-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The member ports of portchannel are still in selected state and can still forward traffic when the portchannel is configured to down #2066
Comments
hello, if this is the same with the issue: #1771, could you close the other one? from the output you've provided, i could see that the admin status of the port channel is up.
could you check the |
Thank you for your reply, I think these two questions are different.
hope this helps. |
Hello @leoli-nps , since you have shut down the port channel interface, how do you send traffic through the port channel interface? |
Hello @stcheng , As shown in the configuration, both Ethernet1 and PortChannel0001 are in vlan17, and Layer 2 unknown unicast traffic is sent from Ethernet1, so it will be transferred out from PortChannel0001 (the corresponding one we see through the portstat command is to transfer out from Ethernet2 and Ethernet3). The problem now is that PortChannel0001 is admin down, but its member ports Ethernet2 and Ethernet3 are still up, in the selected state, and can still forward traffic. So, my question is, when PortChannel0001 is shut down, should its member ports Ethernet2 and Ethernet3 not be shut down or in an unselected state? |
I will check how we support port channel in VLAN. If the port channel is down, I suppose it will not have any ARP entries associated with it. But I doubt if the FDB entry is still there since in the ASIC the member ports are still up and selected, which allows the L2 traffic to be sent to the port channel. |
@leoli-nps Bringing DOWN the port-channel administratively (sudo config interface shutdown PortChannel0001) does not bring DOWN the port-channel member ports. The member ports continues to exchange LACPDUs and are in Selected state. Their entry exists in ASIC_DB as well. Traffic would continue to forward in the hardware as the ports are programmed as LAG members (in the chip). You may have to bring DOWN the LAG member ports also to stop the traffic forwarding. Solution - bring DOWN the link status of port-channel members when the port-channel is administratively brought DOWN. |
5762b0c2 [Reclaim buffer][202012] Reclaim unused buffer for dynamic buffer model (sonic-net#1985) 33e9bd19 [Document][202012] Supply the missing ingress/egress port profile list in document (sonic-net#2066) 1b6ffba1 [Reclaiming buffer][202012] Support reclaiming buffer in traditional buffer model (sonic-net#2063) afb33f16 [202012] Update default route status to state DB (sonic-net#2009) (sonic-net#2067) b9c44f75 Common code update for reclaiming buffer (backport community PR sonic-net#1996 to 202106/202012) (sonic-net#2061) cf5182d8 [request parser] Allow request parser to parse multiple values Signed-off-by: Stephen Sun <stephens@nvidia.com>
23e93984 [scripts/fast-reboot] Shutdown remaining containers through systemd (sonic-net#2133) 576c9efc [scripts/fast-reboot] stop timers in advance (sonic-net#2131) 4dad79c4 bugfix: incorrect command for portchannel creation (sonic-net#2134) c17b1f49 [show][muxcable] Decrease the timeout for show mux status/hwmode (sonic-net#2130) 49d61f84 [scripts/fast-reboot] cleanup (sonic-net#2132) 52ca3245 [config/config_mgmt.py]: Fix dpb issue with upper case mac in (sonic-net#2066) 9e2fbf40 Update db_migrator to support `pfcwd_sw_enable` (sonic-net#2087) 4010bd09 FGNHG CLI changes (sonic-net#1588) 6bd54d04 Fix 'show mac' output when FDB entry for default vlan is None instead of 1 (sonic-net#2126) f70dc27 [techsupport] Handle minor fixes of TS Lock and update auto-TS (sonic-net#2114) 51d3550 Fix issues in clear_qos (sonic-net#2122) 6d3aa1e [GCU] Optimizing moves by adding generators for keys/tables (sonic-net#2120) 65a5a6b Fixing get port speed when oper status is down (sonic-net#2123) c752457 [PBH] Implement Edit Flows (sonic-net#2093) 827358f [debug dump] dump interface module added (sonic-net#2070) Signed-off-by: Stepan Blyschak <stepanb@nvidia.com>
``` 23e93984 [scripts/fast-reboot] Shutdown remaining containers through systemd (sonic-net#2133) 576c9efc [scripts/fast-reboot] stop timers in advance (sonic-net#2131) 4dad79c4 bugfix: incorrect command for portchannel creation (sonic-net#2134) c17b1f49 [show][muxcable] Decrease the timeout for show mux status/hwmode (sonic-net#2130) 49d61f84 [scripts/fast-reboot] cleanup (sonic-net#2132) 52ca3245 [config/config_mgmt.py]: Fix dpb issue with upper case mac in (sonic-net#2066) 9e2fbf40 Update db_migrator to support `pfcwd_sw_enable` (sonic-net#2087) 4010bd09 FGNHG CLI changes (sonic-net#1588) 6bd54d04 Fix 'show mac' output when FDB entry for default vlan is None instead of 1 (sonic-net#2126) ``` Signed-off-by: Stepan Blyschak <stepanb@nvidia.com>
``` 22a388b [show] fix get routing stack routine (sonic-net#2137) cb3a047 Support option --ports of config qos reload for reloading ports' QoS and buffer configuration to default (sonic-net#2125) 154a801 Enhance "config interface type/advertised-type" to be blocked on RJ45 ports (sonic-net#2112) 3732ac5 Add CLI for route flow counter feature (sonic-net#2031) 29771e7 [techsupport] improve robustness (sonic-net#2117) f9dc681 [intfutil] Display RJ45 port and portchannel speed in 'M' instead of 'G' when it's <= 1000M (sonic-net#2110) 781ae9f [config] Do not enable pfcwd for BmcMgmtToRRouter (sonic-net#2136) 23e9398 [scripts/fast-reboot] Shutdown remaining containers through systemd (sonic-net#2133) 576c9ef [scripts/fast-reboot] stop timers in advance (sonic-net#2131) 4dad79c bugfix: incorrect command for portchannel creation (sonic-net#2134) c17b1f4 [show][muxcable] Decrease the timeout for show mux status/hwmode (sonic-net#2130) 49d61f8 [scripts/fast-reboot] cleanup (sonic-net#2132) 52ca324 [config/config_mgmt.py]: Fix dpb issue with upper case mac in (sonic-net#2066) 9e2fbf4 Update db_migrator to support `pfcwd_sw_enable` (sonic-net#2087) 4010bd0 FGNHG CLI changes (sonic-net#1588) 6bd54d0 Fix 'show mac' output when FDB entry for default vlan is None instead of 1 (sonic-net#2126) ``` Signed-off-by: Stepan Blyschak <stepanb@nvidia.com>
288c2d8 Revert "[scripts/fast-reboot] Shutdown remaining containers through systemd (#2133)" (#2161) bce4694 [autoneg] add support for remote speed advertisement (#2124) a73f156 [show][vrf]Fixing show vrf to include vlan subinterface (#2158) 7a06457 [auto_ts] Enable register/de-register auto_ts config for APP Extension (#2139) 083ebcc Add transceiver-info items advertised for cmis-supported moddules (#2135) 0811214 Validate destination port is not LAG (#2053) 6ab1c51 [minigraph] Consume golden_config_db.json while loading minigraph (#2140) c37a957 [Kdump] Remove the duplicate logic if Kdump was disabled (#2128) 1143869 Ordering fix for sfpshow eeprom (#2113) fdb79b8 Allow fw update for other boot type against on the previous "none" boot fw update (#2040) a54a091 [GCU] Supressing YANG errors from libyang while sorting (#1991) fbfa8bc [GCU] Enabling AddRack and adding RemoveRack tests (#2143) d012be9 [Command-Reference] Add CLI docs for route flow counter (#2069) 8c07d59 [Mellanox] [reboot] [asan] stop asan-enabled containers on reboot (#2107) 697aae3 Fix speed parsing when speed is NOT fetched from APPL_DB (#2138) 22a388b [show] fix get routing stack routine (#2137) cb3a047 Support option --ports of config qos reload for reloading ports' QoS and buffer configuration to default (#2125) 154a801 Enhance "config interface type/advertised-type" to be blocked on RJ45 ports (#2112) 3732ac5 Add CLI for route flow counter feature (#2031) 29771e7 [techsupport] improve robustness (#2117) f9dc681 [intfutil] Display RJ45 port and portchannel speed in 'M' instead of 'G' when it's <= 1000M (#2110) 781ae9f [config] Do not enable pfcwd for BmcMgmtToRRouter (#2136) 23e9398 [scripts/fast-reboot] Shutdown remaining containers through systemd (#2133) 576c9ef [scripts/fast-reboot] stop timers in advance (#2131) 4dad79c bugfix: incorrect command for portchannel creation (#2134) c17b1f4 [show][muxcable] Decrease the timeout for show mux status/hwmode (#2130) 49d61f8 [scripts/fast-reboot] cleanup (#2132) 52ca324 [config/config_mgmt.py]: Fix dpb issue with upper case mac in (#2066) 9e2fbf4 Update db_migrator to support `pfcwd_sw_enable` (#2087) 4010bd0 FGNHG CLI changes (#1588) 6bd54d0 Fix 'show mac' output when FDB entry for default vlan is None instead of 1 (#2126)
…anch Related work items: #52, #71, #73, #75, #77, sonic-net#1306, sonic-net#1588, sonic-net#1991, sonic-net#2031, sonic-net#2040, sonic-net#2053, sonic-net#2066, sonic-net#2069, sonic-net#2087, sonic-net#2107, sonic-net#2110, sonic-net#2112, sonic-net#2113, sonic-net#2117, sonic-net#2124, sonic-net#2125, sonic-net#2126, sonic-net#2128, sonic-net#2130, sonic-net#2131, sonic-net#2132, sonic-net#2133, sonic-net#2134, sonic-net#2135, sonic-net#2136, sonic-net#2137, sonic-net#2138, sonic-net#2139, sonic-net#2140, sonic-net#2143, sonic-net#2158, sonic-net#2161, sonic-net#2233, sonic-net#2243, sonic-net#2250, sonic-net#2254, sonic-net#2260, sonic-net#2261, sonic-net#2267, sonic-net#2278, sonic-net#2282, sonic-net#2285, sonic-net#2288, sonic-net#2289, sonic-net#2292, sonic-net#2294, sonic-net#8887, sonic-net#9279, sonic-net#9390, sonic-net#9511, sonic-net#9700, sonic-net#10025, sonic-net#10322, sonic-net#10479, sonic-net#10484, sonic-net#10493, sonic-net#10500, sonic-net#10580, sonic-net#10595, sonic-net#10628, sonic-net#10634, sonic-net#10635, sonic-net#10644, sonic-net#10670, sonic-net#10691, sonic-net#10716, sonic-net#10731, sonic-net#10750, sonic-net#10751, sonic-net#10752, sonic-net#10761, sonic-net#10769, sonic-net#10775, sonic-net#10776, sonic-net#10779, sonic-net#10786, sonic-net#10792, sonic-net#10793, sonic-net#10800, sonic-net#10806, sonic-net#10826, sonic-net#10839, sonic-net#10840, sonic-net#10842, sonic-net#10844, sonic-net#10847, sonic-net#10849, sonic-net#10852, sonic-net#10865, sonic-net#10872, sonic-net#10877, sonic-net#10886, sonic-net#10889, sonic-net#10903, sonic-net#10904, sonic-net#10905, sonic-net#10913, sonic-net#10914, sonic-net#10916, sonic-net#10919, sonic-net#10925, sonic-net#10926, sonic-net#10929, sonic-net#10933, sonic-net#10934, sonic-net#10937, sonic-net#10941, sonic-net#10947, sonic-net#10952, sonic-net#10953, sonic-net#10957, sonic-net#10959, sonic-net#10971, sonic-net#10972, sonic-net#10980
Description
I successfully configured PortChannel0001 between the two devices using two physical links. The related configuration is as follows:
Portchannel0001 is configured as down and it is admin down, but the member ports are still in the selected state, and can still forward traffic. The following is the operation process(Use # as a comment prompt).
Steps to reproduce the issue:
Describe the results you received:
As described in "Description".
Describe the results you expected:
When the PortChannel goes down, its member ports should not forward traffic.
Additional information you deem important (e.g. issue happens only occasionally):
sonic_dump_switch99_20180921_090933.tar.gz
The text was updated successfully, but these errors were encountered: