APA config for failover on hp rx6600 with hp-ux 11.31 Update 5

[Jozef Sith]

Hi,

I need help for configuring the APA.
I have the hp rx 6600 hp-ux 11.31 Update 5 with current patch level.
Config see below

After reboot its all OK:

Configure HP iether 100BT/Gigabit Ethernet interfaces ....... OK
Configure Auto-Port Aggregation(LAN Monitor) interfaces ..... OK

Feb 25 15:02:46 hpdb2 vmunix: iether0: INITIALIZING HP AB352-60003 PCI/PCI-X 1000Base-T Dual-port Core at hardware path 0/4/2/0
Feb 25 15:02:46 hpdb2 vmunix: iether1: INITIALIZING HP AB352-60003 PCI/PCI-X 1000Base-T Dual-port Core at hardware path 0/4/2/1

Feb 25 15:02:54 hpdb2 vmunix: APA/LM: Product is now running.

Feb 25 15:03:11 hpdb2 vmunix: APA/LM: FOG:lan900 - lan0 is up (lan0 is active)
Feb 25 15:03:11 hpdb2 vmunix: APA/LM: FOG:lan900 is up (lan0 is active)
Feb 25 15:03:11 hpdb2 vmunix: APA/LM: FOG:lan900 - lan1 is up (lan0 is active)

Feb 25 15:03:56 hpdb2 vmunix: APA/LM: FOG:lan900 - lan0 isn't receiving poll packets (lan0 is active)
Feb 25 15:03:56 hpdb2 vmunix: APA/LM: FOG:lan900 - lan1 isn't receiving poll packets (lan0 is active)

after unplug lan0:

Feb 25 15:25:53 hpdb2 vmunix: APA/LM: FOG:lan900 - lan0 is down (lan1 is active)

after plug in lan0:

Feb 25 15:27:46 hpdb2 vmunix: APA/LM: FOG:lan900 - lan0 isn't receiving poll packets (lan1 is active)

# lanscan -q
0
900 1
901
902
903
904
# lanscan
Hardware Station Crd Hdw Net-Interface NM MAC HP-DLPI DLPI
Path Address In# State NamePPA ID Type Support Mjr#
0/4/2/0 0x0017A451D806 0 UP lan0 snap0 1 ETHER Yes 119
LinkAgg0 0x0017A451D807 900 UP lan900 snap900 4 ETHER Yes 119
LinkAgg1 0x000000000000 901 DOWN lan901 snap901 5 ETHER Yes 119
LinkAgg2 0x000000000000 902 DOWN lan902 snap902 6 ETHER Yes 119
LinkAgg3 0x000000000000 903 DOWN lan903 snap903 7 ETHER Yes 119
LinkAgg4 0x000000000000 904 DOWN lan904 snap904 8 ETHER Yes 119
# lanadmin -x -y 900
Hot Standby = ON

# /sbin/init.d/hplm stop
Clearing Fail-Over Group lan900
Communications frozen
Feb 25 15:32:27 hpdb2 vmunix: APA/LM: FOG:lan900 - lan1 is removed
Feb 25 15:32:27 hpdb2 vmunix: APA/LM: FOG:lan900 is cleared

# lanscan -q
0
1
900
901
902
903
904
# lanadmin -x -y 900
Hot Standby = OFF

after run from console:

# /sbin/init.d/hpapa start
/sbin/init.d/hpapa started.
Please be patient. This may take about 40 seconds.
HP_APA_DEFAULT_PORT_MODE = LAN_MONITOR
HP_APA_USE_SYSLOG = 1
HP_APA_LACP_TIMEOUT = 0
HP_APA_LACP_SYSTEM_ID_MODE = FIRST_APA_PORT
/usr/sbin/hp_apa_util -S 0 LAN_MONITOR
/usr/sbin/lanadmin -X -g 0 5 900
New Group Capability = 5
/usr/sbin/lanadmin -X -t 0 5 900
New Port Priority = 5
/usr/sbin/lanadmin -X -k 0 0 900
New Administrative Key = 0
/usr/sbin/lanadmin -X -s 0 0 900
New System Priority = 0
/usr/sbin/hp_apa_util -S 1 LAN_MONITOR
/usr/sbin/lanadmin -X -g 1 5 900
New Group Capability = 5
/usr/sbin/lanadmin -X -t 1 3 900
New Port Priority = 3
/usr/sbin/lanadmin -X -k 1 0 900
New Administrative Key = 0
/usr/sbin/lanadmin -X -s 1 0 900
New System Priority = 0
/sbin/init.d/hpapa Completed successfully.
# /sbin/init.d/hplm start
/sbin/init.d/hplm started.
Reading ASCII file /etc/lanmon/lanconfig.ascii
WARNING: Failed link-level connectivity checks for ports in Fail-Over Group 900.
For more information, see nettl log messages for HP_APA.
Creating Fail-Over Group lan900
/sbin/init.d/hplm Completed successfully.
# lanscan -q
900 0 1
901
902
903
904
# lanadmin -x -y 900
Hot Standby = ON
but the communication frozen



Feb 25 15:36:49 hpdb2 vmunix: APA/LM: Product is now stopped.
Feb 25 15:37:53 hpdb2 vmunix: APA/LM: Product is now running.
Feb 25 15:39:02 hpdb2 vmunix: APA/LM: FOG:lan900 - lan0 is up (lan0 is active)
Feb 25 15:39:02 hpdb2 vmunix: APA/LM: FOG:lan900 is up (lan0 is active)
Feb 25 15:39:02 hpdb2 vmunix: APA/LM: FOG:lan900 - lan1 is up (lan0 is active)
Feb 25 15:39:42 hpdb2 vmunix: APA/LM: FOG:lan900 - lan0 isn't receiving poll packets (lan0 is active)
Feb 25 15:39:42 hpdb2 vmunix: APA/LM: FOG:lan900 - lan1 isn't receiving poll packets (lan0 is active)





# lanscan
Hardware Station Crd Hdw Net-Interface NM MAC HP-DLPI DLPI
Path Address In# State NamePPA ID Type Support Mjr#
LinkAgg0 0x0017A451D806 900 UP lan900 snap900 4 ETHER Yes 119
LinkAgg1 0x000000000000 901 DOWN lan901 snap901 5 ETHER Yes 119
LinkAgg2 0x000000000000 902 DOWN lan902 snap902 6 ETHER Yes 119
LinkAgg3 0x000000000000 903 DOWN lan903 snap903 7 ETHER Yes 119
LinkAgg4 0x000000000000 904 DOWN lan904 snap904 8 ETHER Yes 119
# lanscan -q
900 0 1
901
902
903
904

# lanadmin -x -y 900
Hot Standby = ON

also when unplug lan1 its all OK, but the lan1 plug in communication frozen

CONFIGURATION:

# ioscan -fnkClan
Class I H/W Path Driver S/W State H/W Type Description
===================================================================
lan 0 0/4/2/0 iether CLAIMED INTERFACE HP AB352-60003 PCI/PCI-X 1000Base-T Dual-port Core
lan 1 0/4/2/1 iether CLAIMED INTERFACE HP AB352-60003 PCI/PCI-X 1000Base-T Dual-port Core


hpietherconf:
############################################################################
# The HP_IETHER_INIT_ARGS are reserved by HP. They are NOT user changable.

HP_IETHER_INIT_ARGS="HP_IETHER_STATION_ADDRESS HP_IETHER_SPEED HP_IETHER_MTU HP_
IETHER_FLOW_CONTROL HP_IETHER_AUTONEG HP_IETHER_SEND_COAL_TICKS HP_IETHER_RECV_C
OAL_TICKS HP_IETHER_SEND_MAX_BUFS HP_IETHER_RECV_MAX_BUFS HP_IETHER_VMTU HP_IETH
ER_ITR_MODE"

HP_IETHER_INTERFACE_NAME[0]=lan0
HP_IETHER_STATION_ADDRESS[0]=0x0017A451D806
HP_IETHER_SPEED[0]=100fd
HP_IETHER_MTU[0]=1500
HP_IETHER_FLOW_CONTROL[0]=1
HP_IETHER_AUTONEG[0]=
HP_IETHER_SEND_COAL_TICKS[0]=150
HP_IETHER_RECV_COAL_TICKS[0]=0
HP_IETHER_SEND_MAX_BUFS[0]=10
HP_IETHER_RECV_MAX_BUFS[0]=1
HP_IETHER_VMTU[0]=
HP_IETHER_ITR_MODE[0]=
HP_IETHER_SEND_CKO[0]=
HP_IETHER_RECV_CKO[0]=
HP_IETHER_DIAG_THRESH[0]=
HP_IETHER_TX_512B_BUF[0]=

HP_IETHER_INTERFACE_NAME[1]=lan1
HP_IETHER_STATION_ADDRESS[1]=0x0017A451D807
HP_IETHER_SPEED[1]=100fd
HP_IETHER_MTU[1]=1500
HP_IETHER_FLOW_CONTROL[1]=1
HP_IETHER_AUTONEG[1]=
HP_IETHER_SEND_COAL_TICKS[1]=150
HP_IETHER_RECV_COAL_TICKS[1]=0
HP_IETHER_SEND_MAX_BUFS[1]=10
HP_IETHER_RECV_MAX_BUFS[1]=1
HP_IETHER_VMTU[1]=
HP_IETHER_ITR_MODE[1]=
HP_IETHER_SEND_CKO[1]=
HP_IETHER_RECV_CKO[1]=
HP_IETHER_DIAG_THRESH[1]=
HP_IETHER_TX_512B_BUF[1]=


netconf:
INTERFACE_NAME[0]=lan0
IP_ADDRESS[0]=172.22.107.70
SUBNET_MASK[0]=255.255.255.0
BROADCAST_ADDRESS[0]=""
INTERFACE_STATE[0]=""
DHCP_ENABLE[0]=0
INTERFACE_MODULES[0]=""


DEFAULT_INTERFACE_MODULES=""
ROUTE_MASK[0]=255.255.255.0
ROUTE_GATEWAY[0]=172.22.107.1
ROUTE_COUNT[0]=1
ROUTE_DESTINATION[0]=default

hp_apaconf:
HP_APA_START_LA_PPA=900
HP_APA_DEFAULT_PORT_MODE=LAN_MONITOR
HP_APA_MAX_LINKAGGS=50
HP_APA_LACP_SYSTEM_ID_MODE=FIRST_APA_PORT
HP_APA_LACP_TIMEOUT=0
HP_APA_USE_SYSLOG=1

hp_apaportconf:
HP_APAPORT_INIT_ARGS="HP_APAPORT_GROUP_CAPABILITY HP_APAPORT_PRIORITY HP_APAPORT
_CONFIG_MODE HP_APAPORT_KEY HP_APAPORT_SYSTEM_PRIORITY"

HP_APAPORT_INTERFACE_NAME[0]=lan0
HP_APAPORT_GROUP_CAPABILITY[0]=5
HP_APAPORT_KEY[0]=0
HP_APAPORT_PRIORITY[0]=5
HP_APAPORT_CONFIG_MODE[0]=LAN_MONITOR
HP_APAPORT_SYSTEM_PRIORITY[0]=0

HP_APAPORT_INTERFACE_NAME[1]=lan1
HP_APAPORT_GROUP_CAPABILITY[1]=5
HP_APAPORT_KEY[1]=0
HP_APAPORT_PRIORITY[1]=3
HP_APAPORT_CONFIG_MODE[1]=LAN_MONITOR
HP_APAPORT_SYSTEM_PRIORITY[1]=0

lanconfig.ascii:
LM_RAPID_ARP on
LM_RAPID_ARP_INTERVAL 1000000
LM_RAPID_ARP_COUNT 10
FAILOVER_GROUP lan900
STATIONARY_IP 172.22.107.70
PRIMARY lan0 5
STANDBY lan1 3

Best Regards
Jozef

[Jupinder Bedi]

From the above configuration everything seems to be perfect . I dont where you have doubt .

can you explain the problem again. In my opinion everything is perfect

[Steven E. Protter]

Shalom,

I do not see a problem. Is there an error message or something to look at?

SEP

[Jozef Sith]

I have the CISCO 6500 Catalist, lan0 and lan1 plug in at the same switch.
I tested 58(great many) various combination configuration switch and APA with the same results.
Problem may be configuration CISCO switch but I do not know right configuration CISCO switch for HP APA.

Best Regards
Jozef

[Michael Leu · Accepted solution]

Shouldn't lan900 be in netconf instead of lan0?

[Turgay Cavdar]

Hi,
On the switch side, lan0 and lan1 ports settings are the same? Are they on the same vlan? Can you do a linkloop from lan0 to lan1?

[Jozef Sith]

Configuration CISCO 6500 Catalyst:

SF-DR-V3S> (enable) show lacp-channel info
Chan Port Status Channel Admin Speed Duplex Vlan
id mode group
---- ----- ---------- -------------------- ----- ----- ------ ----
1779 4/35 connected on 411 100 full 507
1779 4/36 connected on 411 100 full 507

Chan Port Ch-if Oper-group Neighbor Chan Oper-Distribution PortSecurity/
id Index Oper-group cost Method Dynamic Port
---- ----- ----- ---------- ---------- -------- ----------------- -------------
1779 4/35 228 6578 12 mac destination
1779 4/36 228 6578 12 mac destination

Chan Port Device-ID Port-ID Platform
id
---- ----- ------------------------------- ------------------------- ----------
1779 4/35 00-00-00-00-00-00 0
1779 4/36 00-00-00-00-00-00 0

Chan Port Trunk-status Trunk-type Trunk-vlans
id
----- ----- ------------ ------------- -----------------------------------------
1779 4/35 not-trunking dot1q 507
1779 4/36 not-trunking dot1q 507

Chan Port Portvlancost-vlans
id
---- ----- --------------------------------------------------------------------
1779 4/35
1779 4/36

Chan Port STP Port Portfast Port Port Port
id priority Guard vlanpri vlanpri-vlans
---- ----- -------- ------------ ------- ------- -------------------------------
1779 4/35 32 disable none 0
1779 4/36 32 disable none 0

Chan Port IP IPX Group
id
---- ----- -------- -------- --------
1779 4/35 on auto-on auto-on
1779 4/36 on auto-on auto-on

Chan Port GMRP GMRP GMRP
id status registration forwardAll
---- ----- -------- ------------ ----------
1779 4/35 enabled normal disabled
1779 4/36 enabled normal disabled

Chan Port GVRP GVRP GVRP
id status registration applicant
---- ----- -------- ------------- ---------
1779 4/35 disabled normal normal
1779 4/36 disabled normal normal

Chan Port Qos-Tx Qos-Rx Qos-Trust Qos-DefCos Qos-Interface
id PortType PortType Type Type
---- ----- -------- -------- ------------ ---------- --------------
1779 4/35 2q2t 1q4t untrusted 0 port-based
1779 4/36 2q2t 1q4t untrusted 0 port-based

Chan Port ACL name Type
id
---- ----- -------------------------------- ----
1779 4/35 IP
IPX
MAC
1779 4/36 IP
IPX
MAC

Chan Port Policy Source
id
---- ----- -------------
1779 4/35 COPS
1779 4/36 COPS

Chan Port RSVP-DSBM RSVP-Configured
id Election Priority
---- ----- --------- ---------------
1779 4/35 disabled 128
1779 4/36 disabled 128

Chan Port COPS Admin Roles
id
---- ----- -------------------------------
1779 4/35
1779 4/36

Chan Port Dot1q tunnel mode
id
---- ----- -----------------
1779 4/35 disabled
1779 4/36 disabled

Chan Port Dot1q-all-tagged mode
id
---- ----- ---------------------
1779 4/35 disabled
1779 4/36 disabled

Chan Port Auxiliaryvlan
id
---- ----- -------------
1779 4/35 none
1779 4/36 none

Chan Port Jumbo
id
---- ----- --------
1779 4/35 disabled
1779 4/36 disabled

Chan Port Tunneling Protocol(s)
id
---- ----- ---------------------
1779 4/35 none
1779 4/36 none

Chan Port DHCP trust IP source guard
id
---- ----- ---------- ---------------
1779 4/35 untrusted not supported
1779 4/36 untrusted not supported

Chan Port Arp-inspection trust
id
---- ----- --------------------
1779 4/35 not supported
1779 4/36 not supported

Chan Port Source VLAN Translated VLAN State Max Allowed Entries
id (Current)
---- -------- ----------- --------------- ---------- -------------------
1779 Port VLAN Mapping not configured on port 4/35.

1779 Port VLAN Mapping not configured on port 4/36.


Chan Port Link-error Link-error Link-error
id Rxcrc Txcrc Inerrors
---- ----- ---------- ---------- ----------
1779 4/35 disabled disabled disabled
1779 4/36 disabled disabled disabled

[Turgay Cavdar]

I think you try to use APA in failover mode so you shouldn't configure any LACP/etherchannel in your switch for the ports that server connected. Is etherchannel active on this swicth ports?

[Jozef Sith]

Yes,
set channelprotocol lacp 4
Mod 4 is set to LACP protocol


after unplug lan0 then plug in lan0 and run
# /sbin/init.d/hplm stop
Clearing Fail-Over Group lan900 and frozen all lan0, lan1, lan900

after

# /sbin/init.d/hplm start
/sbin/init.d/hplm started.
Reading ASCII file /etc/lanmon/lanconfig.ascii
WARNING: Failed link-level connectivity checks for ports in Fail-Over Group 900.
For more information, see nettl log messages for HP_APA.
Creating Fail-Over Group lan900
/sbin/init.d/hplm Completed successfully.
# lanscan
Hardware Station Crd Hdw Net-Interface NM MAC HP-DLPI DLPI
Path Address In# State NamePPA ID Type Support Mjr#
LinkAgg0 0x0017A451D806 900 UP lan900 snap900 4 ETHER Yes 119
LinkAgg1 0x000000000000 901 DOWN lan901 snap901 5 ETHER Yes 119
LinkAgg2 0x000000000000 902 DOWN lan902 snap902 6 ETHER Yes 119
LinkAgg3 0x000000000000 903 DOWN lan903 snap903 7 ETHER Yes 119
LinkAgg4 0x000000000000 904 DOWN lan904 snap904 8 ETHER Yes 119

# lanscan -q
900 0 1
901
902
903
904

# lanadmin -x -y 900
Hot Standby = ON

# ifconfig lan0
ifconfig: no such interface
# ifconfig lan1
ifconfig: no such interface
# ifconfig lan900
lan900: flags=1843
inet 172.22.107.70 netmask ffffff00 broadcast 172.22.107.255


# nwmgr --diag -A dest=0x0017A451D806 -c lan900
Link level connectivity check succeeded.

# ping 172.22.107.70
PING 172.22.107.70: 64 byte packets
64 bytes from 172.22.107.70: icmp_seq=0. time=0. ms
64 bytes from 172.22.107.70: icmp_seq=1. time=0. ms
64 bytes from 172.22.107.70: icmp_seq=2. time=0. ms

----172.22.107.70 PING Statistics----
3 packets transmitted, 3 packets received, 0% packet loss
round-trip (ms) min/avg/max = 0/0/0
# ping 172.22.107.1
PING 172.22.107.1: 64 byte packets

----172.22.107.1 PING Statistics----
3 packets transmitted, 0 packets received, 100% packet loss

# ndd -h ip_ire_gw_probe

ip_ire_gw_probe:

Enable dead gateway probes. This option should only be disabled on
networks containing gateways which do not respond to ICMP echo
requests (ping).
[0-1] Default: 1 (probe for dead gateways)

[Turgay Cavdar]

LACP is used when you use APA for "Link Aggreagte". For failover group i think you shouldnt configure LACP/etherchannel on the switch side.