UNSOLVED
T
TalanWestby
1 Rookie
•
13 Posts
0
2135
July 17th, 2018 00:00
Dell Force 10 Tagging and Cisco Switching
Hi all,
Got quite an interesting one which I cannot explain and was wondering if someone could cast their eye over why this fails. We have had a Dell Sales Engineer take a look and he has said there should be no reason why this occurs but it does so here goes:
We have a VLAN that is spanned across a couple of our campuses for our firewall HA pairs to allow both of our firewalls connect to our service provider. Here is a crude drawing of our setup:
So the basic idea is we have the VLT domain with a VLTi which spans the VLAN which in our case is 4000, this works, however, the link that connects the VLT domain to the Cisco switch on our other campus is a trunk link with about 30 VLANs on it.
When we tag Vlan 4000 on this link between the VLT domain and the Cisco switch, the ISP router starts receiving tagged packets and shuts down its interface. The link between the VLT domain and the ISP router is an untagged port just for VLAN 4000. Here is a show output of the link between the VLT domain and both the Cisco switch and the ISP router:
VLT to ISP
show int status
Port Description Status Speed Duplex Vlan
Te 1/17 ** Link to Up 1000 Mbit Full 4000
show vlan
4000 Active ** RH-WAN ** V Po128(Fo 1/49,1/50)
U Te 1/17
VLT to Cisco Switch
show vlan
4000 Active ** RH-WAN ** V Po128(Fo 1/49,1/50)
U Te 1/17
show int status
Port Description Status Speed Duplex Vlan
Te 1/17 ** Link to Up 1000 Mbit Full 4000
Te 1/30 ** Link to Up 1000 Mbit Full 100,1040,1060,1090-1096,2000,3000,
3004-3006,4001-4003,4044-4045
Whilst this does not stop our solution working it does stop any redundancy in our critical infrastructure from working so I really need to get this to work. I know that one way to get this to work is to ask the ISP to turn off spanning tree, however, the fact is they are receiving tagged packets on an untagged port and I do not want to have to deal with this issue again should our provider change.
Any help on this would be appreciated.
Thanks in advanced.
1939
0
Posted July 18th, 2018 00:00
Hi Daniel,
Also, the version of software we are running is:
Dell EMC Application Software Version: 9.13(0.0)
Also, regarding the connections to each device, these are single interfaces as both our ISP and Firewall have not been configured for LAGs. Furthermore, our connection to our other campus is a single link as it's a WAN link that spans 18KM and our provider equipment only has a single port available for us. Again, I have been informed by a Dell Sales Engineer that this shouldn't be a problem as any traffic destined for those interfaces within the VLT will traverse the VLTi which is what we are seeing.
Thanks again,
Talan
TalanWestby
1 Rookie
•
13 Posts
1940
0
Posted July 17th, 2018 23:00
Hi Daniel,
Thanks for responding so quickly. So we have two Dell S4048-ON switches in the VLT Domain the VLTi is a pair of 40Gbps connections and the sketch is a logical overview, however, I missed out the connection from the VLT domain to the Firewall which is just a single access link.
When connecting on switch 2 in the VLT domain to the Cisco switch at our other campus the following commands are entered to add the VLAN to the trunk
int vlan 4000
tagged te1/30
Here is the output from one of our VLT peers.
VLT-2#show vlt br
VLT Domain Brief
------------------
Domain ID: 1
Role: Primary
Role Priority: 32768
ICL Link Status: Up
HeartBeat Status: Up
VLT Peer Status: Up
Local Unit Id: 1
Version: 6(8)
Local System MAC address: e4:f0:04:4f:d3:ec
Remote System MAC address: e4:f0:04:00:0d:00
Configured System MAC address: 00:11:22:33:44:55
Remote system version: 6(8)
Delay-Restore timer: 90 seconds
Delay-Restore Abort Threshold: 60 seconds
Peer-Routing : Enabled
Peer-Routing-Timeout timer: 0 seconds
Multicast peer-routing timeout: 150 seconds
VLT-2#show vlt det
Local LAG Id Peer LAG Id Local Status Peer Status Active VLANs
------------ ----------- ------------ ----------- -------------
1 1 UP UP 35, 2541
2 2 UP UP 35, 2542
3 3 UP UP 35, 2543
4 4 UP UP 35, 2545
5 5 UP UP 35, 2546
6 6 UP UP 35, 2547
7 7 UP UP 35, 2548
8 8 UP UP 35, 2549
9 9 UP UP 1, 100-101, 104-105, 301,
305, 323, 2564, 4044
10 10 UP UP 1, 100-101, 104-105, 301,
305, 323, 1112, 2563
14 14 UP UP 35, 2554
19 19 UP UP 3000, 3004-3006
20 20 UP UP 100
21 21 UP UP 100-104, 301, 305, 2560
28 28 UP UP 305
30 30 UP UP 305
40 40 UP UP 4003
50 50 UP UP 2004, 4044
101 101 UP UP 100-103, 301, 305,
2555-2559, 4044