show vlt 1 Domain ID : 1 Unit ID : 2 Role : Version : 2.3 Local System MAC address : 0c:29:ef:ef:4e:00 Role priority : 4096 VLT MAC address : 00:00:00:00:06:06 IP address : fda5:74c8:b79e:1::2 Delay-Restore timer : 90 seconds Peer-Routing : Enabled Peer-Routing-Timeout timer : 0 seconds VLTi Link Status port-channel1000 : up
VLT Peer Unit ID System MAC Address Status IP Address Version ---------------------------------------------------------------------------------- 1 0c:29:ef:ef:a0:00 up fda5:74c8:b79e:1::1
-R1RACK6-TOR2(conf-vlt-1)# do show vlt 1 Domain ID : 1 Unit ID : 1 Role : Version : 2.3 Local System MAC address : 0c:29:ef:ef:a0:00 Role priority : 32768 VLT MAC address : 00:00:00:00:06:06 IP address : fda5:74c8:b79e:1::1 Delay-Restore timer : 90 seconds Peer-Routing : Enabled Peer-Routing-Timeout timer : 0 seconds VLTi Link Status port-channel1000 : up
VLT Peer Unit ID System MAC Address Status IP Address Version ---------------------------------------------------------------------------------- 2 0c:29:ef:ef:4e:00 up fda5:74c8:b79e:1::2 RACK6-TOR2(conf-vlt-1)# do show running-configuration vlt ! vlt-domain 1 backup destination 172.29.2.61 discovery-interface ethernet1/1/49-1/1/50 vlt-mac 00:00:00:00:06:06
I'll try to help out, I'm not that good in networking. I spoke to one of my co-worker about it. He mentioned something about expired x509 cert, could you check by running #show vlt 1 vlt-port-detail to see if it sheds any light to the issue.
DELL-Joey C
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’ if I did.
o show vlt 1 Domain ID : 1 Unit ID : 1 Role : Version : 2.3 Local System MAC address : 0c:29:ef:ef:a0:00 Role priority : 32768 VLT MAC address : 00:00:00:00:06:06 IP address : fda5:74c8:b79e:1::1 Delay-Restore timer : 90 seconds Peer-Routing : Enabled Peer-Routing-Timeout timer : 0 seconds VLTi Link Status port-channel1000 : up
VLT Peer Unit ID System MAC Address Status IP Address Version ---------------------------------------------------------------------------------- 2 0c:29:ef:ef:4e:00 up fda5:74c8:b79e:1::2 RACK6-TOR2(conf-vlt-1)# do show running-configuration vlt ! vlt-domain 1 backup destination 172.29.2.61 discovery-interface ethernet1/1/49-1/1/50 vlt-mac 00:00:00:00:06:06
Using ssh to each switch and clear NTP time back and set the clock date per the instructions below:
Commands: (Note: You will need to connect to each Front End switch rabbit.rack, hare.rack Back End switche fox.rack, hound.rack) # ssh
# configure terminal
# no ntp server 192.168.219.254
# exit
# clock set 01:00:00 2021-07-01
# show clock
Example:
fox# configure terminal
fox(config)# no ntp server 192.168.219.254
fox(config)# exit
fox# clock set 01:00:00 2021-07-01
fox# show clock
2021-07-01T01:00:01.74+00:00
Run the SC procedure from solve to renew the switch certificates.
Commands: # service-console run Check_Switch_Certificates
# service-console run Renew_Switch_Certificates
Note: during the run of service-console the health check for NTP will still pass as it will not detect the previous config change of disabling NTP. Output will look like below
Example: (Note: output is truncated)
...
NTP is configured on the switch fox.rack
NTP is configured on the switch hound.rack
NTP is configured on the switch rabbit.rack
NTP is configured on the switch hare.rack
...
Once the switch certificates are updated on all switches revert the ntp configuration previously made on both FE and BE switches and verify time is set back to current
Commands:(You will need to connect to each Front End switch rabbit.rack, hare.rack Back End switch fox.rack, hound.rack) # ssh
# configure terminal
# ntp server 192.168.219.254
# exit
# show ntp status
# show clock
Example:
ssh fox.rack
fox configure terminal
fox(config)# ntp server 192.168.219.254
fox(config)# exit
fox# show ntp status
associd=0 status=0618 leap_none, sync_ntp, 1 event, no_sys_peer,
system peer: 192.168.219.254:123
system peer mode: client
leap indicator: 00
stratum: 5
log2 precision: -22
root delay: 3.480
root dispersion: 966.568
reference ID: 192.168.219.254
reference time: e4a1a404.c24ca800 Tue, Jul 20 2021 19:35:32.758
system jitter: 0.000000
clock jitter: 1.401
clock wander: 0.000
broadcast delay: -50.000
symm. auth. delay: 0.000
fox# show clock
2021-07-20T19:35:53.14+00:00
Please let me know if it helps Marco
DELL- Marco B
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!
Having th same issue of certificate expired, I've upgraded to the version 10.5.6.2 and reintegrate the two switchs (OS10) with (VLT) interconnected with a Cisco Nexus 7K (VPC)
Now I'm facing a strange issue when testing HA, which is when I shut the ports connected to the ESXI (Uplinks) on primary switch same ports on the other switch go down and no
there is no 10.5.6.2 version, it might be typo. Could you please double check? Also you should have upgraded 10.5.0.4 >> 10.5.0.9 > 10.5.2.6 in that order, can you confirm this is how you did?
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!
DELL-Joey C
Moderator
•
4170 Posts
•
20965 Points
2864
0
Posted August 22nd, 2021 19:00
Hi,
I'll try to help out, I'm not that good in networking. I spoke to one of my co-worker about it. He mentioned something about expired x509 cert, could you check by running #show vlt 1 vlt-port-detail to see if it sheds any light to the issue.
DELL-Joey C
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’ if I did.