And here's the base64 decoded version: On 15/05/14 22:59, Gradelain Ngouni wrote: > Hey John, > > here an update of what I’m actually facing: > this the configuration of my SVI: > interesting will be the lines after this: > > ##Primary: > > interface vlan.0.22 > > ip address 10.40.22.253 255.255.255.0 primary > > vrrp create 22 v2-IPv4 > > vrrp address 22 10.40.22.254 > > vrrp priority 22 200 > > vrrp advertise-interval 22 seconds 5 > > vrrp accept-mode 22 > > vrrp fabric-route-mode 22 > > vrrp enable 22 > > ip helper-address 10.10.20.21 > > ip helper-address 10.10.20.30 > > ip helper-address 10.40.20.99 > > ip helper-address 10.40.20.100 > > no ip proxy-arp > > no ip redirects > > ipv6 forwarding > > no shutdown > > > > ##secondary: > > interface vlan.0.22 > > ip address 10.40.22.252 255.255.255.0 primary > > vrrp create 22 v2-IPv4 > > vrrp address 22 10.40.22.254 > > vrrp priority 22 150 > > vrrp advertise-interval 22 seconds 5 > > vrrp accept-mode 22 > > vrrp fabric-route-mode 22 > > vrrp enable 22 > > ip helper-address 10.10.20.21 > > ip helper-address 10.10.20.30 > > ip helper-address 10.40.20.99 > > ip helper-address 10.40.20.100 > > no ip proxy-arp > > no ip redirects > > ipv6 forwarding > > no shutdown > > exit > > > On the S3 Interface vlan.0.22, I ONCE AGAIN apply “shut” and “no shut” > With this commands set, the client were able to reach their Gateway and > beyond. > > Her’s were it gets once again complicated: > > Client_1 with IP 10.40.22.10 is connected on port ge.1.25 on the S3. NAC > only apply the policy to the user and the VLAN 22 is manually configured on > the user switch port. > Client 2 with IP 10.40.22.11 is connected on port ge.1.11 on the C5G. NAC > Apply the Policy and Dynamically the vlan to the user switch port. > > > 1) Shutdown the port of Client_1 and enable it again ==> the client is > once again reachable > > 2) Shutdown the port of Client_1 and enable it again ==> client no more > reachable! > > a. Shot down the interface vlan.0.22 and enable it again, then clients > once again reachable. > > I’m reporting to GTAC…. > The behavior is a wee bit strange. > > Cheers > > Gradelain
-- James Andrewartha Network & Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
