04-07-2021 09:28 PM
Hello Team
can you please help on this ?
I can't ping the SVI on the N7K (192.168.69.250/24) a peer when both vpc peer are up.
The ping on the vlan 99 on the N7K (192.168.69.250/24) work fine when either NEXUS-PRIMAIRE or NEXUS-SECONDAIRE is powerd off.
I checked:
- STP is in forwarding state for Both N3K.
- int vlan 99 is up
- I tried HSRP option, but ping still does not work when both N3K are up.
- I tried by removing the VLAN 99 from Peer-link allowed vlan but ping still does not work when both N3K are up.
PS: I have some server running on different vlan connected to the N3K that working fine. N7K is the core router.
interface Vlan99
no shutdown
no ip redirects
ip address 192.168.69.242/24
NEXUS-PRIMAIRE# sh run
!Command: show running-config
ip route 0.0.0.0/0 192.168.69.250
Vlan 99
interface Vlan99
no shutdown
ip address 192.168.69.242/24
interface Ethernet1/45
description *** VPC PEER LINKS ***
switchport mode trunk
speed 10000
bandwidth 1000000
channel-group 78 mode active
interface Ethernet1/46
description *** VPC PEER LINKS ***
switchport mode trunk
channel-group 78 mode active
interface Ethernet1/47
description *** L3 VPC KEEPALIVE LINKS ***
no switchport
speed 10000
duplex full
[7m--More--[m
vrf member keepalive
ip address 1.1.1.1/30
interface Ethernet1/48
description *** Connected to N7K router ****
switchport mode trunk
switchport trunk native vlan 496
switchport trunk allowed vlan 99,496,499
channel-group 48 mode active
interface Ethernet1/49
no shutdown
interface Ethernet1/50
description *** Connected to N7K ROUTER ***
switchport mode trunk
channel-group 50 mode active
no shutdown
NEXUS-PRIMAIRE#
NEXUS-SECONDAIRE# sh run
!Command: show running-config
ip route 0.0.0.0/0 192.168.69.250
Vlan 99
interface Vlan99
no shutdown
ip address 192.168.69.243/24
interface Ethernet1/45
description *** VPC PEER LINKS ***
switchport mode trunk
speed 10000
bandwidth 1000000
channel-group 78 mode active
interface Ethernet1/46
description *** VPC PEER LINKS ***
switchport mode trunk
channel-group 78 mode active
interface Ethernet1/47
description *** L3 VPC KEEPALIVE LINKS ***
no switchport
speed 10000
duplex full
[7m--More--[m
vrf member keepalive
ip address 1.1.1.1/30
interface Ethernet1/48
description *** Connected to N7K router ****
switchport mode trunk
switchport trunk native vlan 496
switchport trunk allowed vlan 99,496,499
channel-group 48 mode active
interface Ethernet1/49
no shutdown
interface Ethernet1/50
description *** Connected to N7K ROUTER ***
switchport mode trunk
channel-group 50 mode active
no shutdown
NEXUS-SECONDAIRE#
04-07-2021 09:31 PM
Sorry here is the update of the second nexus as peer adress was not correct in up post.
NEXUS-PRIMAIRE#
NEXUS-SECONDAIRE# sh run
!Command: show running-config
ip route 0.0.0.0/0 192.168.69.250
Vlan 99
interface Vlan99
no shutdown
ip address 192.168.69.242/24
interface Ethernet1/45
description *** VPC PEER LINKS ***
switchport mode trunk
speed 10000
bandwidth 1000000
channel-group 78 mode active
interface Ethernet1/46
description *** VPC PEER LINKS ***
switchport mode trunk
channel-group 78 mode active
interface Ethernet1/47
description *** L3 VPC KEEPALIVE LINKS ***
no switchport
speed 10000
duplex full
[7m--More--[m
vrf member keepalive
ip address 1.1.1.2/30
interface Ethernet1/48
description *** Connected to N7K router ****
switchport mode trunk
switchport trunk native vlan 496
switchport trunk allowed vlan 99,496,499
channel-group 48 mode active
interface Ethernet1/49
no shutdown
interface Ethernet1/50
description *** Connected to N7K ROUTER ***
switchport mode trunk
channel-group 50 mode active
no shutdown
NEXUS-SECONDAIRE#
04-08-2021 04:53 AM
here is the way of ping from primary to N7K SVI
the ping is go from primary to N7K
the echo reply is return from N7K to Primary SVI but N7K select the secondary port for this traffic,
the secondary receive the echo reply and drop it since it MAC/SVI for primary not for it.
How we can solve this issue?
peer-gateway in both N3K.
04-08-2021 06:57 AM
Thanks for your reponse.
I juste tried the peer-gateway in both N3K.
But this does not solve.
Thanks
04-09-2021 06:18 PM - edited 04-09-2021 06:23 PM
show mac
Also please confirm that you have command vpc under the trunk of both N3K toward N7K otherwise this trunk port-channel will be handle as normal port-channel not as vPC.
address table in N7K see if the SVI have Mac address or not. "please see the config above"
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide