I'm not sure man. It doesn't appear to be an OTV issue since we're not even learning the mac address from the host. I've only seen this in two situations: A missconfiguration of the LAN port on either the otv switch or the downstream switch. Or a "silent host" that relies on unknown unicast flooding. Microsoft NLB in unicast mode works that way. In that case a static mac entry is required on the otv Edge device. Good luck. When I get a chance I'll lab it up to verify the config, but it looks ok. ... View more

Can you confirm it is spanning-tree forwarding on the connected switch (sh spann vlan 100)? ... View more

Thanks, can you dump the mac address tables on the ASRs to see if they're learning the macs from your switch? ... View more

Can you provide the output of: sh otv sh otv vlan sh otv route vlan 100   Also just to confirm, did you verify with a ping that the connection between the ASRs supports larger MTUs? ping x.x.x.x size 1542 df-bit ... View more

Check out EEM Scripting: https://supportforums.cisco.com/community/5941/eem-scripting http://blog.ine.com/2010/01/18/eem-demystified-part-1/   ... View more

When I first looked at it I thought  DM_INLINE_TCP_242_443 was a protocol group you had defined somewhere else but not included in the snippet. From your revision it looks like you're calling the network group where the port # or service group should be. I think what you're looking for is something like this:   object network 1.1.1.68_OWA  host 1.1.1.68 object network TCP_OWA_242_443  host 192.168.168.242  nat (inside,outside) static 1.1.1.68_OWA service tcp https https access-list outside_inbound extended permit tcp any object TCP_OWA_242_443 eq https   ... View more

that should do it. You don't really need the port translation if you just want to do a one-to-one mapping. so it would look like this:   object network TCP_OWA_242_443  host 192.168.168.242  nat (inside,outside) static 1.1.1.68 ... View more

I don't know of an easy way to do it since ASA doesn't have Kron. I can think of a couple not-so-easy ways though: From a NMS platform (CiscoWorks/LMS, Rancid maybe??) schedule a job to run every x minutes to dump the cap and redirect it to a tftp server or a local file Even more ghetto, if you use a terminal app like SecureCRT that can run VBScripts, create a vbscript to do the same thing (periodically log in and dump the cap with a redirect) There's probably an easier way, I tend to over-think simple issues >< good luck! ... View more

2nd what Richard said. This is a good idea anyways if you ever plan on running DCNM as it will ONLY connect via mgmt0. Sent from Cisco Technical Support Android App ... View more

What model of 5K do you have? Sent from Cisco Technical Support Android App ... View more

What's happening exactly when you attempt the connection? Perhaps your VPN traffic passes through a proxy? Sent from Cisco Technical Support Android App ... View more

Actually, the link I sent you isn't the document I used when I did my deployments. I didn't bother to look down at the content assuming it was the same. What is odd is the URL I originally sent you does in fact have both VSANs on the vPC. The PDF I used at the beginning of this year for my deployments does not. Here it is: https://dl.dropboxusercontent.com/u/26091129/flexpod_vsphere_50_M3.pdf So if you take a look at Po11 of the nexus config in the appendix of that guide, which is the port channel to the NetApp array, you can see that on 5K1 it has only fcoe vlan 101, on 5K2 it has only fcoe vlan 102. Again, I don't know that it's causing you any troubles maybe not; that's just how I did it based on the design guide, which seems to be different than the current design guide. Good luck, I'm interested to hear what you find. ... View more