topic Re: Maestro bridge cabing in Hyperscale Firewall (Maestro)

Maestro bridge cabing

LongjiangLI — Sun, 23 Oct 2022 02:07:35 GMT

Hi Expert,

I facing Maestro cabing proble,. Topology as showing MHO is working in the Layer 2 mode . All the gateway are in the Core-Switch.

Bond1:Eth1-13 、Eth1-14、Eth2-13、 Eth2-14

Bond2:Eth1-15、Eth1-16、Eth2-15、 Eth2-16

Bridge：Bond1 、Bond2 (work at Tunk 802.3AD mode )

MHO and GW are running R81.10 version and T66 HF .

Base on this design can we cross connect the core switch or access switch between two MHO. Thanks !

Re: Maestro bridge cabing

_Val_ — Tue, 25 Oct 2022 07:47:35 GMT

@Anatoly @Lari_Luoma can you guys assist, please?

Re: Maestro bridge cabing

Anatoly — Tue, 25 Oct 2022 07:57:01 GMT

Looks like it should work

Re: Maestro bridge cabing

Chris_Atkinson — Tue, 25 Oct 2022 08:16:51 GMT

Why do you think there is a cabling problem, how is STP / Portfast configured?

Re: Maestro bridge cabing

LongjiangLI — Tue, 25 Oct 2022 09:12:49 GMT

Hi Anatoly,

Thanks for your replay !

Topology desing have 3 bridge in the network :

We meet the MAC inconsistency problem , flowing is the error message In special Brige :

Then we open a technical case ，TAC tell us across device bond setting is not support. So We want clear know that there are some limitation on the Layer2 deployment and across device bond setting? Thanks !

Re: Maestro bridge cabing

LongjiangLI — Tue, 25 Oct 2022 09:22:23 GMT

Hi Chris ,

Nice to see you again .

I am not sure there is a problem or not . All the interface are the trunk mode not change to edge/portfast port mode ,so have the STP on there but all the interface are in the forwarding statues .

Re: Maestro bridge cabing

Chris_Atkinson — Tue, 25 Oct 2022 10:55:36 GMT

Ok. For context I have the follow questions

* How is the distribution mode configured?

* What hashing mechanism is used on the bond/trunks?

Re: Maestro bridge cabing

Lari_Luoma — Tue, 25 Oct 2022 13:27:41 GMT

I don't see any issues with this. What makes you doubt this kind of cabling?

Re: Maestro bridge cabing

LongjiangLI — Wed, 26 Oct 2022 11:30:22 GMT

Hi Chris ,

I comfirm form my enduser side that Core /distribute switch are using src/dst IP hash arithmetic . In the 2 MHO distribute mode using auto-topology(per-port) arithmetic .

Switch

Re: Maestro bridge cabing

LongjiangLI — Wed, 26 Oct 2022 11:40:28 GMT

Hi Lari,

We meet the MAC inconsistency issuse that tac tell us across device bond setting is not support . I think across device bond is very important in the netwrok design .hope you could give us advise ,Thanks !

Re: Maestro bridge cabing

Lari_Luoma — Wed, 26 Oct 2022 17:37:44 GMT

Without knowing the details I cannot comment whether your configuration is supported, but if TAC is telling you it's not I would trust them.

Here are some general thoughts.

- In order to configure LACP bonding that peers with two different physical switches, the switches must have vPC, VSS or similar configured

- MAC inconsistency does not necessarily indicate a problem. Sometimes this is fixable by tuning the garbage collector threshold or ARP table size. Work with TAC to get the most accurate solution in your environment.

Re: Maestro bridge cabing

Dario_Perez — Wed, 26 Oct 2022 17:52:19 GMT

In addition what @Lari_Luoma it say to work with LACP /802.3ad (active/active) switch must be in stack. If they are independent then the bonding must be Active/Backup as well.

Keep in mind in A/B you must define the primary interface of the bond.