Network disruption VSP8600

[BRMS]

I’m using 4 VSP8600 in a SPBM-Configuration. Today we experienced a network disruption although no configuration changes were made. The logs are full of these:

************************************************************************************
		Command Execution Time: Tue Oct 06 11:26:49 2020 CEST
************************************************************************************
1 2020-10-06T11:24:33.770+02:00 kreuz IO4 - 0x00138537 - 0004e001 DYNAMIC CLEAR GlobalRouter COP-SW INFO VIST peer mac b4:2d:56:9c:7a:11 on VID 2422 is learnt on non-IST MltId-1, Pointing record back to IST port.Total Peer Mac Move Count: 8051
1 2020-10-06T11:24:30.533+02:00 kreuz IO2 - 0x00138537 - 0004e001 DYNAMIC CLEAR GlobalRouter COP-SW INFO VIST peer mac b4:2d:56:9c:7a:36 on VID 426 is learnt on non-IST MltId-1, Pointing record back to IST port.Total Peer Mac Move Count: 16644
1 2020-10-06T11:22:35.621+02:00 kreuz IO3 - 0x00138537 - 0004e001 DYNAMIC CLEAR GlobalRouter COP-SW INFO VIST peer mac b4:2d:56:9c:7a:2b on VID 419 is learnt on non-IST MltId-1, Pointing record back to IST port.Total Peer Mac Move Count: 13707

...

1 2020-10-06T10:42:31.049+02:00 kreuz IO5 - 0x00138537 - 0004e001 DYNAMIC CLEAR GlobalRouter COP-SW INFO VIST peer mac b4:2d:56:9c:7a:28 on VID 205 is learnt on non-IST MltId-1, Pointing record back to IST port.Total Peer Mac Move Count: 9389
1 2020-10-06T10:42:31.035+02:00 kreuz IO6 - 0x00138537 - 0004e001 DYNAMIC CLEAR GlobalRouter COP-SW INFO VIST peer mac b4:2d:56:9c:7a:28 on VID 205 is learnt on non-IST MltId-1, Pointing record back to IST port.Total Peer Mac Move Count: 631

...

1 2020-10-06T10:42:22.788+02:00 kreuz CP1 - 0x00004619 - 01900001 DYNAMIC CLEAR GlobalRouter SNMP INFO Smlt Link Up Trap(SmltId=133)
1 2020-10-06T10:42:22.788+02:00 kreuz CP1 - 0x0000000a - 01900001.133 DYNAMIC CLEAR GlobalRouter SW INFO SMLT 133 Link is UP
1 2020-10-06T10:42:17.262+02:00 kreuz CP1 - 0x0000461a - 01900001 DYNAMIC SET GlobalRouter SNMP INFO Smlt Link Down Trap(SmltId=133)
1 2020-10-06T10:42:17.261+02:00 kreuz CP1 - 0x00000009 - 01900001.133 DYNAMIC SET GlobalRouter SW INFO SMLT 133 Link is DOWN

...

1 2020-10-06T10:04:03.768+02:00 kreuz IO3 - 0x00138537 - 0004e001 DYNAMIC CLEAR GlobalRouter COP-SW INFO VIST peer mac b4:2d:56:9c:7a:2b on VID 419 is learnt on non-IST MltId-1, Pointing record back to IST port.Total Peer Mac Move Count: 12529
1 2020-10-06T10:03:48.600+02:00 kreuz IO4 - 0x00138537 - 0004e001 DYNAMIC CLEAR GlobalRouter COP-SW INFO VIST peer mac b4:2d:56:9c:7a:11 on VID 2422 is learnt on non-IST MltId-1, Pointing record back to IST port.Total Peer Mac Move Count: 7347

What could be the cause of this problem and how can i debug this any further? my log only goes back for ~1hr

[BRMS]

I’ll ask our partner if they already opened a support case at extreme. As soon as i get the case number i’ll send it to you. Thanks again for all the help!

[Roger_Lapuh]

BRMS - can you please share your support case number that was opened for the MAC move issue? Please send it directly to me at rlapuh@extremenetworks.com

Thanks Roger

[Miguel-Angel_RO]

brms,

• the change of metric can be done online but I would stick to the standard values:

  • 

• Concerning SLPP:
  • https://gtacknowledge.extremenetworks.com/articles/Q_A/000043265/
  • https://gtacknowledge.extremenetworks.com/articles/How_To/000034045
• Changing IP of the vIST has to be done disabling ISIS on the cluster member.
  • As this is not mandatory it could be good ti keep this for a maintenance window where you’ll have to shutdown the cluster.

As those operations are quite intrusive I would insist to have the support of the partner.

Cheers

Mig

[BRMS]

• change the isis metrics of your isis interfaces: the MLT should have the cost of the interfaces 1/1 or 1/5 divided by 2.
  • If it is 10G links: MLT=100, interfaces 1/1,1/5 = 200

atm all three are at a metric of 10. i should change the mlt-1 to 5 with the following command, right? can this be done without interrupting anything or do i need to disable isis first?

interface mlt 1
isis spbm 1 l1-metric 5

I would enable SLPP on all the C-VLANs

since the we don’t have a BEB/BCB configuration but the 4-VSP-Cores and directly connected EXOS-switches with fa and servers I’m not sure which SLPP method to use. do the cores count as access-smlt in my case? what would you recommend? SLPP per port or per VLAN?

Could you confirm the value of the i-sid used on the different switches for the vIST?

• It should be uniq per cluster

vist-cluster 1 has vlanid 4053 and isid 104053

vist-cluster 2 has vlanid 4054 and isid 104054

I would change the subnet to /30 but this shouldn’t cause any issue using a /24

last time i changed the ip of the vist vlan the whole system crashed. as far as i remember i needed to disable isis before changing anything. what precautions do i need to take before changing the ip? is it enough to disable both ports belonging to mlt 1 before changing the ip?

avoid the redistribution of the vIST subnets in ISIS/OSPF/other: https://gtacknowledge.extremenetworks.com/pkb_mobile#article/How_To/kA12T0000004QhGSAU/s

wow, this looks rather unintuitiv. will give it a try

Ensure that you don’t use the vIST subnet for other purposes than VIST (not as next hop, not as SNMP access, etc)

as far as i know we don’t use the vist-ips anywhere but will check that.

Thank you very much for your help!