A full Port-channel should be blocking?

I had a topology.

Everything has been properly configured, I veried all channels ports work on all switches... all hosts can talk to each other in their VLAN respective.

I had trunks on all links between all switches.

My show etherchannel summary indicates the Port Channel is GOOD if:

SW1 #show etherchannel summary

Flags: D - low P - port-channel

I have - autonomous s - suspended

H Eve (LACP only)

R - Layer 3 S - Layer2

U - running f - cannot allocate an aggregator

u - unfit to tied selling

w waiting to be aggregated

d default port

Number of channels in use: 2

Number of aggregators: 2

Protocol for the Port-Channel port group

------+-------------+-----------+----------------------------------------------

1 Po1 (SU) LACP Gig0/1 (P) Gig0/2 (P)

However, you will notice that the two ports Gigabit (1 channel Port on this switch) are ORANGE... which means BLOCKED... .and this has been verified when I ran see the spanning tree on this switch

If it's supposed to happen?

Yes, even if these links were green in your portchannel LACP always would play you a loop, for this purpose, he blocked because of the fact that you have more links (aggregate bandwidth) between other switches so it is allowing more transmission between.

Tags: Cisco Network

Similar Questions

  • See the bandwidth for the Port-Channel on Powerconnect & Force10

    Reference Dell dear community,

    Y at - it a command CLI or GUI to see how much bandwidth result after having done a port channel in some port Powerconnect and Force10? Suppose we have 4 port 1 Gb and do 4 ports with 1 port-channel. So actually in this channel port have a bandwidth of 4 GB.

    In Cisco, with the command show interface port-channel 1, we get the result

    switch #sh po int 1
    Port-channel 1 is up, line protocol is up (connected)
    Material is EtherChannel, address is 0064.4026.739a (bia 0064.4026.739a)
    MTU 1500 bytes, BW 4000000 Kbit, DLY 10 usec,
    reliability 255/255, txload 1/255, rxload 1/255
    Encapsulation ARPA, loopback not set
    KeepAlive set (10 sec)
    Full duplex, 1000 Mbps, link type is auto, media type is unknown
    input stream control is turned off, output flow control is not supported
    Members in this channel: Gi0/1 Gi0/2
    Type of the ARP: ARPA, ARP Timeout 04:00
    Last entry of 00:00:00, 00:04:48 output, output hang never
    Final cleaning of "show interface" counters never
    Input queue: 0/75/0/0 (size/max/drops/dumps); Total output drops: 0
    Strategy of queues: fifo
    Output queue: 0/40 (size/max)
    5 minute input rate 2000 bps, 3 packets/s
    5 minute output rate 2000 bps, 3 packets/s

    But if we do this command on Powerconnect, the just result inform port that starts from the port-channel.

    Reference Dell #show interfaces port-channel 1 short

    Ch-Type Hash Type Min-links Channel ports local FRP
    -------   ----------------------------- -------- --------- --------- ---------
    PO1 Active: Static disabled people article gi1/0/1, gi1/0/2 7 1 article
    Item in gi1/0/3, item in gi1/0/4

    Type of hashing algorithm
    1 - the source MAC, VLAN, EtherType, source module and port Id
    2 - destination MAC, VLAN, EtherType, module source and port Id
    3 - source IP and TCP/UDP source port
    4 - destination IP and destination TCP/UDP port
    5 source/Destination MAC, VLAN, EtherType, MODID/source port
    6 source/Destination IP and port TCP/UDP source / destination
    7 - improved hash mode

    Can you help us find the answer?

    Thank you

    Kind regards

    Aziz

    The PowerConnect switches do not have the ability to show as much detail as the Force10 can. The RMON tables have an interface use %, what may be the closest we can do on the PowerConnect switch.

    #show rmon statistics

    I've seen some monitoring software which was able to question the switch via SNMP and get some information of bandwidth. However, this can be a bit inconsistent, according to which switch and what software is used.

    The MIBs/OID can be downloaded with the software switch.

    http://www.Dell.com/support/home/us/en/rc959303/products/ser_stor_net/networking/net_fxd_prt_swtchs

  • Configuration port-channel, DTP, disabling

    Hi all

    I had a problem on the day where I wanted to attach a pile of 3750 x 2 to the network, the core is a 6500.

    There was a link configured for the core of the 3750 he had the configuration necessary trunk with BPDUFILTER active

    at the end of the base he had the standard configuration of trunk. The link is on the rise and work.

    Went to get a second battery for the heart link. Decided that DTC must be turned off at the end of the SWITCHPORT NONEGOTIATE battery

    the normal chest on the port configuration on the port channel port joined. Then suddenly the newspapers went crazy and right now, I need

    Spanning tree went crazy and started blocking areas of the network to avoid loops. There is STDS running in the network

    I had similar errors to this % SW_MATM-4-MACFLAP_NOTIF

    I pulled the battery cables and all services affected later came back.

    I know that enable the BPDUFILTER option stops at the port to participate in STP.

    Please could someone confirm due to the incompatibility of the config on these ports it has this problem or is there something I missed here

    Thank you mnay

    The BPDU filter is the root of the problem.

    You can't have two active rising running without creating a loop, unless they run into a PaGP/LACP-EtherChannel configuration. By having one or two links running with a filter BPDU, spanning Protocol tree on the 6500 didn't know that a link had to be in a deadlock state and he was panicked when MAC addresses on the stack of 3750 began to stir between interfaces.

    3750 cross media - stack EtherChannel using LACP, so if you want the resilience of two connections without having to factor in the covering tree branches, it is a good idea to combine the two in a group of channels and have both the 3750 and 6500 treat them as a single logical connection.

    If you want to keep them separated, you will need to remove the filters BPDU these ports and leave spanning tree figure things out properly.

  • IPS Inline Mode Interface - you can use a port channel?

    Hello

    I am trying to determine if you have a 2-gig Layer 3 Port channel through a 4260 IPS appliance. See the attached diagram. Is this possible?

    The customer, I work with would prefer not to enter this cost equal to Port-Channel 1 gig of links (I don't think that there is a difference in performance...) However, I think that if they want the device inline, as the diagram shows - they will have to break the port-channel. Is this a correct assumption?

    Thank you

    Brad

    Asymmetric traffic will prevent the sensor works best, he is capable. There is a configuration that can be done to allow the detector deployed in an asymmetrical environment, BUT it can affect the ability of the sensor to detect attacks, allows through evasions which would have been prevented and will not affect general performance of the sensor.

    If running in unbalanced mode should be avoided if possible. BT in cases where it cannot then the sensor always allows with degraded functionality.

    Traffic spikes above what the sensor can manipulate at will cause ignored packets. There is no help for too much traffic.

    The relief you talk I guess is the bypass function. The bypass feature does not affect during the subscription of the sensor. The bypass feature will only kick if the analytical engine crashes due to a bug.

  • vPC and VSS port-channel uplinks

    Hello Forum team!

    Currently I have a configuration of a couple of Nexus 5548UP in a field of vPC with a couple of Nexus 2248TP aircraft in a double scenario hosted for the access layer (FEX in a vPC also). Core/distribution, there are a pair of 6509 cluster VSS. Now I configured a regular port-channel every 5K to the VSS functionality and works as expected. My question is this: given that in the vPC a 5K is the main and the other is secondary, a configurable vPC for the uplinks to the VSS instead of a channel of regular port of each 5 K?

    In addition, configurations must be replicated manually on both Nexus 5 K? I'm in denial about this. I'm used to how VSS works.

    Thanks to the advanced guys!

    Hello

    You can use a vPC of the pair of Nexus 5 K to the VSS cluster. There is a white paper Cisco Catalyst 6500 VSS and Cisco Nexus 7000 vPC of interoperability and best practices that will in this. While the white paper is for Nexus 7000 are you interested to do probably is the configuration shown in Figure 2 and so the scenario and considerations are the same.

    On the Nexus switches with vPC there are still two control i.e. plans, the primary and secondary that you mention. For all the configurations that should be applied at the primary and secondary, you can manually configure on the two switches or use the synchronization of Configuration characteristic Nexus (see Configuration synchronization Operations for more details).

    He was 15-months we have looked at the function so probably things have changed, but following issues with our tests, and we were see reported here in the forum at this time, we decided not to use the config Sync feature. Outside all bugs, there are some operational changes to consider and then make sure that you are comfortable with how config-sync works before putting it in a production environment.

    Concerning

  • SH cdp neighbors port-channel command

    Hello

    I have a strange problem with the command sh cdp neighbors port-channel on my 3750 and 4500switches.

    When I execute the command ' sh cdp neighbors port-channel. I don't see my say on this interface.

    The command 'sh cdp nei' with the port-channel works very well and shows all my neighbors.

    switch #sh cdp neighbors port-channel 1

    Ability code: R - router, T - bridge Trans, B - road Source bridge
    S switch, H - host, I - IGMP, r - Repeater, P - phone.
    D / remote, C - AEVC, M - two port Mac relay

    Device ID Local Intrfce Holdtme Port platform capability ID

    switch #sh ether summary
    Flags: - Low P - D bundled in port-channel
    I have - autonomous s - suspended
    H Eve (LACP only)
    R - Layer 3 S - Layer2
    U - running f - cannot allocate an aggregator

    M - don't use, minimum contacts not satisfied
    u - unfit to tied selling
    w waiting to be aggregated
    d default port

    Number of channels: 1

    Number of aggregators: 2

    Protocol for the Port-Channel port group
    ------+-------------+-----------+-----------------------------------------------
    1 Po1 (SU) LACP Gi1/0/1 (P) article gi1/0/2 P)

    I tried the command on multiple versions of IOS, but always the same question. When I try the command on a 6506-E, it works fine...

    This ordering platform is connected?

    SWITCH2 # sh etherchannel summary
    Flags: - Low P - D bundled in port-channel
    I have - autonomous s - suspended
    H Eve (LACP only)
    R - Layer 3 S - Layer2
    U - N running - is not in service, no aggregation
    f cannot allocate an aggregator

    M not in use, no aggregation due to minimum links has not met
    m don't use, port do not associate due to not meeting minimum links
    u - unfit to tied selling
    d default port

    w waiting to be aggregated
    Number of channels: 7
    Number of aggregators: 7

    Protocol for the Port-Channel port group
    ------+-------------+-----------+-----------------------------------------------
    1 Po1 (SU) LACP Gi1/1 (P) Gi1/2 (P)
    ...

    SWITCH2 #sh cdp nei port-channel 1
    Ability code: R - router, T - bridge Trans, B - road Source bridge
    S switch, H - host, I - IGMP, r - Repeater, P - phone

    Device ID Local Intrfce Holdtme Port platform capability ID
    switch to Gig 1 / 2 123 S I Gig 1/0/1
    switch to Gig 1 / 1 123 S I Gig 1/0/2

    Thank you

    Best regards

    Joris

    Hi Joris,

    It is a known problem and is documented as a cosmetic bug internal. Logically speaking, CDP is not supported on etherchannel interfaces and 'sh cdp port-channel' command should not be available.

    The platform of 6500, although the "port channel show cdp neighbor" returns the result, it's just for convenience and does not mean that the CDP is supported on the port channels. In fact, if you try to enable CDP on port-channel on 6500, it generates an error:

    PO1 #int 6500 (config)

    6500(Config-if) #cdp en

    % CDP is not supported on this interface, or for this encapsulation

    If you run "debug cdp events", you can see the packets exchanged on the physical interface rather than on the port-channel. Correct way is to check the neighborship of the cdp on the physical interfaces.

    See you soon,.

    Shashank

    Please rate if you find the content useful

  • IOS NXOS VPC PORT channel

    Hello

    I have a pair of Nexus 5 K in an area of the VPC and few 2960's as members of the VPC, with a port to the domain channel.

    Topology is:

    5K 1 and 5 K 2 in the area of the VPC

    VPC 5 1 K and 5 K 2 to 2960

    2960 a gi0/1 and gi0/2 in 1 port channel

    Gi0/1 5 k 1, gi0/2 5 k 2

    I know what I'm going to ask can be completely against the purpose of the VPC, but I'm looking for a way to promote gi0/1 for traffic, rather than balancing on gi0/1 and gi0/2. The reaon for this is I want to take advantage of the absence of loop that provides mail ORDER, but would also like to have a link primary and secondary, as the majority of traffic should in fact go through 5K 1, rather than 5 K 2.

    Any suggestion is welcome.

    Thanks in advance

    Anthony

    Hi Anthony,.

    The Cisco NX - OS software load balance traffic across all operational interfaces in a portchannel by chopping the addresses in a numeric value that selects one of the links in the channel. Port channels provides default load balancing. It uses IP addresses, MAC addresses or layer port numbers 4 to select the port-channel-balancing link of the load. The port-channel load balancing uses the source or destination or port addresses, or both the source and ports or destination addresses.

    You can configure the mode of load balancing to be applied to all port channels that are configured on all of the device, or the specified modules. Each module configuration takes precedence over the configuration of load balancing for the entire device. You can configure a single mode of load balancing for the whole device, a different mode for specified

    modules and another mode of the other specified modules. You can not configure the port-channel load balancing method.

    You can configure the type of balancing algorithm used. You can choose the balancing algorithm that determines which Member port to select for the evacuation traffic by looking at the fields of the frame.

    Note: The mode of load balancing by default for layer 3 interfaces is the IP source and destination address, and the mode of the load balancing by default for non - IP interfaces is the source MAC address and destination.

    The configuration mode, you can try different method of load-balancing,

    port-channel - the balance of the load {dest-ip-port | dest-ip-port-vlan |}

    destination-ip-vlan. destination-mac | destination-port | source-dest-ip-port | source-dest-ip-port-vlan. source-dest-ip-vlan. source-dest-mac | source-dest-port | Source-ip-port | Source-ip-port-vlan. Source-ip-vlan. source-mac | source-port} [number of the module]

    To sum up: I can't tell which port would be chosen, it depends purely on image type you send with the combination method of load balancing.

    After you change you know also from the command which link takes the traffic.

    NEXUS2-SPAN # show the port-channel - the balance of the charge-transfer port-channel 71 src - ip 1.1.1.1 route dst - ip 2.2.2.2 VLANs 51 2 interface module

    Module 2: Missing params will be substituted by 0.

    Load balancing algorithm: src - dst ip-l4port

    RBH: port id out 0xb0: Ethernet8/8

    We can try also to rework the same NLB on the 2960 also. Is it purely depends on the algorithm of load balancing. Below is for 2960 balancing tweaking,

    http://www.Cisco.com/en/us/docs/switches/LAN/catalyst2960/software/release/12.2_53_se/configuration/guide/swethchl.html

    Even after doing this that I wouldn't say 100 percent, he would choose a link.

    I hope this helps!

    Thank you

    Richard.

    * Rate if this is useful

  • Microsoft NLB on a Port Channel

    Hi people,

    I read that static entry ARP is necessary to ensure the VIP created in Microsoft NLB cluster work properly with the network switch.

    http://KB.VMware.com/selfservice/microsites/search.do?cmd=displayKC & docType = kc & docTypeID = DT_KB_1_1 & externalId = 1006525

    However, each of the two VM in my NLB cluster is connected to a vDS configured with tagging VLAN. I have several VLANs on a channel of the VDS service port.

    Use of VLAN tagging/Port Channel make a difference in the procedure for setting up the static ARP entry?

    Thank you

    Michael

    As long as your NLB nodes are on the same vlan, you should be fine.

  • My C drive is full, what files should not be transferred to the E drive?

    Original title: complete C drive.

    My C drive is full, what files should not be transferred to the E drive? I am running Windows XP Home Ed

    Have you thought about doing a bigger hard drive?

    See: http://support.microsoft.com/kb/956324

    How to recover disk space

    As for what you can transfer on the E drive, any video, music or other personal files may be.

     
  • Unable to access windows media player toolbar and also how do I check that port 1935 is not blocked?

    Original title: another question about Windows Media Player

    Some about WMP reading, apparently, there's a tab "Tools".  I don't see.  Where he could hide?  Also, I use the firewall of Windows (XP).  How can I check to see that port 1935 is not blocked?

    Hello

    To access the windows media player toolbar, press Alt, or right click on the arrows at the top of the media player.

    See the articles that contains information about firewall ports.
    How to manually open ports in Internet Connection Firewall in Windows XP
    http://support.Microsoft.com/kb/308127
    Troubleshooting settings of Windows Firewall in Windows XP Service Pack 2 for advanced users
    http://support.Microsoft.com/kb/875357
    Windows Firewall may block some programs to communicate on the Internet after you install Windows XP Service Pack 2
    http://support.Microsoft.com/kb/842242

  • Hung up on the bad test page port (LPT1) and tail blocks to HP C4200 w/USB connect... will not erase

    Hanging test page to the wrong port (LPT1) and tail blocks to HP C4200 w/USB connect... don't delete.__How cancel?  Pls help.  TKS Ron Moore

    Ideas page: hanging in wrongly Test prt (LPT1) and tail blocks to HP C4280 w/USB connect... will not erase.

    How to cancel?  Pls help.   TKS, Ron Moore

    Hi Ron,

    1. how many printers is connected to the computer?

    2. did you of recent changes on the computer?

    3. what happens when you try to change printer (LPT1) port

    Method 1

    See the link below and run them the fixit tool available, check if it helps.

    Problems printing and printing errors

    http://support.Microsoft.com/mats/printing_problems/en-us?EntryPoint=lightbox

    Method 2

    If the previous step fails, then I suggest that you restart the computer the print spooler service and check if it works.

    A print spooler is a system service that temporarily stores the disk printing hard or in memory until the printer is ready to print.

    To change or restart the print spooler service

    You must be logged on as administrator to perform these steps.

    (a) open administrative tools by clicking the Start button, click Control Panel, clicking system and Maintenance, and then clicking Administrative Tools.

    (b) double click Services. If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.

    (c) right click on the print spooler service, and then click Properties.

    (d) under the tab general , next to Startup type, make sure thatAutomatic is selected.

    (e) if the service is not already running, under Service status, click pie Sand then clickOK. If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.

    Solve printer problems

    http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-printer-problems

    I hope this helps!

    Halima S - Microsoft technical support.

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • FC Port-Channel does not

    Hello

    I need help, I'm setup CF port-channel between 9148 MDS and Cisco fabric Interconnect 6248 and the port-channel does not work. He said no operational members.

    For the MDS, see configuration below:

    NPIV #feature SW (config)

    SW (config) #feature fport-channel-trunk

    SW (config) #interface fc1/17-18

    SW(config-f) force Group-channel mode # 63

    SW(Config-if) F #switchport mode

    SW(Config-if) #switchport trunk-allowed vsan 1-2 (I have only vsan 1 and 2)

    SW (config) #no close

    SW (config) #interface 63 port channel

    SW(Config-if) F #switchport mode

    SW(config-f) #switchport trunk-allowed vsan 1-2

    SW (config) - #no close

    Note: the ports are assigned to vsan 2

    See the attached screenshots for interconnection fabric config

    On the fabric of interconnections switchport mode are defined E. What I have to change to F. If yes where can I change since the option is not there in the UCS Manager?

    have you added the VSANS on the UCSM as well?

    What Code are you runnig on the San Norhbound selector?

    You can be hitting

    https://Tools.Cisco.com/bugsearch/bug/ CSCty04686

  • Total for the port-channel when speed config speed 1000-nexus5548?

    Hello world.

    now I connect cisco 6509 and nexus 5548up using two link of 1000M and I want the two link port-Channel binding.

    5548up port 10GE port cisco 6509 is 1GE, I config speed 1000 in nexus5548 ethernet port, and I find

    the speed 1000 order auto config interface port-channel, so I would like to know the total speed in this channel port

    is 1000M and 2000M when port-channel speed config 1000? I appreciate your help!

    the topology like this:

    1000M

    --------------------------------------------

    6509 port-channel speed 1000M nexus5548UP

    ----------------------------------------------

    1000M

    Hi again

    The speed of the links and portchannel is 1000M but the bandwidth of the portchannel is 2000M

  • MDS configuration for port channel

    I tried to put in place the new download FC port channel to a pair of 9124 s MDS, but as I don't know enough on the side MDS, I can't the link to come. Are there references available anywhere say you blow by blow exactly how to set up the side MDS of the channel of the port? Or maybe an example of configuration work?

    Thank you

    I don't think it's possible to configure the fabric of interconnections, FC switch mode that only VAN is based on those. The only mode of switch that is taken in charge and possible to configure is the local network Ethernet switching mode.

    I have configured the week last on a pair of 9124 s MDS and needed to activate the F port trunking and channeling Protocol feature by using this command

    "feature fport-channel-trunk.

    After that, I had to run SAN Port Channeling. Here's a snipit of my configuration:

    npiv functionality
    fport-channel-trunk feature

    interface port-channel 11
    active channel mode
    rate switchport dedicated mode

    interface fc1/1
    port-license purchase
    Channel-Group 11
    no downtime

    interface fc1/2
    port-license purchase
    Channel-Group 11
    no downtime

  • Port-channel problem between fabric Interconnect and vPC N7K

    Hi all

    I have a problem with the Port Uplink channel between fabric interconnect with N7K using vPC

    It's my network for the UCS deployment topology

    N7K I configured vPC for red link and green linkto the fabric Interconnect A I has configured the Port-Channel with Member is Port 1 and Port 2, uplink is red link. Interconnection fabric B, I have configured the Port-Channel with Member's Port 1 and Port 2, uplink's green link.

    The interface port-channel on N7K show is good, each port-channel upwards and have all members. But the fabric Interconnnect, when I see in the UCS Manager, the status of the Port-Channel on Fabic A and fabric B dysfunction not more info: no operational Member. Although all the link is a link to the top and I've got the status of the Port Channel is enabled in the UCS Manager. When I see the properties Port 1, Port to Port-Channel 2, I see the number of members status is: individual. This means channel port is not up and no member in this configuration. I want to using the port-channel load balance and more bandwidth for the uplink of 20Gig. I don't understand why?

    Please help me solve this problem, I have to send the screenshot of UCS Manager when I show the status of the Port-Channel and Port-member in port-channel to reach items.

    Can someone help me solve this problem, thanks a lot. References, please include elements for more details on the fault.

    Thank you

    Trung.

    Hello Nguyen,

    Since the two N7k please collect:

    SH cdp nei

    SH run membership in. X int

    SH sum port-chan

    Thank you

    Matthew

Maybe you are looking for

  • New tab about empty to save memory

    I have the same problem of (https://support.mozilla.org/en-US/questions/1084992) [this one], but in my case, I put 'newtab' to ' topic: empty ' because I have a very old machine and I don't want to save memory, if I install an Add - it comes to do I

  • Bytes to Port property node. When to use and when not?

    Hi all Ive frequently used bytes to port property node performing bed series and have not experienced any problems.  I've heard mixed on this subject reviews and I would like to know when to use and when not to use it. Thanks for any input.

  • Acer Predator G3-710 GTX 1070 overheating

    Hey guys So I have an acer Predator G3-710 Intel Core i5-64008 GB RAMGTX 1070 But it keeps overheating when im playing games on ultra high heat. And since there were "IceTunnel thermal system" theres no fans in the enclosure. A fan will simply solve

  • Difficult to install windows xp on my hp mini 110-3012 you

    IWAS, try to install windows XP on my hp mini 110-3012 tu.but unfortunatelly cant. so I need help of pizza I Press f9 at startup and file loading but choose what time drive it couldn't find my drive.so I try change the bios sata setting, but I could

  • Install the SDK on Windows 8

    Has anyone managed to install Air SDK 2.0.x on Windows 8 machine? I installed Flash Builder 4.6 very well but when I go to install the SDK in the screen where it asks that if it should integrate with Flash Builder it I cannot type any other path than