Problem with Nexus5548UP in a VPC and ICMP Ping

[M.Fly]

Good morning,

i have a question about the behavior of a 2 Nexus 5548UP, compared to a CISCO C3850 in stacking pair.

As described in a topology attached, i have a node with ESXi, not LACP but static etherchannel with teaming on the NIC, connected to a couple of Nexus 5548UP with VPC configured and running.

The ESXi is attached on a orphan port because no LACP possible due to license level.

If i ping 8.8.8.8, 100% packet loss from a VM into ESXi, but i reach the VM in SSH or HTTP.

If i switch the NX5K with a stack of 2 3850, same topology and same other device, ping is OK and no problem with ICMP

I do not understand why ping is not running properly with the NX5K.

[MHM Cisco World]

...

[M.Fly]

It's not clear for me, apologize me.

The ESXi host is on port that is in access mode on VLAN, this VLAN is in VPC and run in VPC like other port.

The host has only one port active, no LACP, so the second port is in standby and not have any MAC address.

The active port acts like a orphan port? Or not, because the second standby port is physical up?

Can i configure port channel Nexus side, and leave teaming configuratione un ESXi host side?

Many thanks.

[MHM Cisco World]

https://www.fragmentationneeded.net/2012/01/nexus-vpc-orphan-ports.html

[MHM Cisco World]

no LACP meaning it connect Active/Standby,

do you config peer-gateway?

[M.Fly]

No, i have not config peer-gateway under vpc domain 1

Can peer-gateway solve the issue?

If yes, i don't understand why.

[MHM Cisco World]

[marce1000]

@MHM Cisco World ??? Seriously , 3 dots , as  an experienced member of the forum , ypu should

realize that your are confusing everybody

 N;

[paul driver]

Hello

---

@M.Fly wrote:

The ESXi is attached on a orphan port because no LACP possible due to license level.

---

A Orphan port is that of an device that's NOT attached to any VPC but you say at present the ESXI device is and its not working
Remove that attached ESXI from the VPC and just attach them back singularly (no VPC) append the following to each peer port then test again.

int x/x
vpc orphan-port suspend

[M.Fly]

The ESXi port is not in VPC port, is on orphan port, the config is:

interface Ethernet1/9
  description 10G-LINK-ucs01|->LOMport2-RAME
  switchport mode trunk
  switchport trunk allowed vlan 9-11

There is other orphan port like ASA Device:

interface Ethernet1/5
  description 1G-LINK-fwASA02-outside|->Gi0/0-RAME
  switchport access vlan 10

All of this port is not configured like port-channel, but the VLAN belongs to this port is in the vPC, i'm still confused...

[paul driver]

Hello

As a test relocate the EXSI onto the VPC primary switch and see it if works, if connectivity is successful then append as stated by @MHM Cisco World peer gateway, also append vpc orphan-port suspend to the access port.

[M.Fly]

Now we have placed a test lab and try to reproduce the behavior.

One thing, i do not have any L3 on the couple of Nexus 5548UP, only switching pourpose.

Follow up with the test results soon.

Many thanks to all.

[MHM Cisco World]

If there is no L3 then check the STP block port in both side of NSK peer.

[M.Fly]

There's no possible STP block port, are orphan port and there's no port in BLK status.

I try with a test lab soon, and follow up with the results

[MHM Cisco World]

OK, can you check if vPC port member is suspend in one Nexus Peer. 

Note:- when do LAB try config L2 connection between two Peer carry the VLAN of Server instead of config it as orphan.

CCIE DC why we must not config orphan with Host not attach to both NSK or Host use primary/standby link to both NSK.

https://ccierants.blogspot.com/2013/07/ccie-dc-two-advanced-vpc-concepts.html