Port channel issues

[mathew.kc1]

Hi All,

We have 2 nexus 9504 (nxos) as core switches and internal firewalls paloalto connected to the spine switches via portchannel60 (primary) and portchannel70(backup). Primary Firewall one leg is connected to switch01 and other to 2nd switch in portchannel 60. Same portchannel number in both primary and backup switch. If i shut portchannel60 in switch01, automatically switch02 portchannel 60 go down?

Regards 

Mathew 

[Francesco Molino]

Hi

So you have your 2 spines connected together using VPC?
If you shutdown one side of the vpc, you should be able to see the port-channel up from the other nexus.
Did you ask the question for information or because you actually have an issue?

[mathew.kc1]

Firewalls are connected to spine switch01 and spine02 using portchannel 60 (primary fw) 70 (backup fw) and vpc is configured on the portchannels. We upgraded the OS last week, it created outage. Before upgrading the OS, I shut the po60 and 70 in spine01 and all the fw traffic should flow through the spine02 portchannel 60.

Just want to make sure, if i shut the po60 in spine01, it shouldn't automatically shut the switch02 same po60. This is for root cause analysis.

[Francesco Molino]

I'm sorry I'm missing something.
If you have a vpc configured from your firewalls too your nexus switches, this means that your spines are in vpc as well. So on this basis, if you reload spine1, traffic should follow back to spine 2 without forcing a shutdown of port-channels on spine1.