Quantcast
Channel: All Ethernet Switching posts
Viewing all 10307 articles
Browse latest View live

EX4200, PoE not working on all ports

$
0
0

We have a stack of four EX4200-48PX switches, running Junos 15.1R7.9. One of these switches has 31 Ruckus R710 access points patched in, the remaining 17 ports have nothing patched in. Yesterday we had a power outage and the entire stack went down after the UPS ran out of juice. Two hours later the power came back on, stack started up and now I can only get 24 ports on this switch to deliver PoE. The PoE firmware is upgraded to the latest. Below is the output of "show poe controller", the switch in question is number 1 which is only drawing 134.20 watts.

 

Controller indexMaximum powerPower consumptionGuard bandManagementStatusLldp Priority
0740.00W69.00W0WClassAT_MODEDisable
1740.00W134.20W0WClassAT_MODEDisable
2740.00W41.20W0WClassAT_MODEDisable
3740.00W126.80W0WClassAT_MODEDisable

 

Below is the output of "show poe interface". You will notice that ports 0 through 24 are putting out PoE power and ports 25 to 31 are not. Any ideas?

 

InterfaceAdmin statusOper statusMax powerPriorityPower consumptionClass
ge-1/0/0EnabledON25.0W(L)Low5.2W4
ge-1/0/1EnabledON25.0W(L)Low5.2W4
ge-1/0/2EnabledON25.0W(L)Low5.0W4
ge-1/0/3EnabledON25.0W(L)Low5.6W4
ge-1/0/4EnabledON25.0W(L)Low5.0W4
ge-1/0/5EnabledON25.0W(L)Low4.8W4
ge-1/0/6EnabledON25.0W(L)Low5.0W4
ge-1/0/7EnabledON25.0W(L)Low4.8W4
ge-1/0/8EnabledON25.0W(L)Low4.8W4
ge-1/0/9EnabledON25.0W(L)Low4.8W4
ge-1/0/10EnabledON25.0W(L)Low4.6W4
ge-1/0/11EnabledON25.0W(L)Low4.6W4
ge-1/0/12EnabledON25.0W(L)Low4.2W4
ge-1/0/13EnabledON25.0W(L)Low4.2W4
ge-1/0/14EnabledON25.0W(L)Low5.4W4
ge-1/0/15EnabledON25.0W(L)Low4.8W4
ge-1/0/16EnabledON25.0W(L)Low5.0W4
ge-1/0/17EnabledON25.0W(L)Low5.2W4
ge-1/0/18EnabledON25.0W(L)Low4.6W4
ge-1/0/19EnabledON25.0W(L)Low4.8W4
ge-1/0/20EnabledON25.0W(L)Low5.8W4
ge-1/0/21EnabledON25.0W(L)Low4.8W4
ge-1/0/22EnabledON25.0W(L)Low9.6W4
ge-1/0/23EnabledON25.0W(L)Low4.2W4
ge-1/0/24EnabledON25.0W(L)Low5.4W4
ge-1/0/25EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/26EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/27EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/28EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/29EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/30EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/31EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/32EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/33EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/34EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/35EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/36EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/37EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/38EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/39EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/40EnabledOFF30.0WLow0.0Wnot-applicable
ge-1/0/41EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/42EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/43EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/44EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/45EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/46EnabledOFF15.4WLow0.0Wnot-applicable
ge-1/0/47EnabledOFF15.4WLow0.0Wnot-applicable

 

 


Re: EX4200, PoE not working on all ports

$
0
0

Hi HendersonD,

 

From this output, POE seems to be enabled on all the ports.  Are there any trunk ports on this switch? If yes, please turn off POE on the trunks (if any) and check.  May sometimes need to bounce the ports after the change.

 

Let me know if that worked.

 

Hope this helps.

 

Regards,
-r.

--------------------------------------------------

If this solves your problem, please mark this post as "Accepted Solution."
Kudos are always appreciated Smiley Happy.

Re: EX4200, PoE not working on all ports

$
0
0

We have fiber connections to the top and bottom switch in this stack through the EX4200 uplink ports. PoE is not enabled on them. Every port on this switch that has an access point plugged in is setup as a trunk port since we need to carry several vlans to each AP. In other words, I cannot disable PoE on this ports since the AP needs PoE and multiple vlans

Re: EX4200, PoE not working on all ports

$
0
0

I do not think your situation has anything to do with port configuration of Trunk or Access.  I did a lot of work with EX4200 and POE previously, BUT I only used 12.3 based code.

 

It looks to me like the switch/POE Controller "thinks" every port needs a reserve of 30W (class 4) despite LLDP-MED telling in 25W.  The reason I say this is 24 x 30 = 720, and POE Budget for EX4200-48PX is 740W max.  So if port 25 asks for 25 or 30W, no power would be applied.

 

Yes, this should NOT be happening -Smiley Sad

 

Now since this all worked once, potential re-boot(s) of whole VC might clear it, but I might suggest instead you try with 12.3R12-S[latest] and see if results change.  No need to worry about 12.3, as this code will be supported on legacy (non-ELS) EX switches for same amount of time as 15.1.

 

Good luck.

Re: EX4200, PoE not working on all ports

$
0
0

We have a lot of stacks of EX4200 around campus and they are all running the same code at the moment. I am a bit reluctant to run a different version of code on this one stack. Is there anything else I can do to the switch to get PoE working properly? A little history might help here. Months ago we were running a previous version of 15.1 code. We upgraded to Junos 15.1R7.9 and never had a problem until this power outage. I did reboot the entire stack this morning and that did not bring back PoE on the ports in question. Why would PoE be working fine for months, we get a power outage that downs all of my switches, and when the come back up this one stack is having problems? I had a secretary call me a few minutes back and her IP phone and computer are not working. She is hooked to the same stack, different switch in the stack. Since her phone is not getting PoE I am thinking at least one other switch in this stack is having a similar issue

Re: EX4200, PoE not working on all ports

$
0
0

One other thing that might figure into the problem. Our IP phone system we got up and running just a few weeks back. Our switch stacks have never been rebooted since the new phones went in. We do have this on every switch

poe {
interface all;
}

 

I cannot figure out any relationship between the IP phones going in, the switches being rebooted and losing PoE power on this one switch that only has wireless access point plugged into it, but I wanted to mention this

 

 

Re: EX4200, PoE not working on all ports

$
0
0

Hi HendersonD,

 

The "set poe interface all" configuration should be it.  Re-iterating myself, what I meant is if you have any of the switch ports that are not actually connecting to APs/end-hosts that are POE devices, please disable POE on those ports.  Enabling POE on any other ports that simply connect to other switches for example, creates back pressure and POE issues for sure.

 

Hope this helps.

 

Regards,
-r.

--------------------------------------------------

If this solves your problem, please mark this post as "Accepted Solution."
Kudos are always appreciated Smiley Happy.

 

Re: EX4200, PoE not working on all ports

$
0
0

Can't help you with the why, but I believe (at least internally) switch thinks 30W per port, which allows only 24 ports active.

 

As for why, you're going to have to work with TAC, but I still think trying 12.3 might get you a solution faster.

 

Up to you, . . .


Re: EX4200, PoE not working on all ports

$
0
0

We do not have PoE enabled on any ports that connect to another switch. We have single mode fiber connections between switch stacks and our Juniper core in a hub and spoke configuration. There is one caveat to this, our Mitel phones (like all IP phones) have a two port switch on them. Ethernet patch cable from wall plate to phone. A second ethernet patch cable from phone to desktop computer or printer. So we are left with only a small number of ports that have just a printer or desktop (no phone daisy chained in between) connected that we could turn off PoE power.

 

Again, our phone system is brand new, I am guessing this one switch stack has 30-40 IP phones plugged in as well. None of these IP phones are plugged into the one switch that has all the access points plugged. This stack has been rebooted many times over the years as we upgrade Junos and never had a problem. I do not think it is a coincidence that the first time the stack is restarted after our IP phones go in and PoE is having a problem.

Re: EX4200, PoE not working on all ports

$
0
0

I personally do not believe in coincedence when it comes to Networking.  Have not seen it in 40 years I've been involved!!

Re: EX4200, PoE not working on all ports

$
0
0

Facts so far:

  1. This switch stack has been in place for 6 years with multiple Junos updates requiring restarts. PoE has never been a problem
  2. We have had for several PoE security cameras and PoE wireless access points plugged into these switches for years. Again, no problem even after a stack reboot
  3. We installed a new IP phone system. The phones need PoE and have a 2 port gig switch built into the back of them
  4. Many of these phones are daisy chained with printers or desktop computers. Patch cable from wall to phone, patch cable from phone to desktop or printer. Some phones have nothing daisy chained with them
  5. We have PoE enabled on all ports on this switch stack
  6. Juniper 4200-48PX should be able to provide plenty of PoE power to the items plugged in
  7. We are running Junos 15.1R7.9 which is a JTac recommended version
  8. The first time this switch stack is booted after the phone installation, we cannot get PoE on several ports that have been working fine for years

I have been doing this type of work for 20+ years myself and the phone/PoE connection is not a coincidence. Is there some other troubleshooting I can do or should I open a ticket through our local Mitel reseller/integrator?

Re: EX4200, PoE not working on all ports

$
0
0

Hi HendersonD,

 

A couple of things to check:

 

a) Are any of these interfaces physically up?

show interfaces terse ge-1/0/25

show interfaces terse ge-1/0/26

show interfaces terse ge-1/0/27

etc.

If there are any phones (especially ones with a switch) already up with external power, please try disabling POE on them and bounce the rest of the interfaces or toggle POE on them.

 

b) Please check the status messages from logs (check older file "messages.x.gz" if this has rolled over)

show log messages | grep poe | no-more

 

Note that some of these might be expected during the interface state change at reboot time, but helpful to check if anything special for the "OFF" ports.

 

Hope this helps.

 

Regards,
-r.

--------------------------------------------------

If this solves your problem, please mark this post as "Accepted Solution."
Kudos are always appreciated Smiley Happy.

Re: EX4200, PoE not working on all ports

$
0
0

Here is the output of a few different commands

root@HS102B> show interfaces terse ge-1/0/25
Interface        Admin    Link      Proto         Local       Remote
ge-1/0/25     up           down
ge-1/0/25.0  up           down   eth-switch

 

root@HS102B> show log messages | match ge-1/0/25
May 1 22:19:35 HS102B chassisd[1332]: PoE port name ge-1/0/25 status 60
May 1 22:42:55 HS102B chassisd[1332]: PoE port name ge-1/0/25 status 60

 

The command above is interesting. This is one of the ports that is not putting out PoE. Below is the same command from a port that is putting out PoE

root@HS102B> show log messages | match ge-1/0/24
May 1 22:19:35 HS102B chassisd[1332]: PoE port name ge-1/0/24 status 1
May 1 22:42:55 HS102B chassisd[1332]: PoE port name ge-1/0/24 status 1
May 2 07:29:50 HS102B chassisd[1332]: PoE port name ge-1/0/24 status 1
May 2 07:30:04 HS102B chassisd[1332]: PoE port name ge-1/0/24 status 1

 

Not sure what status 1 (this interface is putting out PoE) versus status 60 (this interface is not putting out PoE) means

 

Re: EX4200, PoE not working on all ports

$
0
0

We are thinking that our PoE problem is a hardware failure. We are opening a case with Juniper

Re: EX4200, PoE not working on all ports

$
0
0

Hi HendersonD,

 

Status 60 tells us that ‘Calculated power > power limit’.  Can you also check these two on the switch?

show log messages | grep poe_get_psu
show configuration poe | display set

 

Hope this helps.

 

Regards,
-r.

--------------------------------------------------

If this solves your problem, please mark this post as "Accepted Solution."
Kudos are always appreciated Smiley Happy.

 

 


Re: EX4200, PoE not working on all ports

$
0
0

@HendersonD, I know you don't really want to listen, but I think I hit the hammer on the head when I said the issue was calculated power.  I very much doubt this is a hardware issue, but something screwed up in software.  Now could be HW issue with POE Controller, but looks much more like software to me.

 

TAC needs to work this, but once again (and I know it might be painful) I suggest you load this VC with 12.3R12-S[latest] and see what you get for results.  I would think log file messages for any/all interfaces not providing power show "status 60", yes?

 

The above may be something TAC recommends, at minimum for troubleshooting data point, to start with.

Re: Object Groups for ACLs like cisco

$
0
0

Hi, 

 

Thanks for the reply, It is a real deal breaker, so I need to go for Cisco switches. I am trying to achieve as mention in the example as we need to mention the range of ports.

Example Creating a Service Object Group

The following example shows how to create a service object group named my_service_object_group, which contains several ICMP, TCP, UDP, and TCP-UDP protocols and an existing object group (child) named sjc_eng_svcs as objects:

Router> enable
Router# configure terminal
Router(config)# object-group service my_service_object_group
Router(config-service-group)# icmp echo
Router(config-service-group)# tcp smtp
Router(config-service-group)# tcp telnet
Router(config-service-group)# tcp source range 1 65535 telnet
Router(config-service-group)# udp domain
Router(config-service-group)# tcp-udp range 2000 2005
Router(config-service-group)# group-object sjc_eng_svcs

Example Creating an Object Group-Based ACL

The following example shows how to create an object group-based ACL that permits packets from the users in my_network_object_group if the protocol ports match the ports specified in my_service_object_group:

Router> enable
Router# configure terminal
Router(config)# ip access-list extended my_ogacl_policy
Router(config-ext-nacl)# permit object-group my_service_object_group object-group my_network_object_group any
Router(config-ext-nacl)# deny tcp any any
Router(config-ext-nacl)# exit
Router(config)# exit

Example Applying an Object Group-Based ACL to an Interface

The following example shows how to apply an object group-based ACL to an interface. In this example, an object group-based ACL named my_ogacl_policy is applied to VLAN interface 100:

Router> enable
Router# configure terminal
Router(config)# interface vlan 100
Router(config-if)# ip access-group my_ogacl_policy in
Router(config-if)# end

 

Re: Object Groups for ACLs like cisco

$
0
0

Just a comment, I think you need to validate if this is actually possible on Cisco switches as well. What you are looking for is more a router/firewall feature than a switch feature.

 

The documentation you are refering to, is for Ciscos router platforms (ISR and similar) where this post mention that it isn't supported on some of the older Catalyst switches: https://community.cisco.com/t5/switching/acl-object-groups-on-catalyst-switches/td-p/3082302

 

At least you need to validate your specific Cisco switch with the Cisco Feature Navigator:

https://cfn.cloudapps.cisco.com/ITDIT/CFN/jsp/by-feature-technology.jsp

 

When I briefly searches for support on Object groups for ACLs only Catalyst 4500, 6500, ASR, ISR and CSR routers images shows up. Suggested software for an Catalyst 9300 is currently IOS XE 16.6.5... Object groups for ACLs are only on ISR4300 and CSR1000v with this release.

 

Re: EX4200, PoE not working on all ports

$
0
0

When I run this command I get nothing

show log messages | grep poe_get_psu

 

root@HS102B> show configuration poe | display set
set poe interface all

Re: EX4200, PoE not working on all ports

$
0
0

Tonight I will load the 12.3 code and report back in the morning

Viewing all 10307 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>