cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
178
Views
0
Helpful
1
Replies
Highlighted
Beginner

OSPF Nexus 7706 versus FTD 2130

Hello everyone, I need help about the next scenario.

 

Pantalla8.png

 

I configured OSPF between a pair of Nexus 7706 and a pair of FTD 2103 in HA arrangement, to announce all SVIs to FTD-HA behind the peers VPC Nexus 7706 and avoid configuring every static route into the FTDs to the peers VPC LAN.

All the communication and adjacency is by VLAN301 in every device.

 

Primary Nexus:

Pantalla1.png

Secondary Nexus:

Pantalla2.png

 

I followed Best Practices for Virtual Port Channels (vPC) for Layer 3 document:

https://www.cisco.com/c/dam/en/us/td/docs/switches/datacenter/sw/design/vpc_design/vpc_best_practices_design_guide.pdf

 

Pantalla3.png

This is the route table form FTD:

Pantalla4.png

 

But, I have a LOOP, the Traceroute from FTD CLI to 10.92.59.251 (VLAN 2) (Secondary Nexus HSRP) shows three different behaviors:

 

1. Answer directly:

 

Pantalla5.png

 

2. Answer with two hops:

 

Pantalla6.png

 

3. Answer with three hops:

Pantalla7.png

 

I want to avoid this kind of issue, so I’m requesting your help.

 

Actually all communication is PRIMARY NEXUS – FTD ACTIVE, and is desirable when the FTD ACTIVE goes down and the FTD PASSIVE takes the ACTIVE role, the SECONDARY NEXUS send all the routes like the PRIMARY NEXUS without repeating the routes.

 

Please some recommendations.

 

Thanks

Everyone's tags (2)
1 REPLY 1
VIP Mentor

Re: OSPF Nexus 7706 versus FTD 2130

Hello,

 

so the traceroute to 10.92.59.251, from the same source IP/interface goes through different hops...when ? Post the full configs of all 4 devices...

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards