Pages

network cisco ccna gns3 certification arteq

network cisco ccna gns3 certification arteq
a network runs through it

Search insearchofthecert

Showing posts with label trunk. Show all posts
Showing posts with label trunk. Show all posts

Saturday, February 2, 2013

forwarding, not pruned...

you love show interface trunk, because i said you do...

DLS2#sh int trunk                                                              
                                                                               
Port        Mode             Encapsulation  Status        Native vlan          
Po2         on               802.1q         trunking      900                  
Po10        on               802.1q         trunking      900                  
                                                                               
Port        Vlans allowed on trunk                                             
Po2         10,20,30,100                                                       
Po10        10,20,30,50,100                                                    
                                                                               
Port        Vlans allowed and active in management domain                      
Po2         10,20,30,100                                                       
Po10        10,20,30,50,100                                                    
                                                                               
Port        Vlans in spanning tree forwarding state and not pruned             
Po2         10,20,30,100                                                       
Po10        10,20,30,50,100                   

note vlan 50 is not forwarding on po2...

DLS2#sh run int po2                                                            
Building configuration...                                                      
                                                                               
Current configuration : 223 bytes                                              
!                                                                              
interface Port-channel2                                                        
 description Channel to ALS1                                                   
 switchport trunk encapsulation dot1q                                          
 switchport trunk native vlan 900                                              
 switchport trunk allowed vlan 10,20,30,100                                    
 switchport mode trunk                                                         
 switchport nonegotiate             

as you can see that's by design... however it is forwarding on po10 although it is down...

DLS2#sh int vlan 50                                                            
Vlan50 is administratively down, line protocol is down                         
  Hardware is EtherSVI, address is 0016.479e.5fc6 (bia 0016.479e.5fc6)         
  Internet address is 10.1.50.253/24        

DLS2#sh spann vlan 50 | b Interface
Interface           Role Sts Cost      Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------
Po10                Desg FWD 12        128.128  P2p

spanning tree believes it is still forwarding simply because it's allowed on the trunk regardless of it's operational state...

DLS2#sh run int po10
Building configuration...

Current configuration : 227 bytes
!
interface Port-channel10
 description Channel to DLS1
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 900
 switchport trunk allowed vlan 10,20,30,50,100
 switchport mode trunk
 switchport nonegotiate

of course dls1 can't ping it and it's getting no hsrp love...

DLS1>ping 10.1.50.253                                                           
                                                                                
Type escape sequence to abort.                                                  
Sending 5, 100-byte ICMP Echos to 10.1.50.253, timeout is 2 seconds:            
.....                                                                           
Success rate is 0 percent (0/5)                                                 
DLS1>sh stand brie                                                              
                     P indicates configured to preempt.                         
                     |                                                          
Interface   Grp  Pri P State   Active          Standby         Virtual IP       
Vl10        10   110 P Active  local           10.1.10.253     10.1.10.254      
Vl20        20   100 P Standby 10.1.20.253     local           10.1.20.254      
Vl30        30   110 P Active  local           10.1.30.253     10.1.30.254      
Vl50        50   100 P Active  local           unknown         10.1.50.254      
Vl100       100  110 P Active  local           10.1.100.253    10.1.100.254 

hsrp was nice enough to take over on dls1, however...

DLS2#sh stand brie                                                              
                     P indicates configured to preempt.                         
                     |                                                          
Interface   Grp  Pri P State   Active          Standby         Virtual IP       
Vl10        10   100 P Standby 10.1.10.252     local           10.1.10.254      
Vl20        20   110 P Active  local           10.1.20.252     10.1.20.254      
Vl30        30   100 P Standby 10.1.30.252     local           10.1.30.254      
Vl50        50   110 P Init    unknown         unknown         10.1.50.254      
Vl100       100  100 P Standby 10.1.100.252    local           10.1.100.254

once i disallow it on the trunk:

DLS2#sh spann vlan 50                                                           
                                                                                
Spanning tree instance(s) for vlan 50 does not exist.

it stops showing up in forwarding state...

DLS2#sh int trunk                                                               
                                                                                
Port        Mode             Encapsulation  Status        Native vlan           
Po2         on               802.1q         trunking      900                   
Po10        on               802.1q         trunking      900                   
                                                                                
Port        Vlans allowed on trunk                                              
Po2         10,20,30,100                                                        
Po10        10,20,30,100                                                        
                                                                                
Port        Vlans allowed and active in management domain                       
Po2         10,20,30,100                                                        
Po10        10,20,30,100                                                        
                                                                                
Port        Vlans in spanning tree forwarding state and not pruned              
Po2         10,20,30,100                                                        
Po10        10,20,30,100     

and until it is added to the trunk, although it is no longer shut, it is up, down because it is not an active member of any port...

DLS2#sh int vlan 50                                                             
Vlan50 is up, line protocol is down                                             
  Hardware is EtherSVI, address is 0016.479e.5fc6 (bia 0016.479e.5fc6)          
  Internet address is 10.1.50.253/24                                 

the point is it doesn't get pruned from the trunk, until it is taken out of allowed manually... allowed prevents dynamic pruning... makes sense...

DLS2(config)#int po10                                                           
DLS2(config-if)#sw trunk allowed vlan 10,20,30,50,100                           
DLS2(config-if)#                                                                
Jan 22 23:59:11: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan50, changedp
Jan 22 23:59:13: %HSRP-5-STATECHANGE: Vlan50 Grp 50 state Listen -> Active      
DLS2(config-if)#do sh int trunk                                                 
                                                                                
Port        Mode             Encapsulation  Status        Native vlan           
Po2         on               802.1q         trunking      900                   
Po10        on               802.1q         trunking      900                   
                                                                                
Port        Vlans allowed on trunk                                              
Po2         10,20,30,100                                                        
Po10        10,20,30,50,100                                                     
                                                                                
Port        Vlans allowed and active in management domain                       
Po2         10,20,30,100                                                        
Po10        10,20,30,50,100                                                     
                                                                                
Port        Vlans in spanning tree forwarding state and not pruned              
Po2         10,20,30,100                                                        
Po10        10,20,30,50,100               

DLS2(config-if)#do sh spann vlan 50 | b Int                                     
Interface           Role Sts Cost      Prio.Nbr Type                            
------------------- ---- --- --------- -------- --------------------------------
Po10                Desg FWD 12        128.128  P2p  

      

Saturday, April 14, 2012

trunks and dtp...

dtp causes unnecessary traffic... when you manually configure a trunk on both sides, as you should,  you will still get dtp traffic... port 1 says, i'm a trunk; port 2 says i'm a trunk too back to port 1, and port 1 says it's delightful to be a trunk and port 2 says, being a trunk is good...

turn that shit off...

never trust your trunks to create themselves...

dls1(config)#int f0/15                                                         
dls1(config-if)#sw                                                             
dls1(config-if)#sw trunk encap dot1q                                           
dls1(config-if)#sw mode trunk                                                  
dls1(config-if)#sw nonegotiate                                                 
dls1(config-if)#end                       
dls1#sh int f0/15 trunk                                                        
                                                                               
Port        Mode             Encapsulation  Status        Native vlan          
Fa0/15      on               802.1q         other         1  

                  
use nonegotiate to stop the stupid dtp traffic...

dynamic auto on both sides leads to a dtp roadblock...  this is because auto is a passive state...  two passive's will never make an active... similar in fashion to pagp and lacp...                                                                         

Sunday, March 11, 2012

more of channels and trunks...


use the interface range command and add ports into a channel...

dsw2(config)#int rang f0/1 - 2
dsw2(config-if-range)#channel-group 1 mode on
dsw2(config-if-range)#end

i usually make the ports trunks first on both ends in case i want to revert back, but that's an option
and in the case below i gave the port channel an ip address

dsw2#sh run int po1
Building configuration...


Current configuration : 84 bytes
!
interface Port-channel1
no switchport
ip address 10.2.4.14 255.255.255.252
end

there isn't any single way to make the channel, and negotiation protocols are an option as well, such as pagp and lacp...

dsw2#sh int port-channel1
Port-channel1 is up, line protocol is up (connected)
  Hardware is EtherChannel, address is 000b.5fc9.0000 (bia 000b.5fc9.0000)
  Internet address is 10.2.4.14/30
  MTU 1500 bytes, BW 200000 Kbit, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255

note the aggregate bandwidth...  understanding the protocols and when to use them, esp. lacp is vital...

make the ports into trunks first (i think thats best) then channelize them...

asw2#config t
Enter configuration commands, one per line.  End with CNTL/Z.
asw2(config)#int range f0/5 -6
asw2(config-if-range)#sw mode trunk
asw2(config-if-range)#channel-g 1 mode on
Creating a port-channel interface Port-channel 1

note they are suspended because i didn't want to connect them, but they show as members of po1... i hope that doesn't confuse you, i haven't had any coffee yet...

asw2#sh int f0/5 sw
Name: Fa0/5
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: down (suspended member of bundle Po1)
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: On

asw2#sh int f0/6 sw
Name: Fa0/6
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: down (suspended member of bundle Po1)
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: On

the channel is not a trunk... the port channel is an aggregation of 2 or more links... a trunk behaves much differently due to stp... like the output below... f0/1 -2 are channelized whereas f0/3 - 4 are trunked on dsw2... stp is in effect on the trunks only...
dsw2#sh spann


VLAN0001
  Spanning tree enabled protocol ieee
  Root ID    Priority    32769
             Address     0009.b73f.ce80
             Cost        19
             Port        3 (FastEthernet0/3)
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec


  Bridge ID  Priority    32769  (priority 32768 sys-id-ext 1)
             Address     000b.5fc9.0000
             Hello Time   2 sec  Max Age 20 sec  Forward Delay 15 sec
             Aging Time 300


Interface           Role Sts Cost      Prio.Nbr Type
------------------- ---- --- --------- -------- --------------------------------


Fa0/3               Root FWD 19        128.3    P2p
Fa0/4               Desg FWD 19        128.4    P2p




dsw2#sh int po1
Port-channel1 is up, line protocol is up (connected)
  Hardware is EtherChannel, address is 000b.5fc9.0000 (bia 000b.5fc9.0000)
  Internet address is 10.2.4.14/30
  MTU 1500 bytes, BW 200000 Kbit, DLY 100 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, media type is 10/100BaseTX
  input flow-control is off, output flow-control is unsupported
  Members in this channel: Fa0/1 Fa0/2