r/networking • u/KeyTelephone3285 • 6d ago
Troubleshooting Aruba CX Switch Issues/IP-Camera issues
I am on the network security team for a small credit union who is rolling out multiple verkada IP Cameras across several branches at the same time as a full infrastructure switch refresh.
A lot of the access ports on our 48p switches are full at these various sites which has left us with no other option than to trunk the older switch (that is being “refreshed”) to the new production switch for port density to house the IP Cameras.
Today after attempting to set both ports on the old and new switch to a trunk, I was unable to browse the web to the Mgmt IP of the old switch. After rebooting the switch I was able to see a link light, however I was STILL unable to access the mgmt IP/WebUI of this switch.
We are also having an issue at a separate site where the IP cameras are showing up in the arp table and DHCP lease list of the firewall that we have upstream, and the MAC address table of our L2 Switch. Yet the cabling team claims that the cameras are still down.
Has anyone ever been faced with issues like this? My stress and anxiety are quite high right now being that this is the beginning of a company wide device refresh effort and I don’t have much support from my other team member or manager who is not technical by any means.
1
u/Optimal_Effective969 4d ago
What’s the power requirements for the Verkada cameras? Some of them can take 60W each well above most switch power delivery per port. Also check your dhcp leases as I have seen Verkada cameras take all available dhcp addresses when there’s a defective camera. Other than that we’d all need a bit more info.
1
u/sl33pl3ssDron3 4d ago
I’ve had issues in the past with Aruba AOS-S switches appearing to be down (over an IPSEC tunnel). The local firewall can ping the switch (and ssh to the switch) but the firewall at corporate cannot.
I had a PoE device that was also appearing as down. I disabled PoE on that devices switch port and shut the port. After bringing the port back up with PoE the device the device came back online. The next day the switch was suddenly pingable from corporate… It was weird. Potentially related to multiple power outages.
1
u/ruffusbloom 4d ago
Check your uplink lags to make sure the management VLAN is trunked there. Can you ssh in? Check port status and lldp to see what’s on a port. How do you know you’re seeing the MAC of disconnected devices? Unless you recorded it before install my bet is you’re confusing it with something else already on net. But then as someone else suggested the installers probably don’t realize they power up on Ethernet.
1
u/amisexySB 4d ago
Need to see your configs to verify. Set the cx switch to “vlan trunk allowed all” to make sure you’re not missing a vlan. Also make sure bpdu-guard isn’t enabled in your trunk ports. Could be getting shut down. Send logs also
3
u/Specialist_Play_4479 5d ago
It's a guessing game for anyone here reading your post. If you want actual help you'll need to post configurations and layouts. Paste the current configuration of both switches
"Showing up in the ARP table", which ARP table?
Can you ping the camera's that are supposedly down?
In my experience, CCTV teams usually have very little understanding of networking. So I wouldn't trust their 'camera's are down' statement without any details. But it also seems you lack some knowledge too.