topic Re: Alias interface is showing "No-link" state in Firewall and Security Management

Alias interface is showing "No-link" state

Kjohnt006 — Fri, 08 Nov 2024 14:11:14 GMT

Hi Team,

we are receiving alerts for interface alias link state is down. attached is the snap. not sure what all things needs to check on firewall. please help

Re: Alias interface is showing "No-link" state

the_rock — Fri, 08 Nov 2024 14:16:50 GMT

And this is the state since you created it?

Andy

Re: Alias interface is showing "No-link" state

Kjohnt006 — Fri, 08 Nov 2024 14:18:36 GMT

No received alerts 2 days back... not sure when it was created but I believe interface was there earlier as well

Re: Alias interface is showing "No-link" state

the_rock — Fri, 08 Nov 2024 14:21:21 GMT

That does not look like an alias to me. Say your if name is eth0, alias would show as eth0:1

Andy

Re: Alias interface is showing "No-link" state

Kjohnt006 — Fri, 08 Nov 2024 14:24:21 GMT

Alert was like "Metric Name: network.interface.status, Interface Name: eth3-02, Severity: Critical, Admin Status: 1, Operational Status: down(2), Reason: eth3-02 operational status is down(2)"

However, dont see any IP in the configuration

Re: Alias interface is showing "No-link" state

the_rock — Fri, 08 Nov 2024 14:31:07 GMT

Ok, so got nothing to do with alias, its actual interface. You can try below:

ifdown eth3-01; ifup eth3-01

It will cause brief downtime until it comes back, otherwise, maybe check the speed/duplex, cabling...

Andy

Re: Alias interface is showing "No-link" state

Kjohnt006 — Fri, 08 Nov 2024 14:35:48 GMT

When I checked for bond status it shows below details:

Slave Interface: eth3-01
MII Status: down
Speed: Unknown
Duplex: Unknown
Link Failure Count: 2
Permanent HW addr: xxxxxxxxxxxxxxx
Slave queue ID: 0
Aggregator ID: 1
Actor Churn State: none
Partner Churn State: none
Actor Churned Count: 0
Partner Churned Count: 0
details actor lacp pdu:

Not getting anything in speed or duplex. Other side network interface too received an alert like "Critical - Interface Twe1/0/24 (Alias - TO XXXXXX eth3-01) status is down(2) . Resource Name:"

Is there anything we can check to confirm if no issues on firewall?

Re: Alias interface is showing "No-link" state

the_rock — Fri, 08 Nov 2024 14:38:15 GMT

Put it this way...regardless what network device we are talking about, could be fw, switch, router, whatever brand in the world...IF you are seeing the exact scenario as one you sent in your last response, that 100% tells you its layer 1 problem, so I would try command I sent, otherwise, if that fails, would test another cable.

Andy

Re: Alias interface is showing "No-link" state

Kjohnt006 — Fri, 08 Nov 2024 14:40:18 GMT

Hi Andy, Thank you so much for your inputs... I will try to bounce it from firewall else will check on cable connected. Have a great weekend ahead 🙂

Re: Alias interface is showing "No-link" state

the_rock — Fri, 08 Nov 2024 14:42:27 GMT

No problem, happy to help. Anywho, I always offer to do remote to assist, so if you are allowed to do it, just message me privately and we can connect.

Best,

Andy

Re: Alias interface is showing "No-link" state

the_rock — Fri, 08 Nov 2024 18:03:14 GMT

Hey everyone,

Just to update quick, Kunal @Kjohnt006 and I had zoom remote and here is what I found out.

Client has bunch of bonds, but on 2 of them it shows down for one interface and when you do show interface in clish, everything shows not available and sadly, because its part of bond, you cant modify it individually, UNLESS you remove it from bond group first.

Now, since there are bunch of vlans off those bonds, we did not want to take a risk in trying, so I created few new interfaces in R82 lab, we created new bond group, one vlan of it, removed eth3 from bond, and vlan group stayed the same and we were able to add eth3 back into bond after from web UI.

Since those bonds dont show up by default in smart console object, no need to modify anything there.

Kunal will check with the client if this is something they can test next week, though I would still get an official answer from TAC about this, just to be sure.

Thanks Kunal a lot for your time and patience about it, but message me any time if you want me to test anything further in the lab. Its R82 lab anyway, so no offence, I dont care if it breaks, easy to set up new one. Well, I mean, I do SORT OF care if it breaks, but not the end of the world, haha : - )

Cheers brother.

Andy