Forum Discussion

Aspirant

Nov 18, 2016

Solved

M4300 SFP Port Trunking Issues

Hi all,

I recently purchased 2 new M4300 and form a stack. After stacking the SW, I started to setup the switch as normal, the management VLAN, IP, the rest of vlan, subnet of those VLAN. Since it is a core SW for us, I didn't assign ports to each vlan except the defult vlan. Instead, I setup trunking on port 2- 8 (SFP), and was planning to connect these ports the other layer 2 sw in each floor.

after I finished the setup on trunking, I found that the port were labeled as "U" which means it is an untag port rather than "T" and it was not expected! So I had a test on port 9 and 10 (which is not SFP port), and found that it was normal marked with "T" label. I tried to click on the SFP port and make it "T", but when I applied the setting, the label was changed back to "U". So, Could anyone give me a hints? Thank you.

Troubleshooting

DanielZhang
Nov 24, 2016
Hi Kelvin,

It's a good news that the failover problem resolved.:smileyhappy:

Let's carry on the VRRP scenario.

I have checked the maintenance file just you sent to us.

1) Congratulation！The address (192.168.100.2 ) is the virtual IP address of VRRP on Firewall.

Because this IP have same prefix mac-address header just like (00:00:5E:00:xx:xx).

It's the standard of VRRP for mac-address behavior.

2) Good finding! The "Link state detection” is very useful for VRRP status.

So we need to set the IP for heartbeat on each Firewall that could monitor VRRP all the time.

But 192.168.100.1 is not the heartbeat address for Firewall that is VLAN interface on M4300-Stack.

So Could you set an IP address on Firewall A and B that is not VRRP protocol.

Such as:

192.168.100.10 /24 on Firewall A.

192.168.100.20 /24 on Firewall B.

Then,

Set Link state detection IP address to 192.168.100.20 on Firewall A.

Set Link state detection IP address to 192.168.100.10 on Firewall B.

That will make Firewall detect each other with this configuration.

3) Could you share me the configuration page or command on your Firewall about LAG/Port/IP address/VRRP configuration？

The private message is RECOMMENDED.

I'm not very professional on Firewall of other company.

Just want to help analyze.:smileyhappy:

Look forward to your reply.

Regards,

Daniel.

29 Replies

LaurentMa
NETGEAR Expert
Nov 18, 2016
Hi KelvinFu

Welcome the community!

We are going to help you. At first glance without other indications from you, it seems you have a conflict between the Access Port / Trunk Port - Native VLAN configuration, and the more 802.1Q-like Untagged / Tagged Ports - PVID configuration. Our M4300 Managed switch series offers both ways, either in Web interface (GUI) and in CLI (local console, Telnet or SSH). You may want to revisit your configuration on the other side: did you configure these ports 1 to 8 in Access port mode before? they should be Trunk ports instead.

Could you copy and paste your running config file portion with VLAN database and VLAN port membership? This will offer fastest way to resolution to all of us in the Community. You are right, that in Port general mode, your trunk ports should show T since they are all supposed to carry tagged VLAN traffic.

Thanks in advance,
- KelvinFu
  Aspirant
  Nov 19, 2016
  Hi Laurent,
  
  Thx for the reply, since i'm off from work, I will upload the file on Moday. before I have the runnnig for you, I would like to share more info to you first.
  
  We have a HA design by enabling VRRP in Firewall and stacking in Layer 3 Core SW, also we have Layer 2 access SW in each floor and connect it to both Core stack member.
  
  In this stage, we are not starting on the configurion of Layer 2, instead we focus on Layer 3.
  
  We have totally 7 VLAN in core sw
  
  1 - default - 192.168.200.0/24 - 192.168.200.1 as vlan interface (I assumed this is the native vlan as same as cisco? so i don't have check on it since i'm not very familiar with the CLI)
  2 - vlan 2 - 192.168.0.0/24 - 192.168.0.1 as vlan interface
  3 - vlan 3 - 192.168.1.0/24 - 192.168.1.1 as vlan interface
  4 - vlan 4 - 192.168.2.0/23 - 192.168.2.1 as vlan interface
  5 - vlan 5 - 192.168.4.0/23 - 192.168.4.1 as vlan interface
  6 - vlan 6 - 192.168.6.0/24 - 192.168.6.1 as vlan interface
  7 - vlan 7 - 192.168.100.0/30 - 192.168.100.1 as vlan interface (connect to VRRP firewall group, port 9 to firewall A, and port 10 to firewall B)
  
  I then set port 2-10 as a trunking port by using CLI, port 1 in both units are connected by stacking cable. After the setting was finished, I verified the ports on WebGUI to make sure it was being trunked, but with no luck, port 2-8 was label as "U" while 9-10 are nromal to be marked as "T", the only difference between 9-10 and 2-8 is that 9-10 are ethernet port while 2-8 are SFP port. When I saw this abnormal thing, I manually marked the port 2-8 to "T" and clicked apply. Then....it wasn't applied as you knew and changed back to "U". The switches are brand new, so I didn't have another setting before this, also I had reset the switch to factory default before I made those change. So I don't think I did have configure on those ports.
  - KelvinFu
    Aspirant
    Nov 21, 2016
    Unit 1
    
    !Current Configuration:
    !
    !System Description "M4300-8X8F ProSAFE 8-port 10GBASE-T and 8-port 10G SFP+, 12.0.2.6, 1.0.0.7"
    !System Software Version "12.0.2.6"
    !System Up Time "2 days 22 hrs 7 mins 47 secs"
    !Additional Packages QOS,Multicast,IPv6,IPv6 Management,Stacking,Routing
    !Current SNTP Synchronized Time: SNTP Last Attempt Status Is Not Successful
    !
    hostname "CoreSW-1"
    set gvrp adminmode
    enable password f6f136b1793bd7a9da7f3edfac514c690156a6088107f654742867e597514667e20688da5f2057335dc3da47d4d669ad616f9d416d4a700979e4146ee8f43119 encrypted
    serviceport protocol none
    serviceport ip 10.251.251.251 255.255.255.0 0.0.0.0
    vlan database
    vlan 2-7
    vlan name 2 "Server"
    vlan name 3 "CCTV"
    vlan name 4 "Operation"
    vlan name 5 "Academic"
    vlan name 6 "Public"
    vlan name 7 "RoutingZone"
    vlan routing 1 1
    vlan routing 2 2
    vlan routing 3 3
    vlan routing 4 4
    vlan routing 5 5
    vlan routing 6 6
    vlan routing 7 7
    vlan association subnet 192.168.0.0 255.255.255.0 2
    vlan association subnet 192.168.1.0 255.255.255.0 3
    vlan association subnet 192.168.2.0 255.255.254.0 4
    vlan association subnet 192.168.4.0 255.255.254.0 5
    vlan association subnet 192.168.6.0 255.255.255.0 6
    vlan association subnet 192.168.100.0 255.255.255.0 7
    vlan association subnet 192.168.200.0 255.255.255.0 1
    exit
    configure
    stack
    member 1 6
    member 2 6
    exit
    switch 1 priority 1
    switch 2 priority 2
    slot 1/0 6
    set slot power 1/0
    no set slot disable 1/0
    slot 2/0 6
    set slot power 2/0
    no set slot disable 2/0
    username "admin" password 0cc141558cdf3fe2475b8528c2d8d41e00d1351e56d2f2984581aac7521798d7d1ad50eebe599947ee39125507c38a81f3ac18f4f7f2c9a0608cd2c56607cbf1 level 15 encrypted
    line console
    exit
    line telnet
    exit
    line ssh
    exit
    snmp-server sysname "CoreSW-1"
    !
    ip access-list Public-ACL
    deny ip 192.168.6.0 0.0.0.255 192.168.0.0 0.0.0.255
    deny ip 192.168.6.0 0.0.0.255 192.168.1.0 0.0.0.255
    deny ip 192.168.6.0 0.0.0.255 192.168.2.0 0.0.1.255
    deny ip 192.168.6.0 0.0.0.255 192.168.4.0 0.0.1.255
    permit ip any any
    exit
    interface 1/0/1
    vlan participation auto 1
    exit
    interface 1/0/2
    bandwidth 10000000
    set gvrp interfacemode
    switchport mode trunk
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    routing
    ip mtu 1500
    exit
    interface 1/0/3
    bandwidth 10000000
    set gvrp interfacemode
    switchport mode trunk
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    vlan tagging 1
    routing
    ip mtu 1500
    exit
    interface 1/0/4
    bandwidth 1000000
    set gvrp interfacemode
    switchport mode trunk
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    routing
    ip mtu 1500
    exit
    interface 1/0/5
    bandwidth 10000000
    set gvrp interfacemode
    switchport mode trunk
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    routing
    ip mtu 1500
    exit
    interface 1/0/6
    bandwidth 100000
    set gvrp interfacemode
    switchport mode trunk
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    routing
    ip mtu 1500
    exit
    interface 1/0/7
    bandwidth 10000000
    set gvrp interfacemode
    switchport mode trunk
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    routing
    ip mtu 1500
    exit
    interface 1/0/8
    bandwidth 100000
    set gvrp interfacemode
    switchport mode trunk
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    routing
    ip mtu 1500
    exit
    interface 1/0/9
    switchport mode access
    switchport access vlan 7
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    vlan tagging 3
    exit
    interface 1/0/10
    switchport mode access
    switchport access vlan 7
    switchport trunk allowed vlan 1-7
    vlan participation auto 1
    exit
    interface 1/0/11
    switchport mode access
    vlan pvid 7
    vlan participation auto 1
    vlan participation include 7
    exit
    interface 1/0/12
    switchport mode access
    vlan pvid 7
    vlan participation auto 1
    vlan participation include 7
    exit
    interface 1/0/13
    switchport mode access
    vlan pvid 7
    vlan participation auto 1
    vlan participation include 7
    exit
    interface 1/0/14
    switchport mode access
    vlan pvid 7
    vlan participation auto 1
    vlan participation include 7
    exit
    interface 1/0/15
    switchport mode access
    vlan participation auto 1
    exit
    interface 1/0/16
    switchport mode access
    vlan participation auto 1
    exit
    interface 2/0/1
    vlan participation auto 1
    exit
    interface 2/0/2
    set gvrp interfacemode
    vlan participation auto 1
    exit
    interface 2/0/3
    set gvrp interfacemode
    vlan participation auto 1
    exit
    interface 2/0/4
    set gvrp interfacemode
    vlan participation auto 1
    exit
    interface 2/0/5
    set gvrp interfacemode
    vlan participation auto 1
    exit
    interface 2/0/6
    set gvrp interfacemode
    vlan participation auto 1
    exit
    interface 2/0/7
    set gvrp interfacemode
    vlan participation auto 1
    exit
    interface 2/0/8
    set gvrp interfacemode
    vlan participation auto 1
    exit
    interface 2/0/9
    vlan participation auto 1
    exit
    interface 2/0/10
    vlan participation auto 1
    exit
    interface 2/0/11
    vlan participation auto 1
    exit
    interface 2/0/12
    vlan participation auto 1
    exit
    interface 2/0/13
    vlan participation auto 1
    exit
    interface 2/0/14
    vlan participation auto 1
    exit
    interface 2/0/15
    vlan participation auto 1
    exit
    interface 2/0/16
    vlan participation auto 1
    exit
    interface lag 1
    vlan participation auto 1
    exit
    interface lag 2
    vlan participation auto 1
    exit
    interface lag 3
    vlan participation auto 1
    exit
    interface lag 4
    vlan participation auto 1
    exit
    interface lag 5
    vlan participation auto 1
    exit
    interface lag 6
    vlan participation auto 1
    exit
    interface lag 7
    vlan participation auto 1
    exit
    interface lag 8
    vlan participation auto 1
    exit
    interface lag 9
    vlan participation auto 1
    exit
    interface lag 10
    vlan participation auto 1
    exit
    interface lag 11
    vlan participation auto 1
    exit
    interface lag 12
    vlan participation auto 1
    exit
    interface lag 13
    vlan participation auto 1
    exit
    interface lag 14
    vlan participation auto 1
    exit
    interface lag 15
    vlan participation auto 1
    exit
    interface lag 16
    vlan participation auto 1
    exit
    interface lag 17
    vlan participation auto 1
    exit
    interface lag 18
    vlan participation auto 1
    exit
    interface lag 19
    vlan participation auto 1
    exit
    interface lag 20
    vlan participation auto 1
    exit
    interface lag 21
    vlan participation auto 1
    exit
    interface lag 22
    vlan participation auto 1
    exit
    interface lag 23
    vlan participation auto 1
    exit
    interface lag 24
    vlan participation auto 1
    exit
    interface lag 25
    vlan participation auto 1
    exit
    interface lag 26
    vlan participation auto 1
    exit
    interface lag 27
    vlan participation auto 1
    exit
    interface lag 28
    vlan participation auto 1
    exit
    interface lag 29
    vlan participation auto 1
    exit
    interface lag 30
    vlan participation auto 1
    exit
    interface lag 31
    vlan participation auto 1
    exit
    interface lag 32
    vlan participation auto 1
    exit
    interface lag 33
    vlan participation auto 1
    exit
    interface lag 34
    vlan participation auto 1
    exit
    interface lag 35
    vlan participation auto 1
    exit
    interface lag 36
    vlan participation auto 1
    exit
    interface lag 37
    vlan participation auto 1
    exit
    interface lag 38
    vlan participation auto 1
    exit
    interface lag 39
    vlan participation auto 1
    exit
    interface lag 40
    vlan participation auto 1
    exit
    interface lag 41
    vlan participation auto 1
    exit
    interface lag 42
    vlan participation auto 1
    exit
    interface lag 43
    vlan participation auto 1
    exit
    interface lag 44
    vlan participation auto 1
    exit
    interface lag 45
    vlan participation auto 1
    exit
    interface lag 46
    vlan participation auto 1
    exit
    interface lag 47
    vlan participation auto 1
    exit
    interface lag 48
    vlan participation auto 1
    exit
    interface lag 49
    vlan participation auto 1
    exit
    interface lag 50
    vlan participation auto 1
    exit
    interface lag 51
    vlan participation auto 1
    exit
    interface lag 52
    vlan participation auto 1
    exit
    interface lag 53
    vlan participation auto 1
    exit
    interface lag 54
    vlan participation auto 1
    exit
    interface lag 55
    vlan participation auto 1
    exit
    interface lag 56
    vlan participation auto 1
    exit
    interface lag 57
    vlan participation auto 1
    exit
    interface lag 58
    vlan participation auto 1
    exit
    interface lag 59
    vlan participation auto 1
    exit
    interface lag 60
    vlan participation auto 1
    exit
    interface lag 61
    vlan participation auto 1
    exit
    interface lag 62
    vlan participation auto 1
    exit
    interface lag 63
    vlan participation auto 1
    exit
    interface lag 64
    vlan participation auto 1
    exit
    interface lag 65
    vlan participation auto 1
    exit
    interface lag 66
    vlan participation auto 1
    exit
    interface lag 67
    vlan participation auto 1
    exit
    interface lag 68
    vlan participation auto 1
    exit
    interface lag 69
    vlan participation auto 1
    exit
    interface lag 70
    vlan participation auto 1
    exit
    interface lag 71
    vlan participation auto 1
    exit
    interface lag 72
    vlan participation auto 1
    exit
    interface lag 73
    vlan participation auto 1
    exit
    interface lag 74
    vlan participation auto 1
    exit
    interface lag 75
    vlan participation auto 1
    exit
    interface lag 76
    vlan participation auto 1
    exit
    interface lag 77
    vlan participation auto 1
    exit
    interface lag 78
    vlan participation auto 1
    exit
    interface lag 79
    vlan participation auto 1
    exit
    interface lag 80
    vlan participation auto 1
    exit
    interface lag 81
    vlan participation auto 1
    exit
    interface lag 82
    vlan participation auto 1
    exit
    interface lag 83
    vlan participation auto 1
    exit
    interface lag 84
    vlan participation auto 1
    exit
    interface lag 85
    vlan participation auto 1
    exit
    interface lag 86
    vlan participation auto 1
    exit
    interface lag 87
    vlan participation auto 1
    exit
    interface lag 88
    vlan participation auto 1
    exit
    interface lag 89
    vlan participation auto 1
    exit
    interface lag 90
    vlan participation auto 1
    exit
    interface lag 91
    vlan participation auto 1
    exit
    interface lag 92
    vlan participation auto 1
    exit
    interface lag 93
    vlan participation auto 1
    exit
    interface lag 94
    vlan participation auto 1
    exit
    interface lag 95
    vlan participation auto 1
    exit
    interface lag 96
    vlan participation auto 1
    exit
    interface lag 97
    vlan participation auto 1
    exit
    interface lag 98
    vlan participation auto 1
    exit
    interface lag 99
    vlan participation auto 1
    exit
    interface lag 100
    vlan participation auto 1
    exit
    interface lag 101
    vlan participation auto 1
    exit
    interface lag 102
    vlan participation auto 1
    exit
    interface lag 103
    vlan participation auto 1
    exit
    interface lag 104
    vlan participation auto 1
    exit
    interface lag 105
    vlan participation auto 1
    exit
    interface lag 106
    vlan participation auto 1
    exit
    interface lag 107
    vlan participation auto 1
    exit
    interface lag 108
    vlan participation auto 1
    exit
    interface lag 109
    vlan participation auto 1
    exit
    interface lag 110
    vlan participation auto 1
    exit
    interface lag 111
    vlan participation auto 1
    exit
    interface lag 112
    vlan participation auto 1
    exit
    interface lag 113
    vlan participation auto 1
    exit
    interface lag 114
    vlan participation auto 1
    exit
    interface lag 115
    vlan participation auto 1
    exit
    interface lag 116
    vlan participation auto 1
    exit
    interface lag 117
    vlan participation auto 1
    exit
    interface lag 118
    vlan participation auto 1
    exit
    interface lag 119
    vlan participation auto 1
    exit
    interface lag 120
    vlan participation auto 1
    exit
    interface lag 121
    vlan participation auto 1
    exit
    interface lag 122
    vlan participation auto 1
    exit
    interface lag 123
    vlan participation auto 1
    exit
    interface lag 124
    vlan participation auto 1
    exit
    interface lag 125
    vlan participation auto 1
    exit
    interface lag 126
    vlan participation auto 1
    exit
    interface lag 127
    vlan participation auto 1
    exit
    interface lag 128
    vlan participation auto 1
    exit
    interface vlan 1
    routing
    ip address 192.168.200.1 255.255.255.0
    exit
    interface vlan 2
    routing
    ip address 192.168.0.1 255.255.255.0
    exit
    interface vlan 3
    routing
    ip address 192.168.1.1 255.255.255.0
    exit
    interface vlan 4
    routing
    ip address 192.168.2.1 255.255.254.0
    exit
    interface vlan 5
    routing
    ip address 192.168.4.1 255.255.254.0
    exit
    interface vlan 6
    routing
    ip address 192.168.6.1 255.255.255.0
    exit
    interface vlan 7
    routing
    ip address 192.168.100.1 255.255.255.252
    exit
    ip management vlan 1 192.168.200.1 255.255.255.0
    router rip
    exit
    router ospf
    exit
    ipv6 router ospf
    exit
    ip route 0.0.0.0 0.0.0.0 192.168.100.2
    exit