Re: OT: Changing Etherchannel configurations the safe way

Persio,

Since your only access is through the port-channel, you may want to look at
taking one link out of the port-channel, to use as a sort of -out-of-band
port for which you will have access to the other switch. Remote into the
switch, remove one link and make it an L3 port or access vlan (unused vlan)
with an SVI. Configure the same on the local end. Once you have gained
access to the switch through this interface, then modify the port-channel
and other interfaces as needed. Once the port-channel is up then you can
exit from the oob connection, go back through the port-channel and modify
the last interface.

-hth

On Fri, Aug 14, 2009 at 10:10 PM, Persio Pucci <persio_at_gmail.com> wrote:

> Hi guys,
>
> need your thoughts on this:
>
> I am going to change the "allowed vlan" list on several PortChannel
> interfaces. Would like to hear your thought on the best/safest way of doing
> that.
>
> One problem is that some of the switches are only reachable via the
> portchannel (and therefore via the member interfaces), so if anything goes
> wrong (for instance, a configuration mismatch on each end) the portchannel
> will go down.
>
> I read on one Cisco pdf
> (link<
> http://www.cisco.com/en/US/docs/switches/blades/3120/software/release/12.2_40_ex/configuration/guide/swethchl.pdf
> >,
> page 11) that the allowed vlan list should actually be changed on the
> member
> interfaces also (changing on the Po only will not do it).
>
> One of my thoughts were to do the changes on the startup config and then
> merge it to the running config, so they are all applied at once at the
> remote side. Will try my best to do it in synchrony to the local side, but
> if timming is not good enough, at least I still have connection to the side
> that also needs to be configured.
>
> We've tried pushing the configs using SNMP and it worked on some cases, but
> in another case it did not go so well and impacted a whole site.
>
> Tks.
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Bryan Bartik
CCIE #23707 (R&S), CCNP
Sr. Support Engineer - IPexpert, Inc.
URL: http://www.IPexpert.com
Blogs and organic groups at http://www.ccie.net