Nexus 5548UP connectivity with Cisco router 2811.

[Ashok Basapure]

               In the existing network we have Cisco 2811 router connected to Corporate MPLS cloud. Cisco 2811 is connected to Catalyst 6509 switch(set based IOS with MSFC card). Along with that we have two Catalyst 5509. We are upgrading the access layer by replacing catalyst switches with Nexus 5548 & 2248.

For a purpose of testing I have connected 5548 & 2248. Created cPC and ether channels between two. SVI and HSRP configuredon 5548. I am terminating 2651 (test router) on 2248 port 101/1/1. On 5548 I have enabled EIGRP on vlans. I am unable to ping to 2651 from nexus switch 5548 and vice-versa.

I can see both devices on CDP but I do not see eigrp neighborship formed.

What configuration should go in 2248 and 2651 in order to establish a connection between two? If test is successful then I will connect 2811 to 2248 during actual migration. I assume that in testing if it works for 2651 then it must work on 2811 router.

[Jerry Ye]

Your topology will not work. When you connect the 2811 to the FEX, that FEX needs to be single homed, not vPC to the N5K.

To prune the 2811 VLAN from the vPC peer-link, you can use

switchport trunk allowed vlan remove 24

HTH,

jerry

[Ashok Basapure]

Jerry,

The FEX on which I am connecting Cisco 2811 router has to be single homed or it can be multi homed ?

Thanks

Ashok

[Ashok Basapure]

Jerry,

I was reading below Cisco document on vPC

http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/operations/n5k_L3_w_vpc_5500platform.html#wp999181

One of the solution for suboptimal route is use command peer-gateway starting from Release 5.0(3)N1(1b),

I have this OS n5000-uk9.5.1.3.N2.1a.bin on my N5K.

Let me know your view on above command.

Thanks

Ashok

[Jerry Ye]

The FEX to your C2811 should be single homed.

Peer-gateway is used to solve certain problem. It is generally recommended for vPC set up involved inter-VLAN routing.

HTH,

jerry

[Ashok Basapure]

Jerry,

As per our discussion till now I have setup network as below:

• •1)      Connected Cisco 2811 router on Single homed N2K.
  
• •2)      Separate cable is connected between N5K & N5K and trunk is formed with router vlan 24 allowed.
  
• •3)      Command peer-gateway is configured on both N5K port channel 0.
  

Is it OK to configured VPC between N5K and N2K that is single homed?

What is the good practice to configure Catalyst 4510 to both N5K?

[Jerry Ye]

I think your L3 toward 2811 is fine.

What is your connection to the C4510? L2 or L3? If it is L2, you can do vPC. If it is L3, you should do ECMP.

HTH,

jerry

[Ashok Basapure]

Jerry,

It is L2. so I will configure vPC between N5K and 4510.

Tomorrow I am setting up N5K, N2K & 4510 in test environment. Once I am done I will send you final diagram and config.

Thanks for help till now.

Thanks

Ashok

[Ashok Basapure]

Jerry,

Today did configured Nexus as per our discussion.

1) Under port channel 1 (N5k to N5K) I did not find command peer-gateway.

2) I connected test router to N2K (single homed). Port is showig inactive.

[Leo Laohoo · Accepted solution]

You got your HWIC-1GE-SFP and GLC-T already???

And you've connected the 2K to the GLC-T?

[Ashok Basapure]

Leolaohoo,

Earlier I was researching on which interface is suitable for connection between N5K & Cisco 2811. We are not buying the card at this moment instead I am connecting Cisco 2811 directly to N2K. As per suggesion from support.cisco.com I re-wired the switches. Below is the present set-up.

Cisco 2651 (vlan 24) === N2K(single homed) (vPC) === N5K -1 ------- (trunk, allowed vlan 24) ------- N5K

                                                                                           | | |  \==================vPC (Po1)====/  | | |

                                                                                           | | |                                                                        | | |

                                                                                           | |  \------------------N2K (dual homed)----------------/ | |

                                                                                           | |                                                                            | |

                                                                                           |  \--------------------N2K (dual homed)-----------------/ |

                                                                                           |                                                                                |

                                                                                            \----------------------N2K (dual homed)------------------/

I have connected test router to N2K. Interface at N2K is showing inactive.

[I accidentely clicked on answered button.:( ]

[Leo Laohoo]

And what model is you N2K?

[Jerry Ye]

Hi Leo,

I think he has 2248TP. This has support of 100MB.

Hi Ashok,

1. peer-gateway command is not under port-channel. It is a vPC global configuration, you need to put this under vpc domain x.

2. Can you show me the FEX fabric configuration along with the port-channel? Also need the FEX HIF configuration.

Regards,

jerry

[Ashok Basapure]

Jerry,

• •1)       Yes under vpc domain 1 it took the command. I added it on both N5K.
  
• •2)       FEX configuration:
  
  • •1)       ON N5K-1 (On port 1/1 & ½ single homed N2K is connected)
    

interface port-channel101

switchport mode fex-fabric

fex associate 101

vpc 101

interface Ethernet1/1

switchport mode fex-fabric

fex associate 101

channel-group 101

interface Ethernet1/2

switchport mode fex-fabric

fex associate 101

channel-group 101

• •2)       vPC configuration between N5K-1 & N5K-2
  

interface port-channel1

switchport mode trunk

switchport trunk allowed vlan 1,25-29,31,129,137,146

spanning-tree port type network

speed 10000

vpc peer-link

interface Ethernet1/9

switchport mode trunk

switchport trunk allowed vlan 1,25-29,31,129,137,146

channel-group 1 mode active

interface Ethernet1/10

switchport mode trunk

switchport trunk allowed vlan 1,25-29,31,129,137,146

channel-group 1 mode active

• •3)       Trunk between N5K & N5K for router vlan 24.
  

interface Ethernet1/11

switchport mode trunk

switchport trunk allowed vlan 24

• •4)       Domain config and Management vlan
  

On N5K-1

interface mgmt0

ip address 172.16.154.1/24

vpc domain 1

role priority 1000

peer-keepalive destination 172.16.154.2

peer-gateway

On N5K-2

interface mgmt0

ip address 172.16.154.2/24

vpc domain 1

role priority 2000

peer-keepalive destination 172.16.154.1

peer-gateway

I did not understood HIF command. Please explain.

[Jerry Ye]

HIF - host interface, meanning E101/1/x on the FEX.

Please provide show interface e101/1/x, show vlan id 24, and show run int vlan 24.

Regards,

jerry

[Ashok Basapure]

Jerry,

LSV-CORE-SW01# sh run int e101/1/1

!Command: show running-config interface Ethernet101/1/1
!Time: Thu Jan 24 07:42:19 1957

version 5.1(3)N2(1a)

interface Ethernet101/1/1
  switchport access vlan 24

LSV-CORE-SW01# sh int e101/1/1
Ethernet101/1/1 is down (inactive)
  Hardware: 100/1000 Ethernet, address: 0cd9.9608.b442 (bia 0cd9.9608.b442)
  MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  Port mode is access
  auto-duplex, 100 Mb/s
  Beacon is turned off
  Input flow-control is off, output flow-control is on
  Switchport monitor is off
  EtherType is 0x8100
  Last link flapped 00:22:48
  Last clearing of "show interface" counters never
  30 seconds input rate 176 bits/sec, 0 packets/sec
  30 seconds output rate 72 bits/sec, 0 packets/sec
  Load-Interval #2: 5 minute (300 seconds)
    input rate 232 bps, 0 pps; output rate 112 bps, 0 pps
  RX
    1387 unicast packets  3242 multicast packets  23 broadcast packets
    4652 input packets  420655 bytes
    0 jumbo packets  0 storm suppression bytes
    0 runts  0 giants  0 CRC  0 no buffer
    0 input error  0 short frame  0 overrun   0 underrun  0 ignored
    0 watchdog  0 bad etype drop  0 bad proto drop  0 if down drop
    0 input with dribble  0 input discard
    0 Rx pause
  TX
    0 unicast packets  748 multicast packets  0 broadcast packets
    748 output packets  213261 bytes
    0 jumbo packets
    0 output errors  0 collision  0 deferred  0 late collision
    0 lost carrier  0 no carrier  0 babble 0 output discard
    0 Tx pause
  0 interface resets

LSV-CORE-SW01#

LSV-CORE-SW01# sh vlan id 24

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
24   VLAN0024                         active    Eth1/11, Eth101/1/1, Eth101/1/2

VLAN Type  Vlan-mode
---- ----- ----------
24   enet  CE

Remote SPAN VLAN
----------------
Disabled

Primary  Secondary  Type             Ports
-------  ---------  ---------------  -------------------------------------------

LSV-CORE-SW01#

LSV-CORE-SW01# sh run int vlan 24

!Command: show running-config interface Vlan24
!Time: Thu Jan 24 07:44:14 1957

version 5.1(3)N2(1a)

interface Vlan24
  no shutdown
  no ip redirects
  ip address 192.168.24.4/24
  ip router eigrp 65102
  hsrp 2
    preempt
    ip 192.168.24.1
  ip dhcp relay address 192.168.24.2 (test DHCP configured in Cisco 2651 router)

LSV-CORE-SW01#