topic vPC to ASA5525-X in Server Networking https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194375#M7772 <P style="line-height: normal; background: #eef4f9;">From the ASA I should be able to ping 10.170.105.1 without a route because they are directly connected, yes? Unless the ASA does not follow the same rules. I also noticed in the show int tru command that po105 is forwarding "none"</P><TABLE border="0" cellpadding="0" cellspacing="0" style="width: 98%; border-collapse: collapse; margin-left: 1.2pt; padding: px;" width="98%"><TBODY><TR><TD style="padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; padding-top: 0in; border: windowtext 1pt solid;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;"><STRONG style="text-decoration: underline; ">N5K1</STRONG></P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; border-top: windowtext 1pt solid; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;"><STRONG style="text-decoration: underline; ">N5K2</STRONG></P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 368pt; padding-right: 5.4pt; border-top: windowtext 1pt solid; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="613"><P style="line-height: normal; margin: 0in 0.6pt 0pt;"><STRONG style="text-decoration: underline; ">ASA5525-X</STRONG></P></TD></TR><TR><TD style="border-bottom: windowtext 1pt solid; border-left: windowtext 1pt solid; padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; border-top: medium none; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K001(config)# show run int po105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface port-channel105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description vPC TO ASA5525</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport mode trunk</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport trunk allowed vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">spanning-tree port type network</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">vpc 105</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K001(config)# show run int vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Vlan105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no shutdown</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description ASA5525 ROUTED VLAN</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip redirects</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip address 10.170.105.2/24</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp version 2</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip 10.170.105.1</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K001(config)# show port-channel summary</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Flags: D - Down P - Up in port-channel (members)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">I - Individual H - Hot-standby (LACP only)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">s - Suspended r - Module-removed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">S - Switched R - Routed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">U - Up (port-channel)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">M - Not in use. Min-links not met</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Group Port- Type Protocol Member Ports</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Channel</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">10 Po10(SU) Eth LACP Eth1/31(P) Eth1/32(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">50 Po50(SU) Eth LACP Eth1/27(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">51 Po51(SU) Eth LACP Eth1/25(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">101 Po101(SU) Eth NONE Eth1/29(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">102 Po102(SU) Eth NONE Eth1/30(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">105 Po105(SU) Eth LACP Eth1/26(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">205 Po205(SU) Eth LACP Eth1/3(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">206 Po206(SU) Eth LACP Eth1/4(P) </P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; border-top: medium none; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K002# show run int po105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface port-channel105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description vPC TO ASA5525</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport mode trunk</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport trunk allowed vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">spanning-tree port type network</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">vpc 105</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K002# show run int vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Vlan105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no shutdown</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description ASA5525 ROUTED VLAN</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip redirects</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip address 10.170.105.3/24</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp version 2</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip 10.170.105.1</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K002# show port-channel sum</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Flags: D - Down P - Up in port-channel (members)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">I - Individual H - Hot-standby (LACP only)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">s - Suspended r - Module-removed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">S - Switched R - Routed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">U - Up (port-channel)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">M - Not in use. Min-links not met</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Group Port- Type Protocol Member Ports</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Channel</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">10 Po10(SU) Eth LACP Eth1/31(P) Eth1/32(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">50 Po50(SU) Eth LACP Eth1/27(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">51 Po51(SU) Eth LACP Eth1/25(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">101 Po101(SU) Eth NONE Eth1/29(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">102 Po102(SU) Eth NONE Eth1/30(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">105 Po105(SU) Eth LACP Eth1/26(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">205 Po205(SU) Eth LACP Eth1/3(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">206 Po206(SU) Eth LACP Eth1/4(P) </P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 368pt; padding-right: 5.4pt; border-top: medium none; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="613"><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Gi0/6</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">channel-group 1 mode active</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no security-level</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip address</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Gi0/7</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">channel-group 1 mode active</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no security-level</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip address</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Port-channel1</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description Port-Channel to N5Ks</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">lacp max-bundle 2</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">security-level 100</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip address</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Port-channel1.105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">nameif inside</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">security-level 100</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip address 10.170.105.20 255.255.255.0</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ATIASA5525-01# show port-channel summary</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Flags: D - down P - bundled in port-channel</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">I - stand-alone s - suspended</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">H - Hot-standby (LACP only)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">U - in use N - not in use, no aggregation/nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">M - not in use, no aggregation due to minimum links not met</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">w - waiting to be aggregated</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Number of channel-groups in use: 1</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Group Port-channel Protocol Span-cluster Ports</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">------+-------------+---------+------------+------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">1 Po1(U) LACP No Gi0/6(P) Gi0/7(P)</P></TD></TR></TBODY></TABLE> Tue, 19 Mar 2013 20:36:05 GMT Steven Williams 2013-03-19T20:36:05Z vPC to ASA5525-X https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194375#M7772 <P style="line-height: normal; background: #eef4f9;">From the ASA I should be able to ping 10.170.105.1 without a route because they are directly connected, yes? Unless the ASA does not follow the same rules. I also noticed in the show int tru command that po105 is forwarding "none"</P><TABLE border="0" cellpadding="0" cellspacing="0" style="width: 98%; border-collapse: collapse; margin-left: 1.2pt; padding: px;" width="98%"><TBODY><TR><TD style="padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; padding-top: 0in; border: windowtext 1pt solid;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;"><STRONG style="text-decoration: underline; ">N5K1</STRONG></P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; border-top: windowtext 1pt solid; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;"><STRONG style="text-decoration: underline; ">N5K2</STRONG></P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 368pt; padding-right: 5.4pt; border-top: windowtext 1pt solid; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="613"><P style="line-height: normal; margin: 0in 0.6pt 0pt;"><STRONG style="text-decoration: underline; ">ASA5525-X</STRONG></P></TD></TR><TR><TD style="border-bottom: windowtext 1pt solid; border-left: windowtext 1pt solid; padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; border-top: medium none; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K001(config)# show run int po105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface port-channel105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description vPC TO ASA5525</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport mode trunk</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport trunk allowed vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">spanning-tree port type network</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">vpc 105</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K001(config)# show run int vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Vlan105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no shutdown</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description ASA5525 ROUTED VLAN</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip redirects</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip address 10.170.105.2/24</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp version 2</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip 10.170.105.1</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K001(config)# show port-channel summary</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Flags: D - Down P - Up in port-channel (members)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">I - Individual H - Hot-standby (LACP only)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">s - Suspended r - Module-removed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">S - Switched R - Routed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">U - Up (port-channel)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">M - Not in use. Min-links not met</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Group Port- Type Protocol Member Ports</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Channel</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">10 Po10(SU) Eth LACP Eth1/31(P) Eth1/32(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">50 Po50(SU) Eth LACP Eth1/27(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">51 Po51(SU) Eth LACP Eth1/25(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">101 Po101(SU) Eth NONE Eth1/29(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">102 Po102(SU) Eth NONE Eth1/30(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">105 Po105(SU) Eth LACP Eth1/26(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">205 Po205(SU) Eth LACP Eth1/3(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">206 Po206(SU) Eth LACP Eth1/4(P) </P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 310.8pt; padding-right: 5.4pt; border-top: medium none; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="518"><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K002# show run int po105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface port-channel105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description vPC TO ASA5525</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport mode trunk</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">switchport trunk allowed vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">spanning-tree port type network</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">vpc 105</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K002# show run int vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Vlan105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no shutdown</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description ASA5525 ROUTED VLAN</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip redirects</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip address 10.170.105.3/24</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp version 2</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">hsrp 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip 10.170.105.1</P><P></P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">NEXUS5K002# show port-channel sum</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Flags: D - Down P - Up in port-channel (members)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">I - Individual H - Hot-standby (LACP only)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">s - Suspended r - Module-removed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">S - Switched R - Routed</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">U - Up (port-channel)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">M - Not in use. Min-links not met</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Group Port- Type Protocol Member Ports</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Channel</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">--------------------------------------------------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">10 Po10(SU) Eth LACP Eth1/31(P) Eth1/32(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">50 Po50(SU) Eth LACP Eth1/27(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">51 Po51(SU) Eth LACP Eth1/25(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">101 Po101(SU) Eth NONE Eth1/29(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">102 Po102(SU) Eth NONE Eth1/30(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">105 Po105(SU) Eth LACP Eth1/26(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">205 Po205(SU) Eth LACP Eth1/3(P) </P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">206 Po206(SU) Eth LACP Eth1/4(P) </P></TD><TD style="border-bottom: windowtext 1pt solid; border-left: medium none; padding-bottom: 0in; padding-left: 5.4pt; width: 368pt; padding-right: 5.4pt; border-top: medium none; border-right: windowtext 1pt solid; padding-top: 0in;" valign="top" width="613"><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Gi0/6</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">channel-group 1 mode active</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no security-level</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip address</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Gi0/7</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">speed 1000</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">duplex full</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">channel-group 1 mode active</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no security-level</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip address</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Port-channel1</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">description Port-Channel to N5Ks</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">lacp max-bundle 2</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">security-level 100</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">no ip address</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">interface Port-channel1.105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">vlan 105</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">nameif inside</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">security-level 100</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ip address 10.170.105.20 255.255.255.0</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">!</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">ATIASA5525-01# show port-channel summary</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Flags: D - down P - bundled in port-channel</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">I - stand-alone s - suspended</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">H - Hot-standby (LACP only)</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">U - in use N - not in use, no aggregation/nameif</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">M - not in use, no aggregation due to minimum links not met</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">w - waiting to be aggregated</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Number of channel-groups in use: 1</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">Group Port-channel Protocol Span-cluster Ports</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">------+-------------+---------+------------+------------------------------------</P><P style="line-height: normal; margin: 0in 0.6pt 0pt;">1 Po1(U) LACP No Gi0/6(P) Gi0/7(P)</P></TD></TR></TBODY></TABLE> Tue, 19 Mar 2013 20:36:05 GMT https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194375#M7772 Steven Williams 2013-03-19T20:36:05Z vPC to ASA5525-X https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194376#M7773 <HTML><HEAD></HEAD><BODY><P>Hello!</P><P></P><P>Can you try to remove "spanning-tree port type network"?&nbsp; The ASA connections should be "spanning-tree port type edge trunk" as they do not run spanning-tree.</P><P></P><P>Let me know if this helps!</P><P></P><P>Dave</P></BODY></HTML> Tue, 19 Mar 2013 21:07:40 GMT https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194376#M7773 David Lucas 2013-03-19T21:07:40Z vPC to ASA5525-X https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194377#M7774 <HTML><HEAD></HEAD><BODY><P> spanning-tree port type edge trunk was added. I did not know that was a command. I thought normal would work. Although that didnt fix the issue it was good to know, I probably need to add that to my vPC's to my NetApp and ESX Hosts. To solve the issue I created the vlan for 105 on the Nexus. UGH! That gets me all the time, unlike IOS where it creates the vlan for you, nexus doesn't. That has bitten me more than once! Thanks for the knowledge on spanning-tree!</P></BODY></HTML> Tue, 19 Mar 2013 22:03:00 GMT https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194377#M7774 Steven Williams 2013-03-19T22:03:00Z vPC to ASA5525-X https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194378#M7775 <HTML><HEAD></HEAD><BODY><P>Ah!&nbsp; </P><P></P><P>Just a FYI, a "sh vpc <VPC number="">" would should you that there were no active VLANs on the vPC.&nbsp; Also, another usefull command in this case would be "sh spanning-tree int <PORT-CHANNEL>" which you'd then see there were no VLANs in the Forwarding state.</PORT-CHANNEL></VPC></P><P></P><P>I'm glad you were able to resolve it!</P><P></P><P>Dave</P></BODY></HTML> Tue, 19 Mar 2013 22:23:26 GMT https://community.cisco.com/t5/server-networking/vpc-to-asa5525-x/m-p/2194378#M7775 David Lucas 2013-03-19T22:23:26Z