peer-keepalive IP change - Procedure

[DariuszD]

Hi everyone 

In my infrastructure i use Two Nexus C93240YC-FX2 which have configuration VPC domain. I must change IP address on both interface MGMT0 , when i check configuration i see below information:

SW_1

interface mgmt0
description ** OOO Managment **
vrf member management
ip address X.X.X.X/23

vpc domain 10
role priority 10
system-priority 150
peer-keepalive destination Y.Y.Y.Y source X.X.X.X udp-port 3200 vrf management interval 1000 timeout 5 precedence 6 hold-timeout 3
delay restore 90
no delay peer-link
no dual-active exclude interface-vlan
no peer-gateway
no layer3 peer-router
no layer3 peer-router syslog
graceful consistency-check
no auto-recovery
delay restore interface-vlan 10
delay restore orphan-port 0
no fast-convergence
port-channel limit
no shutdown

Sw_2

interface mgmt0
description ** OOO Managment **
vrf member management
ip address Y.Y.Y.Y/23

vpc domain 10
role priority 20
system-priority 150
peer-keepalive destination X.X.X.X source Y.Y.Y.Y udp-port 3200 vrf management interval 1000 timeout 5 precedence 6 hold-timeout 3
delay restore 90
no delay peer-link
no dual-active exclude interface-vlan
no peer-gateway
no layer3 peer-router
no layer3 peer-router syslog
graceful consistency-check
no auto-recovery
delay restore interface-vlan 10
delay restore orphan-port 0
no fast-convergence
port-channel limit
no shutdown

I found information about that the change of "peer-keepalive" shouldn't make any disturbs with communications . Are there any further steps that I need to take in sequence when i want change mgmt IPs, what i should do first ?

• change IP on mgmt Port first on SW_1 and second on SW_2 or
• Edit  Vpc domain 10 and first change peer-keepalive parametars like bellow:

SW_1

peer-keepalive destination <New SW_2  mgmt0 IP> source <New SW_1 mgmt0 IP> vrf management

SW_2

peer-keepalive destination <New SW_1  mgmt0 IP> source <New SW_2 mgmt0 IP> vrf management

BR

[f00z]

Change the ip address on the mgmt interfaces first, which will cause the keepalives to fail on the vpc but no traffic will be lost,  then change it in the vpc config on both, and verify keepalive is back up. Nothing will happen, the keepalive is only really used when the peer-link goes down, but it needs to be up if there's a failure. As long as nothing fails (like the peer link) while you are changing the IPs then it's fine.

[DariuszD]

Thank you very much for your reply.

I have next question on the configuration i see:

vrf context management
ip route 0.0.0.0/0 X.X.X.X (x.x.x.x is IP of svi for vlan where is mgmt0 port addresses)

After when i will change IPs on port mgmt0 on both switches i must change in vrf context management ip route for new IP SVI from new mgmt vlan ?

It is correct ?

[00u1661g7uPHO4xrg5d7 · Accepted solution]

Yes since using that route only switch is accessible mostly if you are using that IP to access.

So basically if you remotely access switch using same you might have to use Console option to do such changes.

you need to do below steps.

1. Change mgmt IP

2. Change gateway on mgmt vrf 

3.Update keepalive destination in VPC domain.

4. Validate switch access and vpc brief to validate that all is working fine

Repeat above 3 on other switch as well.