Last Wednesday we migrated from 6509s over to a pair of Nexus 7010's and everything, for the most part, went smooth but I've run into a strange issue that I wanted to run by the community before I open a TAC case.
As an FYI on our configuration we have the 7k's connected together via a 20Gbps peer link with a 1 Gbps keep-alive and a 1Gbps "non-vpc" layer 2/ layer 3 link. So here's the issue: I'm experiencing an issue with two of our VLANs where only certain devices are not obtaining an IP address. The odd thing is that I can see the DHCP discovery come through and the DHCP offer be sent from the DHCP server, but it never makes it to the client.
I found it strange that it's only happening on these VLANs, but as I look deeper is see that VLAN SVIs have an inbound ACLs applied to them. Here's the kicker - if I pull off the ACL (inbound keep in mind) DHCP works for these client. We don't have any outbound ACL applied to these VLANs so everything should be allowed, but it's almost like something's dropping the offer before it can be sent out. Also, the switch stack that these devices attach to are connected to the core via a VPC.
The only other thing I thought about is possibly enabling the "peer gateway" command under the VPC domain, but my thought is that if it works when the ACL is removed then this most likely won't buy me anything.
Thanks in advance!
