Nexus - vPC Consistency Issue Secondary IP address does not match

[RaulTamamesRevilla12530]

Hi

I have a strange issue that I'm not able to figure out by myself

I have 1x25G ports connected back to back  inside vrf VPC_KEEPALIVE as peer-keepalive and that works fine. 

And i use PO255 like vpc Keepalive

interface Ethernet1/48
description "Peer KeepAlive "
no switchport
vrf member VPC_KEEPALIVE
ip address 10.100.5.129/30
no shutdown

interface port-channel255
description "Po255 vPC KEEPALIVE"
switchport mode trunk
spanning-tree port type network
vpc peer-link

Then I have vpc domain coniguration as follow:

vpc domain 10
peer-switch
role priority 150
system-priority 150
peer-keepalive destination 10.100.5.130 source 10.100.5.129 vrf VPC_KEEPALIVE
peer-gateway
auto-recovery
ip arp synchronize

After that vPC is formed but i have and error:

Legend:
(*) - local vPC is down, forwarding via vPC peer-link

vPC domain id : 10
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : failed
Per-vlan consistency status : success
Configuration inconsistency reason: Secondary IP address does not match
Type-2 consistency status : success
vPC role : primary
Number of vPCs configured : 16
Peer Gateway : Enabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Enabled, timer is off.(timeout = 240s)
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled
Virtual-peerlink mode : Disabled

Any ideas?

[MHM Cisco World]

show vpc consistency-parameters <<- do this command 
there are many reason such as 
you allow some vlan in one side not in both 
you not config SVI for some VLAN in one side 
do the command above and check why the consistency failure 

[balaji.bandi]

what models ? what nexus code ?  Can you post same output from other device also.

along with can you post below information :

#show vpc consistency-parameters global

[RaulTamamesRevilla12530]

Sorry, it was my mistake.
The problem was that I had not assigned a second ip to the nve source loopback
Now it works correctly
the correct configuration is this:
interface nve1
source-interface loopback1

interface loopback1
ip address 10.100.5.5/32
ip address 10.100.5.7/32 secondary

Now VPC works fine
vPC domain id : 10
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : primary, operational secondary
Number of vPCs configured : 16
Peer Gateway : Enabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Enabled, timer is off.(timeout = 240s)
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled
Virtual-peerlink mode : Disabled

Thanks for your support

[agus.siswanto]

hi is there any reason that why i should put secondary ip on lo1 ??

[balaji.bandi]

hi is there any reason that why i should put secondary ip on lo1 ??

not sure the context here.

suggest to open new topic, if you looking to refer this topic and explaining your environment.

check bottom how you can help community asking the right format of question.