2 Virtual Routers & MLAG

[bw447]

Is it possible to have 2 Virtual Routers on a switch and connect them up to 2 switches via MLAG?

Building Routers is x460-G1

2 Upstream Switches x670G2-48x-4q


I have the Building Router connected up to 1 upstream switch with the 2 vrs (pretty much followed MLAG chapter in the Concepts Guide).

All of the MLAG peers & ports, ISC are created, but once I enable sharing on the building router it completely drops the connection.

I can post my config, but I just want to know if this is even possible.

Thanks in Advanced!

[bw447]

Tomasz,

Thanks for the info! I've looked at the 'show sharing' output many times and I can honestly say I really never noticed the Agg Mbr output. I was able to bring up both connections on both peers and everything looks great!

Thanks again!

[Tomasz]

Hi,

On your Building Router you have LACP-aggregated link going to the MLAG peers. If it's LACP and not static LAG, LACP should be enabled on an upstream device so the protocol can negotiate anything. You can see no negotiation with 'show sharing' on that downstream device in column 'Agg Mbr' (so if the port is a member of an aggregation, dash means it's not). So despite having just a single link on each of your MLAG peers, on each you should do a single port aggregation with LACP enabled (or move to static LAG on a downstream device, I'd not recommend).

Hope that helps,
Tomasz

[bw447]

Hi Tomasz,

We only setup 1 MLAG.

So all 3 switches has the user created vr, vlan created with the vr assigned to it & all vr's are removed from the uplink/downlink ports.

Basically we took a working 1 port connection with 2 vr and then added a 2nd uplink switch, added the mlag peer, port & ISC. On the building router we then enabled sharing Like I said before this might not even be possible.

We did have a working MLAG with just the VR-Default, now we are seeing if we can do the same with 2 vr.

Does each vr need to be on it's own MLAG port?


#---------------------------- Building Router Below -------------------
* X460G2-48p-10G4.1 # show sharing
Load Sharing Monitor
Config Current Agg Min Ld Share Flags Ld Share Agg Link Link Up
Master Master Control Active Algorithm Group Mbr State Transitions
================================================================================
49 LACP 1 L2 A 49 - A 5
L2 51 - A 5
================================================================================


* X460G2-48p-10G4.2 # show ports 49 information detail
Port: 49(JCN-Kennedy):
Virtual-router: None
Type: SF+_LR
Random Early drop: Unsupported
Admin state: Enabled with 10G full-duplex
Link State: Active, 10Gbps, full-duplex
Link Ups: 5 Last: Thu May 09 07:44:20 2019
Link Downs: 4 Last: Thu May 09 07:44:20 2019

VLAN cfg:
Name: Ground, 802.1Q Tag = 220, MAC-limit = No-limit, Virtual router: CRCSD-Ground
Port-specific VLAN ID: 220
Name: JCN, 802.1Q Tag = 200, MAC-limit = No-limit, Virtual router: VR-Default
Port-specific VLAN ID: 200
STP cfg:

Protocol:
Trunking: Master port with 2 members using algorithm address based - L2
algorithm
Members: 49,51



* X460G2-48p-10G4.3 # show ports 51 information detail
Port: 51(JCN-ELSC):
Virtual-router: None
Type: SF+_LR
Random Early drop: Unsupported
Admin state: Enabled with 10G full-duplex
Link State: Active, 10Gbps, full-duplex
Link Ups: 5 Last: Thu May 09 07:47:58 2019
Link Downs: 4 Last: Thu May 09 07:44:20 2019

VLAN cfg:
Name: Ground, 802.1Q Tag = 220, MAC-limit = No-limit, Virtual router: CRCSD-Ground
Port-specific VLAN ID: 220
Name: JCN, 802.1Q Tag = 200, MAC-limit = No-limit, Virtual router: VR-Default
Port-specific VLAN ID: 200
STP cfg:

Protocol:
Trunking: Cfg master port is 49


#---------------------------- Uplink Switch 1 Below -------------------
Slot-1 JCN-ELSC.2 # show mlag peer
Multi-switch Link Aggregation Peers:

MLAG Peer : JCN-Kennedy
VLAN : ISC-Kenn-ELSC Virtual Router : VR-Default
Local IP Address : 1.1.1.1 Peer IP Address : 1.1.1.2
MLAG ports : 1 Tx-Interval : 1000 ms
Checkpoint Status : Up Peer Tx-Interval : 1000 ms
Rx-Hellos : 37297422 Tx-Hellos : 37298069
Rx-Checkpoint Msgs: 17232259 Tx-Checkpoint Msgs: 2590598
Rx-Hello Errors : 0 Tx-Hello Errors : 0
Hello Timeouts : 5 Checkpoint Errors : 0
Up Time : 310d:0h:51m:6s Peer Conn.Failures: 2
Local MAC : 02:04:96:9a:75:3c Peer MAC : 00:04:96:9a:73:cd
Config'd LACP MAC : None Current LACP MAC : 00:04:96:9a:73:cd
Authentication : None

Alternate path information: None

Slot-1 JCN-ELSC.3 # show mlag port

Local Local Remote
MLAG Local Link Remote Peer Fail Fail
Id Port State Link Peer Status Count Count
================================================================================
187 2:22 A Up JCN-Kennedy Up 0 0
================================================================================
Local Link State: A - Active, D - Disabled, R - Ready, NP - Port not present
Remote Link : Up - One or more links are active on the remote switch,
Down - No links are active on the remote switch,
N/A - The peer has not communicated link state for this MLAG
port

Number of Multi-switch Link Aggregation Groups : 1
Convergence control : Conserve Access Lists

Slot-1 JCN-ELSC.4 # show ports 2:22 information detail
Port: 2:22(ELSC-A-G2-JCN.187):
Virtual-router: None
Type: SF+_LR
Random Early drop: Unsupported
Admin state: Enabled with 10G full-duplex
Link State: Active, 10Gbps, full-duplex
Link Ups: 21 Last: Thu May 09 07:47:59 2019
Link Downs: 20 Last: Thu May 09 07:44:20 2019

VLAN cfg:
Name: Ground, 802.1Q Tag = 220, MAC-limit = No-limit, Virtual router: CRCSD-Ground
Port-specific VLAN ID: 220
Name: JCN, 802.1Q Tag = 200, MAC-limit = No-limit, Virtual router: VR-Default
Port-specific VLAN ID: 200
STP cfg:

Protocol:
Trunking: Load sharing is not enabled.
Multi-switch LAG: MLAG port (MLAG Id: 187)




#---------------------------- Uplink Switch 2 Below -------------------

JCN-Kennedy.1 # show mlag peer
Multi-switch Link Aggregation Peers:

MLAG Peer : JCN-ELSC
VLAN : ISC-Kenn-ELSC Virtual Router : VR-Default
Local IP Address : 1.1.1.2 Peer IP Address : 1.1.1.1
MLAG ports : 1 Tx-Interval : 1000 ms
Checkpoint Status : Up Peer Tx-Interval : 1000 ms
Rx-Hellos : 37297445 Tx-Hellos : 37300195
Rx-Checkpoint Msgs: 2590599 Tx-Checkpoint Msgs: 17232262
Rx-Hello Errors : 0 Tx-Hello Errors : 0
Hello Timeouts : 2 Checkpoint Errors : 0
Up Time : 310d:0h:51m:44s Peer Conn.Failures: 2
Local MAC : 00:04:96:9a:73:cd Peer MAC : 02:04:96:9a:75:3c
Config'd LACP MAC : None Current LACP MAC : 00:04:96:9a:73:cd
Authentication : None

Alternate path information: None

JCN-Kennedy.2 # show mlag ports

Local Local Remote
MLAG Local Link Remote Peer Fail Fail
Id Port State Link Peer Status Count Count
================================================================================
187 17 A Up JCN-ELSC Up 0 0
================================================================================
Local Link State: A - Active, D - Disabled, R - Ready, NP - Port not present
Remote Link : Up - One or more links are active on the remote switch,
Down - No links are active on the remote switch,
N/A - The peer has not communicated link state for this MLAG
port

Number of Multi-switch Link Aggregation Groups : 1
Convergence control : Conserve Access Lists



* JCN-Kennedy.3 # show port 17 information detail
Port: 17
Virtual-router: None
Type: SF+_LR
Random Early drop: Unsupported
Admin state: Enabled with 10G full-duplex
Link State: Active, 10Gbps, full-duplex
Link Ups: 4 Last: Thu May 09 06:44:22 2019
Link Downs: 3 Last: Thu May 09 06:43:43 2019

VLAN cfg:
Name: Ground, 802.1Q Tag = 220, MAC-limit = No-limit, Virtual router: CRCSD-Ground
Port-specific VLAN ID: 220
Name: JCN, 802.1Q Tag = 200, MAC-limit = No-limit, Virtual router: VR-Default
Port-specific VLAN ID: 200
STP cfg:

Protocol:
Trunking: Load sharing is not enabled.
Multi-switch LAG: MLAG port (MLAG Id: 187)

[Christoph]

I've done it already, it's working.

If you are trunking the VLANs of different VRs on one physical port remember not to assign to port to any VR.

Kind regards
Christoph