Comware Based
cancel
Showing results for 
Search instead for 
Did you mean: 

5700 port trunk permit vlan all doesn't set port to all vlans

SOLVED
Go to solution
slesru
Advisor

5700 port trunk permit vlan all doesn't set port to all vlans

Hello!

 

Just hit this- needed to add vlan interfaces to server.

Port config:

interface Bridge-Aggregation5
port link-type trunk
port trunk permit vlan all
port trunk pvid vlan 100
link-aggregation mode dynamic
lacp edge-port
stp edged-por

[HP5700-IRF-213-Bridge-Aggregation5]display vlan
Total VLANs: 14
The VLANs include:
1(default), 2, 6-7, 9-10, 12, 19, 100, 222-224, 575, 666
[HP5700-IRF-213-Bridge-Aggregation5]display vlan 575
VLAN ID: 575
VLAN type: Dynamic
Route interface: Not configured
Description: VLAN 0575
Name: VLAN 0575
Tagged ports:
Bridge-Aggregation6
Ten-GigabitEthernet1/0/38
Ten-GigabitEthernet2/0/38
Untagged ports: None

[HP5700-IRF-213-Bridge-Aggregation5]

 

As you can see Bridge-Aggregation5 is not in vlan 575.

I worked this around for intersting vlan by setting pvid to it temporary.

But! How can I add port to all vlans?

Thank you!

15 REPLIES
parnassus
Honored Contributor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

Starting with the assumption that VLAN 575 was created first, commands' order is important; have you followed the configuration procedure below?

  1. Create the BAGG
  2. Set Dynamic LACP
  3. Exit
  4. On each BAGG member's interface --> Set the Aggregation Group membership
  5. Exit
  6. On BAGG --> Apply settings (Trunk, VLAN, etc.) so they are applied back to BAGG's member interfaces.
slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

vlan 575 was created before interfaces, same for other vlans, but other vlans , namely 223 and 224 are ok on this interface, i.e. connected server used them without problems, so procedure was coorect.

still can't understand why bridge-aggregation 5 is not in vlan 575 if all vlans are permitted...

 

sdide
Respected Contributor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

Hi,

Not sure whats up here. Could be a bug. What software are you running.

I see that vlan 575 is dynamic, so something might not be right with MVRP. I know there are some restrictions on aggregation groups and MVRP.

Try making 575 static and see if that removes your problem. If so - then at least we know where the issue is.

Regards.

Søren Dideriksen, Network Administrator
Region Midtjylland
parnassus
Honored Contributor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans


sdide wrote: I see that vlan 575 is dynamic, so something might not be right with MVRP. I know there are some restrictions on aggregation groups and MVRP.

That could be truly interesting...


slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

>Try making 575 static and see if that removes your problem.

 

Yes. it helps:

 

[HP5700-IRF-213]display vlan 575
VLAN ID: 575
VLAN type: Dynamic
Route interface: Not configured
Description: VLAN 0575
Name: VLAN 0575
Tagged ports:
Bridge-Aggregation6
Ten-GigabitEthernet1/0/38
Ten-GigabitEthernet2/0/38
Untagged ports: None

[HP5700-IRF-213]vla
[HP5700-IRF-213]vlan 575
The specified dynamic VLANs have been changed to static VLANs.
[HP5700-IRF-213-vlan575]quit
[HP5700-IRF-213]display vlan 575
VLAN ID: 575
VLAN type: Static
Route interface: Not configured
Description: VLAN 0575
Name: VLAN 0575
Tagged ports:
Bridge-Aggregation4 Bridge-Aggregation5
Bridge-Aggregation6
Ten-GigabitEthernet1/0/1
Ten-GigabitEthernet1/0/2
Ten-GigabitEthernet1/0/3
Ten-GigabitEthernet1/0/17
Ten-GigabitEthernet1/0/24
Ten-GigabitEthernet1/0/32
Ten-GigabitEthernet1/0/38
Ten-GigabitEthernet2/0/17
Ten-GigabitEthernet2/0/24
Ten-GigabitEthernet2/0/38
Untagged ports: None

[HP5700-IRF-213]

slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

>What software are you running.

 

Boot image: flash:/5700-cmw710-boot-r2422p01.bin
Boot image version: 7.1.045, Release 2422P01

slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

>That could be truly interesting...

 

I completely agree.

 

btw, I'm not shure completely, but vlans which worked for me have local ( port access vlan X) ports in them, and vlans doesn't work has no ports in it.

I'll check it.

 

btw, changing vlan back from static reverts situation:

 

[HP5700-IRF-213]undo vlan 575
[HP5700-IRF-213]
[HP5700-IRF-213]dis
[HP5700-IRF-213]display vla
[HP5700-IRF-213]display vlan 575
VLAN ID: 575
VLAN type: Dynamic
Route interface: Not configured
Description: VLAN 0575
Name: VLAN 0575
Tagged ports:
Bridge-Aggregation6
Ten-GigabitEthernet1/0/38
Ten-GigabitEthernet2/0/38
Untagged ports: None

[HP5700-IRF-213]

 

slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

Yes, adding port to vlan changes it to static:

 

[HP5700-IRF-213]interface Ten-GigabitEthernet1/0/7
[HP5700-IRF-213-Ten-GigabitEthernet1/0/7] port access vlan ?
INTEGER<1-4094> VLAN ID

[HP5700-IRF-213-Ten-GigabitEthernet1/0/7] port access vlan 575
The specified dynamic VLANs have been changed to static VLANs.
[HP5700-IRF-213-Ten-GigabitEthernet1/0/7]

 

so now, at least, I know real workaround.

But still interesting in dynamic vlan features, i.e. is this behaviour by design or bug...?

Thank you!

 

sdide
Respected Contributor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

Hi again,

you could try forcing mvrp not to deregister vlan. Since i can't see your topology I'm a bit blinded regarding interswitch behavior. But - it may very well be that since 575 is not in use, MVRP deregisters it on the trunk. You can force MVRP not to do so:

interface Bridge-Aggregation5
 mvrp registration fixed

Regards

 

Søren Dideriksen, Network Administrator
Region Midtjylland
parnassus
Honored Contributor
Solution

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

Couldn't be that that Dynamic VLAN should first be activated [*] to "start working" (also on a Port Trunking)?

[*] One (physical?) port of the Switch must be a member of that Dynamic VLAN and that port must detect linkbeat at least one time...

slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

>One (physical?) port of the Switch must be a member of that Dynamic VLAN and that port must detect linkbeat at least one time...

Thank you!

This is by design.... I did not know this.

 

slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

>you could try forcing mvrp not to deregister vlan.

I tried this, but vlan is still dynamic, and, thus, doesn't include trunk port.

Anyway, answer about at least one port looks right.

Thank you!

parnassus
Honored Contributor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

I'm glad you worked it out! any kudos is welcome for all who contributed (@sdide too)!

sdide
Respected Contributor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

I suppose if vlan 575 is not on any access port or another trunk, its not needed and therefore mvrp never registered it on your bagg.

If you try and make another access port in the vlan and then remove it again, mvrp should not, with the option mentioned above, deregister the vlan on your trunk.  (Not sure why one should do that, but at least you can try it to satisfy your academic curiosity.)

Regards

 

Søren Dideriksen, Network Administrator
Region Midtjylland
slesru
Advisor

Re: 5700 port trunk permit vlan all doesn't set port to all vlans

>therefore mvrp never registered it on your bagg.

no-no, I have different kind of problem- this bagg is connection to server, not to another switch,

vlan is successefully created from mvrp, but traffic did not pass to server, because bagg is trunk port with all vlans allowed,

but it is not member of vlan, this is because vlan is dynamic and there are no port members (access) on this switch...