UNSOLVED

Foxbat46552

updated

23 years ago

0

22426

August 1st, 2003 22:00

PowerConnect 3248 Lost Management with V2.1.0.0

Fifteen minutes ago, I had to power cycle one of my PC3248 switches that I had flashed Monday night with V2.1.0.0.  The switch was still functioning, but it would not respond to pings or the web interface.  I'm sorry, I didn't try Telnet, SNMP, or the console port, but it appeared as dead as a pre-V2.1 switch.

We are a mixed-switch environment, with Cisco C3550-12G, C3508G, and C2924M-XL switches in addition to our Dell PowerConnect 3248s and a 5212.  The Management VLAN is the default 1, so the management port is seeing all of our traffic, multicasts, broadcasts, etc.  Also, we have older DEC networking switches that we are in the process of replacing, so I have the STP mode set to STP, not RSTP.  And, we're using 4 full subnets of our class B, so the switch's address of x.y.11.186 has a netmask of 255.255.252.0, something else a little out of the ordinary.

  • GregG1

    2 Intern

    812 Posts

    451

    0

    Posted August 4th, 2003 11:00

    First, I would suggest creating a separate VLAN and change the management VLAN of this switch. This will prevent you from being able to manage the switch from any system on the network, but is the recommended configuration for medium to large networks. You can configure a workstation or server on the same VLAN and use it as a management station. To be consistant, you may want to use the same management VLAN on all of your managed switches.

    The next step would be to capture traffic and establish a baseline. Determine what percentage of broadcast/multicast traffic is running across the network. A broadcast percentage above 20% is excessive. If you have 50% or above, you really need to look into segmentation.

    Also, the Cisco equipment is most likely using proprietary protocols like PVST and CDP/VTP (unless they have been disabled). Look for these protocols in your packet capture. If you see them, you should filter them from the switch. Multicast filtering is a new feature in the latest firmware and is only available via the CLI.

    To filter PVST, use the command "mcast mac-addr filter 01-00-0C-CC-CC-CD" from global configuration mode.

    To filter CDP/VTP, use the command "mcast mac-addr filter 01-00-0C-CC-CC-CC" from global configuration mode.

  • 451

    0

    Posted August 4th, 2003 14:00

    Greg,

    We are in the process of doing exactly that, but I did not meet with great success when I tried to set up an 802.1q trunk between the Cisco and the Dell switches.  As a result, I had to install the Dell with the default VLAN.  I haven't had a chance to try this with the V2.1 firmware yet.

    You mention filtering protocols on the switch, is this documented anywhere?  I didn't find anything on the CD that comes with the switch.  Thanks for your help!

    --Roland W. Fox

  • GregG1

    2 Intern

    812 Posts

    451

    0

    Posted August 7th, 2003 11:00

    The multicast filter is a new feature of the 2.1.0.0 firmware. Currently, it is only available through the CLI at this time and its use is not documented in any of the addendums. We will be working on documenting the feature and again listing the MAC addresses for PVST and CDP/VTP in the Dell Knowledge Base.

  • bheeth

    4 Posts

    451

    0

    Posted January 11th, 2004 22:00

    I am having the same "lost management" problem with multiple 3248 switches.  I have installed firmware 2.1.0.0.   I tried entering the mcast command exactly as you gave it and I get the message "% incomplete command."
  • 451

    0

    Posted January 12th, 2004 13:00

    Per other posts in other threads, we have meet with great success in keeping our PC 3248s alive by:

    a) Moving the Cisco management IP address into a different VLAN,

    b) Installing Firmware V2.1.0.0 on the PowerConnect 3248s, and

    c) Disabling IGMP on the PowerConnect switches.

    Since we have done this four months ago, we have not had a PC3248 lose managability.

  • 451

    0

    Posted October 28th, 2004 17:00

    Well, it's been over a year, and we are preparing to remove all Dell Network Switches from our environment.  The PC3248 switches continue to lose management capabilities at random times.  When this happens, it prevents users from accessing the LAN if they change the status of their netowrk connection, for example, by rebooting.  The only solution has been to power-cycle the PC3248, knocking off 48+ people.
  • bheeth

    4 Posts

    451

    0

    Posted October 28th, 2004 17:00

    Did you ever try the mcast command?   This is the form of the command that worked for us:

    mcast mac-addr filter 01-00-0c-cc-cc-cc vlan 1
    mcast mac-addr filter 01-00-0c-cc-cc-cd vlan 1

    When we put these commands in our configuration it helped reduce the lost management issue.