NEXUS7010 and hsrp problem

MKH · ‎08-15-2015

I have topology as follows

NX7010-1 and NX7010-2 are configured as follow:

interface Vlan501

no shutdown

ip address 172.16.32.11/22

ip ospf passive-interface

ip router ospf 1 area 0.0.0.0

hsrp 100

preempt

ip 172.16.32.1

interface Vlan501

no shutdown

ip address 172.16.32.12/22

ip ospf passive-interface

ip router ospf 1 area 0.0.0.0

hsrp 100

ip 172.16.32.1

There are OSPF protocol between NX7010-1 and NX7010-2 and ASA5585.

There are HSRP between Oracle database server and both of the NEXUS switches.

There are VPC between two NEXUS switches.

NX7010-1 is in Active state while NX7010-2 is in standby state.

The Problem is,

NX7010-1 is able to ping the IPs, 172.16.32.1 & 172.16.32.12.

NX7010-2 is able to ping the IPs, 172.16.32.1 & 172.16.32.11.

We Have 3 VMs, That Clustered together in oracle database with IPS, 172.16.34.23 and 172.16.34.25 and 172.16.34.29.

All of the VMs are on the single physical machine.

When interface vlan 501 on the NX7010-2 is Shutdown, All of the VMs can ping Outside and ASA8858 and subsequently system Works properly.

When interface vlan 501 on the NX7010-2 is up, The VMs with IPs, 172.16.34.23 and 172.16.34.29 work properly and can ping outside and ASA5585, But VM with IP 172.16.34.25 doesn’t works properly and can’t ping outside.

Whats wrong??

Steve Fuller · ‎08-15-2015

Hi,

Are you also running vPC to the ASA and/or the server hosting the three VMs? If so it's possible you're running into a restriction that exists for routing when using vPC.

Take a look at the Blog L3 over vPC: Nexus 7000 vs 5000 for a description of the problem to see if it matches what you have.

If that's the problem you might need to do what's shown in the third diagram on the Blog and have additional links that are not vPC links, and they carry the requird VLANs.

Alternatively in NX-OS 7.2 it's now possible to route in the presence of vPC. This is discussed in the post Dynamic Routing over vPC possible in 7.2 NX-OS.

There are some requirements in terms of I/O modules though so may not be an option in your case. There are examples of supported and unsupported topologies in the Configuring Layer 3 over vPC for F2, F2E and F3 Modules section of the configuration guide.

Regards