VSS to vPC Layer 3 over Encryptors

[colin.magee]

I am looking for help with L3 connectivity between a Catalyst VSS pair and Nexus vPC pair. The connections must transport L3 IP encryptors. The attached diagram shows the physical connections.Any thoughts on this model and advice on the L3 configuration and best practice?

[Reza Sharifi]

Usually best practice is to connect each device to both 6500 switches in a VSS environment, but since the encryption devices have only 2 port (one encrypted and one cipher) this is not possible.  So you would need to do some good fail over testing before deploying this.

HTH