Questions tagged [vpc]
For questions about the Cisco developed Virtual Port Channel (vPC) technology. For instance, you want to stack two Nexus 7000 switches or you are troubleshooting a problem with a Nexus 2000 fabric extender.
52
questions
0
votes
1
answer
52
views
Is internal network traffic sent to private subnets via their NAT Server?
Similar to this question, I'm wondering how resources in my public subnets communicate with those in my private subnets - when there is a NAT service present.
My impression is that a self-managed NAT ...
- 103
0
votes
1
answer
302
views
Cisco Nexus vPC Portchannel issues
I'm currently facing a network issue between Cisco Nexus 93108 (9.3.11) on an LACP port-channel configuration.
The replica below help us to reproduce the issue we had (using 4x Nexus 9000v qcow2 image ...
- 101
1
vote
0
answers
21
views
VPN conflicts from using 2 VPNs [closed]
My QA has a problem. They need to test the app, and the database at the same time. To access our app (testing environment), they need to connect to the company VPN through GlobalProtect, and then they ...
- 11
0
votes
1
answer
58
views
Is it risky to change hardcoded STP mLAG port cost on Cisco Nexus LACP port
When two Cisco Nexus are connected in VPC, the stp cost is hardcoded to 200 for the mLAG LACP ports.
I would like to manually change the cost on my devices because my 2G and 200G links have the same ...
- 123
1
vote
1
answer
54
views
VPC two types of nexus 7700
Can we VPC two types of nexus 7700 with each other? I mean , we want to VPC one Nexus 7710 with Nexus 7718.
Does it possible ?
Thanks,
1
vote
1
answer
389
views
vPC between Cisco nexus 9236C and 9336C
I have a Nexus N9K-C9236C and I would like to add an other one to have redundancy with vPC fonctionnality (like describe here).
The point is my suppliers don't sell this model anymore because it has ...
- 113
3
votes
4
answers
1k
views
Arista MLAG: should I have a separate L3 interface for keepalive like in Cisco's NX-OS?
In Cisco's NX-OS when forming the MLAG equivalent pair (vPC) there are some best practices to follow, for example, a separate bonded L3 interface just for the keepalive packets using separate ports ...
- 504
-1
votes
1
answer
466
views
Port Channel issue on Cisco gear
I have a lab where I'm connecting a Cisco CSR1000V and a Nexus 9000 switch. These devices are connected back to back. Relevant configuration is:
Router:
interface Port-channel1
mtu 9216
!
interface ...
- 101
0
votes
2
answers
408
views
Can a Subnet have more than one CIDR range?
For many years I thought of a subnet as a single contiguous range of ip addresses expressed using CIDR notation.
However on GCP a subnet can have a primary ip address range from which VMs get ...
- 775
2
votes
1
answer
1k
views
Is it possible to make a truly active\active L3 VRRP\HSRP configuration between two Nexus in a vPC
I'm an admin that is used to working with older Cisco gear, the Catalyst 6500 and the like. This is my first time diving into the world of nxOS. I'm trying to create a truly active\active ...
0
votes
1
answer
275
views
Traveling Salesman Problem (TSP) applied to network routing protocols? [closed]
Is this very common for larger enterprises that have many thousands of servers to use something like ant colony or similar algorithms to work together with network routing protocols like BGP to solve ...
- 101
0
votes
1
answer
104
views
vpc/mlag block half of uplink?
We want to configure 2 Arista switches by mlag and connect 1 port channeled switch to both of arista's. so in this case, if one of our arista fail the other one will respond.
now my question here is ...
- 577
2
votes
1
answer
3k
views
Cisco nexus vpc spanning-tree port type trunk question
I have very strange scenario here which you can see in diagram.
SW1/2 is Cisco nexus 3064PQ switch configured in vPC and those switch connected to SW3/4 ( HP 6120XG ) switches on HP c7000 blade ...
- 4,371
0
votes
1
answer
981
views
Can't ping across router with two interfaces [closed]
This is the topology I'm working with.
In the router, e0 is ether1 and e1 is ether2.
LAN_A has a maximum of 96 clients.
LAN_B has a maximum of 48 clients.
VPC_LAN_A:
ip 192.168.10.1/25 192.168.10....
- 21
1
vote
1
answer
1k
views
Does vPC peer-gateway cause unicast flooding
This is my network topology where I have SW-1 is configured for HSRP for multiple VLANs, SW-2 & SW-3 connected to SW-1 using vPC. Last few month I am dealing with this unicast flooding where ...
- 4,371
1
vote
2
answers
646
views
AWS site-to-site VPN and multiple account VPC connections [closed]
I've configured a site-to-site VPN from our firewall (watchguard) to AWS.
Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
- 113
-1
votes
1
answer
405
views
Why CIDR block is assigned to subnet? [duplicate]
If VPC is assigned CIDR block 172.31.0.0/16, then I can create sub-nets within VPC, following this procedure:
172 . 31 . 0 . 0
255 . ...
- 113
5
votes
2
answers
1k
views
spanning tree RootGuard question on vPC switches
I have following diagram and two distribution switch connected back to back over vPC
Related spanning-tree question is it ok to use RootGuard on both distribution switch where access switch is ...
- 4,371
2
votes
1
answer
50
views
Regarding Tier0 switch to downstream servers connectivity
I have been reading up on the connectivity patterns of tier0 switch to the downstream servers in a cloud environment(e.g. AWS, Google clouds), however, I am curious to understand why none of the cloud ...
- 893
3
votes
2
answers
3k
views
Why did Netflix choose to use CIDR blocks of 100.64.0.0/10 as its private network IP space?
Netflix gave a public tech-talk explaining their network, and one specific design puzzled me. See Page 25 at this talk (Netflix's Migration into VPC), they seemed to choose to use 100.64.0.0/10 as ...
- 153
4
votes
2
answers
13k
views
Cisco Nexus vPC LACP bonding with server issue
I am configuring vPC end to end till my server to get more bandwidth, and following is my scenario
I am seeing one strange thing which is i configured vPC on N3k switch and then i configured my Linux ...
- 4,371
1
vote
0
answers
326
views
Amazon AWS VPN Bidirectional Device Access
After setting up an Amazon VPN connection and configuring my gateway using the downloaded configuration, I am able to directly ssh to the private IP of an EC2 instance in my VPC.
However, both the EC2 ...
- 11
2
votes
1
answer
5k
views
Bridge Assurance with vPC on port type network
I'm running two Nexus 3048 switches as network core and I got an issue when linking another switch (specifically a 2960-X) on the vPC links. Consider the scenario:
+-------+ +-------+
| NX #1 |===|...
- 504
2
votes
2
answers
4k
views
Cisco ASA vPC configuration issue
I have this scenario and trying to configure vPC for Cisco ASA 5585 (Active-Standby)
Nexus vPC config:
interface port-channel1
switchport mode trunk
switchport trunk allowed vlan 10
speed ...
- 4,371
3
votes
2
answers
1k
views
vPC traffic flow question
This is going to be new network in my datacenter and i have question related vPC, as you can see i have A1/A2 switch (L3/L2 routing) in aggregation layer and C1/C2 switches for Core (L3 routing). I am ...
- 4,371
2
votes
1
answer
637
views
vPC problems between nexus 5k’s and 4500
So I need help. I’m not at work, so posting config isn’t really an option, but here goes:
I have a 4500 with a port channel to two Nexus 5k’s. There are two ports to each 5k all in the same port ...
- 51
1
vote
1
answer
4k
views
Nexus VPC Peer Link - does it carry unicast traffic?
Read from the doc that the VPC peer link only carry multicast/broadcast traffic under normal circumstances ->
The vPC peer link carries control traffic between two vPC switches and also multicast, ...
- 529
1
vote
2
answers
1k
views
GNS3 - configure two DHCP servers within one VLAN
I have the following configuration:
I would like to provide every host from VLAN_101 with DHCP-provided IP addresses. There are two DHCP servers running - one grants adresses for every host below ...
- 11
1
vote
2
answers
625
views
VSS back to back like vPC back to back
I know vPC back to back to avoid spanning tree between two pairs of Nexus.
But I've two 4500 pairs and I need to connect them. Is there a way to do something similar to the vPC back to back to don't ...
- 180
1
vote
1
answer
679
views
Single homed, dual homed and double sided vpc
I'm trying to figure out scenarios in which one would use single homed, dual homed and double sided vpc and what benefits each topology would have?
I can already see that dual homed vpc would have ...
- 11
1
vote
2
answers
1k
views
Fabricpath or vpc back to back
have two DC, with 2 N5K on each DC. I want to connect these pairs with Fabricpath to have full bandwidth used. I've seen that vPC back to back can do the trick.
BUT Fabricpath brings vPC+ with it, ...
- 180
1
vote
2
answers
7k
views
vpc loop avoidance scenario
Consider the attached topology.
There is a vPC domain, with vPC 20 for Sw2 and vPC 10 for Sw1.
vPC peer link exists between NxOS1 and NxOS2.
Suppose, Sw2 sends broadcast traffic.This broadcast ...
- 893
4
votes
0
answers
3k
views
Regarding vPC Dual Active or Split Brain scenario
Consider the below topology:
Imagine that both the vPC peer keepalive link and vPC peer link have gone down.
I am trying to understand how will that lead to unpredictable traffic flows or loops.
...
- 893
1
vote
1
answer
1k
views
Gateway on Nexus 3500 with VPC
I am testing a setup with 2 Nexus 3524 and a 2960X in a VPC Topology :
For this test lab, I miss some SFP so there's only one physical link between each switch (and those link are copper using ...
- 19.5k
1
vote
2
answers
697
views
mLACP or vPC on L3 interfaces
I just want to know if it's possible to implement mLACP (with VSS) or vPC on L3 interfaces. I just can't find any answer to this on cisco doc.
Thanks,
- 180
1
vote
1
answer
2k
views
Understanding virtual port channel peer switch command
1.I understand that irrespective of the STP priority, vPC primary always sends the BPDUs.The vPC secondary device will just proxy those BPDUs.
Please confirm if the above understanding is correct.
2....
- 893
1
vote
2
answers
672
views
Virtual port channel topology with firewall
Is it possible to implement the below topology? I see that there is a port channel going downstream to the firewalls. By any chance, are the firewalls running as one virtual entity? As we see here are ...
- 893
1
vote
2
answers
2k
views
Regarding traffic blackholing in case of vpc and hsrp
From the cisco docs i have:
"vPC and HSRP/VRRP Object Tracking
As Figure 67 suggests, it’s important not to use HSRP/VRRP link tracking in a vPC configuration.
Assume HSRP/VRRP object tracking is ...
- 893
1
vote
1
answer
348
views
Etherchannel Basics
Assume we have 2 switches connected back to back with 2 links as shown below:
Please see the attached image.
In traditional STP environment,one link will be blocked to avoid Layer2 loops.
So ...
- 893
0
votes
2
answers
2k
views
How can a Class B network be in the 10.0.0.0 space? [closed]
I'm taking an AWS Lab to better familiarize myself with creating a VPC.
The instructions describe the example network we are to create in the lab like so:
My background is in software, not ...
- 101
3
votes
1
answer
558
views
vPC over Dark Fiber
Recently, I was asked to implement vPC connections over Dark Fiber between two data centers. Is this possible, and, if it is possible, does it have any drawbacks or limitations? I'm asked to encrypt ...
- 3,444
2
votes
2
answers
2k
views
Nexus 5500 FEX Support
This design guide on networkcomputing.com states the following:
When uplinking to Nexus 5Ks, one topology option is to dual-home the physical Fabric Extender. Dual-homing a FEX provides path ...
- 1,005
2
votes
2
answers
3k
views
Alternatives to VSS and vPC?
Is there any alternative to Cisco's VSS or vPC? I mean not with other vendors, just Cisco? Because I'm planning a new network design here in our company and I'm not really sure, if there's an ...
- 41
4
votes
2
answers
2k
views
Stacking Cisco Catalyst 3850 via Fibre?
I'm working at several new network concepts for our company and the challenge is to stack at least two Catalyst 3850 over a distance of 200-300 meters. I know there are other possibilities like VSS or ...
- 41
5
votes
1
answer
4k
views
Cisco Nexus vpc card type mismatch
I have a pair of Nexus switches configured for vPCs. In several cases, it is working correctly:
core01# sh vpc consistency-parameters int po40
Legend:
Type 1 : vPC will be suspended in ...
- 261
2
votes
1
answer
3k
views
Is it possible to implement IPSec with failover between one pfSense firewall and Amazon VPC (no BGP)
I'm trying to create a VPN connexion between my firewall (a pfsense 2.0.1) and my Amazon Virtual Private Cloud (VPC). Amazon provides two peers endpoints to mount two IPsec tunnels on the same VPC.
...
- 121
5
votes
1
answer
2k
views
Cisco Nexus 5000 VTP trunk status in vPC consistency-parameter
In a pair of Nexus 5000, the show vpc consistency-parameters command
displays VTP trunk status on only one Nexus Enabled. The config is
identical, what is the reason for the discrepancy?
# sh vpc ...
- 51
5
votes
3
answers
10k
views
Juniper equivalent to Cisco's vPC?
I'm looking to implement a new network design with Juniper EX Series switches. Part of this involves implementing vPC between my core and ToR switches (and also between ToR and host).
The goal is to ...
- 1,478
4
votes
1
answer
1k
views
NX-OS: Importing already mirrored config into a switch-profile
I'm running NX-OS version 5.2(1)N1(5) on a pair of Nexus 5020s that are mirrors of each other for all intents and purposes. After OS upgrades some of the configuration that was inside the switch-...
- 203
11
votes
1
answer
13k
views
Can adding VLANs to a VPC be done hot?
In this scenario, we have a VPC '17', consisting of two single port port-channels 'po17'. There are 2 x N5K's (5548s) - so po17 from both sides combine to create the VPC.
The downstream devices are ...
- 3,310