topic Re: Cisco port channel member is suspended in Firewall and Security Management

Cisco port channel member is suspended

oliver_gao36 — Mon, 31 Aug 2020 10:07:05 GMT

Hi all,

Here we have a CP6200p NGFW, i set a bond group to connect with Cisco switch, below is the configurations on both Checkpoint & Cisco side.

Cisco:

interface Port-channel2
switchport access vlan 254
switchport mode access

interface TenGigabitEthernet1/0/11
switchport access vlan 254
switchport mode access
channel-protocol lacp
channel-group 2 mode active

interface TenGigabitEthernet2/0/11
switchport access vlan 254
switchport mode access
channel-protocol lacp
channel-group 2 mode active

Checkpoint:

My question is: after setting, i found there is only one link member is active, is it normal? or are there anything that i setup wrong? please advise, thanks a lot.

Re: Cisco port channel member is suspended

mk1 — Mon, 31 Aug 2020 11:04:18 GMT

Hello Oliver,

Is there any particular reason to leave "Transmit Hash Policy" to Layer 2 instead of Layer 3+4? Could you also send the result from command: cat /proc/net/bonding/bond10

Re: Cisco port channel member is suspended

Timothy_Hall — Mon, 31 Aug 2020 14:57:39 GMT

Once a port goes into a suspended state due to a configuration mismatch, I don't believe it will try to recover on its own (kind of like errdisable). It is possible a mismatch was detected when you were still setting things up, try a shut/no shut on Te1/0/11 and see what happens. If it goes right back to a suspended state, do a show log which should have an error message showing the suspension reason.

Re: Cisco port channel member is suspended

oliver_gao36 — Tue, 01 Sep 2020 01:25:29 GMT

Hi Nickel,

Actually no other particular reason, i just use the default settings in Advanced Option.

Re: Cisco port channel member is suspended

oliver_gao36 — Tue, 01 Sep 2020 01:28:55 GMT

Hi Nickel,

Thank you for your reply first.

In fact, we don't have any particular reason to set that, the screenshot above(Bond group advanced option) is the default settings when i configuring ether-channel on CP side.

Re: Cisco port channel member is suspended

oliver_gao36 — Tue, 01 Sep 2020 01:31:34 GMT

Thank you very much Timothy_Hall, i tried your suggestion, and then the portchannel came back normally.

Re: Cisco port channel member is suspended

mreza_998 — Tue, 20 Jun 2023 05:09:21 GMT

I seen the log off my switch and problem was:

Gii1/0/47 is not compatible with Gi1/0/48 and will be suspended (speed of Gi1/0/47 is 100M, Gi1/0/48 is 1000M)

Thanks you Timothy_Hall