hi everyone:
I found myself in situation where honestly don't know what is going on. I have 5 vlans (include management) and this one Vlan:
VLAN Name Ports Type Authorization
----- --------------- ------------- ----- -------------
4 10-5-6-0 ch21-22, Static Required
1/xg3-1/xg4
the other end of the wires are two PEr815 with Centos 7.3 with virtually identical configs:
A] $ nmcli c s 10.5.6.100-team
connection.id: 10.5.6.100-team
connection.uuid: db71a057-dc0b-4057-900b-9c1f6c6f5e5e
connection.stable-id: --
connection.interface-name: nm-team1
connection.type: team
connection.autoconnect: yes
...
802-3-ethernet.mtu: 9000
..
team.config: {"runner": {"name": "lacp", "active": true, "fast_rate": true, "tx_hash": ["eth", "ipv4", "ipv6"]}, "link_watch": {"name": "ethtool"}}
B] $ nmcli c s 10.5.6.49-team
connection.id: 10.5.6.49-team
connection.uuid: af3898b1-39b0-456e-9a27-35bc5ddb9d76
connection.stable-id: --
connection.interface-name: nm-team1
connection.type: team
connection.autoconnect: yes
connection.autoconnect-priority: 9
...
802-3-ethernet.mtu: 9000
..
team.config: {"runner": {"name": "lacp", "active": true, "fast_rate": true, "tx_hash": ["eth", "ipv4", "ipv6"]}, "link_watch": {"name": "ethtool"}}
! And these cannot access each other. Ping works but any other services not, well, at this point lets care only about ssh.
#show interfaces port-channel 21
Channel Ports Hash Algorithm Type
------- ----------------------------- -------------------
ch21 Active: 1/g21, 2/g21 3
show interfaces port-channel 22
Channel Ports Hash Algorithm Type
------- ----------------------------- -------------------
ch22 Active: 1/g22, 2/g22 3
Further:
#show interfaces detail port-channel 21
Ch Type Admin Link
--- ------------------------------ ----- -----
ch21 Link Aggregate Up Up
Ch Description
---- --------------------------------------------------------------------------
ch21 whale_10.5.6.49-team
Flow Control:Enabled
Port: ch21
VLAN Membership mode:Access Mode
Operating parameters:
PVID: 4
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Default Priority: 0
GVRP status:Disabled
Port ch21 is member in:
VLAN Name Egress rule Type
---- --------------------------------- ----------- --------
4 10-5-6-0 Untagged Static
Static configuration:
PVID: 4
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Port ch21 is statically configured to:
VLAN Name Egress rule
---- --------------------------------- -----------
4 10-5-6-0 Untagged
Forbidden VLANS:
VLAN Name
---- ---------------------------------
#show interfaces detail port-channel 22
Ch Type Admin Link
--- ------------------------------ ----- -----
ch22 Link Aggregate Up Up
Ch Description
---- --------------------------------------------------------------------------
ch22 rider_10.5.6.100-team
Flow Control:Enabled
Port: ch22
VLAN Membership mode:Access Mode
Operating parameters:
PVID: 4
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Default Priority: 0
GVRP status:Disabled
Port ch22 is member in:
VLAN Name Egress rule Type
---- --------------------------------- ----------- --------
4 10-5-6-0 Untagged Static
Static configuration:
PVID: 4
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Port ch22 is statically configured to:
VLAN Name Egress rule
---- --------------------------------- -----------
4 10-5-6-0 Untagged
Forbidden VLANS:
VLAN Name
---- ---------------------------------
Lastly:
#show ip interface vlan 4
Routing Interface Status....................... Up
Primary IP Address............................. 10.5.6.1/255.255.255.0
Routing Mode................................... Enable
Administrative Mode............................ Enable
Forward Net Directed Broadcasts................ Disable
Proxy ARP...................................... Enable
Local Proxy ARP................................ Disable
Active State................................... Active
MAC Address.................................... 0023.AEC4.5BDA
Encapsulation Type............................. Ethernet
IP MTU......................................... 9128
Bandwidth...................................... 10000 kbps
Destination Unreachables....................... Enabled
ICMP Redirects................................. Enabled
Here is the very weir bit, if I do:
]$ nmcli c m 10.5.6.49-team 802-3-ethernet.mtu auto
]$ nmcli c d 10.5.6.49-team; sleep 1; ]$ nmcli c u 10.5.6.49-team
Essentially only on this one node/host, and I can immediately ssh between the nodes.
I'd very much appreciate your suggestions and help.