I'm experiencing an issue with a setup of aggregated ethernet interfaces configured with LACP simply for redundancy connections between our HA Active/Passive firewalls and Cisco ISR 4451 routers.
I'm wondering what steps to take as regards packet captures on firewall interfaces to figure out why negotiation will fail.
Or is this expected behaviour?
ethernet1/1 and ethernet1/2 = AE1
Virtual IP (public/ default gateway) presented to firewalls from CPE Cisco routers.
So far we have tried all modes of LACP and transmission rates w/ active, passive, fast, slow but there has been still no change as regards ethernet1/2 and lacp negotiation failure with the router interface of GE0/0/2
I have reviewed >less mp-log l2ctrld.log but no indicators there either.
As far as I'm aware, physical layer 1 hasn't been checked.
Interface and AE/LACP settings
>show lacp aggregate-ethernet ae1
I would recommend you to verify configuration on switch side first. Also verify the transmission rate and the mode that you're using. You can also try to configure AE group to SLOW MODE.
You can even check more related logs in the file l2ctrld.log under mp-log.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!