Solved: Nexus 5K vpc peer setup

johartman · ‎08-11-2010

Hello, we are trying to configure a pair of Nexus 5K's and setup vpc peer link between them. When I issue the show vpc brief command, the peer-keepalive link is working fine, but the vpc peer relationship isn't coming active. I'm following the Cisco N5K config guide and have both sides of the 5K's config'd the same (except for the peer keepalive IP addresses) but can't seem to bring the vpc peer link active. Are there any vpc setup guides that anybody has found helpful? Thanks in advance for any suggestions, John

Dan-Ciprian Cicioiu · ‎08-11-2010

i think that vlan 1 should be allowed on trunk on both portchannels , not sure if it must be native.

Also the ip put for keep alive on interface mgmt0.

View solution in original post

Dan-Ciprian Cicioiu · ‎08-11-2010

Hi ,

could you post the output of

sh run vpc

also

sh vpc consistency-parameters global

Dan

johartman · ‎08-11-2010

Hello Dan....here is the output requested:

version 4.1(3)N2(1a)

feature vpc

vpc domain 100

peer-keepalive destination 172.29.217.1 source 172.29.217.2

interface port-channel5

vpc peer-link

Legend:

Type 1 : vPC will be suspended in case of mismatch

Name Type Local Value Peer Value

------------- ---- ---------------------- -----------------------

QoS 1 ([], [3], [], [], [], -

[])

Network QoS (MTU) 1 (1538, 2240, 0, 0, 0, -

0)

Network Qos (Pause) 1 (F, T, F, F, F, F) -

Input Queuing (Bandwidth) 1 (50, 50, 0, 0, 0, 0) -

Input Queuing (Absolute 1 (F, F, F, F, F, F) -

Priority)

Output Queuing (Bandwidth) 1 (50, 50, 0, 0, 0, 0) -

Output Queuing (Absolute 1 (F, F, F, F, F, F) -

Priority)

STP Mode 1 Rapid-PVST -

STP Disabled 1 None -

STP MST Region Name 1 "" -

STP MST Region Revision 1 0 -

STP MST Region Instance to 1 -

VLAN Mapping

STP Loopguard 1 Disabled -

STP Bridge Assurance 1 Enabled -

STP Port Type, Edge 1 Normal, Disabled, -

BPDUFilter, Edge BPDUGuard Disabled

STP MST Simulate PVST 1 Enabled -

Allowed VLANs - - -

Dan-Ciprian Cicioiu · ‎08-11-2010

Hello ,

Could you check that the Portchannel interface is up on both sides and the both portchannels are mode trunk , all the vlans allowed on trunk , and also feature lacp enabled

If it is ok for you to post also sh port-channel summary.

johartman · ‎08-11-2010

Thanks again for your help Dan...

SOCC-N5Kb# sh port-channel summary

Flags: D - Down P - Up in port-channel (members)

I - Individual H - Hot-standby (LACP only)

s - Suspended r - Module-removed

S - Switched R - Routed

U - Up (port-channel)

--------------------------------------------------------------------------------

Group Port- Type Protocol Member Ports

Channel

--------------------------------------------------------------------------------

1 Po1(SD) Eth NONE --

4 Po4(SU) Eth NONE Eth1/19(P) Eth2/1(D)

5 Po5(SU) Eth NONE Eth1/3(P) Eth1/4(P)

21 Po21(SD) Eth NONE --

100 Po100(SD) Eth NONE --

interface port-channel5

switchport mode trunk

switchport trunk native vlan 20

switchport trunk allowed vlan 10-20

vpc peer-link

spanning-tree port type network

speed 10000

SOCC-N5Ka# sh port-channel summary

Flags: D - Down P - Up in port-channel (members)

I - Individual H - Hot-standby (LACP only)

s - Suspended r - Module-removed

S - Switched R - Routed

U - Up (port-channel)

--------------------------------------------------------------------------------

Group Port- Type Protocol Member Ports

Channel

--------------------------------------------------------------------------------

1 Po1(SD) Eth NONE Eth2/2(D)

2 Po2(SD) Eth NONE --

3 Po3(SD) Eth NONE --

4 Po4(SD) Eth NONE Eth2/3(D) Eth2/4(D)

5 Po5(SU) Eth NONE Eth1/3(P) Eth1/4(P)

21 Po21(SD) Eth NONE --

nterface port-channel5

switchport mode trunk

switchport trunk native vlan 20

switchport trunk allowed vlan 10-20

vpc peer-link

spanning-tree port type network

Jayakrishna Mada · ‎08-11-2010

Hi,

On Nk5kb can you remove "speed 10000" and see if that resolves the issue, if not post the output of show vpc from both switches.

JayaKrishna

Dan-Ciprian Cicioiu · ‎08-11-2010

i think that vlan 1 should be allowed on trunk on both portchannels , not sure if it must be native.

Also the ip put for keep alive on interface mgmt0.

mwest · ‎09-30-2010

That solved my issue. I did not realize that the trunk mode had to be turned on with a VLAN enabled. After doing so, my peer link came right up. Thanks!!!

M

lewwalker · ‎08-11-2010

I'm currently working with John on this Nexus 5K config & I have updated the config on both device ensuring the speed 10000 match on each. Listed below are the results from the sho vpc consistency-parameters global

Name Type Local Value Peer Value

------------- ---- ---------------------- -----------------------

QoS                         1     ([], [3], [], [], [], ([], [3], [], [], [],
                                  [])                    [])
Network QoS (MTU)           1     (1538, 2240, 0, 0, 0, (1538, 2240, 0, 0, 0,
                                  0)                     0)
Network Qos (Pause)         1     (F, T, F, F, F, F)     (F, T, F, F, F, F)
Input Queuing (Bandwidth)   1     (50, 50, 0, 0, 0, 0)   (50, 50, 0, 0, 0, 0)
Input Queuing (Absolute     1     (F, F, F, F, F, F)     (F, F, F, F, F, F)
Priority)
Output Queuing (Bandwidth) 1     (50, 50, 0, 0, 0, 0)   (50, 50, 0, 0, 0, 0)
Output Queuing (Absolute    1     (F, F, F, F, F, F)     (F, F, F, F, F, F)
Priority)
STP Mode                    1     Rapid-PVST             Rapid-PVST
STP Disabled                1     None                   None
STP MST Region Name         1     ""                     ""
STP MST Region Revision     1     0                      0
STP MST Region Instance to 1

VLAN Mapping
STP Loopguard               1     Disabled               Disabled
STP Bridge Assurance        1     Enabled                Enabled
STP Port Type, Edge         1     Normal, Disabled,      Normal, Disabled,
BPDUFilter, Edge BPDUGuard        Disabled               Disabled
STP MST Simulate PVST       1     Enabled                Enabled
Allowed VLANs               -     1                      -

In additon, I can see the second device within the neighbor statements

Jayakrishna Mada · ‎08-11-2010

Hi,

Everything looks good there, can you still post "show vpc" from both switches.

JayaKrishna

lewwalker · ‎08-11-2010

it working..

sh vpc
Legend:
(*) - local vPC is down, forwarding via vPC peer-link

vPC domain id                   : 100
Peer status                     : peer adjacency formed ok
vPC keep-alive status           : peer is alive
Configuration consistency status: success
vPC role                        : primary

It appear that once I added VLAN 1 into the trunk leaving the speed @ 10000 everything appeared to respond..

johartman · ‎08-11-2010

Adding VLAN1 was the missing element! Thank you Dan and Jaya for your knowledge and input!!!

Jayakrishna Mada · ‎08-11-2010

Hi,

Not sure if adding vlan did the trick there, I tested this in the lab and it works for me even if without vlan on the trunk but I am testing this on Nexus 7k but should be same on 5k as well. You can test it as well by removing vlan 1 again and see if it breaks.

vPC Peer-link status
---------------------------------------------------------------------
id   Port   Status Active vlans
--   ----   ------ --------------------------------------------------
1    Po4001 up     9,201,296,900,1016,1670-1674,1710-1714,1730-1739,1
                   760-1814,1820-1824,1830-1859,1870-1874,2105-2109,2
                   672,2737,2771,2776,2782,2787,2792,2797,2802,2807,2
                   812,2822,2831-2833,2837,2842,2847,2852,2858-2859,2

Nexus7K-Isle2-2# sh run int po4001

!Command: show running-config interface port-channel4001
!Time: Thu Aug 12 06:11:29 2010

version 4.2(4)

interface port-channel4001
switchport
switchport mode trunk
switchport trunk native vlan 4093
switchport trunk allowed vlan 2-3967,4048-4093
vpc peer-link
spanning-tree port type network
mtu 9216

JayaKrishna