OK, VLAN/PowerConnect gurus, I've been banging my head against the monitor for a couple of days now, and can't figure out why this is not working. Here's the scenario:
I have a DELL R710 server running VMWare 5.0.0. I have a vSwitch configured on 2 of the NICS (VLAN: 10). These NICs are connected to a 3-unit stack of 6248P PowerConnect swithes (on ports 3/g2 and 3/g7) (I know, they need to be on different units for failover best practices, but that's a different story, so please don't bash me on that!). This VLAN is my backup network that handles all of my backup traffic from all the various agents on the physical and virtual servers. Here is the configuration settings for the switchport:
coreswitch#show interfaces switchport port-channel 3
Port: ch3
VLAN Membership mode:Access Mode
Operating parameters:
PVID: 10
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Default Priority: 0
GVRP status:Disabled
Port ch3 is member in:
VLAN Name Egress rule Type
---- --------------------------------- ----------- --------
10 Backup Network Untagged Static
Static configuration:
PVID: 10
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Port ch3 is statically configured to:
VLAN Name Egress rule
---- --------------------------------- -----------
10 Backup Network Untagged
Forbidden VLANS:
VLAN Name
---- ---------------------------------
coreswitch#
And each of the individual ports:
coreswitch#show interfaces switchport ethernet 3/g2
Port: 3/g2
VLAN Membership mode:Access Mode
Operating parameters:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Default Priority: 0
GVRP status:Disabled
Protected:Disabled
Port 3/g2 is member in:
VLAN Name Egress rule Type
---- --------------------------------- ----------- --------
1 Default Untagged Default
Static configuration:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Port 3/g2 is statically configured to:
VLAN Name Egress rule
---- --------------------------------- -----------
Forbidden VLANS:
VLAN Name
---- ---------------------------------
coreswitch#show interfaces switchport ethernet 3/g7
Port: 3/g7
VLAN Membership mode:Access Mode
Operating parameters:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Default Priority: 0
GVRP status:Disabled
Protected:Disabled
Port 3/g7 is member in:
VLAN Name Egress rule Type
---- --------------------------------- ----------- --------
1 Default Untagged Default
Static configuration:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Port 3/g7 is statically configured to:
VLAN Name Egress rule
---- --------------------------------- -----------
Forbidden VLANS:
VLAN Name
---- ---------------------------------
coreswitch#
I have a firewall (Watchguard), configured to allow VLAN 10 on it's interface eth6. That interface is connected to the coreswitch on 2/g20, which is a member (the only member) of port-channel 5. The settings for the port-channel and ehternet port are:
coreswitch#show interfaces switchport port-channel 5
Port: ch5
VLAN Membership mode:Trunk Mode
Operating parameters:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: VLAN Only
Default Priority: 0
GVRP status:Disabled
Port ch5 is member in:
VLAN Name Egress rule Type
---- --------------------------------- ----------- --------
10 Backup Network Tagged Static
Static configuration:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: VLAN Only
Port ch5 is statically configured to:
VLAN Name Egress rule
---- --------------------------------- -----------
10 Backup Network Tagged
Forbidden VLANS:
VLAN Name
---- ---------------------------------
coreswitch#show interfaces switchport ethernet 2/g20
Port: 2/g20
VLAN Membership mode:Access Mode
Operating parameters:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Default Priority: 0
GVRP status:Disabled
Protected:Disabled
Port 2/g20 is member in:
VLAN Name Egress rule Type
---- --------------------------------- ----------- --------
1 Default Untagged Default
Static configuration:
PVID: 1
Ingress Filtering: Enabled
Acceptable Frame Type: Untagged
Port 2/g20 is statically configured to:
VLAN Name Egress rule
---- --------------------------------- -----------
Forbidden VLANS:
VLAN Name
---- ---------------------------------
coreswitch#
Now, the real problem - I cannot ping either device from the other. I can ping both from coreswitch, but no connectivity otherwise.
Would somebody please point out my mistake?
Thanks,
Mark