2

I have below setup:

+------------------+         vPC           +------------------+
|                  |                       |                  |
|  NX5K-SW01       +-----------------------+       NX5K-SW02  |
|                  |                       |                  |
+------------------+--+                 +--+------------------+
                      |                 |
                      |                 |
                      |                 |
               FET1   |                 |  FET2
                      |                 |
                      |                 |
                      |                 |
                 +----+-----------------+----+
                 |                           |
                 |             NX2K          |
                 |                           |
                 +---------+-----+-----------+
                           |     |
                           |     |
                           |     |
                           |     Eth101/1/37
                           |     +
                   Eth101/1/38   |
                           +     |
                           |     |
                  +--------+-----+--------+
                  |                       |
                  |     Cisco ASA         |
                  |                       |
                  +-----------------------+

Eth101/1/37 and Eth101/1/38 are members of port-channel 22, which is utilized for voice traffic (RTP). Now, when I look at the link utilization, I see below numbers (it's the same on NX5k-SW02 obviously):

NX5K-SW01# show port-channel traffic interface port-channel 22
ChanId      Port Rx-Ucst Tx-Ucst Rx-Mcst Tx-Mcst Rx-Bcst Tx-Bcst
------ --------- ------- ------- ------- ------- ------- -------
22  Eth101/1/38    0.0%    0.0%  50.00%   1.62%    0.0%    0.0%
22  Eth101/1/37    0.0% 100.00%  49.99%  98.37%    0.0% 100.00%

loadbalancing is default on NX5k switches:

NX5K-SW01# show port-channel load-balance

Port Channel Load-Balancing Configuration:
System: source-dest-ip

Port Channel Load-Balancing Addresses Used Per-Protocol:
Non-IP: source-dest-mac
IP: source-dest-ip source-dest-mac

and on the ASA it is: src-dst-ip

The ASA has other port-channel connections to NX2k, which are showing normal loadbalancing 50/50.

Any idea why this port-channel is behaving like this?

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 10 '17 at 4:08
  • @RonMaupin I need to go back and check some settings and change the load balancing setting if needed. – Fanttazio Aug 15 '17 at 12:26
1

The load balancing on a port channel is per flow. All the traffic in a single flow will use the same port channel member. Each flow is limited to a single physical link, but different flows will use different links. The way you have it configured, a flow is determined by the source and destination IP and MAC addresses on the Nexus, meaning that any traffic with the same values for those will always use the same port channel member. There is a hash algorithm that determines which flows use which port channel members, and it is only when you have multiple flows between different devices that you get load balancing across the different links.

You seem to be sending traffic on that port channel from a single source to a single destination, and that traffic will always use the same port channel member. It is also possible that you have multiple flows that just happen to hash to the same port channel member.

If you were to load balance individual frames, rather than flows, you will end up with problems created by out-of-order packet delivery. That would be especially and extremely detrimental to VoIP.

| improve this answer | |
  • Hey @Ron Maupin. Thanks for your explanation. It's plausible in this setup but I have two other firewalls with identical setup to above but the port-channel is used for various application traffic instead of VoIP. One shows normal traffic balancing between two physical links and the other one is 100/0. What about that? Any hint to where to look at? – Fanttazio Mar 6 '17 at 16:07
  • It is the port channel hash that determines which flows use which links in a channel. If you have multiple devices sending across the link, you could try changing the IP address of either the source or destination of a device. It is sort hit or miss how that will affect the hash. You could also try using different hash methods. – Ron Maupin Mar 6 '17 at 16:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.