2

So I need help. I’m not at work, so posting config isn’t really an option, but here goes:

I have a 4500 with a port channel to two Nexus 5k’s. There are two ports to each 5k all in the same port channel. Let’s call it po13.

On the 5k’s, I have two ports on each going back to the 4500, all in po13 and vpc’d.

All channel group members are mode active.

I have a vpc domain on both 5k’s. Let’s call it vpc domain 1. There is also a po1 between the 5k’s that is the vpc peer link which is po1.

5k1 has been in place for a long time (it originally had a plain trunk to the 4500). So, I copied the config from 5k1 to the new 5k (5k2), and simply changed the interface vlan ip. Then I proceeded to setup all the said port channels and vpc’s.

I basically mirrored the portchannel, vpc, peer link, and mgmt0, from one of our other datacenters that have the exact same physical architecture. I only changed the portchannel numbers, vpc domain ids, and mgmt0 IPs.

5k1 pings out fine using its interface vlan ip. I can remotely manage it. All is well.

5k2 is not. I can ping across mgmt0, but I cannot ping out from the interface vlan. It says, “no route to host.” I have entered the default route 0.0.0.0/0 x.x.x.x (my upstream default gateway). Show ip route returns nothing because I can’t ping my default gateway.

The weird part is, ALL portchannels on ALL THREE switches are up. On 5k2, show cdp neighbors shows 5k1 AND the 4500. If there was something wrong with the po13 between 5k2 and the 4500, I would think that traffic would route through 5k1.

I guess I’m puzzled as to how the portchannel could be up and passing cdp, and apparently lacp traffic, yet I cant ping out. 5k2 is useless at the moment. Any initial thoughts on things I can check? Should I just wipe the 5k2 config and build it from scratch?

When I go back to work, I’m going to unplug the peer link and set up a simple trunk from 5k2 back to the 4500 and see if I can ping out then...still, any initial thoughts would certainly be welcome. enter image description here

Improve this question
7
  • You eed to edit your question to include the configurations, and other things that will help us.
    – Ron Maupin ♦
    Dec 30, 2017 at 19:26
  • And please post a simple network diagram with correct connections between devices.
    – Hung Tran
    Dec 30, 2017 at 20:54
  • 1
    Some things you can do are: check whether you see the IP addresses of N5k2 when show cdp neighbors from N5k1 and 4500. Then, ping IP addresses of N5k2 from N5k1 and 4500. Those devices are directly connected to each other, you should be able to this at least. If not, check IP address configuration and connections again.
    – Hung Tran
    Dec 30, 2017 at 21:02
  • The show cdp neigh details from 5k1 and the 4500 show the management vrf IP that is on mgmt0 rather than the interface vlan IP. The mgmt0 IP is a private IP similar to 10.0.0.2/24 that is not used in production. It was just something I used only for the management vrf
    – Joe
    Dec 30, 2017 at 21:15
  • The mgmt0 IP on 5k1 (10.0.0.1) is the ONLY thing that I can ping. I can’t ping the vlan interface (let’s call it int vlan 33) of the 4500 or 5k1 from 5k2. Show interfaces trunk shows vlan 33 as active and forwarded on the portchannel.
    – Joe
    Dec 30, 2017 at 21:21

1 Answer 1

Reset to default
2

So I figured out the issue: I had a non-L3 daughter card installed with an L3 LAN BASE license. So, I had to uninstall the license file. Before you do, beware that the license file is tied to your switch serial number as far as Cisco is concerned. I simply put in a TAC case asking them to disassociate the license from my particular switch SN. I also took screenshots of the license file in my switch config (show license brief), and saved it in case I need to prove to Cisco in the future that I should have a floating L3 license. Here are the two simple steps to remove the license:

  1. Show license brief This will show the license file; for example: “license-switchserialnumber.lic”

  2. Clear license “license-switchserialnumber.lic”

That’s it. Everything started working.

Improve this answer
1
  • Good to hear that!
    – Hung Tran
    Jan 5, 2018 at 9:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.