vPC configuration issue

[kalugotla1]

trying to configure vPC on nexus 5K running into issues.

                 PeerLink

Nexus5KA-----------------Nexus 5KB

    |                               |

    |                               |

Nexus2KA               Nexus2KB

                 |               |

                 Cisco Load Balancer

     Need to connect my cisco load balancer  interfaceGi1/1 --        interface Ethernet138/1/2 on nexus 2KA

                                                                  InterfaceGi1/2---interface Ethernet138/1/2 on nexus 2KB

need to configure vPC for the making load Balancer highly redundant

Here is the config i had on my 5Ks,able  to create a peer link and flex fabric ,but running into issues with vPC

looks like configured everything but vpc is not working.

Nexus 5K A:
vpc domain 2
  role priority 100
  system-priority 100
  peer-keepalive destination 10.18.168.72 source 10.18.168.71
interface port-channel101
  description PPPPPPPPPP-Eth 1/1, Eth 1/2-PPPPPPPPPPPPP
  switchport mode trunk
  vpc peer-link
  switchport trunk allowed vlan 1,10,200
  spanning-tree port type network
  speed 10000

interface port-channel110
  switchport mode trunk
  vpc 110
  switchport trunk allowed vlan 200

interface Ethernet1/1
  description PortChannelPortChannel 5kb 1/1,1/2 PortChannelPortChannel
  switchport mode trunk
  switchport trunk allowed vlan 1,10,200
  channel-group 101 mode active

interface Ethernet1/2
  description PortChannelPortChannel 5kb 1/1,1/2 PortChannelPortChannel
  switchport mode trunk
switchport trunk allowed vlan 1,10,200
  channel-group 101 mode active

fex 138
  pinning max-links 1
  description FEX0138

interface Ethernet1/38
  fex associate 138
  switchport mode fex-fabric

Nexus5KB:

vpc domain 2
  role priority 200
  system-priority 100
  peer-keepalive destination 10.18.168.71 source 10.18.168.72

interface port-channel101
  description PPPPPPPPPP-Eth 1/1, Eth 1/2-PPPPPPPPPPPPP
  switchport mode trunk
  vpc peer-link
switchport trunk allowed vlan 1,10,200
  spanning-tree port type network
  speed 10000

interface Ethernet1/1
  description PortChannelPortChannel 5ka 1/1,1/2 PortChannelPortChannel
  switchport mode trunk
  switchport trunk allowed vlan 1,10,200
  channel-group 101 mode active

interface Ethernet1/2
  description PortChannelPortChannel 5ka 1/1,1/2 PortChannelPortChannel
  switchport mode trunk
  switchport trunk allowed vlan 1,10,200
  channel-group 101 mode active

fex 138
  pinning max-links 1
  description FEX0138

interface Ethernet1/38
  fex associate 138
  switchport mode fex-fabric

ACE :

interface port-channel110
  switchport mode trunk
  switchport trunk allowed vlan 200

interface gigabitEthernet 1/1
  description conn to nex2kA
  switchport trunk allowed vlan 200

channel-group 110 mode active
  no shutdown
interface gigabitEthernet 1/2

  switchport trunk allowed vlan 200
  description conn to nex2kB

channel-group 110 mode active
  no shutdown

[andtoth]

Hi,

Could you please be a bit more specific about what issues you're observing?

Please paste the output of the following commands.

show port-channel summary

show vpc

show vpc consistency-parameters global

Best regards,

Andras

[kalugotla1]

Here is the output

sw5ka# sh vpc
Legend:
                (*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                   : 2  
Peer status                     : peer adjacency formed ok     
vPC keep-alive status           : peer is alive                
Configuration consistency status: success
vPC role                        : primary                      
Number of vPCs configured       : 2  
Peer Gateway                    : Disabled
Dual-active excluded VLANs      : -

vPC Peer-link status
---------------------------------------------------------------------
id   Port   Status Active vlans   
--   ----   ------ --------------------------------------------------
1    Po101  up     1,101-102,817,997                                      

vPC status
----------------------------------------------------------------------------
id     Port        Status Consistency Reason                     Active vlans
------ ----------- ------ ----------- -------------------------- -----------
110    Po110       down*  success     success                    -         
139    Po139       up     success     success                    1,101-102,8
                                                                 17,997  

5ka# show port-channel summary
Flags:  D - Down        P - Up in port-channel (members)
        I - Individual  H - Hot-standby (LACP only)
        s - Suspended   r - Module-removed
        S - Switched    R - Routed
        U - Up (port-channel)
--------------------------------------------------------------------------------
Group Port-       Type     Protocol  Member Ports
      Channel
--------------------------------------------------------------------------------
101   Po101(SU)   Eth      LACP      Eth1/1(P)    Eth1/2(P)   
110   Po110(SD)   Eth      LACP      Eth138/1/25(I) 
139   Po139(SU)   Eth      LACP      Eth1/39(P)   Eth1/40(P)

5ka# sh vpc consistency-parameters global

    Legend:
        Type 1 : vPC will be suspended in case of mismatch

Name                        Type  Local Value            Peer Value            
-------------               ----  ---------------------- -----------------------
QoS                         1     ([], [3], [], [], [],  ([], [3], [], [], [],
                                  [])                    [])                  
Network QoS (MTU)           1     (1538, 2240, 0, 0, 0,  (1538, 2240, 0, 0, 0,
                                  0)                     0)                   
Network Qos (Pause)         1     (F, T, F, F, F, F)     (F, T, F, F, F, F)   
Input Queuing (Bandwidth)   1     (50, 50, 0, 0, 0, 0)   (50, 50, 0, 0, 0, 0) 
Input Queuing (Absolute     1     (F, F, F, F, F, F)     (F, F, F, F, F, F)   
Priority)                                                                     
Output Queuing (Bandwidth)  1     (50, 50, 0, 0, 0, 0)   (50, 50, 0, 0, 0, 0) 
Output Queuing (Absolute    1     (F, F, F, F, F, F)     (F, F, F, F, F, F)   
Priority)                                                                     
STP Mode                    1     Rapid-PVST             Rapid-PVST           
STP Disabled                1     None                   None                 
STP MST Region Name         1     ""                     ""                   
STP MST Region Revision     1     0                      0                    
STP MST Region Instance to  1                                                 
VLAN Mapping                                                                 
STP Loopguard               1     Disabled               Disabled             
STP Bridge Assurance        1     Enabled                Enabled              
STP Port Type, Edge         1     Normal, Disabled,      Normal, Disabled,    
BPDUFilter, Edge BPDUGuard        Disabled               Disabled             
STP MST Simulate PVST       1     Enabled                Enabled              
Allowed VLANs               -     1,101-102,817,997      1,101-102,817,997    
Local suspended VLANs       -     -                      -                    
s0labsw5ka#

[eshinjiryu]

Hi

Do you have vlan 200 allowed through your peer-links (port101)? I do see it on your initial configs but then again I did not see other vlans allowed like you have here so did you change you initial configuration or is that just a partial configuration to show that you do have those vlans going through?

interface port-channel101
  description PPPPPPPPPP-Eth 1/1, Eth 1/2-PPPPPPPPPPPPP
  switchport mode trunk
  vpc peer-link
  switchport trunk allowed vlan 1,10,200
  spanning-tree port type network
  speed 10000

----------------------------------------------------------------------

1    Po101  up     1,101-102,817,997 

Second question is are you using a ACE4710 appliance?  If so I thought LACP and PAGP was not supported on them. (see ACE 4710 Design Guide.pdf)

The way we have our LB connected to our Nexus in a vPC is that we have our ACE 4710 configured in port-channel mode on not using LACP and on our Nexus we have it also on port-channel mode on.  It works fine.

interface Eth138/1/25

channel-group 110 mode on

hope this helps....

-E

[eshinjiryu]

--

[kalugotla1]

Yes ,Vlan200 is trunked between the peers.

[kalugotla1]

Emil Versoza

Configured port channel on ACE1 .

interface gigabitEthernet 1/1
  description conn to nex2kA
  channel-group 110
  no shutdown
interface gigabitEthernet 1/2
  description conn to nex2kB
  channel-group 110
  no shutdown

interface port-channel 110
  switchport trunk allowed vlan 817
  no shutdown

I am struck with another issue i.e ,How to setup the standby ACE for vPC ,as initially ,I though of creating another portchannel on my nexus for ACE2,but later on realised that it will have the exact copy of config as that of active.

If the active fails ,how will the standby takeover on the nexus5K with vPC on please help me.

[eshinjiryu]

Hi Kalugotla1

you are right go ahead on the nexus create another vPC for the standby ACE.  The ACEs will communicate thru the FT Vlan if active is unresponsive a switchover will occur.

hope this helps.