3140 vs 9300 and Nexus 7010

[Serpent2010]

Hi Experts!

I have a situation when the FPR3140 does not establish the connection (ports are up but no traffic) with 7010 on trunk connection of port-channel. Meanwhile, same port-channel establish the connections successfully (ports are up and there is traffic).

The 7010 does not show issue of any logs with either connection 3140 or 9300 for LCAP, vPC, flapping, BPDU filter/block ...etc.

Triple check the port-channel on 3140 reflects matching with 9300 (active port-channel, routing, ospf).

I know 9300 has ASIC so it more flexible with LACP while 3140 is not. 

Any idea what could cause this issue?

Thank you for looking at this issue

[marce1000]

  - Are you able to make  a single connection (not a port channel) ?

  M.

[Serpent2010]

No, I did not get chance. All the time, I was trouble port-channel & FTD side. But as I said this same port-channel (as is no changes) just coonnected to FPR9300  with no issue. Cisco TAC from Nexus team as well as FTD found nothing.

[marce1000]

 - But it >is< an important test to check for a native port channel problem or not,

 M.

[Serpent2010]

Yes, that was checked. Native vlan was allowed on the Nexus Trunck + taged VLAN30. Howevere, in FTD3140, Taged VLAN30 is allowed on the sub interface of the port-channel. From the config of the port-channel on 3140 side, no native vlan clearly allowed/notallowed on the port-channel or it's subinterface configs. but 3140 port-channel only allowing the Trunck taged Vlan30. Same config for FTD9300 (working no issue) native VLAN is not allowed.  That's lead to point of differences in the FXOS between 9300 & 3140. Is there an automated config that will cause differences?

[Serpent2010]

Does FTD3140’s strict FXOS dataplane and dropping the traffic for VLAN30 locally (ingress/egress) unless it is being taged as Trust?  Is that somehow a requirement in FTD3140 FXOS?