文档建议反馈控制台
首页
学习
活动
专区
圈层
工具
MCP广场
文章/答案/技术大牛
发布
社区首页 >问答首页 >DHCP不处理连接到Nexus 3048的客户端，而在SVI上工作。

问DHCP不处理连接到Nexus 3048的客户端，而在SVI上工作。
EN

Network Engineering用户
提问于 2017-06-03 23:58:10
回答 1查看 3.8K关注 0票数 2

在vPC配置中，一对Nexus3048交换机有一个奇怪的问题。

由于核心仍在实现中，我们遇到了一个奇怪的问题:客户端不能从DHCP服务器获取IP地址，但是SVI可以从DHCP服务器获得一个地址。

DHCP服务器被插入到另一个交换机上，但是连接是在第一个Nexus上的一个接口上进行的，并且接口具有以下配置：

代码语言：javascript
复制
interface Ethernet1/23
  description "Untag 37 directly from 3COM 4200G"
  switchport access vlan 37
  spanning-tree port type edge
  spanning-tree bpdufilter enable
  no shutdown

Nexus内部没有第三层路由发生。这是简单的第二层网络，应该可以在没有任何麻烦的情况下工作。

奇怪的是，SVI可以从DHCP服务器获取IP地址。第二个Nexus上相同的SVI也不能得到地址。

我做了以下测试来调试这个问题：

  • 使用两个交换机创建了一个vPC，并在启用端口通道的主机上试用了DHCP。
  • 首先在第一个Nexus上将主机插入孤立端口，然后在第二个Nexus上插入主机。
  • 将端口从主干更改为access，类似于上面的配置。
  • 在端口上使用不同的DHCP服务器。

在所有情况下，DHCP仍然不起作用。但也有连接性，因为我可以在任何情况下设置手动IP地址，而且一切都按其应有的方式工作。孤立端口、集群端口、端口通道等。

所以这绝对是开关上掉DHCP数据包的东西。Nexus上没有启用DHCP功能，só不可能有任何安全问题：

代码语言：javascript
复制
core1# sh feature | grep -i dhcp 
dhcp                   1         disabled

我甚至在客户端机器上使用了尝试过的tcpdump来查看DHCP包是否被发送，并且我可以确认它们是被发送的。在交换机上，我尝试用ethanalyzer进行一些调试，我看到的是大量的"DHCP发现“请求，没有任何答复。似乎只有第一个开关的SVI DHCP请求正常工作。下面是一个片段：

代码语言：javascript
复制
2017-06-03 23:38:49.617523      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x9697d613
2017-06-03 23:39:05.254997      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x9697d613
2017-06-03 23:39:17.119522      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x9697d613
2017-06-03 23:39:24.317940      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x9697d613
2017-06-03 23:39:35.687699      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x9697d613
2017-06-03 23:40:02.900892      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0xd7c4ba70
2017-06-03 23:40:10.946648      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0xd7c4ba70
2017-06-03 23:40:21.071947      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0xd7c4ba70
2017-06-03 23:40:35.114446      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0xd7c4ba70
2017-06-03 23:40:49.380103      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0xd7c4ba70
2017-06-03 23:44:05.282352 146.164.37.11 -> 146.164.36.50 DHCP DHCP Request  - Transaction ID 0x592f3e7a
2017-06-03 23:44:05.283041 146.164.36.50 -> 146.164.37.11 DHCP DHCP ACK      - Transaction ID 0x592f3e7a
2017-06-03 23:46:03.509158      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x75bda403
2017-06-03 23:46:11.942522      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x75bda403
2017-06-03 23:46:26.965735      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x75bda403
2017-06-03 23:46:38.008869      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x75bda403
2017-06-03 23:46:45.221171      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x75bda403
2017-06-03 23:46:57.352744      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x75bda403
2017-06-03 23:47:09.395484      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x13487f09
2017-06-03 23:47:16.159521      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x13487f09
2017-06-03 23:47:32.450281      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x13487f09
2017-06-03 23:47:40.803963      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x13487f09
2017-06-03 23:48:00.665313      0.0.0.0 -> 255.255.255.255 DHCP DHCP Discover - Transaction ID 0x13487f09

该报告由以下命令生成：

代码语言：javascript
复制
ethanalyzer local interface inband capture-filter "port 67 or port 68" limit-captured-frames 0

这真的是令人沮丧的，因为DHCP非常简单，而且它应该在没有任何麻烦的情况下工作。所讨论的DHCP服务器是在Debian 7 Wheezy上运行的isc-dhcpd-服务器，它正在生产中，服务于许多不同的子网，因此它可以正常工作。

我错过了什么？有什么东西应该在Nexus上启用吗？也许是某种默认的ACL阻塞了DHCP流量？

更准确地说，下面是拓扑图：

代码语言：javascript
复制
+-------------+      +-------------+      +-----------+
| DHCP Server | ---> | 3COM Switch | ---> | Nexus #01 | <--- Random Host
+-------------+      +-------------+      +-----------+
                                               || 
                                          +-----------+
                                          | Nexus #02 | <--- Random Host
                                          +-----------+

DHCP服务器具有以下网络配置：

代码语言：javascript
复制
IP: 146.164.36.50/24
GW: 146.164.36.36

在3 3COM交换机上，有来自不同子网的DHCP中继规则，配置方式如下：

代码语言：javascript
复制
#
 dhcp-server 1 ip  146.164.36.50  
 dhcp-server detect

vlan 1
 description Management
 igmp-snooping enable
#
vlan 10
 description Servers
#
vlan 37
#
vlan 100
 description Acesso
#
interface Vlan-interface1
 ip address 10.3.12.1 255.255.255.0 
 dhcp-server 1
#
interface Vlan-interface10
 ip address 146.164.36.36 255.255.255.0  
#
interface Vlan-interface37
 ip address 146.164.37.1 255.255.255.0 
 dhcp-server 1

所有东西都是在DHCP中继端工作的，因为连接到Vlan接口37的任何东西都可以正常工作，如果它是一个随机的交换机主机和其他主机连接的话，这并不重要。

最后，这里是完整的Nexus #01配置。第二个具有类似的配置。

代码语言：javascript
复制
core1# sh run

!Command: show running-config
!Time: Sun Jun  4 00:05:49 2017

version 7.0(3)I2(2d)
hostname core1
vdc core1 id 1
  limit-resource vlan minimum 16 maximum 4094
  limit-resource vrf minimum 2 maximum 4096
  limit-resource port-channel minimum 0 maximum 104
  limit-resource u4route-mem minimum 128 maximum 128
  limit-resource u6route-mem minimum 96 maximum 96
  limit-resource m4route-mem minimum 58 maximum 58
  limit-resource m6route-mem minimum 8 maximum 8

cfs eth distribute
feature interface-vlan
feature lacp
feature vpc
feature lldp
feature vtp

username admin password 5 !  role network-admin
username ferrao password 5 !  role network-admin
username ferrao sshkey ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDM+cCPmszkpw0DMeOYLSWoGAHd4POhfQJ5llIu6uJ2CX0VNSzRDGIr01fMQKvjTcsqX2EoF2xpO8nj8XZoSNUetwC+G
J3dBWKxFnZ+AFCzT4pTOWDmGKr0k75r7sU2yqlkgAuVryWB/Y5e8QIyVcaVyrbUGqDQBIA6f9lqF3pYivzTU1XLiz5sQNv/7DSvHVBA9MiFycs4PMhqh89YzW+QU2H4v3zWVTXd/FyXr3Pp3wvkWu1NY
GviIx3LMg9S3mydk2i5MUddoOPPfHQKtrOiBpXApZwegRGOHVqvkEfn6GLNkCXBT151vRRVKGeUbiZyg0RLUnuE61UbpCUvEXtWxH2EHUiYDWzFhZVPvE451meyYdr0mFEGFaW97mnjGNmYle9sx5UmW
5r3f/KJHdOzDgAGWwPN9H9AdbXSLtycovJGhglJ8nLouTz3CZPFnsAvOrHx/svJnLTJU1LJDJanFVqMgTpnXDcjW/8fCyVgyZcPHjQnY+VyUM/4zYPceEA+ghKgBJMyBQ0RC+SxdiC9wrYK/urw/GxNj
VY6upfpmzsfetIK07OTuucaohHTg5Oo3gIJhQ8Vgi4souxs0+rrskhW4ztxw1VI3UXiUGotmAh6VWFyoIuG4a+Z8fPi3PZ3NyC90Byalmz5lp1SXBjcTeYwUvpCQGKxdkhISl+Bjw==
username heliocm password 5 !  role network-admin
username heliocm sshkey rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTtokq0PacXStKYhfZy8KMIkCugdzCAkc7fDtK+PCjscrqL41otfV/WjOXg3qftJUswx1Ggt5qvbSGx452fLwAxGoXWsJn
ohwbPwwkqRG1kpVyxYt3xIgw2EkJsbrm8T4PuajfqPBJFgZU3opMH1msRmQN+WrRyZhvZPf6wE4Ahx4nrzxo6Tmgzf6v9xUZQ1RlAMODzUfaM054nKh/fJz+A9L281Ra6vHmYuLoDNzR4MQxCVPiZfUA
gwIWLcVStdWhQ3a5i/bzbNyp3+5MgtO0BC0Q5kSZD3SGkuM8vsQTn+l6Zqi2nqOX7bfdrrqIQa8XAidyoQOsthKTI21SQGO6XUI8sSPCwuNKGrbHDLqX0+0xVdUsDupZ9lPX9T737YIvefksFHVX9lgZ
YcfxG3LRyDV6vqaDRZRq8bOmFO/nMConXxUbIJ/lJqKiR/x9yS7wV3Ja+l6v5ObOV9g9/vKP1tde1uyoJ8Wd08HtENAibEAExPhJhc12O0fpi7ZbrjEoJj6n7kHdRHcGvtpXysN3n7MkVR+xSxxZFAYX
AHyp/yfR6y5QSVJvH4efnSLRRtZN3X2R0mJhT2icQpmueVaxCHi4gCSGnCZIP8IrLdy0JxR9UFMt0B92n3aVjTJ1he2nKOmXPbUntFMT1kkunWTFPK85hPLDp5G+4IZaIv5bww==
ssh login-attempts 5

ssh key rsa 2048 
no ip domain-lookup
ip domain-name cc.if.ufrj.br
ip name-server 146.164.36.15
spanning-tree mode mst
system default switchport shutdown
no service unsupported-transceiver
ip access-list copp-system-acl-eigrp
  10 permit eigrp any 224.0.0.10/32 
ipv6 access-list copp-system-acl-eigrp6
  10 permit eigrp any ff02::a/128 
ip access-list copp-system-acl-icmp
  10 permit icmp any any 
ip access-list copp-system-acl-igmp
  10 permit igmp any any 
ip access-list copp-system-acl-ntp
  10 permit udp any any eq ntp 
  20 permit udp any eq ntp any 
ip access-list copp-system-acl-pimreg
  10 permit pim any any 
ip access-list copp-system-acl-ping
  10 permit icmp any any echo 
  20 permit icmp any any echo-reply 
ip access-list copp-system-acl-routingproto1
  10 permit tcp any gt 1024 any eq bgp 
  20 permit tcp any eq bgp any gt 1024 
  30 permit udp any 224.0.0.0/24 eq rip 
  40 permit tcp any gt 1024 any eq 639 
  50 permit tcp any eq 639 any gt 1024 
  70 permit ospf any any 
  80 permit ospf any 224.0.0.5/32 
  90 permit ospf any 224.0.0.6/32 
ip access-list copp-system-acl-routingproto2
  10 permit udp any 224.0.0.0/24 eq 1985 
  20 permit 112 any 224.0.0.0/24 
ip access-list copp-system-acl-snmp
  10 permit udp any any eq snmp 
  20 permit udp any any eq snmptrap 
ip access-list copp-system-acl-ssh
  10 permit tcp any any eq 22 
  20 permit tcp any eq 22 any 
ip access-list copp-system-acl-stftp
  10 permit udp any any eq tftp 
  20 permit udp any any eq 1758 
  30 permit udp any eq tftp any 
  40 permit udp any eq 1758 any 
  50 permit tcp any any eq 115 
  60 permit tcp any eq 115 any 
ip access-list copp-system-acl-tacacsradius
  10 permit tcp any any eq tacacs 
  20 permit tcp any eq tacacs any 
  30 permit udp any any eq 1812 
  40 permit udp any any eq 1813 
  50 permit udp any any eq 1645 
  60 permit udp any any eq 1646 
  70 permit udp any eq 1812 any 
  80 permit udp any eq 1813 any 
  90 permit udp any eq 1645 any 
  100 permit udp any eq 1646 any 
ip access-list copp-system-acl-telnet
  10 permit tcp any any eq telnet 
  20 permit tcp any any eq 107 
  30 permit tcp any eq telnet any 
  40 permit tcp any eq 107 any 
ipv6 access-list copp-system-acl-v6routingProto2
  10 permit udp any ff02::66/128 eq 2029 
  20 permit udp any ff02::fb/128 eq 5353 
  30 permit 112 any ff02::12/128 
ipv6 access-list copp-system-acl-v6routingproto1
  10 permit 89 any ff02::5/128 
  20 permit 89 any ff02::6/128 
  30 permit udp any ff02::9/128 eq 521 
ip access-list copp-system-dhcp-relay
  10 permit udp any eq bootps any eq bootps 
class-map type qos match-all iscsi
  match cos 4
policy-map type qos iscsi
  class iscsi
    set qos-group 4
  class class-default
class-map type network-qos iscsi
  match qos-group 4
policy-map type network-qos iscsi
  class type network-qos iscsi
    mtu 1500
    pause no-drop
  class type network-qos class-default
    mtu 1500
policy-map type network-qos jumbo
  class type network-qos class-default
    mtu 9216
system qos
  service-policy type network-qos iscsi
class-map type control-plane match-any copp-icmp
  match access-group name copp-system-acl-icmp
class-map type control-plane match-any copp-ntp
  match access-group name copp-system-acl-ntp
class-map type control-plane match-any copp-s-arp
class-map type control-plane match-any copp-s-bfd
class-map type control-plane match-any copp-s-bpdu
class-map type control-plane match-any copp-s-dai
class-map type control-plane match-any copp-s-default
class-map type control-plane match-any copp-s-dhcpreq
class-map type control-plane match-any copp-s-dhcpresp
  match access-group name copp-system-dhcp-relay
class-map type control-plane match-any copp-s-dpss
class-map type control-plane match-any copp-s-eigrp
  match access-group name copp-system-acl-eigrp
  match access-group name copp-system-acl-eigrp6
class-map type control-plane match-any copp-s-glean
class-map type control-plane match-any copp-s-igmp
  match access-group name copp-system-acl-igmp
class-map type control-plane match-any copp-s-ipmcmiss
class-map type control-plane match-any copp-s-l2switched
class-map type control-plane match-any copp-s-l3destmiss
class-map type control-plane match-any copp-s-l3mtufail
class-map type control-plane match-any copp-s-l3slowpath
class-map type control-plane match-any copp-s-mpls
class-map type control-plane match-any copp-s-pimautorp
class-map type control-plane match-any copp-s-pimreg
  match access-group name copp-system-acl-pimreg
class-map type control-plane match-any copp-s-ping
  match access-group name copp-system-acl-ping
class-map type control-plane match-any copp-s-ptp
class-map type control-plane match-any copp-s-routingProto1
  match access-group name copp-system-acl-routingproto1
  match access-group name copp-system-acl-v6routingproto1
class-map type control-plane match-any copp-s-routingProto2
  match access-group name copp-system-acl-routingproto2
class-map type control-plane match-any copp-s-selfIp
class-map type control-plane match-any copp-s-ttl1
class-map type control-plane match-any copp-s-v6routingProto2
  match access-group name copp-system-acl-v6routingProto2
class-map type control-plane match-any copp-s-vxlan
class-map type control-plane match-any copp-snmp
  match access-group name copp-system-acl-snmp
class-map type control-plane match-any copp-ssh
  match access-group name copp-system-acl-ssh
class-map type control-plane match-any copp-stftp
  match access-group name copp-system-acl-stftp
class-map type control-plane match-any copp-tacacsradius
  match access-group name copp-system-acl-tacacsradius
class-map type control-plane match-any copp-telnet
  match access-group name copp-system-acl-telnet
policy-map type control-plane copp-system-policy 
  class copp-s-default
    police pps 400 
  class copp-s-l2switched
    police pps 200 
  class copp-s-ping
    police pps 100 
  class copp-s-l3destmiss
    police pps 100 
  class copp-s-glean
    police pps 500 
  class copp-s-selfIp
    police pps 500 
  class copp-s-l3mtufail
    police pps 100 
  class copp-s-ttl1
    police pps 100 
  class copp-s-ipmcmiss
    police pps 400 
  class copp-s-l3slowpath
    police pps 100 
  class copp-s-dhcpreq
    police pps 300 
  class copp-s-dhcpresp
    police pps 300 
  class copp-s-dai
    police pps 300 
  class copp-s-igmp
    police pps 400 
  class copp-s-eigrp
    police pps 200 
  class copp-s-pimreg
    police pps 200 
  class copp-s-pimautorp
    police pps 200 
  class copp-s-routingProto2
    police pps 1300 
  class copp-s-v6routingProto2
    police pps 1300 
  class copp-s-routingProto1
    police pps 1000 
  class copp-s-arp
    police pps 200 
  class copp-s-ptp
    police pps 1000 
  class copp-s-vxlan
    police pps 1000 
  class copp-s-bfd
    police pps 350 
  class copp-s-bpdu
    police pps 12000 
  class copp-s-dpss
    police pps 1000 
  class copp-s-mpls
    police pps 100 
  class copp-icmp
    police pps 200 
  class copp-telnet
    police pps 500 
  class copp-ssh
    police pps 500 
  class copp-snmp
    police pps 500 
  class copp-ntp
    police pps 100 
  class copp-tacacsradius
    police pps 400 
  class copp-stftp
    police pps 400 
control-plane
  service-policy input copp-system-policy 
vtp domain cc.if.ufrj.br
snmp-server contact "Vinicius Ferrao <ferrao@cc.if.ufrj.br>"
snmp-server location "Computacao Central IF/UFRJ - CT/A-312"
snmp-server user admin network-admin auth md5 0x4f0d470b1ab6ab111b4b82962ec368f0 priv 0x4f0d470b1ab6ab111b4b82962ec368f0 localizedkey
snmp-server user ferrao network-admin auth md5 0xeab88c5301991d27d34983cf480d49ef priv 0xeab88c5301991d27d34983cf480d49ef localizedkey
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO
ntp server 146.164.48.5 use-vrf management

vlan 1
vlan 7
  name MGMT-IQ
vlan 11
  name iSCSI-MPIO1
vlan 12
  name iSCSI-MPIO2
vlan 29
  name SRV-IQ
vlan 30
  name Labs-IQ
vlan 36
  name SRV-IF
vlan 37
  name Unused37
vlan 40
  name Unused40
vlan 136
  name Access-IF
vlan 146
  name SRV-CC
vlan 172
  name Access-IQ
vlan 312
  name MGMT-IF
vlan 666
  name LIG
spanning-tree port type edge bpduguard default
spanning-tree mst 0-1 priority 24576
spanning-tree mst configuration
  name cc
  revision 1
  instance 1 vlan 2-4094
vrf context management
  ip route 0.0.0.0/0 146.164.36.1
vrf context vpc-peer-keepalive
no system urpf disable
no port-channel load-balance resilient

vpc domain 1
  peer-switch
  role priority 1
  system-priority 1000
  peer-keepalive destination 172.31.2.2 source 172.31.2.1 vrf vpc-peer-keepalive
  auto-recovery
  ipv6 nd synchronize
  ip arp synchronize


interface Vlan1

interface Vlan37
  no shutdown
  ip address dhcp

interface Vlan136

interface port-channel25
  description XenServer #1
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  spanning-tree port type edge trunk
  vpc 25

interface port-channel27
  description XenServer #2
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  spanning-tree port type edge trunk
  vpc 27

interface port-channel29
  description XenServer #3
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  spanning-tree port type edge trunk
  vpc 29

interface port-channel31
  description XenServer #4
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  spanning-tree port type edge trunk
  vpc 31

interface port-channel33
  description XenServer #5
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  spanning-tree port type edge trunk
  vpc 33

interface port-channel47
  description vPC Peer-link Keepalive
  no switchport
  vrf member vpc-peer-keepalive
  ip address 172.31.2.1/30

interface port-channel51
  description vPC Peer-link
  switchport mode trunk
  spanning-tree port type network
  speed 10000
  vpc peer-link

interface Ethernet1/1

interface Ethernet1/2

interface Ethernet1/3

interface Ethernet1/4

interface Ethernet1/5

interface Ethernet1/6

interface Ethernet1/7

interface Ethernet1/8

interface Ethernet1/9

interface Ethernet1/10

interface Ethernet1/11

interface Ethernet1/12

interface Ethernet1/13

interface Ethernet1/14

interface Ethernet1/15

interface Ethernet1/16

interface Ethernet1/17

interface Ethernet1/18

interface Ethernet1/19

interface Ethernet1/20

interface Ethernet1/21

interface Ethernet1/22
  description "Teste DHCP"
  switchport access vlan 37
  spanning-tree port type edge
  no shutdown

interface Ethernet1/23
  description "Untag 37 direto 3COM"
  switchport access vlan 37
  spanning-tree port type edge
  spanning-tree bpdufilter enable
  no shutdown

interface Ethernet1/24
  description Uplink Temporario IF
  switchport mode trunk
  switchport trunk allowed vlan 36,136,312
  spanning-tree port type edge trunk
  spanning-tree bpdufilter enable

interface Ethernet1/25
  description XenServer #1 Interface #1
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  channel-group 25 mode active
  no shutdown

interface Ethernet1/26
  description XenServer iSCSI #1 Interface #1
  switchport access vlan 11
  spanning-tree port type edge
  service-policy type qos input iscsi
  no shutdown

interface Ethernet1/27
  description XenServer #2 Interface #1
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  channel-group 27 mode active
  no shutdown

interface Ethernet1/28
  description XenServer iSCSI #2 Interface #1
  switchport access vlan 11
  spanning-tree port type edge
  service-policy type qos input iscsi
  no shutdown

interface Ethernet1/29
  description XenServer #3 Interface #1
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  channel-group 29 mode active
  no shutdown

interface Ethernet1/30
  description XenServer iSCSI #3 Interface #1
  switchport access vlan 11
  spanning-tree port type edge
  service-policy type qos input iscsi
  no shutdown

interface Ethernet1/31
  description XenServer #4 Interface #1
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  channel-group 31 mode active
  no shutdown

interface Ethernet1/32
  description XenServer iSCSI #4 Interface #1
  switchport access vlan 11
  spanning-tree port type edge
  service-policy type qos input iscsi
  no shutdown

interface Ethernet1/33
  description XenServer #5 Interface #1
  switchport mode trunk
  switchport trunk native vlan 37
  switchport trunk allowed vlan 29,36-37,40,136,146,312
  channel-group 33 mode active
  no shutdown

interface Ethernet1/34
  description XenServer iSCSI #5 Interface #1
  switchport access vlan 11
  spanning-tree port type edge
  service-policy type qos input iscsi
  no shutdown

interface Ethernet1/35

interface Ethernet1/36

interface Ethernet1/37

interface Ethernet1/38

interface Ethernet1/39

interface Ethernet1/40

interface Ethernet1/41

interface Ethernet1/42

interface Ethernet1/43

interface Ethernet1/44

interface Ethernet1/45

interface Ethernet1/46

interface Ethernet1/47
  description vPC Peer-link Keepalive Interface #1
  no switchport
  channel-group 47

interface Ethernet1/48
  description vPC Peer-link Keepalive Interface #2
  no switchport
  channel-group 47

interface Ethernet1/49

interface Ethernet1/50
  description Storage iSCSI Interface #1
  switchport access vlan 11
  spanning-tree port type edge
  service-policy type qos input iscsi

interface Ethernet1/51
  description vPC Peer-link Interface #1
  switchport mode trunk
  channel-group 51 mode active
  no shutdown

interface Ethernet1/52
  description vPC Peer-link Interface #2
  switchport mode trunk
  channel-group 51 mode active
  no shutdown

interface mgmt0
  vrf member management
  ip address 146.164.36.89/24
line console
line vty
boot nxos bootflash:/nxos.7.0.3.I2.2d.bin 
ip route 0.0.0.0/0 146.164.37.1
vlan
dhcp
cisco-nexus
nx-os
EN

回答 1

Network Engineering用户

回答已采纳

发布于 2017-06-04 04:04:27

我已经搞清楚了。在浪费了四个工作日之后，这是NX固件7.0(3)I2(2d)上的一个bug。

升级到最新的推荐版本7.0(3)I4(6)后，DHCP数据包开始正常流动。

以下是思科网站的链接：http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3000/sw/release/70346/n3k_70346_nxos_rn.html

票数 3
EN
页面原文内容由Network Engineering提供。腾讯云小微IT领域专用引擎提供翻译支持
原文链接：

https://networkengineering.stackexchange.com/questions/41660

复制
相关文章

相似问题

领券

腾讯云开发者

扫码关注腾讯云开发者

扫码关注腾讯云开发者

领取腾讯云代金券

热门产品

热门推荐

更多推荐

Copyright © 2013 - 2026 Tencent Cloud. All Rights Reserved. 腾讯云 版权所有 

深圳市腾讯计算机系统有限公司 ICP备案/许可证号：粤B2-20090059 粤公网安备44030502008569号

腾讯云计算（北京）有限责任公司 京ICP证150476号 |  京ICP备11018762号

问题归档专栏文章快讯文章归档关键词归档开发者手册归档开发者手册 Section 归档