Re: nexus vpc keep alive failed

Manish Manwal · ‎08-15-2023

we are receiving error message in Nexus switch

%VPC-2-PEER_KEEP_ALIVE_RECV_FAIL: In domain 1, VPC peer keep-alive receive has failed.

the vpc peer keep-alive link is a port channel. previously we have shutdown one port in port channel and the we did not received any error message. we have had some doubt about sfp issue so we swapped the sfp but error continues.

switch nexus 3500

Software
BIOS: version 4.2.0
NXOS: version 9.2(2)
BIOS compile time: 09/23/2017
NXOS image file is: bootflash:///nxos.9.2.2.bin
NXOS compile time: 11/4/2018 21:00:00 [11/05/2018 06:11:06]

Hardware
cisco Nexus3500 C3548P-10GX Chassis
Intel(R) Pentium(R) CPU @ 2.00GHz with 4030540 kB of memory.
Processor Board ID FOC253526BK

Device name: abc
bootflash: 3800064 kB
usb1: 0 kB (expansion flash)
usb2: 0 kB (expansion flash)

THANKS
MANISH MANWAL

MHM Cisco World · ‎08-15-2023

I send you message.

Manish Manwal · ‎08-15-2023

i just replied.

THANKS
MANISH MANWAL

M02@rt37 · ‎08-15-2023

Hello @Manish Manwal,

Best practices:

The peer keep alive vpc sends heartbeat messages between vPC peers. It is a L3 link, and should be a part of a dedicated VRF. The keep alive link should never be a VLAN on the peer-link.

There are three ways to configure the keepalive link:

A single link between the switches, or several links in a port channel
A single link between the switches, between the management ports
Connecting through existing layer-3 infrastructure, such as an out-of-band management network. This may also use the management ports.

Could you please share the configuration of that peer keep alive on your two Nexus?

Also the output of these commands:

#show vpc

#show vpc peer-keepalive

Trooblshooting vPC: https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/103x/troubleshooting/cisco-nexus-9000-series-nx-os-troubleshooting-guide-release-103x/m-troubleshooting-vpcs.pdf&ved=2ahUKEwjt...

Thanks.

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

Manish Manwal · ‎08-15-2023

feature vpc

vpc domain 1
peer-switch
role priority 4000
system-priority 4000
peer-keepalive destination 192.168.1.2 source 192.168.1.1 vrf vpc-peer-keepalive
delay restore 120
peer-gateway

interface port-channel3
vpc 3

interface port-channel11
vpc 11

interface port-channel12
vpc 12

interface port-channel13
vpc 13

interface port-channel14
vpc 14

interface port-channel15
vpc 15

interface port-channel16
vpc 16

interface port-channel21
vpc peer-link
******************************************************************************************************************
swc1# sh vpc
Legend:
(*) - local vPC is down, forwarding via vPC peer-link

vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : secondary
Number of vPCs configured : 7
Peer Gateway : Enabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Disabled
Delay-restore status : Timer is off.(timeout = 120s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ -------------------------------------------------
1 Po21 up 1,22,100

vPC status
----------------------------------------------------------------------------
Id Port Status Consistency Reason Active vlans
-- ------------ ------ ----------- ------ ---------------
3 Po3 down* Not Consistency Check Not -
Applicable Performed
11 Po11 up success success 100

12 Po12 up success success 100

13 Po13 down* success success -

14 Po14 down* success success -

15 Po15 down* Not Consistency Check Not -
Applicable Performed
16 Po16 down* Not Consistency Check Not -
Applicable Performed

Please check "show vpc consistency-parameters vpc <vpc-num>" for the
consistency reason of down vpc and for type-2 consistency reasons for
any vpc.

**********************************************************************************************************************
swc1# sh vpc peer-keepalive

vPC keep-alive status : peer is alive
--Peer is alive for : (13865) seconds, (153) msec
--Send status : Success
--Last send at : 2023.08.15 12:43:48 122 ms
--Sent on interface : Po20
--Receive status : Success
--Last receive at : 2023.08.15 12:43:48 123 ms
--Received on interface : Po20
--Last update from peer : (0) seconds, (723) msec

vPC Keep-alive parameters
--Destination : 192.168.1.2
--Keepalive interval : 1000 msec
--Keepalive timeout : 5 seconds
--Keepalive hold timeout : 3 seconds
--Keepalive vrf : vpc-peer-keepalive
--Keepalive udp port : 3200
--Keepalive tos : 192
**************************************************************************************************************************
Switch 2: show running-config vpc

!Time: Tue Aug 15 12:45:01 2023

version 9.2(2) Bios:version 4.2.0
feature vpc

vpc domain 1
peer-switch
role priority 4000
system-priority 4000
peer-keepalive destination 192.168.1.1 source 192.168.1.2 vrf vpc-peer-keepalive
delay restore 120
peer-gateway

interface port-channel11
vpc 11

interface port-channel12
vpc 12

interface port-channel13
vpc 13

interface port-channel14
vpc 14

interface port-channel15
vpc 15

interface port-channel16
vpc 16

interface port-channel21
vpc peer-link
*********************************************************************************************************************
SW2# sh vpc
Legend:
(*) - local vPC is down, forwarding via vPC peer-link

vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : success
vPC role : primary
Number of vPCs configured : 6
Peer Gateway : Enabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Disabled
Delay-restore status : Timer is off.(timeout = 120s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ -------------------------------------------------
1 Po21 up 1,22,100

vPC status
----------------------------------------------------------------------------
Id Port Status Consistency Reason Active vlans
-- ------------ ------ ----------- ------ ---------------
11 Po11 up success success 100

12 Po12 up success success 100

13 Po13 up success success 22

14 Po14 up success success 22

15 Po15 down* success success -

16 Po16 down* success success -

Please check "show vpc consistency-parameters vpc <vpc-num>" for the
consistency reason of down vpc and for type-2 consistency reasons for
any vpc.
*******************************************************************************************************************************
swc2# sh vpc peer-keepalive

vPC keep-alive status : peer is alive
--Peer is alive for : (12986) seconds, (264) msec
--Send status : Success
--Last send at : 2023.08.15 12:45:13 244 ms
--Sent on interface : Po20
--Receive status : Success
--Last receive at : 2023.08.15 12:45:13 245 ms
--Received on interface : Po20
--Last update from peer : (0) seconds, (103) msec

vPC Keep-alive parameters
--Destination : 192.168.1.1
--Keepalive interval : 1000 msec
--Keepalive timeout : 5 seconds
--Keepalive hold timeout : 3 seconds
--Keepalive vrf : vpc-peer-keepalive
--Keepalive udp port : 3200
--Keepalive tos : 192

THANKS
MANISH MANWAL

M02@rt37 · ‎08-15-2023

Thanks @Manish Manwal,

vPC peer keepalive seem to be OK!

vPC keep-alive status : peer is alive
Configuration consistency status : success

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

M02@rt37 · ‎08-15-2023

Also please share the configuration of Po20.

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

Manish Manwal · ‎08-15-2023

Switch2:
interface port-channel20
description s1 po20 :: po20 s2 VPC peer-keepalive
no switchport
mtu 9216
vrf member vpc-peer-keepalive
ip address 192.168.1.1/30
_____________________________________________________

SWitch 1:

interface port-channel20
description s2 po20 :: po20 s1 VPC peer-keepalive
no switchport
mtu 9216
vrf member vpc-peer-keepalive
ip address 192.168.1.2/30

THANKS
MANISH MANWAL

M02@rt37 · ‎08-15-2023

@Manish Manwal,

Your vpc peer keepalive seems to be OK @Manish Manwal, regarding the output you share.

vPC keep-alive status : peer is alive
Configuration consistency status : success

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.

M02@rt37 · ‎08-15-2023

@Manish Manwal, come back to us after Cisco TAC advices/feedback.

Thanks.

Best regards
.ı|ı.ı|ı. If This Helps, Please Rate .ı|ı.ı|ı.