Solved

Extreme summit x440 access port suddenly down

  • 15 November 2020
  • 8 replies
  • 53 views

Dear All Expert,

 

I’m facing this issue the access port is suddenly down. And my client told me the EAPS ring is down. And I am not sure is the ring down cause the access port devices down also. And I hope get heard some advice from the expert at here. Below is my log file.

 

09/26/2020 13:58:14.04 <Info:vlan.msgs.portLinkStateUp> Port 13 link UP at speed 100 Mbps and full-duplex
09/26/2020 13:57:59.60 <Info:vlan.msgs.portLinkStateDown> Port 13 link down

09/26/2020 02:48:04.87 <Info:vlan.msgs.portLinkStateUp> Port 6 link UP at speed 100 Mbps and full-duplex
09/26/2020 02:47:50.68 <Info:vlan.msgs.portLinkStateDown> Port 6 link down
09/24/2020 11:26:32.32 <Info:vlan.msgs.portLinkStateUp> Port 4 link UP at speed 100 Mbps and full-duplex
09/24/2020 11:26:18.47 <Info:vlan.msgs.portLinkStateDown> Port 4 link down
09/24/2020 04:30:07.95 <Info:vlan.msgs.portLinkStateUp> Port 20 link UP at speed 100 Mbps and full-duplex
09/24/2020 04:29:54.37 <Info:vlan.msgs.portLinkStateDown> Port 20 link down
09/24/2020 03:08:44.08 <Info:vlan.msgs.portLinkStateUp> Port 21 link UP at speed 100 Mbps and full-duplex
09/24/2020 03:08:29.68 <Info:vlan.msgs.portLinkStateDown> Port 21 link down
09/24/2020 03:05:11.46 <Info:vlan.msgs.portLinkStateUp> Port 18 link UP at speed 100 Mbps and full-duplex
09/24/2020 03:04:57.30 <Info:vlan.msgs.portLinkStateDown> Port 18 link down
09/24/2020 02:59:36.04 <Info:vlan.msgs.portLinkStateUp> Port 10 link UP at speed 100 Mbps and full-duplex
09/24/2020 02:59:21.92 <Info:vlan.msgs.portLinkStateDown> Port 10 link down
09/24/2020 02:16:49.67 <Info:vlan.msgs.portLinkStateUp> Port 5 link UP at speed 100 Mbps and full-duplex
09/24/2020 02:16:35.85 <Info:vlan.msgs.portLinkStateDown> Port 5 link down
09/23/2020 21:59:56.72 <Info:vlan.msgs.portLinkStateUp> Port 2 link UP at speed 100 Mbps and full-duplex
09/23/2020 21:59:42.23 <Info:vlan.msgs.portLinkStateDown> Port 2 link down
09/23/2020 20:45:30.26 <Info:vlan.msgs.portLinkStateUp> Port 17 link UP at speed 100 Mbps and full-duplex
09/23/2020 20:45:16.43 <Info:vlan.msgs.portLinkStateDown> Port 17 link down
09/23/2020 15:47:42.66 <Info:vlan.msgs.portLinkStateUp> Port 16 link UP at speed 100 Mbps and full-duplex

 

Best Regards

Chee Wong

icon

Best answer by cheewong 17 November 2020, 15:14

Dear Miguel,

 

I had found out the root cause. There is 1 of the access switch is missing. That a reason the ring is detected. Once I revamp the uplink and change the ring port configuration. Finally the ring is up.

 

Best Regards

Chee Wong 

View original

8 replies

Userlevel 6
Badge +1

cheewong,

 

You’ll have to share more info.

show config

show eaps

show eaps <eaps domain name>

Mig

Hi Miguel,

 

Below is the info. Also I found out at the EAPS “Ring-3” and “Ring-5” having error when show log. Appreciate that you can guide me how to solve this problem.

11/16/2020 17:16:32.45 <Noti:DM.Notice> Slot-1: Backup is in SYNC
11/16/2020 17:16:30.46 <Info:EAPS.RxPduLinkDown> Slot-1: EAPSD ring-R5 - Received Link-Down-Pdu (MAC = 00:04:96:9B:B1:4B)
11/16/2020 17:16:30.43 <Info:EAPS.RxPduLinkDown> Slot-1: EAPSD ring-R5 - Received Link-Down-Pdu (MAC = 00:04:96:9B:81:A4)
11/16/2020 17:16:30.43 <Info:EAPS.RxPduLinkDown> Slot-1: EAPSD ring-R3 - Received Link-Down-Pdu (MAC = 00:04:96:9B:80:9E)
11/16/2020 17:16:30.43 <Info:EAPS.RxPduLinkDown> Slot-1: EAPSD ring-R3 - Received Link-Down-Pdu (MAC = 00:04:96:9B:81:39)
 

----------------------------------------------------------------------------------------------------------------------------------

configure vlan default delete ports all
configure vr VR-Default delete ports 1:1-34,2:1-34
configure vr VR-Default add ports 1:1-34,2:1-34
configure vlan default delete ports 1:1-34,2:1-34
create vlan "ACAMS"
configure vlan ACAMS tag 15
create vlan "CCTV_DVMS-1"
configure vlan CCTV_DVMS-1 tag 10
create vlan "CCTV_DVMS-2"
Presconfigure vlan CCTV_DVMS-2 tag 11
create vlan "control-R1"
configure vlan control-R1 tag 4011
create vlan "control-R2"
configure vlan control-R2 tag 4012
create vlan "control-R3"
configure vlan control-R3 tag 4013
create vlan "control-R4"
configure vlan control-R4 tag 4014
create vlan "control-R5"
configure vlan control-R5 tag 4015
create vlan "control-R6"
configure vlan control-R6 tag 4016
create vlan "Intercom_IPAVIS-1"
configure vlan Intercom_IPAVIS-1 tag 12
create vlan "Intercom_IPAVIS-2"
configure vlan Intercom_IPAVIS-2 tag 13
create vlan "Intercom_IPAVIS-3"
configure vlan Intercom_IPAVIS-3 tag 14
create vlan "Manage"
configure vlan Manage tag 100
configure ports 1:29 auto off speed 10000 duplex full 
configure ports 1:30 auto off speed 10000 duplex full 
configure ports 1:31 auto off speed 10000 duplex full 
configure ports 1:32 auto off speed 10000 duplex full 
configure ports 1:33 auto off speed 10000 duplex full 
configure ports 1:34 auto off speed 10000 duplex full 
configure ports 2:29 auto off speed 10000 duplex full 
configure ports 2:30 auto off speed 10000 duplex full 
configure ports 2:31 auto off speed 10000 duplex full 
configure ports 2:32 auto off speed 10000 duplex full 
configure ports 2:33 auto off speed 10000 duplex full 
configure ports 2:34 auto off speed 10000 duplex full 
configure vlan ACAMS add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan CCTV_DVMS-1 add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan CCTV_DVMS-2 add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan control-R1 add ports 1:28,2:28 tagged  
configure vlan control-R2 add ports 1:2,2:2 tagged  
configure vlan control-R3 add ports 1:3,2:3 tagged  
configure vlan control-R4 add ports 1:4,2:4 tagged  
configure vlan control-R5 add ports 1:5,2:5 tagged  
configure vlan control-R6 add ports 1:6,2:6 tagged  
configure vlan Default add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan Intercom_IPAVIS-1 add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan Intercom_IPAVIS-2 add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan Intercom_IPAVIS-3 add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan Manage add ports 1:1-6,1:28,2:1-6,2:28 tagged  
configure vlan Manage add ports 1:27,2:27 untagged  
configure vlan Manage ipaddress 10.10.10.254 255.255.255.0
enable ipforwarding vlan Manage
configure vlan CCTV_DVMS-1 ipaddress 192.168.10.254 255.255.255.0
enable ipforwarding vlan CCTV_DVMS-1
configure vlan CCTV_DVMS-2 ipaddress 192.168.11.254 255.255.255.0
enable ipforwarding vlan CCTV_DVMS-2
configure vlan Intercom_IPAVIS-1 ipaddress 192.168.12.254 255.255.255.0
enable ipforwarding vlan Intercom_IPAVIS-1
configure vlan Intercom_IPAVIS-2 ipaddress 192.168.13.254 255.255.255.0
enable ipforwarding vlan Intercom_IPAVIS-2
configure vlan Intercom_IPAVIS-3 ipaddress 192.168.14.254 255.255.255.0
enable ipforwarding vlan Intercom_IPAVIS-3
configure vlan ACAMS ipaddress 192.168.15.254 255.255.255.0
enable ipforwarding vlan ACAMS
 

* Slot-1 Astaka-Core-SW.19 # show eaps

EAPS Enabled: Yes
EAPS Fast-Convergence: On
EAPS Display Config Warnings: On
EAPS Multicast Add Ring Ports: Off
EAPS Multicast Send IGMP and MLD Query: On
EAPS Multicast Temporary Flooding: Off
EAPS Multicast Temporary Flooding Duration: 15 sec
Number of EAPS instances: 6
# EAPS domain configuration :
----------------------------------------------------------------------------------
Domain         State           Mo  En  Pri    Sec    Control-Vlan VID   Count Prio
----------------------------------------------------------------------------------
ring-R1        Complete        M   Y    1:28   2:28  control-R1   (4011) 8     N
ring-R3        Failed          M   Y    1:3    2:3   control-R3   (4013) 8     N
ring-R4        Complete        M   Y    1:4    2:4   control-R4   (4014) 8     N
ring-R5        Failed          M   Y    1:5    2:5   control-R5   (4015) 8     N
ring-R6        Complete        M   Y    1:6    2:6   control-R6   (4016) 8     N
----------------------------------------------------------------------------------
Flags : (!) CFM Down
* Slot-1 Astaka-Core-SW.20 #
 

* Slot-1 Astaka-Core-SW.21 # show eaps ring-R3

  Name: ring-R3                                 Priority: Normal
  State: Failed                                 Running: Yes
  Enabled: Yes    Mode: Master
  Primary port:   1:3           Port status: Up Tag status: Tagged
  Secondary port: 2:3           Port status: Up Tag status: Tagged
  Hello Egress Port: Primary
  Hello timer interval: 1  sec  0  millisec
  Fail timer interval:  3  sec  0  millisec
  Fail Timer expiry action: Send alert
  Last valid EAPS update: None till now.
  EAPS Domain has following Controller Vlan:
    Vlan Name                    VID
    control-R3                   4013
  EAPS Domain has following Protected Vlan(s):
    Vlan Name                    VID
    ACAMS                        15
    Manage                       100
    Default                      1
    CCTV_DVMS-1                  10
    CCTV_DVMS-2                  11
    Intercom_IPAVIS-1            12
    Intercom_IPAVIS-2            13
    Intercom_IPAVIS-3            14
  Number of Protected Vlans: 8
 

* Slot-1 Astaka-Core-SW.22 # show eaps ring-R5

  Name: ring-R5                                 Priority: Normal
  State: Failed                                 Running: Yes
  Enabled: Yes    Mode: Master
  Primary port:   1:5           Port status: Up Tag status: Tagged
  Secondary port: 2:5           Port status: Up Tag status: Tagged
  Hello Egress Port: Primary
  Hello timer interval: 1  sec  0  millisec
  Fail timer interval:  3  sec  0  millisec
  Fail Timer expiry action: Send alert
  Last update: From Master Id 02:04:96:99:6f:4a, at Sat Aug 15 02:39:51 2020
  EAPS Domain has following Controller Vlan:
    Vlan Name                    VID
    control-R5                   4015
  EAPS Domain has following Protected Vlan(s):
    Vlan Name                    VID
    ACAMS                        15
    Manage                       100
    Default                      1
    CCTV_DVMS-1                  10
    CCTV_DVMS-2                  11
    Intercom_IPAVIS-1            12
    Intercom_IPAVIS-2            13
    Intercom_IPAVIS-3            14
  Number of Protected Vlans: 8

* Slot-1 Astaka-Core-SW.23 #
 

Best Regards

Chee Wong

Userlevel 6
Badge +1

cheewong,

I see multiple EAPS domains. This requires a specific setup and has some constrains.

Can you share a topology diagram (can be handmade) showing how all this is interconnected?

Mig

Userlevel 6
Badge +1

cheewong,

The up/down pattern looks like an stp issue.

  1. When configuring EAPS you must ensure to disable stp on the ports participating in the EAPS ring to avoid STP to block the EAPS ports. I don’t see that in your config.
    1. Check here on how to do it : https://gtacknowledge.extremenetworks.com/articles/How_To/What-command-is-used-to-disable-STP-on-a-port/
  2. There is a “not very well documented feature” that highly recommends to use odd or even MLAG id’s and you are mixing odd and even MLAG id’s. I strongly suggest to change the MLAD id’s.
    1. Check Here: https://gtacknowledge.extremenetworks.com/articles/Q_A/000036178/

Mig

Dear Miguel,

Thanks for the explanation. I had check on my core switch config there is no configure any STP. Also I will check the particular ring access switch is configure any STP inside. 

 

Best Regards

Chee Wong

Userlevel 6
Badge +1

Cheewong,

 

STP is configured by default on the Default VLANCheck it with:

show stpd

show stpd s0

show stpd s1

show stpd s0 ports

I see this VLAN on your control ports,

Mig

Dear Miguel,

 

I had found out the root cause. There is 1 of the access switch is missing. That a reason the ring is detected. Once I revamp the uplink and change the ring port configuration. Finally the ring is up.

 

Best Regards

Chee Wong 

Userlevel 6
Badge +1

Very good,

Enjoy!

Reply