Adding VXLAN configration on a VPC pair suspends member ports

[TsadikuBahiru78025]

I was making vpc pair a vtep and it automatically suspends the member ports

[Sergiu.Daniluk]

Hi @TsadikuBahiru78025 

These are the type 1 inconsistencies for VPC & VXLAN:

Parameter	vPC Check Type	Description
VLAN-VNI mapping	Type-1-nongraceful	Brings down the affected VLANs on vPC ports on both sides.
VTEP-Member-VNI	Type-1-nongraceful	Member VNIs must be the same on both nodes. VNIs that are not common bring down the corresponding VLANs on vPC ports on both sides. (The attributes considered are mcast group address, suppress-arp, and Layer 3 VRF VNI.)
VTEP-emulated IP	Type-1-nongraceful	If an emulated IP address is not the same on both nodes, all gateway vPC ports on one side (secondary) are brought down. Alternatively, one side of all vPC ports is brought down. The VTEP source loopback on the vPC secondary is also brought down if the emulated IP address is not the same on both sides.
NVE Oper State	Type-1-nongraceful	The NVE needs to be in the oper UP state on both sides for the vPC consistency check. If both VTEPs are not in the OPER_UP state, the secondary leg is brought down along with the VTEP source loopback on the vPC secondary.
NVE Host-Reachability Protocol	Type-1-nongraceful	The vPC on both sides must be configured with the same host-reachability protocol. Otherwise, the secondary leg is brought down along with the VTEP source loopback on the vPC secondary.

If for you it was a new vxlan config, then impact is expected.

Stay safe,

Sergiu

[TsadikuBahiru78025]

Hello Sergiu.Daniluk

I really appreciate your help and since I'm checking it on a production environment I have to wait for a maintenance window and then once I got the result I will let you know. 

Thank you!

[TsadikuBahiru78025 · Accepted solution]

Hello Sergiu.Daniluk

Thank you it has worked and now the vxlan tunnel is up but arp traffic is not passing through the vxtunnel to the destination.

[TsadikuBahiru78025]

Here is the topology and the configuration.

VTEP1

-------------------------

vpc domain 101
peer-switch
role priority 100
peer-keepalive destination 192.168.1.1 source 192.168.1.2
delay restore 360
peer-gateway
layer3 peer-router
auto-recovery
ip arp synchronize

interface Vlan1
no ip redirects
no ipv6 redirects

interface Vlan3
no shutdown
no ip redirects
ip address 172.20.2.5/24
no ipv6 redirects
ip router ospf 1 area 0.0.0.0

interface port-channel5
description vpc peer link to DC_CRS
switchport mode trunk
spanning-tree port type network
vpc peer-link

interface port-channel10
description VPC member link
switchport mode trunk
mtu 9216
vpc 10

interface nve1
no shutdown
source-interface loopback0
member vni 50
ingress-replication protocol static
peer-ip 3.3.3.1

interface Ethernet1/1
description CONN To DC_CRS_02_eth1/30
switchport mode trunk
channel-group 5 mode active

interface Ethernet1/2
description CONN To DC_CRS_02_eth1/30
switchport mode trunk
channel-group 5 mode active

interface Ethernet1/3
description CONN To NEW-SFS-02 ETH1/31
switchport mode trunk
mtu 9216
channel-group 10 mode active

interface Ethernet1/4
description CONN To NEW-SFS-02 ETH1/31
switchport mode trunk
mtu 9216
channel-group 10 mode active

interface Ethernet1/5
description CONN To NEW-SFS-02 ETH1/31
switchport mode trunk
mtu 9216
channel-group 10 mode active

interface Ethernet1/6
switchport access vlan 50

VTEP2

--------------------------

vpc domain 103
peer-switch
role priority 100
peer-keepalive destination 192.168.1.1 source 192.168.1.2
delay restore 360
peer-gateway
layer3 peer-router
auto-recovery
ip arp synchronize

interface Vlan1
no ip redirects
no ipv6 redirects

interface Vlan2
no shutdown
ip address 172.21.2.5/24

interface port-channel5
description vpc peer link to DC_CRS
switchport mode trunk
spanning-tree port type network
vpc peer-link

interface port-channel10
description VPC member link
switchport mode trunk
mtu 9216
vpc 10

interface nve1
no shutdown
source-interface loopback0
member vni 50
ingress-replication protocol static
peer-ip 2.2.2.1

interface Ethernet1/1
description CONN To DC_CRS_02_eth1/30
switchport mode trunk
channel-group 5 mode active

interface Ethernet1/2
description CONN To DC_CRS_02_eth1/30
switchport mode trunk
channel-group 5 mode active

interface Ethernet1/3
description CONN To NEW-SFS-02 ETH1/31
switchport mode trunk
mtu 9216
channel-group 10 mode active

interface Ethernet1/4
description CONN To NEW-SFS-02 ETH1/31
switchport mode trunk
mtu 9216
channel-group 10 mode active

interface Ethernet1/5
description CONN To NEW-SFS-02 ETH1/31
switchport mode trunk
mtu 9216
channel-group 10 mode active

interface Ethernet1/6
description CONN To NEW-SFS-02 ETH1/31
switchport mode trunk
mtu 9216
channel-group 10 mode active

interface Ethernet1/7
switchport access vlan 50