topic RE: Eaps blocks both primary and secondary port for only one protected vlan in ExtremeSwitching (EXOS/Switch Engine)

Eaps blocks both primary and secondary port for only one protected vlan

Mikko_Ketola — Wed, 21 May 2014 15:05:00 GMT

I noticed on one of our core switches (X480-24x(10G4X)) - which is eaps master for the given ring - that it had blocked one vlan wrongly. Eaps status is Ok, and shows that secondary port is correctly blocking while primary port is open and forwarding.

What makes this interesting is that the eaps ring has some tens of protected vlans and this particular vlan is the only one blocked wrongly having its both primary and secondary port blocked. The remaining protected vlans work like charm. And this problematic vlan isn't a member of any other eaps ring.

From the logs, only eaps-related information I can see is the following:

May 11 12:06:09 sw1 System: Starting VLAN protection via EAPS on Switch
May 11 12:06:10 sw1 System: Finished VLAN protection via EAPS on Switch

May 12 07:46:06 sw1 System: START-MIX-PROTECTED-VLAN-DELETE on Switch
May 12 07:46:07 sw1 System: FINISH-MIX-PROTECTED-VLAN-DELETE on Switch

Could these perhaps relate to eaps problem I'm facing?

Current xos version on all eaps ring switches is 15.3.2.11 patch1-2, which should be pretty new.

Anyone else have had the similar kind of problem?

RE: Eaps blocks both primary and secondary port for only one protected vlan

Sumit_Tokle — Wed, 21 May 2014 20:26:00 GMT

It's interesting to see this problem as there should be two port block on single protected vlan. You can provide the below information to see the issue

1)Network topology
2)show configuration eaps (from all the switch)
3) show eaps (from all the switch)
4) show vlan //problematic vlan name (from all the switch)
5) show eaps (from all the switch)
6) show eaps counter (from all the switch)

Or else it's better to open TAC case for quick resolution.

I would never recommend the EXOS 15.3.2 to any of my customer.

RE: Eaps blocks both primary and secondary port for only one protected vlan

Mikko_Ketola — Thu, 22 May 2014 18:11:00 GMT

Unfortunately the problem isn't on anymore, so providing the asked information wouldn't maybe give relevant information? I fixed the problem by deleting problematic vlan from eaps primary port and adding it again. The problem, according to our observations, take place when one of the switches participating in the ring reboots suddenly. Once the problem occurred by adjusting one switch's time.

Why wouldn't you recommend EXOS 15.3.2? What would be the recommended "stable" version?

RE: Eaps blocks both primary and secondary port for only one protected vlan

Sumit_Tokle — Thu, 22 May 2014 20:50:00 GMT

I have seen multiple issues on EXOS 15.3.2 software.

RE: Eaps blocks both primary and secondary port for only one protected vlan

Mikko_Ketola — Fri, 23 May 2014 13:46:00 GMT

Perhaps then software upgrade should be scheduled to some newer version. Any explanations for the log messages posted above? Could not find any references from the documentation and would be interesting to know.

RE: Eaps blocks both primary and secondary port for only one protected vlan

Sumit_Tokle — Fri, 23 May 2014 14:04:00 GMT

May 12 07:46:06 sw1 System: START-MIX-PROTECTED-VLAN-DELETE on Switch
May 12 07:46:07 sw1 System: FINISH-MIX-PROTECTED-VLAN-DELETE on Switch

The above error message appears when trying to delete the protected VLAN in the EAPS ring without deleting the VLAN from the EAPS ring port.