Port channel between Catalyst 3850 VS and Nexus 9k vpc

[Graham Murison]

I am struggling with getting a port-channel between two Catalyst 3850's in a Virtual stack connected with two Nexus 9k switches.
NOTE: since this is for a transition to a new network there is not a direct link between the switches.  It's old building and the patch panel is cat5. 
Nexus status and config:
sh vpc brief
Legend:
(*) - local vPC is down, forwarding via vPC peer-link

vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency status : success
Per-vlan consistency status : success
Type-2 consistency status : failed
Type-2 inconsistency reason : SVI type-2 configuration incompatible
vPC role : primary
Number of vPCs configured : 9
Peer Gateway : Disabled
Dual-active excluded VLANs : -
Graceful Consistency Check : Enabled
Auto-recovery status : Disabled
Delay-restore status : Timer is off.(timeout = 30s)
Delay-restore SVI status : Timer is off.(timeout = 10s)
Operational Layer3 Peer-router : Disabled
Virtual-peerlink mode : Disabled

vPC Peer-link status
---------------------------------------------------------------------
id Port Status Active vlans
-- ---- ------ -------------------------------------------------
1 Po210 up 1-2,4,20,40,90,102-103,105-106,201-202,500-501

vPC status
----------------------------------------------------------------------------
Id Port Status Consistency Reason Active vlans
-- ------------ ------ ----------- ------ ---------------
5 Po5 down* success success -

10 Po10 up success success 1-2,4,40,90,
102-103,105-106,
201-202,500-501
101 Po101 up success success 1,201

show vpc consistency-parameters vpc 5

Legend:
Type 1 : vPC will be suspended in case of mismatch

Name Type Local Value Peer Value
------------- ---- ---------------------- -----------------------
MTU 1 - 1500
STP Port Guard 1 Default Default
STP Port Type 1 Default Default
STP MST Simulate PVST 1 Default Default
Allow-Multi-Tag 1 Disabled Disabled
Vlan xlt mapping 1 Disabled Disabled
vPC card type 1 N9K TOR N9K TOR
Allowed VLANs - 20 20
Local suspended VLANs - - -

sh int po5
port-channel5 is down (No operational members)
admin state is up,
vPC Status: Down, vPC number: 5 [packets forwarded via vPC peer-link]
Hardware: Port-Channel, address: 0000.0000.0000 (bia 0000.0000.0000)
Description: Port channel to sw-fl2-aggr-01
MTU 1500 bytes, BW 100000 Kbit , DLY 10 usec
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, medium is broadcast
Port mode is trunk
auto-duplex, 1000 Mb/s

interface port-channel5
description Port channel to sw-fl2-aggr-01
switchport mode trunk
switchport trunk allowed vlan 20
speed 1000
vpc 5

interface Ethernet1/47
description Uplink to sw-fl2-aggr-01
switchport mode trunk
switchport trunk allowed vlan 20
speed 1000
channel-group 5 mode active
no shutdown

sw-fl2-aggr-01#sh int po 5
Port-channel5 is down, line protocol is down (notconnect)
Hardware is EtherChannel, address is 0000.0000.0000 (bia 0000.0000.0000)
Description: Port Channel to SW-FL1-SAN-01
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Auto-duplex, Auto-speed, link type is auto, media type is
input flow-control is on, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
sw-fl2-aggr-01#sh int po5
Port-channel5 is down, line protocol is down (notconnect)
Hardware is EtherChannel, address is 0000.0000.0000 (bia 0000.0000.0000)
Description: Port Channel to SW-FL1-SAN-01
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Auto-duplex, Auto-speed, link type is auto, media type is
input flow-control is on, output flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
sw-fl2-aggr-01#sh run int po5
Building configuration...

Current configuration : 215 bytes
!
interface Port-channel5
description Port Channel to SW-FL1-SAN-01
switchport trunk native vlan 777
switchport trunk allowed vlan 20
switchport mode trunk
switchport nonegotiate
spanning-tree guard root
end

sw-fl2-aggr-01#sh run int t1/0/1
Building configuration...

Current configuration : 261 bytes
!
interface TenGigabitEthernet1/0/1
description Uplink to SW-FL2-SAN-01
switchport trunk native vlan 777
switchport trunk allowed vlan 20
switchport mode trunk
switchport nonegotiate
speed 1000
channel-group 5 mode passive
spanning-tree guard root
end

I have a port channel working between the Nexus switches and a C3650 stack and tried to match the config, but no resolution.

Am I missing something glaring?

[Christopher Hart]

Hello!

Can you show us the output of the show interface Ethernet1/47 command from the Nexus switch, as well as the output of the show interface TenGigabitEthernet1/0/1 command from the Catalyst switch? The output of the show port-channel summary interface port-channel5 command from the Nexus switch and the output of the show etherchannel summary command from the Catalyst switch would also be useful.

Thank you!

-Christopher

[MHM Cisco World]

Type-2 consistency status : failed
Type-2 inconsistency reason : SVI

This type-2 occurs when you dont config SVI for vpc vlan in one nsk pair.

Also check stp do you see PO?

[Reza Sharifi]

When you say "Virtual stack ", you mean StackWise Virtual or traditional stack?

Also, there is something wrong with vPC config:

Type-2 consistency status : failed
Type-2 inconsistency reason : SVI type-2 configuration incompatible

HTH

[M02@rt37]

Hello @Graham Murison,

There is a mismatch in the native VLAN configuration between the Nexus 9k switches and the Catalyst 3850 stack. One side has a native VLAN configured, while the other side does not have the "native VLAN" command.

You need to ensure that the native VLAN configurations match on both sides. To go further Po5 on the two Nexus have to be exactly with the same config.

[Graham Murison · Accepted solution]

Thank you for the replies.  
C3850 is in virtual stack.  After updating the vPC config as advised, no change.

I did discover a really newbie move on my part.  The sfp is supported on all models of the C3850, except for the one I have installed and I missed this.  Even "no errdisable detect cause gbic-invalid" has not helped recover the interface to bring in up.

Working out a different cabling solution to connect the NEXUS to the Catalyst Virtual Stack

[Graham Murison]

For anyone looking at this post after the fact I have ended up getting a couple CVR-QSFP-SFP10G and am running fiber between the switches.  My original issue was that I had limited cabling between the IT closet and the lab room