Solved

Cisco SG300 LACP config

Posted on 2013-12-27
11
6,851 Views
Last Modified: 2014-01-06
We purchased a 2nd switch (sg300-28) to add redundancy. Both switches are the same model, and both set to L3 Mode.

Can someone please review the below config to verify if LACP is correctly configured between the two switches on ports 27 & 28 to allow all traffic to flow between the two switches.

FYI, the factory default VLAN was changed from 1 to 1000 to match the 1st switch.

config-file-header
i1lvsw02
v1.3.5.58 / R750_NIK_1_35_647_358
CLI v1.0
set system mode router

file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
vlan database
default-vlan vlan 1000
exit
vlan database
vlan 1-2,101,320,400,646,649,1020,1030,1040
exit
voice vlan state disabled
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
bonjour interface range vlan 1
hostname i1lvsw02
line ssh
exec-timeout 30
exit
no passwords complexity enable
username cisco password encrypted da193767a7ba202949500df3547a3151dc0ee4a5 privi                                                                                        lege 15
username pavel password encrypted a5f6338dcec5cg56440a92f22c04098e5808fafc privi                                                                                        lege 15
ip ssh server
snmp-server server
snmp-server location "Las Vegas"
snmp-server contact "Pavel"
ip http timeout-policy 1800 http-only
clock timezone PST -8
clock summer-time web recurring usa
sntp broadcast client enable both
clock source sntp
clock source browser
sntp unicast client enable
sntp unicast client poll
sntp server 64.250.229.100 poll
sntp server 205.233.73.201 poll
ip telnet server
!
interface vlan 2
 name Transit
 ip address 10.0.15.250 255.255.255.248
!
interface vlan 101
 name DMZ
 ip address 10.0.0.1 255.255.255.0
!
interface vlan 320
 name Server
 ip address 10.0.32.2 255.255.255.0
!
interface vlan 400
 name Citrix
!
interface vlan 646
 name Batch
!
interface vlan 649
 name Desktop
 ip address 10.0.64.130 255.255.255.128
!
interface vlan 1000
 ip address 10.10.0.2 255.255.255.0
!
interface vlan 1020
 name Storage
 ip address 10.20.0.2 255.255.255.0
!
interface vlan 1030
 name Replication
 ip address 10.30.0.2 255.255.255.0
!
interface vlan 1040
 name HSRP
!
interface gigabitethernet1
 switchport mode access
!
interface gigabitethernet2
 switchport mode access
!
interface gigabitethernet3
 switchport mode access
!
interface gigabitethernet4
 switchport mode access
!
interface gigabitethernet5
 switchport mode access
!
interface gigabitethernet6
 switchport mode access
!
interface gigabitethernet7
 switchport mode access
!
interface gigabitethernet8
 switchport mode access
!
interface gigabitethernet9
 switchport mode access
!
interface gigabitethernet10
 switchport mode access
!
interface gigabitethernet11
 switchport mode access
!
interface gigabitethernet12
 switchport mode access
!
interface gigabitethernet13
 switchport mode access
!
interface gigabitethernet14
 switchport mode access
!
interface gigabitethernet15
 switchport mode access
!
interface gigabitethernet16
 switchport mode access
!
interface gigabitethernet17
 switchport mode access
!
interface gigabitethernet18
 switchport mode access
!
interface gigabitethernet19
 switchport mode access
!
interface gigabitethernet20
 switchport mode access
!
interface gigabitethernet21
 switchport mode access
!
interface gigabitethernet22
 switchport mode access
!
interface gigabitethernet23
 switchport mode access
!
interface gigabitethernet24
 switchport mode access
!
interface gigabitethernet25
 switchport mode access
!
interface gigabitethernet26
 switchport mode access
!
interface gigabitethernet27
 no negotiation
 channel-group 1 mode auto
 switchport mode access
!
interface gigabitethernet28
 no negotiation
 channel-group 1 mode auto
 switchport mode access
!
interface Port-channel1
 flowcontrol on
 description SwitchToSwitch
 switchport trunk allowed vlan add 2,101,320,400,646,649,1020,1030
 switchport trunk allowed vlan add 1040
!
exit
macro auto disabled
ip default-gateway 10.0.15.254

Open in new window

0
Comment
Question by:pzozulka
  • 5
  • 4
  • 2
11 Comments
 
LVL 45

Expert Comment

by:Craig Beck
Comment Utility
Nearly there, but try this instead...

interface gigabitethernet27
 no negotiation
 channel-group 1 mode active
 switchport trunk allowed vlan add 2,101,320,400,646,649,1020,1030
 switchport trunk allowed vlan add 1040
 switchport mode trunk
!
interface gigabitethernet28
 no negotiation
 channel-group 1 mode active
 switchport trunk allowed vlan add 2,101,320,400,646,649,1020,1030
 switchport trunk allowed vlan add 1040
 switchport mode trunk
!
interface Port-channel1
 flowcontrol on
 description SwitchToSwitch
 switchport trunk allowed vlan add 2,101,320,400,646,649,1020,1030
 switchport trunk allowed vlan add 1040
 switchport mode trunk

Open in new window

0
 
LVL 8

Author Comment

by:pzozulka
Comment Utility
From the Admin guide:

To add a port to the LAG, it cannot belong to any VLAN except the default VLAN.
0
 
LVL 45

Expert Comment

by:Craig Beck
Comment Utility
I think that means you must create the LAG before you add VLANs to it.  IIRC you can't configure the VLANs on the LAG interface until it is created.
0
 
LVL 8

Author Comment

by:pzozulka
Comment Utility
I get an error message when trying to add the interface to the channel-group. It says: port gi27 belongs to a VLAN.
0
 
LVL 45

Expert Comment

by:Craig Beck
Comment Utility
Ok it may just be that it doesn't like the existing configuration, as there are already VLANs added to the interfaces.

Default the interfaces first, then try again, like this...

default interface gigabitethernet27
default interface gigabitethernet28
interface gigabitethernet27
 no negotiation
 channel-group 1 mode active
 switchport trunk allowed vlan add 2,101,320,400,646,649,1020,1030
 switchport trunk allowed vlan add 1040
 switchport mode trunk
!
interface gigabitethernet28
 no negotiation
 channel-group 1 mode active
 switchport trunk allowed vlan add 2,101,320,400,646,649,1020,1030
 switchport trunk allowed vlan add 1040
 switchport mode trunk
!
interface Port-channel1
 flowcontrol on
 description SwitchToSwitch
 switchport trunk allowed vlan add 2,101,320,400,646,649,1020,1030
 switchport trunk allowed vlan add 1040
 switchport mode trunk

Open in new window

0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 8

Author Comment

by:pzozulka
Comment Utility
Having trouble with the default interface command.

Tried to do it from the main cli, as well as from "config t", and from the "<config>int gi27", but it says the command is not recognized.

This is a sg300-28 switch (small business) in L3 mode.
0
 
LVL 10

Expert Comment

by:Mohammed Rahman
Comment Utility
how about interface GE27

I have checked the SG300 Series CLI guide and the interface command is

switch(config)# interface gi1

Guide Link For your reference. Cisco 300 Series CLI Guide

Is your previous question: Creating a trunk between two switches still unresolved?
0
 
LVL 8

Author Comment

by:pzozulka
Comment Utility
craigbeck: I'm having difficulty with the "default" command. It says unrecognized.

Mohammad Rahman: I'm getting mixed feedback from various sources. Cisco Small Business Support is telling me that the recommendations provided by forums is incorrect because the switches are set to L3 mode, and thus require me to setup static routes on each switch for each VLAN.

Example:
Switch A - 10.10.0.1
ip route 10.10.0.0 255.255.255.255.0 10.10.0.2

Switch B - 10.10.0.2
ip route 10.10.0.0 255.255.255.255.0 10.10.0.1

According to them, since it's set to L3, LACP will not work between the two switches without also configuring static routes between each of the VLANs.

Is this true?
0
 
LVL 8

Author Comment

by:pzozulka
Comment Utility
Also for Layer 3, what load-balancing mode should I configure. The default is by MAC address, but the other option is "By IP and MAC Address".
0
 
LVL 45

Assisted Solution

by:Craig Beck
Craig Beck earned 250 total points
Comment Utility
Cisco are wrong.  You can't run an EtherChannel if the individual ports are in L3 mode, but they're not so its fine.  You don't need a static route per VLAN either that's just nonsense.

You can use the default load-balancing method and it should be fine.
0
 
LVL 10

Accepted Solution

by:
Mohammed Rahman earned 250 total points
Comment Utility
This is what I read across few forums:

MAC Address—Perform load balancing by source and destination MAC addresses on all packets.
IP /  MAC Address—Perform load balancing by the source and destination IP addresses on IP packets, and by the source and destination MAC addresses on non-IP packets.

SG300 series doesn't support balance by port, It supports by IP and MAC.

The switch supports 2 load balance toggles

config t
port-channel load-balance src-dst-mac-ip

config t
port-channel load-balance src-dst-mac

You might find Setting LAG Article interesting. Ignore the VMWare part in it. It is for SG300-20 and I hope the same should apply to SG300-28

Select IP/MAC Address under "Load Balance Algorithm" and then start following steps from "creating first link aggregation group...."

Configuring Link Aggregation

Apologies for providing ONLY links and no direct answers. You have the equipment with you and probably you will be able to setup things by following instructions from those links. OR other EEs could :-)
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

This tutorial will go through the steps required to write a script that will back up the configuration settings of a HP-ProCurve switch. You will need to get the following things to follow this tutorial: Telnet Scripting Tool e.g. TST10.exe …
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now