cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
502
Views
1
Helpful
3
Replies

Enable CDP on Leaf Uplinks

Hello,

I have this topology:

 

spine101 port 17 <-> leaf131 port 36

 

(yes, it's dual-spine with more leafs that this, I just want to focus here on this link unless I need to consider the larger topology)

The link is functioning fine if I do nothing.  I'm trying to enable CDP on that link.  Spine seems to have CDP working with a Spine Interface Selector policy. Leaf is a 9336-FX2, I'm running 5.2(6).

With the below Leaf Access Port Policy Group, I get the error "Fault delegate: Configuration failed due to invalid-card,invalid-port for uni/infra/accportprof-Leaf131_IntProf/hports-P36-typ-range for node Leaf131"

Any suggestions?

 

Untitled.png
 
3 Replies 3

RedNectar
VIP Alumni
VIP Alumni

Hi @weylin.piegorsch ,

First question: WHY do you want to enable CDP on the links between a Leaf and a Spine?

LLDP is already enabled, and LLDP is an IEEE standard (802.1AB).  CDP is not.

I've NEVER used ANY Access Policies between Leaves and spines - that's one of the features of ACI, you don't need to do anything between Leaf and Spines!

 

RedNectar aka Chris Welsh.
Forum Tips: 1. Paste images inline - don't attach. 2. Always mark helpful and correct answers, it helps others find what they need.

@RedNectar Great question.  Couple reasons.

  1. Operational consistency.  Everywhere else in my network, my entire staff knows they can at least get Cisco neighborship data via CDP.  This would join ASAs as the nuissance outlier.
  2. Depending on the adjacent device, CDP and LLDP often report different data.  Ideally you run both LLDP neighbor data and also CDP neighbor data.  (if you're good, you also run DHCP Snooping database, device-sensor, device-classifier, device-tracking... but I digress into IOS XE.)
  3. I have a philosophy that within an administrative domain, all possible data should be shared as widely as possible in as many was as possible.

Is it strictly necessary? No, not really.  But then again, LLDP isn't strictly necessary (Cisco could have perpetuated CFS to do the same job and not needed LLDP), so Cisco is making a conscious choice to support only the non-Cisco variant on leaf fabric ports, despite supporting the Cisco variant on access ports and also spine fabric ports?  Perhaps, but I'm confused why Cisco would specifically prohibit it on leaf fabric ports.  The IEEE vs non-IEEE standard is an immaterial argument here, as this can only be a Cisco-to-Cisco patch.

And, concur, I'd rather not have an access policy if I don't need one - I'd rather just turn on both LLDP and CDP everywhere and then need an access policy (or overide policy?) to turn it off.  But I started down the path of evaluating an access policy as that's what the documentation said to do, given the documentation makes no differentiation on fabric vs access ports (reference).  If I can't turn on CDP through it, I'm still keeping a blank interface selector (a) as a reminder to my junior operators that the port is taken and (b) to have a standardized place to put the configuration that will program "show interface description" CLI command output.

@weylin.piegorsch ,

Great answer.  I don't have any clues on how to help you, but you've inspired me to look into it!

RedNectar aka Chris Welsh.
Forum Tips: 1. Paste images inline - don't attach. 2. Always mark helpful and correct answers, it helps others find what they need.

Review Cisco Networking for a $25 gift card

Save 25% on Day-2 Operations Add-On License