port-channel between cisco switch and router

Hi, can you please give an advise how to configure port-channel between cisco 2811 router and cisco 3750 switch stack. Switch 3750 stack uses stackwise tech. on switch 3750:

interface port-channel 1 switchport trunk encapsulation dot1q switchport trunk native vlan 25 switchport trunk allowed vlan 25,867,868,1002-1005 switchport mode trunk duplex full

interface GigabitEthernet1/0/5 switchport trunk encapsulation dot1q switchport trunk native vlan 25 switchport trunk allowed vlan 25,867,868,1002-1005 switchport mode trunk speed 100 duplex full channel-group 1 mode on

interface GigabitEthernet2/0/10 switchport trunk encapsulation dot1q switchport trunk native vlan 25 switchport trunk allowed vlan 25,867,868,1002-1005 switchport mode trunk speed 100 duplex full channel-group 1 mode on

interface Vlan25 ip address 172.27.65.174 255.255.255.192 no ip redirects ip directed-broadcast no ip route-cache cef no ip route-cache

on router 2811:

interface Port-channel1 no ip address duplex full ! interface Port-channel1.1 encapsulation dot1Q 25 native ip address 172.27.65.172 255.255.255.192 no snmp trap link-status ! interface FastEthernet0/0 no ip address duplex full speed 100 channel-group 1 ! interface FastEthernet0/1 no ip address duplex full speed 100 channel-group 1

It is not possible to ping from router vlan 25 on switch.

Thanks in advance. Nikolay

Reply to
nenni
Loading thread data ...

What kind of module is in the 2800. You may want to check out the following link which discusses etherchannel only being manual and for link-redundancy on high-speed WAN cards:

Q. Is Cisco EtherChannel supported? A. Yes. Cisco EtherChannel is supported for link redundancy, and can only be set up manually. Negotiation protocols such as Link Aggregation Control Protocol (LACP) (802.ad) and Port Aggregation Protocol (PAgP) are not supported.

formatting link
Additionally, I don't even think one of those routers will support that kind of bandwidth. This link also has some more information if the card is not the WAN card:

formatting link

Reply to
Trendkill

did the port channel interface come up ?

for both the switch and the router post:

show version

show interface port-channel 1

show interface ! for each of the links in the etherchannel bundle

show interface trunk

sh cdp nei

Reply to
Merv

Hi, i am posting output of sh commands:

switch 3750:

sncrx-cat3-1a(config-if)#show etherchannel sncrx-cat3-1a#show etherchannel Channel-group listing: ----------------------

Group: 1

---------- Group state = L2 Ports: 2 Maxports = 8 Port-channels: 1 Max Port-channels = 1 Protocol: -

sncrx-cat3-1a#sh interfaces gigabitEthernet 1/0/5 switchport Name: Gi1/0/5 Switchport: Enabled Administrative Mode: trunk Operational Mode: trunk (member of bundle Po1) Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: On Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 25 (VLAN0025) Administrative Native VLAN tagging: enabled Voice VLAN: none Administrative private-vlan host-association: none Administrative private-vlan mapping: none Administrative private-vlan trunk native VLAN: none Administrative private-vlan trunk Native VLAN tagging: enabled Administrative private-vlan trunk encapsulation: dot1q Administrative private-vlan trunk normal VLANs: none Administrative private-vlan trunk private VLANs: none Operational private-vlan: none Trunking VLANs Enabled: ALL Pruning VLANs Enabled: 2-1001 Capture Mode Disabled Capture VLANs Allowed: ALL

Protected: false Unknown unicast blocked: disabled Unknown multicast blocked: disabled Appliance trust: non

sncrx-cat3-1a#sh interfaces gigabitEthernet 2/0/10 switchport Name: Gi2/0/10 Switchport: Enabled Administrative Mode: trunk Operational Mode: trunk (member of bundle Po1) Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: On Access Mode VLAN: 1 (default) Trunking Native Mode VLAN: 25 (VLAN0025) Administrative Native VLAN tagging: enabled Voice VLAN: none Administrative private-vlan host-association: none Administrative private-vlan mapping: none Administrative private-vlan trunk native VLAN: none Administrative private-vlan trunk Native VLAN tagging: enabled Administrative private-vlan trunk encapsulation: dot1q Administrative private-vlan trunk normal VLANs: none Administrative private-vlan trunk private VLANs: none Operational private-vlan: none Trunking VLANs Enabled: ALL Pruning VLANs Enabled: 2-1001 Capture Mode Disabled Capture VLANs Allowed: ALL

Protected: false Unknown unicast blocked: disabled Unknown multicast blocked: disabled Appliance trust: none

sncrx-cat3-1a#sh interfaces gigabitEthernet 1/0/5 trunk

Port Mode Encapsulation Status Native vlan Gi1/0/5 on 802.1q trunk-inbndl 25 (Po1)

Port Vlans allowed on trunk Gi1/0/5 1-4094

Port Vlans allowed and active in management domain Gi1/0/5 1-4,7,25,867-868

Port Vlans in spanning tree forwarding state and not pruned Gi1/0/5 1-4,7,25,867-868 sncrx-cat3-1a#sh interfaces gigabitEthernet 2/0/10 trunk

Port Mode Encapsulation Status Native vlan Gi2/0/10 on 802.1q trunk-inbndl 25 (Po1)

Port Vlans allowed on trunk Gi2/0/10 1-4094

Port Vlans allowed and active in management domain Gi2/0/10 1-4,7,25,867-868

Port Vlans in spanning tree forwarding state and not pruned Gi2/0/10 1-4,7,25,867-868

ncrx-cat3-1a#sh cdp neighbors Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone

Device ID Local Intrfce Holdtme Capability Platform Port ID

sncrx-con-serv-2.yourdomain.com Gig 1/0/5 160 R S I

2811 Fas 0/1 sncrx-con-serv-2.yourdomain.com Gig 2/0/10 150 R S I 2811 Fas 0/0

sncrx-cat3-1a#sh version Cisco IOS Software, C3750 Software (C3750-IPBASE-M), Version

12.2(25)SEE2, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2006 by Cisco Systems, Inc. Compiled Fri 28-Jul-06 08:46 by yenanh Image text-base: 0x00003000, data-base: 0x00EE3E54

ROM: Bootstrap program is C3750 boot loader BOOTLDR: C3750 Boot Loader (C3750-HBOOT-M) Version 12.2(25r)SEE3, RELEASE SOFTWARE (fc1)

sncrx-cat3-1a uptime is 1 day, 7 hours, 3 minutes System returned to ROM by power-on System restarted at 10:16:27 GMT Wed Oct 24 2007 System image file is "flash:/c3750-ipbase-mz.122-25.SEE2.bin"

cisco WS-C3750G-24TS (PowerPC405) processor (revision N0) with 118784K/

12280K bytes of memory. Processor board ID CAT1110ZKQC Last reset from power-on 4 Virtual Ethernet interfaces 56 Gigabit Ethernet interfaces The password-recovery mechanism is enabled.

512K bytes of flash-simulated non-volatile configuration memory. Base ethernet MAC Address : 00:1B:2B:B5:27:00 Motherboard assembly number : 73-7058-14 Power supply part number : 341-0045-01 Motherboard serial number : CAT11105PB4 Power supply serial number : LIT104709VU Model revision number : N0 Motherboard revision number : A0 Model number : WS-C3750G-24TS-S System serial number : CAT1110ZKQC Top Assembly Part Number : 800-21894-07 Top Assembly Revision Number : A0 Version ID : V07 CLEI Code Number : COM7800ARA Hardware Board Revision Number : 0x09

Switch Ports Model SW Version SW Image

------ ----- ----- ---------- ---------- 1 28 WS-C3750G-24TS 12.2(25)SEE2 C3750- IPBASE-M

  • 2 28 WS-C3750G-24TS 12.2(25)SEE2 C3750- IPBASE-M

Switch 01

--------- Switch Uptime : 1 day, 6 hours, 48 minutes Base ethernet MAC Address : 00:1B:8F:F7:4B:80 Motherboard assembly number : 73-7058-14 Power supply part number : 341-0045-01 Motherboard serial number : CAT11145EU1 Power supply serial number : LIT110501HN Model revision number : P0 Motherboard revision number : A0 Model number : WS-C3750G-24TS-S System serial number : CAT1114RKMF Top assembly part number : 800-21894-07 Top assembly revision number : A0 Version ID : V07 CLEI Code Number : COM7800ARA

Configuration register is 0xF

#2811 router:

sncrx-con-serv-2#sh interfaces port-channel 1 Port-channel1 is up, line protocol is up Hardware is FEChannel, address is 001b.5469.dbb8 (bia 001b.

5469.dbb8) MTU 1500 bytes, BW 200000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set Keepalive set (10 sec) ARP type: ARPA, ARP Timeout 04:00:00 No. of active members in this channel: 2 Member 0 : FastEthernet0/0 , Full-duplex, 100Mb/s Member 1 : FastEthernet0/1 , Full-duplex, 100Mb/s No. of Non-active members in this channel: 0 Last input 2d00h, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/150/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/80 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 122 packets output, 7804 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out

sncrx-con-serv-2#sh interfaces port-channel 1.1 Port-channel1.1 is up, line protocol is up Hardware is FEChannel, address is 001b.5469.dbb8 (bia 001b.

5469.dbb8) Internet address is 172.27.65.172/26 MTU 1500 bytes, BW 200000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 25. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never

sncrx-con-serv-2#sh interfaces port-channel 1 switchport % Po1 is not a switchable port

sncrx-con-serv-2#sh interfaces fastEthernet 0/0 switchport % Fa0/0 is not a switchable port

sncrx-con-serv-2#sh version Cisco IOS Software, 2800 Software (C2800NM-ADVSECURITYK9-M), Version

12.4(3a), RELEASE SOFTWARE (fc2) Technical Support:
formatting link
(c) 1986-2005 by Cisco Systems, Inc. Compiled Fri 30-Sep-05 13:24 by hqluong

ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)

sncrx-con-serv-2 uptime is 3 weeks, 2 days, 19 hours, 28 minutes System returned to ROM by power-on System restarted at 21:47:56 GMT Mon Oct 1 2007 System image file is "flash:c2800nm-advsecurityk9-mz.124-3a.bin"

This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

formatting link
If you require further assistance please contact us by sending email to snipped-for-privacy@cisco.com.

Cisco 2811 (revision 53.50) with 249856K/12288K bytes of memory. Processor board ID FCZ111572U3

4294967293 FastEthernet interface 1 ISDN Basic Rate interface 16 terminal lines 1 Virtual Private Network (VPN) Module DRAM configuration is 64 bits wide with parity enabled. 239K bytes of non-volatile configuration memory. 62720K bytes of ATA CompactFlash (Read/Write)

Configuration register is 0x2102

Thanks for replies. I am just starting to think if it is supported on this router version and modules?

Nikolay

Reply to
nenni

Well the first things is that the versions of IOS being used on the router and on the switch have both been yanked by Cisco.

You should upgrade both before continuing you current implementation.

I do not see anything syntacilaay incorrect about the config s you posted.

I see that the router is sending packet to the port-channel 1 interface both not receiving anything.

You did not post show interface port-channel 1 for switch so cannot tell what is happening on that end.

Not sure I would use VLANS over bundles (etherchannel).

The 3750 is a L# capable device so I would simply make the interface between the device router interfaces and just use equal cost loading balacing (ECMP) tot route traffic between the 2811 and 3750

Reply to
Merv

While I agree with Merv based on my above post indicating that the router doesn't support what you need, I am also still pretty sure that router will not handle that kind of throughput. So while I would do the equal cost load sharing via layer 3, you may want to check the specs of the router as 2811s may not push that kind of routed throughput.

Reply to
Trendkill

Hi Merv, I have to make it L2 etherchannel no L3. I am not allowed to used another subnet, must be in vlan 25. Project design stuff. Thanks for replies. Nikolay

Reply to
nenni

subnet, must be in vlan 25.

Okay.

Next step is to upgrade the IOS version because you are using unsupported versions. If the issue you are encountering is a bug then perhaps it is fixed in new IOS version.

Then you can continue with troubleshooting.

Use the show interface command (without any other parameter) to check if traffic is being sent in both directionals on the physical interfaces and the port channel interface ( not the subinterfaces).

I would not change the native VLAN; leave the native VLAN as 1 and do not use VLAN 1.

Reply to
Merv

Perhaps you can share what the design requirements are.

is this a new network setup or a enhnacment to existing infrastructure ?

Reply to
Merv

The Etherchannel on builtin ports of 1800/2800/3800 series routers is not supported. Therefore, it may be configurable, it may show signs of actually working (or not) but when it's not supported - it may not work (and usually doesn't).

You may get some info about this here:

formatting link
"Q: Do the LAN interfaces on the platforms support aggregation through EtherChannel or PAGP technologies?")

and here:

formatting link
"except that Cisco EtherChannel? is not supported on the on-board Gigabit Ethernet interfaces")

Reply to
Łukasz Bromir

Thank you Lukasz

Reply to
nenni

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.