Switching

 View Only
last person joined: yesterday 

Ask questions and share experiences about EX and QFX portfolios and all switching solutions across your data center, campus, and branch locations.
  • 1.  Question on Virtual Chassis

     
    Posted 08-23-2023 17:06
    Hi
    When I create a virtual chassis, why does my login session go the the backup RE?
    I am configuring a virtual chassis with 2 EX4300s.
     
    I have converted 2 uplink ports of both switches into vc ports.
     
    Now, on EX1 I enable the new VC ports:
    request virtual-chassis vc-port set interface vcp-255/1/0 member 0
    request virtual-chassis vc-port set interface vcp-255/1/1 member 0
     
    I then commit the following configuration on EX1:
    virtual-chassis {
        no-split-detection;
        traceoptions {
            file me;
            flag me detail;
        }
        member 0 {
            mastership-priority 255;
        }
        member 1 {
            mastership-priority 255;
        }
    }
     
     
    I then go to EX2 and enable its VC ports:
    request virtual-chassis vc-port set interface vcp-255/1/0 member 0
    request virtual-chassis vc-port set interface vcp-255/1/1 member 0
    Now a virtual chassis is created with EX1 as master and EX2 as backup.
     
    However, I lose my connectivity to EX1. I try logging back into  EX1, and I log into the VC backup RE, as evidenced by the CLI prompt.
    {backup:1}
    lab@ex1> 
     
    I then execute "request session member 0" to move to the master and then everything seems fine.
     
    But is it expected behaviour that after the VC is formed I will be logging into the backup RE by default?
     
    Thanks,
    Deepak 


  • 2.  RE: Question on Virtual Chassis

    Posted 08-24-2023 01:35

    Hi Deepak,

    You have defined same priority values on both master and backup.

    May be your backup device has become master . To validate just provide following information.

    >show virtual-chassis status

    >show virtual-chassis vc-port

    To switchover the mastership you can use the following command.

    >request chassis routing-engine master switch

    Make sure you have backup configuration before applying above command.

    Best Regards,

    naveen



    ------------------------------
    NAVEEN M
    ------------------------------



  • 3.  RE: Question on Virtual Chassis

     
    Posted 10-06-2023 15:58

    Hi Naveen.

    Thanks for your reply.

    The issue is not that the wrong switch is the master. The issue is that my login session to the chassis is regularly terminated and when I log back in , I log into the the backup, after which I go to the master via "request session member 0".

    I would like to know why I am being kicked out regularly and why logging back in takes me to the backup RE rather than the master RE.

    Could it be because the management port on the master is a ge interface rather than the me0 interface?

    {master:0}
    lab@ex1> show virtual-chassis status 

    Virtual Chassis ID: 2d0a.3275.925a
    Virtual Chassis Mode: Enabled
                                                    Mstr           Mixed Route Neighbor List
    Member ID  Status   Serial No    Model          prio  Role      Mode  Mode ID  Interface
    0 (FPC 0)  Prsnt    PG3718470046 ex4300-24t     255   Master*      N  VC   1  vcp-255/1/0
                                                                               1  vcp-255/1/1
    1 (FPC 1)  Prsnt    PG3718470097 ex4300-24t     255   Backup       N  VC   0  vcp-255/1/0
                                                                               0  vcp-255/1/1

    Member ID for next new member: 2 (FPC 2)

    {master:0}
    lab@ex1> show virtual-chassis vc-port   
    fpc0:
    --------------------------------------------------------------------------
    Interface   Type              Trunk  Status       Speed        Neighbor
    or                             ID                 (mbps)       ID  Interface
    PIC / Port
    1/0         Configured          5    Up           40000        1   vcp-255/1/0
    1/1         Configured          5    Up           40000        1   vcp-255/1/1
    1/2         Configured               Absent  
    1/3         Configured               Absent  

    fpc1:
    --------------------------------------------------------------------------
    Interface   Type              Trunk  Status       Speed        Neighbor
    or                             ID                 (mbps)       ID  Interface
    PIC / Port
    1/0         Configured          5    Up           40000        0   vcp-255/1/0
    1/1         Configured          5    Up           40000        0   vcp-255/1/1
    1/3         Configured               Absent  
    1/2         Configured               Absent  

    --Deepak




  • 4.  RE: Question on Virtual Chassis

    Posted 08-24-2023 08:48

    I would also recommend applying these commands as well:

    set virtual-chassis preprovisioned
    set virtual-chassis member 0 role routing-engine
    set virtual-chassis member 0 serial-number XXXXXXXXX
    set virtual-chassis member 1 role routing-engine
    set virtual-chassis member 1 serial-number XXXXXXXXX
    set virtual-chassis member 2 role line-card
    set virtual-chassis member 2 serial-number XXXXXXXXX
    set virtual-chassis member 3 role line-card
    set virtual-chassis member 3 serial-number XXXXXXXXX



    ------------------------------
    Randy Shulse
    ------------------------------



  • 5.  RE: Question on Virtual Chassis

     
    Posted 10-07-2023 06:22

    When you say login I believe you mean you are doing an SSH?

    You also said that management interface is ge not me. Could you share the output of following commands?

    Show route

    Show interfaces terse | match inet

    To answer your question, once VC is formed, the devices are logically one. Management access to device must always connect you to master RE even.




  • 6.  RE: Question on Virtual Chassis

     
    Posted 10-08-2023 14:07

    Thanks Sean for looking into this.

    Yes, I am using SSH to log into my 2-member VC, but I always log into member 1 i.e. the backup RE, from which I have to open a session to the master.

    Here is the output you asked for:

    {master:0}
    lab@ex1> show route table inet.0 

    inet.0: 10 destinations, 10 routes (10 active, 0 holddown, 0 hidden)
    + = Active Route, - = Last Active, * = Both

    10.10.1.0/24       *[Direct/0] 1d 02:53:30
                        >  via ge-0/0/0.0
    10.10.1.11/32      *[Local/0] 1d 02:53:30
                           Local via ge-0/0/0.0
    10.100.0.1/32      *[Direct/0] 10:10:33
                        >  via lo0.0
    10.100.100.254/32  *[Local/0] 10:10:34
                           Reject
    10.100.101.254/32  *[Local/0] 10:10:34
                           Reject
    10.100.156.1/32    *[Local/0] 10:10:33
                           Reject
    10.100.200.254/32  *[Local/0] 10:10:33
                           Reject
    10.100.201.254/32  *[Local/0] 10:10:33
                           Reject
    10.210.19.0/29     *[Direct/0] 1d 02:53:58
                        >  via me0.0
    10.210.19.1/32     *[Local/0] 1d 02:53:58
                           Local via me0.0

    {master:0}
    lab@ex1> show interfaces terse | match inet 
    ge-0/0/0.0              up    up   inet     10.10.1.11/24   
    pfe-0/0/0.16383         up    up   inet    
                                       inet6   
    pfh-0/0/0.16383         up    up   inet    
    pfh-0/0/0.16384         up    up   inet    
    ge-0/0/6.0              up    up   inet6    2001:db8:100:101::1/64
    ge-0/0/8.0              up    up   inet     10.100.100.1/24 
                                       inet6    2001:db8:100:100::1/64
    pfe-1/0/0.16383         up    up   inet    
                                       inet6   
    pfh-1/0/0.16383         up    up   inet    
    pfh-1/0/0.16384         up    up   inet    
    ge-1/0/4.0              up    up   inet    
    ge-1/0/10.0             up    up   inet     10.100.100.2/24 
                                       inet6    2001:db8:100:100::2/64
    bme0.0                  up    up   inet     128.0.0.1/2     
    irb.100                 up    down inet     10.100.100.254/24
                                       inet6    2001:db8:100:100::254/64
    irb.101                 up    down inet     10.100.101.254/24
                                       inet6    2001:db8:100:101::254/64
    irb.156                 up    down inet     10.100.156.1/24 
                                       inet6    2001:db8:100:156::1/64
    irb.200                 up    down inet     10.100.200.254/24
                                       inet6    2001:db8:100:200::254/64
    irb.201                 up    down inet     10.100.201.254/24
                                       inet6    2001:db8:100:201::254/64
    jsrv.1                  up    up   inet     128.0.0.127/2   
    lo0.0                   up    up   inet     10.100.0.1          --> 0/0
                                       inet6    2001:db8:100::1 
    lo0.16385               up    up   inet    
    me0.0                   up    up   inet     10.210.19.1/29  




  • 7.  RE: Question on Virtual Chassis

     
    Posted 10-08-2023 21:17

    I don't think so the virtual chassis is formed correctly. I can say this because the output shows 'me' not 'vme'

    10.210.19.1/32     *[Local/0] 1d 02:53:58
                           Local via me0.0

    Please check if the commit synchronize is configured or do it by setting the following

    set chassis commit synchronize

    Please execute 'commit synchronize' after that on master RE.

    if this a production device, I would advise to do this afterhours as it may be disruptive to what config you may have on the backup RE.




  • 8.  RE: Question on Virtual Chassis

    Posted 10-12-2023 11:31

    In a VC, you never use me0, but vme (virtual me). You can do this:

    rename interface me0 to vme

    commit confirmed

    Now, you say that you login to the switch via SSH on a "ge-port". What IP address do you SSH to? Which IRB is this tied to or is it tied to sometinhg else? "Could it be because the management port on the master is a ge interface rather than the me0 interface?"