MHO-140 remote site sync link transceiver requirement

[T_Letts]

Hello Maestro Community

Until a week or so ago, I had been running single orchestrators (MHO-140) at 2 sites for a couple of years. The sites were linked via dark fibre. The orchestrator sync link was enabled locally through a Check Point SR transceiver (port 47) connected to a Ciena multiplexor at each site. Due to having to vacate the second site, the orchestrator here was relocated to a new facility. The 2 sites are now connected directly over a 10G optical circuit. I have swapped the SR transceivers for the single-mode LR variety. However, the transceivers are 3rd party. The sync link is not coming up. I've been running the lldpctl command in expert mode on each orchestrator to confirm the remote orchestrator can be seen and nothing is coming up for port47.  However, if I unplug the cable from orchestrator port 47 at site 2 and plug directly in to a Cisco switch, lldpctl at site 1 can see the device from port 47. I'm thinking the orchestrator is not willing to publish its identity out of an unsupported transceiver.  Has anyone had a similar issue and how did you resolve?

I am happy to buy the official Check Point transceivers but would not want to buy and find the sync link is still not activated.

Thanks.

[Chris_Atkinson]

3rd party transceivers are not supported per sk92755.

What does "show maestro port x/x/x optic-info" report?

[T_Letts]

Thanks for replying. The show maestro command shows this

CH-CP-MHO140> show maestro port 1/47/1 optic-info
Physical Port: 1/47/1
Vendor Name: OEM
Serial Number: ATCR2509230001
Part Number: CPAC-TR-10LR-C
Check Point Part Number:NA
Enforcement: Not supported
CH-CP-MHO140>

Other commands I have been using are in expert mode

[Expert@CH-CP-MHO140:0]# hcp -r 115
Test name Status
============================================================
Transceivers Support..............................[ERROR]

To view full report on this machine, run "hcp --show-last"

Test name Status Runtime (sec)
==========================================================================
Transceivers Support..............................[ERROR] 2.99249

+------------------------------------------------------------------------------------------------------------------------------------+
| Results |
+====================================================================================================================================+
| System/Hardware/Transceivers Support |
+------------------------------------------------------------------------------------------------------------------------------------+
| Result: ERROR |
| |
| Description: This test checks that all installed transceivers are supported |
| |
| Summary: |
| +-------------------------------------------------------------------------------------------------+ |
| | Interfaces Transceivers | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | Interface | Transceiver Vendor | Transceiver SN | Transceiver PN | Check Point PN | Enforcement | |
| +===========+====================+================+================+================+=============+ |
| | 5 | prolabs | cpt0c8271497 | sfp110gbsrcp | niy4444 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 6 | prolabs | cpt0c8271498 | sfp110gbsrcp | niy4444 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 7 | prolabs | cpt0c8271500 | sfp110gbsrcp | niy4444 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 8 | prolabs | cpt0c8271461 | sfp110gbsrcp | niy4444 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 9 | prolabs | cpt0d7661069 | sfp1gbtcp | niy4439 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 27 | mellanox | mt2134vs05947 | mc3309130001cp | niy4471 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 28 | mellanox | mt2135vs01099 | mc3309130001cp | niy4471 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 29 | mellanox | mt2135vs01058 | mc3309130001cp | niy4471 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 30 | mellanox | mt2135vs01037 | mc3309130001cp | niy4471 | Passed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 45 | fs | f2440439170 | | na | Failed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| | 47 | oem | atcr2509230001 | cpactr10lrc | na | Failed | |
| +-----------+--------------------+----------------+----------------+----------------+-------------+ |
| |
| |
| Transceivers in port[s] 45,47 are not approved by Check Point |
| |
| Finding: |
| Some of transceivers are not approved and can cause traffic issues |
| |
| Suggested solutions: |
| - Please follow SK: |
| https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... |
| |
+------------------------------------------------------------------------------------------------------------------------------------+

[Expert@CH-CP-MHO140:0]# mlxlink -d /dev/mst/mt52100_pci_cr0 -p 47 -m

Operational Info
----------------
State : Polling
Physical state : ETH_AN_FSM_ENABLE
Speed : N/A
Width : N/A
FEC : N/A
Loopback Mode : No Loopback
Auto Negotiation : FORCE - 10G

Supported Info
--------------
Enabled Link Speed : 0x00007010 (10G)
Supported Cable Speed : 0x3c007011 (25G,10G,1G)

Troubleshooting Info
--------------------
Status Opcode : 0
Group Opcode : N/A
Recommendation :

Module Info
-----------
Identifier : SFP28/SFP+
Compliance : 10G Base-LR
Cable Technology : N/A
Cable Type : Optical Module (separated)
OUI : Other
Vendor Name : OEM
Vendor Part Number : CPAC-TR-10LR-C
Vendor Serial Number : ATCR2509230001
Rev : 0000
Attenuation (5g,7g,12g) [dB] : Reserved for SFP
FW Version : N/A
Wavelength [nm] : 1310
Transfer Distance [m] : 0
Digital Diagnostic Monitoring : Yes
Power Class : 1.0 W max
CDR RX : N/A
CDR TX : N/A
LOS Alarm : N/A
Temperature [C] : 25 [-5..75]
Voltage [mV] : 3340.9 [3000..3700]
Bias Current [mA] : 29.294 [15..85]
Rx Power Current [dBm] : -40 [-18..2]
Tx Power Current [dBm] : -2 [-8..0]

[Wolfgang]

@T_Letts  you have to use official supported transceivers to get support. Sometimes third party transceivers can work …

How about your optical link between the two sites and how about the requirement of the connection from MHO to your „link-device“ ?

We are using devices from ADVA to get two datacenters connected. The line between the sites is single mode but the connections to the network devices at the local site are using 10G Ethernet multimode. From the transceivers description I can see you are using LR. Are you sure you are using the right transceivers?

[T_Letts]

Hi @Wolfgang. Many thanks for the reply and apologies for my delay in responding. Interesting that you are using the 10G multimode locally. To be honest, we've not tried these. The original ones we were using before moving datacentres were Check Point branded so definitely worth giving it a try with those.  

[JaAnd]

Hi,

am I wrong, or you are using a transceiver with payload from original Check Point one - vendor part number: CPAC-TR-10LR-C?

R81.20's HCP version shows newer transceivers releases as not supoorted, there is a specific SK about this. Of course this has been solved in R82.

In my experience with Mellonox switches, they seems to be quite sensitive about the state of physical connections and optical fibre health, and also FEC settings if used. Also it may be worth trying with a little bit tweak by tor_util command.

For some time I have used third party programmable QSFP with no issues, even payload didn't matter - Dell or Mellanox, I can share their name, but I think that they are mostly available in Poland, as they are developed by Polish firm - GBC Photonics.