Hi all,
Following the implementation of BGP routing at the input of our network, I carry out the routing to our LAN firewall.
Since the installation the BGP part is OK, the routes well announced and arrive on my Nexus 5K cores (VPC mode).
But my tests are not good, because several loss of ping and connection impossible, on the other hand when I deactivate the HSRP and I stay on a single Nexus 5K with the VIP active it works.
As soon as I activate my vlan interfaces with HSRP again, the pings are lost again. I do not understand where the problem lies because without BGP it is a configuration that works and the redundancy is good with HSRP without asymmetric routing.
My HSRP network is 172.16.200.0/24 with a VIP in .10 and the return routing from the FW is OK
---------
router bgp 65312
vrf ECRIN
local-as 65312
address-family ipv4 unicast
network 10.113.0.0/16
network 10.251.64.96/30
network 172.16.200.0/24
network 210.210.7.0/24
network 215.69.63.0/24
network 215.114.66.0/24
neighbor 10.251.64.97 remote-as 65500
address-family ipv4 unicast
send-community
route-map Ecrin-IN in
route-map Ecrin-OUT out
neighbor 172.16.200.11 remote-as 65312
address-family ipv4 unicast
neighbor 172.16.200.12 remote-as 65312
address-family ipv4 unicast
neighbor 172.16.200.13 remote-as 65312
address-family ipv4 unicast
