Avatar of Steve B
Steve BFlag for United States of America

asked on 

Configuring trunk ports on a Cisco Catalyst 9300

I have four Cisco 9300 switches that are stacked and serving as access layer switches.  Each switch in the stack has a 1GB network module that I had planned on using to create a linked aggregate trunk to our two Dell Force 10 core switches. The core switches are a master/slave arrangement so everything physically connected to the master is also physically connected to the slave for fault tolerance.

I wanted to make sure that I have this configured correctly in my lab environment.  This stack is replacing a Cisco 4506 chassis that currently has two trunk ports that are just regular 1GB ports on two switch blades in the chassis.

On the 9300 switch, I have the following set to define the port channel and then assigning the channel to the interfaces serving as trunks.

interface Port-channel30
 description *** TRUNK TO DELL FORCE 10 CORE SWITCHES ***
 switchport mode trunk


then on the interfaces:  _1 is the master and _2 is the slave core switch

interface GigabitEthernet1/1/1
 description *** TRUNK TO FORCE 10 4820_1 ***
 switchport mode trunk
 channel-group 30 mode active

interface GigabitEthernet2/1/1
 description *** TRUNK TO FORCE 10 4820_2 ***
 switchport mode trunk
 channel-group 30 mode active

interface GigabitEthernet3/1/1
 description *** TRUNK TO FORCE 10 4820_1 ***
 switchport mode trunk
 channel-group 30 mode active

interface GigabitEthernet4/1/1
 description *** TRUNK TO FORCE 10 4820_2 ***
 switchport mode trunk
 channel-group 30 mode active


My question is, is this the correct way to do this and am I missing anything?  Would I be better off creating two different port channels and assigning one to the trunk ports connecting to the master and another connecting to the slave core switch?  What I am trying to achieve is a 2GB trunk port to the core switch master and slave for fault tolerance.
CiscoNetworking

Avatar of undefined
Last Comment
Predrag Jovic
Avatar of atlas_shuddered
atlas_shuddered
Flag of United States of America image

The trunks and port-channel look good.

Here are couple of things that you are going to run into.

A port-channel is more about redundancy than throughput.  You are bundling a group of independent physical links into on virtual connection.  This gives the ability for the path to have fault-tolerance in that if one link goes down, the remaining links remain to pass traffic.  You do get the advantage of additional bandwidth but the algorithm will make the final determination of what traffic goes on what link.  The way this works in reality is that all traffic will be sent down link 1 until it is quite nearly full or the next data stream will saturate (generally around 80%).  Once this point is reached, traffic will begin to be passed down the next remaining physical link.  Wash, rinse, repeat until all links are being used.  Short of it is, bandwidth utilization on the links is asymmetric.

On the matter of creating a second port channel, that can be done, however, it really doesn't buy you anything but a redundant port channel that will be there but not used until the other port-channel goes offline.  This is due to how spanning tree will view the topology, specifically for loop avoidance.  Assuming that you are going to stick with only 4 net uplinks to the core, you would be cutting your usable bandwidth in any one port-channel in half.  In order to really get any benefit from it, I would break the Dell switches apart and have them run independently, then build a port-channel down to each switch.  Both port-channels would then be up at what ever aggregate bandwidth you build into the independent port-channels.
ASKER CERTIFIED SOLUTION
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
What am I missing?   Why the extra channels?   9300-->stack.  Why use an extra channel?

Load on the port channel will be asymmetric with or without VMware involvement.
Avatar of Predrag Jovic
Predrag Jovic
Flag of Poland image

The way I understand configuration, stack is connected to 2 core devices  that are not in stack (it is not mentioned that those two devices are one logical device - at least I did not understand it that way, but I may be wrong :) ) . In which case connection to each device need it's own etherchannel. For sure, if I misunderstood topology and core devices are one logical device than only one LAG is needed.

Load on LAG on switches is actually calculated according to load balancing algorithm that is configured on device (interface that will be used for specific traffic depends on hash that is result of that calculation (IP addresses, ports involved that are part of chosen LB algorithm)). In some cases it could happen that only one link is utilized and other link is never utilized and other link is never utilized. It is just different mechanism to which interface in LAG traffic is assigned (not like the one it is described in post). That's why there are different load balancing algorithms to choose from, if possible, to be able to avoid situation that traffic would use just one link or unequal LB.
Avatar of Steve B
Steve B
Flag of United States of America image

ASKER

Thanks for the comments.  It is true that the two core switches are not stacked, at least I don't think so. They ARE connected with a 40GB VLT connection but it is my understanding that one is a master and one is a standby for fault tolerance.  I have to connect to each separately via SSH to configure them so that leads me to believe they are not seen as one logical device.  Every other switch or device connected to the master also has a physical connection to the standby.  I will look more closely at the core switches to see how they are configured.  I inherited that part of the network infrastructure.
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
I the case of Nexus vPC you would ssh to two different devices (that are not one logical device) and would still be able to create one MC-LAG to both devices. I am not familiar with Dell HA configurations, so I googled a little - looks like there are, in case of Dell, two technologies similar to vPC - one is MLAG and other is VLT. Since you wrote that VLT is implemented, you can actually configure one LAG from 9300 stack to both Dell Force 10 switches in the case that ports on core switches are properly configured for multi chassis LAG (configuration manual for Dell Force 10 VLT link is provided).
Networking
Networking

Networking is the process of connecting computing devices, peripherals and terminals together through a system that uses wiring, cabling or radio waves that enable their users to communicate, share information and interact over distances. Often associated are issues regarding operating systems, hardware and equipment, cloud and virtual networking, protocols, architecture, storage and management.

102K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo