Cisco Nexus vPC Peer Link - Apply Storm Control

[johnlloyd_13]

hi,

i have a pair of nexus 5K acting core switch and configured with vPC.

it's using the first two ports: eth1/1 and 1/2 as the vPC peer links with each other and configured as trunk over port-channel 1.

i would like to apply 'storm control' on port-channel1 which will eventually apply on ports eth1/1 and 1/2.

will applying storm control going to 'break' the vPC peering? i just want to confirm and be safe.

NEXUS-1# sh vpc brief
Legend:
(*) - local vPC is down, forwarding via vPC peer-link

vPC domain id : 10
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : failed
Type-2 inconsistency reason : VTP type-2 configuration incompatible
vPC role : primary
Number of vPCs configured : 41
Peer Gateway : Disabled
Dual-active excluded VLANs : 999
Graceful Consistency Check : Enabled
Auto-recovery status : Enabled (timeout = 300 seconds)

vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ --------------------------------------------------
1 Po1 up 1-2,10-13,16,25,29,31-34,37-39,48-49,51-53,56,60-6
9,72-75,77,83-86,89-91,99-100,109-110,112,120,123-
130,135,137-156,159,168-169,171,173-185,187,193-19
4,196,200-201,203-208,211,220-225,227-228,233-235,
237-238,240-241,243,245-247,260,272,280-281,299-30 ....

NEXUS-1# sh run int e1/1

!Command: show running-config interface Ethernet1/1
!Time: Mon May 17 09:36:11 2021

version 5.2(1)N1(4)

interface Ethernet1/1
description vPC Peer-Link
switchport mode trunk
channel-group 1 mode active

NEXUS-1# sh run int e1/2

!Command: show running-config interface Ethernet1/2
!Time: Mon May 17 09:36:13 2021

version 5.2(1)N1(4)

interface Ethernet1/2
description vPC Peer-Link
switchport mode trunk
channel-group 1 mode active

NEXUS-1# sh run int po1

!Command: show running-config interface port-channel1
!Time: Mon May 17 09:40:45 2021

version 5.2(1)N1(4)

interface port-channel1
description vPC Peer-Link
switchport mode trunk
spanning-tree port type network
speed 10000
vpc peer-link

[balaji.bandi]

Personally i do not like storm control, where the network fully trusted, but if you like to implement, there is some side effect, which can bring the Link down, and vpc become split brain, so understand well before you implement on them.

Some reference :

https://www.cisco.com/c/en/us/support/docs/switches/nexus-7000-series-switches/200247-Nexus-7000-Storm-Control-Selecting-appr.html

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/layer2/513_n1_1/b_Cisco_n5k_layer2_config_gd_rel_513_N1_1/b_Cisco_n5k_layer2_config_gd_rel_513_N1_1_chapter_010011.html

[Reza Sharifi]

Hi John,

The broadcast storm is usually initiated by a port connecting to an end device (e.g pc, printer, server, camera, etc..) So, if you have broadcast storm on all ports connecting to end devices, I don't think it is necessary to configure it on vPC peer-link.

HTH