LACP error : ethernet x/y idx z received pdu partner does not match local actor

LACP error : ethernet x/y idx z received pdu partner does not match local actor

7528
Created On 11/16/23 23:26 PM - Last Modified 12/12/23 21:33 PM


Symptom


From System Log
 
critical lacp    ethern link-do 0  LACP interface ethernet1/16 moved out of AE-group ae1. Selection state Unselected(Link down)

 critical lacp    ethern nego-fa 0  LACP interface ethernet1/16 moved out of AE-group ae1. Selection state Unselected(Negotiation failed)

 critical lacp    ethern nego-fa 0  LACP interface ethernet1/15 moved out of AE-group ae1. Selection state Unselected(Negotiation failed)

critical lacp    ethern nego-fa 0  LACP interface ethernet1/14 moved out of AE-group ae1. Selection state Unselected(Negotiation failed)

 critical lacp    ethern nego-fa 0  LACP interface ethernet1/13 moved out of AE-group ae1. Selection state Selected

From l2ctrld.log
+0000 post LACP event to DP: if_idx 28, up 1
+0000 log ethernet1/13 idx 28 join lag
+0000 ethernet1/13 idx 28 set to unselected, clear actor sync
+0000 ethernet1/13 idx 28 received pdu partner does not match local actor
+0000 Recved LACPDU actor:
sys_pri 32768, system_mac 02:8e:38:13:4c:a7, key 1, port_pri 32768, port_num 341,  state 0x3f partner
sys_pri 4000, system_mac 00:23:04:ee:be:63, key 32779, port_pri 32768, port_num 16642,   state 0x3d Selecting ethernet1/13, idx 28


Environment


Any PA firewall 
PAN-OS 10.0.0 or later 


Cause


The cause of the issue can be due to following 

1. Check the settings for LACP mode, Transmission rate settings both on the firewall and the Peer device  

Screenshot 2023-11-16 at 3.34.59 PM.png
2. Issue on the peer device which might be sending unexpected PDU
3. SFP compatibility 
4. Cabling or port issue 
 


Resolution


1. Please make sure if the required mode i.e Active/Passive and transmission rate slow/fast is set 
2. Customer will have to troubleshoot if there is any mismatch in any configuration and check logs on the peer device. 
3. Both the peers must confirm SFP compatibility
4. Both the peers must check for Layer 1 issues 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008Vv8CAE&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language