L3-A-2 works. When I start L2 Switches then it stopped)

    This is what "sh lacp int" says when I start A-2;
    SW-L3-A-1 configuration;
    hostname SW-L3-A-1
lacp system-priority 100
user admin group administrators password ciphertext AQBapdOyMVI/aHJ49fx9rz4K3RAwC2qm1ov9omOnwJZFKnFBYgAAALCHxtu2O24d03aJr49vrD7I6UjNBlX39Vh03MZd0KMBymU9eJIFfKwm2MOgu2Aqhar1tvzQi6S2WMbTu2oIUH8PS+UwVRtXFGgdaIBeJ2mJpfHGTHzHImXGbqoi022pMQtf
led locator on
vrf keepalive
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
!
!
!
ssh server vrf mgmt
vlan 1
vlan 1100
    name BoardOfDirect
vlan 1101
    name HR
vlan 1105
    name AR-GE
vlan 1106
    name IT
vlan 1110
    name Sales
vlan 1120
    name Marketing
vlan 1132
    name NetworkDevice
vlan 1145
    name ServerDevice
interface mgmt
    no shutdown
    ip dhcp
interface lag 1
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
    lacp mode active
interface lag 256
    no shutdown
    description ISL
    no routing
    vlan trunk native 1 tag
    vlan trunk allowed all
    lacp mode active
interface 1/1/1
    no shutdown
    ip address 10.1.91.7/24
interface 1/1/2
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
interface 1/1/3
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
interface 1/1/4
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
interface 1/1/5
    no shutdown
    lag 1
interface 1/1/6
    no shutdown
    lag 1
interface 1/1/7
    no shutdown
    lag 256
interface 1/1/8
    no shutdown
    lag 256
interface 1/1/9
    no shutdown
    vrf attach keepalive
    description VSX keepalive
    ip address 192.168.99.1/30
interface vlan 1132
    ip address 10.8.3.2/25
vsx
    inter-switch-link lag 256
    role primary
    keepalive peer 192.168.99.2 source 192.168.99.1 vrf keepalive
    vsx-sync vsx-global
ip route 0.0.0.0/0 10.8.3.1

    SW-L3-A-2 configuration;

    hostname SW-L3-A-2
user admin group administrators password ciphertext AQBapWhfUon6JJWNQk/xDaGakfV8e/n6Cj09DuDQ9OjzXDmNYgAAAMLEsLdP5myg5irLsam+Eg8QkzRW3vVdow85nPADFXe1PXXany7ko0wJc6kp10OLzfmXzqnyWdZYR2yJE14y6PxhMBkDXFJUdoBHhXqCfezf/6gcfmF4jSMIAZi8+qhAAFMC
led locator on
vrf keepalive
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
!
!
!
!
!
!
ssh server vrf mgmt
vlan 1
vlan 1100
    name BoardOfDirect
vlan 1101
    name HR
vlan 1105
    name AR-GE
vlan 1106
    name IT
vlan 1110
    name Sales
vlan 1120
    name Marketing
vlan 1132
    name NetworkDevice
vlan 1145
    name ServerDevice
interface mgmt
    no shutdown
    ip dhcp
interface lag 1
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
    lacp mode active
interface lag 256
    no shutdown
    description ISL
    no routing
    vlan trunk native 1
    vlan trunk allowed all
    lacp mode active
interface 1/1/1
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
interface 1/1/2
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
interface 1/1/3
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
interface 1/1/4
    no shutdown
    no routing
    vlan trunk native 1
    vlan trunk allowed all
interface 1/1/5
    no shutdown
    lag 1
interface 1/1/6
    no shutdown
    lag 1
interface 1/1/7
    no shutdown
    lag 256
interface 1/1/8
    no shutdown
    lag 256
interface 1/1/9
    no shutdown
    vrf attach keepalive
    description VSX keepalive
    ip address 192.168.99.2/30
interface vlan 1132
    ip address 10.8.3.3/25
vsx
    inter-switch-link lag 256
    role secondary
    keepalive peer 192.168.1.1 source 192.168.1.2 vrf keepalive
    vsx-sync vsx-global
ip route 0.0.0.0/0 10.8.3.1


  • 2.  RE: Aruba AOS-CX 8320 LACP Blocked Issue

    Posted 28 days ago

    If you span the LAG between VSX members you need to use multi-chasis keyword.

    https://www.arubanetworks.com/techdocs/AOS-CX/AOSCX-CLI-Bank/cli_10000/Content/VSX_cmds/int-lag-mul-cha-10.htm

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2024
    ------------------------------

    Original Message