LACP doesn't work

[Criena]

Hi there,

for my home I recently bought an OS-2260 as a replacement for an HPE 1911. After some struggles with the "certified" mode and SSH not letting me in, most things are working as expected now. However, I can't get LACP to work. I set it up via the web interface, which resulted in the below four lines added to the configuration.

Code: Select all

linkagg lacp agg 1 size 4 admin-state enable
linkagg lacp agg 1actor admin-key 1
linkagg lacp port 1/1/18 actor admin-key 1
linkagg lacp port 1/1/20 actor admin-key 1

But Oper Status is "Down". The other side is an OPNsense firewall, also set up to use LACP. It always worked with the old switch, so my assumption is that there must be something I didn't consider yet on the new switch.

Documentation for ALE switches appears to be very sparse on the Internet. I found one page mentioning that the Admin Keys need to be matching for the LA interface and the ports, but that's already the case.

A nudge into the right direction is much appreciated.

Thanks
Criena

[silvio]

the config for LACP (802.3ad) is correct. Are you sure that you realy used this protocol earlier? are the interfaces up?
BR Silvio

[Criena]

Hi Silvio,

thanks for confirming that the config is correct. I'm absolutely certain LACP worked with the HPE switch. Firewall is configured as below:



I also played around with the flags the FW offers: enabled and disabled strict mode, different hash layers, etc. - all without success.

The switch tells me the two ports are selected, but not attached. I deleted the link aggregation and created it again. No change in the outcome.

So far I'm a little disappointed with my vendor choice. It's not the only problem I'm struggling with. And I'm not exactly someone with bleeding-edge requirements. But I still have hope that it's all layer 8 problems. Afterall I'm not a professional.

[silvio]

are the interfaces up? check with "show interface status"
Silvio

[Criena]

Hi Silvio,

sorry for taking a few days to respond. I'm currently lying in bed, coughing and sneezing. I ran a few commands to give you a better picture. I hope you can get something out of it.
I changed the ports from 18 and 20 to 16 and 18 - just mentioning it to avoid confusion.

Code: Select all

-> show interface status
 Chas/                DETECTED-VALUES              CONFIGURED-VALUES
 Slot/   Admin  Auto  Speed   Duplex  Pause  FEC   Speed   Duplex  Pause  FEC   Link
 Port    Status Nego  (Mbps)                 Det   (Mbps)                 Cfg   Trap  EEE
--------+------+----+--------+------+-------+----+--------+------+-------+-----+-----+---
 1/1/1      en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/2      en    en    1000   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/3      en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/4      en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/5      en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/6      en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/7      en    en      10   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/8      en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/9      en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/10     en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/11     en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/12     en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/13     en    en    1000   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/14     en    en    1000   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/15     en    en    1000   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/16     en    en    1000   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/17     en    en    1000   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/18     en    en    1000   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/19     en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/20     en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/21     en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/22     en    en     100   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/23     en    en     -      -       -    -      Auto    Auto     -    AUTO  en   en
 1/1/24     en    en     100   Full     -    -      Auto    Auto     -    AUTO  en   en
 1/1/25    dis    en     -      -       -    -      1000    Full     -    AUTO  en   dis
 1/1/26    dis    en     -      -       -    -      1000    Full     -    AUTO  en   dis
 1/1/27    dis    en     -      -       -    -      1000    Full     -    AUTO  en   dis
 1/1/28    dis    en     -      -       -    -      1000    Full     -    AUTO  en   dis

Code: Select all

-> show linkagg port

Chassis/Slot/Port  Aggregate   SNMP Id   Status    Agg  Oper   Link Prim
-------------------+----------+--------+----------+----+-----+-----+----
         1/1/16     Dynamic      1016   RESERVED      1  DOWN UP    NO
         1/1/18     Dynamic      1018   RESERVED      1  DOWN UP    NO

Code: Select all

-> show linkagg agg 1

Dynamic Aggregate
  SNMP Id                  : 40000001,
  Aggregate Number         : 1,
  SNMP Descriptor          : Dynamic Aggregate Number 1 ref 40000001 size 4,
  Name                     : lagg1,
  Admin State              : ENABLED,
  Operational State        : DOWN,
  Aggregate Size           : 4,
  Number of Selected Ports : 2,
  Number of Reserved Ports : 0,
  Number of Attached Ports : 0,
  Primary Port             : NONE,
  Port Selection Hash      : Source Destination Ip,
  Wait To Restore Time     : 0 Minutes
LACP
  MACAddress               : [00:00:00:00:00:00],
  Actor System Id          : [00:00:00:00:00:00],
  Actor System Priority    : 0,
  Actor Admin Key          : 1,
  Actor Oper Key           : 1,
  Partner System Id        : [00:00:00:00:00:00],
  Partner System Priority  : 0,
  Partner Admin Key        : 0,
  Partner Oper Key         : 267
  Agg-Down/Violation Reason: NA,

Code: Select all

-> show linkagg traffic
         Input      Input           Output     Output
Agg      Packets    Bytes           Packets    Bytes
--------+----------+---------------+----------+---------------
1        0          0               0          0

[silvio]

But also I am missing in the output the own mac: MACAddress : [00:00:00:00:00:00],
Which release do you use? If not installed - than use the actual release (5.2R01).

If this isn't helpful, than please share "show linkagg port 1/1/16" and 18 too.
There are some communication via LACP visible in the agg-command. But we can more see in the port command.

interesting are the "partner oper" entries.

[Criena]

Hi Silvio,

the firmware is 5.1R02, from November 2021. I believe that's the latest version.



Here the output of the two commands:

Code: Select all

-> show linkagg port 1/1/16

Dynamic Aggregable Port
  SNMP Id                       : 1016,
  Chassis/Slot/Port             : 1/1/16,
  Administrative State          : ENABLED,
  Operational State             : DOWN,
  Port State                    : RESERVED,
  Link State                    : UP,
  Selected Agg Number           : 1,
  Port position in the aggregate: 0,
  Primary port                  : NO
LACP
  Actor System Priority         : 0,
  Actor System Id               : [94:24:e1:da:c2:f1],
  Actor Admin Key               : 1,
  Actor Oper Key                : 1,
  Partner Admin System Priority : 0,
  Partner Oper System Priority  : 0,
  Partner Admin System Id       : [00:00:00:00:00:00],
  Partner Oper System Id        : [00:00:00:00:00:00],
  Partner Admin Key             : 0,
  Partner Oper Key              : 0,
  Selected Agg Id               : 1,
  Attached Agg Id               : 0,
  Actor Port                    : 15,
  Actor Port Priority           : 0,
  Partner Admin Port            : 0,
  Partner Oper Port             : 0,
  Partner Admin Port Priority   : 0,
  Partner Oper Port Priority    : 0,
  Actor Admin State             : act1.tim1.agg1.syn0.col0.dis0.def1.exp0,
  Actor Oper State              : act1.tim1.agg1.syn0.col0.dis0.def1.exp0,
  Partner Admin State           : act0.tim0.agg1.syn0.col1.dis1.def1.exp0,
  Partner Oper State            : act0.tim0.agg1.syn0.col1.dis1.def1.exp0

Code: Select all

-> show linkagg port 1/1/18

Dynamic Aggregable Port
  SNMP Id                       : 1018,
  Chassis/Slot/Port             : 1/1/18,
  Administrative State          : ENABLED,
  Operational State             : DOWN,
  Port State                    : SELECTED,
  Link State                    : UP,
  Selected Agg Number           : 1,
  Port position in the aggregate: 1,
  Primary port                  : NO
LACP
  Actor System Priority         : 0,
  Actor System Id               : [94:24:e1:da:c2:f1],
  Actor Admin Key               : 1,
  Actor Oper Key                : 1,
  Partner Admin System Priority : 0,
  Partner Oper System Priority  : 0,
  Partner Admin System Id       : [00:00:00:00:00:00],
  Partner Oper System Id        : [00:00:00:00:00:00],
  Partner Admin Key             : 0,
  Partner Oper Key              : 0,
  Selected Agg Id               : 1,
  Attached Agg Id               : 0,
  Actor Port                    : 17,
  Actor Port Priority           : 0,
  Partner Admin Port            : 0,
  Partner Oper Port             : 0,
  Partner Admin Port Priority   : 0,
  Partner Oper Port Priority    : 0,
  Actor Admin State             : act1.tim1.agg1.syn0.col0.dis0.def1.exp0,
  Actor Oper State              : act1.tim1.agg1.syn0.col0.dis0.def1.exp0,
  Partner Admin State           : act0.tim0.agg1.syn0.col1.dis1.def1.exp0,
  Partner Oper State            : act0.tim0.agg1.syn0.col1.dis1.def1.exp0

Thank you so much for your help!

[silvio]

there is a newer release 5.2.44.R01. But I can't fint any fixed problem there related to lacp.
What uboot and fpga has your switch (show hardware-info)?
you need 5.1.8.R01 or better 5.1.1.R02 and FPGA/CPLD 0.5

here an output of a working linkagg

Code: Select all

OS2360> show linkagg port 1/1/23

Dynamic Aggregable Port
  SNMP Id                       : 1023,
  Chassis/Slot/Port             : 1/1/23,
  Administrative State          : ENABLED,
  Operational State             : UP,
  Port State                    : ATTACHED,
  Link State                    : UP,
  Selected Agg Number           : 29,
  Port position in the aggregate: 0,
  Primary port                  : YES
LACP
  Actor System Priority         : 0,
  Actor System Id               : [94:24:e1:cc:a5:db],
  Actor Admin Key               : 29,
  Actor Oper Key                : 29,
  Partner Admin System Priority : 0,
  Partner Oper System Priority  : 0,
  Partner Admin System Id       : [00:00:00:00:00:00],
  Partner Oper System Id        : [2c:fa:a2:a4:c3:43],
  Partner Admin Key             : 0,
  Partner Oper Key              : 29,
  Selected Agg Id               : 29,
  Attached Agg Id               : 29,
  Actor Port                    : 22,
  Actor Port Priority           : 0,
  Partner Admin Port            : 0,
  Partner Oper Port             : 5127,
  Partner Admin Port Priority   : 0,
  Partner Oper Port Priority    : 0,
  Actor Admin State             : act1.tim1.agg1.syn0.col0.dis0.def1.exp0,
  Actor Oper State              : act1.tim1.agg1.syn1.col1.dis1.def0.exp0,
  Partner Admin State           : act0.tim0.agg1.syn0.col1.dis1.def1.exp0,
  Partner Oper State            : act1.tim1.agg1.syn1.col1.dis1.def0.exp0

You see in your case the switch detect only the following info from the neighbor (partner) successfull: actor oper key 1 (in my case 29). But all other infos are missing: partner oper system id and port. So I am sure that there is wrong config there at the other site.

[Criena]

Here's the output:

Code: Select all

-> show hardware-info
Chassis 1
CPU Manufacturer                  : Realtek
CPU Model                         : MIPS
Flash Manufacturer                : KIOXIA
Flash size                        : 465641472 bytes
RAM Manufacturer                  : Winbond
RAM size                          : 496744kB
FPGA version                      : 0.5
U-Boot Version                    : 5.1.1.R02
Power Supplies Present            : 1
NIs Present                       : 1,-

POE:  RTL8238/GD32E230G8U6  2.0.1.4

So you're saying the issue is on the firewall side. Mmh, I will try the few options available there again. I was certain that the issue is on the switch side, since it worked before.

Thank you very much for the help! Should I aquire a solution, I'll update the thread. Somebody might come across the same problem.

[ymilner]

Your problem will be resolved soon, with AOS version 5.2.R03.
It was working in 5.1, and issue was introduced in 5.2R1