Solved: can that help us? 2015 Oct 5 - Page 2

tsipoulanis · ‎10-05-2015

Hallo everyone,

i have a small issue and i would like to give me your lights.

i just received the new leyer 3 Daughter for our 5548UP, i installed them and want to configure the hsrp for HA.

in our topology we have vPC,

why is not possible to implement the HSRP, and maybe the answer is on

Rx - Good: 0

can someone help me?

i can ping one device to each other. and locally i can ping the hsrp IP 10.5.0.5

please check the vlan configs

interface Vlan100
no shutdown
management
no ip redirects
ip address 10.5.0.6/24
no ip arp gratuitous hsrp duplicate (is something i found in internet, but finally didnt help me)
hsrp version 2
hsrp 10
preempt delay minimum 240
priority 130 (the primary has 150)
timers 1 3
ip 10.5.0.5

NSWDCDE07# show hsrp
Vlan100 - Group 10 (HSRP-V2) (IPv4)
Local state is Active, priority 150 (Cfged 150), may preempt
Forwarding threshold(for vPC), lower: 1 upper: 150
Preemption Delay (Seconds) Minimum:240
Hellotime 1 sec, holdtime 3 sec
Next hello sent in 0.739000 sec(s)
Virtual IP address is 10.5.0.5 (Cfged)
Active router is local
Standby router is unknown
Authentication text "cisco"
Virtual mac address is 0000.0c9f.f00a (Default MAC)
2 state changes, last state change 00:03:53
IP redundancy name is hsrp-Vlan100-10 (default)

NSWDCDE07# show hsrp summary

HSRP Summary:

Extended-hold (NSF) disabled
Global HSRP-BFD disabled

Total Groups: 1
Version:: V1-IPV4: 0 V2-IPV4: 1 V2-IPV6: 0
State:: Active: 1 Standby: 0 Listen: 0
State:: V6-Active: 0 V6-Standby: 0 V6-Listen: 0

Total HSRP Enabled interfaces: 1

Total Packets:
Tx - Pass: 903 Fail: 0
Rx - Good: 0

Packet for unknown groups: 0

Total MTS: Rx: 101

tsipoulanis · ‎10-05-2015

from both of them,

NSWDCDE07# show module
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ---------------------- -----------
-
1 32 O2 32X10GE/Modular Universal Platfo N5K-C5548UP-SUP active *
2 16 O2 16 port flexible GEM N55-M16UP ok
3 0 O2 Daughter Card with L3 ASIC N55-D160L3-V2 ok

Mod Sw Hw World-Wide-Name(s) (WWN)
--- -------------- ------ ---------------------------------------------------
-
1 7.0(6)N1(1) 1.0 --
2 7.0(6)N1(1) 1.0 --
3 7.0(6)N1(1) 1.0 --

Mod MAC-Address(es) Serial-Num
--- -------------------------------------- ----------
1 8c60.4f94.dbe8 to 8c60.4f94.dc07 FOC19200LB0
2 8c60.4f77.b9a0 to 8c60.4f77.b9af FOC19250JBW
3 0000.0000.0000 to 0000.0000.000f FOC19278LRX
NSWDCDE07# show license usage
Feature Ins Lic Status Expiry Date Comments
Count
--------------------------------------------------------------------------------
FCOE_NPV_PKG No - Unused -
FM_SERVER_PKG No - Unused -
ENTERPRISE_PKG Yes - Unused Never -
FC_FEATURES_PKG Yes - Unused Never -
VMFEX_FEATURE_PKG No - Unused -
ENHANCED_LAYER2_PKG No - Unused -
LAN_BASE_SERVICES_PKG Yes - In use Never -
LAN_ENTERPRISE_SERVICES_PKG No - Unused -
--------------------------------------------------------------------------------

NSWDCDE06# show module
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ---------------------- -----------
-
1 32 O2 32X10GE/Modular Universal Platfo N5K-C5548UP-SUP active *
2 16 O2 16 port flexible GEM N55-M16UP ok
3 0 O2 Daughter Card with L3 ASIC N55-D160L3-V2 ok

Mod Sw Hw World-Wide-Name(s) (WWN)
--- -------------- ------ ---------------------------------------------------
-
1 7.0(6)N1(1) 1.0 --
2 7.0(6)N1(1) 1.0 --
3 7.0(6)N1(1) 1.0 --

Mod MAC-Address(es) Serial-Num
--- -------------------------------------- ----------
1 8c60.4f94.ddc8 to 8c60.4f94.dde7 FOC1926048J
2 8c60.4f6b.9e00 to 8c60.4f6b.9e0f FOC19250JGX
3 0000.0000.0000 to 0000.0000.000f FOC19203DAL
NSWDCDE06# show lice usage
Feature Ins Lic Status Expiry Date Comments
Count
--------------------------------------------------------------------------------
FCOE_NPV_PKG No - Unused -
FM_SERVER_PKG No - Unused -
ENTERPRISE_PKG Yes - Unused Never -
FC_FEATURES_PKG Yes - Unused Never -
VMFEX_FEATURE_PKG No - Unused -
ENHANCED_LAYER2_PKG No - Unused -
LAN_BASE_SERVICES_PKG Yes - In use Never -
LAN_ENTERPRISE_SERVICES_PKG No - Unused -
--------------------------------------------------------------------------------

tsipoulanis · ‎10-05-2015

can that help us?

2015 Oct 5 18:26:47 NSWDCDE06 %ARP-3-DUP_VADDR_SRC_IP: arp [3420] Source address of packet received from 0000.0c07.ac0b on Vlan101(port-channel1) is duplicate of local virtual ip, 10.5.1.5
2015 Oct 5 18:26:57 NSWDCDE06 %ARP-3-DUP_VADDR_SRC_IP: arp [3420] Source address of packet received from 0000.0c9f.f00a on Vlan100(port-channel1) is duplicate of local virtual ip, 10.5.0.5

tsipoulanis · ‎10-05-2015

i dont know if that can help you,

NSWDCDE07# debug hsrp engine event protocol
NSWDCDE07# 2015 Oct 5 16:55:49.372639 hsrp: Vlan100[10/V4]: Hello Timer Expired
2015 Oct 5 16:55:50.272730 hsrp: Vlan100[10/V4]: Hello Timer Expired
2015 Oct 5 16:55:51.278419 hsrp: Vlan100[10/V4]: Hello Timer Expired
2015 Oct 5 16:55:52.182622 hsrp: Vlan100[10/V4]: Hello Timer Expired
2015 Oct 5 16:55:53.092660 hsrp: Vlan100[10/V4]: Hello Timer Expired
2015 Oct 5 16:55:54.003571 hsrp: Vlan100[10/V4]: Hello Timer Expired

Mark Malone · ‎10-05-2015

that's important, that means the hello packets are not reaching each other which means the HSRP will never form together, that would explain why its active on both sides and backups are unknown

have you set a vpc peer-link between these switches and allowed the vlans between them

tsipoulanis · ‎10-05-2015

yes there is a vPC peer link, thats why those devices are reachable.

they are connected only per peer link, and i can ping them, from one to the second one.

tsipoulanis · ‎10-05-2015

NSWDCDE06# show vpc brief
Legend:
(*) - local vPC is down, forwarding via vPC peer-link

vPC domain id : XX
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : secondary
Number of vPCs configured : 8
Peer Gateway : Enabled
Peer gateway excluded VLANs : -
Dual-active excluded VLANs : XXX-XXX
Graceful Consistency Check : Enabled
Auto-recovery status : Enabled (timeout = 240 seconds)

vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ --------------------------------------------------
1 Po1 up 100-XXX,XXX,XX,

vlan 100 is my VLAN

is the result from the follow command correct?

NSWDCDE06# show vpc 1

vPC status
----------------------------------------------------------------------------
id Port Status Consistency Reason Active vlans
------ ----------- ------ ----------- -------------------------- -----------

tsipoulanis · ‎10-05-2015

sorry, i think here is what you need,

NSWDCDE06# show vpc consistency-parameters interface port-channel 1
Note: **** Global type-1 parameters will be displayed for peer-link *****
Legend:
Type 1 : vPC will be suspended in case of mismatch

Name Type Local Value Peer Value
------------- ---- ---------------------- -----------------------
QoS 2 ([], [], [], [], [], ([], [], [], [], [],
[]) [])
Network QoS (MTU) 2 (1538, 0, 0, 0, 0, 0) (1538, 0, 0, 0, 0, 0)
Network Qos (Pause) 2 (F, F, F, F, F, F) (F, F, F, F, F, F)
Input Queuing (Bandwidth) 2 (100, 0, 0, 0, 0, 0) (100, 0, 0, 0, 0, 0)
Input Queuing (Absolute 2 (F, F, F, F, F, F) (F, F, F, F, F, F)
Priority)
Output Queuing (Bandwidth) 2 (100, 0, 0, 0, 0, 0) (100, 0, 0, 0, 0, 0)
Output Queuing (Absolute 2 (F, F, F, F, F, F) (F, F, F, F, F, F)
Priority)
STP Mode 1 MST MST
STP Disabled 1 None None
STP MST Region Name 1 MST-AltDCDE MST-AltDCDE
STP MST Region Revision 1 1 1
STP MST Region Instance to 1
VLAN Mapping
STP Loopguard 1 Enabled Enabled
STP Bridge Assurance 1 Enabled Enabled
STP Port Type, Edge 1 Normal, Disabled, Normal, Disabled,
BPDUFilter, Edge BPDUGuard Enabled Enabled
STP MST Simulate PVST 1 Enabled Enabled
IGMP Snooping Group-Limit 2 4000 4000
Allowed VLANs - 100 ,1,900 100,1,900

Local suspended VLANs - - -

HSRP Active local, Standby unknown