Network Management

 View Only
last person joined: yesterday 

Keep an informative eye on your network with HPE Aruba Networking network management solutions

Aruba AOS-CX 8320 LACP Blocked Issue

This thread has been viewed 6 times
  • 1.  Aruba AOS-CX 8320 LACP Blocked Issue

    Posted 4 hours ago

    Hey! I have a topology as follows; There is HA between FortiGates and there is Aggregate that contains VLANs on port5-port6 and no problem with the config for sure. And Kat-1-L2, Kat-2-L2, Kat-3-L2, Kat-1-2-L2 switches has all vlans and trunks configured well. So no problem with them. SW-L3-A-1 has vsx between SW-L3-A-2. If I don't start SW-L3-A-2 there is no problem, every switch can access each other but if I start it then all lacp ports blocking and nothing works. I have no idea why. L3-A-1 and L3-A-2 configs in the below. (LAG256 was working very well when only Fortigates and SW-L3-A-1, SW-L3-A-2 works. When I start L2 Switches then it stopped)

    This is what "sh lacp int" says when I start A-2;
    SW-L3-A-1 configuration;
    hostname SW-L3-A-1
    lacp system-priority 100
    user admin group administrators password ciphertext AQBapdOyMVI/aHJ49fx9rz4K3RAwC2qm1ov9omOnwJZFKnFBYgAAALCHxtu2O24d03aJr49vrD7I6UjNBlX39Vh03MZd0KMBymU9eJIFfKwm2MOgu2Aqhar1tvzQi6S2WMbTu2oIUH8PS+UwVRtXFGgdaIBeJ2mJpfHGTHzHImXGbqoi022pMQtf
    led locator on
    vrf keepalive
    ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
    ntp enable
    !
    !
    !
    !
    !
    !
    ssh server vrf mgmt
    vlan 1
    vlan 1100
        name BoardOfDirect
    vlan 1101
        name HR
    vlan 1105
        name AR-GE
    vlan 1106
        name IT
    vlan 1110
        name Sales
    vlan 1120
        name Marketing
    vlan 1132
        name NetworkDevice
    vlan 1145
        name ServerDevice
    interface mgmt
        no shutdown
        ip dhcp
    interface lag 1
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
        lacp mode active
    interface lag 256
        no shutdown
        description ISL
        no routing
        vlan trunk native 1 tag
        vlan trunk allowed all
        lacp mode active
    interface 1/1/1
        no shutdown
        ip address 10.1.91.7/24
    interface 1/1/2
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
    interface 1/1/3
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
    interface 1/1/4
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
    interface 1/1/5
        no shutdown
        lag 1
    interface 1/1/6
        no shutdown
        lag 1
    interface 1/1/7
        no shutdown
        lag 256
    interface 1/1/8
        no shutdown
        lag 256
    interface 1/1/9
        no shutdown
        vrf attach keepalive
        description VSX keepalive
        ip address 192.168.99.1/30
    interface vlan 1132
        ip address 10.8.3.2/25
    vsx
        inter-switch-link lag 256
        role primary
        keepalive peer 192.168.99.2 source 192.168.99.1 vrf keepalive
        vsx-sync vsx-global
    ip route 0.0.0.0/0 10.8.3.1

    SW-L3-A-2 configuration;

    hostname SW-L3-A-2
    user admin group administrators password ciphertext AQBapWhfUon6JJWNQk/xDaGakfV8e/n6Cj09DuDQ9OjzXDmNYgAAAMLEsLdP5myg5irLsam+Eg8QkzRW3vVdow85nPADFXe1PXXany7ko0wJc6kp10OLzfmXzqnyWdZYR2yJE14y6PxhMBkDXFJUdoBHhXqCfezf/6gcfmF4jSMIAZi8+qhAAFMC
    led locator on
    vrf keepalive
    ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
    ntp enable
    !
    !
    !
    !
    !
    !
    ssh server vrf mgmt
    vlan 1
    vlan 1100
        name BoardOfDirect
    vlan 1101
        name HR
    vlan 1105
        name AR-GE
    vlan 1106
        name IT
    vlan 1110
        name Sales
    vlan 1120
        name Marketing
    vlan 1132
        name NetworkDevice
    vlan 1145
        name ServerDevice
    interface mgmt
        no shutdown
        ip dhcp
    interface lag 1
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
        lacp mode active
    interface lag 256
        no shutdown
        description ISL
        no routing
        vlan trunk native 1
        vlan trunk allowed all
        lacp mode active
    interface 1/1/1
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
    interface 1/1/2
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
    interface 1/1/3
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
    interface 1/1/4
        no shutdown
        no routing
        vlan trunk native 1
        vlan trunk allowed all
    interface 1/1/5
        no shutdown
        lag 1
    interface 1/1/6
        no shutdown
        lag 1
    interface 1/1/7
        no shutdown
        lag 256
    interface 1/1/8
        no shutdown
        lag 256
    interface 1/1/9
        no shutdown
        vrf attach keepalive
        description VSX keepalive
        ip address 192.168.99.2/30
    interface vlan 1132
        ip address 10.8.3.3/25
    vsx
        inter-switch-link lag 256
        role secondary
        keepalive peer 192.168.1.1 source 192.168.1.2 vrf keepalive
        vsx-sync vsx-global
    ip route 0.0.0.0/0 10.8.3.1