SVI unreachable through vPC Port-Channel

[O.Zang]

Hello Team

can you please help on this ?

I can't ping the SVI on the N7K (192.168.69.250/24) a peer  when both vpc peer are up.

The  ping on the vlan 99 on the N7K (192.168.69.250/24) work fine when either NEXUS-PRIMAIRE or NEXUS-SECONDAIRE is powerd off.

I checked:

- STP is in forwarding state for Both N3K.

- int vlan 99 is up

- I tried HSRP option, but ping still does not work when both N3K are up.

- I tried by removing the VLAN 99 from Peer-link allowed vlan  but ping still does not work when both N3K are up.

PS: I have some server running on different vlan  connected to the N3K that working fine. N7K is the core router.

interface Vlan99
no shutdown
no ip redirects
ip address 192.168.69.242/24

NEXUS-PRIMAIRE# sh run

!Command: show running-config

ip route 0.0.0.0/0 192.168.69.250
Vlan 99

interface Vlan99
no shutdown
ip address 192.168.69.242/24

interface Ethernet1/45
description *** VPC PEER LINKS ***
switchport mode trunk
speed 10000
bandwidth 1000000
channel-group 78 mode active

interface Ethernet1/46
description *** VPC PEER LINKS ***
switchport mode trunk
channel-group 78 mode active

interface Ethernet1/47
description *** L3 VPC KEEPALIVE LINKS ***
no switchport
speed 10000
duplex full
--More--
vrf member keepalive
ip address 1.1.1.1/30

interface Ethernet1/48
description *** Connected to N7K router ****
switchport mode trunk
switchport trunk native vlan 496
switchport trunk allowed vlan 99,496,499
channel-group 48 mode active

interface Ethernet1/49
no shutdown

interface Ethernet1/50
description *** Connected to N7K ROUTER ***
switchport mode trunk
channel-group 50 mode active
no shutdown

NEXUS-PRIMAIRE#

NEXUS-SECONDAIRE# sh run

!Command: show running-config

ip route 0.0.0.0/0 192.168.69.250
Vlan 99

interface Vlan99
no shutdown
ip address 192.168.69.243/24

interface Ethernet1/45
description *** VPC PEER LINKS ***
switchport mode trunk
speed 10000
bandwidth 1000000
channel-group 78 mode active

interface Ethernet1/46
description *** VPC PEER LINKS ***
switchport mode trunk
channel-group 78 mode active

interface Ethernet1/47
description *** L3 VPC KEEPALIVE LINKS ***
no switchport
speed 10000
duplex full
--More--
vrf member keepalive
ip address 1.1.1.1/30

interface Ethernet1/48
description *** Connected to N7K router ****
switchport mode trunk
switchport trunk native vlan 496
switchport trunk allowed vlan 99,496,499
channel-group 48 mode active

interface Ethernet1/49
no shutdown

interface Ethernet1/50
description *** Connected to N7K ROUTER ***
switchport mode trunk
channel-group 50 mode active
no shutdown

NEXUS-SECONDAIRE#

[O.Zang]

Sorry here is the update of the second nexus as peer adress was not correct in up post.

NEXUS-PRIMAIRE#

NEXUS-SECONDAIRE# sh run

!Command: show running-config

ip route 0.0.0.0/0 192.168.69.250
Vlan 99

interface Vlan99
no shutdown
ip address 192.168.69.242/24

interface Ethernet1/45
description *** VPC PEER LINKS ***
switchport mode trunk
speed 10000
bandwidth 1000000
channel-group 78 mode active

interface Ethernet1/46
description *** VPC PEER LINKS ***
switchport mode trunk
channel-group 78 mode active

interface Ethernet1/47
description *** L3 VPC KEEPALIVE LINKS ***
no switchport
speed 10000
duplex full
--More--
vrf member keepalive
ip address 1.1.1.2/30

interface Ethernet1/48
description *** Connected to N7K router ****
switchport mode trunk
switchport trunk native vlan 496
switchport trunk allowed vlan 99,496,499
channel-group 48 mode active

interface Ethernet1/49
no shutdown

interface Ethernet1/50
description *** Connected to N7K ROUTER ***
switchport mode trunk
channel-group 50 mode active
no shutdown

NEXUS-SECONDAIRE#

[MHM Cisco World]

here is the way of ping  from primary to N7K SVI 
the ping is go from primary to N7K 

the echo reply is return from N7K to Primary SVI but N7K select the secondary port for this traffic,
the secondary receive the echo reply and drop it since it MAC/SVI for primary not for it.
How we can solve this issue?
peer-gateway in both N3K. 

[O.Zang]

Thanks for your reponse.

I juste tried  the peer-gateway in both N3K.

But this does not solve.

Thanks

[MHM Cisco World]

show mac

Also please confirm that you have command vpc under the trunk of both N3K toward N7K otherwise this trunk port-channel will be handle as normal port-channel not as vPC.

address table in N7K see if the SVI have Mac address or not. "please see the config above"