I have a DEC3860 that I recently purchased as a test box for a greater project. What I am trying to accomplish should be fairly straightforward. The 2 10G SFP+ Interfaces (ax0 and ax1) bonded using LACP. These interfaces run back to a Cisco 3560D-12E 10G Switch. Switch configuration is as follows:
int te0/10-11
switchport trunk
switchport trunk encap dot1q
switchport trunk native vlan 1
switchport trunk allowed vlan 4-4094
switchport mode trunk
channel-group 11 mode active
int po11
***same as ports above***
The firewall has AX0 and AX1 bonded using LACP. I'm trying to use LACP and tagged VLAN's off of the lagg0 interface. I can configure the individual ports AX0 and AX1 as trunks and assign vlans that way which works but in a HA Scenario this doesn't work for me. I've seen several posts on this forum about LACP not working but I havne't seen anything about LACP w/Tagged VLANS hanging off the LAGG interface. Is this even possible with this hardware?
Something worth noting here. I CAN bond two igb (Intel 1 Gig Copper) into an LACP port channel and pass traffic. Just not with the 10G links. I'm still looking for official documentation on the 10g ports from either AMD or OPNsense that details out the capabilities of these interfaces.
Have you opened a ticket with Deciso? That might be more successful than asking in a community forum where barely anyone runs these rather new and high end systems.
Yes, please contact us at support@deciso.com -- looking at your nick I see we talked on reddit about the signature fetch problem. Maybe we can have a quick look at this as well.
Cheers,
Franco
Hi,
For what it's worth, could you mention the version of OPNsense you are running? Also, does dmesg(8) or the system log report any errors?
This by the way is all information you should mention should you wish to open a ticket.
Cheers,
Stephan
The version I am running on the DEC3860 is 21.1.9_1.
I spoke with support @ deciso and they had me issue the following:
set net.link.lagg.default_use_flowid = 1 under System->Setting->Tunables
This was the setting that allowed me to bond the 2 10G interfaces into a port-channel.