cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1735
Views
5
Helpful
1
Replies

Configure LAG LACP between two NX5K VPC and two clustered Juniper SRX FW

hbaytie01
Level 1
Level 1

Hi, 

I need the best recommendation to configure the LACP between the two 5Ks and the clustered SRX.

What i did is i created on both 5Ks a single port-channel 501  and I added to it the VPC 501. Under two interfaces from each 5K, i configured it to be channel-group 501 mode active. 

On the Juniper side, i have four ports as reth0 and the below is the configuration:

 

set interfaces xe-0/0/18 description “Servers-interface-to-Primary 5K”
set interfaces xe-0/0/18 gigether-options redundant-parent reth0
set interfaces xe-0/0/19 description “Servers-interface-to-Primary-5K”
set interfaces xe-0/0/19 gigether-options redundant-parent reth0
set interfaces xe-7/0/18 description “Servers-interface-to-Secondary-5K”
set interfaces xe-7/0/18 gigether-options redundant-parent reth0
set interfaces xe-7/0/19 description “Servers-interface-to-Secondary-5K”
set interfaces xe-7/0/19 gigether-options redundant-parent reth0

set interfaces reth0 redundant-ether-options redundancy-group 1

set interfaces reth0 redundant-ether-options lacp passive
set interfaces reth0 redundant-ether-options lacp periodic slow

 

Now the four interfaces are directly connected but I'm not able to make them ping each other from their sub-interfaces, i want to know if it is a firewall issue taking into consideration everything is allowed or if it is an LACP problem. what kind of command I can use to verify the LACP connection is working from the 5K side.

 

 

Thanks in advance

1 Reply 1

Rick1776
Level 5
Level 5
There are several ways to check the LACP paremtetes

switch# show lacp { counters | interface type slot / port | neighbor | port-channel | system-identifier }

Is the port channel up with the member ports?

Can you show the output from
Show po summary
Show LACP neighbors

Review Cisco Networking for a $25 gift card