VLAN issue in Nexus 5548 VPC - 6500 VSS

pramudiathegreat · ‎10-22-2015

Hi Vpc & Vss experts,

I have on going issue with Vlan issue in my NX55 VPC. I'm new in Nexus environment so I need your advises on this.

I've created 3 Vlans where all the gateways are in my Core 6500VSS (configuration & design are attached). I do not have L3 daughter card inside my NX55 but I have LAN_BASE_SERVICE_PKG license to activate interface-Vlan feature. I've been advised that since I don't have L3 daughter card, I will not be able to bring up L3 in my NX55, so I keep it as L2 while the routing will be handled my Core 6500VSS with Etherchannell VPC between them.

The strange is that only 2 of 3 Vlans are UP though they are set in the same configuration.

Vlan716 is up, line protocol is up
Hardware is EtherSVI, address is 002a.6a3f.3681
Description: VLAN-SVR716
Internet Address is 172.27.16.2/24
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

SZANDCSF01# sh int vlan 717
Vlan717 is up, line protocol is up
Hardware is EtherSVI, address is 002a.6a3f.3681
Description: VLAN-SVR717
Internet Address is 172.27.17.2/24
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

SZANDCSF01# sh int vlan 718
Vlan718 is down, line protocol is down
Hardware is EtherSVI, address is 002a.6a3f.3681
Description: VLAN-SVR718
Internet Address is 172.27.18.2/23
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec

SZANDCSF01# ping 172.27.16.1 source 172.27.16.2
PING 172.27.16.1 (172.27.16.1) from 172.27.16.2: 56 data bytes
64 bytes from 172.27.16.1: icmp_seq=0 ttl=254 time=2.986 ms
64 bytes from 172.27.16.1: icmp_seq=1 ttl=254 time=2.409 ms
64 bytes from 172.27.16.1: icmp_seq=2 ttl=254 time=2.483 ms
64 bytes from 172.27.16.1: icmp_seq=3 ttl=254 time=2.474 ms
64 bytes from 172.27.16.1: icmp_seq=4 ttl=254 time=2.481 ms

--- 172.27.16.1 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss
round-trip min/avg/max = 2.409/2.566/2.986 ms
SZANDCSF01# ping 172.27.17.1 source 172.27.17.2
PING 172.27.17.1 (172.27.17.1) from 172.27.17.2: 56 data bytes
64 bytes from 172.27.17.1: icmp_seq=0 ttl=254 time=2.979 ms
64 bytes from 172.27.17.1: icmp_seq=1 ttl=254 time=2.413 ms
64 bytes from 172.27.17.1: icmp_seq=2 ttl=254 time=2.481 ms
64 bytes from 172.27.17.1: icmp_seq=3 ttl=254 time=2.485 ms
64 bytes from 172.27.17.1: icmp_seq=4 ttl=254 time=2.477 ms

--- 172.27.17.1 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss
round-trip min/avg/max = 2.413/2.567/2.979 ms
SZANDCSF01# ping 172.27.18.1 source 172.27.18.2
PING 172.27.18.1 (172.27.18.1) from 172.27.18.2: 56 data bytes
Request 0 timed out
Request 1 timed out
Request 2 timed out
Request 3 timed out
Request 4 timed out

--- 172.27.18.1 ping statistics ---
5 packets transmitted, 0 packets received, 100.00% packet loss

In the #sh vpc consistency-parameters global , it says that my Vlan 718 is suspended.

1# sh vpc consistency-parameters global

Legend:
Type 1 : vPC will be suspended in case of mismatch

Name Type Local Value Peer Value
------------- ---- ---------------------- -----------------------
QoS 2 ([], [3], [], [], [], ([], [3], [], [], [],
[]) [])
Network QoS (MTU) 2 (1538, 2196, 0, 0, 0, (1538, 2196, 0, 0, 0,
0) 0)
Network Qos (Pause) 2 (F, T, F, F, F, F) (F, T, F, F, F, F)
Input Queuing (Bandwidth) 2 (50, 50, 0, 0, 0, 0) (50, 50, 0, 0, 0, 0)
Input Queuing (Absolute 2 (F, F, F, F, F, F) (F, F, F, F, F, F)
Priority)
Output Queuing (Bandwidth) 2 (50, 50, 0, 0, 0, 0) (50, 50, 0, 0, 0, 0)
Output Queuing (Absolute 2 (F, F, F, F, F, F) (F, F, F, F, F, F)
Priority)
STP Mode 1 Rapid-PVST Rapid-PVST
STP Disabled 1 None None
STP MST Region Name 1 "" ""
STP MST Region Revision 1 0 0
STP MST Region Instance to 1
VLAN Mapping
STP Loopguard 1 Disabled Disabled
STP Bridge Assurance 1 Enabled Enabled
STP Port Type, Edge 1 Normal, Disabled, Normal, Disabled,
BPDUFilter, Edge BPDUGuard Disabled Disabled
STP MST Simulate PVST 1 Enabled Enabled
VTP domain 2
VTP version 2 1 1
VTP mode 2 Server Server
VTP password 2
VTP pruning status 2 Disabled Disabled
IGMP Snooping Group-Limit 2 4000 4000
Interface-vlan admin up 2 716-717 716-717
Interface-vlan routing 2 1,716-717 1,716-717
capability
Allowed VLANs - 1,716-717 1,716-718
Local suspended VLANs - 718 -

I don't know if I make mistakes in the configuration, hope you can help me on this.

Thanks in advance.

Pram

kaushik_2416 · ‎10-27-2015

Hello

I am not a vpc or vss expert. just trying my best.

Generally there are two types of consistency errors. Type 1 and Type 2.

Type 1 is critical. Occurs mainly if two different flavors of STP are running on vpc members. Other error which can suspend vlan is peer-link failure. because if peer-link goes down then secondary vpc member port and its SVI go down while primary vpc member remains unaffected. Also check all your 'port-channel summary' to see if all the port channels are properly configured.

To check which member is primary and secondary use 'show vpc role'.

Sometimes just shut and no shut also works.

mlinsemier · ‎10-30-2015

I wasn't sure if you have found resolution to this but I suspect that your VLAN718 is suspended due to the fact that it looks as if VLAN 718 is not on the "Allowed VLAN' list of your local device or perhaps missing from the vPC peer link on one of the two devices. Reminder that all Allowed VLAN's have to match on both devices for the VLAN to be unsuspended.

-Matt