Traffic passing through suspended etherchannel member

[abimadaro4462]

Hello,

I have two nexus 9K switches with vPC configured, the upstream is connected to FWs, the downstream is connected via port channel which is member of vPC, to a switch.

For testing when I'm shutting down the primary vPC switch, with a continuous ping from a host in the downstream to the firewall in the upstream, I'm loosing the ping.

vPC status is fine where the secondary is acting as an operational primary. The status of the port channel in the down stream switch is one link suspended (the one connected to the down vPC 9K switch member) and one is active. 

I have noticed that the traffic still going through the suspended link after capturing it!.

Any advice please?

[Reza Sharifi]

Hi,

Can you provide the 9k configs as well as the down stream switch where the Portchannel is connected? Are you using LACP or mode "on" on the Po?

HTH

[abimadaro4462]

Hello,

Here is the configuration;

vPC switch 1:

vpc domain 10
role priority 1
peer-keepalive destination 10.10.10.2 source 10.10.10.1 vrf vpcvrf

interface port-channel1
switchport mode trunk
spanning-tree port type network
vpc peer-link

interface port-channel2
switchport mode trunk
vpc 1

vPC Switch 2:

vpc domain 10
role priority 2
peer-keepalive destination 10.10.10.1 source 10.10.10.2 vrf vpcvrf

interface port-channel1
switchport mode trunk
spanning-tree port type network
vpc peer-link

interface port-channel2
switchport mode trunk
vpc 1

[abimadaro4462]

Here is the downstream switch configuration;

interface Port-channel2
switchport trunk encapsulation dot1q
switchport mode trunk

Etherchannel summary;

Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
2 Po2(SU) LACP Gi0/0(s) Gi0/1(P)

Traffic still goes through the suspended link!