Cisco:风暴控制配置将接口置于暂停状态的端口通道中

网络工程 思科 转变 安全
2021-07-28 17:04:08

我最近遇到了一个问题,在我的端口通道接口上配置的风暴控制导致物理接口进入暂停状态。

硬件:3 个堆叠的 3850(IOS XE 版本 3.7.3E)接入交换机连接到瞻博网络传统核心和新的 6807-XL 核心

Interface/EtherChannel configuration:

    interface GigabitEthernet1/1/1
     description Uplink to 6807
     switchport trunk native vlan 2248
     switchport trunk allowed vlan 2106,2248,2510
     switchport mode trunk
     load-interval 30
     auto qos trust 
     channel-protocol lacp
     channel-group 1 mode active
     service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
     service-policy output AutoQos-4.0-Output-Policy
    end

    interface GigabitEthernet2/1/1
     description Uplink to 6807
     switchport trunk native vlan 2248
     switchport trunk allowed vlan 2106,2248,2510
     switchport mode trunk
     load-interval 30
     auto qos trust 
     channel-protocol lacp
     channel-group 1 mode active
     service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
     service-policy output AutoQos-4.0-Output-Policy
    end

    interface Port-channel1
     description Uplink to 6807
     switchport trunk native vlan 2248
     switchport trunk allowed vlan 2106,2248,2510
     switchport mode trunk
     logging event trunk-status
     storm-control broadcast level 50.00
     storm-control multicast level 50.00
     storm-control unicast level 50.00
    end

and

    interface GigabitEthernet1/1/2
     description Legacy Network
     switchport trunk allowed vlan 12,30,50,111
     switchport mode trunk
     load-interval 30
     auto qos trust 
     no cdp enable
     channel-protocol lacp
     channel-group 2 mode active
     service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
     service-policy output AutoQos-4.0-Output-Policy
    end

    interface GigabitEthernet2/1/2
     description Legacy Network
     switchport trunk allowed vlan 12,30,50,111
     switchport mode trunk
     load-interval 30
     auto qos trust 
     no cdp enable
     channel-protocol lacp
     channel-group 2 mode active
     service-policy input AutoQos-4.0-Trust-Cos-Input-Policy
     service-policy output AutoQos-4.0-Output-Policy
    end

    interface Port-channel2
     description Legacy Network
     switchport trunk allowed vlan 12,30,50,111
     switchport mode trunk
     logging event trunk-status
     storm-control broadcast level 50.00
     storm-control multicast level 50.00
     storm-control unicast level 50.00
    end

show etherchannel detail 透露风暴控制(广播抑制)是问题所在:

                Channel-group listing: 
                ----------------------

Group: 1 
----------
Group state = L2 
Ports: 2   Maxports = 16
Port-channels: 1 Max Port-channels = 16
Protocol:   LACP
Minimum Links: 0

                Ports in the group:
                -------------------
Port: Gi1/1/1
------------

Port state    = Up Cnt-bndl Suspend Not-in-Bndl 
Channel group = 1           Mode = Active          Gcchange = -
Port-channel  = null        GC   =   -             Pseudo port-channel = Po1
Port index    = 0           Load = 0x00            Protocol =   LACP

Flags:  S - Device is sending Slow LACPDUs   F - Device is sending fast LACPDUs.
        A - Device is in active mode.        P - Device is in passive mode.

Local information:
                            LACP port     Admin     Oper    Port        Port
Port      Flags   State     Priority      Key       Key     Number      State
Gi1/1/1   SA      susp      32768         0x1       0x0     0x132       0x45  

Age of the port in the current state: 0d:00h:10m:48s

Probable reason: Broadcast suppression: Level of Gi1/1/1 is not configured. Level of Po1 is 
50.00%, 50.00%.

<output omitted>

我最终取消了两个端口通道上的风暴控制,因为我在有限的时间窗口(切换)内工作,并且链接灯变为绿色并开始通过流量。关于接口为何进入挂起状态,我无法找到太多相关信息,因为这不是 Storm-control 或 etherchannel(据我所知)的默认行为。

此外,接口 Gi2/1/1(到 6807)和 Gi2/1/2(到旧版)没有连接,因为没有足够的光纤来容纳这个,但预计将来会发生。所以,我不确定这是否与它有关:

  • Gi1/1/1 是 6807 核心的 Port-channel1 的一部分
  • Gi1/1/2 是 Port-channel2 到传统内核的一部分

show etherchannel summary

switch#show etherchannel summary

<output omitted>

Group  Port-channel  Protocol    Ports
------+-------------+-----------+-----------------------------------------------
1      Po1(SU)         LACP      Gi1/1/1(P)  Gi2/1/1(D)  
2      Po2(SU)         LACP      Gi1/1/2(P)  Gi2/1/2(D)  

任何有关为什么 Gi1/1/1 和 Gi1/1/2 由于风暴控制而处于暂停状态的见解将不胜感激。提前致谢。

1个回答

除 BPDU 外,流量风暴控制不区分控制流量和数据流量。

Catalyst 6500 Release 12.2SX 软件配置指南

因此,风暴控制可能导致 LACP 失败。就我个人而言,我不将 LACP 用于基础设施链接。

(您必须查找特定硬件和软件的文档以查看内容。)