Thursday, March 1, 2018

Brocade Palo Alto LAG static issue

We are attempting to create a static lag between our brocade 6610 and Palo Alto 820. Below is the config used to configure the LAG. When we bring up port 1/1/13 connected to Palo alto port 1 of the AE, after ~6 seconds we observe a WAN disconnect. Our internet transit vlan is 4005, but we also have wan on 4000-4003. I am not confident that we lose all vlans but we at least lose connectivity out the vlan 4005. I do not see spanning tree events in the logs of the brocade, some of these vlans participate in 802.1-w, others do not. We do have an option to enable LACP but we would lose some throughput. Do you know of any incompatibility between these two devices? Our Palo Alto engineer has deployed this same config across many vendors using a static LAG, but it’s possible we are missing something. This config works on a 7250 but I don’t have a spare 6610 to test with. I was planning to test all vlans individually during a maintenance window to determine which ones we are actually losing when the LAG is connected, but the soonest I can schedule that maintenance is this weekend.

Edit: user traffic egress is vlan 4005.

no lag LAGA ! lag A static

ports ethernet 1/1/13 ethernet 1/1/14 ethernet 2/1/13 ethernet 2/1/14

primary-port 1/1/13

deploy

port-name ethernet 1/1/13

port-name ethernet 1/1/14

port-name ethernet 2/1/13

port-name ethernet 2/1/14

! lag B static

ports ethernet 1/1/15 ethernet 1/1/16 ethernet 2/1/15 ethernet 2/1/16

primary-port 2/1/15

deploy

port-name ethernet 1/1/15

port-name ethernet 1/1/16

port-name ethernet 2/1/15

port-name ethernet 2/1/16

vlan 8

tagged e 1/1/13 e 2/1/15

vlan 9

tagged e 1/1/13 e 2/1/15

vlan 255

tagged e 1/1/13 e 2/1/15

vlan 4000

tagged e 1/1/13 e 2/1/15

vlan 4001

tagged e 1/1/13 e 2/1/15

vlan 4002

tagged e 1/1/13 e 2/1/15

vlan 4003

tagged e 1/1/13 e 2/1/15

vlan 4005

tagged e 1/1/13 e 2/1/15

vlan 24

tagged e 1/1/13 e 2/1/15

vlan 11

tagged e 1/1/13 e 2/1/15

vlan 12

tagged e 1/1/13 e 2/1/15

vlan 13

tagged e 1/1/13 e 2/1/15

vlan 204

tagged e 1/1/13 e 2/1/15

int e 1/1/13

dual-mode 255

int e 2/1/15

dual-mode 255

=== LAG "A" ID 6 (static Deployed) === LAG Configuration: Ports: e 1/1/13 to 1/1/14 e 2/1/13 to 2/1/14 Port Count: 4 Primary Port: 1/1/13 Trunk Type: hash-based Deployment: HW Trunk ID 6 Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name 1/1/13 Down None None None 6 Yes 255 0
1/1/14 Down None None None 6 Yes 255 0
2/1/13 Down None None None 6 Yes 255 0
2/1/14 Down None None None 6 Yes 255 0

=== LAG "B" ID 7 (static Deployed) === LAG Configuration: Ports: e 1/1/15 to 1/1/16 e 2/1/15 to 2/1/16 Port Count: 4 Primary Port: 2/1/15 Trunk Type: hash-based Deployment: HW Trunk ID 7 Port Link State Dupl Speed Trunk Tag Pvid Pri MAC Name 1/1/15 Down None None None 7 Yes 255 0
1/1/16 Down None None None 7 Yes 255 0
2/1/15 Down None None None 7 Yes 255 0
2/1/16 Down None None None 7 Yes 255 0



No comments:

Post a Comment