Community discussions

MikroTik App
 
LunaticRv
newbie
Topic Author
Posts: 40
Joined: Mon Dec 31, 2018 8:50 am

LACP Bonding + VLAN (2 x 10G SFP+) Problem

Wed Nov 06, 2019 11:38 am

Hello,

Recently my traffic on Mikrotik CCR1072-1G-8S+ is passing 10G and I want to increase my total bandwidth to 13 Gbps.

To do that, my ISP gave me 2 links that are bound to sfpplus1 and sfpplus2 and told me to bond these ports. Their side is Cisco and they made the necessary configuration. I have also done necessary config on my side (Mikrotik) but I have a problem accessing to gateway when using VLAN.

I told my ISP to temporarily disable VLAN to see if the LACP is working as intended and yes, it was working flawlessly. But when they add VLAN (dot1q encapsulation) the gateway becomes unreachable.

Here are my settings;

95.0.XX.XXX/30 : My IP, 95.0.XX.XXX-1 My GW that is bound to this interface
> interface bonding print 
Flags: X - disabled, R - running 
 0  R name="bonding1" mtu=1500 mac-address=64:D1:54:D5:0F:B8 arp=enabled 
      arp-timeout=auto slaves=sfp-sfpplus1,sfp-sfpplus2 mode=802.3ad 
      primary=none link-monitoring=mii arp-interval=100ms arp-ip-targets="" 
      mii-interval=100ms down-delay=0ms up-delay=0ms lacp-rate=1sec 
      transmit-hash-policy=layer-2-and-3 min-links=0
      
> interface vlan print detail 
Flags: X - disabled, R - running 

 1 R name="VLAN102" mtu=1500 l2mtu=1576 mac-address=64:D1:54:D5:0F:B2 
     arp=enabled arp-timeout=auto loop-protect=default loop-protect-status=off 
     loop-protect-send-interval=5s loop-protect-disable-time=5m vlan-id=102 
     interface=sfp-sfpplus3 use-service-tag=no 

 3   name="VLAN102_BOND" mtu=1500 mac-address=64:D1:54:D5:0F:B8 arp=enabled 
     arp-timeout=auto loop-protect=default loop-protect-status=off 
     loop-protect-send-interval=5s loop-protect-disable-time=5m vlan-id=102 
     interface=bonding1 use-service-tag=no 
     
> ip address print 
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         INTERFACE                               
244 I 95.0.XX.XXX/30     95.0.XX.XXX-1     VLAN102_BOND 

>  ip route print 
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          88.XXX.XX.XXX           1
 1   S  0.0.0.0/0                          95.0.XX.XXX-1              10
   
When I change VLAN something from 102, it change its state to running. Could the reason be I am using VLAN102 on different interface aswell which is actively being used?

Thanks in advance!
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11452
Joined: Thu Mar 03, 2016 10:23 pm

Re: LACP Bonding + VLAN (2 x 10G SFP+) Problem

Wed Nov 06, 2019 1:16 pm

The routes look suspicious ... default route via bond is not active, but there's another default route using unrelated IP as gateway.
 
savage
Forum Guru
Forum Guru
Posts: 1263
Joined: Mon Oct 18, 2004 12:07 am
Location: Cape Town, South Africa
Contact:

Re: LACP Bonding + VLAN (2 x 10G SFP+) Problem

Wed Nov 06, 2019 1:27 pm

The VLAN and the Bond has the same MAC address - Cisco's doesn't like this, and MT refuses to add functionality in order to change MAC addresses for VLANs. The VLAN will always have the same MAC as the parent interface. This would be especially troublesome if the provider does some kind of MAC filtering / limiting.

Try create a bridge, add your IP addresses to the bridge (unique MAC address) - layer 3. Then add the VLAN as a port into the bridge - layer 2.

That should do the trick.
 
LunaticRv
newbie
Topic Author
Posts: 40
Joined: Mon Dec 31, 2018 8:50 am

Re: LACP Bonding + VLAN (2 x 10G SFP+) Problem

Wed Nov 06, 2019 3:29 pm

The VLAN and the Bond has the same MAC address - Cisco's doesn't like this, and MT refuses to add functionality in order to change MAC addresses for VLANs. The VLAN will always have the same MAC as the parent interface. This would be especially troublesome if the provider does some kind of MAC filtering / limiting.

Try create a bridge, add your IP addresses to the bridge (unique MAC address) - layer 3. Then add the VLAN as a port into the bridge - layer 2.

That should do the trick.
After changing VLAN to 103, it started to work with same configuration. I dont know whats going on, the mac addresses are also the same on VLAN103 but i dont know why it did the trick >.<
 
GullMuhammadKhan
just joined
Posts: 1
Joined: Fri Jun 24, 2022 1:58 pm
Location: Kabul, Afghanistan

Re: LACP Bonding + VLAN (2 x 10G SFP+) Problem

Fri Jun 24, 2022 2:05 pm

Hello Team,

is there any solve this issue. i have faced the same issue.

I have Created the Bonding on CCR1036 on SFP8 & have allowed Multiple Vlans over it from 1601 till 16020. All the Vlans works except the vlan 1603 it does not comes up. while i shift the same Vlan directly to the SFP8 which is the memeber of the bonding this 1603 comes up and services start working & also verified add more Vlans on the Bonding interface all of them work only the Vlan 1603 does not work.

Bonding interface is not member of any Bridge etc. i need assistance from someone to let me know what is causing Vlan 1603 to stop working and even it does not come up.

it would be appreciated to help me out in this issue.

looking forward for expert to help me out.

Thank You
 
User avatar
ingdaka
Trainer
Trainer
Posts: 452
Joined: Thu Aug 30, 2012 3:06 pm
Location: Albania
Contact:

Re: LACP Bonding + VLAN (2 x 10G SFP+) Problem

Fri Jun 24, 2022 11:41 pm

Please specify what type of Cisco they are using. I have faced situation where
ASR 1001-X to CCR1016 2*1Gbps Bond Works
ASR 9010 to CCR1036 2*10Gbps Bond Works
Nexus 3600 to CC1072 2*10Gbps Bond Works
Cisco C7600 to CCR1036 2*10Gbps Bond Don't Work
Cisco C7600 to CCR1036 2*1Gbps Bond Don't Work
Cisco C7609S to CCR1036 1*10Gbps Bond Don't Work

Looks like those old cisco devices are not so updated...

Who is online

Users browsing this forum: Ahrefs [Bot], MalkuS and 44 guests