Server Port - Trunk Mode

Hi,
One of the Server ports (pointing towards a UCS Chassis) on my fabric interconnect is currently showing as down as it is Trunk mode not Fabric Mode as per all the other server ports.
For some reason when I look under the LAN tab this one interface is showing under "internal LAN". I have tried disabling and/or deleting the interface from under "internal LAN" however every time I re-configure the port as a Server Port it is showing back under and the mode remains in Trunk.
Does anyone have some advice how I can get this port out of Trunk Mode and into Fabric Mode?
Many Thanks, Paul

Hi Cristian,
As requested please see outputs below:
UCS1-A(nxos)# sh run int e1/22
interface Ethernet1/22
description S: Server
no pinning server sticky
switchport mode trunk
switchport trunk native vlan xxx4
switchport trunk allowed vlan xxx4,xxx7
no shutdown
UCS1-A(nxos)# show int fex-fabric
     Fabric      Fabric       Fex                FEX
Fex Port      Port State    Uplink    Model         Serial
1    Eth1/1        Active     1         N20-C6508 xx
1    Eth1/2        Active     2         N20-C6508 xx
2    Eth1/3        Active     1         N20-C6508 xx
2    Eth1/4        Active     2         N20-C6508 xx
3    Eth1/5        Active     1         N20-C6508 xx
3    Eth1/6        Active     2         N20-C6508 xx
4    Eth1/7        Active     1         N20-C6508 xx
4    Eth1/8        Active     2         N20-C6508 xx
5    Eth1/9        Active     1         N20-C6508 xx
5   Eth1/10        Active     2         N20-C6508 xx
6   Eth1/11        Active     1         N20-C6508 xx
6   Eth1/12        Active     2         N20-C6508 xx
7   Eth1/13        Active     1         N20-C6508 xx
7   Eth1/14        Active     2         N20-C6508 xx
8   Eth1/15        Active     1         N20-C6508 xx
8   Eth1/16        Active     2         N20-C6508 xx
9   Eth1/17        Active     1         N20-C6508 xx
9   Eth1/18        Active     2         N20-C6508 xx
10   Eth1/19        Active     1         N20-C6508 xx
10   Eth1/20        Active     2         N20-C6508 xx
11   Eth1/21        Active     1         N20-C6508 xx
12   Eth1/23        Active     1         N20-C6508 xx
12   Eth1/24        Active     2         N20-C6508 xx
13   Eth1/25        Active     1         N20-C6508 xx
13   Eth1/26        Active     2         N20-C6508 xx
14   Eth1/27        Active     1         N20-C6508 xx
14   Eth1/28        Active     2         N20-C6508 xx
UCS1-A(nxos)# show fex 1 detail
FEX: 1 Description: FEX0001   state: Online
FEX version: 5.0(3)N2(2.11.3a) [Switch version: 5.0(3)N2(2.11.3a)]
FEX Interim version: 5.0(3)N2(2.11.3a)
Switch Interim version: 5.0(3)N2(2.11.3a)
Chassis Model: N20-C6508, Chassis Serial: XXX
Extender Model: UCS-IOM-2204XP, Extender Serial: XXX
Part No: 73-14488-03
Card Id: 184, Mac Addr: c0:67:af:84:a6:5a, Num Macs: 38
Module Sw Gen: 21 [Switch Sw Gen: 21]
post level: complete
pinning-mode: static    Max-links: 1
Fabric port for control traffic: Eth1/1
Fabric interface state:
    Po1025 - Interface Up. State: Active
    Eth1/1 - Interface Up. State: Active
    Eth1/2 - Interface Up. State: Active
Fex Port        State Fabric Port
         Eth1/1/1 Down      Po1025
         Eth1/1/2 Down      Po1025
         Eth1/1/3 Down        None
         Eth1/1/4 Down        None
         Eth1/1/5 Down        None
                Eth1/1/6 Down        None
         Eth1/1/7 Down        None
         Eth1/1/8 Down        None
         Eth1/1/9 Down      Po1025
        Eth1/1/10 Down      Po1025
        Eth1/1/11 Down        None
        Eth1/1/12 Down        None
        Eth1/1/13 Down        None
        Eth1/1/14 Down        None
        Eth1/1/15 Down        None
        Eth1/1/16 Down        None
        Eth1/1/17    Up      Po1025
Logs:
01/03/2014 11:23:14.295257: Module register received
01/03/2014 11:23:14.296133: Registration response sent
01/03/2014 11:23:14.580311: Module Online Sequence
01/03/2014 11:23:17.47105: Module Online
If possible would you be free to discuss this on a WebEx?
Kind Regards, Paul

Similar Messages

FTP Server in FXP mode : PASV / Illegal PORT Command

Hello,
In our workflow, we transfer the media files with the FTP protocol in mode FXP (server to server), the commands are initiated by an automation system.
This system work with the plateforms windows (serv-u), linux (vsftpd), osx (tnftpd) but it's impossible on a osx server (xftpd). The aim is to write file on our Xsan.
The error is an illegal PORT command, when the automation system sent the IP adress of the other server.
For test, If the IP adress of the destination server is the same that the automation server, the transfers are good, the PORT command is accepted.
But in our case, the ip adress, is a other server...
We can't to run the ftp server in FXP mode, and I do not want to install a Pureftp for to replace the tools included with osx server (and server admin).
I think that's is possible, because this workflow works on a osx after we have modify the ftpd.conf (checkportcmd off).
We not found in the file ftp access and nothing on the Internet, that's why I write on this board.
I need your help, anyone have a solution, it's really important ?
Thank you very much.
Franck

Hello Franck,
I'm attempting the same thing. Did you find a solution to your problem?

%EC-SP-5-CANNOT_BUNDLE2 - Switch incorrectly sees port in Dynamic Trunking Mode

Take this configuration on a 6500 with 2 WS-X6716-10-GE modules installed.
interface Port-channel1
description Switch02:Po1
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
interface TenGigabitEthernet1/1
description Switch02:Te1/1
switchport
switchport mode trunk
switchport nonegotiate
channel-group 1 mode on
interface TenGigabitEthernet2/1
description Switch02:Te2/1
switchport
switchport mode trunk
switchport nonegotiate
channel-group 1 mode on
shutdown
Now I do this:
conf t
int Te2/1
no shut
This error message is generated:
%EC-SP-5-CANNOT_BUNDLE2: Te2/1 is not compatible with Te1/1 and will
be suspended (trunk mode of Te2/1 is trunk, Te1/1 is dynamic)
The million dollar question - Why would it see Te1/1 as being in dynamic trunking mode?

glen.grant wrote: Shutdown the port channel by shutting down the port channel SVI . Then try to bring it up , with a no shut on the port channel SVI , this will bring both ports up at the same time. Sometimes they do not like having a single port in the channel being brought up by itself. Also make sure the other end matches exactly seeing you are forcing the port channel to an on state.
I agree this may work, but it doesn't really address the problem. If both the logical and physical interfaces have 'switchport nonegotiate' configured, why would the switch see it in Dynamic Trunking mode?
One thing I did try was removing 'switchport nonegotiate' from Te2/1. Then I got this:
%EC-SP-5-CANNOT_BUNDLE2: Te2/1 is not compatible with Te1/1 and will be suspended (dtp nonegotiate of Te2/1 is 0, Te1/1 id 1)
It's now saying DTP is disabled for Te1/1. In other words, it is NOT in dynamic trunking mode. Since that directly contradicts the earlier message, my conclusion is this is a software bug.

UCS F port trunking and reserved VSAN confusion

We have an existing UCS infrastructre where all the FI's FC ports are connected to the MDS9513 as one to one connection ( no port channel or trunking) and the FI is working as "end host mode" . We are planning to move some crtical production application to the UCS infrastrcture and becuse of that we would like to use the FC port chanelling and F-port trunking. While reading some documents I found that there are some restriction on UCS for VSAN numbering while using the FI for F-port trunking . As per the following doc http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/2.0/b_UCSM_CLI_Configuration_Guide_2_0_chapter_010101.html#concept_5223F7F368524A39AB1A47B9F8BFEC8A
it says donot configure VSAN ID range from 3840 to 4079 . The MDS 9513 is running NX-OS 4.2(3) . Our existing MDS SAN infrstructure already have 2 VSANs with ID number 4000 and 4001 ( Both of these VSANS are usied for some storage replication unrelated to UCS). In the UCS we alreay have 2 VSANS' ( 200 and 201) and are planning to create 2 more ( 300 and 301). My question is if I configure the FI's for F-port truncking/FC port channeling then what will happen to my existing VSAN 4000 and 4001 on the MDS9513 SAN
Thanks
RK

If you are asking how long it will take to enable f-port trunk and how disruptive it will be? It's not lengthy, but, it will cause the link to stop passing traffic and cause SCSI retrys. Your server will know it happened. If your fc multipathing is operating properly there will be no outage.If there are any configuration issues, the link may be down for an extended period, further compounding this disruption in traffic.
You initially asked about two features, f-port trunk and f-port channel. These are seperate features and require different configuration changes. It's best to add one feature at a time, not both in the same configuration change. Each change will be disruptive.
Do one fabric at a time. Ensure the f-port trunk is fully functional before doing the f-port channel, making sure it is functional before starting work on the second fabric.If your multipathing is operating as it should, there will be no outage. If there is any doubt schedule an outage window.
Dave

Single Nexus 5548UP- FCoE configuration with multiple server ports

Hello Everyone,
I am new to Networking so please bear with me.
Here is some background information. We have a SINGLE Nexus 5548 UP switch to which we are connecting both the storage and the UCS C240 M3 servers (with CNA). Both the storage and server has 2 ports each going to this nexus switch.
We want to implement FCoE with this solution.
Below are the steps (for server ports) that I have followed to configure the nexus. But the port not logging into the SAN (no flogi) with the config.
Enable Features
config t
feature lacp
feature dot1x
feature interface-vlan
feature sshServer
feature npiv
end
Confgure Ethernet Ports - Server
configure
interface ethernet 1/17
description To_UCS_rack_server_1_FCoE_port_1
switchport mode trunk
switchport trunk native vlan 6
switchport trunk allowed vlan 1,6
spanning-tree port type edge trunk
priority-flow-control mode on
no shutdown
end
configure
interface ethernet 1/18
description To_UCS_rack_server_1_FCoE_port_2
switchport mode trunk
switchport trunk native vlan 6
switchport trunk allowed vlan 1,6
spanning-tree port type edge trunk
priority-flow-control mode on
no shutdown
end
Create VLAN
configure
vlan 6
name FCOE_VLAN
fcoe vsan 6
end
Setup FCoE QOS
configure terminal
system qos
service-policy type qos input fcoe-default-in-policy
service-policy type queuing input fcoe-default-in-policy
service-policy type queuing output fcoe-default-out-policy
service-policy type network-qos fcoe-default-nq-policy
end
Create vfc for Initiators (UCS Servers)
configure
interface vfc 17
bind interface ethernet 1/17
switchport description virtual_fiber_channel_Server1_Port1
end
configure
interface vfc 18
bind interface ethernet 1/18
switchport description virtual_fiber_channel_Server1_Port2
end
Adding vFC’s to VSAN
configure
vsan database
vsan 6 interface vfc 17
vsan 6 interface vfc 18
Create Zonesets and Zones
configure
show flogi database vsan 6 ----> Do not see any pwwn here???
show fcns database vsan 6
Any help in the regard would be highly appreciated.
Cheers,
KS

Fixed the issue. "switchport trunk native vlan 6" was causing the issue. Maybe the storage and Servers were not configured with proper VLAN's. I removed the native vlan and everything logged in fine.
Any how I have configured a single zone with all 3 servers pWWN's. I know single initiator zoning is the way to go.
Can you please guide me if I can move these servers in their separate zones without any outages? If it helps, all severs have 2 pWWN's. The current zoneset is active with that single zone.
Please let me know if you need any additional details.
Cheers,
KS

XI server ports on firewall

Hi
I am accessing the XI server which is behind a firewall. I have opened the XI server ports 3200,3300,3600 and 50000 in the firewall. But i am unable to access even the portal page(SXMB_IFR). We need to know what are all the ports we need to open in the firewall to get access for XI server.
Regards
Anandan

Hi -
When I mentioned "Integration Builder tools", this includes the Integration Repository and the Integration Directory. You need this same port to use the J2EE Visual Admin tool.
If you require FTP connections across the firewall (e.g. using FTP adapter), you'll need to take that into consideration. At least ports 20 and 21 for the command and data port, possibly others depending on whether you use FTP in active or passive mode. For XI on SP14 and below, only passive ftp connections are supported. SP15 on supports active.
Regards,
Jin

Switch Port Trunk allowed Vlan

Hi Guys
Request your help on my query :
I have a distribution switch and access switch and port channel between them.
Dist switch is the VTP server
lets assum I have 25 vlan
when I do show vlan brief on the access switch I can see all 25 vlans listed now
no when I configure switch port trunk allowed vlan (ex : permitting 10 vlans )on the link connecting to access switch at Dist switch
Dist switch po1 -- connecting to - po Access switch
Dist switch #
int po1
switch port trunk alllowed vlan x,x,x,x,x,x,x,x,x,
After permitting 10 vlan through trunk allowed vlan and then when I do show vlan brief on the access switch , I should see only the 10 vlan whcih I have permiited right ?
Thanks in advance

Hi,
John is absolutely correct - even if you do not permit a VLAN on a trunk, it can still provide communication among local ports on a switch that are all assigned to the same VLAN.
I have a feeling that your original question was focused on a different aspect, though: You probably expected that if you exclude some VLANs from trunks, these VLANs will not be propagated via VTP to surrounding switches. Sadly, this is not the case. The switchport trunk allowed vlan command only affects data traffic in individual VLANs but it has no impact on the operation of VTP protocol. The VTP still advertises all VLANs, regardless of which VLANs are allowed on a trunk. To put it plainly, in a VTP domain, all server/client switches will know about all VLANs. THere is no legal possibility of having a single VTP domain consisting of server/client switch and yet have the switches differ in their VLAN database contents. It's as easy as that: one VTP domain = one big common VLAN database.
Best regards,
Peter

Troubleshooting Connection: Server:Port:SID

Hi,
...beginning with Oracle... Connectivity question:
Is there a way to connect to an Oracle8i-9i database from SQL*Plus providing Server:Port:SID and not depend on TNSNames and othe *NET config files? More like in an "emergency" or troubleshooting mode...?
I'm probably doing something wrong...
SQL> connect user/password@MyServer:1521:OEMREP
ERROR:
ORA-06401: NETCMN: invalid driver designator
OEMREP is one of the databases, tried to use IP instead of MyServer. Port is correct and database is up and opened.
I do have proper configuration and can connect normally, resolving service wth TNSNames:
SQL> connect user/password@OEMREP
Also: I can connect if provide this terrible for a command line string:
SQL> connect scott/tiger@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=MyServer)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=OEMREP)))
It would be lovely to be able to do IP:PORT:SID, but how?
Have been 'googling' for an hour, but nothing straight.
Thanks,
Ralph

Hi,
...beginning with Oracle... Connectivity question:
Is there a way to connect to an Oracle8i-9i database from SQL*Plus providing Server:Port:SID and not depend on TNSNames and othe *NET config files? More like in an "emergency" or troubleshooting mode...?
I'm probably doing something wrong...
SQL> connect user/password@MyServer:1521:OEMREP
ERROR:
ORA-06401: NETCMN: invalid driver designator
OEMREP is one of the databases, tried to use IP instead of MyServer. Port is correct and database is up and opened.
I do have proper configuration and can connect normally, resolving service wth TNSNames:
SQL> connect user/password@OEMREP
Also: I can connect if provide this terrible for a command line string:
SQL> connect scott/tiger@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=MyServer)(PORT=1521))(CONNECT_DATA=(SERVICE_NAME=OEMREP)))
It would be lovely to be able to do IP:PORT:SID, but how?
Have been 'googling' for an hour, but nothing straight.
Thanks,
Ralph

Port Access mode allow tagged frames ?

Hello,
From my understanding Cisco Catalyst switch port access mode only allow untagged frames to be received and proceeded. Tagged frames received on access mode port should be discarded.
But I have found in BCMSN course Student Guide following phrase
If a non-802.1Q-enabled device or an access port receives an 802.1Q frame, the tag data is
ignored, and the packet is switched at Layer 2 as a standard Ethernet frame.
Is in this case term access related to non Cisco equipment ? Or where are some Cisco Catalysts HW/SW combinations in which access mode port accept also tagged frames ?
With Best Regards
Tomas

Hello Tomas,
802.1Q tagged frames with a vlan-id = access vlan of the port are accepted on Cisco Catalysts.
for Sure it was in 2004-2005 when I did L2 security tests and read about the following:
This is the basis for one of the L2 security attack that is called vlan hopping:
if you send a frame with two 802.1Q tags and:
a) the external tag vlan-id = port access vlan
b) the same vlan is used as native vlan in a inter-switch trunk
the attacker can send a frame from vlan X to vlan y bypassing L3 security and routing devices.
the recommendation is to use as native vlan a dedicated vlan for all trunks that is never used on access ports.
Hope to help
Giuseppe

Ucs server port question

i have an UCS system running ver 1.4
have a server port configured but that shows up as trunk. it should be fabric.
have i done some wrong configuration ?
how do i change it

i had ports from the same fabric extender going to 2 diff interconnects
most likely the reason my setup was acting funky
Tejas Kunte
I.T. Operations
eClinicalWorks
2 Technology Drive | Westborough, MA 01581
T: 508-836-2700 x10326 | F: 508-836-4466 | facebook.png twitter.png in.png
[email protected] | www.eclinicalworks.com
This transmission contains confidential information belonging to the sender that is legally privileged and proprietary and may be subject to protection under the law, including the Health Insurance Portability and Accountability Act (HIPAA). If you are not the intended recipient of this e-mail, you are prohibited from sharing, copying, or otherwise using or disclosing its contents. If you have received this e-mail in error, please notify the sender immediately by reply e-mail and permanently delete this e-mail and any attachments without reading, forwarding, or saving them. Thank you.
P Please consider the environment and only print this e-mail if necessary

Trunk mode vlan to a VM with 8 vNIC's - targetting one specific vNIC

Hi all
I've popped a question into the Powerhsell forum this morning, and realised it may have been more suitable in Hyper-V section due to the nature of the question. Apologies if dual posting is not the done thing.
My original question can be seen here:
https://social.technet.microsoft.com/Forums/scriptcenter/en-US/5b12e416-ffc9-4391-b3f1-91fdb192f11a/hyperv-trunk-mode-to-vm-how-to-target-a-specific-virtual-nic-using-powershell?forum=winserverpowershell
Essentially, my question is around a VM that currently has 8 x vNIC's, but needs to communicate over 9 x vlans at present. I have attempted the following command in a test environment, but I can't see how this would comms over a specific vNIC; it looks like
its a global command to the target VM:
Set-VMNetworkAdapterVlan -VMName test1 -Trunk -AllowedVlanIdList "1-5" -NativeVlanId 6
Is there a way to target a specific vNIC on a VM with the above command at all, or is there a better way to enable trunk mode to the intended VM please?
Thanks
Paul

Hi Eric
Thanks for reply.
Thanks - your reply got me thinking a little more about this, and I found another article (which was also a reply from yourself when someone asked about how you rename a network adaptor when every adaptor is called "Network Adapter"),
that lead to a working command for what I would like to achieve.
So, here is my working command now:
Get-VMNetworkAdapter -VMName test2 | Where-Object -Property MacAddress -eq "000000000098" | Set-VMNetworkAdapterVlan -Trunk -AllowedVlanIdList "2214-2217" -NativeVlanId 22
Upon running Get-VMNetworkAdapterVlan I can see how the various adaptors are now configured:
test2                    Network Adapter               Untagged
test2                    Network Adapter               Untagged
test2                    Network Adapter               Trunk    22,2214-2217
test2                    Network Adapter               Untagged
I appreciate my command may not be pretty, but it completes successfully in my lab in terms of applying the settings. Is there any obvious problems that you can see with the above?
Lastly, the reason for the vlans in this way is because the server is NetBackup Master Server, and needs comms over all the relevant vlans. I'm intending on configuring a secondary interface through the teaming GUI in Server 2012, and specifying vlan ID's
there.
Thanks
Paul

How can I find out the server port for a secured FTP site and creating a FTP Connection Manager

I have to create a FTP Task to go out and get the files that our 3rd party vendor will be dropping on a secured FTP site. I have all the credentials to access that Secured FTP Site and have successfully done so through FileZilla.
Now I need to set-up a FTP Task to go out and get their files and in so doing create a FTP Connection Manager. Is there any way I can determine the
Server Port number from the Secured FTP site? I let it default to 21 and tried the Test Connect and it failed.
Thanks for your review and am hopeful for a reply.

Hi ITBobbyP,
SSIS has a built in FTP task, while this only works for the FTP protocol, it doesn’t support SFTP. But there are some free clients like WinSCP and
SSIS SFTP Task Control Flow Component
available in the CodePlex which can invoked from SSIS.
References:
SSIS SFTP Task Control Flow Component approach
WinSCP approach
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Starting Weblogic Server in Development Mode

Hello,
How can I start a managed server in development mode? I set STARTMODE=false in
the StartManagedServer.cmd. However, this did not work. Any ideas? Thanks in
advance.

收到，谢谢！
内容不错

Starting SOA Suite server in debug mode

Hello,
anyone knows how to start soa suite server on debug mode?
it basically oc4j server started from opmn. is there anyway i can pass the "-ojvm -XXdebug,port4000,detached,quiet" to opmn?
Rudi

solved..!!!
http://download.oracle.com/docs/cd/B31017_01/web.1013/b28950/sysprops.htm#CHDCFADJ

Starting Server in Debug Mode - Need Some Advice Plz.

Hi Guys,
I have an EP SP 12 Server Running and I am trying to Start the Server in Debug mode from the Netweaver Developer Studio but when I right click the Server and try to choose Debug, the option is greyed out and even while viewing the Debug option from the SAPMMC I see that under the column Debug, it say 'Disabled' for the Server and Dispatcher.
Can anyone suggest how this can be done, I would appreciate any help as I have been working on this for some time.
Best Wishes,
John.
Message was edited by: John Bray
Message was edited by: John Bray

Hi John,
If the you cannot start the server in the debugging mode through the NWDS then you can try the other way round.
Through Config Tool:
You can enable the debuggine mode from the Config Tool as well. Just visit the following path :
C:\usr\sap\<SID>\JC<SYS_NO>\j2ee\configtool\configtool.bat
Click on the your instance. Then under the tab VM Environment, Set the DebugMode = true.
Restart the engine now. This will open the J2EE server again in the Debug Mode.
I hope this helps you!!
Regards
Pravesh
PS: Please conside rewarding points if helpful and solved.

Server Port - Trunk Mode

Similar Messages

Maybe you are looking for