09-13-2023 12:12 PM - edited 09-13-2023 12:15 PM
Hello,
I have this topology:
spine101 port 17 <-> leaf131 port 36
(yes, it's dual-spine with more leafs that this, I just want to focus here on this link unless I need to consider the larger topology)
The link is functioning fine if I do nothing. I'm trying to enable CDP on that link. Spine seems to have CDP working with a Spine Interface Selector policy. Leaf is a 9336-FX2, I'm running 5.2(6).
With the below Leaf Access Port Policy Group, I get the error "Fault delegate: Configuration failed due to invalid-card,invalid-port for uni/infra/accportprof-Leaf131_IntProf/hports-P36-typ-range for node Leaf131"
Any suggestions?
09-13-2023 01:30 PM
Hi @weylin.piegorsch ,
First question: WHY do you want to enable CDP on the links between a Leaf and a Spine?
LLDP is already enabled, and LLDP is an IEEE standard (802.1AB). CDP is not.
I've NEVER used ANY Access Policies between Leaves and spines - that's one of the features of ACI, you don't need to do anything between Leaf and Spines!
09-13-2023 05:41 PM
@RedNectar Great question. Couple reasons.
Is it strictly necessary? No, not really. But then again, LLDP isn't strictly necessary (Cisco could have perpetuated CFS to do the same job and not needed LLDP), so Cisco is making a conscious choice to support only the non-Cisco variant on leaf fabric ports, despite supporting the Cisco variant on access ports and also spine fabric ports? Perhaps, but I'm confused why Cisco would specifically prohibit it on leaf fabric ports. The IEEE vs non-IEEE standard is an immaterial argument here, as this can only be a Cisco-to-Cisco patch.
And, concur, I'd rather not have an access policy if I don't need one - I'd rather just turn on both LLDP and CDP everywhere and then need an access policy (or overide policy?) to turn it off. But I started down the path of evaluating an access policy as that's what the documentation said to do, given the documentation makes no differentiation on fabric vs access ports (reference). If I can't turn on CDP through it, I'm still keeping a blank interface selector (a) as a reminder to my junior operators that the port is taken and (b) to have a standardized place to put the configuration that will program "show interface description" CLI command output.
09-13-2023 06:17 PM
Great answer. I don't have any clues on how to help you, but you've inspired me to look into it!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide