I have a Dell Sonicwall NSA 4600 running the latest firmware with an Interface that's configured to have a secondary redundant port. This interface also has a VLAN sub interface assigned to it.

On the switch, a Dell S4048-ON, there is a Port Channel configured with the two physical interfaces connected to the Sonicwall. This Port Channel is a hybrid switchport with one untagged and one tagged VLAN.

I'm having issues with traffic when I connect a client to the switch on either the tagged or untagged VLAN uplink to the Firewall. I can't ping the Firewall's Interfaces when setting the clients IP statically in either VLAN.

If I do this same configuration but on a single physical interface, and thus no Port Channel, it works as I'd expect.

Is there something I'm missing here when trying to introduce a Port Channel?

Let me know if there's anymore info I can provide that might be of use.

Switch Port Channel

interface Port-channel 3
 no ip address
 portmode hybrid
 channel-member TenGigabitEthernet 1/17,1/19
 no shutdown

Switch VLANs

interface Vlan 515
 no ip address
 tagged Port-channel 3
 no shutdown
interface Vlan 516
 no ip address
 untagged TenGigabitEthernet 1/18
 untagged Port-channel 3
 no shutdown
  • IIRC, a Sonicwall "secondary redundant port" is simply a means of providing a redundant connection to a second device. It does not provide link aggregation capabilities. – YLearn Jun 28 at 5:19
  • Logical interfaces, such as your VLAN interfaces, cannot be member of a port channel. You need to make physical interfaces member of a port channel. – Ron Maupin Jul 27 at 11:43

Port channel or EtherChannel is a Cisco proprietary protocol for link aggregation (LAG). Other vendors' hardware may or may not be compatible with it. It's quite possible that it's supported on the switch but not on the Sonicwall.

Generally, a standard LAG protocol should be preferred, especially LACP (802.1AX). If LACP isn't supported you should use static, non-protocol trunking between different devices.

Also, each end of a LAG trunk needs to be configured in the exact same way. With LACP, at least one end must be configured as active.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.